Sample viewer

vx.netlux.org/Virus.DOS.Burger.505.e

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:49:02.483910145Z 25 PC: 12a56 | Get default drive
2018-12-17T22:49:02.485832613Z 71 PC: 12a68 | Get current directory
2018-12-17T22:49:02.488676582Z 14 PC: 12a6e | Set default drive (Drive = 'A')
2018-12-17T22:49:02.490584706Z 14 PC: 12ac4 | Set default drive (Drive = 'C')
2018-12-17T22:49:02.492808296Z 59 PC: 12acc | Change current directory
2018-12-17T22:49:02.496250667Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:02.501591963Z 61 PC: 12b41 | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:49:02.507928855Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:02.511270553Z 62 PC: 12b53 | Close file
2018-12-17T22:49:02.513167068Z 67 PC: 12b67 | Get or set file attributes
2018-12-17T22:49:02.519169363Z 67 PC: 12b71 | Get or set file attributes
2018-12-17T22:49:02.865251813Z 61 PC: 12b7a | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:49:02.871537974Z 87 PC: 12b82 | Get or set file date and time
2018-12-17T22:49:02.873020221Z 64 PC: 12baa | Write file or device (Write 505 bytes on handle 5)
2018-12-17T22:49:02.877351303Z 87 PC: 12bb2 | Get or set file date and time
2018-12-17T22:49:02.879189139Z 62 PC: 12bb6 | Close file
2018-12-17T22:49:02.885842918Z 14 PC: 12bd4 | Set default drive (Drive = 'A')
2018-12-17T22:49:02.888315846Z 59 PC: 12bdc | Change current directory
2018-12-17T22:49:02.890662361Z 25 PC: 12a56 | Get default drive
2018-12-17T22:49:02.892130362Z 71 PC: 12a68 | Get current directory
2018-12-17T22:49:02.895762268Z 14 PC: 12a6e | Set default drive (Drive = 'A')
2018-12-17T22:49:02.897458792Z 14 PC: 12ac4 | Set default drive (Drive = 'C')
2018-12-17T22:49:02.89900201Z 59 PC: 12acc | Change current directory
2018-12-17T22:49:02.903722075Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:02.909312401Z 61 PC: 12b41 | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:49:02.915231394Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:02.918162883Z 62 PC: 12b53 | Close file
2018-12-17T22:49:02.920650428Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:02.923767225Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:02.92985587Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:02.934581803Z 78 PC: 12aea | Find first file
2018-12-17T22:49:02.939913832Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:02.941377987Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:02.948208691Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:02.956677236Z 61 PC: 12b41 | Open file (Filename = 'EDIT.COM')
2018-12-17T22:49:02.963298016Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:02.968690582Z 62 PC: 12b53 | Close file
2018-12-17T22:49:02.970495795Z 67 PC: 12b67 | Get or set file attributes
2018-12-17T22:49:02.976256499Z 67 PC: 12b71 | Get or set file attributes
2018-12-17T22:49:02.985851274Z 61 PC: 12b7a | Open file (Filename = 'EDIT.COM')
2018-12-17T22:49:02.992107831Z 87 PC: 12b82 | Get or set file date and time
2018-12-17T22:49:02.993356757Z 64 PC: 12baa | Write file or device (Write 505 bytes on handle 5)
2018-12-17T22:49:02.997097292Z 87 PC: 12bb2 | Get or set file date and time
2018-12-17T22:49:02.998787207Z 62 PC: 12bb6 | Close file
2018-12-17T22:49:03.005329652Z 14 PC: 12bd4 | Set default drive (Drive = 'A')
2018-12-17T22:49:03.00787907Z 59 PC: 12bdc | Change current directory
2018-12-17T22:49:03.009905834Z 25 PC: 12a56 | Get default drive
2018-12-17T22:49:03.011280414Z 71 PC: 12a68 | Get current directory
2018-12-17T22:49:03.014448966Z 14 PC: 12a6e | Set default drive (Drive = 'A')
2018-12-17T22:49:03.015699143Z 14 PC: 12ac4 | Set default drive (Drive = 'C')
2018-12-17T22:49:03.016860477Z 59 PC: 12acc | Change current directory
2018-12-17T22:49:03.020675998Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:03.025925052Z 61 PC: 12b41 | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:49:03.03164118Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:03.034816637Z 62 PC: 12b53 | Close file
2018-12-17T22:49:03.036406694Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:03.038764214Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:03.044880243Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:03.048481639Z 78 PC: 12aea | Find first file
2018-12-17T22:49:03.053655374Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:03.055821314Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:03.061323124Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:03.067837661Z 61 PC: 12b41 | Open file (Filename = 'EDIT.COM')
2018-12-17T22:49:03.075523561Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:03.078281357Z 62 PC: 12b53 | Close file
2018-12-17T22:49:03.080527652Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:03.083606596Z 61 PC: 12b41 | Open file (Filename = 'FORMAT.COM')
2018-12-17T22:49:03.09053553Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:03.09585943Z 62 PC: 12b53 | Close file
2018-12-17T22:49:03.098323461Z 67 PC: 12b67 | Get or set file attributes
2018-12-17T22:49:03.104058271Z 67 PC: 12b71 | Get or set file attributes
2018-12-17T22:49:03.113351225Z 61 PC: 12b7a | Open file (Filename = 'FORMAT.COM')
2018-12-17T22:49:03.11971173Z 87 PC: 12b82 | Get or set file date and time
2018-12-17T22:49:03.121426643Z 64 PC: 12baa | Write file or device (Write 505 bytes on handle 5)
2018-12-17T22:49:03.12407856Z 87 PC: 12bb2 | Get or set file date and time
2018-12-17T22:49:03.125468965Z 62 PC: 12bb6 | Close file
2018-12-17T22:49:03.132446547Z 14 PC: 12bd4 | Set default drive (Drive = 'A')
2018-12-17T22:49:03.133781932Z 59 PC: 12bdc | Change current directory
2018-12-17T22:49:03.135338964Z 25 PC: 12a56 | Get default drive
2018-12-17T22:49:03.13689614Z 71 PC: 12a68 | Get current directory
2018-12-17T22:49:03.1396138Z 14 PC: 12a6e | Set default drive (Drive = 'A')
2018-12-17T22:49:03.140812138Z 14 PC: 12ac4 | Set default drive (Drive = 'C')
2018-12-17T22:49:03.142660325Z 59 PC: 12acc | Change current directory
2018-12-17T22:49:03.14601482Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:03.151395722Z 61 PC: 12b41 | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:49:03.15822884Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:03.160898693Z 62 PC: 12b53 | Close file
2018-12-17T22:49:03.163076274Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:03.166530514Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:03.171935643Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:03.175399823Z 78 PC: 12aea | Find first file
2018-12-17T22:49:03.18099627Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:03.181966723Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:03.187423228Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:03.193552115Z 61 PC: 12b41 | Open file (Filename = 'EDIT.COM')
2018-12-17T22:49:03.199909079Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:03.203073959Z 62 PC: 12b53 | Close file
2018-12-17T22:49:03.204974919Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:03.207803477Z 61 PC: 12b41 | Open file (Filename = 'FORMAT.COM')
2018-12-17T22:49:03.21413285Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:03.217032726Z 62 PC: 12b53 | Close file
2018-12-17T22:49:03.218809907Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:03.22190755Z 61 PC: 12b41 | Open file (Filename = 'KEYB.COM')
2018-12-17T22:49:03.229830901Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:03.235166158Z 62 PC: 12b53 | Close file
2018-12-17T22:49:03.236745146Z 67 PC: 12b67 | Get or set file attributes
2018-12-17T22:49:03.242520688Z 67 PC: 12b71 | Get or set file attributes
2018-12-17T22:49:03.265438607Z 61 PC: 12b7a | Open file (Filename = 'KEYB.COM')
2018-12-17T22:49:03.272221151Z 87 PC: 12b82 | Get or set file date and time
2018-12-17T22:49:03.274356182Z 64 PC: 12baa | Write file or device (Write 505 bytes on handle 5)
2018-12-17T22:49:03.276988506Z 87 PC: 12bb2 | Get or set file date and time
2018-12-17T22:49:03.278308978Z 62 PC: 12bb6 | Close file
2018-12-17T22:49:03.286960731Z 14 PC: 12bd4 | Set default drive (Drive = 'A')
2018-12-17T22:49:03.288530682Z 59 PC: 12bdc | Change current directory
2018-12-17T22:49:03.290419857Z 25 PC: 12a56 | Get default drive
2018-12-17T22:49:03.29166819Z 71 PC: 12a68 | Get current directory
2018-12-17T22:49:03.29483045Z 14 PC: 12a6e | Set default drive (Drive = 'A')
2018-12-17T22:49:03.296458454Z 14 PC: 12ac4 | Set default drive (Drive = 'C')
2018-12-17T22:49:03.298135875Z 59 PC: 12acc | Change current directory
2018-12-17T22:49:03.302228067Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:03.307833624Z 61 PC: 12b41 | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:49:03.313914946Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:03.316755568Z 62 PC: 12b53 | Close file
2018-12-17T22:49:03.318346088Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:03.32062626Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:03.32648625Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:03.330144515Z 78 PC: 12aea | Find first file
2018-12-17T22:49:03.335261055Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:03.336860809Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:03.342249944Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:03.347816723Z 61 PC: 12b41 | Open file (Filename = 'EDIT.COM')
2018-12-17T22:49:03.355017308Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:03.357404227Z 62 PC: 12b53 | Close file
2018-12-17T22:49:03.359003374Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:03.362435012Z 61 PC: 12b41 | Open file (Filename = 'FORMAT.COM')
2018-12-17T22:49:03.36875134Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:03.371935986Z 62 PC: 12b53 | Close file
2018-12-17T22:49:03.374268763Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:03.37702372Z 61 PC: 12b41 | Open file (Filename = 'KEYB.COM')
2018-12-17T22:49:03.383370872Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:03.386354976Z 62 PC: 12b53 | Close file
2018-12-17T22:49:03.388017315Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:03.393722836Z 61 PC: 12b41 | Open file (Filename = 'SYS.COM')
2018-12-17T22:49:03.400652412Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:03.406343622Z 62 PC: 12b53 | Close file
2018-12-17T22:49:03.407996825Z 67 PC: 12b67 | Get or set file attributes
2018-12-17T22:49:03.41440474Z 67 PC: 12b71 | Get or set file attributes
2018-12-17T22:49:03.423293029Z 61 PC: 12b7a | Open file (Filename = 'SYS.COM')
2018-12-17T22:49:03.429664573Z 87 PC: 12b82 | Get or set file date and time
2018-12-17T22:49:03.431019252Z 64 PC: 12baa | Write file or device (Write 505 bytes on handle 5)
2018-12-17T22:49:03.43359731Z 87 PC: 12bb2 | Get or set file date and time
2018-12-17T22:49:03.434890489Z 62 PC: 12bb6 | Close file
2018-12-17T22:49:03.440976905Z 14 PC: 12bd4 | Set default drive (Drive = 'A')
2018-12-17T22:49:03.442055847Z 59 PC: 12bdc | Change current directory
2018-12-17T22:49:03.443605515Z 25 PC: 12a56 | Get default drive
2018-12-17T22:49:03.445547196Z 71 PC: 12a68 | Get current directory
2018-12-17T22:49:03.448286992Z 14 PC: 12a6e | Set default drive (Drive = 'A')
2018-12-17T22:49:03.449397503Z 14 PC: 12ac4 | Set default drive (Drive = 'C')
2018-12-17T22:49:03.451215528Z 59 PC: 12acc | Change current directory
2018-12-17T22:49:03.454518998Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:03.459612068Z 61 PC: 12b41 | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:49:03.465658015Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:03.468379407Z 62 PC: 12b53 | Close file
2018-12-17T22:49:03.470309048Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:03.473509789Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:03.479722093Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:03.483230066Z 78 PC: 12aea | Find first file
2018-12-17T22:49:03.489296737Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:03.490283181Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:03.495820727Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:03.502644995Z 61 PC: 12b41 | Open file (Filename = 'EDIT.COM')
2018-12-17T22:49:03.509206097Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:03.511907782Z 62 PC: 12b53 | Close file
2018-12-17T22:49:03.514836229Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:03.518290949Z 61 PC: 12b41 | Open file (Filename = 'FORMAT.COM')
2018-12-17T22:49:03.52483522Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:03.527917083Z 62 PC: 12b53 | Close file
2018-12-17T22:49:03.530533143Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:03.533586272Z 61 PC: 12b41 | Open file (Filename = 'KEYB.COM')
2018-12-17T22:49:03.541208295Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:03.54399166Z 62 PC: 12b53 | Close file
2018-12-17T22:49:03.545901309Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:03.55023404Z 61 PC: 12b41 | Open file (Filename = 'SYS.COM')
2018-12-17T22:49:03.557767393Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:03.560357479Z 62 PC: 12b53 | Close file
2018-12-17T22:49:03.562305921Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:03.568070975Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:03.580248945Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:03.583898007Z 78 PC: 12aea | Find first file
2018-12-17T22:49:03.589310344Z 79 PC: 12af9 | Find next file
2018-12-17T22:49:03.592547478Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:03.594239382Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:03.603249741Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:03.613022213Z 61 PC: 12b41 | Open file (Filename = 'WIN.COM')
2018-12-17T22:49:03.620397053Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:03.626184609Z 62 PC: 12b53 | Close file
2018-12-17T22:49:03.62865779Z 67 PC: 12b67 | Get or set file attributes
2018-12-17T22:49:03.634513073Z 67 PC: 12b71 | Get or set file attributes
2018-12-17T22:49:03.64347389Z 61 PC: 12b7a | Open file (Filename = 'WIN.COM')
2018-12-17T22:49:03.650624379Z 87 PC: 12b82 | Get or set file date and time
2018-12-17T22:49:03.651900526Z 64 PC: 12baa | Write file or device (Write 505 bytes on handle 5)
2018-12-17T22:49:03.654538923Z 87 PC: 12bb2 | Get or set file date and time
2018-12-17T22:49:03.656885614Z 62 PC: 12bb6 | Close file
2018-12-17T22:49:03.66307246Z 14 PC: 12bd4 | Set default drive (Drive = 'A')
2018-12-17T22:49:03.664240861Z 59 PC: 12bdc | Change current directory
2018-12-17T22:49:03.667176704Z 25 PC: 12a56 | Get default drive
2018-12-17T22:49:03.66831302Z 71 PC: 12a68 | Get current directory
2018-12-17T22:49:03.6710771Z 14 PC: 12a6e | Set default drive (Drive = 'A')
2018-12-17T22:49:03.672988338Z 14 PC: 12ac4 | Set default drive (Drive = 'C')
2018-12-17T22:49:03.674089864Z 59 PC: 12acc | Change current directory
2018-12-17T22:49:03.677274947Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:03.68383703Z 61 PC: 12b41 | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:49:03.689526867Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:03.691965913Z 62 PC: 12b53 | Close file
2018-12-17T22:49:03.694167401Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:03.696534848Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:03.701780213Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:03.705501179Z 78 PC: 12aea | Find first file
2018-12-17T22:49:03.711057386Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:03.712618976Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:03.718794882Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:03.724829085Z 61 PC: 12b41 | Open file (Filename = 'ATTRIB.COM')
2018-12-17T22:49:03.731629577Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:03.738052263Z 62 PC: 12b53 | Close file
2018-12-17T22:49:03.7396324Z 67 PC: 12b67 | Get or set file attributes
2018-12-17T22:49:03.74567663Z 67 PC: 12b71 | Get or set file attributes
2018-12-17T22:49:03.755447346Z 61 PC: 12b7a | Open file (Filename = 'ATTRIB.COM')
2018-12-17T22:49:03.761744578Z 87 PC: 12b82 | Get or set file date and time
2018-12-17T22:49:03.763329192Z 64 PC: 12baa | Write file or device (Write 505 bytes on handle 5)
2018-12-17T22:49:03.765893281Z 87 PC: 12bb2 | Get or set file date and time
2018-12-17T22:49:03.767153143Z 62 PC: 12bb6 | Close file
2018-12-17T22:49:03.773818345Z 14 PC: 12bd4 | Set default drive (Drive = 'A')
2018-12-17T22:49:03.774971584Z 59 PC: 12bdc | Change current directory
2018-12-17T22:49:03.77656334Z 25 PC: 12a56 | Get default drive
2018-12-17T22:49:03.786218888Z 71 PC: 12a68 | Get current directory
2018-12-17T22:49:03.788855541Z 14 PC: 12a6e | Set default drive (Drive = 'A')
2018-12-17T22:49:03.790027983Z 14 PC: 12ac4 | Set default drive (Drive = 'C')
2018-12-17T22:49:03.792153007Z 59 PC: 12acc | Change current directory
2018-12-17T22:49:03.795732372Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:03.800951107Z 61 PC: 12b41 | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:49:03.806789684Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:03.809186505Z 62 PC: 12b53 | Close file
2018-12-17T22:49:03.810957596Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:03.813425266Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:03.818885583Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:03.835938855Z 78 PC: 12aea | Find first file
2018-12-17T22:49:03.840935003Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:03.841883362Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:03.847734315Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:03.85336461Z 61 PC: 12b41 | Open file (Filename = 'ATTRIB.COM')
2018-12-17T22:49:03.859606046Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:03.862452499Z 62 PC: 12b53 | Close file
2018-12-17T22:49:03.8640472Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:03.866866652Z 61 PC: 12b41 | Open file (Filename = 'CHKDSK.COM')
2018-12-17T22:49:03.873671761Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:03.879570597Z 62 PC: 12b53 | Close file
2018-12-17T22:49:03.881248855Z 67 PC: 12b67 | Get or set file attributes
2018-12-17T22:49:03.887211066Z 67 PC: 12b71 | Get or set file attributes
2018-12-17T22:49:03.896301605Z 61 PC: 12b7a | Open file (Filename = 'CHKDSK.COM')
2018-12-17T22:49:03.903587952Z 87 PC: 12b82 | Get or set file date and time
2018-12-17T22:49:03.905836145Z 64 PC: 12baa | Write file or device (Write 505 bytes on handle 5)
2018-12-17T22:49:03.90871518Z 87 PC: 12bb2 | Get or set file date and time
2018-12-17T22:49:03.910033332Z 62 PC: 12bb6 | Close file
2018-12-17T22:49:03.915155114Z 14 PC: 12bd4 | Set default drive (Drive = 'A')
2018-12-17T22:49:03.916413831Z 59 PC: 12bdc | Change current directory
2018-12-17T22:49:03.918307464Z 25 PC: 12a56 | Get default drive
2018-12-17T22:49:03.919679209Z 71 PC: 12a68 | Get current directory
2018-12-17T22:49:03.922320325Z 14 PC: 12a6e | Set default drive (Drive = 'A')
2018-12-17T22:49:03.923964476Z 14 PC: 12ac4 | Set default drive (Drive = 'C')
2018-12-17T22:49:03.925363962Z 59 PC: 12acc | Change current directory
2018-12-17T22:49:03.932456013Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:03.938169773Z 61 PC: 12b41 | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:49:03.944022308Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:03.946529973Z 62 PC: 12b53 | Close file
2018-12-17T22:49:03.948833977Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:03.951242133Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:03.956484375Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:03.960567103Z 78 PC: 12aea | Find first file
2018-12-17T22:49:03.965681602Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:03.967735683Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:03.974361278Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:03.980907749Z 61 PC: 12b41 | Open file (Filename = 'ATTRIB.COM')
2018-12-17T22:49:03.987546685Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:03.990244229Z 62 PC: 12b53 | Close file
2018-12-17T22:49:04.006734658Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:04.009997292Z 61 PC: 12b41 | Open file (Filename = 'CHKDSK.COM')
2018-12-17T22:49:04.016436287Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:04.018902576Z 62 PC: 12b53 | Close file
2018-12-17T22:49:04.020976688Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:04.023771407Z 61 PC: 12b41 | Open file (Filename = 'DEBUG.COM')
2018-12-17T22:49:04.030285774Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:04.035799551Z 62 PC: 12b53 | Close file
2018-12-17T22:49:04.037431383Z 67 PC: 12b67 | Get or set file attributes
2018-12-17T22:49:04.043075393Z 67 PC: 12b71 | Get or set file attributes
2018-12-17T22:49:04.053492097Z 61 PC: 12b7a | Open file (Filename = 'DEBUG.COM')
2018-12-17T22:49:04.060255925Z 87 PC: 12b82 | Get or set file date and time
2018-12-17T22:49:04.062890575Z 64 PC: 12baa | Write file or device (Write 505 bytes on handle 5)
2018-12-17T22:49:04.065898268Z 87 PC: 12bb2 | Get or set file date and time
2018-12-17T22:49:04.067809064Z 62 PC: 12bb6 | Close file
2018-12-17T22:49:04.075551242Z 14 PC: 12bd4 | Set default drive (Drive = 'A')
2018-12-17T22:49:04.077422881Z 59 PC: 12bdc | Change current directory
2018-12-17T22:49:04.079502784Z 25 PC: 12a56 | Get default drive
2018-12-17T22:49:04.081516858Z 71 PC: 12a68 | Get current directory
2018-12-17T22:49:04.084414079Z 14 PC: 12a6e | Set default drive (Drive = 'A')
2018-12-17T22:49:04.085826964Z 14 PC: 12ac4 | Set default drive (Drive = 'C')
2018-12-17T22:49:04.088443499Z 59 PC: 12acc | Change current directory
2018-12-17T22:49:04.092218799Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:04.096113376Z 61 PC: 12b41 | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:49:04.101055369Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:04.10335902Z 62 PC: 12b53 | Close file
2018-12-17T22:49:04.104670048Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:04.107196447Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:04.111342539Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:04.113904951Z 78 PC: 12aea | Find first file
