Sample viewer

vx.netlux.org/Virus.DOS.HLLP.Kye.6848

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:46:49.753037028Z 53 PC: 1342a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:46:49.75520441Z 53 PC: 1342a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:46:49.756241238Z 53 PC: 1342a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:46:49.757468483Z 53 PC: 1342a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:46:49.758835471Z 53 PC: 1342a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:46:49.760243838Z 53 PC: 1342a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:49.761282218Z 53 PC: 1342a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:46:49.762324176Z 53 PC: 1342a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:46:49.764101666Z 53 PC: 1342a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:46:49.765336325Z 53 PC: 1342a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:46:49.766581074Z 53 PC: 1342a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:46:49.768744559Z 53 PC: 1342a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:46:49.770474149Z 53 PC: 1342a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:46:49.77208228Z 53 PC: 1342a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:46:49.774177797Z 53 PC: 1342a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:46:49.775644132Z 53 PC: 1342a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:46:49.777198302Z 53 PC: 1342a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:46:49.779270505Z 53 PC: 1342a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:46:49.780813775Z 53 PC: 1342a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:46:49.782118536Z 37 PC: 1343f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:46:49.784407978Z 37 PC: 13447 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:46:49.785776829Z 37 PC: 1344f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:49.787062655Z 37 PC: 13457 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:46:49.789407431Z 68 PC: 14182 | I/O control for devices (Set for = '')
2018-12-17T22:46:49.791440331Z 26 PC: 13299 | Set disk transfer address
2018-12-17T22:46:49.79272257Z 78 PC: 132a5 | Find first file
2018-12-17T22:46:49.799725366Z 67 PC: 13241 | Get or set file attributes
2018-12-17T22:46:49.806882263Z 67 PC: 13268 | Get or set file attributes
2018-12-17T22:46:49.824898172Z 61 PC: 13af0 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:46:49.832859569Z 66 PC: 14281 | Move file pointer
2018-12-17T22:46:49.83547298Z 66 PC: 1428f | Move file pointer
2018-12-17T22:46:49.837488447Z 66 PC: 1429d | Move file pointer
2018-12-17T22:46:49.839574877Z 66 PC: 13c22 | Move file pointer
2018-12-17T22:46:49.84220048Z 64 PC: 13bc3 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:46:49.852933234Z 62 PC: 13b40 | Close file
2018-12-17T22:46:49.867588439Z 67 PC: 13268 | Get or set file attributes
2018-12-17T22:46:49.878672774Z 26 PC: 132bd | Set disk transfer address
2018-12-17T22:46:49.880173795Z 79 PC: 132c2 | Find next file
2018-12-17T22:46:49.883587018Z 67 PC: 13241 | Get or set file attributes
2018-12-17T22:46:49.891396951Z 67 PC: 13268 | Get or set file attributes
2018-12-17T22:46:49.903091713Z 61 PC: 13af0 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:46:49.910473502Z 66 PC: 14281 | Move file pointer
2018-12-17T22:46:49.91301663Z 66 PC: 1428f | Move file pointer
2018-12-17T22:46:49.915050471Z 66 PC: 1429d | Move file pointer
2018-12-17T22:46:49.916916517Z 66 PC: 13c22 | Move file pointer
2018-12-17T22:46:49.918982258Z 64 PC: 13bc3 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:46:49.93051658Z 62 PC: 13b40 | Close file
2018-12-17T22:46:49.939395972Z 67 PC: 13268 | Get or set file attributes
2018-12-17T22:46:49.950738423Z 26 PC: 132bd | Set disk transfer address
2018-12-17T22:46:49.953241937Z 79 PC: 132c2 | Find next file
2018-12-17T22:46:49.956641985Z 67 PC: 13241 | Get or set file attributes
2018-12-17T22:46:49.963380986Z 67 PC: 13268 | Get or set file attributes
2018-12-17T22:46:49.974868329Z 61 PC: 13af0 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:46:49.982009706Z 66 PC: 14281 | Move file pointer
2018-12-17T22:46:49.983598972Z 66 PC: 1428f | Move file pointer
2018-12-17T22:46:49.986368736Z 66 PC: 1429d | Move file pointer
2018-12-17T22:46:49.988071094Z 66 PC: 13c22 | Move file pointer
2018-12-17T22:46:49.989906252Z 64 PC: 13bc3 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:46:50.002485326Z 62 PC: 13b40 | Close file
2018-12-17T22:46:50.011680071Z 67 PC: 13268 | Get or set file attributes
2018-12-17T22:46:50.022623432Z 26 PC: 132bd | Set disk transfer address
2018-12-17T22:46:50.025520345Z 79 PC: 132c2 | Find next file
2018-12-17T22:46:50.029510792Z 67 PC: 13241 | Get or set file attributes
2018-12-17T22:46:50.03659396Z 67 PC: 13268 | Get or set file attributes
2018-12-17T22:46:50.047365568Z 61 PC: 13af0 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:46:50.055331624Z 66 PC: 14281 | Move file pointer
2018-12-17T22:46:50.057145282Z 66 PC: 1428f | Move file pointer
2018-12-17T22:46:50.058948961Z 66 PC: 1429d | Move file pointer
2018-12-17T22:46:50.061774479Z 66 PC: 13c22 | Move file pointer
2018-12-17T22:46:50.06389325Z 64 PC: 13bc3 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:46:50.074093455Z 62 PC: 13b40 | Close file
2018-12-17T22:46:50.083452388Z 67 PC: 13268 | Get or set file attributes
2018-12-17T22:46:50.093712766Z 26 PC: 132bd | Set disk transfer address
2018-12-17T22:46:50.094869329Z 79 PC: 132c2 | Find next file
2018-12-17T22:46:50.099944935Z 67 PC: 13241 | Get or set file attributes
2018-12-17T22:46:50.106126529Z 67 PC: 13268 | Get or set file attributes
2018-12-17T22:46:50.116583326Z 61 PC: 13af0 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:46:50.124561234Z 66 PC: 14281 | Move file pointer
2018-12-17T22:46:50.126851327Z 66 PC: 1428f | Move file pointer
2018-12-17T22:46:50.128677177Z 66 PC: 1429d | Move file pointer
2018-12-17T22:46:50.130774558Z 66 PC: 13c22 | Move file pointer
2018-12-17T22:46:50.133130013Z 64 PC: 13bc3 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:46:50.143330649Z 62 PC: 13b40 | Close file
2018-12-17T22:46:50.152147103Z 67 PC: 13268 | Get or set file attributes
2018-12-17T22:46:50.163151268Z 26 PC: 132bd | Set disk transfer address
2018-12-17T22:46:50.165408209Z 79 PC: 132c2 | Find next file
2018-12-17T22:46:50.168703259Z 67 PC: 13241 | Get or set file attributes
2018-12-17T22:46:50.175765768Z 67 PC: 13268 | Get or set file attributes
2018-12-17T22:46:50.186450453Z 61 PC: 13af0 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:46:50.193685877Z 66 PC: 14281 | Move file pointer
2018-12-17T22:46:50.196273278Z 66 PC: 1428f | Move file pointer
2018-12-17T22:46:50.198042061Z 66 PC: 1429d | Move file pointer
2018-12-17T22:46:50.199567547Z 66 PC: 13c22 | Move file pointer
2018-12-17T22:46:50.201954382Z 64 PC: 13bc3 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:46:50.212989135Z 62 PC: 13b40 | Close file
2018-12-17T22:46:50.222118166Z 67 PC: 13268 | Get or set file attributes
2018-12-17T22:46:50.23364372Z 26 PC: 132bd | Set disk transfer address
2018-12-17T22:46:50.235885242Z 79 PC: 132c2 | Find next file
2018-12-17T22:46:50.239410866Z 67 PC: 13241 | Get or set file attributes
2018-12-17T22:46:50.245902512Z 67 PC: 13268 | Get or set file attributes
2018-12-17T22:46:50.256960819Z 61 PC: 13af0 | Open file (Filename = 'PAH.COM')
2018-12-17T22:46:50.264053475Z 66 PC: 14281 | Move file pointer
2018-12-17T22:46:50.265634836Z 66 PC: 1428f | Move file pointer
2018-12-17T22:46:50.268242435Z 66 PC: 1429d | Move file pointer
2018-12-17T22:46:50.269899719Z 66 PC: 13c22 | Move file pointer
2018-12-17T22:46:50.271549568Z 64 PC: 13bc3 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:46:50.282982609Z 62 PC: 13b40 | Close file
2018-12-17T22:46:50.291747377Z 67 PC: 13268 | Get or set file attributes
2018-12-17T22:46:50.305277617Z 26 PC: 132bd | Set disk transfer address
2018-12-17T22:46:50.307433738Z 79 PC: 132c2 | Find next file
2018-12-17T22:46:50.310492956Z 26 PC: 13299 | Set disk transfer address
2018-12-17T22:46:50.311686679Z 78 PC: 132a5 | Find first file
2018-12-17T22:46:50.318082796Z 26 PC: 13299 | Set disk transfer address
2018-12-17T22:46:50.320333314Z 78 PC: 132a5 | Find first file
2018-12-17T22:46:50.326897998Z 67 PC: 13241 | Get or set file attributes
2018-12-17T22:46:50.332863987Z 67 PC: 13268 | Get or set file attributes
2018-12-17T22:46:50.343669358Z 61 PC: 13af0 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:46:50.356293627Z 63 PC: 13b82 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:46:50.364149427Z 63 PC: 13b82 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:46:50.367962621Z 62 PC: 13b40 | Close file
2018-12-17T22:46:50.370370645Z 67 PC: 13268 | Get or set file attributes
2018-12-17T22:46:50.382259182Z 26 PC: 132bd | Set disk transfer address
2018-12-17T22:46:50.384484132Z 79 PC: 132c2 | Find next file
2018-12-17T22:46:50.387723578Z 48 PC: 13cb2 | Get DOS version
2018-12-17T22:46:50.3898749Z 67 PC: 13241 | Get or set file attributes
2018-12-17T22:46:50.397220521Z 67 PC: 13268 | Get or set file attributes
2018-12-17T22:46:50.407691645Z 61 PC: 13af0 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:46:50.414580678Z 61 PC: 13af0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:46:50.428320202Z 60 PC: 13af0 | Create or truncate file
2018-12-17T22:46:50.441783507Z 63 PC: 13bc3 | Read file or device (Read 6848 bytes on handle 6)
2018-12-17T22:46:50.452096163Z 64 PC: 13bc3 | Write file or device (Write 6848 bytes on handle 7)
2018-12-17T22:46:50.463190457Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:50.471338505Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:50.48090518Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:50.489802436Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:50.500285963Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:50.508230659Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:50.518362585Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:50.527102606Z 64 PC: 13bc3 | Write file or device (Write 704 bytes on handle 7)
2018-12-17T22:46:50.53732938Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:50.53982579Z 62 PC: 13b40 | Close file
2018-12-17T22:46:50.543250274Z 62 PC: 13b40 | Close file
2018-12-17T22:46:50.545562478Z 62 PC: 13b40 | Close file
2018-12-17T22:46:50.554732277Z 65 PC: 13c39 | Delete file (Filename = 'TEST.EXE')
2018-12-17T22:46:50.568746607Z 86 PC: 13c7d | Rename file
2018-12-17T22:46:50.581684796Z 61 PC: 13af0 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:46:50.589206618Z 64 PC: 13b82 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:46:50.597322226Z 64 PC: 13b82 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:46:50.600498554Z 62 PC: 13b40 | Close file
2018-12-17T22:46:50.608987964Z 67 PC: 13268 | Get or set file attributes
2018-12-17T22:46:50.623740321Z 25 PC: 13d3f | Get default drive
2018-12-17T22:46:50.624988125Z 71 PC: 13d52 | Get current directory
2018-12-17T22:46:50.628496136Z 14 PC: 13d98 | Set default drive (Drive = 'C')
2018-12-17T22:46:50.631038513Z 25 PC: 13d9c | Get default drive
2018-12-17T22:46:50.632448382Z 59 PC: 13e06 | Change current directory
2018-12-17T22:46:50.636512036Z 26 PC: 13299 | Set disk transfer address
2018-12-17T22:46:50.639022603Z 78 PC: 132a5 | Find first file
2018-12-17T22:46:50.64504042Z 26 PC: 132bd | Set disk transfer address
2018-12-17T22:46:50.646617613Z 79 PC: 132c2 | Find next file
2018-12-17T22:46:50.650348012Z 26 PC: 132bd | Set disk transfer address
2018-12-17T22:46:50.652238213Z 79 PC: 132c2 | Find next file
2018-12-17T22:46:50.655500172Z 26 PC: 132bd | Set disk transfer address
2018-12-17T22:46:50.65774543Z 79 PC: 132c2 | Find next file
2018-12-17T22:46:50.660725128Z 25 PC: 13d3f | Get default drive
2018-12-17T22:46:50.662331065Z 71 PC: 13d52 | Get current directory
2018-12-17T22:46:50.66649039Z 14 PC: 13d98 | Set default drive (Drive = 'C')
2018-12-17T22:46:50.668547656Z 25 PC: 13d9c | Get default drive
2018-12-17T22:46:50.670255374Z 59 PC: 13e06 | Change current directory
2018-12-17T22:46:50.67768896Z 26 PC: 13299 | Set disk transfer address
2018-12-17T22:46:50.679580935Z 78 PC: 132a5 | Find first file
2018-12-17T22:46:50.689190129Z 67 PC: 13241 | Get or set file attributes
2018-12-17T22:46:50.697099109Z 67 PC: 13268 | Get or set file attributes
2018-12-17T22:46:51.045985813Z 61 PC: 13af0 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:46:51.053812127Z 63 PC: 13b82 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:46:51.060966709Z 63 PC: 13b82 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:46:51.064099475Z 62 PC: 13b40 | Close file
2018-12-17T22:46:51.070001805Z 67 PC: 13268 | Get or set file attributes
2018-12-17T22:46:51.083325046Z 26 PC: 132bd | Set disk transfer address
2018-12-17T22:46:51.092125Z 79 PC: 132c2 | Find next file
2018-12-17T22:46:51.095556106Z 48 PC: 13cb2 | Get DOS version
2018-12-17T22:46:51.098429234Z 67 PC: 13241 | Get or set file attributes
2018-12-17T22:46:51.106790474Z 67 PC: 13268 | Get or set file attributes
2018-12-17T22:46:51.1174975Z 61 PC: 13af0 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:46:51.125470289Z 61 PC: 13af0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:46:51.133645609Z 60 PC: 13af0 | Create or truncate file
2018-12-17T22:46:51.144092788Z 63 PC: 13bc3 | Read file or device (Read 6848 bytes on handle 6)
2018-12-17T22:46:51.151771545Z 64 PC: 13bc3 | Write file or device (Write 6848 bytes on handle 7)
2018-12-17T22:46:51.164050675Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:51.170572158Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:51.186649203Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:51.194626722Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:51.20352526Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:51.210378176Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:51.219844912Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:51.235718916Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:51.244425565Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:51.252138826Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:51.261112907Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:51.268387124Z 64 PC: 13bc3 | Write file or device (Write 968 bytes on handle 7)
2018-12-17T22:46:51.277908322Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:51.280314072Z 62 PC: 13b40 | Close file
2018-12-17T22:46:51.282641525Z 62 PC: 13b40 | Close file
2018-12-17T22:46:51.285510465Z 62 PC: 13b40 | Close file
2018-12-17T22:46:51.295152782Z 65 PC: 13c39 | Delete file (Filename = 'ATTRIB.EXE')
2018-12-17T22:46:51.306873402Z 86 PC: 13c7d | Rename file
2018-12-17T22:46:51.319147854Z 61 PC: 13af0 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:46:51.327689212Z 64 PC: 13b82 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:46:51.333933814Z 64 PC: 13b82 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:46:51.337121222Z 62 PC: 13b40 | Close file
2018-12-17T22:46:51.346879437Z 67 PC: 13268 | Get or set file attributes
2018-12-17T22:46:51.357836162Z 14 PC: 13d98 | Set default drive (Drive = 'C')
2018-12-17T22:46:51.359125835Z 25 PC: 13d9c | Get default drive
2018-12-17T22:46:51.361391171Z 59 PC: 13e06 | Change current directory
2018-12-17T22:46:51.365279677Z 26 PC: 132bd | Set disk transfer address
2018-12-17T22:46:51.366635785Z 79 PC: 132c2 | Find next file
2018-12-17T22:46:51.371076268Z 26 PC: 132bd | Set disk transfer address
2018-12-17T22:46:51.372393403Z 79 PC: 132c2 | Find next file
2018-12-17T22:46:51.375469332Z 25 PC: 13d3f | Get default drive
2018-12-17T22:46:51.377660178Z 71 PC: 13d52 | Get current directory
2018-12-17T22:46:51.381157599Z 14 PC: 13d98 | Set default drive (Drive = 'C')
2018-12-17T22:46:51.382908819Z 25 PC: 13d9c | Get default drive
2018-12-17T22:46:51.385437379Z 59 PC: 13e06 | Change current directory
2018-12-17T22:46:51.392687041Z 26 PC: 13299 | Set disk transfer address
2018-12-17T22:46:51.394061433Z 78 PC: 132a5 | Find first file
2018-12-17T22:46:51.4048116Z 67 PC: 13241 | Get or set file attributes
2018-12-17T22:46:51.411040824Z 67 PC: 13268 | Get or set file attributes
2018-12-17T22:46:51.421051602Z 61 PC: 13af0 | Open file (Filename = 'SETUP.EXE')
2018-12-17T22:46:51.430067962Z 63 PC: 13b82 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:46:51.436074597Z 63 PC: 13b82 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:46:51.439078241Z 62 PC: 13b40 | Close file
2018-12-17T22:46:51.442307608Z 67 PC: 13268 | Get or set file attributes
2018-12-17T22:46:51.452327173Z 26 PC: 132bd | Set disk transfer address
2018-12-17T22:46:51.45421506Z 79 PC: 132c2 | Find next file
2018-12-17T22:46:51.459673335Z 48 PC: 13cb2 | Get DOS version
2018-12-17T22:46:51.461427841Z 67 PC: 13241 | Get or set file attributes
2018-12-17T22:46:51.467675229Z 67 PC: 13268 | Get or set file attributes
2018-12-17T22:46:51.479196967Z 61 PC: 13af0 | Open file (Filename = 'SETUP.EXE')
2018-12-17T22:46:51.488027658Z 61 PC: 13af0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:46:51.499998679Z 60 PC: 13af0 | Create or truncate file
2018-12-17T22:46:51.513583983Z 63 PC: 13bc3 | Read file or device (Read 6848 bytes on handle 6)
2018-12-17T22:46:51.522663041Z 64 PC: 13bc3 | Write file or device (Write 6848 bytes on handle 7)
