.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T22:42:07.139068223Z | 53 | PC: 13f02 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate') |
| 2018-12-17T22:42:07.141069766Z | 53 | PC: 13f02 | Get interrupt vector (Interrupt = '2' AKA 'Character output') |
| 2018-12-17T22:42:07.142956897Z | 53 | PC: 13f02 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive') |
| 2018-12-17T22:42:07.144718678Z | 53 | PC: 13f02 | Get interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-17T22:42:07.154446151Z | 53 | PC: 13f02 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records') |
| 2018-12-17T22:42:07.155876075Z | 53 | PC: 13f02 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:42:07.15724814Z | 53 | PC: 13f02 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer') |
| 2018-12-17T22:42:07.160077317Z | 53 | PC: 13f02 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector') |
| 2018-12-17T22:42:07.161531238Z | 53 | PC: 13f02 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space') |
| 2018-12-17T22:42:07.163520416Z | 53 | PC: 13f02 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character') |
| 2018-12-17T22:42:07.165225468Z | 53 | PC: 13f02 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info') |
| 2018-12-17T22:42:07.174084344Z | 53 | PC: 13f02 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory') |
| 2018-12-17T22:42:07.17574643Z | 53 | PC: 13f02 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory') |
| 2018-12-17T22:42:07.178121529Z | 53 | PC: 13f02 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory') |
| 2018-12-17T22:42:07.179692234Z | 53 | PC: 13f02 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file') |
| 2018-12-17T22:42:07.181215027Z | 53 | PC: 13f02 | Get interrupt vector (Interrupt = '61' AKA 'Open file') |
| 2018-12-17T22:42:07.183363998Z | 53 | PC: 13f02 | Get interrupt vector (Interrupt = '62' AKA 'Close file') |
| 2018-12-17T22:42:07.185417321Z | 53 | PC: 13f02 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device') |
| 2018-12-17T22:42:07.186996971Z | 53 | PC: 13f02 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!') |
| 2018-12-17T22:42:07.18944938Z | 37 | PC: 13f17 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate') |
| 2018-12-17T22:42:07.190810569Z | 37 | PC: 13f1f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records') |
| 2018-12-17T22:42:07.192181755Z | 37 | PC: 13f27 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:42:07.194329279Z | 37 | PC: 13f2f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device') |
| 2018-12-17T22:42:07.196400607Z | 68 | PC: 1429f | I/O control for devices (Set for = '') |
| 2018-12-17T22:42:07.237585367Z | 37 | PC: 137e5 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive') |
| 2018-12-17T22:42:07.240351794Z | 42 | PC: 12a4e | Get date 0x12a4e: cmp dl, byte ptr [2] 0x12a52: je 0x12a56 0x12a54: jmp 0x12a91 0x12a56: cmp dh, byte ptr [3] 0x12a5a: je 0x12a5e 0x12a5c: jmp 0x12a91 0x12a5e: mov ah, 2 0x12a60: mov al, 2 0x12a62: mov cx, 1 0x12a65: lea bx, word ptr [0x2d6] 0x12a69: mov dx, 0x80 0x12a6c: int 0x13 0x12a6e: xor di, di 0x12a70: inc di 0x12a71: mov al, byte ptr [di + 0x2d6] 0x12a75: xor al, 0x23 0x12a77: mov byte ptr [di + 0x2d6], al 0x12a7b: cmp di, 0x400 0x12a7f: jne 0x12a70 0x12a81: mov ah, 3 |
| 2018-12-17T22:42:07.24264978Z | 25 | PC: 1495b | Get default drive |
| 2018-12-17T22:42:07.243705231Z | 71 | PC: 1496e | Get current directory |
| 2018-12-17T22:42:07.247136633Z | 14 | PC: 149b4 | Set default drive (Drive = 'A') |
| 2018-12-17T22:42:07.250008797Z | 25 | PC: 149b8 | Get default drive |
| 2018-12-17T22:42:07.251217232Z | 59 | PC: 14a22 | Change current directory |
| 2018-12-17T22:42:07.255700811Z | 26 | PC: 12e96 | Set disk transfer address |
| 2018-12-17T22:42:07.25726343Z | 78 | PC: 12eb5 | Find first file |
| 2018-12-17T22:42:07.264195977Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.267294017Z | 14 | PC: 149b4 | Set default drive (Drive = 'A') |
| 2018-12-17T22:42:07.269700042Z | 25 | PC: 149b8 | Get default drive |
| 2018-12-17T22:42:07.27098382Z | 59 | PC: 14a22 | Change current directory |
| 2018-12-17T22:42:07.276887601Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.281710224Z | 14 | PC: 149b4 | Set default drive (Drive = 'A') |
| 2018-12-17T22:42:07.282869478Z | 25 | PC: 149b8 | Get default drive |
| 2018-12-17T22:42:07.284926033Z | 59 | PC: 14a22 | Change current directory |
| 2018-12-17T22:42:07.294332492Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.297326903Z | 14 | PC: 149b4 | Set default drive (Drive = 'A') |
| 2018-12-17T22:42:07.298476315Z | 25 | PC: 149b8 | Get default drive |
| 2018-12-17T22:42:07.299852778Z | 59 | PC: 14a22 | Change current directory |
| 2018-12-17T22:42:07.30562568Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.308621116Z | 14 | PC: 149b4 | Set default drive (Drive = 'A') |
| 2018-12-17T22:42:07.310230817Z | 25 | PC: 149b8 | Get default drive |
| 2018-12-17T22:42:07.311217879Z | 59 | PC: 14a22 | Change current directory |
| 2018-12-17T22:42:07.316926968Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.320313496Z | 14 | PC: 149b4 | Set default drive (Drive = 'A') |
| 2018-12-17T22:42:07.321403772Z | 25 | PC: 149b8 | Get default drive |
| 2018-12-17T22:42:07.322341405Z | 59 | PC: 14a22 | Change current directory |
| 2018-12-17T22:42:07.328229567Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.331167872Z | 14 | PC: 149b4 | Set default drive (Drive = 'A') |
| 2018-12-17T22:42:07.332305149Z | 25 | PC: 149b8 | Get default drive |
| 2018-12-17T22:42:07.333445178Z | 59 | PC: 14a22 | Change current directory |
| 2018-12-17T22:42:07.339179887Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.343029543Z | 14 | PC: 149b4 | Set default drive (Drive = 'A') |
| 2018-12-17T22:42:07.344445334Z | 25 | PC: 149b8 | Get default drive |
| 2018-12-17T22:42:07.345408909Z | 59 | PC: 14a22 | Change current directory |
| 2018-12-17T22:42:07.351147209Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.354595872Z | 14 | PC: 149b4 | Set default drive (Drive = 'A') |
| 2018-12-17T22:42:07.355963575Z | 25 | PC: 149b8 | Get default drive |
| 2018-12-17T22:42:07.356927107Z | 59 | PC: 14a22 | Change current directory |
| 2018-12-17T22:42:07.363130101Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.365439615Z | 14 | PC: 149b4 | Set default drive (Drive = 'A') |
| 2018-12-17T22:42:07.366528307Z | 25 | PC: 149b8 | Get default drive |
| 2018-12-17T22:42:07.367862288Z | 59 | PC: 14a22 | Change current directory |
| 2018-12-17T22:42:07.371799871Z | 25 | PC: 1495b | Get default drive |
| 2018-12-17T22:42:07.372741803Z | 71 | PC: 1496e | Get current directory |
| 2018-12-17T22:42:07.376014256Z | 26 | PC: 12e96 | Set disk transfer address |
| 2018-12-17T22:42:07.377048094Z | 78 | PC: 12eb5 | Find first file |
| 2018-12-17T22:42:07.384111725Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.387871361Z | 61 | PC: 146f4 | Open file (Filename = 'A:\\TEST.EXE') |
| 2018-12-17T22:42:07.39095278Z | 61 | PC: 146f4 | Open file (Filename = 'A:\\TEST.EXE') |
| 2018-12-17T22:42:07.394287946Z | 14 | PC: 149b4 | Set default drive (Drive = 'C') |
| 2018-12-17T22:42:07.39701355Z | 25 | PC: 149b8 | Get default drive |
| 2018-12-17T22:42:07.398307195Z | 59 | PC: 14a22 | Change current directory |
| 2018-12-17T22:42:07.402224791Z | 26 | PC: 12e96 | Set disk transfer address |
| 2018-12-17T22:42:07.404536719Z | 78 | PC: 12eb5 | Find first file |
| 2018-12-17T22:42:07.410419974Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.41466421Z | 14 | PC: 149b4 | Set default drive (Drive = 'C') |
| 2018-12-17T22:42:07.419004646Z | 25 | PC: 149b8 | Get default drive |
| 2018-12-17T22:42:07.420333453Z | 59 | PC: 14a22 | Change current directory |
| 2018-12-17T22:42:07.425985053Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.429753707Z | 14 | PC: 149b4 | Set default drive (Drive = 'C') |
| 2018-12-17T22:42:07.431189355Z | 25 | PC: 149b8 | Get default drive |
| 2018-12-17T22:42:07.432484953Z | 59 | PC: 14a22 | Change current directory |
| 2018-12-17T22:42:07.439615617Z | 14 | PC: 149b4 | Set default drive (Drive = 'C') |
| 2018-12-17T22:42:07.441055322Z | 25 | PC: 149b8 | Get default drive |
| 2018-12-17T22:42:07.442381897Z | 59 | PC: 14a22 | Change current directory |
| 2018-12-17T22:42:07.446832428Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.450170401Z | 14 | PC: 149b4 | Set default drive (Drive = 'C') |
| 2018-12-17T22:42:07.451619405Z | 25 | PC: 149b8 | Get default drive |
| 2018-12-17T22:42:07.453748304Z | 59 | PC: 14a22 | Change current directory |
| 2018-12-17T22:42:07.459485818Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.46287229Z | 14 | PC: 149b4 | Set default drive (Drive = 'C') |
| 2018-12-17T22:42:07.46526639Z | 25 | PC: 149b8 | Get default drive |
| 2018-12-17T22:42:07.466907508Z | 59 | PC: 14a22 | Change current directory |
| 2018-12-17T22:42:07.475846006Z | 14 | PC: 149b4 | Set default drive (Drive = 'C') |
| 2018-12-17T22:42:07.477761956Z | 25 | PC: 149b8 | Get default drive |
| 2018-12-17T22:42:07.479149342Z | 59 | PC: 14a22 | Change current directory |
| 2018-12-17T22:42:07.483058844Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.487231706Z | 14 | PC: 149b4 | Set default drive (Drive = 'C') |
| 2018-12-17T22:42:07.489705772Z | 25 | PC: 149b8 | Get default drive |
| 2018-12-17T22:42:07.491122823Z | 59 | PC: 14a22 | Change current directory |
| 2018-12-17T22:42:07.497479814Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.500806646Z | 14 | PC: 149b4 | Set default drive (Drive = 'C') |
| 2018-12-17T22:42:07.502341684Z | 25 | PC: 149b8 | Get default drive |
| 2018-12-17T22:42:07.504436207Z | 59 | PC: 14a22 | Change current directory |
| 2018-12-17T22:42:07.510302483Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.513008854Z | 14 | PC: 149b4 | Set default drive (Drive = 'C') |
| 2018-12-17T22:42:07.514732963Z | 25 | PC: 149b8 | Get default drive |
| 2018-12-17T22:42:07.516733864Z | 59 | PC: 14a22 | Change current directory |
| 2018-12-17T22:42:07.520581644Z | 25 | PC: 1495b | Get default drive |
| 2018-12-17T22:42:07.521936332Z | 71 | PC: 1496e | Get current directory |
| 2018-12-17T22:42:07.525477914Z | 26 | PC: 12e96 | Set disk transfer address |
| 2018-12-17T22:42:07.526881977Z | 78 | PC: 12eb5 | Find first file |
| 2018-12-17T22:42:07.532918761Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.536483628Z | 14 | PC: 149b4 | Set default drive (Drive = 'C') |
| 2018-12-17T22:42:07.537699475Z | 25 | PC: 149b8 | Get default drive |
| 2018-12-17T22:42:07.538725041Z | 59 | PC: 14a22 | Change current directory |
| 2018-12-17T22:42:07.546404807Z | 25 | PC: 1495b | Get default drive |
| 2018-12-17T22:42:07.547427692Z | 71 | PC: 1496e | Get current directory |
| 2018-12-17T22:42:07.54983042Z | 26 | PC: 12e96 | Set disk transfer address |
| 2018-12-17T22:42:07.552454334Z | 78 | PC: 12eb5 | Find first file |
| 2018-12-17T22:42:07.562726917Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.567854121Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.572914753Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.578533124Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.582848679Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.588109509Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.603331525Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.608354684Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.613219538Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.617295274Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.621257408Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.626036259Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.630994603Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.635514591Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.643210203Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.647459687Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.65150934Z | 14 | PC: 149b4 | Set default drive (Drive = 'C') |
| 2018-12-17T22:42:07.654041468Z | 25 | PC: 149b8 | Get default drive |
| 2018-12-17T22:42:07.655795426Z | 59 | PC: 14a22 | Change current directory |
| 2018-12-17T22:42:07.662084303Z | 25 | PC: 1495b | Get default drive |
| 2018-12-17T22:42:07.664229577Z | 71 | PC: 1496e | Get current directory |
| 2018-12-17T22:42:07.667216502Z | 26 | PC: 12e96 | Set disk transfer address |
| 2018-12-17T22:42:07.668773095Z | 78 | PC: 12eb5 | Find first file |
| 2018-12-17T22:42:07.678641499Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.683127422Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.687505645Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.692587645Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.697871979Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.705082028Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.709711623Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.71390778Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.718357226Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.7226775Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.726640901Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.732518672Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.736902622Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.741123792Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.746083305Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.753585136Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.757587204Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.762214641Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.766264989Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.770420353Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.774913759Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.779008049Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.782931116Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.790813225Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.795105839Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.799258062Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.804006223Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.808101568Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.812082054Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.820076954Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.827779865Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.835246957Z | 79 | PC: 12ed4 | Find next file |
| 2018-12-17T22:42:07.842389209Z | 61 | PC: 146f4 | Open file (Filename = 'C:\\') |
| 2018-12-17T22:42:07.845158707Z | 61 | PC: 146f4 | Open file (Filename = 'C:\\') |
| 2018-12-17T22:42:07.848097203Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\ATTRIB.EXE') |
| 2018-12-17T22:42:07.856034047Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:07.857598104Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:07.859389172Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:07.862029306Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:07.864730758Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\ATTRIB.EXE') |
| 2018-12-17T22:42:07.872044847Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:07.875088703Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:07.881600655Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:07.884378582Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\ATTRIB.EXE') |
| 2018-12-17T22:42:07.892535071Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:07.894329158Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:07.89583734Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:07.898829773Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:07.900418798Z | 63 | PC: 147c7 | Read file or device (Read 6 bytes on handle 5) |
| 2018-12-17T22:42:07.906370209Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:07.909484407Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\ATTRIB.EXE') |
| 2018-12-17T22:42:07.916571543Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:07.918319098Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:07.927215039Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:07.929615216Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\ATTRIB.EXE') |
| 2018-12-17T22:42:07.936306897Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:07.938210777Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:07.939502867Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:07.941283708Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:07.943155822Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:08.284389677Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:08.294576013Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\ATTRIB.EXE') |
| 2018-12-17T22:42:08.303291293Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:08.305555588Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:08.307176902Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:08.309393704Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:08.310871156Z | 64 | PC: 147c7 | Write file or device (Write 6 bytes on handle 5) |
| 2018-12-17T22:42:08.314277221Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:08.325208164Z | 48 | PC: 148ce | Get DOS version |
| 2018-12-17T22:42:08.327388981Z | 61 | PC: 146f4 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:42:08.337464857Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:08.340538839Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:08.34860118Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:08.35072344Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\ATTRIB.EXE') |
| 2018-12-17T22:42:08.358207626Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:08.359643248Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:08.368060644Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:08.376237324Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\CHKDSK.EXE') |
| 2018-12-17T22:42:08.382991449Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:08.38430265Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:08.386266609Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:08.387628371Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:08.389717253Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\CHKDSK.EXE') |