2018-12-17T22:49:04.117683616Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:04.118783025Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:04.124486493Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:04.128745749Z 61 PC: 12b41 | Open file (Filename = 'ATTRIB.COM')
2018-12-17T22:49:04.133203033Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:04.136189435Z 62 PC: 12b53 | Close file
2018-12-17T22:49:04.13747325Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:04.139737704Z 61 PC: 12b41 | Open file (Filename = 'CHKDSK.COM')
2018-12-17T22:49:04.144688144Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:04.146606121Z 62 PC: 12b53 | Close file
2018-12-17T22:49:04.147768633Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:04.150136909Z 61 PC: 12b41 | Open file (Filename = 'DEBUG.COM')
2018-12-17T22:49:04.15448662Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:04.15701572Z 62 PC: 12b53 | Close file
2018-12-17T22:49:04.158474397Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:04.160593197Z 61 PC: 12b41 | Open file (Filename = 'EDIT.COM')
2018-12-17T22:49:04.165787884Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:04.16854875Z 62 PC: 12b53 | Close file
2018-12-17T22:49:04.170223466Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:04.174011465Z 61 PC: 12b41 | Open file (Filename = 'EXPAND.COM')
2018-12-17T22:49:04.180711938Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:04.185924958Z 62 PC: 12b53 | Close file
2018-12-17T22:49:04.188104803Z 67 PC: 12b67 | Get or set file attributes
2018-12-17T22:49:04.194359914Z 67 PC: 12b71 | Get or set file attributes
2018-12-17T22:49:04.23723562Z 61 PC: 12b7a | Open file (Filename = 'EXPAND.COM')
2018-12-17T22:49:04.24424649Z 87 PC: 12b82 | Get or set file date and time
2018-12-17T22:49:04.24517663Z 64 PC: 12baa | Write file or device (Write 505 bytes on handle 5)
2018-12-17T22:49:04.247040439Z 87 PC: 12bb2 | Get or set file date and time
2018-12-17T22:49:04.248155002Z 62 PC: 12bb6 | Close file
2018-12-17T22:49:04.326004677Z 14 PC: 12bd4 | Set default drive (Drive = 'A')
2018-12-17T22:49:04.327630124Z 59 PC: 12bdc | Change current directory
2018-12-17T22:49:04.329748185Z 25 PC: 12a56 | Get default drive
2018-12-17T22:49:04.331148762Z 71 PC: 12a68 | Get current directory
2018-12-17T22:49:04.335339112Z 14 PC: 12a6e | Set default drive (Drive = 'A')
2018-12-17T22:49:04.337313411Z 14 PC: 12ac4 | Set default drive (Drive = 'C')
2018-12-17T22:49:04.338491394Z 59 PC: 12acc | Change current directory
2018-12-17T22:49:04.342722903Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:04.348622517Z 61 PC: 12b41 | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:49:04.354467578Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:04.357718705Z 62 PC: 12b53 | Close file
2018-12-17T22:49:04.359477935Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:04.362458974Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:04.368836377Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:04.372201072Z 78 PC: 12aea | Find first file
2018-12-17T22:49:04.377657212Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:04.378811597Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:04.384763694Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:04.392181999Z 61 PC: 12b41 | Open file (Filename = 'ATTRIB.COM')
2018-12-17T22:49:04.398560068Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:04.401329239Z 62 PC: 12b53 | Close file
2018-12-17T22:49:04.40432529Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:04.407471711Z 61 PC: 12b41 | Open file (Filename = 'CHKDSK.COM')
2018-12-17T22:49:04.414269713Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:04.419574785Z 62 PC: 12b53 | Close file
2018-12-17T22:49:04.42118446Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:04.424316096Z 61 PC: 12b41 | Open file (Filename = 'DEBUG.COM')
2018-12-17T22:49:04.430832964Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:04.434043112Z 62 PC: 12b53 | Close file
2018-12-17T22:49:04.436729974Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:04.440179394Z 61 PC: 12b41 | Open file (Filename = 'EDIT.COM')
2018-12-17T22:49:04.446493775Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:04.44998328Z 62 PC: 12b53 | Close file
2018-12-17T22:49:04.451694166Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:04.454588182Z 61 PC: 12b41 | Open file (Filename = 'EXPAND.COM')
2018-12-17T22:49:04.462110625Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:04.464584132Z 62 PC: 12b53 | Close file
2018-12-17T22:49:04.466251258Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:04.470566478Z 61 PC: 12b41 | Open file (Filename = 'FDISK.COM')
2018-12-17T22:49:04.476952654Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:04.482526308Z 62 PC: 12b53 | Close file
2018-12-17T22:49:04.485813419Z 67 PC: 12b67 | Get or set file attributes
2018-12-17T22:49:04.491596753Z 67 PC: 12b71 | Get or set file attributes
2018-12-17T22:49:04.50211589Z 61 PC: 12b7a | Open file (Filename = 'FDISK.COM')
2018-12-17T22:49:04.509650588Z 87 PC: 12b82 | Get or set file date and time
2018-12-17T22:49:04.511312867Z 64 PC: 12baa | Write file or device (Write 505 bytes on handle 5)
2018-12-17T22:49:04.515177285Z 87 PC: 12bb2 | Get or set file date and time
2018-12-17T22:49:04.51686982Z 62 PC: 12bb6 | Close file
2018-12-17T22:49:04.523845852Z 14 PC: 12bd4 | Set default drive (Drive = 'A')
2018-12-17T22:49:04.526246486Z 59 PC: 12bdc | Change current directory
2018-12-17T22:49:04.528151654Z 25 PC: 12a56 | Get default drive
2018-12-17T22:49:04.529446111Z 71 PC: 12a68 | Get current directory
2018-12-17T22:49:04.53302512Z 14 PC: 12a6e | Set default drive (Drive = 'A')
2018-12-17T22:49:04.534521678Z 14 PC: 12ac4 | Set default drive (Drive = 'C')
2018-12-17T22:49:04.536177887Z 59 PC: 12acc | Change current directory
2018-12-17T22:49:04.539966997Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:04.545569849Z 61 PC: 12b41 | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:49:04.552047854Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:04.554648585Z 62 PC: 12b53 | Close file
2018-12-17T22:49:04.556310361Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:04.559464457Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:04.564936365Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:04.56848961Z 78 PC: 12aea | Find first file
2018-12-17T22:49:04.575070181Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:04.576168201Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:04.582992255Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:04.588894168Z 61 PC: 12b41 | Open file (Filename = 'ATTRIB.COM')
2018-12-17T22:49:04.595359064Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:04.598825276Z 62 PC: 12b53 | Close file
2018-12-17T22:49:04.600780326Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:04.604789259Z 61 PC: 12b41 | Open file (Filename = 'CHKDSK.COM')
2018-12-17T22:49:04.614091861Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:04.617312487Z 62 PC: 12b53 | Close file
2018-12-17T22:49:04.619259728Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:04.623131741Z 61 PC: 12b41 | Open file (Filename = 'DEBUG.COM')
2018-12-17T22:49:04.631811854Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:04.634661972Z 62 PC: 12b53 | Close file
2018-12-17T22:49:04.636673682Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:04.640293944Z 61 PC: 12b41 | Open file (Filename = 'EDIT.COM')
2018-12-17T22:49:04.647488309Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:04.649908224Z 62 PC: 12b53 | Close file
2018-12-17T22:49:04.65152812Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:04.655511132Z 61 PC: 12b41 | Open file (Filename = 'EXPAND.COM')
2018-12-17T22:49:04.662356366Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:04.664851079Z 62 PC: 12b53 | Close file
2018-12-17T22:49:04.667919788Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:04.67107243Z 61 PC: 12b41 | Open file (Filename = 'FDISK.COM')
2018-12-17T22:49:04.681949425Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:04.685864967Z 62 PC: 12b53 | Close file
2018-12-17T22:49:04.688066552Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:04.690965933Z 61 PC: 12b41 | Open file (Filename = 'FORMAT.COM')
2018-12-17T22:49:04.698368684Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:04.700890418Z 62 PC: 12b53 | Close file
2018-12-17T22:49:04.702794403Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:04.707501196Z 61 PC: 12b41 | Open file (Filename = 'KEYB.COM')
2018-12-17T22:49:04.714558726Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:04.718225351Z 62 PC: 12b53 | Close file
2018-12-17T22:49:04.720174405Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:04.723466733Z 61 PC: 12b41 | Open file (Filename = 'MEM.COM')
2018-12-17T22:49:04.731089359Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:04.736489403Z 62 PC: 12b53 | Close file
2018-12-17T22:49:04.738126597Z 67 PC: 12b67 | Get or set file attributes
2018-12-17T22:49:04.743914076Z 67 PC: 12b71 | Get or set file attributes
2018-12-17T22:49:04.753036536Z 61 PC: 12b7a | Open file (Filename = 'MEM.COM')
2018-12-17T22:49:04.759605446Z 87 PC: 12b82 | Get or set file date and time
2018-12-17T22:49:04.76117406Z 64 PC: 12baa | Write file or device (Write 505 bytes on handle 5)
2018-12-17T22:49:04.763983373Z 87 PC: 12bb2 | Get or set file date and time
2018-12-17T22:49:04.766209297Z 62 PC: 12bb6 | Close file
2018-12-17T22:49:04.772442388Z 14 PC: 12bd4 | Set default drive (Drive = 'A')
2018-12-17T22:49:04.773977985Z 59 PC: 12bdc | Change current directory
2018-12-17T22:49:04.776989823Z 25 PC: 12a56 | Get default drive
2018-12-17T22:49:04.777879211Z 71 PC: 12a68 | Get current directory
2018-12-17T22:49:04.779787847Z 14 PC: 12a6e | Set default drive (Drive = 'A')
2018-12-17T22:49:04.781603011Z 14 PC: 12ac4 | Set default drive (Drive = 'C')
2018-12-17T22:49:04.78265639Z 59 PC: 12acc | Change current directory
2018-12-17T22:49:04.784959176Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:04.789625358Z 61 PC: 12b41 | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:49:04.793424849Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:04.795371542Z 62 PC: 12b53 | Close file
2018-12-17T22:49:04.79716821Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:04.799512288Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:04.805517739Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:04.808896576Z 78 PC: 12aea | Find first file
2018-12-17T22:49:04.81389087Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:04.81535954Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:04.820983453Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:04.827199865Z 61 PC: 12b41 | Open file (Filename = 'ATTRIB.COM')
2018-12-17T22:49:04.834360522Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:04.83679309Z 62 PC: 12b53 | Close file
2018-12-17T22:49:04.839053389Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:04.842140695Z 61 PC: 12b41 | Open file (Filename = 'CHKDSK.COM')
2018-12-17T22:49:04.848552349Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:04.851515421Z 62 PC: 12b53 | Close file
2018-12-17T22:49:04.853839641Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:04.856999467Z 61 PC: 12b41 | Open file (Filename = 'DEBUG.COM')
2018-12-17T22:49:04.863728571Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:04.86628818Z 62 PC: 12b53 | Close file
2018-12-17T22:49:04.8685534Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:04.871404222Z 61 PC: 12b41 | Open file (Filename = 'EDIT.COM')
2018-12-17T22:49:04.8777302Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:04.880737948Z 62 PC: 12b53 | Close file
2018-12-17T22:49:04.882303678Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:04.885358099Z 61 PC: 12b41 | Open file (Filename = 'EXPAND.COM')
2018-12-17T22:49:04.891796384Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:04.894400344Z 62 PC: 12b53 | Close file
2018-12-17T22:49:04.896591144Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:04.899667111Z 61 PC: 12b41 | Open file (Filename = 'FDISK.COM')
2018-12-17T22:49:04.906405852Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:04.910342285Z 62 PC: 12b53 | Close file
2018-12-17T22:49:04.912034857Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:04.914983432Z 61 PC: 12b41 | Open file (Filename = 'FORMAT.COM')
2018-12-17T22:49:04.923012245Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:04.925592504Z 62 PC: 12b53 | Close file
2018-12-17T22:49:04.928086675Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:04.931002965Z 61 PC: 12b41 | Open file (Filename = 'KEYB.COM')
2018-12-17T22:49:04.937628494Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:04.941301307Z 62 PC: 12b53 | Close file
2018-12-17T22:49:04.943072748Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:04.946193768Z 61 PC: 12b41 | Open file (Filename = 'MEM.COM')
2018-12-17T22:49:04.953590616Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:04.956115122Z 62 PC: 12b53 | Close file
2018-12-17T22:49:04.95783083Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:04.961861628Z 61 PC: 12b41 | Open file (Filename = 'NLSFUNC.COM')
2018-12-17T22:49:04.96850474Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:04.973859475Z 62 PC: 12b53 | Close file
2018-12-17T22:49:04.976657809Z 67 PC: 12b67 | Get or set file attributes
2018-12-17T22:49:04.982292442Z 67 PC: 12b71 | Get or set file attributes
2018-12-17T22:49:04.993515354Z 61 PC: 12b7a | Open file (Filename = 'NLSFUNC.COM')
2018-12-17T22:49:05.000351864Z 87 PC: 12b82 | Get or set file date and time
2018-12-17T22:49:05.001648127Z 64 PC: 12baa | Write file or device (Write 505 bytes on handle 5)
2018-12-17T22:49:05.005209287Z 87 PC: 12bb2 | Get or set file date and time
2018-12-17T22:49:05.007036239Z 62 PC: 12bb6 | Close file
2018-12-17T22:49:05.013449052Z 14 PC: 12bd4 | Set default drive (Drive = 'A')
2018-12-17T22:49:05.014847354Z 59 PC: 12bdc | Change current directory
2018-12-17T22:49:05.016708811Z 25 PC: 12a56 | Get default drive
2018-12-17T22:49:05.01830409Z 71 PC: 12a68 | Get current directory
2018-12-17T22:49:05.021231413Z 14 PC: 12a6e | Set default drive (Drive = 'A')
2018-12-17T22:49:05.022434843Z 14 PC: 12ac4 | Set default drive (Drive = 'C')
2018-12-17T22:49:05.024199224Z 59 PC: 12acc | Change current directory
2018-12-17T22:49:05.027553599Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:05.032672638Z 61 PC: 12b41 | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:49:05.038894223Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.042124292Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.04387927Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:05.04600733Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:05.049334248Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:05.052432793Z 78 PC: 12aea | Find first file
2018-12-17T22:49:05.055644817Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:05.056428032Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:05.060794321Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:05.064339231Z 61 PC: 12b41 | Open file (Filename = 'ATTRIB.COM')
2018-12-17T22:49:05.068753568Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.071359949Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.072977603Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:05.076245539Z 61 PC: 12b41 | Open file (Filename = 'CHKDSK.COM')
2018-12-17T22:49:05.08294949Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.085416199Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.087448279Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:05.090278288Z 61 PC: 12b41 | Open file (Filename = 'DEBUG.COM')
2018-12-17T22:49:05.096711646Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.0992515Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.100827281Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:05.110474307Z 61 PC: 12b41 | Open file (Filename = 'EDIT.COM')
2018-12-17T22:49:05.118250117Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.121001425Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.124224961Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:05.127451935Z 61 PC: 12b41 | Open file (Filename = 'EXPAND.COM')
2018-12-17T22:49:05.13562573Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.139009589Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.141143925Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:05.145444651Z 61 PC: 12b41 | Open file (Filename = 'FDISK.COM')
2018-12-17T22:49:05.153164095Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.157422956Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.159268875Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:05.162754027Z 61 PC: 12b41 | Open file (Filename = 'FORMAT.COM')
2018-12-17T22:49:05.170172819Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.172629775Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.174918392Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:05.177885137Z 61 PC: 12b41 | Open file (Filename = 'KEYB.COM')
2018-12-17T22:49:05.183953976Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.187413424Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.189060258Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:05.192744086Z 61 PC: 12b41 | Open file (Filename = 'MEM.COM')
2018-12-17T22:49:05.199115734Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.202161357Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.204916553Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:05.207790916Z 61 PC: 12b41 | Open file (Filename = 'NLSFUNC.COM')
2018-12-17T22:49:05.212978802Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.215181383Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.216373199Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:05.218893234Z 61 PC: 12b41 | Open file (Filename = 'QBASIC.COM')
2018-12-17T22:49:05.222988926Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.228452155Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.230634091Z 67 PC: 12b67 | Get or set file attributes
2018-12-17T22:49:05.236791679Z 67 PC: 12b71 | Get or set file attributes
2018-12-17T22:49:05.246503938Z 61 PC: 12b7a | Open file (Filename = 'QBASIC.COM')
2018-12-17T22:49:05.251593873Z 87 PC: 12b82 | Get or set file date and time
2018-12-17T22:49:05.25264782Z 64 PC: 12baa | Write file or device (Write 505 bytes on handle 5)
2018-12-17T22:49:05.255362121Z 87 PC: 12bb2 | Get or set file date and time
2018-12-17T22:49:05.256371909Z 62 PC: 12bb6 | Close file
2018-12-17T22:49:05.261016788Z 14 PC: 12bd4 | Set default drive (Drive = 'A')
2018-12-17T22:49:05.261918866Z 59 PC: 12bdc | Change current directory
2018-12-17T22:49:05.263158312Z 25 PC: 12a56 | Get default drive
2018-12-17T22:49:05.264307847Z 71 PC: 12a68 | Get current directory
2018-12-17T22:49:05.266195262Z 14 PC: 12a6e | Set default drive (Drive = 'A')
2018-12-17T22:49:05.26760262Z 14 PC: 12ac4 | Set default drive (Drive = 'C')
2018-12-17T22:49:05.268520943Z 59 PC: 12acc | Change current directory
2018-12-17T22:49:05.270619338Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:05.275553193Z 61 PC: 12b41 | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:49:05.279380854Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.281809367Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.283104374Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:05.284892721Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:05.289286932Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:05.291593207Z 78 PC: 12aea | Find first file
2018-12-17T22:49:05.295133608Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:05.297093622Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:05.302909392Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:05.310464789Z 61 PC: 12b41 | Open file (Filename = 'ATTRIB.COM')
2018-12-17T22:49:05.317321041Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.321540346Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.324737094Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:05.328244843Z 61 PC: 12b41 | Open file (Filename = 'CHKDSK.COM')
2018-12-17T22:49:05.336569779Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.339673651Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.342181194Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:05.347349149Z 61 PC: 12b41 | Open file (Filename = 'DEBUG.COM')
2018-12-17T22:49:05.353749908Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.356997006Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.359768852Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:05.362167095Z 61 PC: 12b41 | Open file (Filename = 'EDIT.COM')
2018-12-17T22:49:05.368472026Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.371646413Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.375649587Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:05.380945539Z 61 PC: 12b41 | Open file (Filename = 'EXPAND.COM')
2018-12-17T22:49:05.387713322Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.390800224Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.392618786Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:05.39739012Z 61 PC: 12b41 | Open file (Filename = 'FDISK.COM')
2018-12-17T22:49:05.403903336Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.406733111Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.409422445Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:05.412343033Z 61 PC: 12b41 | Open file (Filename = 'FORMAT.COM')
2018-12-17T22:49:05.419631285Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.423147058Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.425156826Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:05.428873966Z 61 PC: 12b41 | Open file (Filename = 'KEYB.COM')
