Sample viewer

vx.netlux.org/Virus.DOS.HLLP.Irka.5400

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:43:19.283356131Z 53 PC: 139ee | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:43:19.284556386Z 53 PC: 139ee | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:43:19.286394448Z 53 PC: 139ee | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:43:19.287613177Z 53 PC: 139ee | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:43:19.288808242Z 53 PC: 139ee | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:43:19.290957278Z 53 PC: 139ee | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:43:19.292298637Z 53 PC: 139ee | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:43:19.293698356Z 53 PC: 139ee | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:43:19.295523724Z 53 PC: 139ee | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:43:19.296707658Z 53 PC: 139ee | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:43:19.297836328Z 53 PC: 139ee | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:43:19.299558983Z 53 PC: 139ee | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:43:19.300863954Z 53 PC: 139ee | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:43:19.302081721Z 53 PC: 139ee | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:43:19.303761076Z 53 PC: 139ee | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:43:19.304851304Z 53 PC: 139ee | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:43:19.305944166Z 53 PC: 139ee | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:43:19.307204273Z 53 PC: 139ee | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:43:19.30902911Z 53 PC: 139ee | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:43:19.310654924Z 37 PC: 13a03 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:43:19.312194485Z 37 PC: 13a0a | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:43:19.316558471Z 37 PC: 13a11 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:43:19.317823638Z 37 PC: 13a18 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:43:19.319420847Z 68 PC: 13df1 | I/O control for devices (Set for = '')
2018-12-17T22:43:19.461064729Z 37 PC: 13121 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:43:19.463069274Z 48 PC: 142b3 | Get DOS version
2018-12-17T22:43:19.464966036Z 25 PC: 14345 | Get default drive
2018-12-17T22:43:19.466756529Z 71 PC: 14358 | Get current directory
2018-12-17T22:43:19.471491201Z 14 PC: 143a4 | Set default drive (Drive = 'A')
2018-12-17T22:43:19.472785101Z 25 PC: 143a8 | Get default drive
2018-12-17T22:43:19.47477537Z 26 PC: 13705 | Set disk transfer address
2018-12-17T22:43:19.476007424Z 78 PC: 13711 | Find first file
2018-12-17T22:43:19.482493515Z 61 PC: 140e5 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:43:19.490063113Z 66 PC: 14223 | Move file pointer
2018-12-17T22:43:19.492013045Z 63 PC: 141c4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:19.499549429Z 62 PC: 14137 | Close file
2018-12-17T22:43:19.503670991Z 61 PC: 140e5 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:43:19.511471251Z 60 PC: 140e5 | Create or truncate file
2018-12-17T22:43:19.529484362Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:19.538883566Z 64 PC: 141c4 | Write file or device (Write 5395 bytes on handle 6)
2018-12-17T22:43:19.549154807Z 62 PC: 14137 | Close file
2018-12-17T22:43:19.55131264Z 64 PC: 141c4 | Write file or device (Write 5 bytes on handle 6)
2018-12-17T22:43:19.554580527Z 61 PC: 140e5 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:43:19.562499621Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:19.570559499Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:19.580244419Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:19.589474123Z 64 PC: 141c4 | Write file or device (Write 2377 bytes on handle 6)
2018-12-17T22:43:19.598983153Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:19.602162715Z 62 PC: 14137 | Close file
2018-12-17T22:43:19.611821376Z 62 PC: 14137 | Close file
2018-12-17T22:43:19.614301744Z 65 PC: 1423a | Delete file (Filename = 'TEST.EXE')
2018-12-17T22:43:19.627222561Z 86 PC: 1427e | Rename file
2018-12-17T22:43:19.640545254Z 26 PC: 1372b | Set disk transfer address
2018-12-17T22:43:19.642247691Z 79 PC: 13730 | Find next file
2018-12-17T22:43:19.645722427Z 61 PC: 140e5 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:43:19.653211533Z 66 PC: 14223 | Move file pointer
2018-12-17T22:43:19.655740523Z 63 PC: 141c4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:19.663228998Z 62 PC: 14137 | Close file
2018-12-17T22:43:19.665861001Z 26 PC: 1372b | Set disk transfer address
2018-12-17T22:43:19.66943298Z 79 PC: 13730 | Find next file
2018-12-17T22:43:19.67251066Z 26 PC: 13705 | Set disk transfer address
2018-12-17T22:43:19.673944804Z 78 PC: 13711 | Find first file
2018-12-17T22:43:19.681847326Z 61 PC: 140e5 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:43:19.68918659Z 66 PC: 14223 | Move file pointer
2018-12-17T22:43:19.691094313Z 63 PC: 141c4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:19.694753907Z 62 PC: 14137 | Close file
2018-12-17T22:43:19.697591857Z 61 PC: 140e5 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:43:19.704974473Z 60 PC: 140e5 | Create or truncate file
2018-12-17T22:43:19.71864604Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:19.727434126Z 64 PC: 141c4 | Write file or device (Write 5395 bytes on handle 6)
2018-12-17T22:43:19.737244772Z 62 PC: 14137 | Close file
2018-12-17T22:43:19.740364041Z 64 PC: 141c4 | Write file or device (Write 5 bytes on handle 6)
2018-12-17T22:43:19.743936781Z 61 PC: 140e5 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:43:19.751301653Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:19.758625949Z 64 PC: 141c4 | Write file or device (Write 407 bytes on handle 6)
2018-12-17T22:43:19.768525693Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:19.770734231Z 62 PC: 14137 | Close file
2018-12-17T22:43:19.779936645Z 62 PC: 14137 | Close file
2018-12-17T22:43:19.783222336Z 65 PC: 1423a | Delete file (Filename = 'SLEEP.COM')
2018-12-17T22:43:19.795152643Z 86 PC: 1427e | Rename file
2018-12-17T22:43:19.811521146Z 26 PC: 1372b | Set disk transfer address
2018-12-17T22:43:19.813973231Z 79 PC: 13730 | Find next file
2018-12-17T22:43:19.817404505Z 61 PC: 140e5 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:43:19.824653811Z 66 PC: 14223 | Move file pointer
2018-12-17T22:43:19.827087742Z 63 PC: 141c4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:19.828752008Z 62 PC: 14137 | Close file
2018-12-17T22:43:19.830724352Z 61 PC: 140e5 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:43:19.83684587Z 60 PC: 140e5 | Create or truncate file
2018-12-17T22:43:19.846464485Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:19.853369834Z 64 PC: 141c4 | Write file or device (Write 5395 bytes on handle 6)
2018-12-17T22:43:19.861371353Z 62 PC: 14137 | Close file
2018-12-17T22:43:19.863853374Z 64 PC: 141c4 | Write file or device (Write 5 bytes on handle 6)
2018-12-17T22:43:19.866515254Z 61 PC: 140e5 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:43:19.873181073Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:19.879539125Z 64 PC: 141c4 | Write file or device (Write 27 bytes on handle 6)
2018-12-17T22:43:19.882208058Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:19.884646127Z 62 PC: 14137 | Close file
2018-12-17T22:43:19.89354498Z 62 PC: 14137 | Close file
2018-12-17T22:43:19.895510993Z 65 PC: 1423a | Delete file (Filename = 'PRINT.COM')
2018-12-17T22:43:19.906237279Z 86 PC: 1427e | Rename file
2018-12-17T22:43:19.917601272Z 26 PC: 1372b | Set disk transfer address
2018-12-17T22:43:19.919115206Z 79 PC: 13730 | Find next file
2018-12-17T22:43:19.922220178Z 61 PC: 140e5 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:43:19.934731966Z 66 PC: 14223 | Move file pointer
2018-12-17T22:43:19.936207177Z 63 PC: 141c4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:19.938299897Z 62 PC: 14137 | Close file
2018-12-17T22:43:19.941451828Z 61 PC: 140e5 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:43:19.94795434Z 60 PC: 140e5 | Create or truncate file
2018-12-17T22:43:19.958721433Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:19.96615269Z 64 PC: 141c4 | Write file or device (Write 5395 bytes on handle 6)
2018-12-17T22:43:19.97468241Z 62 PC: 14137 | Close file
2018-12-17T22:43:19.976304266Z 64 PC: 141c4 | Write file or device (Write 5 bytes on handle 6)
2018-12-17T22:43:19.979428354Z 61 PC: 140e5 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:43:19.985608071Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:19.990781507Z 64 PC: 141c4 | Write file or device (Write 92 bytes on handle 6)
2018-12-17T22:43:19.994351583Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:19.996610014Z 62 PC: 14137 | Close file
2018-12-17T22:43:20.004647289Z 62 PC: 14137 | Close file
2018-12-17T22:43:20.007632035Z 65 PC: 1423a | Delete file (Filename = 'HELLO.COM')
2018-12-17T22:43:20.019623718Z 86 PC: 1427e | Rename file
2018-12-17T22:43:20.029655609Z 26 PC: 1372b | Set disk transfer address
2018-12-17T22:43:20.030963435Z 79 PC: 13730 | Find next file
2018-12-17T22:43:20.034463149Z 61 PC: 140e5 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:43:20.041373588Z 66 PC: 14223 | Move file pointer
2018-12-17T22:43:20.043289125Z 63 PC: 141c4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:20.047727862Z 62 PC: 14137 | Close file
2018-12-17T22:43:20.050855897Z 61 PC: 140e5 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:43:20.067297347Z 60 PC: 140e5 | Create or truncate file
2018-12-17T22:43:20.082726916Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:20.091470208Z 64 PC: 141c4 | Write file or device (Write 5395 bytes on handle 6)
2018-12-17T22:43:20.101797804Z 62 PC: 14137 | Close file
2018-12-17T22:43:20.105047378Z 64 PC: 141c4 | Write file or device (Write 5 bytes on handle 6)
2018-12-17T22:43:20.108992838Z 61 PC: 140e5 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:43:20.116518302Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:20.124861622Z 64 PC: 141c4 | Write file or device (Write 29 bytes on handle 6)
2018-12-17T22:43:20.129614288Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:20.132295975Z 62 PC: 14137 | Close file
2018-12-17T22:43:20.143272661Z 62 PC: 14137 | Close file
2018-12-17T22:43:20.147089991Z 65 PC: 1423a | Delete file (Filename = 'PHANG.COM')
2018-12-17T22:43:20.158684167Z 86 PC: 1427e | Rename file
2018-12-17T22:43:20.170770758Z 26 PC: 1372b | Set disk transfer address
2018-12-17T22:43:20.172714779Z 79 PC: 13730 | Find next file
2018-12-17T22:43:20.175971385Z 61 PC: 140e5 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:43:20.183954719Z 66 PC: 14223 | Move file pointer
2018-12-17T22:43:20.185822598Z 63 PC: 141c4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:20.187995138Z 62 PC: 14137 | Close file
2018-12-17T22:43:20.190770981Z 61 PC: 140e5 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:43:20.204217556Z 60 PC: 140e5 | Create or truncate file
2018-12-17T22:43:20.216594212Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:20.224757063Z 64 PC: 141c4 | Write file or device (Write 5395 bytes on handle 6)
2018-12-17T22:43:20.234371641Z 62 PC: 14137 | Close file
2018-12-17T22:43:20.236383219Z 64 PC: 141c4 | Write file or device (Write 5 bytes on handle 6)
2018-12-17T22:43:20.239602916Z 61 PC: 140e5 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:43:20.248626855Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:20.256481667Z 64 PC: 141c4 | Write file or device (Write 29 bytes on handle 6)
2018-12-17T22:43:20.260905426Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:20.264402163Z 62 PC: 14137 | Close file
2018-12-17T22:43:20.273485022Z 62 PC: 14137 | Close file
2018-12-17T22:43:20.275742823Z 65 PC: 1423a | Delete file (Filename = 'PRINTA~1.COM')
2018-12-17T22:43:20.288736107Z 86 PC: 1427e | Rename file
2018-12-17T22:43:20.301555804Z 26 PC: 1372b | Set disk transfer address
2018-12-17T22:43:20.303050932Z 79 PC: 13730 | Find next file
2018-12-17T22:43:20.307399239Z 61 PC: 140e5 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:43:20.315226009Z 66 PC: 14223 | Move file pointer