| 2018-12-17T22:42:08.397322617Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:08.398780427Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:08.404545276Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:08.407672729Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\CHKDSK.EXE') |
| 2018-12-17T22:42:08.414336806Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:08.415622613Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:08.417548442Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:08.418930125Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:08.420854867Z | 63 | PC: 147c7 | Read file or device (Read 6 bytes on handle 5) |
| 2018-12-17T22:42:08.427630495Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:08.430076672Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\CHKDSK.EXE') |
| 2018-12-17T22:42:08.437805608Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:08.440291355Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:08.447925707Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:08.450616173Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\CHKDSK.EXE') |
| 2018-12-17T22:42:08.456475363Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:08.45769568Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:08.45873222Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:08.460212599Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:08.461309251Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:08.468592729Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:08.47463569Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\CHKDSK.EXE') |
| 2018-12-17T22:42:08.478882862Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:08.480097487Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:08.481524408Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:08.482947096Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:08.484579236Z | 64 | PC: 147c7 | Write file or device (Write 6 bytes on handle 5) |
| 2018-12-17T22:42:08.486790092Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:08.491232537Z | 48 | PC: 148ce | Get DOS version |
| 2018-12-17T22:42:08.492899538Z | 61 | PC: 146f4 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:42:08.497045187Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:08.498062039Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:08.503844762Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:08.505296757Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\CHKDSK.EXE') |
| 2018-12-17T22:42:08.509824227Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:08.511648793Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:08.516790269Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:08.521426804Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\DEBUG.EXE') |
| 2018-12-17T22:42:08.526196277Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:08.527249831Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:08.528275166Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:08.530222227Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:08.53253076Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\DEBUG.EXE') |
| 2018-12-17T22:42:08.538456134Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:08.539704194Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:08.543442946Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:08.545630736Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\DEBUG.EXE') |
| 2018-12-17T22:42:08.549877665Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:08.550926154Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:08.552648173Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:08.553757754Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:08.554937134Z | 63 | PC: 147c7 | Read file or device (Read 6 bytes on handle 5) |
| 2018-12-17T22:42:08.559203843Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:08.560756979Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\DEBUG.EXE') |
| 2018-12-17T22:42:08.565678148Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:08.566777627Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:08.571503311Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:08.574320047Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\DEBUG.EXE') |
| 2018-12-17T22:42:08.578567162Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:08.579575584Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:08.581178831Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:08.582217698Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:08.583301781Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:08.589594674Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:08.594658326Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\DEBUG.EXE') |
| 2018-12-17T22:42:08.598910866Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:08.600438249Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:08.601489166Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:08.602796964Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:08.604311842Z | 64 | PC: 147c7 | Write file or device (Write 6 bytes on handle 5) |
| 2018-12-17T22:42:08.606522605Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:08.611773992Z | 48 | PC: 148ce | Get DOS version |
| 2018-12-17T22:42:08.612889832Z | 61 | PC: 146f4 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:42:08.617101894Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:08.618900449Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:08.623753458Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:08.62520928Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\DEBUG.EXE') |
| 2018-12-17T22:42:08.630058766Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:08.631166595Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:08.636345842Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:08.641537696Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\EXPAND.EXE') |
| 2018-12-17T22:42:08.646291733Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:08.647644677Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:08.64909211Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:08.65027017Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:08.652356649Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\EXPAND.EXE') |
| 2018-12-17T22:42:08.656742032Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:08.657973485Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:08.662330653Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:08.664097785Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\EXPAND.EXE') |
| 2018-12-17T22:42:08.66899176Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:08.670771397Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:08.671995736Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:08.673435322Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:08.675098582Z | 63 | PC: 147c7 | Read file or device (Read 6 bytes on handle 5) |
| 2018-12-17T22:42:08.678885382Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:08.681205245Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\EXPAND.EXE') |
| 2018-12-17T22:42:08.685976178Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:08.687247073Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:08.702878135Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:08.705027558Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\EXPAND.EXE') |
| 2018-12-17T22:42:08.70953168Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:08.711238696Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:08.71253099Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:08.714666156Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:08.71757041Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:08.727344144Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:08.735959264Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\EXPAND.EXE') |
| 2018-12-17T22:42:08.74306496Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:08.744324584Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:08.746267744Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:08.747702049Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:08.749277551Z | 64 | PC: 147c7 | Write file or device (Write 6 bytes on handle 5) |
| 2018-12-17T22:42:08.753092734Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:08.760137198Z | 48 | PC: 148ce | Get DOS version |
| 2018-12-17T22:42:08.761501919Z | 61 | PC: 146f4 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:42:08.769349624Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:08.770467218Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:08.775492215Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:08.777201619Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\EXPAND.EXE') |
| 2018-12-17T22:42:08.782240355Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:08.783913468Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:08.789249024Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:08.794658494Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\FDISK.EXE') |
| 2018-12-17T22:42:08.801407112Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:08.802468759Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:08.807446737Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:08.810918842Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:08.812985138Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\FDISK.EXE') |
| 2018-12-17T22:42:08.824612549Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:08.827147039Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:08.832924286Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:08.835810875Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\FDISK.EXE') |
| 2018-12-17T22:42:08.842754358Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:08.844246309Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:08.846040334Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:08.84735646Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:08.848739387Z | 63 | PC: 147c7 | Read file or device (Read 6 bytes on handle 5) |
| 2018-12-17T22:42:08.855621277Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:08.857727763Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\FDISK.EXE') |
| 2018-12-17T22:42:08.865215039Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:08.866975262Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:08.874313682Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:08.877191515Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\FDISK.EXE') |
| 2018-12-17T22:42:08.88385589Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:08.885062858Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:08.887080311Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:08.888397391Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:08.88987319Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:08.899095411Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:08.906658648Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\FDISK.EXE') |
| 2018-12-17T22:42:08.914391978Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:08.916980112Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:08.918581997Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:08.920608662Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:08.922118737Z | 64 | PC: 147c7 | Write file or device (Write 6 bytes on handle 5) |
| 2018-12-17T22:42:08.925300041Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:08.932686985Z | 48 | PC: 148ce | Get DOS version |
| 2018-12-17T22:42:08.934173979Z | 61 | PC: 146f4 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:42:08.940649348Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:08.942507156Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:08.949793551Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:08.951930342Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\FDISK.EXE') |
| 2018-12-17T22:42:08.958949758Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:08.96035616Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:08.969360183Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:08.976447599Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\MEM.EXE') |
| 2018-12-17T22:42:08.983970175Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:08.986095755Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:08.987352973Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:08.988647973Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:08.990794904Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\MEM.EXE') |
| 2018-12-17T22:42:08.999959785Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:09.001812231Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:09.007751645Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:09.009989979Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\MEM.EXE') |
| 2018-12-17T22:42:09.017084599Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:09.036835469Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:09.038283289Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:09.04029966Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:09.041617574Z | 63 | PC: 147c7 | Read file or device (Read 6 bytes on handle 5) |
| 2018-12-17T22:42:09.048599222Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:09.051801935Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\MEM.EXE') |
| 2018-12-17T22:42:09.058561242Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:09.059964284Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:09.06914571Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:09.071848055Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\MEM.EXE') |
| 2018-12-17T22:42:09.079080066Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:09.085918438Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:09.087217002Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:09.089480076Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:09.090919738Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:09.099963442Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:09.108156166Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\MEM.EXE') |
| 2018-12-17T22:42:09.114609911Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:09.115637371Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:09.117590449Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:09.11874406Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:09.119898647Z | 64 | PC: 147c7 | Write file or device (Write 6 bytes on handle 5) |
| 2018-12-17T22:42:09.122409722Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:09.126912534Z | 48 | PC: 148ce | Get DOS version |
| 2018-12-17T22:42:09.128079563Z | 61 | PC: 146f4 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:42:09.132643577Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:09.133784969Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:09.138981153Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:09.141083921Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\MEM.EXE') |
| 2018-12-17T22:42:09.145602175Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:09.147125024Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:09.152157973Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:09.157291922Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\NLSFUNC.EXE') |
| 2018-12-17T22:42:09.165432183Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:09.16685502Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:09.16990044Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:09.171562254Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:09.173459115Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\QBASIC.EXE') |
| 2018-12-17T22:42:09.179034205Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:09.180263415Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:09.185761201Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:09.187542584Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:09.189159484Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\QBASIC.EXE') |
| 2018-12-17T22:42:09.194646408Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:09.196073868Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:09.200307853Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:09.202623446Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\QBASIC.EXE') |
| 2018-12-17T22:42:09.206936766Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:09.208054967Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:09.209866525Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:09.211315599Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:09.213302714Z | 63 | PC: 147c7 | Read file or device (Read 6 bytes on handle 5) |
| 2018-12-17T22:42:09.217298571Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:09.219060501Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\QBASIC.EXE') |
| 2018-12-17T22:42:09.225241319Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:09.226395331Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:09.231301395Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:09.233598118Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\QBASIC.EXE') |
| 2018-12-17T22:42:09.237941136Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:09.239907622Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:09.241281672Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:09.242646156Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:09.24455731Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:09.258684902Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:09.267393184Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\QBASIC.EXE') |
| 2018-12-17T22:42:09.272766764Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:09.274414133Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:09.276353591Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:09.277589137Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:09.278776702Z | 64 | PC: 147c7 | Write file or device (Write 6 bytes on handle 5) |
| 2018-12-17T22:42:09.281840802Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:09.287497852Z | 48 | PC: 148ce | Get DOS version |