2018-12-17T22:49:05.435594924Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.439449808Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.441529993Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:05.444798096Z 61 PC: 12b41 | Open file (Filename = 'MEM.COM')
2018-12-17T22:49:05.452741924Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.455358507Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.457332035Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:05.46158974Z 61 PC: 12b41 | Open file (Filename = 'NLSFUNC.COM')
2018-12-17T22:49:05.468396789Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.472221201Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.474592418Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:05.477875872Z 61 PC: 12b41 | Open file (Filename = 'QBASIC.COM')
2018-12-17T22:49:05.485990851Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.488642851Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.491311307Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:05.494987598Z 61 PC: 12b41 | Open file (Filename = 'REPLACE.COM')
2018-12-17T22:49:05.502233318Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.508802905Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.510934643Z 67 PC: 12b67 | Get or set file attributes
2018-12-17T22:49:05.517976791Z 67 PC: 12b71 | Get or set file attributes
2018-12-17T22:49:05.52751366Z 61 PC: 12b7a | Open file (Filename = 'REPLACE.COM')
2018-12-17T22:49:05.534091311Z 87 PC: 12b82 | Get or set file date and time
2018-12-17T22:49:05.536496989Z 64 PC: 12baa | Write file or device (Write 505 bytes on handle 5)
2018-12-17T22:49:05.539391039Z 87 PC: 12bb2 | Get or set file date and time
2018-12-17T22:49:05.54091154Z 62 PC: 12bb6 | Close file
2018-12-17T22:49:05.547830114Z 14 PC: 12bd4 | Set default drive (Drive = 'A')
2018-12-17T22:49:05.548987428Z 59 PC: 12bdc | Change current directory
2018-12-17T22:49:05.551513669Z 25 PC: 12a56 | Get default drive
2018-12-17T22:49:05.552499908Z 71 PC: 12a68 | Get current directory
2018-12-17T22:49:05.559943956Z 14 PC: 12a6e | Set default drive (Drive = 'A')
2018-12-17T22:49:05.562648803Z 14 PC: 12ac4 | Set default drive (Drive = 'C')
2018-12-17T22:49:05.564607179Z 59 PC: 12acc | Change current directory
2018-12-17T22:49:05.568819567Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:05.574487921Z 61 PC: 12b41 | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:49:05.580362926Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.584741108Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.586595655Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:05.590645363Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:05.596099153Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:05.599546391Z 78 PC: 12aea | Find first file
2018-12-17T22:49:05.605957032Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:05.607066028Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:05.612848485Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:05.619602385Z 61 PC: 12b41 | Open file (Filename = 'ATTRIB.COM')
2018-12-17T22:49:05.626031284Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.629770111Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.631566787Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:05.634496128Z 61 PC: 12b41 | Open file (Filename = 'CHKDSK.COM')
2018-12-17T22:49:05.642301334Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.64500674Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.647976801Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:05.65134032Z 61 PC: 12b41 | Open file (Filename = 'DEBUG.COM')
2018-12-17T22:49:05.658096864Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.661585987Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.663590386Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:05.6671549Z 61 PC: 12b41 | Open file (Filename = 'EDIT.COM')
2018-12-17T22:49:05.674443396Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.677277435Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.680503266Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:05.683783974Z 61 PC: 12b41 | Open file (Filename = 'EXPAND.COM')
2018-12-17T22:49:05.690800571Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.694328585Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.696325499Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:05.700520239Z 61 PC: 12b41 | Open file (Filename = 'FDISK.COM')
2018-12-17T22:49:05.70678896Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.709051389Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.710616537Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:05.712624017Z 61 PC: 12b41 | Open file (Filename = 'FORMAT.COM')
2018-12-17T22:49:05.719456481Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.722093556Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.723754883Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:05.725962563Z 61 PC: 12b41 | Open file (Filename = 'KEYB.COM')
2018-12-17T22:49:05.730401238Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.733487612Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.735238716Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:05.738124696Z 61 PC: 12b41 | Open file (Filename = 'MEM.COM')
2018-12-17T22:49:05.745123128Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.747931181Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.750614659Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:05.75388547Z 61 PC: 12b41 | Open file (Filename = 'NLSFUNC.COM')
2018-12-17T22:49:05.760805664Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.763618461Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.765220663Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:05.768844744Z 61 PC: 12b41 | Open file (Filename = 'QBASIC.COM')
2018-12-17T22:49:05.776508618Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.779537674Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.781515593Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:05.78463641Z 61 PC: 12b41 | Open file (Filename = 'REPLACE.COM')
2018-12-17T22:49:05.791981001Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.794502752Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.796898662Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:05.799961199Z 61 PC: 12b41 | Open file (Filename = 'RESTORE.COM')
2018-12-17T22:49:05.80650634Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.813199276Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.815004231Z 67 PC: 12b67 | Get or set file attributes
2018-12-17T22:49:05.821351172Z 67 PC: 12b71 | Get or set file attributes
2018-12-17T22:49:05.830767906Z 61 PC: 12b7a | Open file (Filename = 'RESTORE.COM')
2018-12-17T22:49:05.837790628Z 87 PC: 12b82 | Get or set file date and time
2018-12-17T22:49:05.839701801Z 64 PC: 12baa | Write file or device (Write 505 bytes on handle 5)
2018-12-17T22:49:05.843562143Z 87 PC: 12bb2 | Get or set file date and time
2018-12-17T22:49:05.845934779Z 62 PC: 12bb6 | Close file
2018-12-17T22:49:05.852435735Z 14 PC: 12bd4 | Set default drive (Drive = 'A')
2018-12-17T22:49:05.853938717Z 59 PC: 12bdc | Change current directory
2018-12-17T22:49:05.856664527Z 25 PC: 12a56 | Get default drive
2018-12-17T22:49:05.85781587Z 71 PC: 12a68 | Get current directory
2018-12-17T22:49:05.862763333Z 14 PC: 12a6e | Set default drive (Drive = 'A')
2018-12-17T22:49:05.864080974Z 14 PC: 12ac4 | Set default drive (Drive = 'C')
2018-12-17T22:49:05.865296219Z 59 PC: 12acc | Change current directory
2018-12-17T22:49:05.868846064Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:05.874253272Z 61 PC: 12b41 | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:49:05.881856824Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.884493146Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.886536704Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:05.890483085Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:05.896111216Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:05.901497084Z 78 PC: 12aea | Find first file
2018-12-17T22:49:05.906874097Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:05.909284744Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:05.915177689Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:05.921996219Z 61 PC: 12b41 | Open file (Filename = 'ATTRIB.COM')
2018-12-17T22:49:05.930317541Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.933234622Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.935539659Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:05.938545483Z 61 PC: 12b41 | Open file (Filename = 'CHKDSK.COM')
2018-12-17T22:49:05.945804791Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.949019745Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.951036569Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:05.954816295Z 61 PC: 12b41 | Open file (Filename = 'DEBUG.COM')
2018-12-17T22:49:05.961924574Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.965038315Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.967559003Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:05.970594018Z 61 PC: 12b41 | Open file (Filename = 'EDIT.COM')
2018-12-17T22:49:05.978725315Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.98144816Z 62 PC: 12b53 | Close file
2018-12-17T22:49:05.984192485Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:05.987541635Z 61 PC: 12b41 | Open file (Filename = 'EXPAND.COM')
2018-12-17T22:49:05.995053886Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:05.99821625Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.000206186Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:06.004572861Z 61 PC: 12b41 | Open file (Filename = 'FDISK.COM')
2018-12-17T22:49:06.011047805Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.013754094Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.015601297Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:06.018563754Z 61 PC: 12b41 | Open file (Filename = 'FORMAT.COM')
2018-12-17T22:49:06.025572061Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.028409082Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.031410352Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:06.034493851Z 61 PC: 12b41 | Open file (Filename = 'KEYB.COM')
2018-12-17T22:49:06.041265894Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.045302687Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.047327712Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:06.051636208Z 61 PC: 12b41 | Open file (Filename = 'MEM.COM')
2018-12-17T22:49:06.058205473Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.061680634Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.065141224Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:06.068304674Z 61 PC: 12b41 | Open file (Filename = 'NLSFUNC.COM')
2018-12-17T22:49:06.075897089Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.078938254Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.080650622Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:06.085518887Z 61 PC: 12b41 | Open file (Filename = 'QBASIC.COM')
2018-12-17T22:49:06.092346744Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.095897423Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.097552857Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:06.10047494Z 61 PC: 12b41 | Open file (Filename = 'REPLACE.COM')
2018-12-17T22:49:06.108914592Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.111342322Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.113402494Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:06.117561843Z 61 PC: 12b41 | Open file (Filename = 'RESTORE.COM')
2018-12-17T22:49:06.124149286Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.12747344Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.129143322Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:06.135075469Z 61 PC: 12b41 | Open file (Filename = 'SCANDISK.COM')
2018-12-17T22:49:06.142157758Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.149899523Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.152278735Z 67 PC: 12b67 | Get or set file attributes
2018-12-17T22:49:06.158144093Z 67 PC: 12b71 | Get or set file attributes
2018-12-17T22:49:06.169024364Z 61 PC: 12b7a | Open file (Filename = 'SCANDISK.COM')
2018-12-17T22:49:06.175604655Z 87 PC: 12b82 | Get or set file date and time
2018-12-17T22:49:06.178295499Z 64 PC: 12baa | Write file or device (Write 505 bytes on handle 5)
2018-12-17T22:49:06.181003546Z 87 PC: 12bb2 | Get or set file date and time
2018-12-17T22:49:06.18235419Z 62 PC: 12bb6 | Close file
2018-12-17T22:49:06.189213581Z 14 PC: 12bd4 | Set default drive (Drive = 'A')
2018-12-17T22:49:06.190527154Z 59 PC: 12bdc | Change current directory
2018-12-17T22:49:06.198076015Z 25 PC: 12a56 | Get default drive
2018-12-17T22:49:06.199492128Z 71 PC: 12a68 | Get current directory
2018-12-17T22:49:06.203122414Z 14 PC: 12a6e | Set default drive (Drive = 'A')
2018-12-17T22:49:06.205014293Z 14 PC: 12ac4 | Set default drive (Drive = 'C')
2018-12-17T22:49:06.206467207Z 59 PC: 12acc | Change current directory
2018-12-17T22:49:06.211582115Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:06.217868485Z 61 PC: 12b41 | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:49:06.225682111Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.22829569Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.230567038Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:06.234193828Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:06.239874622Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:06.244103191Z 78 PC: 12aea | Find first file
2018-12-17T22:49:06.24927685Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:06.250570693Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:06.257397373Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:06.263413818Z 61 PC: 12b41 | Open file (Filename = 'ATTRIB.COM')
2018-12-17T22:49:06.270455417Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.275550071Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.278184338Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:06.28113757Z 61 PC: 12b41 | Open file (Filename = 'CHKDSK.COM')
2018-12-17T22:49:06.287705868Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.291116396Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.293096046Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:06.29756511Z 61 PC: 12b41 | Open file (Filename = 'DEBUG.COM')
2018-12-17T22:49:06.304095553Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.306651066Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.308971465Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:06.312027563Z 61 PC: 12b41 | Open file (Filename = 'EDIT.COM')
2018-12-17T22:49:06.319948912Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.322829565Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.325076884Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:06.329286526Z 61 PC: 12b41 | Open file (Filename = 'EXPAND.COM')
2018-12-17T22:49:06.336069127Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.340376112Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.342413673Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:06.345412318Z 61 PC: 12b41 | Open file (Filename = 'FDISK.COM')
2018-12-17T22:49:06.353026265Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.355468013Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.358303994Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:06.361051076Z 61 PC: 12b41 | Open file (Filename = 'FORMAT.COM')
2018-12-17T22:49:06.367928988Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.370691672Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.372282021Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:06.375943424Z 61 PC: 12b41 | Open file (Filename = 'KEYB.COM')
2018-12-17T22:49:06.38225215Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.385574198Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.387194054Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:06.390217269Z 61 PC: 12b41 | Open file (Filename = 'MEM.COM')
2018-12-17T22:49:06.397081815Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.39952483Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.401789279Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:06.404736103Z 61 PC: 12b41 | Open file (Filename = 'NLSFUNC.COM')
2018-12-17T22:49:06.412005998Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.414652908Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.417124782Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:06.421459716Z 61 PC: 12b41 | Open file (Filename = 'QBASIC.COM')
2018-12-17T22:49:06.427922893Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.430947606Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.432529299Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:06.435492559Z 61 PC: 12b41 | Open file (Filename = 'REPLACE.COM')
2018-12-17T22:49:06.442220738Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.445165176Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.447277271Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:06.450103728Z 61 PC: 12b41 | Open file (Filename = 'RESTORE.COM')
2018-12-17T22:49:06.457540272Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.460452498Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.462426272Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:06.466844661Z 61 PC: 12b41 | Open file (Filename = 'SCANDISK.COM')
2018-12-17T22:49:06.473691665Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.477638957Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.479578841Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:06.482686169Z 61 PC: 12b41 | Open file (Filename = 'SETUP.COM')
2018-12-17T22:49:06.491740348Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.505297006Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.508397475Z 67 PC: 12b67 | Get or set file attributes
2018-12-17T22:49:06.515013104Z 67 PC: 12b71 | Get or set file attributes
2018-12-17T22:49:06.524648392Z 61 PC: 12b7a | Open file (Filename = 'SETUP.COM')
2018-12-17T22:49:06.531743003Z 87 PC: 12b82 | Get or set file date and time
2018-12-17T22:49:06.533354724Z 64 PC: 12baa | Write file or device (Write 505 bytes on handle 5)
2018-12-17T22:49:06.537795543Z 87 PC: 12bb2 | Get or set file date and time
2018-12-17T22:49:06.539961299Z 62 PC: 12bb6 | Close file
2018-12-17T22:49:06.55017199Z 14 PC: 12bd4 | Set default drive (Drive = 'A')
2018-12-17T22:49:06.551682218Z 59 PC: 12bdc | Change current directory
2018-12-17T22:49:06.553682881Z 25 PC: 12a56 | Get default drive
2018-12-17T22:49:06.569570694Z 71 PC: 12a68 | Get current directory
2018-12-17T22:49:06.573016949Z 14 PC: 12a6e | Set default drive (Drive = 'A')
2018-12-17T22:49:06.576258189Z 14 PC: 12ac4 | Set default drive (Drive = 'C')
2018-12-17T22:49:06.57858946Z 59 PC: 12acc | Change current directory
2018-12-17T22:49:06.581933706Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:06.588899923Z 61 PC: 12b41 | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:49:06.594839507Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.598134962Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.599790585Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:06.602411154Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:06.609098697Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:06.612576096Z 78 PC: 12aea | Find first file
2018-12-17T22:49:06.618717108Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:06.619947428Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:06.626863713Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:06.633011978Z 61 PC: 12b41 | Open file (Filename = 'ATTRIB.COM')
2018-12-17T22:49:06.641205665Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.644243381Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.646401257Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:06.650975135Z 61 PC: 12b41 | Open file (Filename = 'CHKDSK.COM')
2018-12-17T22:49:06.658091523Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.661559962Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.663904551Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:06.66812397Z 61 PC: 12b41 | Open file (Filename = 'DEBUG.COM')
2018-12-17T22:49:06.674944632Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.677770221Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.680263413Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:06.68340139Z 61 PC: 12b41 | Open file (Filename = 'EDIT.COM')
2018-12-17T22:49:06.690784751Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.693227256Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.694934609Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:06.699601269Z 61 PC: 12b41 | Open file (Filename = 'EXPAND.COM')
2018-12-17T22:49:06.705352751Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.708082576Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.709560727Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:06.713526404Z 61 PC: 12b41 | Open file (Filename = 'FDISK.COM')
2018-12-17T22:49:06.718999901Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.720739828Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.722621787Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:06.724671447Z 61 PC: 12b41 | Open file (Filename = 'FORMAT.COM')
2018-12-17T22:49:06.729134767Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.731236366Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.732673313Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:06.734746996Z 61 PC: 12b41 | Open file (Filename = 'KEYB.COM')
2018-12-17T22:49:06.738921169Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.741948944Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.74390378Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:06.748092431Z 61 PC: 12b41 | Open file (Filename = 'MEM.COM')
2018-12-17T22:49:06.755021278Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.758548908Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.760115431Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:06.762202223Z 61 PC: 12b41 | Open file (Filename = 'NLSFUNC.COM')