2018-12-17T22:46:51.53718231Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:51.544748706Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:51.554730821Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:51.563122397Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:51.571711213Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:51.57973549Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:51.588878438Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:51.595687961Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:51.605671309Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:51.61273Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:51.621547547Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:51.630848853Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:51.639990398Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:51.646991331Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:51.656712325Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:51.665171398Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:51.67431644Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:51.68163492Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:51.691139858Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:51.697572684Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:51.706750057Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:51.713770186Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:51.722542938Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:51.730079288Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:51.73901686Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:51.74677711Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:51.757731392Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:51.764682331Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:51.773125995Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:51.780905551Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:51.789441399Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:51.796954143Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:51.807305021Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:51.814418316Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:51.823848733Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:51.832186328Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:51.8412406Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:51.848050123Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:51.857421351Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:51.864535557Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:51.873331552Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:51.882476394Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:51.891431419Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:51.898352652Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:51.908236072Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:51.917819938Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:51.92649143Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:51.934008733Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:51.942578405Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:51.949986012Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:52.15430526Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:52.161669796Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:52.282819824Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:52.290666628Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:52.302753506Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:52.312396453Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:52.334242769Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:52.345192271Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:52.355136845Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:52.36790878Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:52.377516392Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:52.38526493Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:52.394910031Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:52.401816888Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:52.412212048Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:52.419877129Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:52.428944396Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:52.437019397Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:52.44703837Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:52.458271576Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:52.468122303Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:52.475645508Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:52.484496027Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:52.492303575Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:52.502166576Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:52.50870472Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:52.515909276Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:52.520887048Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:52.527231468Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:52.533044419Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:52.53997439Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:52.54565883Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:52.553500523Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:52.558953277Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:52.566123699Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:52.583712085Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:52.591596718Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:52.599207799Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:52.607237625Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:52.612507275Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:52.619648072Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:52.62570955Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:52.632842983Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:52.637814733Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:52.799903328Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:52.806952181Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.004158354Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.012664306Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.021447999Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.028929094Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.039888615Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.046861927Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.05589605Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.06386973Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.072702396Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.080252822Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.090335485Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.098714387Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.10781187Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.115897751Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.125208334Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.130519443Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.138138448Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.143616079Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.151013497Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.156791072Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.16443261Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.172624801Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.182493562Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.18986914Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.200305317Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.207410947Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.216115321Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.224150929Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.23462629Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.242307872Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.252236747Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.260018507Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.268905143Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.27743566Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.28668066Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.294629775Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.30502218Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.312234662Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.321097413Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.329059672Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.338088035Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.343220909Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.349909575Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.354814921Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.361524437Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.367575616Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.374022209Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.378987517Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.385864317Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.390857128Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.397471896Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.403139304Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.409371503Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.415035074Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.422667213Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.431217678Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.440567935Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.447138309Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.455744319Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.463149522Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.471873562Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.478673348Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.488347684Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.495280069Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.50468581Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.517076621Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.525947728Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.533143888Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.541468418Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.547808059Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.557210575Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.564028464Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.57268635Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.580355219Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.588963733Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.596026182Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.604927906Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.609732363Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.615857601Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.62200976Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.627977782Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.632609705Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.640350289Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.645299818Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.651452447Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.65691491Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.663447413Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.668893596Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.675433283Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.680212131Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.687659393Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.69241604Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.698515009Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.704370961Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.713010222Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.720061089Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.729019842Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.733907915Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.740529175Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.747633693Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.753807683Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.759137437Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.765704155Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.770439772Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.777327132Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.782158198Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.78823735Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.793662343Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.7998136Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.805792142Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.821241539Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.828318385Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.83756667Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.844881233Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.853409687Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.860632396Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.869588673Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.877512061Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.887046494Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.893895742Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.902795533Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.910719461Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.919521859Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.926346641Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.935669016Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.943486844Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.952569048Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.960965844Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.970114022Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.977483387Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:53.986543359Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:53.996197307Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.007975156Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.013801181Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.022499915Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.030936816Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.039711342Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.046450583Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.055756978Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.062865374Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.073087349Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.081131672Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.089927578Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.097285603Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.1067638Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.114254213Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.123323703Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.13155062Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.140241639Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.147827311Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.156237692Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.16303322Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.172687919Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.179359103Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.187973678Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.196720452Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.205361987Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.212148047Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.221366738Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.228367781Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.237178464Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.244307288Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.252901135Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.261221838Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.269930068Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.276560936Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.286200758Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.293244021Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.301811327Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.310410233Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.319051108Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.326329973Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.33585059Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.342504532Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.351488632Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.359930031Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.369066136Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.376279669Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.386173919Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.393730826Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.402423568Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.410464555Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.419249531Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.426005995Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.43483873Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.441378156Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.450949039Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.458261938Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.466633677Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.479257134Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.488658347Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.496188324Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.50624057Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.513934747Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.523248786Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.532120564Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.542421046Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.549628278Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.558702216Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.56528347Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.575699861Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.582475491Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.591179374Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.599181518Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.611833359Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.618594432Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.628481888Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.635299577Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.644464717Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.652623195Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.661762536Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.669299957Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.678673359Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.68583298Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.695288114Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.70200312Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.711821798Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.719491638Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.728050098Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.735099812Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.745443236Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.752576468Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.761951331Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.770053023Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.778738592Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.786441274Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.795558192Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.802226972Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.811732952Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.81872045Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.828701332Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.835976821Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.844683129Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.852397412Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.860912811Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.867564298Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.876736431Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.883252573Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.892054069Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.899205506Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.908055083Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.915221948Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.923661153Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.930567669Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.939016794Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.946226259Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.955272104Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.962451483Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.97305749Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.981124526Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:54.989932664Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:54.996378526Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:55.004750445Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.01201835Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:55.022332377Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.029033768Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:55.037761376Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.046069335Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:55.055311819Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.062169073Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:55.07203547Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.078820768Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:55.089197815Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.09605101Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:55.104671246Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.112731831Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:55.121378897Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.128536835Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:55.13836999Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.145400589Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:55.156063843Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.162940913Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:55.172082589Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.179882364Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:55.190534136Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.197336386Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:55.206518587Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.213382424Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:55.223284608Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.230645016Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:55.2397858Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.247350303Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:55.256863125Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.263888003Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:55.273146177Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.280698437Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:55.289054597Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.297639125Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:55.307001194Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.315148843Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:55.323934239Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.33083848Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:55.341798512Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.348557371Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:55.357069454Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.364245907Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:55.370472505Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.375585952Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:55.382481878Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.387615103Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:55.394659668Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.399801088Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:55.406576046Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.41228357Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:55.418980332Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.428643547Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:55.435161724Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.440205349Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:55.447042825Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.452102872Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:55.459860037Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.465133144Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:55.471579075Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.477808659Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:55.484302369Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.490004322Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:55.496414626Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.501588426Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:55.50881861Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.515488932Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:55.522025112Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.527437311Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:55.533745994Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.539956022Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:55.547227794Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.555288578Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:55.563775464Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.582000124Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:55.591662568Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.59880597Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:55.607872463Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.615016005Z 64 PC: 13bc3 | Write file or device (Write 336 bytes on handle 7)
2018-12-17T22:46:55.622597288Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.625278966Z 62 PC: 13b40 | Close file
2018-12-17T22:46:55.628436649Z 62 PC: 13b40 | Close file
2018-12-17T22:46:55.630824145Z 62 PC: 13b40 | Close file
2018-12-17T22:46:55.639967113Z 65 PC: 13c39 | Delete file (Filename = 'SETUP.EXE')
2018-12-17T22:46:55.651695418Z 86 PC: 13c7d | Rename file
2018-12-17T22:46:55.665736688Z 61 PC: 13af0 | Open file (Filename = 'SETUP.EXE')
2018-12-17T22:46:55.674356434Z 64 PC: 13b82 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:46:55.682249634Z 64 PC: 13b82 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:46:55.686230162Z 62 PC: 13b40 | Close file
2018-12-17T22:46:55.696750407Z 67 PC: 13268 | Get or set file attributes
2018-12-17T22:46:55.711645633Z 14 PC: 13d98 | Set default drive (Drive = 'C')
2018-12-17T22:46:55.7140341Z 25 PC: 13d9c | Get default drive
2018-12-17T22:46:55.715282446Z 59 PC: 13e06 | Change current directory
2018-12-17T22:46:55.72007484Z 26 PC: 132bd | Set disk transfer address
2018-12-17T22:46:55.722024743Z 79 PC: 132c2 | Find next file
2018-12-17T22:46:55.725428648Z 26 PC: 132bd | Set disk transfer address
2018-12-17T22:46:55.728064641Z 79 PC: 132c2 | Find next file
2018-12-17T22:46:55.731319165Z 26 PC: 132bd | Set disk transfer address
2018-12-17T22:46:55.733150436Z 79 PC: 132c2 | Find next file
2018-12-17T22:46:55.736479791Z 14 PC: 13d98 | Set default drive (Drive = 'A')
2018-12-17T22:46:55.738687419Z 25 PC: 13d9c | Get default drive
2018-12-17T22:46:55.741294898Z 59 PC: 13e06 | Change current directory
2018-12-17T22:46:55.751945549Z 42 PC: 131c7 | Get date 0x131c7: xor ah, ah
0x131c9: les di, ptr [bp + 6]
0x131cc: stosw word ptr es:[di], ax
0x131cd: mov al, dl
0x131cf: les di, ptr [bp + 0xa]
0x131d2: stosw word ptr es:[di], ax
0x131d3: mov al, dh
0x131d5: les di, ptr [bp + 0xe]
0x131d8: stosw word ptr es:[di], ax
0x131d9: xchg ax, cx
0x131da: les di, ptr [bp + 0x12]
0x131dd: stosw word ptr es:[di], ax
0x131de: pop bp
0x131df: retf 0x10
0x131e2: push bp
0x131e3: mov bp, sp
0x131e5: mov cx, word ptr [bp + 0xa]
0x131e8: mov dh, byte ptr [bp + 8]
0x131eb: mov dl, byte ptr [bp + 6]
0x131ee: mov ah, 0x2b
2018-12-17T22:46:55.754515617Z 48 PC: 13cb2 | Get DOS version
2018-12-17T22:46:55.757359871Z 61 PC: 13af0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:46:55.767632832Z 60 PC: 13af0 | Create or truncate file
2018-12-17T22:46:55.780610184Z 66 PC: 13c22 | Move file pointer
2018-12-17T22:46:55.782594041Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.791475898Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:55.801279467Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.81003631Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:55.819358164Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.828557608Z 64 PC: 13bc3 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:55.837479921Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.84643721Z 64 PC: 13bc3 | Write file or device (Write 704 bytes on handle 6)
2018-12-17T22:46:55.855473828Z 63 PC: 13bc3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:55.858191404Z 62 PC: 13b40 | Close file
2018-12-17T22:46:55.860796488Z 62 PC: 13b40 | Close file
2018-12-17T22:46:55.87186852Z 67 PC: 13268 | Get or set file attributes
2018-12-17T22:46:55.88320532Z 53 PC: 1339a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:46:55.884858446Z 37 PC: 133a3 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:46:55.88668588Z 53 PC: 1339a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:46:55.889271527Z 37 PC: 133a3 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:46:55.890858449Z 53 PC: 1339a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:46:55.893404132Z 37 PC: 133a3 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:46:55.895345629Z 53 PC: 1339a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:46:55.896968338Z 37 PC: 133a3 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:46:55.899714087Z 53 PC: 1339a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:46:55.901340312Z 37 PC: 133a3 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:46:55.903742225Z 53 PC: 1339a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:55.905381234Z 37 PC: 133a3 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:55.906900739Z 53 PC: 1339a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:46:55.910021532Z 37 PC: 133a3 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:46:55.911423977Z 53 PC: 1339a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:46:55.913010568Z 37 PC: 133a3 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:46:55.915079455Z 53 PC: 1339a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:46:55.916643103Z 37 PC: 133a3 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:46:55.919120368Z 53 PC: 1339a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:46:55.920985091Z 37 PC: 133a3 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:46:55.922507261Z 53 PC: 1339a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:46:55.925119088Z 37 PC: 133a3 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:46:55.926649934Z 53 PC: 1339a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:46:55.929111068Z 37 PC: 133a3 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:46:55.931008753Z 53 PC: 1339a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:46:55.932591647Z 37 PC: 133a3 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:46:55.935207372Z 53 PC: 1339a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:46:55.936895343Z 37 PC: 133a3 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:46:55.938594666Z 53 PC: 1339a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:46:55.94082711Z 37 PC: 133a3 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:46:55.9423705Z 53 PC: 1339a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:46:55.944653048Z 37 PC: 133a3 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:46:55.945960955Z 53 PC: 1339a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:46:55.947271628Z 37 PC: 133a3 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:46:55.949880379Z 53 PC: 1339a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:46:55.951473753Z 37 PC: 133a3 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:46:55.953995451Z 53 PC: 1339a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:46:55.955711245Z 37 PC: 133a3 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:46:55.957409325Z 41 PC: 13351 | Parse filename
2018-12-17T22:46:55.960348337Z 41 PC: 1335f | Parse filename
2018-12-17T22:46:55.962068719Z 75 PC: 1336a | Execute program
2018-12-17T22:46:55.976769038Z 53 PC: 1b07a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:46:55.97844151Z 53 PC: 1b07a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:46:55.979626647Z 53 PC: 1b07a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:46:55.981753803Z 53 PC: 1b07a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:46:55.983392181Z 53 PC: 1b07a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:46:55.984928688Z 53 PC: 1b07a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:55.986554954Z 53 PC: 1b07a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:46:55.987722668Z 53 PC: 1b07a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:46:55.989938862Z 53 PC: 1b07a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:46:55.991239215Z 53 PC: 1b07a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:46:55.992447445Z 53 PC: 1b07a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:46:55.994283935Z 53 PC: 1b07a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:46:55.995563199Z 53 PC: 1b07a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:46:55.997764284Z 53 PC: 1b07a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:46:55.998994706Z 53 PC: 1b07a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:46:56.00016275Z 53 PC: 1b07a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:46:56.002237068Z 53 PC: 1b07a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:46:56.003368123Z 53 PC: 1b07a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:46:56.005329948Z 53 PC: 1b07a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:46:56.00659233Z 37 PC: 1b08f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:46:56.007678471Z 37 PC: 1b097 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:46:56.009412268Z 37 PC: 1b09f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:56.010581014Z 37 PC: 1b0a7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:46:56.012394201Z 68 PC: 1bdd2 | I/O control for devices (Set for = '')