2018-12-17T22:43:20.317128252Z 63 PC: 141c4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:20.32024748Z 62 PC: 14137 | Close file
2018-12-17T22:43:20.323365356Z 61 PC: 140e5 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:43:20.331777556Z 60 PC: 140e5 | Create or truncate file
2018-12-17T22:43:20.344766601Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:20.372935978Z 64 PC: 141c4 | Write file or device (Write 5395 bytes on handle 6)
2018-12-17T22:43:20.383009057Z 62 PC: 14137 | Close file
2018-12-17T22:43:20.385614571Z 64 PC: 141c4 | Write file or device (Write 5 bytes on handle 6)
2018-12-17T22:43:20.390790662Z 61 PC: 140e5 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:43:20.398299876Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:20.405632438Z 64 PC: 141c4 | Write file or device (Write 501 bytes on handle 6)
2018-12-17T22:43:20.415858564Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:20.418520935Z 62 PC: 14137 | Close file
2018-12-17T22:43:20.427648217Z 62 PC: 14137 | Close file
2018-12-17T22:43:20.430212493Z 65 PC: 1423a | Delete file (Filename = 'MANDEL.COM')
2018-12-17T22:43:20.441555077Z 86 PC: 1427e | Rename file
2018-12-17T22:43:20.45465488Z 26 PC: 1372b | Set disk transfer address
2018-12-17T22:43:20.457434992Z 79 PC: 13730 | Find next file
2018-12-17T22:43:20.461137927Z 61 PC: 140e5 | Open file (Filename = 'PAH.COM')
2018-12-17T22:43:20.46859941Z 66 PC: 14223 | Move file pointer
2018-12-17T22:43:20.471776327Z 63 PC: 141c4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:20.474319674Z 62 PC: 14137 | Close file
2018-12-17T22:43:20.477369482Z 61 PC: 140e5 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:43:20.486256353Z 60 PC: 140e5 | Create or truncate file
2018-12-17T22:43:20.498242565Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:20.506496598Z 64 PC: 141c4 | Write file or device (Write 5395 bytes on handle 6)
2018-12-17T22:43:20.517126763Z 62 PC: 14137 | Close file
2018-12-17T22:43:20.520636215Z 64 PC: 141c4 | Write file or device (Write 5 bytes on handle 6)
2018-12-17T22:43:20.524052681Z 61 PC: 140e5 | Open file (Filename = 'PAH.COM')
2018-12-17T22:43:20.532399187Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:20.539996516Z 64 PC: 141c4 | Write file or device (Write 29 bytes on handle 6)
2018-12-17T22:43:20.543419726Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:20.546622261Z 62 PC: 14137 | Close file
2018-12-17T22:43:20.556048224Z 62 PC: 14137 | Close file
2018-12-17T22:43:20.558325562Z 65 PC: 1423a | Delete file (Filename = 'PAH.COM')
2018-12-17T22:43:20.571306973Z 86 PC: 1427e | Rename file
2018-12-17T22:43:20.582259914Z 26 PC: 1372b | Set disk transfer address
2018-12-17T22:43:20.583330174Z 79 PC: 13730 | Find next file
2018-12-17T22:43:20.586593824Z 61 PC: 140e5 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:43:20.592321692Z 66 PC: 14223 | Move file pointer
2018-12-17T22:43:20.593716071Z 63 PC: 141c4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:20.599328993Z 62 PC: 14137 | Close file
2018-12-17T22:43:20.601710265Z 26 PC: 1372b | Set disk transfer address
2018-12-17T22:43:20.60280461Z 79 PC: 13730 | Find next file
2018-12-17T22:43:20.605638944Z 14 PC: 143a4 | Set default drive (Drive = 'C')
2018-12-17T22:43:20.607167014Z 25 PC: 143a8 | Get default drive
2018-12-17T22:43:20.608254316Z 59 PC: 14414 | Change current directory
2018-12-17T22:43:20.613107722Z 26 PC: 13705 | Set disk transfer address
2018-12-17T22:43:20.614525855Z 78 PC: 13711 | Find first file
2018-12-17T22:43:20.621456663Z 61 PC: 140e5 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:43:20.626939099Z 66 PC: 14223 | Move file pointer
2018-12-17T22:43:20.628755781Z 63 PC: 141c4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:20.633568711Z 62 PC: 14137 | Close file
2018-12-17T22:43:20.635808067Z 61 PC: 140e5 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:43:20.64179974Z 60 PC: 140e5 | Create or truncate file
2018-12-17T22:43:20.987729585Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:20.996667202Z 64 PC: 141c4 | Write file or device (Write 5395 bytes on handle 6)
2018-12-17T22:43:21.009960268Z 62 PC: 14137 | Close file
2018-12-17T22:43:21.012642346Z 64 PC: 141c4 | Write file or device (Write 5 bytes on handle 6)
2018-12-17T22:43:21.016676072Z 61 PC: 140e5 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:43:21.02530591Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:21.04256763Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:21.05853492Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:21.067126847Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:21.076747236Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:21.080209107Z 64 PC: 141c4 | Write file or device (Write 408 bytes on handle 6)
2018-12-17T22:43:21.090044901Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:21.09304249Z 62 PC: 14137 | Close file
2018-12-17T22:43:21.101930504Z 62 PC: 14137 | Close file
2018-12-17T22:43:21.105221615Z 65 PC: 1423a | Delete file (Filename = 'ATTRIB.EXE')
2018-12-17T22:43:21.117287287Z 86 PC: 1427e | Rename file
2018-12-17T22:43:21.129289028Z 26 PC: 1372b | Set disk transfer address
2018-12-17T22:43:21.132268734Z 79 PC: 13730 | Find next file
2018-12-17T22:43:21.138369793Z 61 PC: 140e5 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:43:21.148305083Z 66 PC: 14223 | Move file pointer
2018-12-17T22:43:21.151063023Z 63 PC: 141c4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:21.160755507Z 62 PC: 14137 | Close file
2018-12-17T22:43:21.163561247Z 61 PC: 140e5 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:43:21.182977745Z 60 PC: 140e5 | Create or truncate file
2018-12-17T22:43:21.195830173Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:21.204206095Z 64 PC: 141c4 | Write file or device (Write 5395 bytes on handle 6)
2018-12-17T22:43:21.214353814Z 62 PC: 14137 | Close file
2018-12-17T22:43:21.217896718Z 64 PC: 141c4 | Write file or device (Write 5 bytes on handle 6)
2018-12-17T22:43:21.221530814Z 61 PC: 140e5 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:43:21.230169037Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:21.239004552Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:21.249461994Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:21.262918156Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:21.273424408Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:21.280946717Z 64 PC: 141c4 | Write file or device (Write 1441 bytes on handle 6)
2018-12-17T22:43:21.29130431Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:21.294151858Z 62 PC: 14137 | Close file
2018-12-17T22:43:21.302458209Z 62 PC: 14137 | Close file
2018-12-17T22:43:21.306058892Z 65 PC: 1423a | Delete file (Filename = 'CHKDSK.EXE')
2018-12-17T22:43:21.321892389Z 86 PC: 1427e | Rename file
2018-12-17T22:43:21.33501181Z 26 PC: 1372b | Set disk transfer address
2018-12-17T22:43:21.336717414Z 79 PC: 13730 | Find next file
2018-12-17T22:43:21.341781034Z 61 PC: 140e5 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:43:21.347523199Z 66 PC: 14223 | Move file pointer
2018-12-17T22:43:21.348847176Z 63 PC: 141c4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:21.356062777Z 62 PC: 14137 | Close file
2018-12-17T22:43:21.358001288Z 61 PC: 140e5 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:43:21.363397934Z 60 PC: 140e5 | Create or truncate file
2018-12-17T22:43:21.375479165Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:21.383715304Z 64 PC: 141c4 | Write file or device (Write 5395 bytes on handle 6)
2018-12-17T22:43:21.392614397Z 62 PC: 14137 | Close file
2018-12-17T22:43:21.396088903Z 64 PC: 141c4 | Write file or device (Write 5 bytes on handle 6)
2018-12-17T22:43:21.399559832Z 61 PC: 140e5 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:43:21.406989917Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:21.418286164Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:21.426751954Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:21.434707366Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:21.445774Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:21.458811757Z 64 PC: 141c4 | Write file or device (Write 4918 bytes on handle 6)
2018-12-17T22:43:21.47256072Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:21.475939186Z 62 PC: 14137 | Close file
2018-12-17T22:43:21.485101093Z 62 PC: 14137 | Close file
2018-12-17T22:43:21.487171422Z 65 PC: 1423a | Delete file (Filename = 'DEBUG.EXE')
2018-12-17T22:43:21.500414615Z 86 PC: 1427e | Rename file
2018-12-17T22:43:21.513455107Z 26 PC: 1372b | Set disk transfer address
2018-12-17T22:43:21.515336842Z 79 PC: 13730 | Find next file
2018-12-17T22:43:21.520510779Z 61 PC: 140e5 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:43:21.529897949Z 66 PC: 14223 | Move file pointer
2018-12-17T22:43:21.531927972Z 63 PC: 141c4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:21.546324982Z 62 PC: 14137 | Close file
2018-12-17T22:43:21.549456865Z 61 PC: 140e5 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:43:21.557610498Z 60 PC: 140e5 | Create or truncate file
2018-12-17T22:43:21.571809567Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:21.580257403Z 64 PC: 141c4 | Write file or device (Write 5395 bytes on handle 6)
2018-12-17T22:43:21.589646347Z 62 PC: 14137 | Close file
2018-12-17T22:43:21.596570442Z 64 PC: 141c4 | Write file or device (Write 5 bytes on handle 6)
2018-12-17T22:43:21.599721981Z 61 PC: 140e5 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:43:21.607304683Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:21.62223835Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:21.632932085Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:21.642266577Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:21.652163425Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:21.660378644Z 64 PC: 141c4 | Write file or device (Write 5329 bytes on handle 6)
2018-12-17T22:43:21.671092387Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:21.67375098Z 62 PC: 14137 | Close file
2018-12-17T22:43:21.6818065Z 62 PC: 14137 | Close file
2018-12-17T22:43:21.685311592Z 65 PC: 1423a | Delete file (Filename = 'EXPAND.EXE')
2018-12-17T22:43:21.697805439Z 86 PC: 1427e | Rename file
2018-12-17T22:43:21.710421804Z 26 PC: 1372b | Set disk transfer address
2018-12-17T22:43:21.711874573Z 79 PC: 13730 | Find next file
2018-12-17T22:43:21.715036542Z 61 PC: 140e5 | Open file (Filename = 'FDISK.EXE')
2018-12-17T22:43:21.720881338Z 66 PC: 14223 | Move file pointer
2018-12-17T22:43:21.723348011Z 63 PC: 141c4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:21.72820828Z 62 PC: 14137 | Close file
2018-12-17T22:43:21.730666968Z 61 PC: 140e5 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:43:21.736805377Z 60 PC: 140e5 | Create or truncate file
2018-12-17T22:43:21.747098048Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:21.753773736Z 64 PC: 141c4 | Write file or device (Write 5395 bytes on handle 6)
2018-12-17T22:43:21.7644779Z 62 PC: 14137 | Close file
2018-12-17T22:43:21.767269253Z 64 PC: 141c4 | Write file or device (Write 5 bytes on handle 6)
2018-12-17T22:43:21.770428226Z 61 PC: 140e5 | Open file (Filename = 'FDISK.EXE')
2018-12-17T22:43:21.778715962Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:21.787084319Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:21.796606784Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:21.807713274Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:21.815902615Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:21.82356717Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:21.833911469Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:21.840990625Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:21.848546646Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:21.856671385Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:21.864609354Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:21.870681068Z 64 PC: 141c4 | Write file or device (Write 2336 bytes on handle 6)
2018-12-17T22:43:21.87871103Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:21.881002303Z 62 PC: 14137 | Close file
2018-12-17T22:43:21.889203076Z 62 PC: 14137 | Close file
2018-12-17T22:43:21.891408408Z 65 PC: 1423a | Delete file (Filename = 'FDISK.EXE')
2018-12-17T22:43:21.900415214Z 86 PC: 1427e | Rename file