2018-12-17T22:49:06.769907976Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.773300767Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.785577213Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:06.788522412Z 61 PC: 12b41 | Open file (Filename = 'QBASIC.COM')
2018-12-17T22:49:06.795949488Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.798914968Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.801952773Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:06.804779357Z 61 PC: 12b41 | Open file (Filename = 'REPLACE.COM')
2018-12-17T22:49:06.811134831Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.819404715Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.821937828Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:06.825564432Z 61 PC: 12b41 | Open file (Filename = 'RESTORE.COM')
2018-12-17T22:49:06.832927109Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.836610791Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.838557915Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:06.841943668Z 61 PC: 12b41 | Open file (Filename = 'SCANDISK.COM')
2018-12-17T22:49:06.849362186Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.851768286Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.854311557Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:06.857177109Z 61 PC: 12b41 | Open file (Filename = 'SETUP.COM')
2018-12-17T22:49:06.865060146Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.869046889Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.87170494Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:06.875046265Z 61 PC: 12b41 | Open file (Filename = 'SYS.COM')
2018-12-17T22:49:06.881879362Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.8852879Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.887263933Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:06.891646138Z 61 PC: 12b41 | Open file (Filename = 'XCOPY.COM')
2018-12-17T22:49:06.898757416Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.905075781Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.906953389Z 67 PC: 12b67 | Get or set file attributes
2018-12-17T22:49:06.913609123Z 67 PC: 12b71 | Get or set file attributes
2018-12-17T22:49:06.924482729Z 61 PC: 12b7a | Open file (Filename = 'XCOPY.COM')
2018-12-17T22:49:06.931181115Z 87 PC: 12b82 | Get or set file date and time
2018-12-17T22:49:06.934075146Z 64 PC: 12baa | Write file or device (Write 505 bytes on handle 5)
2018-12-17T22:49:06.938164499Z 87 PC: 12bb2 | Get or set file date and time
2018-12-17T22:49:06.9399784Z 62 PC: 12bb6 | Close file
2018-12-17T22:49:06.947424067Z 14 PC: 12bd4 | Set default drive (Drive = 'A')
2018-12-17T22:49:06.948952541Z 59 PC: 12bdc | Change current directory
2018-12-17T22:49:06.952075849Z 25 PC: 12a56 | Get default drive
2018-12-17T22:49:06.953407098Z 71 PC: 12a68 | Get current directory
2018-12-17T22:49:06.957461302Z 14 PC: 12a6e | Set default drive (Drive = 'A')
2018-12-17T22:49:06.959414988Z 14 PC: 12ac4 | Set default drive (Drive = 'C')
2018-12-17T22:49:06.960918818Z 59 PC: 12acc | Change current directory
2018-12-17T22:49:06.965701084Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:06.971362607Z 61 PC: 12b41 | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:49:06.979321143Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:06.982529353Z 62 PC: 12b53 | Close file
2018-12-17T22:49:06.98544171Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:06.988526527Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:06.994687034Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:06.999664124Z 78 PC: 12aea | Find first file
2018-12-17T22:49:07.00572409Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:07.008381165Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:07.014915574Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:07.022088182Z 61 PC: 12b41 | Open file (Filename = 'ATTRIB.COM')
2018-12-17T22:49:07.028873114Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.031734174Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.035512972Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.038842738Z 61 PC: 12b41 | Open file (Filename = 'CHKDSK.COM')
2018-12-17T22:49:07.046178811Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.04876047Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.051390506Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.05352874Z 61 PC: 12b41 | Open file (Filename = 'DEBUG.COM')
2018-12-17T22:49:07.060230283Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.062914291Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.064476812Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.067821734Z 61 PC: 12b41 | Open file (Filename = 'EDIT.COM')
2018-12-17T22:49:07.074434284Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.077509555Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.079155188Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.082344563Z 61 PC: 12b41 | Open file (Filename = 'EXPAND.COM')
2018-12-17T22:49:07.089596995Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.09224225Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.093897766Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.096922518Z 61 PC: 12b41 | Open file (Filename = 'FDISK.COM')
2018-12-17T22:49:07.104033255Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.10657393Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.108917246Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.112028469Z 61 PC: 12b41 | Open file (Filename = 'FORMAT.COM')
2018-12-17T22:49:07.119970738Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.122593938Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.124331452Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.127250858Z 61 PC: 12b41 | Open file (Filename = 'KEYB.COM')
2018-12-17T22:49:07.133760729Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.136880704Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.138709956Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.142190969Z 61 PC: 12b41 | Open file (Filename = 'MEM.COM')
2018-12-17T22:49:07.148651961Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.152321167Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.155171831Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.158187008Z 61 PC: 12b41 | Open file (Filename = 'NLSFUNC.COM')
2018-12-17T22:49:07.165406311Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.167865871Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.170152436Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.173380513Z 61 PC: 12b41 | Open file (Filename = 'QBASIC.COM')
2018-12-17T22:49:07.181079546Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.184172551Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.185931648Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.189823252Z 61 PC: 12b41 | Open file (Filename = 'REPLACE.COM')
2018-12-17T22:49:07.196504966Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.200319685Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.2031829Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.206823755Z 61 PC: 12b41 | Open file (Filename = 'RESTORE.COM')
2018-12-17T22:49:07.213556039Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.216159384Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.218900956Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.222959446Z 61 PC: 12b41 | Open file (Filename = 'SCANDISK.COM')
2018-12-17T22:49:07.230111944Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.232540222Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.234773835Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.237595118Z 61 PC: 12b41 | Open file (Filename = 'SETUP.COM')
2018-12-17T22:49:07.245785703Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.248581218Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.250182417Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.253688635Z 61 PC: 12b41 | Open file (Filename = 'SYS.COM')
2018-12-17T22:49:07.260374278Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.263455546Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.269695843Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.273185083Z 61 PC: 12b41 | Open file (Filename = 'XCOPY.COM')
2018-12-17T22:49:07.279900482Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.282925595Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.284783819Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.288396463Z 61 PC: 12b41 | Open file (Filename = 'DEFRAG.COM')
2018-12-17T22:49:07.29529863Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.300584492Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.303270055Z 67 PC: 12b67 | Get or set file attributes
2018-12-17T22:49:07.308944632Z 67 PC: 12b71 | Get or set file attributes
2018-12-17T22:49:07.319080861Z 61 PC: 12b7a | Open file (Filename = 'DEFRAG.COM')
2018-12-17T22:49:07.325633554Z 87 PC: 12b82 | Get or set file date and time
2018-12-17T22:49:07.327259087Z 64 PC: 12baa | Write file or device (Write 505 bytes on handle 5)
2018-12-17T22:49:07.3303464Z 87 PC: 12bb2 | Get or set file date and time
2018-12-17T22:49:07.331708012Z 62 PC: 12bb6 | Close file
2018-12-17T22:49:07.338130361Z 14 PC: 12bd4 | Set default drive (Drive = 'A')
2018-12-17T22:49:07.339608698Z 59 PC: 12bdc | Change current directory
2018-12-17T22:49:07.34243128Z 25 PC: 12a56 | Get default drive
2018-12-17T22:49:07.343788449Z 71 PC: 12a68 | Get current directory
2018-12-17T22:49:07.347781707Z 14 PC: 12a6e | Set default drive (Drive = 'A')
2018-12-17T22:49:07.349453879Z 14 PC: 12ac4 | Set default drive (Drive = 'C')
2018-12-17T22:49:07.351107097Z 59 PC: 12acc | Change current directory
2018-12-17T22:49:07.35494757Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:07.361070025Z 61 PC: 12b41 | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:49:07.367484876Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.37000669Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.372395999Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.374889677Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:07.380300607Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:07.384896515Z 78 PC: 12aea | Find first file
2018-12-17T22:49:07.390456627Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:07.392099112Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:07.39778344Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:07.40428942Z 61 PC: 12b41 | Open file (Filename = 'ATTRIB.COM')
2018-12-17T22:49:07.410787981Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.417311777Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.419248808Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.422691033Z 61 PC: 12b41 | Open file (Filename = 'CHKDSK.COM')
2018-12-17T22:49:07.430252137Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.432690975Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.43478453Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.437531636Z 61 PC: 12b41 | Open file (Filename = 'DEBUG.COM')
2018-12-17T22:49:07.4443605Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.446867741Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.449794987Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.452670936Z 61 PC: 12b41 | Open file (Filename = 'EDIT.COM')
2018-12-17T22:49:07.460003984Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.462739417Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.46439743Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.468696193Z 61 PC: 12b41 | Open file (Filename = 'EXPAND.COM')
2018-12-17T22:49:07.478206374Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.481950524Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.48382456Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.487151611Z 61 PC: 12b41 | Open file (Filename = 'FDISK.COM')
2018-12-17T22:49:07.494757537Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.498228261Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.501358019Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.504479715Z 61 PC: 12b41 | Open file (Filename = 'FORMAT.COM')
2018-12-17T22:49:07.51190029Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.514702697Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.517628402Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.521073554Z 61 PC: 12b41 | Open file (Filename = 'KEYB.COM')
2018-12-17T22:49:07.528022633Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.534126482Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.539981188Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.544721042Z 61 PC: 12b41 | Open file (Filename = 'MEM.COM')
2018-12-17T22:49:07.551464452Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.554482733Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.556172528Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.559976542Z 61 PC: 12b41 | Open file (Filename = 'NLSFUNC.COM')
2018-12-17T22:49:07.567230899Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.570723059Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.572310515Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.575872814Z 61 PC: 12b41 | Open file (Filename = 'QBASIC.COM')
2018-12-17T22:49:07.582348686Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.585113865Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.586941455Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.590042681Z 61 PC: 12b41 | Open file (Filename = 'REPLACE.COM')
2018-12-17T22:49:07.597340712Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.599811536Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.602344397Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.605222073Z 61 PC: 12b41 | Open file (Filename = 'RESTORE.COM')
2018-12-17T22:49:07.613892146Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.616396248Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.619042736Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.621925251Z 61 PC: 12b41 | Open file (Filename = 'SCANDISK.COM')
2018-12-17T22:49:07.629052771Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.632250028Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.634604316Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.639603341Z 61 PC: 12b41 | Open file (Filename = 'SETUP.COM')
2018-12-17T22:49:07.646366796Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.650140669Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.652040547Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.656763399Z 61 PC: 12b41 | Open file (Filename = 'SYS.COM')
2018-12-17T22:49:07.66332038Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.667210703Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.668993585Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.673096476Z 61 PC: 12b41 | Open file (Filename = 'XCOPY.COM')
2018-12-17T22:49:07.679824027Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.683217607Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.68507202Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.688189655Z 61 PC: 12b41 | Open file (Filename = 'DEFRAG.COM')
2018-12-17T22:49:07.695397882Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.69785048Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.699618987Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.702508265Z 61 PC: 12b41 | Open file (Filename = 'EMM386.COM')
2018-12-17T22:49:07.710185319Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.715850696Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.718481685Z 67 PC: 12b67 | Get or set file attributes
2018-12-17T22:49:07.724200529Z 67 PC: 12b71 | Get or set file attributes
2018-12-17T22:49:07.734480434Z 61 PC: 12b7a | Open file (Filename = 'EMM386.COM')
2018-12-17T22:49:07.740959767Z 87 PC: 12b82 | Get or set file date and time
2018-12-17T22:49:07.74314937Z 64 PC: 12baa | Write file or device (Write 505 bytes on handle 5)
2018-12-17T22:49:07.745857307Z 87 PC: 12bb2 | Get or set file date and time
2018-12-17T22:49:07.747734223Z 62 PC: 12bb6 | Close file
2018-12-17T22:49:07.754084653Z 14 PC: 12bd4 | Set default drive (Drive = 'A')
2018-12-17T22:49:07.755739071Z 59 PC: 12bdc | Change current directory
2018-12-17T22:49:07.758448613Z 25 PC: 12a56 | Get default drive
2018-12-17T22:49:07.759498268Z 71 PC: 12a68 | Get current directory
2018-12-17T22:49:07.764452954Z 14 PC: 12a6e | Set default drive (Drive = 'A')
2018-12-17T22:49:07.765975974Z 14 PC: 12ac4 | Set default drive (Drive = 'C')
2018-12-17T22:49:07.76884451Z 59 PC: 12acc | Change current directory
2018-12-17T22:49:07.77230199Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:07.77867374Z 61 PC: 12b41 | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:49:07.785392314Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.790740997Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.792630726Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.796622992Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:07.802586928Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:07.806827864Z 78 PC: 12aea | Find first file
2018-12-17T22:49:07.812685558Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:07.814606322Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:07.821355021Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:07.828487003Z 61 PC: 12b41 | Open file (Filename = 'ATTRIB.COM')
2018-12-17T22:49:07.835849787Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.838834954Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.841980124Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.844949367Z 61 PC: 12b41 | Open file (Filename = 'CHKDSK.COM')
2018-12-17T22:49:07.852193103Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.854667425Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.858312113Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.860435472Z 61 PC: 12b41 | Open file (Filename = 'DEBUG.COM')
2018-12-17T22:49:07.865210975Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.866985234Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.868769235Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.870976826Z 61 PC: 12b41 | Open file (Filename = 'EDIT.COM')
2018-12-17T22:49:07.875139256Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.877395277Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.878599442Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.881144799Z 61 PC: 12b41 | Open file (Filename = 'EXPAND.COM')
2018-12-17T22:49:07.885371173Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.887913007Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.889216044Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.892027964Z 61 PC: 12b41 | Open file (Filename = 'FDISK.COM')
2018-12-17T22:49:07.896258846Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.89862391Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.89988302Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.902060169Z 61 PC: 12b41 | Open file (Filename = 'FORMAT.COM')
2018-12-17T22:49:07.906575512Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.908466256Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.910129834Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.912274692Z 61 PC: 12b41 | Open file (Filename = 'KEYB.COM')
2018-12-17T22:49:07.917355179Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.918992737Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.920866963Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.923211355Z 61 PC: 12b41 | Open file (Filename = 'MEM.COM')
2018-12-17T22:49:07.928325851Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.930075125Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.931838792Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.933833204Z 61 PC: 12b41 | Open file (Filename = 'NLSFUNC.COM')
2018-12-17T22:49:07.938418739Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.940209818Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.94209288Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.944173423Z 61 PC: 12b41 | Open file (Filename = 'QBASIC.COM')
2018-12-17T22:49:07.94913883Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.950893709Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.953040419Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.955036248Z 61 PC: 12b41 | Open file (Filename = 'REPLACE.COM')
2018-12-17T22:49:07.961648224Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.964450694Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.967465407Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.970673187Z 61 PC: 12b41 | Open file (Filename = 'RESTORE.COM')
2018-12-17T22:49:07.977863386Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.982477114Z 62 PC: 12b53 | Close file
2018-12-17T22:49:07.984494973Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:07.988555973Z 61 PC: 12b41 | Open file (Filename = 'SCANDISK.COM')
2018-12-17T22:49:07.995319321Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:07.998642738Z 62 PC: 12b53 | Close file
2018-12-17T22:49:08.000766093Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:08.005462338Z 61 PC: 12b41 | Open file (Filename = 'SETUP.COM')
2018-12-17T22:49:08.012173782Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:08.0155776Z 62 PC: 12b53 | Close file
2018-12-17T22:49:08.017331226Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:08.021604229Z 61 PC: 12b41 | Open file (Filename = 'SYS.COM')
2018-12-17T22:49:08.028269981Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:08.031771939Z 62 PC: 12b53 | Close file
2018-12-17T22:49:08.033589226Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:08.037075949Z 61 PC: 12b41 | Open file (Filename = 'XCOPY.COM')
2018-12-17T22:49:08.04458184Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:08.04767111Z 62 PC: 12b53 | Close file
2018-12-17T22:49:08.049950069Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:08.052976265Z 61 PC: 12b41 | Open file (Filename = 'DEFRAG.COM')