2018-12-17T22:46:56.014233887Z 26 PC: 1aee9 | Set disk transfer address
2018-12-17T22:46:56.015322723Z 78 PC: 1aef5 | Find first file
2018-12-17T22:46:56.021966124Z 67 PC: 1ae91 | Get or set file attributes
2018-12-17T22:46:56.026436664Z 67 PC: 1aeb8 | Get or set file attributes
2018-12-17T22:46:56.034654654Z 61 PC: 1b740 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:46:56.041253492Z 66 PC: 1bed1 | Move file pointer
2018-12-17T22:46:56.043080124Z 66 PC: 1bedf | Move file pointer
2018-12-17T22:46:56.045163277Z 66 PC: 1beed | Move file pointer
2018-12-17T22:46:56.047241883Z 66 PC: 1b872 | Move file pointer
2018-12-17T22:46:56.050228794Z 64 PC: 1b813 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:46:56.061419369Z 62 PC: 1b790 | Close file
2018-12-17T22:46:56.070484952Z 67 PC: 1aeb8 | Get or set file attributes
2018-12-17T22:46:56.082047706Z 26 PC: 1af0d | Set disk transfer address
2018-12-17T22:46:56.083375631Z 79 PC: 1af12 | Find next file
2018-12-17T22:46:56.086667155Z 67 PC: 1ae91 | Get or set file attributes
2018-12-17T22:46:56.09343493Z 67 PC: 1aeb8 | Get or set file attributes
2018-12-17T22:46:56.105885042Z 61 PC: 1b740 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:46:56.119252617Z 66 PC: 1bed1 | Move file pointer
2018-12-17T22:46:56.120995Z 66 PC: 1bedf | Move file pointer
2018-12-17T22:46:56.122620204Z 66 PC: 1beed | Move file pointer
2018-12-17T22:46:56.125185914Z 66 PC: 1b872 | Move file pointer
2018-12-17T22:46:56.126886188Z 64 PC: 1b813 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:46:56.360127543Z 62 PC: 1b790 | Close file
2018-12-17T22:46:56.444498619Z 67 PC: 1aeb8 | Get or set file attributes
2018-12-17T22:46:56.456998174Z 26 PC: 1af0d | Set disk transfer address
2018-12-17T22:46:56.459365191Z 79 PC: 1af12 | Find next file
2018-12-17T22:46:56.462727368Z 67 PC: 1ae91 | Get or set file attributes
2018-12-17T22:46:56.468895937Z 67 PC: 1aeb8 | Get or set file attributes
2018-12-17T22:46:56.480365266Z 61 PC: 1b740 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:46:56.487463672Z 66 PC: 1bed1 | Move file pointer
2018-12-17T22:46:56.490105836Z 66 PC: 1bedf | Move file pointer
2018-12-17T22:46:56.491591107Z 66 PC: 1beed | Move file pointer
2018-12-17T22:46:56.49321606Z 66 PC: 1b872 | Move file pointer
2018-12-17T22:46:56.495994951Z 64 PC: 1b813 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:46:56.506226675Z 62 PC: 1b790 | Close file
2018-12-17T22:46:56.514886424Z 67 PC: 1aeb8 | Get or set file attributes
2018-12-17T22:46:56.526374558Z 26 PC: 1af0d | Set disk transfer address
2018-12-17T22:46:56.52754105Z 79 PC: 1af12 | Find next file
2018-12-17T22:46:56.532431008Z 67 PC: 1ae91 | Get or set file attributes
2018-12-17T22:46:56.538658458Z 67 PC: 1aeb8 | Get or set file attributes
2018-12-17T22:46:56.553255953Z 61 PC: 1b740 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:46:56.562379534Z 66 PC: 1bed1 | Move file pointer
2018-12-17T22:46:56.564517351Z 66 PC: 1bedf | Move file pointer
2018-12-17T22:46:56.567690593Z 66 PC: 1beed | Move file pointer
2018-12-17T22:46:56.56997728Z 66 PC: 1b872 | Move file pointer
2018-12-17T22:46:56.571858614Z 64 PC: 1b813 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:46:56.584288978Z 62 PC: 1b790 | Close file
2018-12-17T22:46:56.593517106Z 67 PC: 1aeb8 | Get or set file attributes
2018-12-17T22:46:56.607081751Z 26 PC: 1af0d | Set disk transfer address
2018-12-17T22:46:56.608835346Z 79 PC: 1af12 | Find next file
2018-12-17T22:46:56.612277654Z 67 PC: 1ae91 | Get or set file attributes
2018-12-17T22:46:56.620277193Z 67 PC: 1aeb8 | Get or set file attributes
2018-12-17T22:46:56.631158687Z 61 PC: 1b740 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:46:56.639473308Z 66 PC: 1bed1 | Move file pointer
2018-12-17T22:46:56.641664886Z 66 PC: 1bedf | Move file pointer
2018-12-17T22:46:56.643278147Z 66 PC: 1beed | Move file pointer
2018-12-17T22:46:56.646011944Z 66 PC: 1b872 | Move file pointer
2018-12-17T22:46:56.647915911Z 64 PC: 1b813 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:46:56.66040201Z 62 PC: 1b790 | Close file
2018-12-17T22:46:56.669734864Z 67 PC: 1aeb8 | Get or set file attributes
2018-12-17T22:46:56.681923504Z 26 PC: 1af0d | Set disk transfer address
2018-12-17T22:46:56.684340035Z 79 PC: 1af12 | Find next file
2018-12-17T22:46:56.688080542Z 67 PC: 1ae91 | Get or set file attributes
2018-12-17T22:46:56.696053722Z 67 PC: 1aeb8 | Get or set file attributes
2018-12-17T22:46:56.706785024Z 61 PC: 1b740 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:46:56.714185578Z 66 PC: 1bed1 | Move file pointer
2018-12-17T22:46:56.717345835Z 66 PC: 1bedf | Move file pointer
2018-12-17T22:46:56.719103177Z 66 PC: 1beed | Move file pointer
2018-12-17T22:46:56.720959996Z 66 PC: 1b872 | Move file pointer
2018-12-17T22:46:56.723781888Z 64 PC: 1b813 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:46:56.734891451Z 62 PC: 1b790 | Close file
2018-12-17T22:46:56.744815616Z 67 PC: 1aeb8 | Get or set file attributes
2018-12-17T22:46:56.760633364Z 26 PC: 1af0d | Set disk transfer address
2018-12-17T22:46:56.762256103Z 79 PC: 1af12 | Find next file
2018-12-17T22:46:56.769966119Z 67 PC: 1ae91 | Get or set file attributes
2018-12-17T22:46:56.776930474Z 67 PC: 1aeb8 | Get or set file attributes
2018-12-17T22:46:56.789470834Z 61 PC: 1b740 | Open file (Filename = 'PAH.COM')
2018-12-17T22:46:56.806075922Z 66 PC: 1bed1 | Move file pointer
2018-12-17T22:46:56.808512841Z 66 PC: 1bedf | Move file pointer
2018-12-17T22:46:56.810461051Z 66 PC: 1beed | Move file pointer
2018-12-17T22:46:56.812002046Z 66 PC: 1b872 | Move file pointer
2018-12-17T22:46:56.814509227Z 64 PC: 1b813 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:46:56.825453018Z 62 PC: 1b790 | Close file
2018-12-17T22:46:56.833998803Z 67 PC: 1aeb8 | Get or set file attributes
2018-12-17T22:46:56.844789918Z 26 PC: 1af0d | Set disk transfer address
2018-12-17T22:46:56.84594566Z 79 PC: 1af12 | Find next file
2018-12-17T22:46:56.854362523Z 26 PC: 1aee9 | Set disk transfer address
2018-12-17T22:46:56.856254568Z 78 PC: 1aef5 | Find first file
2018-12-17T22:46:56.86387742Z 26 PC: 1aee9 | Set disk transfer address
2018-12-17T22:46:56.8661238Z 78 PC: 1aef5 | Find first file
2018-12-17T22:46:56.872912965Z 67 PC: 1ae91 | Get or set file attributes
2018-12-17T22:46:56.885448628Z 67 PC: 1aeb8 | Get or set file attributes
2018-12-17T22:46:56.896779146Z 61 PC: 1b740 | Open file (Filename = '$$$KYE.EXE')
2018-12-17T22:46:56.904174319Z 63 PC: 1b7d2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:46:56.912186132Z 63 PC: 1b7d2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:46:56.915468108Z 62 PC: 1b790 | Close file
2018-12-17T22:46:56.918723915Z 67 PC: 1aeb8 | Get or set file attributes
2018-12-17T22:46:56.930146416Z 26 PC: 1af0d | Set disk transfer address
2018-12-17T22:46:56.931610697Z 79 PC: 1af12 | Find next file
2018-12-17T22:46:56.93645584Z 48 PC: 1b902 | Get DOS version
2018-12-17T22:46:56.938337475Z 67 PC: 1ae91 | Get or set file attributes
2018-12-17T22:46:56.945772554Z 67 PC: 1aeb8 | Get or set file attributes
2018-12-17T22:46:56.95737843Z 61 PC: 1b740 | Open file (Filename = '$$$KYE.EXE')
2018-12-17T22:46:56.964805153Z 61 PC: 1b740 | Open file (Filename = '$$$kye.exe')
2018-12-17T22:46:56.972985562Z 60 PC: 1b740 | Create or truncate file
2018-12-17T22:46:56.985703827Z 63 PC: 1b813 | Read file or device (Read 6848 bytes on handle 6)
2018-12-17T22:46:56.994897951Z 64 PC: 1b813 | Write file or device (Write 6848 bytes on handle 7)
2018-12-17T22:46:57.005119646Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:57.012379536Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:57.023772Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:57.030953673Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:57.040744678Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:57.049594115Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 7)
2018-12-17T22:46:57.059070318Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:57.067170106Z 64 PC: 1b813 | Write file or device (Write 704 bytes on handle 7)
2018-12-17T22:46:57.075689452Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:57.078653231Z 62 PC: 1b790 | Close file
2018-12-17T22:46:57.081368663Z 62 PC: 1b790 | Close file
2018-12-17T22:46:57.08337376Z 62 PC: 1b790 | Close file
2018-12-17T22:46:57.092680796Z 65 PC: 1b889 | Delete file (Filename = '$$$KYE.EXE')
2018-12-17T22:46:57.105448243Z 86 PC: 1b8cd | Rename file
2018-12-17T22:46:57.119821628Z 61 PC: 1b740 | Open file (Filename = '$$$KYE.EXE')
2018-12-17T22:46:57.127353449Z 64 PC: 1b7d2 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:46:57.13446993Z 64 PC: 1b7d2 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:46:57.137747948Z 62 PC: 1b790 | Close file
2018-12-17T22:46:57.146836494Z 67 PC: 1aeb8 | Get or set file attributes
2018-12-17T22:46:57.158426709Z 25 PC: 1b98f | Get default drive
2018-12-17T22:46:57.159864711Z 71 PC: 1b9a2 | Get current directory
2018-12-17T22:46:57.163261092Z 14 PC: 1b9e8 | Set default drive (Drive = 'C')
2018-12-17T22:46:57.165004537Z 25 PC: 1b9ec | Get default drive
2018-12-17T22:46:57.166247102Z 59 PC: 1ba56 | Change current directory
2018-12-17T22:46:57.17099345Z 26 PC: 1aee9 | Set disk transfer address
2018-12-17T22:46:57.172267514Z 78 PC: 1aef5 | Find first file
2018-12-17T22:46:57.190890031Z 26 PC: 1af0d | Set disk transfer address
2018-12-17T22:46:57.192418202Z 79 PC: 1af12 | Find next file
2018-12-17T22:46:57.195524899Z 26 PC: 1af0d | Set disk transfer address
2018-12-17T22:46:57.197776359Z 79 PC: 1af12 | Find next file
2018-12-17T22:46:57.200641302Z 26 PC: 1af0d | Set disk transfer address
2018-12-17T22:46:57.202337829Z 79 PC: 1af12 | Find next file
2018-12-17T22:46:57.205884463Z 25 PC: 1b98f | Get default drive
2018-12-17T22:46:57.207401663Z 71 PC: 1b9a2 | Get current directory
2018-12-17T22:46:57.211228994Z 14 PC: 1b9e8 | Set default drive (Drive = 'C')
2018-12-17T22:46:57.212723112Z 25 PC: 1b9ec | Get default drive
2018-12-17T22:46:57.215300314Z 59 PC: 1ba56 | Change current directory
2018-12-17T22:46:57.225174205Z 26 PC: 1aee9 | Set disk transfer address
2018-12-17T22:46:57.226583112Z 78 PC: 1aef5 | Find first file
2018-12-17T22:46:57.236704828Z 67 PC: 1ae91 | Get or set file attributes
2018-12-17T22:46:57.243084875Z 67 PC: 1aeb8 | Get or set file attributes
2018-12-17T22:46:57.254319522Z 61 PC: 1b740 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:46:57.262063763Z 63 PC: 1b7d2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:46:57.268378637Z 63 PC: 1b7d2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:46:57.272171964Z 62 PC: 1b790 | Close file
2018-12-17T22:46:57.27427239Z 67 PC: 1aeb8 | Get or set file attributes
2018-12-17T22:46:57.285319054Z 26 PC: 1af0d | Set disk transfer address
2018-12-17T22:46:57.286835904Z 79 PC: 1af12 | Find next file
2018-12-17T22:46:57.291795482Z 48 PC: 1b902 | Get DOS version
2018-12-17T22:46:57.293504283Z 67 PC: 1ae91 | Get or set file attributes
2018-12-17T22:46:57.300878889Z 67 PC: 1aeb8 | Get or set file attributes
2018-12-17T22:46:57.312077739Z 61 PC: 1b740 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:46:57.319311369Z 61 PC: 1b740 | Open file (Filename = '$$$kye.exe')
2018-12-17T22:46:57.330268305Z 60 PC: 1b740 | Create or truncate file
2018-12-17T22:46:57.376581699Z 64 PC: 1b813 | Write file or device (Write 6848 bytes on handle 6)
2018-12-17T22:46:57.429521062Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:57.437273517Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:57.484510416Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:57.496439718Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:57.601899727Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:57.610565388Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:57.677240837Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:57.684370723Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:57.693955281Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:57.702035301Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:57.711129477Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:57.71977482Z 64 PC: 1b813 | Write file or device (Write 2001 bytes on handle 6)
2018-12-17T22:46:57.728351824Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:57.731925579Z 62 PC: 1b790 | Close file
2018-12-17T22:46:57.737964225Z 62 PC: 1b790 | Close file
2018-12-17T22:46:57.746193896Z 65 PC: 1b889 | Delete file (Filename = 'CHKDSK.EXE')
2018-12-17T22:46:57.758417221Z 86 PC: 1b8cd | Rename file
2018-12-17T22:46:57.770413189Z 61 PC: 1b740 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:46:57.778380449Z 64 PC: 1b7d2 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:46:57.784759494Z 64 PC: 1b7d2 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:46:57.788903409Z 62 PC: 1b790 | Close file
2018-12-17T22:46:57.79672261Z 67 PC: 1aeb8 | Get or set file attributes
2018-12-17T22:46:57.807208781Z 14 PC: 1b9e8 | Set default drive (Drive = 'C')
2018-12-17T22:46:57.809282116Z 25 PC: 1b9ec | Get default drive
2018-12-17T22:46:57.810475809Z 59 PC: 1ba56 | Change current directory
2018-12-17T22:46:57.815390393Z 26 PC: 1af0d | Set disk transfer address
2018-12-17T22:46:57.816487614Z 79 PC: 1af12 | Find next file
2018-12-17T22:46:57.820147641Z 26 PC: 1af0d | Set disk transfer address
2018-12-17T22:46:57.821722871Z 79 PC: 1af12 | Find next file
2018-12-17T22:46:57.824398187Z 25 PC: 1b98f | Get default drive
2018-12-17T22:46:57.82660874Z 71 PC: 1b9a2 | Get current directory
2018-12-17T22:46:57.8294402Z 14 PC: 1b9e8 | Set default drive (Drive = 'C')
2018-12-17T22:46:57.830766341Z 25 PC: 1b9ec | Get default drive
2018-12-17T22:46:57.8325756Z 59 PC: 1ba56 | Change current directory
2018-12-17T22:46:57.838787151Z 26 PC: 1aee9 | Set disk transfer address
2018-12-17T22:46:57.840705154Z 78 PC: 1aef5 | Find first file
2018-12-17T22:46:57.847634783Z 67 PC: 1ae91 | Get or set file attributes
2018-12-17T22:46:57.855080472Z 67 PC: 1aeb8 | Get or set file attributes
2018-12-17T22:46:57.865716285Z 61 PC: 1b740 | Open file (Filename = 'WINHELP.EXE')
2018-12-17T22:46:57.8729896Z 63 PC: 1b7d2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:46:57.87969577Z 63 PC: 1b7d2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:46:57.882687991Z 62 PC: 1b790 | Close file
2018-12-17T22:46:57.885634257Z 67 PC: 1aeb8 | Get or set file attributes
2018-12-17T22:46:57.896855259Z 26 PC: 1af0d | Set disk transfer address
2018-12-17T22:46:57.898459072Z 79 PC: 1af12 | Find next file
2018-12-17T22:46:57.903427747Z 48 PC: 1b902 | Get DOS version
2018-12-17T22:46:57.905375647Z 67 PC: 1ae91 | Get or set file attributes
2018-12-17T22:46:57.912342136Z 67 PC: 1aeb8 | Get or set file attributes
2018-12-17T22:46:57.922327085Z 61 PC: 1b740 | Open file (Filename = 'WINHELP.EXE')
2018-12-17T22:46:57.930188085Z 61 PC: 1b740 | Open file (Filename = '$$$kye.exe')
2018-12-17T22:46:57.937644684Z 60 PC: 1b740 | Create or truncate file
2018-12-17T22:46:57.949209523Z 64 PC: 1b813 | Write file or device (Write 6848 bytes on handle 6)