2018-12-17T22:43:21.909670817Z 26 PC: 1372b | Set disk transfer address
2018-12-17T22:43:21.9114878Z 79 PC: 13730 | Find next file
2018-12-17T22:43:21.914701486Z 61 PC: 140e5 | Open file (Filename = 'MEM.EXE')
2018-12-17T22:43:21.922080685Z 66 PC: 14223 | Move file pointer
2018-12-17T22:43:21.925118992Z 63 PC: 141c4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:21.931760315Z 62 PC: 14137 | Close file
2018-12-17T22:43:21.934557289Z 61 PC: 140e5 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:43:21.944420944Z 60 PC: 140e5 | Create or truncate file
2018-12-17T22:43:21.955298173Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:21.962092024Z 64 PC: 141c4 | Write file or device (Write 5395 bytes on handle 6)
2018-12-17T22:43:21.97026809Z 62 PC: 14137 | Close file
2018-12-17T22:43:21.972420031Z 64 PC: 141c4 | Write file or device (Write 5 bytes on handle 6)
2018-12-17T22:43:21.975328574Z 61 PC: 140e5 | Open file (Filename = 'MEM.EXE')
2018-12-17T22:43:21.982381991Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:21.989019157Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:21.997091018Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.004283396Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:22.013566391Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.025475709Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:22.035168223Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.042467332Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:22.050731443Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.059031683Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:22.06732539Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.075277815Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:22.084652172Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.087542611Z 64 PC: 141c4 | Write file or device (Write 102 bytes on handle 6)
2018-12-17T22:43:22.094140653Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.097393974Z 62 PC: 14137 | Close file
2018-12-17T22:43:22.104399732Z 62 PC: 14137 | Close file
2018-12-17T22:43:22.106212987Z 65 PC: 1423a | Delete file (Filename = 'MEM.EXE')
2018-12-17T22:43:22.115139813Z 86 PC: 1427e | Rename file
2018-12-17T22:43:22.124302603Z 26 PC: 1372b | Set disk transfer address
2018-12-17T22:43:22.125593006Z 79 PC: 13730 | Find next file
2018-12-17T22:43:22.129177138Z 61 PC: 140e5 | Open file (Filename = 'NLSFUNC.EXE')
2018-12-17T22:43:22.135591064Z 66 PC: 14223 | Move file pointer
2018-12-17T22:43:22.13804864Z 63 PC: 141c4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:22.14481056Z 62 PC: 14137 | Close file
2018-12-17T22:43:22.14728097Z 61 PC: 140e5 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:43:22.154617659Z 60 PC: 140e5 | Create or truncate file
2018-12-17T22:43:22.165092994Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.171993925Z 64 PC: 141c4 | Write file or device (Write 5395 bytes on handle 6)
2018-12-17T22:43:22.180555856Z 62 PC: 14137 | Close file
2018-12-17T22:43:22.183024833Z 64 PC: 141c4 | Write file or device (Write 5 bytes on handle 6)
2018-12-17T22:43:22.186235092Z 61 PC: 140e5 | Open file (Filename = 'NLSFUNC.EXE')
2018-12-17T22:43:22.193779311Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.201275871Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:22.210516046Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.217941302Z 64 PC: 141c4 | Write file or device (Write 1636 bytes on handle 6)
2018-12-17T22:43:22.228554415Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.230831031Z 62 PC: 14137 | Close file
2018-12-17T22:43:22.238898904Z 62 PC: 14137 | Close file
2018-12-17T22:43:22.240803821Z 65 PC: 1423a | Delete file (Filename = 'NLSFUNC.EXE')
2018-12-17T22:43:22.251363104Z 86 PC: 1427e | Rename file
2018-12-17T22:43:22.263229802Z 26 PC: 1372b | Set disk transfer address
2018-12-17T22:43:22.264378028Z 79 PC: 13730 | Find next file
2018-12-17T22:43:22.267960797Z 61 PC: 140e5 | Open file (Filename = 'QBASIC.EXE')
2018-12-17T22:43:22.276450852Z 66 PC: 14223 | Move file pointer
2018-12-17T22:43:22.278434578Z 63 PC: 141c4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:22.284794183Z 62 PC: 14137 | Close file
2018-12-17T22:43:22.288209978Z 61 PC: 140e5 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:43:22.295208343Z 60 PC: 140e5 | Create or truncate file
2018-12-17T22:43:22.305214034Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.312894911Z 64 PC: 141c4 | Write file or device (Write 5395 bytes on handle 6)
2018-12-17T22:43:22.32100339Z 62 PC: 14137 | Close file
2018-12-17T22:43:22.323019236Z 64 PC: 141c4 | Write file or device (Write 5 bytes on handle 6)
2018-12-17T22:43:22.326740095Z 61 PC: 140e5 | Open file (Filename = 'QBASIC.EXE')
2018-12-17T22:43:22.333648579Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.341927128Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:22.351172252Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.35830035Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:22.367178224Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.376292111Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:22.386305979Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.394565111Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:22.405663385Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.414244032Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:22.42341133Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.432920309Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:22.442367001Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.450215923Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:22.462518279Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.471392406Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:22.480716348Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.489400779Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:22.498871616Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.507155876Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:22.518025802Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.526875562Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:22.536950686Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.545777464Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:22.554938189Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.563807497Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:22.573276933Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.580363583Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:22.589508297Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.596939655Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:22.605102316Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.612922764Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:22.621444018Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.628358244Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:22.637149556Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.645620947Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:22.65561118Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.66460387Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:22.674967334Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.68309008Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:22.693386138Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.701385021Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:22.711147066Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.721748968Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:22.729256018Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.735598891Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:22.745811472Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.754322216Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:22.769183097Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.779458737Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:22.790250636Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.804967306Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:22.820130114Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.828798065Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:22.840668599Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.849878978Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:22.860397183Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.869996031Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:22.880288632Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.891585079Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:22.903754836Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.911849399Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:22.922279178Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.932088592Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:22.944286411Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.953191576Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:22.963027861Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.971694148Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:22.980524182Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:22.986247461Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:22.995612741Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:23.006284714Z 64 PC: 141c4 | Write file or device (Write 5309 bytes on handle 6)
2018-12-17T22:43:23.017602291Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:23.021171725Z 62 PC: 14137 | Close file
2018-12-17T22:43:23.031080986Z 62 PC: 14137 | Close file
2018-12-17T22:43:23.0333992Z 65 PC: 1423a | Delete file (Filename = 'QBASIC.EXE')
2018-12-17T22:43:23.045810981Z 86 PC: 1427e | Rename file
2018-12-17T22:43:23.058439851Z 26 PC: 1372b | Set disk transfer address
2018-12-17T22:43:23.059855089Z 79 PC: 13730 | Find next file
2018-12-17T22:43:23.063516025Z 61 PC: 140e5 | Open file (Filename = 'REPLACE.EXE')
2018-12-17T22:43:23.071703211Z 66 PC: 14223 | Move file pointer
2018-12-17T22:43:23.073790562Z 63 PC: 141c4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:23.080790499Z 62 PC: 14137 | Close file
2018-12-17T22:43:23.085435343Z 61 PC: 140e5 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:43:23.093761221Z 60 PC: 140e5 | Create or truncate file
2018-12-17T22:43:23.107525011Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:23.117218457Z 64 PC: 141c4 | Write file or device (Write 5395 bytes on handle 6)
2018-12-17T22:43:23.127601007Z 62 PC: 14137 | Close file
2018-12-17T22:43:23.131200307Z 64 PC: 141c4 | Write file or device (Write 5 bytes on handle 6)
2018-12-17T22:43:23.135453144Z 61 PC: 140e5 | Open file (Filename = 'REPLACE.EXE')
2018-12-17T22:43:23.144414235Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:23.154812565Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:23.456015906Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:23.466359513Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:23.478636291Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:23.488617958Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:23.498339978Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:23.507558502Z 64 PC: 141c4 | Write file or device (Write 4074 bytes on handle 6)
2018-12-17T22:43:23.516833492Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:23.519263005Z 62 PC: 14137 | Close file
2018-12-17T22:43:23.528839371Z 62 PC: 14137 | Close file
2018-12-17T22:43:23.531066764Z 65 PC: 1423a | Delete file (Filename = 'REPLACE.EXE')
2018-12-17T22:43:23.54245849Z 86 PC: 1427e | Rename file
2018-12-17T22:43:23.556888151Z 26 PC: 1372b | Set disk transfer address
2018-12-17T22:43:23.558087163Z 79 PC: 13730 | Find next file
2018-12-17T22:43:23.561885607Z 61 PC: 140e5 | Open file (Filename = 'RESTORE.EXE')
2018-12-17T22:43:23.570218789Z 66 PC: 14223 | Move file pointer
2018-12-17T22:43:23.571781213Z 63 PC: 141c4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:23.578396688Z 62 PC: 14137 | Close file
2018-12-17T22:43:23.582037656Z 61 PC: 140e5 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:43:23.590198263Z 60 PC: 140e5 | Create or truncate file
2018-12-17T22:43:23.602744076Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:23.611189428Z 64 PC: 141c4 | Write file or device (Write 5395 bytes on handle 6)