2018-12-17T22:49:08.060315426Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:08.063004306Z 62 PC: 12b53 | Close file
2018-12-17T22:49:08.066142329Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:08.069160938Z 61 PC: 12b41 | Open file (Filename = 'EMM386.COM')
2018-12-17T22:49:08.077390146Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:08.079971946Z 62 PC: 12b53 | Close file
2018-12-17T22:49:08.082885755Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:08.086325588Z 61 PC: 12b41 | Open file (Filename = 'MSCDEX.COM')
2018-12-17T22:49:08.093683154Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:08.099992295Z 62 PC: 12b53 | Close file
2018-12-17T22:49:08.103159604Z 67 PC: 12b67 | Get or set file attributes
2018-12-17T22:49:08.108874717Z 67 PC: 12b71 | Get or set file attributes
2018-12-17T22:49:08.119296026Z 61 PC: 12b7a | Open file (Filename = 'MSCDEX.COM')
2018-12-17T22:49:08.125934712Z 87 PC: 12b82 | Get or set file date and time
2018-12-17T22:49:08.127699202Z 64 PC: 12baa | Write file or device (Write 505 bytes on handle 5)
2018-12-17T22:49:08.131073262Z 87 PC: 12bb2 | Get or set file date and time
2018-12-17T22:49:08.132780647Z 62 PC: 12bb6 | Close file
2018-12-17T22:49:08.139785722Z 14 PC: 12bd4 | Set default drive (Drive = 'A')
2018-12-17T22:49:08.14104277Z 59 PC: 12bdc | Change current directory
2018-12-17T22:49:08.143597652Z 25 PC: 12a56 | Get default drive
2018-12-17T22:49:08.144829053Z 71 PC: 12a68 | Get current directory
2018-12-17T22:49:08.15318952Z 14 PC: 12a6e | Set default drive (Drive = 'A')
2018-12-17T22:49:08.154451703Z 14 PC: 12ac4 | Set default drive (Drive = 'C')
2018-12-17T22:49:08.15615884Z 59 PC: 12acc | Change current directory
2018-12-17T22:49:08.159660455Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:08.16576019Z 61 PC: 12b41 | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:49:08.171788449Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:08.175765827Z 62 PC: 12b53 | Close file
2018-12-17T22:49:08.177450107Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:08.181380893Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:08.187002615Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:08.191506528Z 78 PC: 12aea | Find first file
2018-12-17T22:49:08.197557167Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:08.200400007Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:08.206327815Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:08.216708585Z 61 PC: 12b41 | Open file (Filename = 'ATTRIB.COM')
2018-12-17T22:49:08.22446281Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:08.228463723Z 62 PC: 12b53 | Close file
2018-12-17T22:49:08.230375989Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:08.234339225Z 61 PC: 12b41 | Open file (Filename = 'CHKDSK.COM')
2018-12-17T22:49:08.240921265Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:08.243533463Z 62 PC: 12b53 | Close file
2018-12-17T22:49:08.245701973Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:08.248731927Z 61 PC: 12b41 | Open file (Filename = 'DEBUG.COM')
2018-12-17T22:49:08.25573703Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:08.258488801Z 62 PC: 12b53 | Close file
2018-12-17T22:49:08.261138781Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:08.264085972Z 61 PC: 12b41 | Open file (Filename = 'EDIT.COM')
2018-12-17T22:49:08.271617088Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:08.274197527Z 62 PC: 12b53 | Close file
2018-12-17T22:49:08.277265484Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:08.280169926Z 61 PC: 12b41 | Open file (Filename = 'EXPAND.COM')
2018-12-17T22:49:08.288060571Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:08.290965527Z 62 PC: 12b53 | Close file
2018-12-17T22:49:08.2946503Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:08.297942473Z 61 PC: 12b41 | Open file (Filename = 'FDISK.COM')
2018-12-17T22:49:08.304720849Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:08.308638153Z 62 PC: 12b53 | Close file
2018-12-17T22:49:08.310611846Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:08.314968673Z 61 PC: 12b41 | Open file (Filename = 'FORMAT.COM')
2018-12-17T22:49:08.321738261Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:08.325554856Z 62 PC: 12b53 | Close file
2018-12-17T22:49:08.32809936Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:08.331115539Z 61 PC: 12b41 | Open file (Filename = 'KEYB.COM')
2018-12-17T22:49:08.337869545Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:08.340313272Z 62 PC: 12b53 | Close file
2018-12-17T22:49:08.343025976Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:08.346030463Z 61 PC: 12b41 | Open file (Filename = 'MEM.COM')
2018-12-17T22:49:08.353805164Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:08.356599615Z 62 PC: 12b53 | Close file
2018-12-17T22:49:08.359623119Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:08.362875671Z 61 PC: 12b41 | Open file (Filename = 'NLSFUNC.COM')
2018-12-17T22:49:08.371322229Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:08.374302368Z 62 PC: 12b53 | Close file
2018-12-17T22:49:08.377378398Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:08.381131308Z 61 PC: 12b41 | Open file (Filename = 'QBASIC.COM')
2018-12-17T22:49:08.387986831Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:08.391272322Z 62 PC: 12b53 | Close file
2018-12-17T22:49:08.393214861Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:08.396766064Z 61 PC: 12b41 | Open file (Filename = 'REPLACE.COM')
2018-12-17T22:49:08.403659492Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:08.407232924Z 62 PC: 12b53 | Close file
2018-12-17T22:49:08.409841263Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:08.413007886Z 61 PC: 12b41 | Open file (Filename = 'RESTORE.COM')
2018-12-17T22:49:08.419817439Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:08.423378328Z 62 PC: 12b53 | Close file
2018-12-17T22:49:08.425260512Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:08.429180877Z 61 PC: 12b41 | Open file (Filename = 'SCANDISK.COM')
2018-12-17T22:49:08.436665119Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:08.440700607Z 62 PC: 12b53 | Close file
2018-12-17T22:49:08.443159778Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:08.446954332Z 61 PC: 12b41 | Open file (Filename = 'SETUP.COM')
2018-12-17T22:49:08.45376909Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:08.460565864Z 62 PC: 12b53 | Close file
2018-12-17T22:49:08.46290948Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:08.466733627Z 61 PC: 12b41 | Open file (Filename = 'SYS.COM')
2018-12-17T22:49:08.473508453Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:08.477429388Z 62 PC: 12b53 | Close file
2018-12-17T22:49:08.479561341Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:08.484320995Z 61 PC: 12b41 | Open file (Filename = 'XCOPY.COM')
2018-12-17T22:49:08.491382251Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:08.496070588Z 62 PC: 12b53 | Close file
2018-12-17T22:49:08.498299145Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:08.503284763Z 61 PC: 12b41 | Open file (Filename = 'DEFRAG.COM')
2018-12-17T22:49:08.510312785Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:08.515474377Z 62 PC: 12b53 | Close file
2018-12-17T22:49:08.517318518Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:08.521562251Z 61 PC: 12b41 | Open file (Filename = 'EMM386.COM')
2018-12-17T22:49:08.530719632Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:08.533715667Z 62 PC: 12b53 | Close file
2018-12-17T22:49:08.535641329Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:08.538472664Z 61 PC: 12b41 | Open file (Filename = 'MSCDEX.COM')
2018-12-17T22:49:08.545929636Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:08.548325777Z 62 PC: 12b53 | Close file
2018-12-17T22:49:08.550364115Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:08.553142114Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:08.559316011Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:08.56506146Z 78 PC: 12aea | Find first file
2018-12-17T22:49:08.57293353Z 79 PC: 12af9 | Find next file
2018-12-17T22:49:08.578409116Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:08.580568837Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:08.587304438Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:08.593701799Z 61 PC: 12b41 | Open file (Filename = 'WIN.COM')
2018-12-17T22:49:08.600177207Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:08.60287358Z 62 PC: 12b53 | Close file
2018-12-17T22:49:08.604318447Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:08.611667943Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:08.625884018Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:08.629304909Z 78 PC: 12aea | Find first file
2018-12-17T22:49:08.635055378Z 79 PC: 12af9 | Find next file
2018-12-17T22:49:08.63784567Z 79 PC: 12af9 | Find next file
2018-12-17T22:49:08.640066054Z 23 PC: 12a91 | Rename file
2018-12-17T22:49:08.648370809Z 44 PC: 12a99 | Get time 0x12a99: mov bx, word ptr cs:[0x2a9]
0x12a9e: mov al, byte ptr cs:[bx]
0x12aa1: mov bx, dx
0x12aa3: mov cx, 2
0x12aa6: mov dh, 0
0x12aa8: int 0x26
0x12aaa: mov bx, word ptr cs:[0x2a9]
0x12aaf: dec bx
0x12ab0: mov word ptr cs:[0x2a9], bx
0x12ab5: mov dl, byte ptr cs:[bx]
0x12ab8: cmp dl, 0xff
0x12abb: jne 0x12ac0
0x12abd: jmp 0x12bc0
0x12ac0: mov ah, 0xe
0x12ac2: int 0x21
0x12ac4: lea dx, word ptr [0x2d6]
0x12ac8: mov ah, 0x3b
0x12aca: int 0x21
0x12acc: jmp 0x12b22
0x12ace: nop
2018-12-17T22:49:08.650921072Z 14 PC: 12ac4 | Set default drive (Drive = 'A')
2018-12-17T22:49:08.652639091Z 59 PC: 12acc | Change current directory
2018-12-17T22:49:08.656737462Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:08.666470219Z 61 PC: 12b41 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:49:08.672819585Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:08.67992279Z 62 PC: 12b53 | Close file
2018-12-17T22:49:08.68155383Z 67 PC: 12b67 | Get or set file attributes
2018-12-17T22:49:08.68820355Z 67 PC: 12b71 | Get or set file attributes
2018-12-17T22:49:08.704877035Z 61 PC: 12b7a | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:49:08.712654464Z 87 PC: 12b82 | Get or set file date and time
2018-12-17T22:49:08.713962692Z 64 PC: 12baa | Write file or device (Write 505 bytes on handle 5)
2018-12-17T22:49:08.717898885Z 87 PC: 12bb2 | Get or set file date and time
2018-12-17T22:49:08.719272997Z 62 PC: 12bb6 | Close file
2018-12-17T22:49:08.726892557Z 14 PC: 12bd4 | Set default drive (Drive = 'A')
2018-12-17T22:49:08.727991609Z 59 PC: 12bdc | Change current directory
2018-12-17T22:49:08.730137089Z 25 PC: 12a56 | Get default drive
2018-12-17T22:49:08.731272517Z 71 PC: 12a68 | Get current directory
2018-12-17T22:49:08.734985215Z 14 PC: 12a6e | Set default drive (Drive = 'A')
2018-12-17T22:49:08.73622238Z 14 PC: 12ac4 | Set default drive (Drive = 'C')
2018-12-17T22:49:08.737792866Z 59 PC: 12acc | Change current directory
2018-12-17T22:49:08.74119712Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:08.747598584Z 61 PC: 12b41 | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:49:08.753810835Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:08.760661767Z 62 PC: 12b53 | Close file
2018-12-17T22:49:08.762618466Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:08.766176135Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:08.771585416Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:08.776097407Z 78 PC: 12aea | Find first file
2018-12-17T22:49:08.781453745Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:08.783978094Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:08.790344445Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:08.798306459Z 61 PC: 12b41 | Open file (Filename = 'ATTRIB.COM')
2018-12-17T22:49:08.805217041Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:08.81154813Z 62 PC: 12b53 | Close file
2018-12-17T22:49:08.813448193Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:08.817089366Z 61 PC: 12b41 | Open file (Filename = 'CHKDSK.COM')
2018-12-17T22:49:08.823498472Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:08.829266108Z 62 PC: 12b53 | Close file
2018-12-17T22:49:08.831699647Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:08.835111478Z 61 PC: 12b41 | Open file (Filename = 'DEBUG.COM')
2018-12-17T22:49:08.841959628Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:08.847777973Z 62 PC: 12b53 | Close file
2018-12-17T22:49:08.849446684Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:08.85248918Z 61 PC: 12b41 | Open file (Filename = 'EDIT.COM')
2018-12-17T22:49:08.858861924Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:08.864971959Z 62 PC: 12b53 | Close file
2018-12-17T22:49:08.866585418Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:08.871067066Z 61 PC: 12b41 | Open file (Filename = 'EXPAND.COM')
2018-12-17T22:49:08.878966787Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:08.884847083Z 62 PC: 12b53 | Close file
2018-12-17T22:49:08.886992614Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:08.890811878Z 61 PC: 12b41 | Open file (Filename = 'FDISK.COM')
2018-12-17T22:49:08.897272736Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:08.903693501Z 62 PC: 12b53 | Close file
2018-12-17T22:49:08.905516886Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:08.90945959Z 61 PC: 12b41 | Open file (Filename = 'FORMAT.COM')
2018-12-17T22:49:08.916337882Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:08.923586295Z 62 PC: 12b53 | Close file
2018-12-17T22:49:08.925327022Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:08.929044771Z 61 PC: 12b41 | Open file (Filename = 'KEYB.COM')
2018-12-17T22:49:08.935286486Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:08.940554334Z 62 PC: 12b53 | Close file
2018-12-17T22:49:08.942100115Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:08.944941816Z 61 PC: 12b41 | Open file (Filename = 'MEM.COM')
2018-12-17T22:49:08.951107623Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:08.956869161Z 62 PC: 12b53 | Close file
2018-12-17T22:49:08.958428927Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:08.961538235Z 61 PC: 12b41 | Open file (Filename = 'NLSFUNC.COM')
2018-12-17T22:49:08.967886672Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:08.973300838Z 62 PC: 12b53 | Close file
2018-12-17T22:49:08.975134873Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:08.978060428Z 61 PC: 12b41 | Open file (Filename = 'QBASIC.COM')
2018-12-17T22:49:08.984949487Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:08.991200446Z 62 PC: 12b53 | Close file
2018-12-17T22:49:08.992885111Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:08.996077317Z 61 PC: 12b41 | Open file (Filename = 'REPLACE.COM')
2018-12-17T22:49:09.002407302Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:09.008392519Z 62 PC: 12b53 | Close file
2018-12-17T22:49:09.009909767Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:09.01329465Z 61 PC: 12b41 | Open file (Filename = 'RESTORE.COM')
2018-12-17T22:49:09.019712199Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:09.026577695Z 62 PC: 12b53 | Close file
2018-12-17T22:49:09.028565706Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:09.033047624Z 61 PC: 12b41 | Open file (Filename = 'SCANDISK.COM')
2018-12-17T22:49:09.039760353Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:09.046491788Z 62 PC: 12b53 | Close file
2018-12-17T22:49:09.048275875Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:09.051887274Z 61 PC: 12b41 | Open file (Filename = 'SETUP.COM')
2018-12-17T22:49:09.059407408Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:09.064963944Z 62 PC: 12b53 | Close file
2018-12-17T22:49:09.06830499Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:09.071433777Z 61 PC: 12b41 | Open file (Filename = 'SYS.COM')
2018-12-17T22:49:09.079618896Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:09.087018698Z 62 PC: 12b53 | Close file
2018-12-17T22:49:09.089181743Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:09.092440121Z 61 PC: 12b41 | Open file (Filename = 'XCOPY.COM')
2018-12-17T22:49:09.10054817Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:09.106651245Z 62 PC: 12b53 | Close file
2018-12-17T22:49:09.110020736Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:09.113525709Z 61 PC: 12b41 | Open file (Filename = 'DEFRAG.COM')
2018-12-17T22:49:09.120521392Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:09.125767988Z 62 PC: 12b53 | Close file
2018-12-17T22:49:09.127932573Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:09.134981325Z 61 PC: 12b41 | Open file (Filename = 'EMM386.COM')
2018-12-17T22:49:09.142127089Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:09.147367561Z 62 PC: 12b53 | Close file
2018-12-17T22:49:09.149635622Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:09.152607593Z 61 PC: 12b41 | Open file (Filename = 'MSCDEX.COM')
2018-12-17T22:49:09.159430416Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:09.164834262Z 62 PC: 12b53 | Close file
2018-12-17T22:49:09.166473286Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:09.169828482Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:09.175923261Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:09.179599834Z 78 PC: 12aea | Find first file
2018-12-17T22:49:09.184687974Z 79 PC: 12af9 | Find next file
2018-12-17T22:49:09.186862727Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:09.188257856Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:09.197024936Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:09.206086002Z 61 PC: 12b41 | Open file (Filename = 'SETUP.COM')
2018-12-17T22:49:09.212787658Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:09.218306779Z 62 PC: 12b53 | Close file
2018-12-17T22:49:09.219953388Z 67 PC: 12b67 | Get or set file attributes
2018-12-17T22:49:09.225462852Z 67 PC: 12b71 | Get or set file attributes
2018-12-17T22:49:09.234600387Z 61 PC: 12b7a | Open file (Filename = 'SETUP.COM')
2018-12-17T22:49:09.24141033Z 87 PC: 12b82 | Get or set file date and time
2018-12-17T22:49:09.249541333Z 64 PC: 12baa | Write file or device (Write 505 bytes on handle 5)
2018-12-17T22:49:09.252492215Z 87 PC: 12bb2 | Get or set file date and time
2018-12-17T22:49:09.255669186Z 62 PC: 12bb6 | Close file
2018-12-17T22:49:09.349464892Z 14 PC: 12bd4 | Set default drive (Drive = 'A')
2018-12-17T22:49:09.35114616Z 59 PC: 12bdc | Change current directory
2018-12-17T22:49:09.352874513Z 25 PC: 12a56 | Get default drive
2018-12-17T22:49:09.355177849Z 71 PC: 12a68 | Get current directory
2018-12-17T22:49:09.357940793Z 14 PC: 12a6e | Set default drive (Drive = 'A')
2018-12-17T22:49:09.360021379Z 14 PC: 12ac4 | Set default drive (Drive = 'C')
2018-12-17T22:49:09.361089823Z 59 PC: 12acc | Change current directory
2018-12-17T22:49:09.364368878Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:09.370517552Z 61 PC: 12b41 | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:49:09.376391086Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:09.380096862Z 62 PC: 12b53 | Close file
2018-12-17T22:49:09.381851782Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:09.385654528Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:09.391025003Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:09.395565092Z 78 PC: 12aea | Find first file
2018-12-17T22:49:09.400562002Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:09.402860544Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:09.40903187Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:09.416462082Z 61 PC: 12b41 | Open file (Filename = 'ATTRIB.COM')
2018-12-17T22:49:09.42317144Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:09.427949399Z 62 PC: 12b53 | Close file
2018-12-17T22:49:09.429876809Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:09.434254924Z 61 PC: 12b41 | Open file (Filename = 'CHKDSK.COM')
2018-12-17T22:49:09.441647307Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:09.445640923Z 62 PC: 12b53 | Close file
2018-12-17T22:49:09.447540855Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:09.45217378Z 61 PC: 12b41 | Open file (Filename = 'DEBUG.COM')
2018-12-17T22:49:09.458860232Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:09.462933174Z 62 PC: 12b53 | Close file
2018-12-17T22:49:09.46496367Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:09.469410952Z 61 PC: 12b41 | Open file (Filename = 'EDIT.COM')
2018-12-17T22:49:09.476093867Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:09.480550251Z 62 PC: 12b53 | Close file
2018-12-17T22:49:09.482268171Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:09.485601173Z 61 PC: 12b41 | Open file (Filename = 'EXPAND.COM')
2018-12-17T22:49:09.492459417Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:09.494967917Z 62 PC: 12b53 | Close file
2018-12-17T22:49:09.496693508Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:09.50031537Z 61 PC: 12b41 | Open file (Filename = 'FDISK.COM')
2018-12-17T22:49:09.506934464Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:09.509429007Z 62 PC: 12b53 | Close file
2018-12-17T22:49:09.511592511Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:09.514550067Z 61 PC: 12b41 | Open file (Filename = 'FORMAT.COM')
2018-12-17T22:49:09.521308305Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:09.524115738Z 62 PC: 12b53 | Close file
2018-12-17T22:49:09.526442608Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:09.529472697Z 61 PC: 12b41 | Open file (Filename = 'KEYB.COM')
2018-12-17T22:49:09.536151296Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:09.538748933Z 62 PC: 12b53 | Close file
2018-12-17T22:49:09.540357856Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:09.543325339Z 61 PC: 12b41 | Open file (Filename = 'MEM.COM')
2018-12-17T22:49:09.549703757Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:09.552792208Z 62 PC: 12b53 | Close file
2018-12-17T22:49:09.554434527Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:09.557556994Z 61 PC: 12b41 | Open file (Filename = 'NLSFUNC.COM')