| 2018-12-17T22:42:09.288928043Z | 61 | PC: 146f4 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:42:09.295908323Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:09.306763178Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:09.329960655Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:09.331953725Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\QBASIC.EXE') |
| 2018-12-17T22:42:09.338899483Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:09.341032938Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:09.374159712Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:09.3804274Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\REPLACE.EXE') |
| 2018-12-17T22:42:09.385322879Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:09.386459462Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:09.388667165Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:09.390227368Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:09.392916675Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\REPLACE.EXE') |
| 2018-12-17T22:42:09.402100018Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:09.404501023Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:09.411292881Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:09.415130894Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\REPLACE.EXE') |
| 2018-12-17T22:42:09.422419729Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:09.425518573Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:09.427446768Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:09.430017478Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:09.432794702Z | 63 | PC: 147c7 | Read file or device (Read 6 bytes on handle 5) |
| 2018-12-17T22:42:09.439443887Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:09.442075023Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\REPLACE.EXE') |
| 2018-12-17T22:42:09.450126663Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:09.451834806Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:09.460316664Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:09.463960466Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\REPLACE.EXE') |
| 2018-12-17T22:42:09.471029667Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:09.473174531Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:09.474835393Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:09.4774162Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:09.47997182Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:09.489791509Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:09.497640629Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\REPLACE.EXE') |
| 2018-12-17T22:42:09.505548562Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:09.506957985Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:09.508949008Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:09.510900616Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:09.512443604Z | 64 | PC: 147c7 | Write file or device (Write 6 bytes on handle 5) |
| 2018-12-17T22:42:09.517183883Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:09.523994048Z | 48 | PC: 148ce | Get DOS version |
| 2018-12-17T22:42:09.525419367Z | 61 | PC: 146f4 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:42:09.532929209Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:09.535055935Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:09.54168078Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:09.543530987Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\REPLACE.EXE') |
| 2018-12-17T22:42:09.54866099Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:09.550437978Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:09.555520489Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:09.56017522Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\RESTORE.EXE') |
| 2018-12-17T22:42:09.565134056Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:09.566080707Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:09.567363155Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:09.568976036Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:09.570429383Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\RESTORE.EXE') |
| 2018-12-17T22:42:09.577070878Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:09.578870168Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:09.588772211Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:09.591047013Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\RESTORE.EXE') |
| 2018-12-17T22:42:09.595625993Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:09.596692408Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:09.598461522Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:09.599582816Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:09.600874726Z | 63 | PC: 147c7 | Read file or device (Read 6 bytes on handle 5) |
| 2018-12-17T22:42:09.605269568Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:09.606934509Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\RESTORE.EXE') |
| 2018-12-17T22:42:09.613483192Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:09.616066317Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:09.624085054Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:09.627384255Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\RESTORE.EXE') |
| 2018-12-17T22:42:09.634985674Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:09.63753062Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:09.639371149Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:09.64113261Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:09.643968929Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:09.653400202Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:09.663009716Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\RESTORE.EXE') |
| 2018-12-17T22:42:09.670585402Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:09.671970776Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:09.674247179Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:09.675729535Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:09.677214349Z | 64 | PC: 147c7 | Write file or device (Write 6 bytes on handle 5) |
| 2018-12-17T22:42:09.681286587Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:09.689134458Z | 48 | PC: 148ce | Get DOS version |
| 2018-12-17T22:42:09.69151428Z | 61 | PC: 146f4 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:42:09.698510564Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:09.700196016Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:09.709488261Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:09.711474914Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\RESTORE.EXE') |
| 2018-12-17T22:42:09.719952006Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:09.721441646Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:09.729434459Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:09.737487861Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\SCANDISK.EXE') |
| 2018-12-17T22:42:09.745006979Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:09.747612855Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:09.749660065Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:09.751457234Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:09.754968313Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\SCANDISK.EXE') |
| 2018-12-17T22:42:09.763247311Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:09.765021916Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:09.771781399Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:09.774389927Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\SCANDISK.EXE') |
| 2018-12-17T22:42:09.782064021Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:09.784281067Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:09.786134828Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:09.788429501Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:09.789821867Z | 63 | PC: 147c7 | Read file or device (Read 6 bytes on handle 5) |
| 2018-12-17T22:42:09.797518002Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:09.800079184Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\SCANDISK.EXE') |
| 2018-12-17T22:42:09.807619007Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:09.810319704Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:09.819264263Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:09.822449589Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\SCANDISK.EXE') |
| 2018-12-17T22:42:09.831280691Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:09.833091941Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:09.835880302Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:09.838112628Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:09.840746886Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:09.851365135Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:09.859829764Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\SCANDISK.EXE') |
| 2018-12-17T22:42:09.867951039Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:09.869569553Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:09.871640838Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:09.873945833Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:09.875866827Z | 64 | PC: 147c7 | Write file or device (Write 6 bytes on handle 5) |
| 2018-12-17T22:42:09.880342735Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:09.887593425Z | 48 | PC: 148ce | Get DOS version |
| 2018-12-17T22:42:09.897813071Z | 61 | PC: 146f4 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:42:09.906404353Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:09.908566024Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:09.917923069Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:09.920781461Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\SCANDISK.EXE') |
| 2018-12-17T22:42:09.928033037Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:09.931213206Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:09.939305201Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:09.94772882Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\SETUP.EXE') |
| 2018-12-17T22:42:09.955313836Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:09.957034676Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:09.959698114Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:09.961861612Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:09.964314995Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\SETUP.EXE') |
| 2018-12-17T22:42:09.973445824Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:09.975227339Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:09.982307985Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:09.985328094Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\SETUP.EXE') |
| 2018-12-17T22:42:09.992461465Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:09.995326186Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:09.997011299Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:09.999006802Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:10.001765196Z | 63 | PC: 147c7 | Read file or device (Read 6 bytes on handle 5) |
| 2018-12-17T22:42:10.007910579Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:10.011368021Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\SETUP.EXE') |
| 2018-12-17T22:42:10.01886366Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:10.020616608Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:10.029377082Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:10.032074956Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\SETUP.EXE') |
| 2018-12-17T22:42:10.040807451Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:10.042813087Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:10.044449195Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:10.047108721Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:10.049457138Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:10.058765177Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:10.06788255Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\SETUP.EXE') |
| 2018-12-17T22:42:10.074845781Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:10.077193147Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:10.078905736Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:10.080665581Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:10.083630166Z | 64 | PC: 147c7 | Write file or device (Write 6 bytes on handle 5) |
| 2018-12-17T22:42:10.087147424Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:10.095195982Z | 48 | PC: 148ce | Get DOS version |
| 2018-12-17T22:42:10.097242559Z | 61 | PC: 146f4 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:42:10.1039669Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:10.106853417Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:10.114828879Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:10.117290813Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\SETUP.EXE') |
| 2018-12-17T22:42:10.125317032Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:10.127021104Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:10.136213596Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:10.143709444Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\XCOPY.EXE') |
| 2018-12-17T22:42:10.150888825Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:10.153709395Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:10.15535687Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:10.157948059Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:10.160706442Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\XCOPY.EXE') |
| 2018-12-17T22:42:10.167843014Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:10.170537888Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:10.176982701Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:10.180286746Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\XCOPY.EXE') |
| 2018-12-17T22:42:10.18848911Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:10.190112467Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:10.192638071Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:10.194685907Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:10.196428584Z | 63 | PC: 147c7 | Read file or device (Read 6 bytes on handle 5) |
| 2018-12-17T22:42:10.20363162Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:10.206134903Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\XCOPY.EXE') |
| 2018-12-17T22:42:10.213418311Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:10.216044109Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:10.223585509Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:10.227093172Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\XCOPY.EXE') |
| 2018-12-17T22:42:10.234120059Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:10.23552931Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:10.237608348Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:10.239219827Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:10.241988779Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:10.251800974Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:10.259547255Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\XCOPY.EXE') |
| 2018-12-17T22:42:10.2681596Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:10.269619927Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:10.271146405Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:10.272626546Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:10.273861401Z | 64 | PC: 147c7 | Write file or device (Write 6 bytes on handle 5) |
| 2018-12-17T22:42:10.277594384Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:10.284204715Z | 48 | PC: 148ce | Get DOS version |
| 2018-12-17T22:42:10.286092571Z | 61 | PC: 146f4 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:42:10.292581634Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:10.293820847Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:10.301518051Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:10.303636389Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\XCOPY.EXE') |
| 2018-12-17T22:42:10.311023455Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:10.312496698Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:10.320740575Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:10.328180364Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\DEFRAG.EXE') |
| 2018-12-17T22:42:10.334906341Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:10.33678733Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:10.338036618Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:10.340015948Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:10.342071201Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\DEFRAG.EXE') |
| 2018-12-17T22:42:10.349086157Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:10.352825359Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:10.358538166Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:10.361312812Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\DEFRAG.EXE') |
| 2018-12-17T22:42:10.366214901Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:10.36779465Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:10.370600881Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:10.372265765Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:10.37501756Z | 63 | PC: 147c7 | Read file or device (Read 6 bytes on handle 5) |
| 2018-12-17T22:42:10.381345534Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:10.38370062Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\DEFRAG.EXE') |
| 2018-12-17T22:42:10.391591019Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:10.393183189Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:10.401471907Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:10.404023904Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\DEFRAG.EXE') |
| 2018-12-17T22:42:10.412233776Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:10.413669231Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:10.415389312Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:10.418097463Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:10.419729328Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:10.430146019Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:10.437787162Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\DEFRAG.EXE') |