2018-12-17T22:43:23.620271556Z 62 PC: 14137 | Close file
2018-12-17T22:43:23.623516751Z 64 PC: 141c4 | Write file or device (Write 5 bytes on handle 6)
2018-12-17T22:43:23.627434589Z 61 PC: 140e5 | Open file (Filename = 'RESTORE.EXE')
2018-12-17T22:43:23.635000159Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:23.644177335Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:23.654533275Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:23.663273461Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:23.672300545Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:23.67801644Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:23.685133678Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:23.692539938Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:23.702243673Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:23.711013645Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:23.721637358Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:23.72984346Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:23.739942638Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:23.748797239Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:23.758201502Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:23.765722938Z 64 PC: 141c4 | Write file or device (Write 542 bytes on handle 6)
2018-12-17T22:43:23.772952527Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:23.776224271Z 62 PC: 14137 | Close file
2018-12-17T22:43:23.785928487Z 62 PC: 14137 | Close file
2018-12-17T22:43:23.788066854Z 65 PC: 1423a | Delete file (Filename = 'RESTORE.EXE')
2018-12-17T22:43:23.799706766Z 86 PC: 1427e | Rename file
2018-12-17T22:43:23.813222691Z 26 PC: 1372b | Set disk transfer address
2018-12-17T22:43:23.814771039Z 79 PC: 13730 | Find next file
2018-12-17T22:43:23.819683435Z 61 PC: 140e5 | Open file (Filename = 'SCANDISK.EXE')
2018-12-17T22:43:23.827679403Z 66 PC: 14223 | Move file pointer
2018-12-17T22:43:23.829616501Z 63 PC: 141c4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:23.837146484Z 62 PC: 14137 | Close file
2018-12-17T22:43:23.840399463Z 61 PC: 140e5 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:43:23.848791144Z 60 PC: 140e5 | Create or truncate file
2018-12-17T22:43:23.861698297Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:23.870111177Z 64 PC: 141c4 | Write file or device (Write 5395 bytes on handle 6)
2018-12-17T22:43:23.880286147Z 62 PC: 14137 | Close file
2018-12-17T22:43:23.882829144Z 64 PC: 141c4 | Write file or device (Write 5 bytes on handle 6)
2018-12-17T22:43:23.886551785Z 61 PC: 140e5 | Open file (Filename = 'SCANDISK.EXE')
2018-12-17T22:43:23.895434969Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:23.904877003Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:23.916399855Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:23.925641022Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:23.935064159Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:23.943243432Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:23.953920535Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:23.962254618Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:23.97421382Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:23.983641797Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:23.994277172Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:24.003885728Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:24.012570149Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:24.020605761Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:24.033190026Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:24.041730577Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:24.051753462Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:24.061072224Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:24.071776609Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:24.080741056Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:24.09048728Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:24.099988736Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:24.110668996Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:24.118905975Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:24.128592088Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:24.13869339Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:24.148343805Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:24.158720053Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:24.169023375Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:24.177338161Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:24.18810346Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:24.196985703Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:24.206513217Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:24.215987511Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:24.230049382Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:24.238486839Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:24.249435542Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:24.258296675Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:24.268957298Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:24.277055347Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:24.287037535Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:24.29608078Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:24.306061706Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:24.314408222Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:24.326052392Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:24.333903648Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:24.344296938Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:24.347891309Z 64 PC: 141c4 | Write file or device (Write 62 bytes on handle 6)
2018-12-17T22:43:24.351597991Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:24.3589715Z 62 PC: 14137 | Close file
2018-12-17T22:43:24.367042979Z 62 PC: 14137 | Close file
2018-12-17T22:43:24.369204519Z 65 PC: 1423a | Delete file (Filename = 'SCANDISK.EXE')
2018-12-17T22:43:24.381384234Z 86 PC: 1427e | Rename file
2018-12-17T22:43:24.393522893Z 26 PC: 1372b | Set disk transfer address
2018-12-17T22:43:24.395227404Z 79 PC: 13730 | Find next file
2018-12-17T22:43:24.400661991Z 61 PC: 140e5 | Open file (Filename = 'SETUP.EXE')
2018-12-17T22:43:24.408181404Z 66 PC: 14223 | Move file pointer
2018-12-17T22:43:24.410919947Z 63 PC: 141c4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:24.418970778Z 62 PC: 14137 | Close file
2018-12-17T22:43:24.421775727Z 61 PC: 140e5 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:43:24.430478391Z 60 PC: 140e5 | Create or truncate file
2018-12-17T22:43:24.442637979Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:24.450472624Z 64 PC: 141c4 | Write file or device (Write 5395 bytes on handle 6)
2018-12-17T22:43:24.460601117Z 62 PC: 14137 | Close file
2018-12-17T22:43:24.462865029Z 64 PC: 141c4 | Write file or device (Write 5 bytes on handle 6)
2018-12-17T22:43:24.467192336Z 61 PC: 140e5 | Open file (Filename = 'SETUP.EXE')
2018-12-17T22:43:24.475016351Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:24.483603429Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:24.493955191Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:24.502450357Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:24.512297051Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:24.522167008Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:24.5318051Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:24.539975576Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:24.550693877Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:24.558956224Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:24.568927733Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:24.577102527Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:24.586325268Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:24.595007094Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:24.605790938Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:24.614624329Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:24.624820479Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:24.632993249Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:24.643529908Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:24.65187402Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:24.661241915Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:24.670435993Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:24.679593612Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:24.688178937Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:24.697751786Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:24.705970112Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:24.715960886Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:24.723322382Z 64 PC: 141c4 | Write file or device (Write 2642 bytes on handle 6)
2018-12-17T22:43:24.732487085Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:24.734622275Z 62 PC: 14137 | Close file
2018-12-17T22:43:24.740384637Z 62 PC: 14137 | Close file
2018-12-17T22:43:24.74272864Z 65 PC: 1423a | Delete file (Filename = 'SETUP.EXE')
2018-12-17T22:43:24.751403273Z 86 PC: 1427e | Rename file
2018-12-17T22:43:24.764122862Z 26 PC: 1372b | Set disk transfer address
2018-12-17T22:43:24.766771477Z 79 PC: 13730 | Find next file
2018-12-17T22:43:24.771495239Z 26 PC: 1372b | Set disk transfer address
2018-12-17T22:43:24.773180514Z 79 PC: 13730 | Find next file
2018-12-17T22:43:24.778089514Z 26 PC: 1372b | Set disk transfer address
2018-12-17T22:43:24.77921613Z 79 PC: 13730 | Find next file
2018-12-17T22:43:24.782913254Z 26 PC: 1372b | Set disk transfer address
2018-12-17T22:43:24.784230628Z 79 PC: 13730 | Find next file
2018-12-17T22:43:24.787286317Z 26 PC: 1372b | Set disk transfer address
2018-12-17T22:43:24.78917236Z 79 PC: 13730 | Find next file
2018-12-17T22:43:24.792668055Z 26 PC: 1372b | Set disk transfer address
2018-12-17T22:43:24.794067082Z 79 PC: 13730 | Find next file
2018-12-17T22:43:24.79763839Z 26 PC: 13705 | Set disk transfer address
2018-12-17T22:43:24.799476282Z 78 PC: 13711 | Find first file
2018-12-17T22:43:24.805229707Z 26 PC: 1372b | Set disk transfer address
2018-12-17T22:43:24.806300659Z 79 PC: 13730 | Find next file
2018-12-17T22:43:24.809053159Z 26 PC: 1372b | Set disk transfer address
2018-12-17T22:43:24.810723686Z 79 PC: 13730 | Find next file
2018-12-17T22:43:24.813325763Z 26 PC: 1372b | Set disk transfer address
2018-12-17T22:43:24.815174646Z 79 PC: 13730 | Find next file
2018-12-17T22:43:24.818017245Z 26 PC: 1372b | Set disk transfer address
2018-12-17T22:43:24.819147869Z 79 PC: 13730 | Find next file
2018-12-17T22:43:24.82254022Z 14 PC: 143a4 | Set default drive (Drive = 'A')
2018-12-17T22:43:24.823758859Z 25 PC: 143a8 | Get default drive
2018-12-17T22:43:24.825502825Z 59 PC: 14414 | Change current directory
2018-12-17T22:43:24.828838539Z 48 PC: 142b3 | Get DOS version
2018-12-17T22:43:24.830221907Z 61 PC: 140e5 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:43:24.836781167Z 60 PC: 140e5 | Create or truncate file
2018-12-17T22:43:24.849565658Z 66 PC: 14223 | Move file pointer
2018-12-17T22:43:24.854134059Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:24.862107244Z 64 PC: 141c4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:24.871701052Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:24.880861026Z 64 PC: 141c4 | Write file or device (Write 2377 bytes on handle 6)
2018-12-17T22:43:24.890326033Z 63 PC: 141c4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:24.892747551Z 62 PC: 14137 | Close file
2018-12-17T22:43:24.896202049Z 62 PC: 14137 | Close file