2018-12-17T22:46:57.959905889Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:57.966929444Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:57.976447296Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:57.983295483Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:57.991929835Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:57.999517802Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.008322914Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.017084726Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.026269292Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.033401321Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.043713296Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.050967535Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.060835214Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.068330176Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.07709332Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.083295232Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.089660752Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.095720597Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.10216789Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.10751687Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.115209713Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.120314704Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.129667887Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.136570045Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.146368314Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.154256865Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.163097064Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.170950088Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.179869355Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.188473872Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.197118273Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.203969856Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.213172846Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.220633543Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.230299433Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.237080504Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.245939318Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.252922628Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.261994782Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.269458956Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.278713203Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.286673559Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.295961559Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.30149203Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.308707336Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.313623903Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.322744288Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.329592896Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.33897882Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.346710116Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.35571812Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.363724802Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.372208211Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.380051387Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.388855579Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.395662938Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.405919097Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.412876188Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.422852852Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.429698715Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.438886797Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.445841654Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.45446228Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.46240919Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.471654701Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.479358465Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.487953473Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.501184291Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.509969907Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.516937248Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.52679035Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.534441836Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.544341074Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.556040956Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.566084786Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.573583485Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.582544922Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.591157763Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.600880079Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.609515634Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.618581587Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.625915056Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.634646049Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.641502711Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.650501207Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.657965972Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.667182708Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.674271287Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.683798196Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.690781386Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.699412031Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.707564568Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.71615129Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.724776286Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.731353463Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.737687814Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.744198035Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.74949126Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.755967758Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.760949928Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.768568082Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.774182169Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.781344907Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.788998817Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.797961926Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.805671601Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.814430167Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.822561925Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.8319002Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.839602511Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.848120634Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.856005208Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.866179754Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.872755058Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.882084796Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.889125985Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.898146363Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.905296947Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.914352882Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.922041187Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.933907Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.941326079Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.950482511Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.958796522Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.967990777Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:58.982359031Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:58.993915904Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.005024865Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.015156552Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.022397295Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.032041905Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.041883355Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.05248848Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.059197054Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.068279348Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.076060477Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.084835574Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.092777996Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.101263789Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.109426645Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.118800196Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.126476118Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.135352976Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.14205116Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.152760731Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.159981838Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.169579129Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.176777403Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.187218421Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.195189446Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.20381946Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.212000731Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.220625655Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.228565322Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.238505208Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.246350798Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.256811692Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.266991658Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.277391677Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.284357083Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.294352133Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.30154659Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.314011048Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.333111082Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.344012303Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.352472389Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.361234832Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.369401986Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.37970337Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.387016109Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.397510355Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.415377755Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.425420754Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.440065939Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.450222Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.457670575Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.469221907Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.480141573Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.488839484Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.496567113Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.50572572Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.514932769Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.524154164Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.53278028Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.542363595Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.550820063Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.560326193Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.568415542Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.578635283Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.586073397Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.596683712Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.604454662Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.61407203Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.621584254Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.631064637Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.638177921Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.646792596Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.657121903Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.666008609Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.673787594Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.68631962Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.694893057Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.703760547Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.711179265Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.726824409Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.748997378Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.760209834Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.780624018Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.790789657Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.809077286Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.81880907Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.826975182Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.835667573Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.843935036Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.852842772Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.861359884Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.870595636Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.878510927Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.88835371Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.895394688Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.905424553Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.912602368Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.922509181Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.92974744Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.938658703Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.947816608Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.956459085Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.964638373Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.973334411Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.981233302Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:46:59.990310446Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:46:59.99737612Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:00.008034916Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:00.015176584Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:00.024935559Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:00.032023666Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:00.041861169Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:00.049305455Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:00.059176541Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:00.066326885Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:00.075775687Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:00.08334575Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:00.092304091Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:00.100593715Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:00.109440266Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:00.117504517Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:00.126297848Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:00.134266729Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:00.144049079Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:00.151083485Z 64 PC: 1b813 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:00.161107749Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:00.167709562Z 64 PC: 1b813 | Write file or device (Write 192 bytes on handle 6)
2018-12-17T22:47:00.172432315Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:00.174905051Z 62 PC: 1b790 | Close file
2018-12-17T22:47:00.178231731Z 62 PC: 1b790 | Close file
2018-12-17T22:47:00.187327239Z 65 PC: 1b889 | Delete file (Filename = 'WINHELP.EXE')
2018-12-17T22:47:00.199825441Z 86 PC: 1b8cd | Rename file
2018-12-17T22:47:00.213132442Z 61 PC: 1b740 | Open file (Filename = 'WINHELP.EXE')
2018-12-17T22:47:00.220357517Z 64 PC: 1b7d2 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:47:00.226885512Z 64 PC: 1b7d2 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:47:00.22976422Z 62 PC: 1b790 | Close file
2018-12-17T22:47:00.239672105Z 67 PC: 1aeb8 | Get or set file attributes
2018-12-17T22:47:00.25097995Z 14 PC: 1b9e8 | Set default drive (Drive = 'C')
2018-12-17T22:47:00.252904315Z 25 PC: 1b9ec | Get default drive
2018-12-17T22:47:00.254870399Z 59 PC: 1ba56 | Change current directory
2018-12-17T22:47:00.259262701Z 26 PC: 1af0d | Set disk transfer address
2018-12-17T22:47:00.262161207Z 79 PC: 1af12 | Find next file
2018-12-17T22:47:00.265518755Z 26 PC: 1af0d | Set disk transfer address
2018-12-17T22:47:00.268355675Z 79 PC: 1af12 | Find next file
2018-12-17T22:47:00.272284186Z 26 PC: 1af0d | Set disk transfer address
2018-12-17T22:47:00.27470275Z 79 PC: 1af12 | Find next file
2018-12-17T22:47:00.277612447Z 14 PC: 1b9e8 | Set default drive (Drive = 'A')
2018-12-17T22:47:00.280091144Z 25 PC: 1b9ec | Get default drive
2018-12-17T22:47:00.281473922Z 59 PC: 1ba56 | Change current directory
2018-12-17T22:47:00.29149545Z 42 PC: 1ae17 | Get date 0x1ae17: xor ah, ah
0x1ae19: les di, ptr [bp + 6]
0x1ae1c: stosw word ptr es:[di], ax
0x1ae1d: mov al, dl
0x1ae1f: les di, ptr [bp + 0xa]
0x1ae22: stosw word ptr es:[di], ax
0x1ae23: mov al, dh
0x1ae25: les di, ptr [bp + 0xe]
0x1ae28: stosw word ptr es:[di], ax
0x1ae29: xchg ax, cx
0x1ae2a: les di, ptr [bp + 0x12]
0x1ae2d: stosw word ptr es:[di], ax
0x1ae2e: pop bp
0x1ae2f: retf 0x10
0x1ae32: push bp
0x1ae33: mov bp, sp
0x1ae35: mov cx, word ptr [bp + 0xa]
0x1ae38: mov dh, byte ptr [bp + 8]
0x1ae3b: mov dl, byte ptr [bp + 6]
0x1ae3e: mov ah, 0x2b
2018-12-17T22:47:00.294376062Z 48 PC: 1b902 | Get DOS version
2018-12-17T22:47:00.296253259Z 61 PC: 1b740 | Open file (Filename = '$$$kye.exe')
2018-12-17T22:47:00.307728418Z 60 PC: 1b740 | Create or truncate file
2018-12-17T22:47:00.318714148Z 66 PC: 1b872 | Move file pointer
2018-12-17T22:47:00.320754862Z 63 PC: 1b813 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:00.3294828Z 62 PC: 1b790 | Close file
2018-12-17T22:47:00.333086601Z 67 PC: 1aeb8 | Get or set file attributes