2018-12-17T22:49:09.565183346Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:09.567605253Z 62 PC: 12b53 | Close file
2018-12-17T22:49:09.570377756Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:09.573237044Z 61 PC: 12b41 | Open file (Filename = 'QBASIC.COM')
2018-12-17T22:49:09.580156608Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:09.582595208Z 62 PC: 12b53 | Close file
2018-12-17T22:49:09.584591819Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:09.591338347Z 61 PC: 12b41 | Open file (Filename = 'REPLACE.COM')
2018-12-17T22:49:09.598471377Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:09.60283695Z 62 PC: 12b53 | Close file
2018-12-17T22:49:09.604867323Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:09.609400221Z 61 PC: 12b41 | Open file (Filename = 'RESTORE.COM')
2018-12-17T22:49:09.615903744Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:09.618488002Z 62 PC: 12b53 | Close file
2018-12-17T22:49:09.62011737Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:09.62320906Z 61 PC: 12b41 | Open file (Filename = 'SCANDISK.COM')
2018-12-17T22:49:09.62965601Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:09.632176245Z 62 PC: 12b53 | Close file
2018-12-17T22:49:09.634025153Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:09.641712766Z 61 PC: 12b41 | Open file (Filename = 'SETUP.COM')
2018-12-17T22:49:09.648976482Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:09.652227956Z 62 PC: 12b53 | Close file
2018-12-17T22:49:09.654197678Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:09.658017739Z 61 PC: 12b41 | Open file (Filename = 'SYS.COM')
2018-12-17T22:49:09.665339836Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:09.668338477Z 62 PC: 12b53 | Close file
2018-12-17T22:49:09.671226805Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:09.674192803Z 61 PC: 12b41 | Open file (Filename = 'XCOPY.COM')
2018-12-17T22:49:09.681486647Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:09.684119096Z 62 PC: 12b53 | Close file
2018-12-17T22:49:09.685804472Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:09.689148815Z 61 PC: 12b41 | Open file (Filename = 'DEFRAG.COM')
2018-12-17T22:49:09.695587127Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:09.69824735Z 62 PC: 12b53 | Close file
2018-12-17T22:49:09.699994158Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:09.703260901Z 61 PC: 12b41 | Open file (Filename = 'EMM386.COM')
2018-12-17T22:49:09.710349375Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:09.713736655Z 62 PC: 12b53 | Close file
2018-12-17T22:49:09.715933971Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:09.719120299Z 61 PC: 12b41 | Open file (Filename = 'MSCDEX.COM')
2018-12-17T22:49:09.725710411Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:09.730005318Z 62 PC: 12b53 | Close file
2018-12-17T22:49:09.731891274Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:09.736219357Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:09.742996104Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:09.746503404Z 78 PC: 12aea | Find first file
2018-12-17T22:49:09.751629534Z 79 PC: 12af9 | Find next file
2018-12-17T22:49:09.754292351Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:09.755259388Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:09.763083304Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:09.769521897Z 61 PC: 12b41 | Open file (Filename = 'SETUP.COM')
2018-12-17T22:49:09.77824288Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:09.781621441Z 62 PC: 12b53 | Close file
2018-12-17T22:49:09.78527367Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:09.788885824Z 61 PC: 12b41 | Open file (Filename = 'WINHELP.COM')
2018-12-17T22:49:09.79755667Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:09.803145594Z 62 PC: 12b53 | Close file
2018-12-17T22:49:09.805641456Z 67 PC: 12b67 | Get or set file attributes
2018-12-17T22:49:09.811518271Z 67 PC: 12b71 | Get or set file attributes
2018-12-17T22:49:09.820741088Z 61 PC: 12b7a | Open file (Filename = 'WINHELP.COM')
2018-12-17T22:49:09.827970702Z 87 PC: 12b82 | Get or set file date and time
2018-12-17T22:49:09.82934631Z 64 PC: 12baa | Write file or device (Write 505 bytes on handle 5)
2018-12-17T22:49:09.83317081Z 87 PC: 12bb2 | Get or set file date and time
2018-12-17T22:49:09.835142674Z 62 PC: 12bb6 | Close file
2018-12-17T22:49:09.841593011Z 14 PC: 12bd4 | Set default drive (Drive = 'A')
2018-12-17T22:49:09.843841569Z 59 PC: 12bdc | Change current directory
2018-12-17T22:49:09.845795358Z 25 PC: 12a56 | Get default drive
2018-12-17T22:49:09.848354591Z 71 PC: 12a68 | Get current directory
2018-12-17T22:49:09.851138477Z 14 PC: 12a6e | Set default drive (Drive = 'A')
2018-12-17T22:49:09.853403289Z 14 PC: 12ac4 | Set default drive (Drive = 'C')
2018-12-17T22:49:09.855587078Z 59 PC: 12acc | Change current directory
2018-12-17T22:49:09.858840117Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:09.864615526Z 61 PC: 12b41 | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:49:09.870476904Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:09.873117109Z 62 PC: 12b53 | Close file
2018-12-17T22:49:09.874834222Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:09.877028056Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:09.88277971Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:09.886351587Z 78 PC: 12aea | Find first file
2018-12-17T22:49:09.891187116Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:09.893743531Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:09.89913642Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:09.905348839Z 61 PC: 12b41 | Open file (Filename = 'ATTRIB.COM')
2018-12-17T22:49:09.909420805Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:09.911854873Z 62 PC: 12b53 | Close file
2018-12-17T22:49:09.913878712Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:09.916873788Z 61 PC: 12b41 | Open file (Filename = 'CHKDSK.COM')
2018-12-17T22:49:09.924737744Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:09.927425165Z 62 PC: 12b53 | Close file
2018-12-17T22:49:09.929531972Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:09.932507176Z 61 PC: 12b41 | Open file (Filename = 'DEBUG.COM')
2018-12-17T22:49:09.938927275Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:09.941930563Z 62 PC: 12b53 | Close file
2018-12-17T22:49:09.943600596Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:09.947030079Z 61 PC: 12b41 | Open file (Filename = 'EDIT.COM')
2018-12-17T22:49:09.954912523Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:09.957586943Z 62 PC: 12b53 | Close file
2018-12-17T22:49:09.959387565Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:09.962245673Z 61 PC: 12b41 | Open file (Filename = 'EXPAND.COM')
2018-12-17T22:49:09.969369511Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:09.971831546Z 62 PC: 12b53 | Close file
2018-12-17T22:49:09.974111196Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:09.976962757Z 61 PC: 12b41 | Open file (Filename = 'FDISK.COM')
2018-12-17T22:49:09.984149484Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:09.987455807Z 62 PC: 12b53 | Close file
2018-12-17T22:49:09.989681211Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:09.992683383Z 61 PC: 12b41 | Open file (Filename = 'FORMAT.COM')
2018-12-17T22:49:09.999190307Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.002935658Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.004893548Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:10.00916074Z 61 PC: 12b41 | Open file (Filename = 'KEYB.COM')
2018-12-17T22:49:10.016339638Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.019151658Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.022032978Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:10.024791768Z 61 PC: 12b41 | Open file (Filename = 'MEM.COM')
2018-12-17T22:49:10.031395074Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.033648097Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.035213217Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:10.038627102Z 61 PC: 12b41 | Open file (Filename = 'NLSFUNC.COM')
2018-12-17T22:49:10.04501353Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.048874669Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.050783813Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:10.055049597Z 61 PC: 12b41 | Open file (Filename = 'QBASIC.COM')
2018-12-17T22:49:10.062267852Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.066070975Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.067888908Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:10.072489222Z 61 PC: 12b41 | Open file (Filename = 'REPLACE.COM')
2018-12-17T22:49:10.078756889Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.083146683Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.08509778Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:10.089372602Z 61 PC: 12b41 | Open file (Filename = 'RESTORE.COM')
2018-12-17T22:49:10.096029975Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.098616612Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.101767637Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:10.104737357Z 61 PC: 12b41 | Open file (Filename = 'SCANDISK.COM')
2018-12-17T22:49:10.113002883Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.115787654Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.118469595Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:10.121776673Z 61 PC: 12b41 | Open file (Filename = 'SETUP.COM')
2018-12-17T22:49:10.129895591Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.133695002Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.136492968Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:10.139488042Z 61 PC: 12b41 | Open file (Filename = 'SYS.COM')
2018-12-17T22:49:10.146770095Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.149869651Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.151219294Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:10.153912629Z 61 PC: 12b41 | Open file (Filename = 'XCOPY.COM')
2018-12-17T22:49:10.158050329Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.159803084Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.161986257Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:10.163968315Z 61 PC: 12b41 | Open file (Filename = 'DEFRAG.COM')
2018-12-17T22:49:10.168731486Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.17119569Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.173730836Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:10.176650585Z 61 PC: 12b41 | Open file (Filename = 'EMM386.COM')
2018-12-17T22:49:10.183590213Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.186052484Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.18759545Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:10.191191297Z 61 PC: 12b41 | Open file (Filename = 'MSCDEX.COM')
2018-12-17T22:49:10.197589051Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.200697713Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.203095351Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:10.20575317Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:10.210463864Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:10.213660326Z 78 PC: 12aea | Find first file
2018-12-17T22:49:10.21931426Z 79 PC: 12af9 | Find next file
2018-12-17T22:49:10.221672055Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:10.22315155Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:10.228696577Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:10.232902766Z 61 PC: 12b41 | Open file (Filename = 'SETUP.COM')
2018-12-17T22:49:10.237881856Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.239684557Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.241980642Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:10.244970013Z 61 PC: 12b41 | Open file (Filename = 'WINHELP.COM')
2018-12-17T22:49:10.251994416Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.254532768Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.256579362Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:10.259682685Z 61 PC: 12b41 | Open file (Filename = 'WIN.COM')
2018-12-17T22:49:10.266171609Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.272822252Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.274723417Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:10.278025894Z 61 PC: 12b41 | Open file (Filename = 'MSD.COM')
2018-12-17T22:49:10.286163067Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.291980372Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.2956931Z 67 PC: 12b67 | Get or set file attributes
2018-12-17T22:49:10.301861404Z 67 PC: 12b71 | Get or set file attributes
2018-12-17T22:49:10.313504304Z 61 PC: 12b7a | Open file (Filename = 'MSD.COM')
2018-12-17T22:49:10.320573816Z 87 PC: 12b82 | Get or set file date and time
2018-12-17T22:49:10.322952508Z 64 PC: 12baa | Write file or device (Write 505 bytes on handle 5)
2018-12-17T22:49:10.325674052Z 87 PC: 12bb2 | Get or set file date and time
2018-12-17T22:49:10.327889333Z 62 PC: 12bb6 | Close file
2018-12-17T22:49:10.3343496Z 14 PC: 12bd4 | Set default drive (Drive = 'A')
2018-12-17T22:49:10.340823464Z 59 PC: 12bdc | Change current directory
2018-12-17T22:49:10.342931683Z 25 PC: 12a56 | Get default drive
2018-12-17T22:49:10.344745925Z 71 PC: 12a68 | Get current directory
2018-12-17T22:49:10.352130946Z 14 PC: 12a6e | Set default drive (Drive = 'A')
2018-12-17T22:49:10.353724622Z 14 PC: 12ac4 | Set default drive (Drive = 'C')
2018-12-17T22:49:10.355479419Z 59 PC: 12acc | Change current directory
2018-12-17T22:49:10.359418414Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:10.365070558Z 61 PC: 12b41 | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:49:10.371228404Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.376648615Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.378402882Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:10.381115198Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:10.386979554Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:10.39031392Z 78 PC: 12aea | Find first file
2018-12-17T22:49:10.396098399Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:10.397479565Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:10.403005706Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:10.409910833Z 61 PC: 12b41 | Open file (Filename = 'ATTRIB.COM')
2018-12-17T22:49:10.416535009Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.424233543Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.426606207Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:10.431063303Z 61 PC: 12b41 | Open file (Filename = 'CHKDSK.COM')
2018-12-17T22:49:10.437859111Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.443601115Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.446234717Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:10.449214739Z 61 PC: 12b41 | Open file (Filename = 'DEBUG.COM')
2018-12-17T22:49:10.457012144Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.46263949Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.464620521Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:10.469755392Z 61 PC: 12b41 | Open file (Filename = 'EDIT.COM')
2018-12-17T22:49:10.476558673Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.483364629Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.485844347Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:10.489077228Z 61 PC: 12b41 | Open file (Filename = 'EXPAND.COM')
2018-12-17T22:49:10.497755436Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.503241336Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.505029173Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:10.509041717Z 61 PC: 12b41 | Open file (Filename = 'FDISK.COM')
2018-12-17T22:49:10.51557384Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.521173546Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.523095492Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:10.526057791Z 61 PC: 12b41 | Open file (Filename = 'FORMAT.COM')
2018-12-17T22:49:10.533879282Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.539478595Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.542598319Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:10.545815896Z 61 PC: 12b41 | Open file (Filename = 'KEYB.COM')
2018-12-17T22:49:10.5525221Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.5595327Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.562747542Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:10.566046411Z 61 PC: 12b41 | Open file (Filename = 'MEM.COM')
2018-12-17T22:49:10.574033021Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.580240479Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.582404804Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:10.586957409Z 61 PC: 12b41 | Open file (Filename = 'NLSFUNC.COM')
2018-12-17T22:49:10.593839646Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.60054028Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.602986157Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:10.606554005Z 61 PC: 12b41 | Open file (Filename = 'QBASIC.COM')
2018-12-17T22:49:10.614728944Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.620792142Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.624122754Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:10.6274002Z 61 PC: 12b41 | Open file (Filename = 'REPLACE.COM')
2018-12-17T22:49:10.638175996Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.644281179Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.647097841Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:10.650022453Z 61 PC: 12b41 | Open file (Filename = 'RESTORE.COM')
2018-12-17T22:49:10.657125761Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.663895054Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.665607431Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:10.669624269Z 61 PC: 12b41 | Open file (Filename = 'SCANDISK.COM')
2018-12-17T22:49:10.677817548Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.684067488Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.687193017Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:10.690726249Z 61 PC: 12b41 | Open file (Filename = 'SETUP.COM')
2018-12-17T22:49:10.6977018Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.705622394Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.707682422Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:10.712463908Z 61 PC: 12b41 | Open file (Filename = 'SYS.COM')
2018-12-17T22:49:10.719295796Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.72554092Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.727217065Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:10.730085385Z 61 PC: 12b41 | Open file (Filename = 'XCOPY.COM')
2018-12-17T22:49:10.737284165Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.742682705Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.744873568Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:10.748145551Z 61 PC: 12b41 | Open file (Filename = 'DEFRAG.COM')
2018-12-17T22:49:10.754638535Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.761005792Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.763119436Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:10.767680892Z 61 PC: 12b41 | Open file (Filename = 'EMM386.COM')
2018-12-17T22:49:10.775350354Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.780721328Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.784089572Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:10.787428717Z 61 PC: 12b41 | Open file (Filename = 'MSCDEX.COM')
2018-12-17T22:49:10.794732775Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.800388282Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.802014296Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:10.80565146Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:10.811880846Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:10.815466223Z 78 PC: 12aea | Find first file
2018-12-17T22:49:10.821909801Z 79 PC: 12af9 | Find next file
2018-12-17T22:49:10.825022722Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:10.825911882Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:10.832721201Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:10.839474591Z 61 PC: 12b41 | Open file (Filename = 'SETUP.COM')
2018-12-17T22:49:10.847316635Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.852668599Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.855786661Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:10.85880521Z 61 PC: 12b41 | Open file (Filename = 'WINHELP.COM')
2018-12-17T22:49:10.865325923Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.872234758Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.874314128Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:10.878757585Z 61 PC: 12b41 | Open file (Filename = 'WIN.COM')
2018-12-17T22:49:10.885758627Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.89287904Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.894598141Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:10.897498172Z 61 PC: 12b41 | Open file (Filename = 'MSD.COM')
2018-12-17T22:49:10.905416133Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.911574074Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.913702229Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:10.916637089Z 61 PC: 12b41 | Open file (Filename = 'PACKAGER.COM')
2018-12-17T22:49:10.923252059Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:10.930925575Z 62 PC: 12b53 | Close file
2018-12-17T22:49:10.933274305Z 67 PC: 12b67 | Get or set file attributes
2018-12-17T22:49:10.939306777Z 67 PC: 12b71 | Get or set file attributes
2018-12-17T22:49:10.94954878Z 61 PC: 12b7a | Open file (Filename = 'PACKAGER.COM')
2018-12-17T22:49:10.956329719Z 87 PC: 12b82 | Get or set file date and time
2018-12-17T22:49:10.959308188Z 64 PC: 12baa | Write file or device (Write 505 bytes on handle 5)
2018-12-17T22:49:10.962856017Z 87 PC: 12bb2 | Get or set file date and time