| 2018-12-17T22:42:10.444555102Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:10.446626633Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:10.447897101Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:10.449993881Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:10.451868729Z | 64 | PC: 147c7 | Write file or device (Write 6 bytes on handle 5) |
| 2018-12-17T22:42:10.456530239Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:10.463625956Z | 48 | PC: 148ce | Get DOS version |
| 2018-12-17T22:42:10.464945737Z | 61 | PC: 146f4 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:42:10.473865268Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:10.475181236Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:10.483840042Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:10.485980948Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\DEFRAG.EXE') |
| 2018-12-17T22:42:10.493434144Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:10.495917408Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:10.504463396Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:10.513260528Z | 61 | PC: 146f4 | Open file (Filename = 'the minimum size, if ') |
| 2018-12-17T22:42:10.518380832Z | 61 | PC: 146f4 | Open file (Filename = 'the minimum size, if ') |
| 2018-12-17T22:42:10.524342297Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\MSCDEX.EXE') |
| 2018-12-17T22:42:10.53490383Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:10.536787127Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:10.53963348Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:10.541478984Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:10.544533004Z | 61 | PC: 146f4 | Open file (Filename = 'C:\DOS\MSCDEX.EXE') |
| 2018-12-17T22:42:10.552097045Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:10.553756461Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:10.562024786Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:10.564489227Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\SETUP.EXE') |
| 2018-12-17T22:42:10.575625419Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:10.577167997Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:10.578682018Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:10.58168373Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:10.584227577Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\SETUP.EXE') |
| 2018-12-17T22:42:10.59315869Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:10.595114942Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:10.602326436Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:10.605914184Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\SETUP.EXE') |
| 2018-12-17T22:42:10.612801973Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:10.615388357Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:10.616976121Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:10.61886576Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:10.620995493Z | 63 | PC: 147c7 | Read file or device (Read 6 bytes on handle 5) |
| 2018-12-17T22:42:10.627400373Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:10.633944592Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\SETUP.EXE') |
| 2018-12-17T22:42:10.64113241Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:10.64359872Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:10.651389605Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:10.653835838Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\SETUP.EXE') |
| 2018-12-17T22:42:10.661463827Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:10.662977396Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:10.665611661Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:10.667292853Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:10.669012485Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:10.68002805Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:10.687861226Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\SETUP.EXE') |
| 2018-12-17T22:42:10.696099759Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:10.697895723Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:10.699459815Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:10.701845854Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:10.703565958Z | 64 | PC: 147c7 | Write file or device (Write 6 bytes on handle 5) |
| 2018-12-17T22:42:10.708021861Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:10.715173511Z | 48 | PC: 148ce | Get DOS version |
| 2018-12-17T22:42:10.717436542Z | 61 | PC: 146f4 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:42:10.724593731Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:10.726309299Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:10.734688877Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:10.736665542Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\SETUP.EXE') |
| 2018-12-17T22:42:10.744485747Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:10.746120183Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:10.754142902Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:10.761672769Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\WINHELP.EXE') |
| 2018-12-17T22:42:10.768539441Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:10.771475389Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:10.773146604Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:10.775850967Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:10.778364151Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\WINHELP.EXE') |
| 2018-12-17T22:42:10.785099776Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:10.788103536Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:10.794090992Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:10.796637823Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\WINHELP.EXE') |
| 2018-12-17T22:42:10.804463372Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:10.805818996Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:10.808302508Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:10.809958689Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:10.811597727Z | 63 | PC: 147c7 | Read file or device (Read 6 bytes on handle 5) |
| 2018-12-17T22:42:10.81996786Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:10.822818389Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\WINHELP.EXE') |
| 2018-12-17T22:42:10.830969728Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:10.833257857Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:10.842255963Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:10.845458395Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\WINHELP.EXE') |
| 2018-12-17T22:42:10.852573717Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:10.855428054Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:10.856926752Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:10.859112288Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:10.860702402Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:10.870069181Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:10.878816172Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\WINHELP.EXE') |
| 2018-12-17T22:42:10.886132705Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:10.887670599Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:10.889175985Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:10.890575202Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:10.892782727Z | 64 | PC: 147c7 | Write file or device (Write 6 bytes on handle 5) |
| 2018-12-17T22:42:10.896229844Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:10.904456045Z | 48 | PC: 148ce | Get DOS version |
| 2018-12-17T22:42:10.906192982Z | 61 | PC: 146f4 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:42:10.913015563Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:10.915153851Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:10.922513264Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:10.925190458Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\WINHELP.EXE') |
| 2018-12-17T22:42:10.932117208Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:10.933853627Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:10.942641922Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:10.950701704Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\MSD.EXE') |
| 2018-12-17T22:42:10.958964302Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:10.960617503Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:10.963353304Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:10.964739083Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:10.966906923Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\MSD.EXE') |
| 2018-12-17T22:42:10.976201315Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:10.977991701Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:10.985577639Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:10.988395877Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\MSD.EXE') |
| 2018-12-17T22:42:10.995837246Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:10.997747716Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:10.999423861Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:11.002685323Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:11.004626393Z | 63 | PC: 147c7 | Read file or device (Read 6 bytes on handle 5) |
| 2018-12-17T22:42:11.012120086Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:11.015341837Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\MSD.EXE') |
| 2018-12-17T22:42:11.023171038Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:11.026870001Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:11.036043481Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:11.040345257Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\MSD.EXE') |
| 2018-12-17T22:42:11.047817376Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:11.049637949Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:11.052673445Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:11.054553004Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:11.057265912Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:11.067551885Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:11.076869346Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\MSD.EXE') |
| 2018-12-17T22:42:11.083995881Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:11.085620184Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:11.088100223Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:11.089776917Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:11.092305987Z | 64 | PC: 147c7 | Write file or device (Write 6 bytes on handle 5) |
| 2018-12-17T22:42:11.096017463Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:11.105413763Z | 48 | PC: 148ce | Get DOS version |
| 2018-12-17T22:42:11.107643505Z | 61 | PC: 146f4 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:42:11.115256104Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:11.11836658Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:11.126820763Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:11.130188014Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\MSD.EXE') |
| 2018-12-17T22:42:11.137757489Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:11.139710128Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:11.149405274Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:11.157283733Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\PACKAGER.EXE') |
| 2018-12-17T22:42:11.165388117Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:11.166738652Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:11.168416329Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:11.171074779Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:11.17421974Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\PACKAGER.EXE') |
| 2018-12-17T22:42:11.181833294Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:11.183514504Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:11.19075211Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:11.193724951Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\PACKAGER.EXE') |
| 2018-12-17T22:42:11.20106728Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:11.202647185Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:11.204187769Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:11.206987923Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:11.208406722Z | 63 | PC: 147c7 | Read file or device (Read 6 bytes on handle 5) |
| 2018-12-17T22:42:11.215125456Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:11.217485599Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\PACKAGER.EXE') |
| 2018-12-17T22:42:11.225429558Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:11.226875588Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:11.234768371Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:11.238120266Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\PACKAGER.EXE') |
| 2018-12-17T22:42:11.246062806Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:11.248175939Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:11.249779157Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:11.252325836Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:11.254340045Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:11.262925554Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:11.271622965Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\PACKAGER.EXE') |
| 2018-12-17T22:42:11.278867176Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:11.281616471Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:11.283031778Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:11.285792341Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:11.287518913Z | 64 | PC: 147c7 | Write file or device (Write 6 bytes on handle 5) |
| 2018-12-17T22:42:11.290427163Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:11.296130312Z | 48 | PC: 148ce | Get DOS version |
| 2018-12-17T22:42:11.297898883Z | 61 | PC: 146f4 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:42:11.30575305Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:11.307387997Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:11.312751351Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:11.3150592Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\PACKAGER.EXE') |
| 2018-12-17T22:42:11.319336481Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:11.321155645Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:11.32649796Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:11.331790944Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\PBRUSH.EXE') |
| 2018-12-17T22:42:11.336506519Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:11.337937454Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:11.33921604Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:11.340409196Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:11.342391325Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\PBRUSH.EXE') |
| 2018-12-17T22:42:11.348587263Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:11.351301813Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:11.357637413Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:11.360385595Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\PBRUSH.EXE') |
| 2018-12-17T22:42:11.36690632Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:11.36800468Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:11.369697107Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:11.370861462Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:11.372658666Z | 63 | PC: 147c7 | Read file or device (Read 6 bytes on handle 5) |
| 2018-12-17T22:42:11.378302572Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:11.381638856Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\PBRUSH.EXE') |
| 2018-12-17T22:42:11.388782412Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:11.390418374Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:11.397865216Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:11.400061221Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\PBRUSH.EXE') |
| 2018-12-17T22:42:11.407240149Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:11.408751183Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:11.410878345Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:11.412807406Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:11.414736348Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:11.42426324Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:11.431586446Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\PBRUSH.EXE') |
| 2018-12-17T22:42:11.439531197Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:11.441182813Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:11.443157963Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:11.444959197Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:11.447543587Z | 64 | PC: 147c7 | Write file or device (Write 6 bytes on handle 5) |
| 2018-12-17T22:42:11.450705951Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:11.699304099Z | 48 | PC: 148ce | Get DOS version |
| 2018-12-17T22:42:11.7024461Z | 61 | PC: 146f4 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:42:11.710004515Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:11.712914038Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:11.720632199Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:11.722799146Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\PBRUSH.EXE') |
| 2018-12-17T22:42:11.730215186Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:11.731890244Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:11.788225546Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:11.795730811Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\SOL.EXE') |
| 2018-12-17T22:42:11.806281404Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:11.808487637Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:11.810378388Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:11.814601618Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:11.817265451Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\SOL.EXE') |
| 2018-12-17T22:42:11.825425238Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:11.830974025Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:11.838198047Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:11.841040078Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\SOL.EXE') |