2018-12-17T22:47:00.344469277Z 53 PC: 1afea | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:47:00.347090883Z 37 PC: 1aff3 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:47:00.349067516Z 53 PC: 1afea | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:47:00.351047857Z 37 PC: 1aff3 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:47:00.352944069Z 53 PC: 1afea | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:47:00.354301139Z 37 PC: 1aff3 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:47:00.356993387Z 53 PC: 1afea | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:47:00.358334527Z 37 PC: 1aff3 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:47:00.360856104Z 53 PC: 1afea | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:47:00.36222187Z 37 PC: 1aff3 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:47:00.364586894Z 53 PC: 1afea | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:47:00.366012693Z 37 PC: 1aff3 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:47:00.368717604Z 53 PC: 1afea | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:47:00.370211702Z 37 PC: 1aff3 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:47:00.371572608Z 53 PC: 1afea | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:47:00.373304532Z 37 PC: 1aff3 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:47:00.374573306Z 53 PC: 1afea | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:47:00.376758071Z 37 PC: 1aff3 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:47:00.378301871Z 53 PC: 1afea | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:47:00.380964934Z 37 PC: 1aff3 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:47:00.382733016Z 53 PC: 1afea | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:47:00.38451809Z 37 PC: 1aff3 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:47:00.38682817Z 53 PC: 1afea | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:47:00.388088528Z 37 PC: 1aff3 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:47:00.390360527Z 53 PC: 1afea | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:47:00.39160251Z 37 PC: 1aff3 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:47:00.394007228Z 53 PC: 1afea | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:47:00.395330745Z 37 PC: 1aff3 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:47:00.397768104Z 53 PC: 1afea | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:47:00.399064089Z 37 PC: 1aff3 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:47:00.401862276Z 53 PC: 1afea | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:47:00.403158391Z 37 PC: 1aff3 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:47:00.405707211Z 53 PC: 1afea | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:47:00.414055706Z 37 PC: 1aff3 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:47:00.416626646Z 53 PC: 1afea | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:47:00.418340045Z 37 PC: 1aff3 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:47:00.419945431Z 53 PC: 1afea | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:47:00.422057129Z 37 PC: 1aff3 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:47:00.423784544Z 41 PC: 1afa1 | Parse filename
2018-12-17T22:47:00.426278219Z 41 PC: 1afaf | Parse filename
2018-12-17T22:47:00.427750816Z 75 PC: 1afba | Execute program
2018-12-17T22:47:00.44601507Z 53 PC: 22cca | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:47:00.447753086Z 53 PC: 22cca | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:47:00.450183552Z 53 PC: 22cca | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:47:00.45238604Z 53 PC: 22cca | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:47:00.454297281Z 53 PC: 22cca | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:47:00.456295475Z 53 PC: 22cca | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:47:00.457963378Z 53 PC: 22cca | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:47:00.46369671Z 53 PC: 22cca | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:47:00.465070912Z 53 PC: 22cca | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:47:00.467559488Z 53 PC: 22cca | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:47:00.468881482Z 53 PC: 22cca | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:47:00.471404953Z 53 PC: 22cca | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:47:00.472685469Z 53 PC: 22cca | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:47:00.475210844Z 53 PC: 22cca | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:47:00.476516557Z 53 PC: 22cca | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:47:00.478929881Z 53 PC: 22cca | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:47:00.480254339Z 53 PC: 22cca | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:47:00.482412534Z 53 PC: 22cca | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:47:00.483944061Z 53 PC: 22cca | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:47:00.485430223Z 37 PC: 22cdf | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:47:00.488007205Z 37 PC: 22ce7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:47:00.489483679Z 37 PC: 22cef | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:47:00.492192368Z 37 PC: 22cf7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:47:00.493919263Z 68 PC: 23a22 | I/O control for devices (Set for = '')
2018-12-17T22:47:00.496862402Z 26 PC: 22b39 | Set disk transfer address
2018-12-17T22:47:00.498057648Z 78 PC: 22b45 | Find first file
2018-12-17T22:47:00.506084458Z 67 PC: 22ae1 | Get or set file attributes
2018-12-17T22:47:00.512668819Z 67 PC: 22b08 | Get or set file attributes
2018-12-17T22:47:00.524263412Z 61 PC: 23390 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:47:00.531412795Z 66 PC: 23b21 | Move file pointer
2018-12-17T22:47:00.534175635Z 66 PC: 23b2f | Move file pointer
2018-12-17T22:47:00.535798585Z 66 PC: 23b3d | Move file pointer
2018-12-17T22:47:00.538599097Z 66 PC: 234c2 | Move file pointer
2018-12-17T22:47:00.541045263Z 64 PC: 23463 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:47:00.553787773Z 62 PC: 233e0 | Close file
2018-12-17T22:47:00.562876268Z 67 PC: 22b08 | Get or set file attributes
2018-12-17T22:47:00.574529162Z 26 PC: 22b5d | Set disk transfer address
2018-12-17T22:47:00.576445592Z 79 PC: 22b62 | Find next file
2018-12-17T22:47:00.580148489Z 67 PC: 22ae1 | Get or set file attributes
2018-12-17T22:47:00.587522293Z 67 PC: 22b08 | Get or set file attributes
2018-12-17T22:47:00.602600122Z 61 PC: 23390 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:47:00.611958484Z 66 PC: 23b21 | Move file pointer
2018-12-17T22:47:00.613693053Z 66 PC: 23b2f | Move file pointer
2018-12-17T22:47:00.616656831Z 66 PC: 23b3d | Move file pointer
2018-12-17T22:47:00.618448878Z 66 PC: 234c2 | Move file pointer
2018-12-17T22:47:00.621443334Z 64 PC: 23463 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:47:00.63299109Z 62 PC: 233e0 | Close file
2018-12-17T22:47:00.642935543Z 67 PC: 22b08 | Get or set file attributes
2018-12-17T22:47:00.654324029Z 26 PC: 22b5d | Set disk transfer address
2018-12-17T22:47:00.655481504Z 79 PC: 22b62 | Find next file
2018-12-17T22:47:00.65951372Z 67 PC: 22ae1 | Get or set file attributes
2018-12-17T22:47:00.665521007Z 67 PC: 22b08 | Get or set file attributes
2018-12-17T22:47:00.677476809Z 61 PC: 23390 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:47:00.684576979Z 66 PC: 23b21 | Move file pointer
2018-12-17T22:47:00.687422856Z 66 PC: 23b2f | Move file pointer
2018-12-17T22:47:00.688954634Z 66 PC: 23b3d | Move file pointer
2018-12-17T22:47:00.691740127Z 66 PC: 234c2 | Move file pointer
2018-12-17T22:47:00.693376632Z 64 PC: 23463 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:47:00.705061565Z 62 PC: 233e0 | Close file
2018-12-17T22:47:00.714523682Z 67 PC: 22b08 | Get or set file attributes
2018-12-17T22:47:00.726145507Z 26 PC: 22b5d | Set disk transfer address
2018-12-17T22:47:00.727779317Z 79 PC: 22b62 | Find next file
2018-12-17T22:47:00.732898746Z 67 PC: 22ae1 | Get or set file attributes
2018-12-17T22:47:00.739398437Z 67 PC: 22b08 | Get or set file attributes
2018-12-17T22:47:00.753580562Z 61 PC: 23390 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:47:00.761702321Z 66 PC: 23b21 | Move file pointer
2018-12-17T22:47:00.763465644Z 66 PC: 23b2f | Move file pointer
2018-12-17T22:47:00.766168322Z 66 PC: 23b3d | Move file pointer
2018-12-17T22:47:00.767999773Z 66 PC: 234c2 | Move file pointer
2018-12-17T22:47:00.77122913Z 64 PC: 23463 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:47:00.782429293Z 62 PC: 233e0 | Close file
2018-12-17T22:47:00.792854369Z 67 PC: 22b08 | Get or set file attributes
2018-12-17T22:47:00.803987517Z 26 PC: 22b5d | Set disk transfer address
2018-12-17T22:47:00.806614903Z 79 PC: 22b62 | Find next file
2018-12-17T22:47:00.810771222Z 67 PC: 22ae1 | Get or set file attributes
2018-12-17T22:47:00.819326064Z 67 PC: 22b08 | Get or set file attributes
2018-12-17T22:47:00.83027253Z 61 PC: 23390 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:47:00.839100606Z 66 PC: 23b21 | Move file pointer
2018-12-17T22:47:00.841032777Z 66 PC: 23b2f | Move file pointer
2018-12-17T22:47:00.844154371Z 66 PC: 23b3d | Move file pointer
2018-12-17T22:47:00.846103052Z 66 PC: 234c2 | Move file pointer
2018-12-17T22:47:00.849264382Z 64 PC: 23463 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:47:00.862780857Z 62 PC: 233e0 | Close file
2018-12-17T22:47:00.873402413Z 67 PC: 22b08 | Get or set file attributes
2018-12-17T22:47:00.885187234Z 26 PC: 22b5d | Set disk transfer address
2018-12-17T22:47:00.886927443Z 79 PC: 22b62 | Find next file
2018-12-17T22:47:00.892256956Z 67 PC: 22ae1 | Get or set file attributes
2018-12-17T22:47:00.898538799Z 67 PC: 22b08 | Get or set file attributes
2018-12-17T22:47:00.910302149Z 61 PC: 23390 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:47:00.91746663Z 66 PC: 23b21 | Move file pointer
2018-12-17T22:47:00.920694855Z 66 PC: 23b2f | Move file pointer
2018-12-17T22:47:00.922339946Z 66 PC: 23b3d | Move file pointer
2018-12-17T22:47:00.925229756Z 66 PC: 234c2 | Move file pointer
2018-12-17T22:47:00.92692433Z 64 PC: 23463 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:47:00.93849569Z 62 PC: 233e0 | Close file
2018-12-17T22:47:00.947350075Z 67 PC: 22b08 | Get or set file attributes
2018-12-17T22:47:00.960719654Z 26 PC: 22b5d | Set disk transfer address
2018-12-17T22:47:00.962232977Z 79 PC: 22b62 | Find next file
2018-12-17T22:47:00.965867966Z 67 PC: 22ae1 | Get or set file attributes
2018-12-17T22:47:00.97332713Z 67 PC: 22b08 | Get or set file attributes
2018-12-17T22:47:00.98392944Z 61 PC: 23390 | Open file (Filename = 'PAH.COM')
2018-12-17T22:47:00.992473142Z 66 PC: 23b21 | Move file pointer
2018-12-17T22:47:00.994333057Z 66 PC: 23b2f | Move file pointer
2018-12-17T22:47:00.997549379Z 66 PC: 23b3d | Move file pointer
2018-12-17T22:47:00.999176506Z 66 PC: 234c2 | Move file pointer
2018-12-17T22:47:01.002348466Z 64 PC: 23463 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:47:01.012903496Z 62 PC: 233e0 | Close file
2018-12-17T22:47:01.035736815Z 67 PC: 22b08 | Get or set file attributes
2018-12-17T22:47:01.046301985Z 26 PC: 22b5d | Set disk transfer address
2018-12-17T22:47:01.048995425Z 79 PC: 22b62 | Find next file
2018-12-17T22:47:01.056206573Z 26 PC: 22b39 | Set disk transfer address
2018-12-17T22:47:01.059490303Z 78 PC: 22b45 | Find first file
2018-12-17T22:47:01.066660725Z 26 PC: 22b39 | Set disk transfer address
2018-12-17T22:47:01.071220372Z 78 PC: 22b45 | Find first file
2018-12-17T22:47:01.078608132Z 67 PC: 22ae1 | Get or set file attributes
2018-12-17T22:47:01.086391054Z 67 PC: 22b08 | Get or set file attributes
2018-12-17T22:47:01.099941322Z 61 PC: 23390 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:47:01.113797405Z 63 PC: 23422 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:47:01.120942078Z 63 PC: 23422 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:47:01.124431404Z 62 PC: 233e0 | Close file
2018-12-17T22:47:01.126881146Z 67 PC: 22b08 | Get or set file attributes
2018-12-17T22:47:01.137779131Z 26 PC: 22b5d | Set disk transfer address
2018-12-17T22:47:01.140150537Z 79 PC: 22b62 | Find next file
2018-12-17T22:47:01.147359101Z 67 PC: 22ae1 | Get or set file attributes
2018-12-17T22:47:01.154810811Z 67 PC: 22b08 | Get or set file attributes
2018-12-17T22:47:01.165188708Z 61 PC: 23390 | Open file (Filename = '$$$KYE.EXE')
2018-12-17T22:47:01.174331866Z 63 PC: 23422 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:47:01.18119477Z 63 PC: 23422 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:47:01.184956748Z 62 PC: 233e0 | Close file
2018-12-17T22:47:01.186866105Z 67 PC: 22b08 | Get or set file attributes
2018-12-17T22:47:01.19883922Z 26 PC: 22b5d | Set disk transfer address
2018-12-17T22:47:01.200076775Z 79 PC: 22b62 | Find next file
2018-12-17T22:47:01.204040472Z 25 PC: 235df | Get default drive
2018-12-17T22:47:01.205285341Z 71 PC: 235f2 | Get current directory
2018-12-17T22:47:01.209953782Z 14 PC: 23638 | Set default drive (Drive = 'C')
2018-12-17T22:47:01.211382196Z 25 PC: 2363c | Get default drive
2018-12-17T22:47:01.214202154Z 59 PC: 236a6 | Change current directory
2018-12-17T22:47:01.218188083Z 26 PC: 22b39 | Set disk transfer address
2018-12-17T22:47:01.22114541Z 78 PC: 22b45 | Find first file
2018-12-17T22:47:01.227428945Z 26 PC: 22b5d | Set disk transfer address
2018-12-17T22:47:01.229899867Z 79 PC: 22b62 | Find next file
2018-12-17T22:47:01.232899874Z 26 PC: 22b5d | Set disk transfer address
2018-12-17T22:47:01.235226425Z 79 PC: 22b62 | Find next file
2018-12-17T22:47:01.237961203Z 26 PC: 22b5d | Set disk transfer address
2018-12-17T22:47:01.240430442Z 79 PC: 22b62 | Find next file
2018-12-17T22:47:01.243382699Z 25 PC: 235df | Get default drive
2018-12-17T22:47:01.245757811Z 71 PC: 235f2 | Get current directory
2018-12-17T22:47:01.248903401Z 14 PC: 23638 | Set default drive (Drive = 'C')
2018-12-17T22:47:01.252137397Z 25 PC: 2363c | Get default drive
2018-12-17T22:47:01.253694302Z 59 PC: 236a6 | Change current directory
2018-12-17T22:47:01.262227624Z 26 PC: 22b39 | Set disk transfer address
2018-12-17T22:47:01.263754523Z 78 PC: 22b45 | Find first file
2018-12-17T22:47:01.271144777Z 67 PC: 22ae1 | Get or set file attributes
2018-12-17T22:47:01.277459481Z 67 PC: 22b08 | Get or set file attributes
2018-12-17T22:47:01.288892902Z 61 PC: 23390 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:47:01.296262078Z 63 PC: 23422 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:47:01.29966407Z 63 PC: 23422 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:47:01.302428443Z 62 PC: 233e0 | Close file
2018-12-17T22:47:01.30527959Z 67 PC: 22b08 | Get or set file attributes
2018-12-17T22:47:01.315137341Z 26 PC: 22b5d | Set disk transfer address
2018-12-17T22:47:01.317386196Z 79 PC: 22b62 | Find next file
2018-12-17T22:47:01.320937598Z 67 PC: 22ae1 | Get or set file attributes
2018-12-17T22:47:01.328881092Z 67 PC: 22b08 | Get or set file attributes
2018-12-17T22:47:01.339453816Z 61 PC: 23390 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:47:01.347993049Z 63 PC: 23422 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:47:01.354048917Z 63 PC: 23422 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:47:01.357875486Z 62 PC: 233e0 | Close file
2018-12-17T22:47:01.359992333Z 67 PC: 22b08 | Get or set file attributes
2018-12-17T22:47:01.371097858Z 26 PC: 22b5d | Set disk transfer address
2018-12-17T22:47:01.373081135Z 79 PC: 22b62 | Find next file
2018-12-17T22:47:01.377992693Z 48 PC: 23552 | Get DOS version
2018-12-17T22:47:01.379506116Z 67 PC: 22ae1 | Get or set file attributes
2018-12-17T22:47:01.386916368Z 67 PC: 22b08 | Get or set file attributes
2018-12-17T22:47:01.397870308Z 61 PC: 23390 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:47:01.405223634Z 61 PC: 23390 | Open file (Filename = '$$$kye.exe')
2018-12-17T22:47:01.415710506Z 60 PC: 23390 | Create or truncate file
2018-12-17T22:47:01.427649707Z 64 PC: 23463 | Write file or device (Write 6848 bytes on handle 6)
2018-12-17T22:47:01.437254663Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:01.44518939Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:01.454674001Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:01.463597246Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:01.472852434Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:01.481342325Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:01.490228991Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:01.499078808Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:01.508137597Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:01.515115898Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:01.524496562Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:01.532371809Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:01.541002243Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:01.547957421Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:01.556516571Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:01.563779797Z 64 PC: 23463 | Write file or device (Write 1382 bytes on handle 6)
2018-12-17T22:47:01.572189698Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:01.57454357Z 62 PC: 233e0 | Close file
2018-12-17T22:47:01.576501679Z 62 PC: 233e0 | Close file
2018-12-17T22:47:01.584572482Z 65 PC: 234d9 | Delete file (Filename = 'DEBUG.EXE')
2018-12-17T22:47:01.596480745Z 86 PC: 2351d | Rename file
2018-12-17T22:47:01.608704492Z 61 PC: 23390 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:47:01.615806996Z 64 PC: 23422 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:47:01.622517974Z 64 PC: 23422 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:47:01.625647674Z 62 PC: 233e0 | Close file
2018-12-17T22:47:01.63463544Z 67 PC: 22b08 | Get or set file attributes