2018-12-17T22:49:10.96423925Z 62 PC: 12bb6 | Close file
2018-12-17T22:49:10.971114565Z 14 PC: 12bd4 | Set default drive (Drive = 'A')
2018-12-17T22:49:10.972372828Z 59 PC: 12bdc | Change current directory
2018-12-17T22:49:10.974619267Z 25 PC: 12a56 | Get default drive
2018-12-17T22:49:10.976024817Z 71 PC: 12a68 | Get current directory
2018-12-17T22:49:10.978797952Z 14 PC: 12a6e | Set default drive (Drive = 'A')
2018-12-17T22:49:10.98125924Z 14 PC: 12ac4 | Set default drive (Drive = 'C')
2018-12-17T22:49:10.984315027Z 59 PC: 12acc | Change current directory
2018-12-17T22:49:10.987712825Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:10.993082596Z 61 PC: 12b41 | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:49:11.000365717Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.005792973Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.008825847Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.011230449Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:11.016519688Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:11.021577485Z 78 PC: 12aea | Find first file
2018-12-17T22:49:11.027056177Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:11.029479944Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:11.035119065Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:11.041899225Z 61 PC: 12b41 | Open file (Filename = 'ATTRIB.COM')
2018-12-17T22:49:11.048431724Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.054504372Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.057329611Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.060681018Z 61 PC: 12b41 | Open file (Filename = 'CHKDSK.COM')
2018-12-17T22:49:11.067533488Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.072860487Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.074511957Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.077819487Z 61 PC: 12b41 | Open file (Filename = 'DEBUG.COM')
2018-12-17T22:49:11.084397811Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.089782859Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.093315823Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.096304782Z 61 PC: 12b41 | Open file (Filename = 'EDIT.COM')
2018-12-17T22:49:11.104816527Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.110270429Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.113483989Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.11734598Z 61 PC: 12b41 | Open file (Filename = 'EXPAND.COM')
2018-12-17T22:49:11.124566882Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.132103883Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.134153199Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.137934875Z 61 PC: 12b41 | Open file (Filename = 'FDISK.COM')
2018-12-17T22:49:11.145428455Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.151212175Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.154058222Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.15744188Z 61 PC: 12b41 | Open file (Filename = 'FORMAT.COM')
2018-12-17T22:49:11.164183231Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.170120855Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.171890557Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.174797879Z 61 PC: 12b41 | Open file (Filename = 'KEYB.COM')
2018-12-17T22:49:11.182490598Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.188195162Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.189885758Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.19470118Z 61 PC: 12b41 | Open file (Filename = 'MEM.COM')
2018-12-17T22:49:11.201919881Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.208296754Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.209985668Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.212879051Z 61 PC: 12b41 | Open file (Filename = 'NLSFUNC.COM')
2018-12-17T22:49:11.220821061Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.226405215Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.229861246Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.232739369Z 61 PC: 12b41 | Open file (Filename = 'QBASIC.COM')
2018-12-17T22:49:11.239440369Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.245787501Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.247490661Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.251744328Z 61 PC: 12b41 | Open file (Filename = 'REPLACE.COM')
2018-12-17T22:49:11.258559895Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.264826618Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.268644515Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.272110779Z 61 PC: 12b41 | Open file (Filename = 'RESTORE.COM')
2018-12-17T22:49:11.281519903Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.287217652Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.292414664Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.295798904Z 61 PC: 12b41 | Open file (Filename = 'SCANDISK.COM')
2018-12-17T22:49:11.302781032Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.309917487Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.311701718Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.316229442Z 61 PC: 12b41 | Open file (Filename = 'SETUP.COM')
2018-12-17T22:49:11.324201984Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.329853487Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.331246008Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.334191681Z 61 PC: 12b41 | Open file (Filename = 'SYS.COM')
2018-12-17T22:49:11.342419997Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.348535826Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.35013536Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.35355386Z 61 PC: 12b41 | Open file (Filename = 'XCOPY.COM')
2018-12-17T22:49:11.360333788Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.366477766Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.368348304Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.37136632Z 61 PC: 12b41 | Open file (Filename = 'DEFRAG.COM')
2018-12-17T22:49:11.378582642Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.38405668Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.387378447Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.393449904Z 61 PC: 12b41 | Open file (Filename = 'EMM386.COM')
2018-12-17T22:49:11.400148109Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.407282011Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.409425912Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.413705711Z 61 PC: 12b41 | Open file (Filename = 'MSCDEX.COM')
2018-12-17T22:49:11.420495551Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.426000263Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.429014094Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.432478048Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:11.4391115Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:11.4437643Z 78 PC: 12aea | Find first file
2018-12-17T22:49:11.449293239Z 79 PC: 12af9 | Find next file
2018-12-17T22:49:11.451840771Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:11.453810981Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:11.457733881Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:11.46149749Z 61 PC: 12b41 | Open file (Filename = 'SETUP.COM')
2018-12-17T22:49:11.468278849Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.473597789Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.477102288Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.480156282Z 61 PC: 12b41 | Open file (Filename = 'WINHELP.COM')
2018-12-17T22:49:11.486869047Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.492908387Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.494572811Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.499028467Z 61 PC: 12b41 | Open file (Filename = 'WIN.COM')
2018-12-17T22:49:11.505604441Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.511027919Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.513333235Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.516305595Z 61 PC: 12b41 | Open file (Filename = 'MSD.COM')
2018-12-17T22:49:11.52375229Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.529319838Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.530995014Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.53458226Z 61 PC: 12b41 | Open file (Filename = 'PACKAGER.COM')
2018-12-17T22:49:11.541059435Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.547948578Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.549831855Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.552746751Z 61 PC: 12b41 | Open file (Filename = 'PBRUSH.COM')
2018-12-17T22:49:11.559860283Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.566172468Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.568481454Z 67 PC: 12b67 | Get or set file attributes
2018-12-17T22:49:11.575979936Z 67 PC: 12b71 | Get or set file attributes
2018-12-17T22:49:11.585677093Z 61 PC: 12b7a | Open file (Filename = 'PBRUSH.COM')
2018-12-17T22:49:11.593923051Z 87 PC: 12b82 | Get or set file date and time
2018-12-17T22:49:11.596162729Z 64 PC: 12baa | Write file or device (Write 505 bytes on handle 5)
2018-12-17T22:49:11.599374376Z 87 PC: 12bb2 | Get or set file date and time
2018-12-17T22:49:11.602739075Z 62 PC: 12bb6 | Close file
2018-12-17T22:49:11.609418685Z 14 PC: 12bd4 | Set default drive (Drive = 'A')
2018-12-17T22:49:11.610669897Z 59 PC: 12bdc | Change current directory
2018-12-17T22:49:11.613267596Z 25 PC: 12a56 | Get default drive
2018-12-17T22:49:11.614388732Z 71 PC: 12a68 | Get current directory
2018-12-17T22:49:11.623104135Z 14 PC: 12a6e | Set default drive (Drive = 'A')
2018-12-17T22:49:11.624408738Z 14 PC: 12ac4 | Set default drive (Drive = 'C')
2018-12-17T22:49:11.625563625Z 59 PC: 12acc | Change current directory
2018-12-17T22:49:11.629688991Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:11.635037249Z 61 PC: 12b41 | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:49:11.641346745Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.646761443Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.64841026Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.651947514Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:11.657361338Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:11.660670309Z 78 PC: 12aea | Find first file
2018-12-17T22:49:11.66678542Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:11.667771738Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:11.675111277Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:11.680788152Z 61 PC: 12b41 | Open file (Filename = 'ATTRIB.COM')
2018-12-17T22:49:11.688093662Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.695248309Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.696905724Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.699754127Z 61 PC: 12b41 | Open file (Filename = 'CHKDSK.COM')
2018-12-17T22:49:11.708014065Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.713425402Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.715345776Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.721148027Z 61 PC: 12b41 | Open file (Filename = 'DEBUG.COM')
2018-12-17T22:49:11.727674591Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.73364874Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.735264355Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.738231176Z 61 PC: 12b41 | Open file (Filename = 'EDIT.COM')
2018-12-17T22:49:11.745801672Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.751765589Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.753367595Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.757444331Z 61 PC: 12b41 | Open file (Filename = 'EXPAND.COM')
2018-12-17T22:49:11.764326738Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.771270965Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.772886036Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.775919602Z 61 PC: 12b41 | Open file (Filename = 'FDISK.COM')
2018-12-17T22:49:11.782992171Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.788348009Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.791445094Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.794519153Z 61 PC: 12b41 | Open file (Filename = 'FORMAT.COM')
2018-12-17T22:49:11.801500095Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.80685052Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.808453592Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.812275139Z 61 PC: 12b41 | Open file (Filename = 'KEYB.COM')
2018-12-17T22:49:11.819824823Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.82520412Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.828329932Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.831243922Z 61 PC: 12b41 | Open file (Filename = 'MEM.COM')
2018-12-17T22:49:11.838006184Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.845434343Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.84770139Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.851134321Z 61 PC: 12b41 | Open file (Filename = 'NLSFUNC.COM')
2018-12-17T22:49:11.858390802Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.863711725Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.865441751Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.86984482Z 61 PC: 12b41 | Open file (Filename = 'QBASIC.COM')
2018-12-17T22:49:11.876140042Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.87954801Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.881796825Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.883892421Z 61 PC: 12b41 | Open file (Filename = 'REPLACE.COM')
2018-12-17T22:49:11.88860463Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.892836787Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.894144765Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.897045439Z 61 PC: 12b41 | Open file (Filename = 'RESTORE.COM')
2018-12-17T22:49:11.901226859Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.905579826Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.907158935Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.909269194Z 61 PC: 12b41 | Open file (Filename = 'SCANDISK.COM')
2018-12-17T22:49:11.913702419Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.917656697Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.918958488Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.921830096Z 61 PC: 12b41 | Open file (Filename = 'SETUP.COM')
2018-12-17T22:49:11.926083755Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.929771662Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.931687273Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.933714743Z 61 PC: 12b41 | Open file (Filename = 'SYS.COM')
2018-12-17T22:49:11.938314738Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.94202348Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.94331143Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.945481534Z 61 PC: 12b41 | Open file (Filename = 'XCOPY.COM')
2018-12-17T22:49:11.950090422Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.954103298Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.956165285Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.958643277Z 61 PC: 12b41 | Open file (Filename = 'DEFRAG.COM')
2018-12-17T22:49:11.965203373Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.971592329Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.973379799Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.979400461Z 61 PC: 12b41 | Open file (Filename = 'EMM386.COM')
2018-12-17T22:49:11.98773774Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:11.993750617Z 62 PC: 12b53 | Close file
2018-12-17T22:49:11.995522841Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:11.998916523Z 61 PC: 12b41 | Open file (Filename = 'MSCDEX.COM')
2018-12-17T22:49:12.005559348Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.010902396Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.016062008Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.018838337Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:12.025829357Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:12.029424727Z 78 PC: 12aea | Find first file
2018-12-17T22:49:12.034672269Z 79 PC: 12af9 | Find next file
2018-12-17T22:49:12.038365574Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:12.039481378Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:12.045407414Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:12.05200688Z 61 PC: 12b41 | Open file (Filename = 'SETUP.COM')
2018-12-17T22:49:12.058642846Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.065059331Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.067222374Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.070159855Z 61 PC: 12b41 | Open file (Filename = 'WINHELP.COM')
2018-12-17T22:49:12.07741881Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.090724176Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.092369752Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.09584854Z 61 PC: 12b41 | Open file (Filename = 'WIN.COM')
2018-12-17T22:49:12.102412912Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.108058971Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.110329862Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.11344431Z 61 PC: 12b41 | Open file (Filename = 'MSD.COM')
2018-12-17T22:49:12.120429649Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.127912437Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.129972501Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.132813112Z 61 PC: 12b41 | Open file (Filename = 'PACKAGER.COM')
2018-12-17T22:49:12.140356804Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.145790737Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.149402793Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.152574599Z 61 PC: 12b41 | Open file (Filename = 'PBRUSH.COM')
2018-12-17T22:49:12.160083047Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.167306037Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.169071434Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.176674687Z 61 PC: 12b41 | Open file (Filename = 'SOL.COM')
2018-12-17T22:49:12.183161383Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.199402263Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.205961757Z 67 PC: 12b67 | Get or set file attributes
2018-12-17T22:49:12.212424007Z 67 PC: 12b71 | Get or set file attributes
2018-12-17T22:49:12.222726092Z 61 PC: 12b7a | Open file (Filename = 'SOL.COM')
2018-12-17T22:49:12.230474618Z 87 PC: 12b82 | Get or set file date and time
2018-12-17T22:49:12.232208196Z 64 PC: 12baa | Write file or device (Write 505 bytes on handle 5)
2018-12-17T22:49:12.236580111Z 87 PC: 12bb2 | Get or set file date and time
2018-12-17T22:49:12.23876234Z 62 PC: 12bb6 | Close file
2018-12-17T22:49:12.245193948Z 14 PC: 12bd4 | Set default drive (Drive = 'A')
2018-12-17T22:49:12.247357659Z 59 PC: 12bdc | Change current directory
2018-12-17T22:49:12.249085212Z 25 PC: 12a56 | Get default drive
2018-12-17T22:49:12.250144633Z 71 PC: 12a68 | Get current directory
2018-12-17T22:49:12.253843931Z 14 PC: 12a6e | Set default drive (Drive = 'A')
2018-12-17T22:49:12.255100795Z 14 PC: 12ac4 | Set default drive (Drive = 'C')
2018-12-17T22:49:12.256342338Z 59 PC: 12acc | Change current directory
2018-12-17T22:49:12.26085709Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:12.266515089Z 61 PC: 12b41 | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:49:12.273617506Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.279236527Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.28089954Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.284600002Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:12.290916606Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:12.294276627Z 78 PC: 12aea | Find first file
2018-12-17T22:49:12.301688001Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:12.30341144Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:12.310489045Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:12.316708306Z 61 PC: 12b41 | Open file (Filename = 'ATTRIB.COM')
2018-12-17T22:49:12.323141372Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.331518753Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.33358724Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.33703634Z 61 PC: 12b41 | Open file (Filename = 'CHKDSK.COM')
2018-12-17T22:49:12.344438883Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.355738829Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.357938126Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.36096655Z 61 PC: 12b41 | Open file (Filename = 'DEBUG.COM')
2018-12-17T22:49:12.36827241Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.373973274Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.376106806Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.378965643Z 61 PC: 12b41 | Open file (Filename = 'EDIT.COM')
2018-12-17T22:49:12.386611032Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.392815225Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.394560307Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.398948312Z 61 PC: 12b41 | Open file (Filename = 'EXPAND.COM')
2018-12-17T22:49:12.405710395Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.412386977Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.414120966Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.417360277Z 61 PC: 12b41 | Open file (Filename = 'FDISK.COM')
2018-12-17T22:49:12.424788709Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.430281302Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.431984036Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.436605488Z 61 PC: 12b41 | Open file (Filename = 'FORMAT.COM')
2018-12-17T22:49:12.441739759Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.445505918Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.446758062Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.448647996Z 61 PC: 12b41 | Open file (Filename = 'KEYB.COM')