2018-12-17T22:43:24.904889976Z 53 PC: 13948 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:43:24.907441298Z 37 PC: 13951 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:43:24.909315579Z 53 PC: 13948 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:43:24.910884766Z 37 PC: 13951 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:43:24.913483687Z 53 PC: 13948 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:43:24.915089433Z 37 PC: 13951 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:43:24.916813311Z 53 PC: 13948 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:43:24.919364583Z 37 PC: 13951 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:43:24.920915706Z 53 PC: 13948 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:43:24.923186801Z 37 PC: 13951 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:43:24.924489949Z 53 PC: 13948 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:43:24.925767128Z 37 PC: 13951 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:43:24.927984903Z 53 PC: 13948 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:43:24.929251151Z 37 PC: 13951 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:43:24.931314687Z 53 PC: 13948 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:43:24.932681093Z 37 PC: 13951 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:43:24.933907176Z 53 PC: 13948 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:43:24.936258071Z 37 PC: 13951 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:43:24.938306118Z 53 PC: 13948 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:43:24.939815823Z 37 PC: 13951 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:43:24.941753883Z 53 PC: 13948 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:43:24.943052582Z 37 PC: 13951 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:43:24.946787608Z 53 PC: 13948 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:43:24.948249543Z 37 PC: 13951 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:43:24.949903039Z 53 PC: 13948 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:43:24.952090998Z 37 PC: 13951 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:43:24.953570828Z 53 PC: 13948 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:43:24.95568037Z 37 PC: 13951 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:43:24.957104234Z 53 PC: 13948 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:43:24.959269851Z 37 PC: 13951 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:43:24.961271801Z 53 PC: 13948 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:43:24.962520667Z 37 PC: 13951 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:43:24.96477428Z 53 PC: 13948 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:43:24.966343377Z 37 PC: 13951 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:43:24.967893277Z 53 PC: 13948 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:43:24.970165034Z 37 PC: 13951 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:43:24.971428968Z 53 PC: 13948 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:43:24.973555583Z 37 PC: 13951 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:43:24.975591967Z 41 PC: 138fd | Parse filename
2018-12-17T22:43:24.977424459Z 41 PC: 1390b | Parse filename
2018-12-17T22:43:24.979701285Z 75 PC: 13916 | Execute program
2018-12-17T22:43:24.996455973Z 53 PC: 1dfde | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:43:24.99903124Z 53 PC: 1dfde | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:43:25.000403367Z 53 PC: 1dfde | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:43:25.00193292Z 53 PC: 1dfde | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:43:25.004533925Z 53 PC: 1dfde | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:43:25.006065621Z 53 PC: 1dfde | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:43:25.007542415Z 53 PC: 1dfde | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:43:25.009571467Z 53 PC: 1dfde | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:43:25.011445456Z 53 PC: 1dfde | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:43:25.013380109Z 53 PC: 1dfde | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:43:25.014864237Z 53 PC: 1dfde | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:43:25.016411904Z 53 PC: 1dfde | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:43:25.018796352Z 53 PC: 1dfde | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:43:25.020971427Z 53 PC: 1dfde | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:43:25.023394658Z 53 PC: 1dfde | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:43:25.024750595Z 53 PC: 1dfde | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:43:25.026067969Z 53 PC: 1dfde | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:43:25.028342301Z 53 PC: 1dfde | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:43:25.029521927Z 53 PC: 1dfde | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:43:25.030980867Z 37 PC: 1dff3 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:43:25.032732046Z 37 PC: 1dffa | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:43:25.033915278Z 37 PC: 1e001 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:43:25.036281703Z 37 PC: 1e008 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:43:25.038344597Z 68 PC: 1e3e1 | I/O control for devices (Set for = '�@')
2018-12-17T22:43:25.211905954Z 37 PC: 1d711 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:43:25.214796584Z 48 PC: 1e8a3 | Get DOS version
2018-12-17T22:43:25.216402009Z 25 PC: 1dd7f | Get default drive
2018-12-17T22:43:25.219061945Z 71 PC: 1dd9e | Get current directory
2018-12-17T22:43:25.222464415Z 25 PC: 1e935 | Get default drive
2018-12-17T22:43:25.223625125Z 71 PC: 1e948 | Get current directory
2018-12-17T22:43:25.228722329Z 14 PC: 1e994 | Set default drive (Drive = 'A')
2018-12-17T22:43:25.230402354Z 25 PC: 1e998 | Get default drive
2018-12-17T22:43:25.232189911Z 26 PC: 1dcf5 | Set disk transfer address
2018-12-17T22:43:25.233869997Z 78 PC: 1dd01 | Find first file
2018-12-17T22:43:25.240473048Z 61 PC: 1e6d5 | Open file (Filename = 'IRKA1ABC.EXE')
2018-12-17T22:43:25.248758189Z 66 PC: 1e813 | Move file pointer
2018-12-17T22:43:25.250360649Z 63 PC: 1e7b4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:25.259099442Z 62 PC: 1e727 | Close file
2018-12-17T22:43:25.261713802Z 61 PC: 1e6d5 | Open file (Filename = 'A:\IRKA1ABC.EXE')
2018-12-17T22:43:25.268940756Z 60 PC: 1e6d5 | Create or truncate file
2018-12-17T22:43:25.281602306Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:25.290127698Z 64 PC: 1e7b4 | Write file or device (Write 5395 bytes on handle 6)
2018-12-17T22:43:25.299681602Z 62 PC: 1e727 | Close file
2018-12-17T22:43:25.303639395Z 64 PC: 1e7b4 | Write file or device (Write 5 bytes on handle 6)
2018-12-17T22:43:25.30915791Z 61 PC: 1e6d5 | Open file (Filename = 'IRKA1ABC.EXE')
2018-12-17T22:43:25.317052618Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:25.326607543Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:25.337171965Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:25.346163523Z 64 PC: 1e7b4 | Write file or device (Write 2377 bytes on handle 6)
2018-12-17T22:43:25.356459821Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:25.360248637Z 62 PC: 1e727 | Close file
2018-12-17T22:43:25.369094331Z 62 PC: 1e727 | Close file
2018-12-17T22:43:25.371486053Z 65 PC: 1e82a | Delete file (Filename = 'IRKA1ABC.EXE')
2018-12-17T22:43:25.384650338Z 86 PC: 1e86e | Rename file
2018-12-17T22:43:25.397380197Z 26 PC: 1dd1b | Set disk transfer address
2018-12-17T22:43:25.399159007Z 79 PC: 1dd20 | Find next file
2018-12-17T22:43:25.404741863Z 61 PC: 1e6d5 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:43:25.417041915Z 66 PC: 1e813 | Move file pointer
2018-12-17T22:43:25.42060149Z 63 PC: 1e7b4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:25.428429803Z 62 PC: 1e727 | Close file
2018-12-17T22:43:25.432567635Z 26 PC: 1dd1b | Set disk transfer address
2018-12-17T22:43:25.435490715Z 79 PC: 1dd20 | Find next file
2018-12-17T22:43:25.443044762Z 61 PC: 1e6d5 | Open file (Filename = 'IRKA1ABC.EXE')
2018-12-17T22:43:25.450492089Z 66 PC: 1e813 | Move file pointer
2018-12-17T22:43:25.452509899Z 63 PC: 1e7b4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:25.460388948Z 62 PC: 1e727 | Close file
2018-12-17T22:43:25.464672042Z 26 PC: 1dd1b | Set disk transfer address
2018-12-17T22:43:25.466122857Z 79 PC: 1dd20 | Find next file
2018-12-17T22:43:25.469838826Z 26 PC: 1dcf5 | Set disk transfer address
2018-12-17T22:43:25.471712345Z 78 PC: 1dd01 | Find first file
2018-12-17T22:43:25.478420444Z 61 PC: 1e6d5 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:43:25.48801818Z 66 PC: 1e813 | Move file pointer
2018-12-17T22:43:25.490056729Z 63 PC: 1e7b4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:25.498831008Z 62 PC: 1e727 | Close file
2018-12-17T22:43:25.503238246Z 26 PC: 1dd1b | Set disk transfer address
2018-12-17T22:43:25.504810359Z 79 PC: 1dd20 | Find next file
2018-12-17T22:43:25.509274613Z 61 PC: 1e6d5 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:43:25.516488322Z 66 PC: 1e813 | Move file pointer
2018-12-17T22:43:25.518281169Z 63 PC: 1e7b4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:25.527861903Z 62 PC: 1e727 | Close file
2018-12-17T22:43:25.530251561Z 26 PC: 1dd1b | Set disk transfer address
2018-12-17T22:43:25.532180264Z 79 PC: 1dd20 | Find next file
2018-12-17T22:43:25.535389301Z 61 PC: 1e6d5 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:43:25.542446366Z 66 PC: 1e813 | Move file pointer
2018-12-17T22:43:25.544507677Z 63 PC: 1e7b4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:25.551773453Z 62 PC: 1e727 | Close file
2018-12-17T22:43:25.554506436Z 26 PC: 1dd1b | Set disk transfer address
2018-12-17T22:43:25.555973782Z 79 PC: 1dd20 | Find next file
2018-12-17T22:43:25.55979039Z 61 PC: 1e6d5 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:43:25.568194345Z 66 PC: 1e813 | Move file pointer
2018-12-17T22:43:25.570121935Z 63 PC: 1e7b4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:25.578574349Z 62 PC: 1e727 | Close file
2018-12-17T22:43:25.580603831Z 26 PC: 1dd1b | Set disk transfer address
2018-12-17T22:43:25.58165729Z 79 PC: 1dd20 | Find next file
2018-12-17T22:43:25.585194613Z 61 PC: 1e6d5 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:43:25.593132222Z 66 PC: 1e813 | Move file pointer
2018-12-17T22:43:25.596233888Z 63 PC: 1e7b4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:25.604279288Z 62 PC: 1e727 | Close file
2018-12-17T22:43:25.60687357Z 26 PC: 1dd1b | Set disk transfer address
2018-12-17T22:43:25.609331757Z 79 PC: 1dd20 | Find next file
2018-12-17T22:43:25.612839485Z 61 PC: 1e6d5 | Open file (Filename = 'PAH.COM')
2018-12-17T22:43:25.621295066Z 66 PC: 1e813 | Move file pointer
2018-12-17T22:43:25.623872477Z 63 PC: 1e7b4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:25.632264319Z 62 PC: 1e727 | Close file
2018-12-17T22:43:25.636096997Z 26 PC: 1dd1b | Set disk transfer address
2018-12-17T22:43:25.637509179Z 79 PC: 1dd20 | Find next file
2018-12-17T22:43:25.640840776Z 61 PC: 1e6d5 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:43:25.649384934Z 66 PC: 1e813 | Move file pointer
2018-12-17T22:43:25.65102266Z 63 PC: 1e7b4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:25.659301048Z 62 PC: 1e727 | Close file
2018-12-17T22:43:25.662143106Z 26 PC: 1dd1b | Set disk transfer address
2018-12-17T22:43:25.663594091Z 79 PC: 1dd20 | Find next file
2018-12-17T22:43:25.668929902Z 14 PC: 1e994 | Set default drive (Drive = 'C')
2018-12-17T22:43:25.67054717Z 25 PC: 1e998 | Get default drive
2018-12-17T22:43:25.672185497Z 59 PC: 1ea04 | Change current directory
2018-12-17T22:43:25.679435775Z 26 PC: 1dcf5 | Set disk transfer address
2018-12-17T22:43:25.680857285Z 78 PC: 1dd01 | Find first file
2018-12-17T22:43:25.689230912Z 61 PC: 1e6d5 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:43:25.696645928Z 66 PC: 1e813 | Move file pointer
2018-12-17T22:43:25.698878701Z 63 PC: 1e7b4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:25.706937307Z 62 PC: 1e727 | Close file
2018-12-17T22:43:25.710275898Z 26 PC: 1dd1b | Set disk transfer address
2018-12-17T22:43:25.712765734Z 79 PC: 1dd20 | Find next file
2018-12-17T22:43:25.716648106Z 61 PC: 1e6d5 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:43:25.723912109Z 66 PC: 1e813 | Move file pointer
2018-12-17T22:43:25.726318789Z 63 PC: 1e7b4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:25.732895761Z 62 PC: 1e727 | Close file
2018-12-17T22:43:25.737012574Z 26 PC: 1dd1b | Set disk transfer address
2018-12-17T22:43:25.73833133Z 79 PC: 1dd20 | Find next file