2018-12-17T22:47:01.644905856Z 14 PC: 23638 | Set default drive (Drive = 'C')
2018-12-17T22:47:01.647377179Z 25 PC: 2363c | Get default drive
2018-12-17T22:47:01.648823887Z 59 PC: 236a6 | Change current directory
2018-12-17T22:47:01.653670122Z 26 PC: 22b5d | Set disk transfer address
2018-12-17T22:47:01.655194386Z 79 PC: 22b62 | Find next file
2018-12-17T22:47:01.661010093Z 26 PC: 22b5d | Set disk transfer address
2018-12-17T22:47:01.662540117Z 79 PC: 22b62 | Find next file
2018-12-17T22:47:01.667511327Z 25 PC: 235df | Get default drive
2018-12-17T22:47:01.668691194Z 71 PC: 235f2 | Get current directory
2018-12-17T22:47:01.671961247Z 14 PC: 23638 | Set default drive (Drive = 'C')
2018-12-17T22:47:01.673579798Z 25 PC: 2363c | Get default drive
2018-12-17T22:47:01.676298406Z 59 PC: 236a6 | Change current directory
2018-12-17T22:47:01.682813657Z 26 PC: 22b39 | Set disk transfer address
2018-12-17T22:47:01.685521715Z 78 PC: 22b45 | Find first file
2018-12-17T22:47:01.692333313Z 67 PC: 22ae1 | Get or set file attributes
2018-12-17T22:47:01.700426258Z 67 PC: 22b08 | Get or set file attributes
2018-12-17T22:47:01.71059381Z 61 PC: 23390 | Open file (Filename = 'WINHELP.EXE')
2018-12-17T22:47:01.718779029Z 63 PC: 23422 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:47:01.721621679Z 63 PC: 23422 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:47:01.724488846Z 62 PC: 233e0 | Close file
2018-12-17T22:47:01.726427148Z 67 PC: 22b08 | Get or set file attributes
2018-12-17T22:47:01.738173957Z 26 PC: 22b5d | Set disk transfer address
2018-12-17T22:47:01.73935174Z 79 PC: 22b62 | Find next file
2018-12-17T22:47:01.744541691Z 67 PC: 22ae1 | Get or set file attributes
2018-12-17T22:47:01.751044007Z 67 PC: 22b08 | Get or set file attributes
2018-12-17T22:47:01.76242513Z 61 PC: 23390 | Open file (Filename = 'MSD.EXE')
2018-12-17T22:47:01.770005362Z 63 PC: 23422 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:47:01.777079493Z 63 PC: 23422 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:47:01.780040005Z 62 PC: 233e0 | Close file
2018-12-17T22:47:01.783202066Z 67 PC: 22b08 | Get or set file attributes
2018-12-17T22:47:01.79321067Z 26 PC: 22b5d | Set disk transfer address
2018-12-17T22:47:01.795437834Z 79 PC: 22b62 | Find next file
2018-12-17T22:47:01.799872847Z 48 PC: 23552 | Get DOS version
2018-12-17T22:47:01.803552169Z 67 PC: 22ae1 | Get or set file attributes
2018-12-17T22:47:01.810175633Z 67 PC: 22b08 | Get or set file attributes
2018-12-17T22:47:01.821637247Z 61 PC: 23390 | Open file (Filename = 'MSD.EXE')
2018-12-17T22:47:01.82909013Z 61 PC: 23390 | Open file (Filename = '$$$kye.exe')
2018-12-17T22:47:01.837011753Z 60 PC: 23390 | Create or truncate file
2018-12-17T22:47:01.848569167Z 64 PC: 23463 | Write file or device (Write 6848 bytes on handle 6)
2018-12-17T22:47:01.86461283Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:01.871839437Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:01.881341189Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:01.888212047Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:01.8983212Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:01.905078877Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:01.913961605Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:01.920890434Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:01.93061811Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:01.93750543Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:01.946640743Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:01.953344578Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:01.962201819Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:01.969053031Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:01.979186319Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:01.986157536Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:01.996922302Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.003951448Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.014865002Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.021992643Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.03185904Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.038557024Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.048493282Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.054812855Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.061717157Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.066385628Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.072778779Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.077450036Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.084683405Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.091233011Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.099638794Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.106342118Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.114695292Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.121920968Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.130251409Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.136774073Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.145218228Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.156059126Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.166076646Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.172867625Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.184961817Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.191796028Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.201740221Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.208567678Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.220011649Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.226386616Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.235309781Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.241798752Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.251704212Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.258086343Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.268045093Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.275145604Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.284999187Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.291576935Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.300413267Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.308062228Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.317454664Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.324438655Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.333153428Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.340078679Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.35048482Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.357409871Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.366958931Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.374556446Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.383197321Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.390105219Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.399961046Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.407258707Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.415781349Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.422285348Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.430691191Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.438064684Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.447364126Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.454334852Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.464326545Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.470891789Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.479621952Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.486032526Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.494424052Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.501809928Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.511452745Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.518551522Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.527862345Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.534753121Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.543622475Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.550415558Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.558803126Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.565929896Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.575115104Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.582343394Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.592585757Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.599744898Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.608724598Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.615183694Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.624149508Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.632394819Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.64061877Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.647336752Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.655724461Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.662150113Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.671483389Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.678403591Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.702302431Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.7099503Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.719366381Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.726290419Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.736241165Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.743505863Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.752325333Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.75966868Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.770119185Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.776906196Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.786756984Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.793351163Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.803538352Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.810598176Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.819353946Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.826214325Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.836355618Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.843256834Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.851809653Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.860286599Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.869380576Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.876884174Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.885990703Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.895229661Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.904673093Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.911752994Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.920208851Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.927913526Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.936328897Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.943944325Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.952349326Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.96202207Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.970616447Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.982894605Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:02.991426394Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:02.998320346Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:03.007554896Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:03.014227582Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:03.023795929Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:03.0314608Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:03.041034777Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:03.047873085Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:03.057247708Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:03.064294136Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:03.074351522Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:03.085870545Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:03.096461072Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:03.103380963Z 64 PC: 23463 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:03.113744013Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:03.120993813Z 64 PC: 23463 | Write file or device (Write 1938 bytes on handle 6)
2018-12-17T22:47:03.129558064Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:03.131655965Z 62 PC: 233e0 | Close file
2018-12-17T22:47:03.134689815Z 62 PC: 233e0 | Close file
2018-12-17T22:47:03.142439285Z 65 PC: 234d9 | Delete file (Filename = 'MSD.EXE')
2018-12-17T22:47:03.155311268Z 86 PC: 2351d | Rename file
2018-12-17T22:47:03.167190928Z 61 PC: 23390 | Open file (Filename = 'MSD.EXE')
2018-12-17T22:47:03.175307887Z 64 PC: 23422 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:47:03.181673036Z 64 PC: 23422 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:47:03.185418854Z 62 PC: 233e0 | Close file
2018-12-17T22:47:03.193303096Z 67 PC: 22b08 | Get or set file attributes
2018-12-17T22:47:03.204553033Z 14 PC: 23638 | Set default drive (Drive = 'C')
2018-12-17T22:47:03.206219344Z 25 PC: 2363c | Get default drive
2018-12-17T22:47:03.208285115Z 59 PC: 236a6 | Change current directory
2018-12-17T22:47:03.212106846Z 26 PC: 22b5d | Set disk transfer address
2018-12-17T22:47:03.213484464Z 79 PC: 22b62 | Find next file
2018-12-17T22:47:03.216977567Z 26 PC: 22b5d | Set disk transfer address
2018-12-17T22:47:03.218169205Z 79 PC: 22b62 | Find next file
2018-12-17T22:47:03.221416877Z 26 PC: 22b5d | Set disk transfer address
2018-12-17T22:47:03.222535939Z 79 PC: 22b62 | Find next file
2018-12-17T22:47:03.227067042Z 14 PC: 23638 | Set default drive (Drive = 'A')
2018-12-17T22:47:03.228408974Z 25 PC: 2363c | Get default drive
2018-12-17T22:47:03.231083448Z 59 PC: 236a6 | Change current directory
2018-12-17T22:47:03.235407452Z 42 PC: 22a67 | Get date 0x22a67: xor ah, ah
0x22a69: les di, ptr [bp + 6]
0x22a6c: stosw word ptr es:[di], ax
0x22a6d: mov al, dl
0x22a6f: les di, ptr [bp + 0xa]
0x22a72: stosw word ptr es:[di], ax
0x22a73: mov al, dh
0x22a75: les di, ptr [bp + 0xe]
0x22a78: stosw word ptr es:[di], ax
0x22a79: xchg ax, cx
0x22a7a: les di, ptr [bp + 0x12]
0x22a7d: stosw word ptr es:[di], ax
0x22a7e: pop bp
0x22a7f: retf 0x10
0x22a82: push bp
0x22a83: mov bp, sp
0x22a85: mov cx, word ptr [bp + 0xa]
0x22a88: mov dh, byte ptr [bp + 8]
0x22a8b: mov dl, byte ptr [bp + 6]
0x22a8e: mov ah, 0x2b
2018-12-17T22:47:03.239365488Z 48 PC: 23552 | Get DOS version
2018-12-17T22:47:03.241073838Z 61 PC: 23390 | Open file (Filename = '$$$kye.exe')
2018-12-17T22:47:03.249726314Z 60 PC: 23390 | Create or truncate file
2018-12-17T22:47:03.256484351Z 66 PC: 234c2 | Move file pointer
2018-12-17T22:47:03.258942549Z 63 PC: 23463 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:03.267747632Z 62 PC: 233e0 | Close file
2018-12-17T22:47:03.270087428Z 67 PC: 22b08 | Get or set file attributes
2018-12-17T22:47:03.282050244Z 53 PC: 22c3a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:47:03.283606848Z 37 PC: 22c43 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:47:03.286031934Z 53 PC: 22c3a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:47:03.287314584Z 37 PC: 22c43 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:47:03.289391015Z 53 PC: 22c3a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:47:03.290674366Z 37 PC: 22c43 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:47:03.292953869Z 53 PC: 22c3a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:47:03.294848348Z 37 PC: 22c43 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:47:03.296664841Z 53 PC: 22c3a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:47:03.298011501Z 37 PC: 22c43 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:47:03.300296314Z 53 PC: 22c3a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:47:03.301586518Z 37 PC: 22c43 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:47:03.304537492Z 53 PC: 22c3a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:47:03.305912706Z 37 PC: 22c43 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:47:03.307451597Z 53 PC: 22c3a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:47:03.309692818Z 37 PC: 22c43 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:47:03.311026484Z 53 PC: 22c3a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:47:03.313316456Z 37 PC: 22c43 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:47:03.314585891Z 53 PC: 22c3a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:47:03.316885491Z 37 PC: 22c43 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:47:03.318427899Z 53 PC: 22c3a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:47:03.321151266Z 37 PC: 22c43 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:47:03.322602222Z 53 PC: 22c3a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:47:03.325029813Z 37 PC: 22c43 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:47:03.326817181Z 53 PC: 22c3a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:47:03.329266773Z 37 PC: 22c43 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:47:03.330587465Z 53 PC: 22c3a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:47:03.331974882Z 37 PC: 22c43 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:47:03.333938752Z 53 PC: 22c3a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:47:03.335260545Z 37 PC: 22c43 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:47:03.337836655Z 53 PC: 22c3a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:47:03.339454845Z 37 PC: 22c43 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:47:03.342014594Z 53 PC: 22c3a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:47:03.343400328Z 37 PC: 22c43 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:47:03.344857916Z 53 PC: 22c3a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:47:03.346587396Z 37 PC: 22c43 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:47:03.347805925Z 53 PC: 22c3a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:47:03.3501455Z 37 PC: 22c43 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:47:03.351623287Z 41 PC: 22bf1 | Parse filename