| 2018-12-17T22:42:11.848403339Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:11.851524871Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:11.853380205Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:11.85607845Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:11.857721534Z | 63 | PC: 147c7 | Read file or device (Read 6 bytes on handle 5) |
| 2018-12-17T22:42:11.863757644Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:11.867682315Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\SOL.EXE') |
| 2018-12-17T22:42:11.87458208Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:11.87719354Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:11.885723779Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:11.888512006Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\SOL.EXE') |
| 2018-12-17T22:42:11.896509258Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:11.898065086Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:11.900264815Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:11.901816943Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:11.904300521Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:11.913189542Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:11.921220688Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\SOL.EXE') |
| 2018-12-17T22:42:11.928768977Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:11.930302189Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:11.933181333Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:11.934820792Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:11.937348515Z | 64 | PC: 147c7 | Write file or device (Write 6 bytes on handle 5) |
| 2018-12-17T22:42:11.940823922Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:11.94806007Z | 48 | PC: 148ce | Get DOS version |
| 2018-12-17T22:42:11.950711633Z | 61 | PC: 146f4 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:42:11.958129751Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:11.960595398Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:11.968057403Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:11.970794128Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\SOL.EXE') |
| 2018-12-17T22:42:11.97802862Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:11.980346114Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:11.98827195Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:11.995936819Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\TERMINAL.EXE') |
| 2018-12-17T22:42:12.003829694Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:12.005129209Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:12.007364699Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:12.00874187Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:12.011005346Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\TERMINAL.EXE') |
| 2018-12-17T22:42:12.018184069Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:12.019562292Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:12.027027942Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:12.029322166Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\TERMINAL.EXE') |
| 2018-12-17T22:42:12.036824798Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:12.038213611Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:12.039477089Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:12.041609294Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:12.042968755Z | 63 | PC: 147c7 | Read file or device (Read 6 bytes on handle 5) |
| 2018-12-17T22:42:12.050339462Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:12.052896665Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\TERMINAL.EXE') |
| 2018-12-17T22:42:12.060821891Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:12.062867585Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:12.070909632Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:12.074761926Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\TERMINAL.EXE') |
| 2018-12-17T22:42:12.082096936Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:12.084680272Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:12.086615411Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:12.088483829Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:12.090945931Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:12.101878919Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:12.110694281Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\TERMINAL.EXE') |
| 2018-12-17T22:42:12.117447728Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:12.120142339Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:12.121503603Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:12.123106393Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:12.125448916Z | 64 | PC: 147c7 | Write file or device (Write 6 bytes on handle 5) |
| 2018-12-17T22:42:12.128797858Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:12.137232921Z | 48 | PC: 148ce | Get DOS version |
| 2018-12-17T22:42:12.139144695Z | 61 | PC: 146f4 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:42:12.147201278Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:12.149540728Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:12.15817065Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:12.161866801Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\TERMINAL.EXE') |
| 2018-12-17T22:42:12.169935156Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:12.172822895Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:12.181697073Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:12.190778315Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\WINFILE.EXE') |
| 2018-12-17T22:42:12.197920773Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:12.199508957Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:12.202213412Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:12.203988698Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:12.207375344Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\WINFILE.EXE') |
| 2018-12-17T22:42:12.214734605Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:12.216634139Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:12.223487644Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:12.226239868Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\WINTUTOR.EXE') |
| 2018-12-17T22:42:12.239256782Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:12.242083279Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:12.244399126Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:12.246300579Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:12.248997051Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\WINTUTOR.EXE') |
| 2018-12-17T22:42:12.257116334Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:12.25890454Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:12.266499749Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:12.269084851Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\WINTUTOR.EXE') |
| 2018-12-17T22:42:12.277793785Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:12.279507318Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:12.281911242Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:12.28344907Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:12.285052267Z | 63 | PC: 147c7 | Read file or device (Read 6 bytes on handle 5) |
| 2018-12-17T22:42:12.291680165Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:12.29394267Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\WINTUTOR.EXE') |
| 2018-12-17T22:42:12.302453171Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:12.303925352Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:12.313422745Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:12.31633485Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\WINTUTOR.EXE') |
| 2018-12-17T22:42:12.324815199Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:12.326963658Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:12.32973493Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:12.331941184Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:12.333869917Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:12.343984726Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:12.35217633Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\WINTUTOR.EXE') |
| 2018-12-17T22:42:12.360424646Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:12.362589259Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:12.365087031Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:12.367248809Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:12.368980555Z | 64 | PC: 147c7 | Write file or device (Write 6 bytes on handle 5) |
| 2018-12-17T22:42:12.373251374Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:12.381556028Z | 48 | PC: 148ce | Get DOS version |
| 2018-12-17T22:42:12.384488316Z | 61 | PC: 146f4 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:42:12.391203885Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:12.394069536Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:12.401773449Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:12.405434004Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\WINTUTOR.EXE') |
| 2018-12-17T22:42:12.412385039Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:12.415977196Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:12.424185614Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:12.431976963Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\WRITE.EXE') |
| 2018-12-17T22:42:12.439766326Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:12.441324168Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:12.44372727Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:12.445344985Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:12.448638318Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\WRITE.EXE') |
| 2018-12-17T22:42:12.456234426Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:12.457821784Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:12.464968024Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:12.467486218Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\WRITE.EXE') |
| 2018-12-17T22:42:12.475377068Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:12.477063547Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:12.479070437Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:12.48072754Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:12.482437744Z | 63 | PC: 147c7 | Read file or device (Read 6 bytes on handle 5) |
| 2018-12-17T22:42:12.489606861Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:12.492108334Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\WRITE.EXE') |
| 2018-12-17T22:42:12.499701415Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:12.501188225Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:12.509723161Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:12.512298262Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\WRITE.EXE') |
| 2018-12-17T22:42:12.526547794Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:12.528655055Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:12.531410729Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:12.533114413Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:12.535228425Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:12.545118509Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:12.553512616Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\WRITE.EXE') |
| 2018-12-17T22:42:12.561723992Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:12.563400542Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:12.566439957Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:12.568231176Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:12.571376486Z | 64 | PC: 147c7 | Write file or device (Write 6 bytes on handle 5) |
| 2018-12-17T22:42:12.575244411Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:12.582502331Z | 48 | PC: 148ce | Get DOS version |
| 2018-12-17T22:42:12.584198831Z | 61 | PC: 146f4 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:42:12.590767795Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:12.592861993Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:12.601629263Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:12.605373384Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\WRITE.EXE') |
| 2018-12-17T22:42:12.612653655Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:12.615492954Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:12.623591273Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:12.632129088Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CALC.EXE') |
| 2018-12-17T22:42:12.639411554Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:12.641456073Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:12.643634119Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:12.645403079Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:12.64895683Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CALC.EXE') |
| 2018-12-17T22:42:12.662619625Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:12.665800043Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:12.67307556Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:12.676982929Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CALC.EXE') |
| 2018-12-17T22:42:12.684565166Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:12.686738691Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:12.688640021Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:12.690384085Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:12.692648955Z | 63 | PC: 147c7 | Read file or device (Read 6 bytes on handle 5) |
| 2018-12-17T22:42:12.699071708Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:12.702207921Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CALC.EXE') |
| 2018-12-17T22:42:12.709021497Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:12.711353329Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:12.719436242Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:12.724132812Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CALC.EXE') |
| 2018-12-17T22:42:12.730930285Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:12.733426206Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:12.734771981Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:12.737138335Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:12.738940849Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:12.749231546Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:12.759739925Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CALC.EXE') |
| 2018-12-17T22:42:12.766930952Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:12.769471854Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:12.770924081Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:12.77322063Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:12.774615094Z | 64 | PC: 147c7 | Write file or device (Write 6 bytes on handle 5) |
| 2018-12-17T22:42:12.778696Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:12.786263506Z | 48 | PC: 148ce | Get DOS version |
| 2018-12-17T22:42:12.788170733Z | 61 | PC: 146f4 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:42:12.795937374Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:12.798337698Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:12.806621523Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:12.809168294Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CALC.EXE') |
| 2018-12-17T22:42:12.81743934Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:12.819229885Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:12.828598921Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:12.835807704Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CALENDAR.EXE') |
| 2018-12-17T22:42:12.843482924Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:12.84475418Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:12.847297041Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:12.848707715Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:12.851997635Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CALENDAR.EXE') |
| 2018-12-17T22:42:12.858862423Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:12.861632417Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:12.867545172Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:12.870808525Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CALENDAR.EXE') |
| 2018-12-17T22:42:12.877558702Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:12.879049253Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:12.881072068Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:12.882603741Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:12.88525318Z | 63 | PC: 147c7 | Read file or device (Read 6 bytes on handle 5) |
| 2018-12-17T22:42:12.892660717Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:12.89707201Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CALENDAR.EXE') |
| 2018-12-17T22:42:12.904327279Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:12.907448323Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:12.915497023Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:12.919301925Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CALENDAR.EXE') |
| 2018-12-17T22:42:12.926167208Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:12.927461113Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:12.929622089Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:12.930979992Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:12.93356956Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:12.9427935Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:12.951487001Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CALENDAR.EXE') |
| 2018-12-17T22:42:12.958935375Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:12.961238677Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:12.962555348Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:12.964341557Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:12.966734897Z | 64 | PC: 147c7 | Write file or device (Write 6 bytes on handle 5) |