2018-12-17T22:43:25.74198349Z 61 PC: 1e6d5 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:43:25.751101615Z 66 PC: 1e813 | Move file pointer
2018-12-17T22:43:25.752929068Z 63 PC: 1e7b4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:25.760362288Z 62 PC: 1e727 | Close file
2018-12-17T22:43:25.763186242Z 26 PC: 1dd1b | Set disk transfer address
2018-12-17T22:43:25.764353033Z 79 PC: 1dd20 | Find next file
2018-12-17T22:43:25.768620168Z 61 PC: 1e6d5 | Open file (Filename = 'FDISK.EXE')
2018-12-17T22:43:25.775530196Z 66 PC: 1e813 | Move file pointer
2018-12-17T22:43:25.778768188Z 63 PC: 1e7b4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:25.78519605Z 62 PC: 1e727 | Close file
2018-12-17T22:43:25.787483266Z 26 PC: 1dd1b | Set disk transfer address
2018-12-17T22:43:25.790027534Z 79 PC: 1dd20 | Find next file
2018-12-17T22:43:25.793518331Z 61 PC: 1e6d5 | Open file (Filename = 'MEM.EXE')
2018-12-17T22:43:25.801625067Z 66 PC: 1e813 | Move file pointer
2018-12-17T22:43:25.803465263Z 63 PC: 1e7b4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:25.809946817Z 62 PC: 1e727 | Close file
2018-12-17T22:43:25.813661132Z 26 PC: 1dd1b | Set disk transfer address
2018-12-17T22:43:25.814773682Z 79 PC: 1dd20 | Find next file
2018-12-17T22:43:25.819081213Z 61 PC: 1e6d5 | Open file (Filename = 'NLSFUNC.EXE')
2018-12-17T22:43:25.826642634Z 66 PC: 1e813 | Move file pointer
2018-12-17T22:43:25.828121702Z 63 PC: 1e7b4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:25.835696499Z 62 PC: 1e727 | Close file
2018-12-17T22:43:25.837930084Z 26 PC: 1dd1b | Set disk transfer address
2018-12-17T22:43:25.840136157Z 79 PC: 1dd20 | Find next file
2018-12-17T22:43:25.843757058Z 61 PC: 1e6d5 | Open file (Filename = 'QBASIC.EXE')
2018-12-17T22:43:25.851886225Z 66 PC: 1e813 | Move file pointer
2018-12-17T22:43:25.85501911Z 63 PC: 1e7b4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:25.863134852Z 62 PC: 1e727 | Close file
2018-12-17T22:43:25.866534207Z 26 PC: 1dd1b | Set disk transfer address
2018-12-17T22:43:25.868012744Z 79 PC: 1dd20 | Find next file
2018-12-17T22:43:25.872756384Z 61 PC: 1e6d5 | Open file (Filename = 'REPLACE.EXE')
2018-12-17T22:43:25.88045401Z 66 PC: 1e813 | Move file pointer
2018-12-17T22:43:25.882047463Z 63 PC: 1e7b4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:25.890273704Z 62 PC: 1e727 | Close file
2018-12-17T22:43:25.892723004Z 26 PC: 1dd1b | Set disk transfer address
2018-12-17T22:43:25.895174048Z 79 PC: 1dd20 | Find next file
2018-12-17T22:43:25.898765383Z 61 PC: 1e6d5 | Open file (Filename = 'RESTORE.EXE')
2018-12-17T22:43:25.906256673Z 66 PC: 1e813 | Move file pointer
2018-12-17T22:43:25.9085871Z 63 PC: 1e7b4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:25.914913211Z 62 PC: 1e727 | Close file
2018-12-17T22:43:25.918313176Z 26 PC: 1dd1b | Set disk transfer address
2018-12-17T22:43:25.919636742Z 79 PC: 1dd20 | Find next file
2018-12-17T22:43:25.924517048Z 61 PC: 1e6d5 | Open file (Filename = 'SCANDISK.EXE')
2018-12-17T22:43:25.932372042Z 66 PC: 1e813 | Move file pointer
2018-12-17T22:43:25.934047829Z 63 PC: 1e7b4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:25.942014181Z 62 PC: 1e727 | Close file
2018-12-17T22:43:25.944519075Z 26 PC: 1dd1b | Set disk transfer address
2018-12-17T22:43:25.946116065Z 79 PC: 1dd20 | Find next file
2018-12-17T22:43:25.951199392Z 61 PC: 1e6d5 | Open file (Filename = 'SETUP.EXE')
2018-12-17T22:43:25.958366163Z 66 PC: 1e813 | Move file pointer
2018-12-17T22:43:25.960807278Z 63 PC: 1e7b4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:25.967174016Z 62 PC: 1e727 | Close file
2018-12-17T22:43:25.970773225Z 26 PC: 1dd1b | Set disk transfer address
2018-12-17T22:43:25.97220788Z 79 PC: 1dd20 | Find next file
2018-12-17T22:43:25.976038525Z 61 PC: 1e6d5 | Open file (Filename = 'XCOPY.EXE')
2018-12-17T22:43:25.984265617Z 66 PC: 1e813 | Move file pointer
2018-12-17T22:43:25.986129467Z 63 PC: 1e7b4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:25.994877548Z 62 PC: 1e727 | Close file
2018-12-17T22:43:25.997633904Z 61 PC: 1e6d5 | Open file (Filename = 'A:\IRKA1ABC.EXE')
2018-12-17T22:43:26.004848144Z 60 PC: 1e6d5 | Create or truncate file
2018-12-17T22:43:26.033732884Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:26.042412065Z 64 PC: 1e7b4 | Write file or device (Write 5395 bytes on handle 6)
2018-12-17T22:43:26.052708904Z 62 PC: 1e727 | Close file
2018-12-17T22:43:26.055497532Z 64 PC: 1e7b4 | Write file or device (Write 5 bytes on handle 6)
2018-12-17T22:43:26.058986906Z 61 PC: 1e6d5 | Open file (Filename = 'XCOPY.EXE')
2018-12-17T22:43:26.067759392Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:26.076433333Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:26.087087724Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:26.096011654Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:26.105453979Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:26.114946077Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:26.125284714Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:26.133451984Z 64 PC: 1e7b4 | Write file or device (Write 730 bytes on handle 6)
2018-12-17T22:43:26.142192069Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:26.144674962Z 62 PC: 1e727 | Close file
2018-12-17T22:43:26.153489367Z 62 PC: 1e727 | Close file
2018-12-17T22:43:26.155712673Z 65 PC: 1e82a | Delete file (Filename = 'XCOPY.EXE')
2018-12-17T22:43:26.16817519Z 86 PC: 1e86e | Rename file
2018-12-17T22:43:26.181346908Z 26 PC: 1dd1b | Set disk transfer address
2018-12-17T22:43:26.182863256Z 79 PC: 1dd20 | Find next file
2018-12-17T22:43:26.188039017Z 61 PC: 1e6d5 | Open file (Filename = 'DEFRAG.EXE')
2018-12-17T22:43:26.1962986Z 66 PC: 1e813 | Move file pointer
2018-12-17T22:43:26.199147591Z 63 PC: 1e7b4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:26.207251251Z 62 PC: 1e727 | Close file
2018-12-17T22:43:26.210351143Z 61 PC: 1e6d5 | Open file (Filename = 'A:\IRKA1ABC.EXE')
2018-12-17T22:43:26.219902091Z 60 PC: 1e6d5 | Create or truncate file
2018-12-17T22:43:26.232909822Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:26.246001451Z 64 PC: 1e7b4 | Write file or device (Write 5395 bytes on handle 6)
2018-12-17T22:43:26.255857231Z 62 PC: 1e727 | Close file
2018-12-17T22:43:26.258303576Z 64 PC: 1e7b4 | Write file or device (Write 5 bytes on handle 6)
2018-12-17T22:43:26.262785123Z 61 PC: 1e6d5 | Open file (Filename = 'DEFRAG.EXE')
2018-12-17T22:43:26.271244131Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:26.280225068Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:26.289916461Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:26.298438476Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:26.30881219Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:26.317487153Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:26.328085548Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:26.337597854Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:26.347564002Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:26.356650518Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:26.366020557Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:26.375255231Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:26.384861092Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:26.394019183Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:26.404364082Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:26.41263173Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:26.422875861Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:26.430982085Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:26.441288392Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:26.449665245Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:26.459816942Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:26.469369824Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:26.478886288Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:26.487921507Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:26.497770335Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:26.505743049Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:26.515996466Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:26.524739908Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:26.535143879Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:26.548614639Z 64 PC: 1e7b4 | Write file or device (Write 3465 bytes on handle 6)
2018-12-17T22:43:26.568444253Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:26.572808329Z 62 PC: 1e727 | Close file
2018-12-17T22:43:26.58963411Z 62 PC: 1e727 | Close file
2018-12-17T22:43:26.593313381Z 65 PC: 1e82a | Delete file (Filename = 'DEFRAG.EXE')
2018-12-17T22:43:26.603946011Z 86 PC: 1e86e | Rename file
2018-12-17T22:43:26.615740002Z 26 PC: 1dd1b | Set disk transfer address
2018-12-17T22:43:26.618562222Z 79 PC: 1dd20 | Find next file
2018-12-17T22:43:26.622286878Z 61 PC: 1e6d5 | Open file (Filename = 'EMM386.EXE')
2018-12-17T22:43:26.629867095Z 66 PC: 1e813 | Move file pointer
2018-12-17T22:43:26.632081113Z 63 PC: 1e7b4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:26.638106379Z 62 PC: 1e727 | Close file
2018-12-17T22:43:26.641857425Z 61 PC: 1e6d5 | Open file (Filename = 'A:\IRKA1ABC.EXE')
2018-12-17T22:43:26.650522299Z 60 PC: 1e6d5 | Create or truncate file
2018-12-17T22:43:26.661504986Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:26.672167111Z 64 PC: 1e7b4 | Write file or device (Write 5395 bytes on handle 6)
2018-12-17T22:43:26.68327292Z 62 PC: 1e727 | Close file
2018-12-17T22:43:26.686736075Z 64 PC: 1e7b4 | Write file or device (Write 5 bytes on handle 6)
2018-12-17T22:43:26.690011106Z 61 PC: 1e6d5 | Open file (Filename = 'EMM386.EXE')
2018-12-17T22:43:26.697370969Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:26.705335708Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:26.713120689Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:26.721377888Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:26.729362604Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:26.737673493Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:26.745761714Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:26.753300323Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:26.762572568Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:26.771003774Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:26.783195592Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:26.794115832Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:26.807187633Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:26.815921587Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:26.825060421Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:26.833568701Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:26.842660788Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:26.8505904Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:26.869893295Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:26.880972804Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:26.895368351Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:26.909359399Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:26.921030248Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:26.931879275Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:26.941985305Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:26.951604953Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:26.962899707Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:26.973371073Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:26.985469666Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:26.996251357Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:27.007467923Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:27.022418302Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:27.036271351Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:27.045211612Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:27.054796595Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:27.064174507Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:27.074216308Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:27.083730607Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:27.094044899Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:27.102066145Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:27.11306894Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:27.121198258Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:27.131407452Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:27.139974843Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:27.14914668Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:27.158397614Z 64 PC: 1e7b4 | Write file or device (Write 2126 bytes on handle 6)