2018-12-17T22:47:03.353463274Z 41 PC: 22bff | Parse filename
2018-12-17T22:47:03.355314993Z 75 PC: 22c0a | Execute program
2018-12-17T22:47:03.372317707Z 53 PC: 2a91a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:47:03.378028757Z 53 PC: 2a91a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:47:03.379315715Z 53 PC: 2a91a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:47:03.382090228Z 53 PC: 2a91a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:47:03.390839365Z 53 PC: 2a91a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:47:03.393171477Z 53 PC: 2a91a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:47:03.39551511Z 53 PC: 2a91a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:47:03.39709071Z 53 PC: 2a91a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:47:03.400003132Z 53 PC: 2a91a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:47:03.401252199Z 53 PC: 2a91a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:47:03.403843657Z 53 PC: 2a91a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:47:03.405097383Z 53 PC: 2a91a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:47:03.407612328Z 53 PC: 2a91a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:47:03.409530241Z 53 PC: 2a91a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:47:03.411178358Z 53 PC: 2a91a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:47:03.414864984Z 53 PC: 2a91a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:47:03.41754556Z 53 PC: 2a91a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:47:03.419589851Z 53 PC: 2a91a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:47:03.423133709Z 53 PC: 2a91a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:47:03.424795111Z 37 PC: 2a92f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:47:03.427248981Z 37 PC: 2a937 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:47:03.428809002Z 37 PC: 2a93f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:47:03.430347893Z 37 PC: 2a947 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:47:03.433188931Z 68 PC: 2b672 | I/O control for devices (Set for = '')
2018-12-17T22:47:03.435394785Z 26 PC: 2a789 | Set disk transfer address
2018-12-17T22:47:03.437362642Z 78 PC: 2a795 | Find first file
2018-12-17T22:47:03.444137982Z 67 PC: 2a731 | Get or set file attributes
2018-12-17T22:47:03.450483864Z 67 PC: 2a758 | Get or set file attributes
2018-12-17T22:47:03.466456564Z 61 PC: 2afe0 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:47:03.473431549Z 66 PC: 2b771 | Move file pointer
2018-12-17T22:47:03.475405718Z 66 PC: 2b77f | Move file pointer
2018-12-17T22:47:03.477143222Z 66 PC: 2b78d | Move file pointer
2018-12-17T22:47:03.478676954Z 66 PC: 2b112 | Move file pointer
2018-12-17T22:47:03.480726785Z 64 PC: 2b0b3 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:47:03.49290781Z 62 PC: 2b030 | Close file
2018-12-17T22:47:03.502113245Z 67 PC: 2a758 | Get or set file attributes
2018-12-17T22:47:03.521544091Z 26 PC: 2a7ad | Set disk transfer address
2018-12-17T22:47:03.522950884Z 79 PC: 2a7b2 | Find next file
2018-12-17T22:47:03.52771768Z 67 PC: 2a731 | Get or set file attributes
2018-12-17T22:47:03.53409423Z 67 PC: 2a758 | Get or set file attributes
2018-12-17T22:47:03.544648339Z 61 PC: 2afe0 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:47:03.553669358Z 66 PC: 2b771 | Move file pointer
2018-12-17T22:47:03.555381194Z 66 PC: 2b77f | Move file pointer
2018-12-17T22:47:03.558022967Z 66 PC: 2b78d | Move file pointer
2018-12-17T22:47:03.559893231Z 66 PC: 2b112 | Move file pointer
2018-12-17T22:47:03.562725512Z 64 PC: 2b0b3 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:47:03.574177117Z 62 PC: 2b030 | Close file
2018-12-17T22:47:03.584329601Z 67 PC: 2a758 | Get or set file attributes
2018-12-17T22:47:03.59479792Z 26 PC: 2a7ad | Set disk transfer address
2018-12-17T22:47:03.596246672Z 79 PC: 2a7b2 | Find next file
2018-12-17T22:47:03.601184509Z 67 PC: 2a731 | Get or set file attributes
2018-12-17T22:47:03.605930746Z 67 PC: 2a758 | Get or set file attributes
2018-12-17T22:47:03.614191055Z 61 PC: 2afe0 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:47:03.622980839Z 66 PC: 2b771 | Move file pointer
2018-12-17T22:47:03.624527255Z 66 PC: 2b77f | Move file pointer
2018-12-17T22:47:03.625803673Z 66 PC: 2b78d | Move file pointer
2018-12-17T22:47:03.627355879Z 66 PC: 2b112 | Move file pointer
2018-12-17T22:47:03.629945645Z 64 PC: 2b0b3 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:47:03.640735406Z 62 PC: 2b030 | Close file
2018-12-17T22:47:03.651903348Z 67 PC: 2a758 | Get or set file attributes
2018-12-17T22:47:03.662776366Z 26 PC: 2a7ad | Set disk transfer address
2018-12-17T22:47:03.664218706Z 79 PC: 2a7b2 | Find next file
2018-12-17T22:47:03.669190337Z 67 PC: 2a731 | Get or set file attributes
2018-12-17T22:47:03.679719048Z 67 PC: 2a758 | Get or set file attributes
2018-12-17T22:47:03.690033316Z 61 PC: 2afe0 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:47:03.696896541Z 66 PC: 2b771 | Move file pointer
2018-12-17T22:47:03.699577037Z 66 PC: 2b77f | Move file pointer
2018-12-17T22:47:03.701242696Z 66 PC: 2b78d | Move file pointer
2018-12-17T22:47:03.702886635Z 66 PC: 2b112 | Move file pointer
2018-12-17T22:47:03.705835755Z 64 PC: 2b0b3 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:47:03.717313741Z 62 PC: 2b030 | Close file
2018-12-17T22:47:03.726996573Z 67 PC: 2a758 | Get or set file attributes
2018-12-17T22:47:03.737232865Z 26 PC: 2a7ad | Set disk transfer address
2018-12-17T22:47:03.738399096Z 79 PC: 2a7b2 | Find next file
2018-12-17T22:47:03.742829489Z 67 PC: 2a731 | Get or set file attributes
2018-12-17T22:47:03.74897751Z 67 PC: 2a758 | Get or set file attributes
2018-12-17T22:47:03.759355889Z 61 PC: 2afe0 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:47:03.773055137Z 66 PC: 2b771 | Move file pointer
2018-12-17T22:47:03.7748663Z 66 PC: 2b77f | Move file pointer
2018-12-17T22:47:03.777859643Z 66 PC: 2b78d | Move file pointer
2018-12-17T22:47:03.779487121Z 66 PC: 2b112 | Move file pointer
2018-12-17T22:47:03.782624345Z 64 PC: 2b0b3 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:47:03.794209221Z 62 PC: 2b030 | Close file
2018-12-17T22:47:03.804085947Z 67 PC: 2a758 | Get or set file attributes
2018-12-17T22:47:03.814955388Z 26 PC: 2a7ad | Set disk transfer address
2018-12-17T22:47:03.816732397Z 79 PC: 2a7b2 | Find next file
2018-12-17T22:47:03.822350602Z 67 PC: 2a731 | Get or set file attributes
2018-12-17T22:47:03.835107289Z 67 PC: 2a758 | Get or set file attributes
2018-12-17T22:47:03.84776438Z 61 PC: 2afe0 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:47:03.854925093Z 66 PC: 2b771 | Move file pointer
2018-12-17T22:47:03.856804745Z 66 PC: 2b77f | Move file pointer
2018-12-17T22:47:03.858961156Z 66 PC: 2b78d | Move file pointer
2018-12-17T22:47:03.860821952Z 66 PC: 2b112 | Move file pointer
2018-12-17T22:47:03.863693247Z 64 PC: 2b0b3 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:47:03.874192272Z 62 PC: 2b030 | Close file
2018-12-17T22:47:03.89042009Z 67 PC: 2a758 | Get or set file attributes
2018-12-17T22:47:03.902517629Z 26 PC: 2a7ad | Set disk transfer address
2018-12-17T22:47:03.904140959Z 79 PC: 2a7b2 | Find next file
2018-12-17T22:47:03.907685699Z 67 PC: 2a731 | Get or set file attributes
2018-12-17T22:47:03.915278083Z 67 PC: 2a758 | Get or set file attributes
2018-12-17T22:47:03.927008472Z 61 PC: 2afe0 | Open file (Filename = 'PAH.COM')
2018-12-17T22:47:03.935034251Z 66 PC: 2b771 | Move file pointer
2018-12-17T22:47:03.938137Z 66 PC: 2b77f | Move file pointer
2018-12-17T22:47:03.939954174Z 66 PC: 2b78d | Move file pointer
2018-12-17T22:47:03.942926068Z 66 PC: 2b112 | Move file pointer
2018-12-17T22:47:03.945307752Z 64 PC: 2b0b3 | Write file or device (Write 10240 bytes on handle 5)
2018-12-17T22:47:03.959744646Z 62 PC: 2b030 | Close file
2018-12-17T22:47:03.969203828Z 67 PC: 2a758 | Get or set file attributes
2018-12-17T22:47:03.979809875Z 26 PC: 2a7ad | Set disk transfer address
2018-12-17T22:47:03.981560504Z 79 PC: 2a7b2 | Find next file
2018-12-17T22:47:03.989956779Z 26 PC: 2a789 | Set disk transfer address
2018-12-17T22:47:03.991403527Z 78 PC: 2a795 | Find first file
2018-12-17T22:47:03.999241843Z 26 PC: 2a789 | Set disk transfer address
2018-12-17T22:47:04.000678553Z 78 PC: 2a795 | Find first file
2018-12-17T22:47:04.008630793Z 67 PC: 2a731 | Get or set file attributes
2018-12-17T22:47:04.014901184Z 67 PC: 2a758 | Get or set file attributes
2018-12-17T22:47:04.025839695Z 61 PC: 2afe0 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:47:04.034683881Z 63 PC: 2b072 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:47:04.04822409Z 63 PC: 2b072 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:47:04.051799167Z 62 PC: 2b030 | Close file
2018-12-17T22:47:04.054436742Z 67 PC: 2a758 | Get or set file attributes
2018-12-17T22:47:04.065876475Z 26 PC: 2a7ad | Set disk transfer address
2018-12-17T22:47:04.06859912Z 79 PC: 2a7b2 | Find next file
2018-12-17T22:47:04.073451617Z 67 PC: 2a731 | Get or set file attributes
2018-12-17T22:47:04.080880705Z 67 PC: 2a758 | Get or set file attributes
2018-12-17T22:47:04.093086276Z 61 PC: 2afe0 | Open file (Filename = '$$$KYE.EXE')
2018-12-17T22:47:04.110001376Z 63 PC: 2b072 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:47:04.117883324Z 63 PC: 2b072 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:47:04.123143918Z 62 PC: 2b030 | Close file
2018-12-17T22:47:04.126016645Z 67 PC: 2a758 | Get or set file attributes
2018-12-17T22:47:04.137356741Z 26 PC: 2a7ad | Set disk transfer address
2018-12-17T22:47:04.140295281Z 79 PC: 2a7b2 | Find next file
2018-12-17T22:47:04.143209166Z 25 PC: 2b22f | Get default drive
2018-12-17T22:47:04.145624575Z 71 PC: 2b242 | Get current directory
2018-12-17T22:47:04.148146643Z 14 PC: 2b288 | Set default drive (Drive = 'C')
2018-12-17T22:47:04.150133406Z 25 PC: 2b28c | Get default drive
2018-12-17T22:47:04.151211121Z 59 PC: 2b2f6 | Change current directory
2018-12-17T22:47:04.155599065Z 26 PC: 2a789 | Set disk transfer address
2018-12-17T22:47:04.157064047Z 78 PC: 2a795 | Find first file
2018-12-17T22:47:04.163441048Z 26 PC: 2a7ad | Set disk transfer address
2018-12-17T22:47:04.165837771Z 79 PC: 2a7b2 | Find next file
2018-12-17T22:47:04.168905535Z 26 PC: 2a7ad | Set disk transfer address
2018-12-17T22:47:04.171438824Z 79 PC: 2a7b2 | Find next file
2018-12-17T22:47:04.17357074Z 26 PC: 2a7ad | Set disk transfer address
2018-12-17T22:47:04.175374579Z 79 PC: 2a7b2 | Find next file
2018-12-17T22:47:04.177551549Z 25 PC: 2b22f | Get default drive
2018-12-17T22:47:04.179054593Z 71 PC: 2b242 | Get current directory
2018-12-17T22:47:04.181507942Z 14 PC: 2b288 | Set default drive (Drive = 'C')
2018-12-17T22:47:04.182663032Z 25 PC: 2b28c | Get default drive
2018-12-17T22:47:04.184195321Z 59 PC: 2b2f6 | Change current directory
2018-12-17T22:47:04.189088083Z 26 PC: 2a789 | Set disk transfer address
2018-12-17T22:47:04.190147904Z 78 PC: 2a795 | Find first file
2018-12-17T22:47:04.197145101Z 67 PC: 2a731 | Get or set file attributes
2018-12-17T22:47:04.204636165Z 67 PC: 2a758 | Get or set file attributes
2018-12-17T22:47:04.216188309Z 61 PC: 2afe0 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:47:04.224149476Z 63 PC: 2b072 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:47:04.230507231Z 63 PC: 2b072 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:47:04.234846493Z 62 PC: 2b030 | Close file
2018-12-17T22:47:04.237604815Z 67 PC: 2a758 | Get or set file attributes
2018-12-17T22:47:04.247831419Z 26 PC: 2a7ad | Set disk transfer address
2018-12-17T22:47:04.250598438Z 79 PC: 2a7b2 | Find next file
2018-12-17T22:47:04.254908064Z 67 PC: 2a731 | Get or set file attributes
2018-12-17T22:47:04.261417354Z 67 PC: 2a758 | Get or set file attributes
2018-12-17T22:47:04.27360388Z 61 PC: 2afe0 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:47:04.281533177Z 63 PC: 2b072 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:47:04.287856046Z 63 PC: 2b072 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:47:04.29215843Z 62 PC: 2b030 | Close file
2018-12-17T22:47:04.294909318Z 67 PC: 2a758 | Get or set file attributes
2018-12-17T22:47:04.305159456Z 26 PC: 2a7ad | Set disk transfer address
2018-12-17T22:47:04.308190811Z 79 PC: 2a7b2 | Find next file
2018-12-17T22:47:04.31217701Z 67 PC: 2a731 | Get or set file attributes
2018-12-17T22:47:04.320145251Z 67 PC: 2a758 | Get or set file attributes
2018-12-17T22:47:04.33070992Z 61 PC: 2afe0 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:47:04.340204368Z 63 PC: 2b072 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:47:04.346583643Z 63 PC: 2b072 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:47:04.349868715Z 62 PC: 2b030 | Close file
2018-12-17T22:47:04.353796765Z 67 PC: 2a758 | Get or set file attributes
2018-12-17T22:47:04.364725668Z 26 PC: 2a7ad | Set disk transfer address
2018-12-17T22:47:04.369386034Z 79 PC: 2a7b2 | Find next file
2018-12-17T22:47:04.37666514Z 48 PC: 2b1a2 | Get DOS version
2018-12-17T22:47:04.380589643Z 67 PC: 2a731 | Get or set file attributes
2018-12-17T22:47:04.403315159Z 67 PC: 2a758 | Get or set file attributes
2018-12-17T22:47:04.41573859Z 61 PC: 2afe0 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:47:04.425163918Z 61 PC: 2afe0 | Open file (Filename = '$$$kye.exe')
2018-12-17T22:47:04.435514886Z 60 PC: 2afe0 | Create or truncate file
2018-12-17T22:47:04.447375429Z 64 PC: 2b0b3 | Write file or device (Write 6848 bytes on handle 6)
2018-12-17T22:47:04.458290305Z 63 PC: 2b0b3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:04.466247225Z 64 PC: 2b0b3 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:04.474790215Z 63 PC: 2b0b3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:04.482376759Z 64 PC: 2b0b3 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:04.49080328Z 63 PC: 2b0b3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:04.497457302Z 64 PC: 2b0b3 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:04.50697353Z 63 PC: 2b0b3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:04.513856412Z 64 PC: 2b0b3 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:04.523780848Z 63 PC: 2b0b3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:04.534142957Z 64 PC: 2b0b3 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:04.543914405Z 63 PC: 2b0b3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:04.551675597Z 64 PC: 2b0b3 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:04.560685865Z 63 PC: 2b0b3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:04.567454812Z 64 PC: 2b0b3 | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:47:04.57733774Z 63 PC: 2b0b3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:04.585130311Z 64 PC: 2b0b3 | Write file or device (Write 1793 bytes on handle 6)
2018-12-17T22:47:04.59591377Z 63 PC: 2b0b3 | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:47:04.604306088Z 62 PC: 2b030 | Close file
2018-12-17T22:47:04.606685959Z 62 PC: 2b030 | Close file
2018-12-17T22:47:04.616325019Z 65 PC: 2b129 | Delete file (Filename = 'EXPAND.EXE')
2018-12-17T22:47:04.640347972Z 86 PC: 2b16d | Rename file
2018-12-17T22:47:04.651606394Z 61 PC: 2afe0 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:47:04.659761696Z 64 PC: 2b072 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:47:04.666540122Z 64 PC: 2b072 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:47:04.671337124Z 62 PC: 2b030 | Close file
2018-12-17T22:47:04.679124054Z 67 PC: 2a758 | Get or set file attributes
2018-12-17T22:47:04.690259685Z 14 PC: 2b288 | Set default drive (Drive = 'C')
2018-12-17T22:47:04.691753111Z 25 PC: 2b28c | Get default drive
2018-12-17T22:47:04.69417973Z 59 PC: 2b2f6 | Change current directory
2018-12-17T22:47:04.69793718Z 26 PC: 2a7ad | Set disk transfer address
2018-12-17T22:47:04.699154757Z 79 PC: 2a7b2 | Find next file
2018-12-17T22:47:04.703532322Z 26 PC: 2a7ad | Set disk transfer address
2018-12-17T22:47:04.705080521Z 79 PC: 2a7b2 | Find next file
2018-12-17T22:47:04.708844522Z 25 PC: 2b22f | Get default drive
2018-12-17T22:47:04.709964286Z 71 PC: 2b242 | Get current directory
2018-12-17T22:47:04.712665512Z 14 PC: 2b288 | Set default drive (Drive = 'C')
2018-12-17T22:47:04.714717718Z 25 PC: 2b28c | Get default drive
2018-12-17T22:47:04.715958829Z 59 PC: 2b2f6 | Change current directory
2018-12-17T22:47:04.723361297Z 26 PC: 2a789 | Set disk transfer address
2018-12-17T22:47:04.724562073Z 78 PC: 2a795 | Find first file
2018-12-17T22:47:04.733528729Z 67 PC: 2a731 | Get or set file attributes