| 2018-12-17T22:42:12.970672555Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:12.978566529Z | 48 | PC: 148ce | Get DOS version |
| 2018-12-17T22:42:12.980104415Z | 61 | PC: 146f4 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:42:12.988105103Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:12.989888511Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:12.9987741Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:13.001466657Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CALENDAR.EXE') |
| 2018-12-17T22:42:13.008661342Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:13.011804509Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:13.020188577Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:13.02842361Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CARDFILE.EXE') |
| 2018-12-17T22:42:13.036150879Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:13.038917868Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:13.040501279Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:13.042292134Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:13.04603873Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CARDFILE.EXE') |
| 2018-12-17T22:42:13.053055892Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:13.055934907Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:13.062007163Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:13.066057814Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CARDFILE.EXE') |
| 2018-12-17T22:42:13.07290929Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:13.075674212Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:13.077058835Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:13.079437323Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:13.080924809Z | 63 | PC: 147c7 | Read file or device (Read 6 bytes on handle 5) |
| 2018-12-17T22:42:13.087527992Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:13.08989328Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CARDFILE.EXE') |
| 2018-12-17T22:42:13.097769301Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:13.099359917Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:13.108503918Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:13.110884774Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CARDFILE.EXE') |
| 2018-12-17T22:42:13.118035649Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:13.119474009Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:13.120764735Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:13.123046447Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:13.124450954Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:13.134060283Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:13.142856505Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CARDFILE.EXE') |
| 2018-12-17T22:42:13.150615729Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:13.152165309Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:13.15468912Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:13.156264968Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:13.158911647Z | 64 | PC: 147c7 | Write file or device (Write 6 bytes on handle 5) |
| 2018-12-17T22:42:13.162427103Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:13.169952463Z | 48 | PC: 148ce | Get DOS version |
| 2018-12-17T22:42:13.172380952Z | 61 | PC: 146f4 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:42:13.179837891Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:13.182851843Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:13.190871414Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:13.194495984Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CARDFILE.EXE') |
| 2018-12-17T22:42:13.202265173Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:13.205259497Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:13.213998312Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:13.221944887Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CHARMAP.EXE') |
| 2018-12-17T22:42:13.230328201Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:13.232140724Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:13.234260732Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:13.235821325Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:13.239283724Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CHARMAP.EXE') |
| 2018-12-17T22:42:13.246211698Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:13.248793035Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:13.25577842Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:13.258006779Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CHARMAP.EXE') |
| 2018-12-17T22:42:13.264972401Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:13.266269262Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:13.268418467Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:13.269809813Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:13.272717523Z | 63 | PC: 147c7 | Read file or device (Read 6 bytes on handle 5) |
| 2018-12-17T22:42:13.278521987Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:13.281379217Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CHARMAP.EXE') |
| 2018-12-17T22:42:13.288055332Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:13.290662846Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:13.298612361Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:13.302632999Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CHARMAP.EXE') |
| 2018-12-17T22:42:13.309838893Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:13.312646126Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:13.314790819Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:13.31668431Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:13.319790512Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:13.329299124Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:13.33785431Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CHARMAP.EXE') |
| 2018-12-17T22:42:13.345156156Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:13.347673036Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:13.349151239Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:13.351864026Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:13.353438782Z | 64 | PC: 147c7 | Write file or device (Write 6 bytes on handle 5) |
| 2018-12-17T22:42:13.357696364Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:13.364751488Z | 48 | PC: 148ce | Get DOS version |
| 2018-12-17T22:42:13.366294791Z | 61 | PC: 146f4 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:42:13.374019192Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:13.375593707Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:13.38391711Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:13.386620837Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CHARMAP.EXE') |
| 2018-12-17T22:42:13.39383166Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:13.395225426Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:13.4048414Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:13.411924438Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CLIPBRD.EXE') |
| 2018-12-17T22:42:13.419863753Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:13.421383093Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:13.424069411Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:13.425673469Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:13.429134135Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CLIPBRD.EXE') |
| 2018-12-17T22:42:13.436131858Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:13.438984609Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:13.445129168Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:13.448482519Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CLIPBRD.EXE') |
| 2018-12-17T22:42:13.455209447Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:13.458476922Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:13.460072502Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:13.46291063Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:13.465484651Z | 63 | PC: 147c7 | Read file or device (Read 6 bytes on handle 5) |
| 2018-12-17T22:42:13.472458824Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:13.476303015Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CLIPBRD.EXE') |
| 2018-12-17T22:42:13.483349108Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:13.486239418Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:13.495156886Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:13.498825516Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CLIPBRD.EXE') |
| 2018-12-17T22:42:13.505685499Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:13.515122452Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:13.516568425Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:13.518776433Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:13.521102158Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:13.53342156Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:13.541691237Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CLIPBRD.EXE') |
| 2018-12-17T22:42:13.549419268Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:13.551919054Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:13.553901309Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:13.556564485Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:13.558427587Z | 64 | PC: 147c7 | Write file or device (Write 6 bytes on handle 5) |
| 2018-12-17T22:42:13.562429517Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:13.570447676Z | 48 | PC: 148ce | Get DOS version |
| 2018-12-17T22:42:13.573965602Z | 61 | PC: 146f4 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:42:13.581075915Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:13.584135784Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:13.592154229Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:13.595709987Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CLIPBRD.EXE') |
| 2018-12-17T22:42:13.602887308Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:13.606425457Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:13.614848138Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:13.624193932Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CONTROL.EXE') |
| 2018-12-17T22:42:13.633782309Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:13.636099646Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:13.637774497Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:13.640723673Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:13.643143245Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CONTROL.EXE') |
| 2018-12-17T22:42:13.651932038Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:13.653698797Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:13.660866571Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:13.663967119Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CONTROL.EXE') |
| 2018-12-17T22:42:13.67139221Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:13.672717149Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:13.675237191Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:13.676625502Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:13.678870221Z | 63 | PC: 147c7 | Read file or device (Read 6 bytes on handle 5) |
| 2018-12-17T22:42:13.684795505Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:13.687866845Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CONTROL.EXE') |
| 2018-12-17T22:42:13.697334087Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:13.698880739Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:13.708602411Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:13.711235852Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CONTROL.EXE') |
| 2018-12-17T22:42:13.718597044Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:13.720693325Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:13.722565783Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:13.726103764Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:13.728092943Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:13.739246498Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:13.747620308Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CONTROL.EXE') |
| 2018-12-17T22:42:13.756576338Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:13.758325204Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:13.76101856Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:13.762618011Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:13.765236699Z | 64 | PC: 147c7 | Write file or device (Write 6 bytes on handle 5) |
| 2018-12-17T22:42:13.769161727Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:13.776968292Z | 48 | PC: 148ce | Get DOS version |
| 2018-12-17T22:42:13.781661756Z | 61 | PC: 146f4 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:42:13.797590747Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:13.79935612Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:13.8083907Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:13.810679027Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CONTROL.EXE') |
| 2018-12-17T22:42:13.817735656Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:13.820724651Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:13.828977515Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:13.845381424Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\DRWATSON.EXE') |
| 2018-12-17T22:42:13.852199062Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:13.855293027Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:13.857144583Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:13.860374907Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:13.862871056Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\DRWATSON.EXE') |
| 2018-12-17T22:42:13.871261314Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:13.872737381Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:13.879691509Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:13.882015942Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\DRWATSON.EXE') |
| 2018-12-17T22:42:13.889678203Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:13.891271172Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:13.893892139Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:13.895626391Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:13.898113888Z | 63 | PC: 147c7 | Read file or device (Read 6 bytes on handle 5) |
| 2018-12-17T22:42:13.904264142Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:13.907916691Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\DRWATSON.EXE') |
| 2018-12-17T22:42:13.923278342Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:13.926457771Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:13.934774564Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:13.939129576Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\DRWATSON.EXE') |
| 2018-12-17T22:42:13.946036935Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:13.948604239Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:13.950272881Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:13.952898425Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:13.954565578Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:13.965627829Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:13.974356858Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\DRWATSON.EXE') |
| 2018-12-17T22:42:13.984753303Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:13.986329422Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:13.989094679Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:13.990554791Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:13.992895984Z | 64 | PC: 147c7 | Write file or device (Write 6 bytes on handle 5) |
| 2018-12-17T22:42:13.996389277Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:14.005286507Z | 48 | PC: 148ce | Get DOS version |
| 2018-12-17T22:42:14.007119502Z | 61 | PC: 146f4 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:42:14.015251801Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:14.017179504Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:14.026612027Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:14.028606652Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\DRWATSON.EXE') |
| 2018-12-17T22:42:14.038176703Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:14.040152207Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:14.315134912Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:14.353660637Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:14.355498399Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:14.35845998Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:14.360593855Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\EXPAND.EXE') |
| 2018-12-17T22:42:14.368713163Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:14.370698082Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:14.372329937Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:14.375392766Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:14.37802154Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\EXPAND.EXE') |
| 2018-12-17T22:42:14.386167379Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:14.387874522Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:14.395362911Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:14.398212829Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\EXPAND.EXE') |
| 2018-12-17T22:42:14.406344422Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:14.408012084Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:14.410633957Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:14.412101654Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:14.414418316Z | 63 | PC: 147c7 | Read file or device (Read 6 bytes on handle 5) |
| 2018-12-17T22:42:14.420477815Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:14.423696612Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\EXPAND.EXE') |
| 2018-12-17T22:42:14.432145048Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:14.433873215Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:14.442077346Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:14.446360073Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\EXPAND.EXE') |