2018-12-17T22:43:27.167236556Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:27.170255736Z 62 PC: 1e727 | Close file
2018-12-17T22:43:27.178319Z 62 PC: 1e727 | Close file
2018-12-17T22:43:27.180475891Z 65 PC: 1e82a | Delete file (Filename = 'EMM386.EXE')
2018-12-17T22:43:27.200416343Z 86 PC: 1e86e | Rename file
2018-12-17T22:43:27.212207208Z 26 PC: 1dd1b | Set disk transfer address
2018-12-17T22:43:27.215235926Z 79 PC: 1dd20 | Find next file
2018-12-17T22:43:27.219664404Z 61 PC: 1e6d5 | Open file (Filename = 'MSCDEX.EXE')
2018-12-17T22:43:27.22712179Z 66 PC: 1e813 | Move file pointer
2018-12-17T22:43:27.229904507Z 63 PC: 1e7b4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:27.236451814Z 62 PC: 1e727 | Close file
2018-12-17T22:43:27.240240559Z 61 PC: 1e6d5 | Open file (Filename = 'A:\IRKA1ABC.EXE')
2018-12-17T22:43:27.254823639Z 60 PC: 1e6d5 | Create or truncate file
2018-12-17T22:43:27.266803549Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:27.279018761Z 64 PC: 1e7b4 | Write file or device (Write 5395 bytes on handle 6)
2018-12-17T22:43:27.291836205Z 62 PC: 1e727 | Close file
2018-12-17T22:43:27.297962441Z 64 PC: 1e7b4 | Write file or device (Write 5 bytes on handle 6)
2018-12-17T22:43:27.302023247Z 61 PC: 1e6d5 | Open file (Filename = 'MSCDEX.EXE')
2018-12-17T22:43:27.316265226Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:27.324209277Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:27.333445674Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:27.341252176Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:27.349896282Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:27.358816054Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:27.367243652Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:27.375412144Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:27.38407219Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:27.391088507Z 64 PC: 1e7b4 | Write file or device (Write 3761 bytes on handle 6)
2018-12-17T22:43:27.400359229Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:27.402791036Z 62 PC: 1e727 | Close file
2018-12-17T22:43:27.410569596Z 62 PC: 1e727 | Close file
2018-12-17T22:43:27.412755682Z 65 PC: 1e82a | Delete file (Filename = 'MSCDEX.EXE')
2018-12-17T22:43:27.424130465Z 86 PC: 1e86e | Rename file
2018-12-17T22:43:27.434853235Z 26 PC: 1dd1b | Set disk transfer address
2018-12-17T22:43:27.436635412Z 79 PC: 1dd20 | Find next file
2018-12-17T22:43:27.4410109Z 61 PC: 1e6d5 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:43:27.448368699Z 66 PC: 1e813 | Move file pointer
2018-12-17T22:43:27.451062498Z 63 PC: 1e7b4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:27.458351498Z 62 PC: 1e727 | Close file
2018-12-17T22:43:27.462256633Z 26 PC: 1dd1b | Set disk transfer address
2018-12-17T22:43:27.463546065Z 79 PC: 1dd20 | Find next file
2018-12-17T22:43:27.466899413Z 26 PC: 1dcf5 | Set disk transfer address
2018-12-17T22:43:27.468773503Z 78 PC: 1dd01 | Find first file
2018-12-17T22:43:27.475546313Z 61 PC: 1e6d5 | Open file (Filename = 'EDIT.COM')
2018-12-17T22:43:27.484138521Z 66 PC: 1e813 | Move file pointer
2018-12-17T22:43:27.485998213Z 63 PC: 1e7b4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:27.48876519Z 62 PC: 1e727 | Close file
2018-12-17T22:43:27.491460663Z 61 PC: 1e6d5 | Open file (Filename = 'A:\IRKA1ABC.EXE')
2018-12-17T22:43:27.499749912Z 60 PC: 1e6d5 | Create or truncate file
2018-12-17T22:43:27.512380864Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:27.520240035Z 64 PC: 1e7b4 | Write file or device (Write 5395 bytes on handle 6)
2018-12-17T22:43:27.530546122Z 62 PC: 1e727 | Close file
2018-12-17T22:43:27.532725205Z 64 PC: 1e7b4 | Write file or device (Write 5 bytes on handle 6)
2018-12-17T22:43:27.53740818Z 61 PC: 1e6d5 | Open file (Filename = 'EDIT.COM')
2018-12-17T22:43:27.544740542Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:27.551174906Z 64 PC: 1e7b4 | Write file or device (Write 413 bytes on handle 6)
2018-12-17T22:43:27.558977862Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:27.562443982Z 62 PC: 1e727 | Close file
2018-12-17T22:43:27.571212871Z 62 PC: 1e727 | Close file
2018-12-17T22:43:27.573369231Z 65 PC: 1e82a | Delete file (Filename = 'EDIT.COM')
2018-12-17T22:43:27.585301572Z 86 PC: 1e86e | Rename file
2018-12-17T22:43:27.596879497Z 26 PC: 1dd1b | Set disk transfer address
2018-12-17T22:43:27.599727727Z 79 PC: 1dd20 | Find next file
2018-12-17T22:43:27.603530829Z 61 PC: 1e6d5 | Open file (Filename = 'FORMAT.COM')
2018-12-17T22:43:27.610866327Z 66 PC: 1e813 | Move file pointer
2018-12-17T22:43:27.614217831Z 63 PC: 1e7b4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:27.620859105Z 62 PC: 1e727 | Close file
2018-12-17T22:43:27.625312248Z 61 PC: 1e6d5 | Open file (Filename = 'A:\IRKA1ABC.EXE')
2018-12-17T22:43:27.633515816Z 60 PC: 1e6d5 | Create or truncate file
2018-12-17T22:43:27.646024731Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:27.653806366Z 64 PC: 1e7b4 | Write file or device (Write 5395 bytes on handle 6)
2018-12-17T22:43:27.662484735Z 62 PC: 1e727 | Close file
2018-12-17T22:43:27.665944834Z 64 PC: 1e7b4 | Write file or device (Write 5 bytes on handle 6)
2018-12-17T22:43:27.66921775Z 61 PC: 1e6d5 | Open file (Filename = 'FORMAT.COM')
2018-12-17T22:43:27.680567668Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:27.688279802Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:27.697801035Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:27.707795446Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:27.717001316Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:27.725879481Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:27.7360908Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:27.744794296Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:27.754704359Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:27.762258417Z 64 PC: 1e7b4 | Write file or device (Write 1374 bytes on handle 6)
2018-12-17T22:43:27.771999633Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:27.774360507Z 62 PC: 1e727 | Close file
2018-12-17T22:43:27.78361617Z 62 PC: 1e727 | Close file
2018-12-17T22:43:27.785988897Z 65 PC: 1e82a | Delete file (Filename = 'FORMAT.COM')
2018-12-17T22:43:27.799063122Z 86 PC: 1e86e | Rename file
2018-12-17T22:43:27.81198953Z 26 PC: 1dd1b | Set disk transfer address
2018-12-17T22:43:27.81373017Z 79 PC: 1dd20 | Find next file
2018-12-17T22:43:27.818832462Z 61 PC: 1e6d5 | Open file (Filename = 'KEYB.COM')
2018-12-17T22:43:27.826326217Z 66 PC: 1e813 | Move file pointer
2018-12-17T22:43:27.829484579Z 63 PC: 1e7b4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:27.837042654Z 62 PC: 1e727 | Close file
2018-12-17T22:43:27.841235479Z 61 PC: 1e6d5 | Open file (Filename = 'A:\IRKA1ABC.EXE')
2018-12-17T22:43:27.849116932Z 60 PC: 1e6d5 | Create or truncate file
2018-12-17T22:43:27.861191029Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:27.870327779Z 64 PC: 1e7b4 | Write file or device (Write 5395 bytes on handle 6)
2018-12-17T22:43:27.879483816Z 62 PC: 1e727 | Close file
2018-12-17T22:43:27.883488748Z 64 PC: 1e7b4 | Write file or device (Write 5 bytes on handle 6)
2018-12-17T22:43:27.886747498Z 61 PC: 1e6d5 | Open file (Filename = 'KEYB.COM')
2018-12-17T22:43:27.895296895Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:27.903270381Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:27.913203618Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:27.922792667Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:27.932252384Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:27.941048565Z 64 PC: 1e7b4 | Write file or device (Write 4950 bytes on handle 6)
2018-12-17T22:43:27.950116636Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:27.95259971Z 62 PC: 1e727 | Close file
2018-12-17T22:43:27.960709561Z 62 PC: 1e727 | Close file
2018-12-17T22:43:27.962512087Z 65 PC: 1e82a | Delete file (Filename = 'KEYB.COM')
2018-12-17T22:43:27.974977499Z 86 PC: 1e86e | Rename file
2018-12-17T22:43:27.986752685Z 26 PC: 1dd1b | Set disk transfer address
2018-12-17T22:43:27.989396541Z 79 PC: 1dd20 | Find next file
2018-12-17T22:43:27.99331513Z 61 PC: 1e6d5 | Open file (Filename = 'SYS.COM')
2018-12-17T22:43:28.002227239Z 66 PC: 1e813 | Move file pointer
2018-12-17T22:43:28.003907134Z 63 PC: 1e7b4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:28.01073076Z 62 PC: 1e727 | Close file
2018-12-17T22:43:28.014170229Z 61 PC: 1e6d5 | Open file (Filename = 'A:\IRKA1ABC.EXE')
2018-12-17T22:43:28.021369421Z 60 PC: 1e6d5 | Create or truncate file
2018-12-17T22:43:28.033828892Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:28.042577393Z 64 PC: 1e7b4 | Write file or device (Write 5395 bytes on handle 6)
2018-12-17T22:43:28.052823707Z 62 PC: 1e727 | Close file
2018-12-17T22:43:28.055591155Z 64 PC: 1e7b4 | Write file or device (Write 5 bytes on handle 6)
2018-12-17T22:43:28.060340786Z 61 PC: 1e6d5 | Open file (Filename = 'SYS.COM')
2018-12-17T22:43:28.067620298Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:28.07535799Z 64 PC: 1e7b4 | Write file or device (Write 5400 bytes on handle 6)
2018-12-17T22:43:28.08588411Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:28.093734705Z 64 PC: 1e7b4 | Write file or device (Write 4032 bytes on handle 6)
2018-12-17T22:43:28.104628315Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:28.106924548Z 62 PC: 1e727 | Close file
2018-12-17T22:43:28.114999614Z 62 PC: 1e727 | Close file
2018-12-17T22:43:28.11805363Z 65 PC: 1e82a | Delete file (Filename = 'SYS.COM')
2018-12-17T22:43:28.12916012Z 86 PC: 1e86e | Rename file
2018-12-17T22:43:28.142184452Z 26 PC: 1dd1b | Set disk transfer address
2018-12-17T22:43:28.143794646Z 79 PC: 1dd20 | Find next file
2018-12-17T22:43:28.14904114Z 61 PC: 1e6d5 | Open file (Filename = 'EDIT.COM')
2018-12-17T22:43:28.156378701Z 66 PC: 1e813 | Move file pointer
2018-12-17T22:43:28.159448216Z 63 PC: 1e7b4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:43:28.165840001Z 62 PC: 1e727 | Close file
2018-12-17T22:43:28.169365753Z 26 PC: 1dd1b | Set disk transfer address
2018-12-17T22:43:28.170965026Z 79 PC: 1dd20 | Find next file
2018-12-17T22:43:28.175582359Z 14 PC: 1e994 | Set default drive (Drive = 'A')
2018-12-17T22:43:28.178207469Z 25 PC: 1e998 | Get default drive
2018-12-17T22:43:28.179887094Z 59 PC: 1ea04 | Change current directory
2018-12-17T22:43:28.184363161Z 48 PC: 1e8a3 | Get DOS version
2018-12-17T22:43:28.186149706Z 61 PC: 1e6d5 | Open file (Filename = 'irka1abc.exe')
2018-12-17T22:43:28.193777442Z 60 PC: 1e6d5 | Create or truncate file
2018-12-17T22:43:28.206685125Z 66 PC: 1e813 | Move file pointer
2018-12-17T22:43:28.209700849Z 63 PC: 1e7b4 | Read file or device (Read 5400 bytes on handle 5)
2018-12-17T22:43:28.212724187Z 62 PC: 1e727 | Close file
2018-12-17T22:43:28.216401284Z 62 PC: 1e727 | Close file