| 2018-12-17T22:42:14.453490545Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:14.456481937Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:14.45834036Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:14.461200502Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:14.462926783Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:14.473638085Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:14.481533638Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\EXPAND.EXE') |
| 2018-12-17T22:42:14.490020579Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:14.491898985Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:14.494117737Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:14.495587961Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:14.498064748Z | 64 | PC: 147c7 | Write file or device (Write 6 bytes on handle 5) |
| 2018-12-17T22:42:14.502034707Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:14.509675413Z | 48 | PC: 148ce | Get DOS version |
| 2018-12-17T22:42:14.510999353Z | 61 | PC: 146f4 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:42:14.518818888Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:14.520251623Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:14.528287231Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:14.53034641Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\EXPAND.EXE') |
| 2018-12-17T22:42:14.537147996Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:14.539181803Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:14.547998495Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:14.560957172Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\MPLAYER.EXE') |
| 2018-12-17T22:42:14.568329187Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:14.570941892Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:14.572214326Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:14.574565167Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:14.577228227Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\MPLAYER.EXE') |
| 2018-12-17T22:42:14.585771643Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:14.587425586Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:14.593738645Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:14.596355918Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\MPLAYER.EXE') |
| 2018-12-17T22:42:14.602928446Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:14.605223958Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:14.606531107Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:14.608962121Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:14.610375053Z | 63 | PC: 147c7 | Read file or device (Read 6 bytes on handle 5) |
| 2018-12-17T22:42:14.616033881Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:14.619210315Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\MPLAYER.EXE') |
| 2018-12-17T22:42:14.625714745Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:14.6274045Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:14.63481365Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:14.637823679Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\MPLAYER.EXE') |
| 2018-12-17T22:42:14.645329893Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:14.646845082Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:14.648728486Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:14.649971569Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:14.651794359Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:14.66066038Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:14.668426785Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\MPLAYER.EXE') |
| 2018-12-17T22:42:14.676545791Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:14.678257596Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:14.681204511Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:14.682871143Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:14.685738274Z | 64 | PC: 147c7 | Write file or device (Write 6 bytes on handle 5) |
| 2018-12-17T22:42:14.689134499Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:14.697258321Z | 48 | PC: 148ce | Get DOS version |
| 2018-12-17T22:42:14.698896387Z | 61 | PC: 146f4 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:42:14.706781057Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:14.709194118Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:14.717916624Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:14.72008198Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\MPLAYER.EXE') |
| 2018-12-17T22:42:14.728036361Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:14.72965777Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:14.738672218Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:14.745947446Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\NOTEPAD.EXE') |
| 2018-12-17T22:42:14.753644445Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:14.755039138Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:14.757579837Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:14.75917184Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:14.762077049Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\NOTEPAD.EXE') |
| 2018-12-17T22:42:14.768938369Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:14.771094969Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:14.777653715Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:14.780844361Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\NOTEPAD.EXE') |
| 2018-12-17T22:42:14.787384444Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:14.789523389Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:14.790791899Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:14.792638749Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:14.794022725Z | 63 | PC: 147c7 | Read file or device (Read 6 bytes on handle 5) |
| 2018-12-17T22:42:14.799871689Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:14.803096197Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\NOTEPAD.EXE') |
| 2018-12-17T22:42:14.809907345Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:14.812038516Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:14.821147644Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:14.825336354Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\NOTEPAD.EXE') |
| 2018-12-17T22:42:14.832282793Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:14.835137843Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:14.836627122Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:14.839653693Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:14.841089796Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:14.913652233Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.010885247Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\NOTEPAD.EXE') |
| 2018-12-17T22:42:15.017921668Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:15.020965839Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:15.022688732Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:15.02593513Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:15.027344185Z | 64 | PC: 147c7 | Write file or device (Write 6 bytes on handle 5) |
| 2018-12-17T22:42:15.031871922Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.092529648Z | 48 | PC: 148ce | Get DOS version |
| 2018-12-17T22:42:15.094550988Z | 61 | PC: 146f4 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:42:15.101648006Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:15.104342292Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:15.113433354Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.11712149Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\NOTEPAD.EXE') |
| 2018-12-17T22:42:15.12572236Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:15.127493769Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:15.135819524Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.143366481Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\PIFEDIT.EXE') |
| 2018-12-17T22:42:15.151904402Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:15.153577326Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:15.156580596Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:15.158364507Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.16212063Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\PIFEDIT.EXE') |
| 2018-12-17T22:42:15.16756823Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:15.169484888Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:15.173267366Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.175676893Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\PIFEDIT.EXE') |
| 2018-12-17T22:42:15.180000783Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:15.182029591Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:15.183961063Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:15.186062551Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:15.187634724Z | 63 | PC: 147c7 | Read file or device (Read 6 bytes on handle 5) |
| 2018-12-17T22:42:15.196123765Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.199497412Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\PIFEDIT.EXE') |
| 2018-12-17T22:42:15.209385254Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:15.211011885Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:15.220921164Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.22399221Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\PIFEDIT.EXE') |
| 2018-12-17T22:42:15.232205327Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:15.234245161Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:15.235938839Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:15.239079526Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:15.241088803Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:15.251997522Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.263281447Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\PIFEDIT.EXE') |
| 2018-12-17T22:42:15.271488535Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:15.273454594Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:15.276352958Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:15.278311686Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:15.281326898Z | 64 | PC: 147c7 | Write file or device (Write 6 bytes on handle 5) |
| 2018-12-17T22:42:15.285492601Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.293043776Z | 48 | PC: 148ce | Get DOS version |
| 2018-12-17T22:42:15.296144521Z | 61 | PC: 146f4 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:42:15.310436055Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:15.313528701Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:15.328472516Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.333590643Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\PIFEDIT.EXE') |
| 2018-12-17T22:42:15.341791503Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:15.343328357Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:15.352797127Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.360485527Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\PRINTMAN.EXE') |
| 2018-12-17T22:42:15.368994651Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:15.371216304Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:15.372932438Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:15.376485545Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.379576946Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\PRINTMAN.EXE') |
| 2018-12-17T22:42:15.386852938Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:15.390295849Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:15.39658553Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.40117023Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\PRINTMAN.EXE') |
| 2018-12-17T22:42:15.408647325Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:15.41097183Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:15.412695543Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:15.414302Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:15.416885184Z | 63 | PC: 147c7 | Read file or device (Read 6 bytes on handle 5) |
| 2018-12-17T22:42:15.423402392Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.428966139Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\PRINTMAN.EXE') |
| 2018-12-17T22:42:15.437210896Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:15.440983338Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:15.449400938Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.453742816Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\PRINTMAN.EXE') |
| 2018-12-17T22:42:15.461863069Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:15.463457575Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:15.467292687Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:15.468954183Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:15.472977053Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:15.483710266Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.493176178Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\PRINTMAN.EXE') |
| 2018-12-17T22:42:15.500076862Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:15.50253961Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:15.503874754Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:15.506217468Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:15.507977061Z | 64 | PC: 147c7 | Write file or device (Write 6 bytes on handle 5) |
| 2018-12-17T22:42:15.511247543Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.518931844Z | 48 | PC: 148ce | Get DOS version |
| 2018-12-17T22:42:15.520595977Z | 61 | PC: 146f4 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:42:15.528916136Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:15.530192156Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:15.54218774Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.544689008Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\PRINTMAN.EXE') |
| 2018-12-17T22:42:15.556996654Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:15.560169479Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:15.568293795Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.57441885Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\PROGMAN.EXE') |
| 2018-12-17T22:42:15.584000636Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:15.586940217Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:15.589029611Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:15.590961711Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.593873567Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\PROGMAN.EXE') |
| 2018-12-17T22:42:15.600882448Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:15.603019658Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:15.611074232Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.612637619Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\PROGMAN.EXE') |
| 2018-12-17T22:42:15.621787435Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:15.623438608Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:15.626205345Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:15.627637862Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:15.629694718Z | 63 | PC: 147c7 | Read file or device (Read 6 bytes on handle 5) |
| 2018-12-17T22:42:15.634712705Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.637736711Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\PROGMAN.EXE') |
| 2018-12-17T22:42:15.644422146Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:15.647198354Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:15.653265997Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.654860393Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\PROGMAN.EXE') |
| 2018-12-17T22:42:15.662411989Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:15.663440014Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:15.664671096Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:15.666335794Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:15.667580286Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:15.676617188Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.685301502Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\PROGMAN.EXE') |
| 2018-12-17T22:42:15.694336268Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:15.696973841Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:15.69893296Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:15.701801465Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:15.70427947Z | 64 | PC: 147c7 | Write file or device (Write 6 bytes on handle 5) |
| 2018-12-17T22:42:15.710181145Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.717381543Z | 48 | PC: 148ce | Get DOS version |
| 2018-12-17T22:42:15.719593933Z | 61 | PC: 146f4 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:42:15.725339236Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:15.727351924Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:15.734830597Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.736968573Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\PROGMAN.EXE') |
| 2018-12-17T22:42:15.74505427Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:15.746505001Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:15.755833262Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.76072406Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\RECORDER.EXE') |
| 2018-12-17T22:42:15.766897127Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:15.767817922Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:15.769046986Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:15.770176304Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.771709369Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\RECORDER.EXE') |
| 2018-12-17T22:42:15.777190021Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:15.778237789Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:15.783246969Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.78504187Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\RECORDER.EXE') |
| 2018-12-17T22:42:15.789849474Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:15.791048765Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:15.791980546Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:15.793489917Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:15.794618801Z | 63 | PC: 147c7 | Read file or device (Read 6 bytes on handle 5) |