2018-12-17T22:43:28.218494926Z 53 PC: 1df38 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:43:28.221188314Z 37 PC: 1df41 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:43:28.222579567Z 53 PC: 1df38 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:43:28.223967805Z 37 PC: 1df41 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:43:28.231699927Z 53 PC: 1df38 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:43:28.233272751Z 37 PC: 1df41 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:43:28.2354661Z 53 PC: 1df38 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:43:28.237106161Z 37 PC: 1df41 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:43:28.239674625Z 53 PC: 1df38 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:43:28.241293976Z 37 PC: 1df41 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:43:28.243776539Z 53 PC: 1df38 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:43:28.245273461Z 37 PC: 1df41 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:43:28.247702763Z 53 PC: 1df38 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:43:28.249204974Z 37 PC: 1df41 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:43:28.251128868Z 53 PC: 1df38 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:43:28.252574893Z 37 PC: 1df41 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:43:28.254236244Z 53 PC: 1df38 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:43:28.256725028Z 37 PC: 1df41 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:43:28.258298223Z 53 PC: 1df38 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:43:28.261238014Z 37 PC: 1df41 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:43:28.262647862Z 53 PC: 1df38 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:43:28.26493579Z 37 PC: 1df41 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:43:28.266944833Z 53 PC: 1df38 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:43:28.269879074Z 37 PC: 1df41 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:43:28.271652174Z 53 PC: 1df38 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:43:28.274037284Z 37 PC: 1df41 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:43:28.275438425Z 53 PC: 1df38 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:43:28.276882968Z 37 PC: 1df41 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:43:28.278660066Z 53 PC: 1df38 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:43:28.280001245Z 37 PC: 1df41 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:43:28.282012031Z 53 PC: 1df38 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:43:28.283703388Z 37 PC: 1df41 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:43:28.286495382Z 53 PC: 1df38 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:43:28.287760608Z 37 PC: 1df41 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:43:28.289698728Z 53 PC: 1df38 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:43:28.29111575Z 37 PC: 1df41 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:43:28.29325591Z 53 PC: 1df38 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:43:28.294680635Z 37 PC: 1df41 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:43:28.297327577Z 41 PC: 1deed | Parse filename
2018-12-17T22:43:28.2988576Z 41 PC: 1defb | Parse filename
2018-12-17T22:43:28.301224656Z 75 PC: 1df06 | Execute program
2018-12-17T22:43:28.310382315Z 53 PC: 1df38 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:43:28.311896069Z 37 PC: 1df41 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:43:28.313350641Z 53 PC: 1df38 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:43:28.314963961Z 37 PC: 1df41 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:43:28.316190795Z 53 PC: 1df38 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:43:28.317670464Z 37 PC: 1df41 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:43:28.320360466Z 53 PC: 1df38 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:43:28.321928211Z 37 PC: 1df41 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:43:28.323857565Z 53 PC: 1df38 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:43:28.325156724Z 37 PC: 1df41 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:43:28.327990828Z 53 PC: 1df38 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:43:28.329178458Z 37 PC: 1df41 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:43:28.331331722Z 53 PC: 1df38 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:43:28.332962124Z 37 PC: 1df41 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:43:28.334992648Z 53 PC: 1df38 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:43:28.33637268Z 37 PC: 1df41 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:43:28.33789573Z 53 PC: 1df38 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:43:28.33911482Z 37 PC: 1df41 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:43:28.34045672Z 53 PC: 1df38 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:43:28.341653769Z 37 PC: 1df41 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:43:28.342776217Z 53 PC: 1df38 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:43:28.344556641Z 37 PC: 1df41 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:43:28.346133973Z 53 PC: 1df38 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:43:28.348379461Z 37 PC: 1df41 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:43:28.34958746Z 53 PC: 1df38 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:43:28.352156264Z 37 PC: 1df41 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:43:28.353439715Z 53 PC: 1df38 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:43:28.355016837Z 37 PC: 1df41 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:43:28.35618449Z 53 PC: 1df38 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:43:28.357696801Z 37 PC: 1df41 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:43:28.359164417Z 53 PC: 1df38 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:43:28.360322091Z 37 PC: 1df41 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:43:28.361991957Z 53 PC: 1df38 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:43:28.363224572Z 37 PC: 1df41 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:43:28.365666408Z 53 PC: 1df38 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:43:28.367262957Z 37 PC: 1df41 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:43:28.369893418Z 53 PC: 1df38 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:43:28.37120462Z 37 PC: 1df41 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:43:28.373725675Z 65 PC: 1e82a | Delete file (Filename = '�1���[^_]�VS�ÈP/��')
2018-12-17T22:43:28.384458333Z 37 PC: 1e147 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:43:28.387537747Z 37 PC: 1e147 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:43:28.389229233Z 37 PC: 1e147 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:43:28.391167314Z 37 PC: 1e147 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:43:28.39349736Z 37 PC: 1e147 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:43:28.394903521Z 37 PC: 1e147 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:43:28.396361609Z 37 PC: 1e147 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:43:28.39765068Z 37 PC: 1e147 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:43:28.399855411Z 37 PC: 1e147 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:43:28.401071375Z 37 PC: 1e147 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:43:28.403409186Z 37 PC: 1e147 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:43:28.405012197Z 37 PC: 1e147 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:43:28.407263375Z 37 PC: 1e147 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:43:28.40870389Z 37 PC: 1e147 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:43:28.411143111Z 37 PC: 1e147 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:43:28.412277362Z 37 PC: 1e147 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:43:28.413852611Z 37 PC: 1e147 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:43:28.416063433Z 37 PC: 1e147 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:43:28.417226677Z 37 PC: 1e147 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:43:28.419301625Z 76 PC: 1e186 | Terminate with return code (Return code = '0')
2018-12-17T22:43:28.422432966Z 53 PC: 13948 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:43:28.424498525Z 37 PC: 13951 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:43:28.425877886Z 53 PC: 13948 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:43:28.42797264Z 37 PC: 13951 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:43:28.429289623Z 53 PC: 13948 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:43:28.431181988Z 37 PC: 13951 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:43:28.432735145Z 53 PC: 13948 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:43:28.433994801Z 37 PC: 13951 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:43:28.435444423Z 53 PC: 13948 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:43:28.436932809Z 37 PC: 13951 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:43:28.439369285Z 53 PC: 13948 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:43:28.440610256Z 37 PC: 13951 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:43:28.442871002Z 53 PC: 13948 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:43:28.444125678Z 37 PC: 13951 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:43:28.446064379Z 53 PC: 13948 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:43:28.447663283Z 37 PC: 13951 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:43:28.450296719Z 53 PC: 13948 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:43:28.451448011Z 37 PC: 13951 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:43:28.453075758Z 53 PC: 13948 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:43:28.45512125Z 37 PC: 13951 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:43:28.457203691Z 53 PC: 13948 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:43:28.45904558Z 37 PC: 13951 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:43:28.460545538Z 53 PC: 13948 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:43:28.462822975Z 37 PC: 13951 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:43:28.464064907Z 53 PC: 13948 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:43:28.466937503Z 37 PC: 13951 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:43:28.468145041Z 53 PC: 13948 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:43:28.470543886Z 37 PC: 13951 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:43:28.471708944Z 53 PC: 13948 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:43:28.474509154Z 37 PC: 13951 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:43:28.476129848Z 53 PC: 13948 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:43:28.478772321Z 37 PC: 13951 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:43:28.48051826Z 53 PC: 13948 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:43:28.482474614Z 37 PC: 13951 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:43:28.484136295Z 53 PC: 13948 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:43:28.485924944Z 37 PC: 13951 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:43:28.487644143Z 53 PC: 13948 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:43:28.489119434Z 37 PC: 13951 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:43:28.491382254Z 65 PC: 1423a | Delete file (Filename = '�1���[^_]�VS�ÈP/��')
2018-12-17T22:43:28.498695109Z 37 PC: 13b57 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:43:28.501650008Z 37 PC: 13b57 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:43:28.503489534Z 37 PC: 13b57 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:43:28.506370144Z 37 PC: 13b57 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:43:28.510222659Z 37 PC: 13b57 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:43:28.513523629Z 37 PC: 13b57 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:43:28.514883323Z 37 PC: 13b57 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:43:28.517459952Z 37 PC: 13b57 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:43:28.519027266Z 37 PC: 13b57 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:43:28.521570783Z 37 PC: 13b57 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:43:28.523494707Z 37 PC: 13b57 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:43:28.52514165Z 37 PC: 13b57 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:43:28.526930029Z 37 PC: 13b57 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:43:28.528291366Z 37 PC: 13b57 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:43:28.529739856Z 37 PC: 13b57 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:43:28.531319393Z 37 PC: 13b57 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:43:28.532719232Z 37 PC: 13b57 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:43:28.534211525Z 37 PC: 13b57 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:43:28.536762756Z 37 PC: 13b57 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:43:28.538192031Z 76 PC: 13b96 | Terminate with return code (Return code = '0')