| 2018-12-17T22:42:15.799204395Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.800835571Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\RECORDER.EXE') |
| 2018-12-17T22:42:15.805736909Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:15.806984214Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:15.812337846Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.814220299Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\RECORDER.EXE') |
| 2018-12-17T22:42:15.818812864Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:15.820597921Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:15.821686624Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:15.824429301Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:15.825601219Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:15.833231339Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.839538411Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\RECORDER.EXE') |
| 2018-12-17T22:42:15.844161781Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:15.845791721Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:15.847174479Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:15.849244934Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:15.850332341Z | 64 | PC: 147c7 | Write file or device (Write 6 bytes on handle 5) |
| 2018-12-17T22:42:15.853325192Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.858617384Z | 48 | PC: 148ce | Get DOS version |
| 2018-12-17T22:42:15.859618972Z | 61 | PC: 146f4 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:42:15.865191379Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:15.866389419Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:15.872278292Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.873756268Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\RECORDER.EXE') |
| 2018-12-17T22:42:15.87837339Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:15.879680399Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:15.886025458Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.891662058Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\REGEDIT.EXE') |
| 2018-12-17T22:42:15.896324178Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:15.89815849Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:15.899694318Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:15.900905521Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.902728632Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\REGEDIT.EXE') |
| 2018-12-17T22:42:15.907150622Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:15.909245557Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:15.91350473Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.915498899Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\SMARTDRV.EXE') |
| 2018-12-17T22:42:15.920429445Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:15.921923394Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:15.924401567Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:15.925680262Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.928357112Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\SMARTDRV.EXE') |
| 2018-12-17T22:42:15.933351845Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:15.9350043Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:15.939821035Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.941646494Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\SOUNDREC.EXE') |
| 2018-12-17T22:42:15.946924371Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:15.94805169Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:15.950124721Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:15.951268683Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.953671731Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\SOUNDREC.EXE') |
| 2018-12-17T22:42:15.957984055Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:15.959110375Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:15.963784177Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.965320091Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\WINMINE.EXE') |
| 2018-12-17T22:42:15.977707538Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:15.979518457Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:15.981730791Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:15.982873571Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.984761962Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\WINMINE.EXE') |
| 2018-12-17T22:42:15.989917588Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:15.991083304Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:15.996123724Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:15.997892162Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\WINMINE.EXE') |
| 2018-12-17T22:42:16.002848129Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:16.003994836Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:16.006342074Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:16.009719117Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:16.011566325Z | 63 | PC: 147c7 | Read file or device (Read 6 bytes on handle 5) |
| 2018-12-17T22:42:16.018688786Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:16.021033464Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\WINMINE.EXE') |
| 2018-12-17T22:42:16.02789149Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:16.033643685Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:16.040487886Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:16.043212195Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\WINMINE.EXE') |
| 2018-12-17T22:42:16.049912782Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:16.052049423Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:16.053829283Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:16.055452127Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:16.058556918Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:16.068612993Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:16.077260649Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\WINMINE.EXE') |
| 2018-12-17T22:42:16.084113608Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:16.085827998Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:16.088678179Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:16.090138799Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:16.092368664Z | 64 | PC: 147c7 | Write file or device (Write 6 bytes on handle 5) |
| 2018-12-17T22:42:16.095642509Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:16.10221596Z | 48 | PC: 148ce | Get DOS version |
| 2018-12-17T22:42:16.104937944Z | 61 | PC: 146f4 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:42:16.11287808Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:16.114992696Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:16.120676218Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:16.12304444Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\WINMINE.EXE') |
| 2018-12-17T22:42:16.127937416Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:16.129382546Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:16.1367872Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:16.142306986Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CLOCK.EXE') |
| 2018-12-17T22:42:16.152511223Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:16.15436959Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:16.15624504Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:16.158515515Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:16.160938649Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CLOCK.EXE') |
| 2018-12-17T22:42:16.167966314Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:16.17074099Z | 63 | PC: 147c7 | Read file or device (Read 7 bytes on handle 5) |
| 2018-12-17T22:42:16.17671073Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:16.179753833Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CLOCK.EXE') |
| 2018-12-17T22:42:16.186605032Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:16.189079022Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:16.190841853Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:16.192434672Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:16.194981004Z | 63 | PC: 147c7 | Read file or device (Read 6 bytes on handle 5) |
| 2018-12-17T22:42:16.201357502Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:16.204369967Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CLOCK.EXE') |
| 2018-12-17T22:42:16.212052598Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:16.21347526Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:16.221312043Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:16.223648737Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CLOCK.EXE') |
| 2018-12-17T22:42:16.230996431Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:16.232351263Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:16.233673445Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:16.235450432Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:16.237209983Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:16.246452768Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:16.254159505Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CLOCK.EXE') |
| 2018-12-17T22:42:16.260953493Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:16.262758305Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:16.263992484Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:16.265377035Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:16.267019252Z | 64 | PC: 147c7 | Write file or device (Write 6 bytes on handle 5) |
| 2018-12-17T22:42:16.270459013Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:16.280138553Z | 48 | PC: 148ce | Get DOS version |
| 2018-12-17T22:42:16.282453883Z | 61 | PC: 146f4 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:42:16.290352477Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:16.292013991Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:16.299837659Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:16.303513893Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\CLOCK.EXE') |
| 2018-12-17T22:42:16.310126735Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:16.311911058Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:16.317519251Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:16.322966993Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\TASKMAN.EXE') |
| 2018-12-17T22:42:16.332201527Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:16.333966269Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:16.336521068Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:16.338369338Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:16.341843129Z | 61 | PC: 146f4 | Open file (Filename = 'C:\WINDOWS\WINVER.EXE') |
| 2018-12-17T22:42:16.352664976Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:16.354313086Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:16.357062316Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:16.358651054Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:16.361250475Z | 14 | PC: 149b4 | Set default drive (Drive = 'D') |
| 2018-12-17T22:42:16.362415838Z | 25 | PC: 149b8 | Get default drive |
| 2018-12-17T22:42:16.364038762Z | 14 | PC: 149b4 | Set default drive (Drive = 'D') |
| 2018-12-17T22:42:16.36544486Z | 25 | PC: 149b8 | Get default drive |
| 2018-12-17T22:42:16.36688246Z | 48 | PC: 148ce | Get DOS version |
| 2018-12-17T22:42:16.369743981Z | 61 | PC: 146f4 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:42:16.37505365Z | 66 | PC: 14890 | Move file pointer |
| 2018-12-17T22:42:16.37771702Z | 66 | PC: 1489e | Move file pointer |
| 2018-12-17T22:42:16.378838072Z | 66 | PC: 148ac | Move file pointer |
| 2018-12-17T22:42:16.380176323Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:16.382641518Z | 63 | PC: 147c7 | Read file or device (Read 9520 bytes on handle 5) |
| 2018-12-17T22:42:16.388358724Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:16.393486622Z | 48 | PC: 148ce | Get DOS version |
| 2018-12-17T22:42:16.395117062Z | 61 | PC: 146f4 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:42:16.402163675Z | 66 | PC: 14826 | Move file pointer |
| 2018-12-17T22:42:16.404225585Z | 64 | PC: 147c7 | Write file or device (Write 9520 bytes on handle 5) |
| 2018-12-17T22:42:16.417955001Z | 62 | PC: 14744 | Close file |
| 2018-12-17T22:42:16.426261254Z | 14 | PC: 149b4 | Set default drive (Drive = 'A') |
| 2018-12-17T22:42:16.42738282Z | 25 | PC: 149b8 | Get default drive |
| 2018-12-17T22:42:16.428489614Z | 59 | PC: 14a22 | Change current directory |
| 2018-12-17T22:42:16.433420077Z | 48 | PC: 148ce | Get DOS version |
| 2018-12-17T22:42:16.434827403Z | 53 | PC: 13d81 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate') |
| 2018-12-17T22:42:16.436182685Z | 37 | PC: 13d8a | Set interrupt vector (Interrupt = '0' AKA 'Program terminate') |
| 2018-12-17T22:42:16.437284116Z | 53 | PC: 13d81 | Get interrupt vector (Interrupt = '2' AKA 'Character output') |
| 2018-12-17T22:42:16.438319131Z | 37 | PC: 13d8a | Set interrupt vector (Interrupt = '2' AKA 'Character output') |
| 2018-12-17T22:42:16.440620352Z | 53 | PC: 13d81 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive') |
| 2018-12-17T22:42:16.441815193Z | 37 | PC: 13d8a | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive') |
| 2018-12-17T22:42:16.442945107Z | 53 | PC: 13d81 | Get interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-17T22:42:16.445337375Z | 37 | PC: 13d8a | Set interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-17T22:42:16.446480824Z | 53 | PC: 13d81 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records') |
| 2018-12-17T22:42:16.448025085Z | 37 | PC: 13d8a | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records') |
| 2018-12-17T22:42:16.448950398Z | 53 | PC: 13d81 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:42:16.450420194Z | 37 | PC: 13d8a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:42:16.452207112Z | 53 | PC: 13d81 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer') |
| 2018-12-17T22:42:16.454185864Z | 37 | PC: 13d8a | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer') |
| 2018-12-17T22:42:16.455837597Z | 53 | PC: 13d81 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector') |
| 2018-12-17T22:42:16.456997598Z | 37 | PC: 13d8a | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector') |
| 2018-12-17T22:42:16.45827857Z | 53 | PC: 13d81 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space') |
| 2018-12-17T22:42:16.461087215Z | 37 | PC: 13d8a | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space') |
| 2018-12-17T22:42:16.462443798Z | 53 | PC: 13d81 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character') |
| 2018-12-17T22:42:16.464752627Z | 37 | PC: 13d8a | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character') |
| 2018-12-17T22:42:16.465941875Z | 53 | PC: 13d81 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info') |
| 2018-12-17T22:42:16.467200948Z | 37 | PC: 13d8a | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info') |
| 2018-12-17T22:42:16.469808353Z | 53 | PC: 13d81 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory') |
| 2018-12-17T22:42:16.471075037Z | 37 | PC: 13d8a | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory') |
| 2018-12-17T22:42:16.473181994Z | 53 | PC: 13d81 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory') |
| 2018-12-17T22:42:16.474315091Z | 37 | PC: 13d8a | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory') |
| 2018-12-17T22:42:16.475335384Z | 53 | PC: 13d81 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory') |
| 2018-12-17T22:42:16.477124129Z | 37 | PC: 13d8a | Set interrupt vector (Interrupt = '59' AKA 'Change current directory') |
| 2018-12-17T22:42:16.478477162Z | 53 | PC: 13d81 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file') |
| 2018-12-17T22:42:16.481001695Z | 37 | PC: 13d8a | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file') |
| 2018-12-17T22:42:16.482722917Z | 53 | PC: 13d81 | Get interrupt vector (Interrupt = '61' AKA 'Open file') |
| 2018-12-17T22:42:16.484086768Z | 37 | PC: 13d8a | Set interrupt vector (Interrupt = '61' AKA 'Open file') |
| 2018-12-17T22:42:16.486761697Z | 53 | PC: 13d81 | Get interrupt vector (Interrupt = '62' AKA 'Close file') |
| 2018-12-17T22:42:16.488141463Z | 37 | PC: 13d8a | Set interrupt vector (Interrupt = '62' AKA 'Close file') |
| 2018-12-17T22:42:16.489042042Z | 53 | PC: 13d81 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device') |
| 2018-12-17T22:42:16.490811907Z | 37 | PC: 13d8a | Set interrupt vector (Interrupt = '63' AKA 'Read file or device') |
| 2018-12-17T22:42:16.491759658Z | 53 | PC: 13d81 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!') |
| 2018-12-17T22:42:16.493491288Z | 37 | PC: 13d8a | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!') |
| 2018-12-17T22:42:16.494684019Z | 41 | PC: 13e0a | Parse filename |
| 2018-12-17T22:42:16.495736286Z | 41 | PC: 13e18 | Parse filename |
| 2018-12-17T22:42:16.497544416Z | 75 | PC: 13e23 | Execute program |
| 2018-12-17T22:42:16.51161362Z | 80 | PC: 23d89 | Set current PSP |
| 2018-12-17T22:42:16.513059878Z | 48 | PC: 23d8e | Get DOS version |
| 2018-12-17T22:42:16.514256405Z | 99 | PC: 2a570 | Get DBCS lead byte table pointer |
| 2018-12-17T22:42:16.516045021Z | 101 | PC: 23e14 | Get extended country info |
| 2018-12-17T22:42:16.517913045Z | 99 | PC: 23e1a | Get DBCS lead byte table pointer |
| 2018-12-17T22:42:16.518909485Z | 74 | PC: 23e7c | Reallocate memory |
| 2018-12-17T22:42:16.520808992Z | 25 | PC: 23eb3 | Get default drive |
| 2018-12-17T22:42:16.521727001Z | 37 | PC: 23973 | Set interrupt vector (Interrupt = '34' AKA 'Random write') |
| 2018-12-17T22:42:16.522630956Z | 37 | PC: 2397a | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records') |
| 2018-12-17T22:42:16.524357895Z | 37 | PC: 23981 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:42:16.528108202Z | 74 | PC: 22b1c | Reallocate memory |
| 2018-12-17T22:42:16.530357419Z | 72 | PC: 22b5d | Allocate memory |
| 2018-12-17T22:42:16.531925778Z | 72 | PC: 22b95 | Allocate memory |
| 2018-12-17T22:42:16.53500318Z | 72 | PC: 22b9d | Allocate memory |