2018-12-17T22:49:12.453889517Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.458518632Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.459710129Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.462346938Z 61 PC: 12b41 | Open file (Filename = 'MEM.COM')
2018-12-17T22:49:12.466485241Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.470393035Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.472613923Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.474904481Z 61 PC: 12b41 | Open file (Filename = 'NLSFUNC.COM')
2018-12-17T22:49:12.47902812Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.483936868Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.485202597Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.487568112Z 61 PC: 12b41 | Open file (Filename = 'QBASIC.COM')
2018-12-17T22:49:12.492301439Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.495822182Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.497498428Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.500283142Z 61 PC: 12b41 | Open file (Filename = 'REPLACE.COM')
2018-12-17T22:49:12.504466733Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.50963082Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.510972273Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.513135429Z 61 PC: 12b41 | Open file (Filename = 'RESTORE.COM')
2018-12-17T22:49:12.517999406Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.521896954Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.524135516Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.526225478Z 61 PC: 12b41 | Open file (Filename = 'SCANDISK.COM')
2018-12-17T22:49:12.530399352Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.534674541Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.536012285Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.538144146Z 61 PC: 12b41 | Open file (Filename = 'SETUP.COM')
2018-12-17T22:49:12.543343513Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.546851499Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.549125307Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.551206369Z 61 PC: 12b41 | Open file (Filename = 'SYS.COM')
2018-12-17T22:49:12.555491184Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.559758086Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.561111843Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.563761203Z 61 PC: 12b41 | Open file (Filename = 'XCOPY.COM')
2018-12-17T22:49:12.569121789Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.572616102Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.574791052Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.576926343Z 61 PC: 12b41 | Open file (Filename = 'DEFRAG.COM')
2018-12-17T22:49:12.581690508Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.58618792Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.587484257Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.591565472Z 61 PC: 12b41 | Open file (Filename = 'EMM386.COM')
2018-12-17T22:49:12.59668251Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.600269344Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.602684383Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.605316695Z 61 PC: 12b41 | Open file (Filename = 'MSCDEX.COM')
2018-12-17T22:49:12.609830968Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.614173022Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.615679461Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.617806162Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:12.622798752Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:12.625985088Z 78 PC: 12aea | Find first file
2018-12-17T22:49:12.630019343Z 79 PC: 12af9 | Find next file
2018-12-17T22:49:12.631990473Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:12.632857211Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:12.636617948Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:12.640762729Z 61 PC: 12b41 | Open file (Filename = 'SETUP.COM')
2018-12-17T22:49:12.644833893Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.649027559Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.650971498Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.652931769Z 61 PC: 12b41 | Open file (Filename = 'WINHELP.COM')
2018-12-17T22:49:12.657246066Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.661590179Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.663131289Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.666089527Z 61 PC: 12b41 | Open file (Filename = 'WIN.COM')
2018-12-17T22:49:12.670460208Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.673833681Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.67572108Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.677888602Z 61 PC: 12b41 | Open file (Filename = 'MSD.COM')
2018-12-17T22:49:12.6819567Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.687142113Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.689654576Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.692905587Z 61 PC: 12b41 | Open file (Filename = 'PACKAGER.COM')
2018-12-17T22:49:12.699565683Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.704993472Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.706649295Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.709505996Z 61 PC: 12b41 | Open file (Filename = 'PBRUSH.COM')
2018-12-17T22:49:12.716083411Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.722653111Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.724589799Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.730803855Z 61 PC: 12b41 | Open file (Filename = 'SOL.COM')
2018-12-17T22:49:12.737191687Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.743174245Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.744910617Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.747796866Z 61 PC: 12b41 | Open file (Filename = 'TERMINAL.COM')
2018-12-17T22:49:12.754500963Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.759782235Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.761411929Z 67 PC: 12b67 | Get or set file attributes
2018-12-17T22:49:12.767196688Z 67 PC: 12b71 | Get or set file attributes
2018-12-17T22:49:12.776221037Z 61 PC: 12b7a | Open file (Filename = 'TERMINAL.COM')
2018-12-17T22:49:12.783401816Z 87 PC: 12b82 | Get or set file date and time
2018-12-17T22:49:12.784797013Z 64 PC: 12baa | Write file or device (Write 505 bytes on handle 5)
2018-12-17T22:49:12.787691079Z 87 PC: 12bb2 | Get or set file date and time
2018-12-17T22:49:12.789240465Z 62 PC: 12bb6 | Close file
2018-12-17T22:49:12.794951895Z 14 PC: 12bd4 | Set default drive (Drive = 'A')
2018-12-17T22:49:12.795924625Z 59 PC: 12bdc | Change current directory
2018-12-17T22:49:12.797320539Z 25 PC: 12a56 | Get default drive
2018-12-17T22:49:12.798847278Z 71 PC: 12a68 | Get current directory
2018-12-17T22:49:12.80127122Z 14 PC: 12a6e | Set default drive (Drive = 'A')
2018-12-17T22:49:12.803270969Z 14 PC: 12ac4 | Set default drive (Drive = 'C')
2018-12-17T22:49:12.805715825Z 59 PC: 12acc | Change current directory
2018-12-17T22:49:12.80910158Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:12.814546235Z 61 PC: 12b41 | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:49:12.82178854Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.826366147Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.827806027Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.830557658Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:12.835141362Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:12.83769221Z 78 PC: 12aea | Find first file
2018-12-17T22:49:12.842321401Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:12.843410466Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:12.84795011Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:12.852051471Z 61 PC: 12b41 | Open file (Filename = 'ATTRIB.COM')
2018-12-17T22:49:12.857134627Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.860759481Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.862436327Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.864520178Z 61 PC: 12b41 | Open file (Filename = 'CHKDSK.COM')
2018-12-17T22:49:12.868720676Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.872429491Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.87410181Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.876471945Z 61 PC: 12b41 | Open file (Filename = 'DEBUG.COM')
2018-12-17T22:49:12.883334988Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.8888285Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.891735531Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.895199241Z 61 PC: 12b41 | Open file (Filename = 'EDIT.COM')
2018-12-17T22:49:12.902039289Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.907419513Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.910445217Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.913605402Z 61 PC: 12b41 | Open file (Filename = 'EXPAND.COM')
2018-12-17T22:49:12.920021517Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.926859923Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.928518277Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.931372572Z 61 PC: 12b41 | Open file (Filename = 'FDISK.COM')
2018-12-17T22:49:12.938488781Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.942501455Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.944224518Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.948693701Z 61 PC: 12b41 | Open file (Filename = 'FORMAT.COM')
2018-12-17T22:49:12.955648024Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.961422156Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.963850315Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.967003389Z 61 PC: 12b41 | Open file (Filename = 'KEYB.COM')
2018-12-17T22:49:12.973974966Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.979576607Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.981899256Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:12.984949847Z 61 PC: 12b41 | Open file (Filename = 'MEM.COM')
2018-12-17T22:49:12.992810062Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:12.998240985Z 62 PC: 12b53 | Close file
2018-12-17T22:49:12.999873861Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:13.002991862Z 61 PC: 12b41 | Open file (Filename = 'NLSFUNC.COM')
2018-12-17T22:49:13.010459666Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:13.016276682Z 62 PC: 12b53 | Close file
2018-12-17T22:49:13.018364086Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:13.022162962Z 61 PC: 12b41 | Open file (Filename = 'QBASIC.COM')
2018-12-17T22:49:13.028620396Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:13.034227585Z 62 PC: 12b53 | Close file
2018-12-17T22:49:13.037029063Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:13.039885325Z 61 PC: 12b41 | Open file (Filename = 'REPLACE.COM')
2018-12-17T22:49:13.046541255Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:13.052850129Z 62 PC: 12b53 | Close file
2018-12-17T22:49:13.055315527Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:13.05842477Z 61 PC: 12b41 | Open file (Filename = 'RESTORE.COM')
2018-12-17T22:49:13.066033445Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:13.071448585Z 62 PC: 12b53 | Close file
2018-12-17T22:49:13.073375632Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:13.076253243Z 61 PC: 12b41 | Open file (Filename = 'SCANDISK.COM')
2018-12-17T22:49:13.082666321Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:13.088690039Z 62 PC: 12b53 | Close file
2018-12-17T22:49:13.091076143Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:13.094232141Z 61 PC: 12b41 | Open file (Filename = 'SETUP.COM')
2018-12-17T22:49:13.102676482Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:13.108106107Z 62 PC: 12b53 | Close file
2018-12-17T22:49:13.112427439Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:13.11656475Z 61 PC: 12b41 | Open file (Filename = 'SYS.COM')
2018-12-17T22:49:13.123332035Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:13.129480204Z 62 PC: 12b53 | Close file
2018-12-17T22:49:13.131479379Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:13.134637771Z 61 PC: 12b41 | Open file (Filename = 'XCOPY.COM')
2018-12-17T22:49:13.141274942Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:13.146663929Z 62 PC: 12b53 | Close file
2018-12-17T22:49:13.149631259Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:13.152548474Z 61 PC: 12b41 | Open file (Filename = 'DEFRAG.COM')
2018-12-17T22:49:13.168451757Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:13.173900612Z 62 PC: 12b53 | Close file
2018-12-17T22:49:13.175674439Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:13.182432599Z 61 PC: 12b41 | Open file (Filename = 'EMM386.COM')
2018-12-17T22:49:13.189480944Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:13.195945101Z 62 PC: 12b53 | Close file
2018-12-17T22:49:13.198313148Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:13.20312975Z 61 PC: 12b41 | Open file (Filename = 'MSCDEX.COM')
2018-12-17T22:49:13.210087309Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:13.217136891Z 62 PC: 12b53 | Close file
2018-12-17T22:49:13.219666237Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:13.22251018Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:13.228834311Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:13.232140634Z 78 PC: 12aea | Find first file
2018-12-17T22:49:13.237421859Z 79 PC: 12af9 | Find next file
2018-12-17T22:49:13.239947578Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:13.241390765Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:13.246972642Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:13.252947093Z 61 PC: 12b41 | Open file (Filename = 'SETUP.COM')
2018-12-17T22:49:13.267518413Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:13.271097483Z 62 PC: 12b53 | Close file
2018-12-17T22:49:13.272588682Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:13.274957579Z 61 PC: 12b41 | Open file (Filename = 'WINHELP.COM')
2018-12-17T22:49:13.281596306Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:13.287189387Z 62 PC: 12b53 | Close file
2018-12-17T22:49:13.288789433Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:13.291614209Z 61 PC: 12b41 | Open file (Filename = 'WIN.COM')
2018-12-17T22:49:13.298255003Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:13.30360712Z 62 PC: 12b53 | Close file
2018-12-17T22:49:13.305232134Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:13.309955361Z 61 PC: 12b41 | Open file (Filename = 'MSD.COM')
2018-12-17T22:49:13.316819426Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:13.322461861Z 62 PC: 12b53 | Close file
2018-12-17T22:49:13.324898381Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:13.327949605Z 61 PC: 12b41 | Open file (Filename = 'PACKAGER.COM')
2018-12-17T22:49:13.335345499Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:13.340741834Z 62 PC: 12b53 | Close file
2018-12-17T22:49:13.342761838Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:13.345846009Z 61 PC: 12b41 | Open file (Filename = 'PBRUSH.COM')
2018-12-17T22:49:13.352502397Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:13.358281197Z 62 PC: 12b53 | Close file
2018-12-17T22:49:13.359848522Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:13.365901903Z 61 PC: 12b41 | Open file (Filename = 'SOL.COM')
2018-12-17T22:49:13.372895591Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:13.378210228Z 62 PC: 12b53 | Close file
2018-12-17T22:49:13.380270102Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:13.38324606Z 61 PC: 12b41 | Open file (Filename = 'TERMINAL.COM')
2018-12-17T22:49:13.389792759Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:13.395839418Z 62 PC: 12b53 | Close file
2018-12-17T22:49:13.397786067Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:13.400595258Z 61 PC: 12b41 | Open file (Filename = 'WINFILE.COM')
2018-12-17T22:49:13.408050388Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:13.413455059Z 62 PC: 12b53 | Close file
2018-12-17T22:49:13.41511772Z 67 PC: 12b67 | Get or set file attributes
2018-12-17T22:49:13.421343144Z 67 PC: 12b71 | Get or set file attributes
2018-12-17T22:49:13.648197854Z 61 PC: 12b7a | Open file (Filename = 'WINFILE.COM')
2018-12-17T22:49:13.652348532Z 87 PC: 12b82 | Get or set file date and time
2018-12-17T22:49:13.653439707Z 64 PC: 12baa | Write file or device (Write 505 bytes on handle 5)
2018-12-17T22:49:13.656905255Z 87 PC: 12bb2 | Get or set file date and time
2018-12-17T22:49:13.658005882Z 62 PC: 12bb6 | Close file
2018-12-17T22:49:13.667714Z 14 PC: 12bd4 | Set default drive (Drive = 'A')
2018-12-17T22:49:13.669024137Z 59 PC: 12bdc | Change current directory
2018-12-17T22:49:13.670776379Z 25 PC: 12a56 | Get default drive
2018-12-17T22:49:13.673930594Z 71 PC: 12a68 | Get current directory
2018-12-17T22:49:13.677000555Z 14 PC: 12a6e | Set default drive (Drive = 'A')
2018-12-17T22:49:13.67815675Z 14 PC: 12ac4 | Set default drive (Drive = 'C')
2018-12-17T22:49:13.679718449Z 59 PC: 12acc | Change current directory
2018-12-17T22:49:13.683066554Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:13.688961111Z 61 PC: 12b41 | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:49:13.695082537Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:13.701131049Z 62 PC: 12b53 | Close file
2018-12-17T22:49:13.702743464Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:13.705273563Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:13.710894974Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:13.714804233Z 78 PC: 12aea | Find first file
2018-12-17T22:49:13.720215262Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:13.729628825Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:13.735561363Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:13.741167979Z 61 PC: 12b41 | Open file (Filename = 'ATTRIB.COM')
2018-12-17T22:49:13.748722402Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:13.754480079Z 62 PC: 12b53 | Close file
2018-12-17T22:49:13.756510915Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:13.759718262Z 61 PC: 12b41 | Open file (Filename = 'CHKDSK.COM')
2018-12-17T22:49:13.767171259Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:13.772555363Z 62 PC: 12b53 | Close file
2018-12-17T22:49:13.778123748Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:13.781287004Z 61 PC: 12b41 | Open file (Filename = 'DEBUG.COM')
2018-12-17T22:49:13.787898079Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:13.79521927Z 62 PC: 12b53 | Close file
2018-12-17T22:49:13.796982126Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:13.7999291Z 61 PC: 12b41 | Open file (Filename = 'EDIT.COM')
2018-12-17T22:49:13.80780934Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:13.813626158Z 62 PC: 12b53 | Close file
2018-12-17T22:49:13.815528512Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:13.819593279Z 61 PC: 12b41 | Open file (Filename = 'EXPAND.COM')
2018-12-17T22:49:13.826167906Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:13.83166532Z 62 PC: 12b53 | Close file
2018-12-17T22:49:13.833420784Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:13.83723896Z 61 PC: 12b41 | Open file (Filename = 'FDISK.COM')
2018-12-17T22:49:13.843572912Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:13.849548723Z 62 PC: 12b53 | Close file
2018-12-17T22:49:13.852032151Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:13.854869243Z 61 PC: 12b41 | Open file (Filename = 'FORMAT.COM')
2018-12-17T22:49:13.861633541Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:13.86695343Z 62 PC: 12b53 | Close file
2018-12-17T22:49:13.868588345Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:13.87151554Z 61 PC: 12b41 | Open file (Filename = 'KEYB.COM')
2018-12-17T22:49:13.878979666Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:13.884386034Z 62 PC: 12b53 | Close file
2018-12-17T22:49:13.886866991Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:13.891610671Z 61 PC: 12b41 | Open file (Filename = 'MEM.COM')
2018-12-17T22:49:13.898070529Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:13.903313625Z 62 PC: 12b53 | Close file
2018-12-17T22:49:13.906058965Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:13.908986608Z 61 PC: 12b41 | Open file (Filename = 'NLSFUNC.COM')
2018-12-17T22:49:13.915456517Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:13.921508729Z 62 PC: 12b53 | Close file
2018-12-17T22:49:13.923189192Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:13.926210335Z 61 PC: 12b41 | Open file (Filename = 'QBASIC.COM')
2018-12-17T22:49:13.932995508Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:13.938520209Z 62 PC: 12b53 | Close file
2018-12-17T22:49:13.940622251Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:13.943797079Z 61 PC: 12b41 | Open file (Filename = 'REPLACE.COM')
2018-12-17T22:49:13.951306007Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:13.957409316Z 62 PC: 12b53 | Close file
2018-12-17T22:49:13.959826214Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:13.962642902Z 61 PC: 12b41 | Open file (Filename = 'RESTORE.COM')
2018-12-17T22:49:13.96900833Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:13.987454469Z 62 PC: 12b53 | Close file
2018-12-17T22:49:13.989204098Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:13.991998856Z 61 PC: 12b41 | Open file (Filename = 'SCANDISK.COM')
2018-12-17T22:49:13.999261794Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:14.004952298Z 62 PC: 12b53 | Close file
2018-12-17T22:49:14.006711309Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:14.009696035Z 61 PC: 12b41 | Open file (Filename = 'SETUP.COM')
2018-12-17T22:49:14.017222979Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:14.022576072Z 62 PC: 12b53 | Close file
2018-12-17T22:49:14.025567024Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:14.02870568Z 61 PC: 12b41 | Open file (Filename = 'SYS.COM')
2018-12-17T22:49:14.035130479Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:14.041138982Z 62 PC: 12b53 | Close file
2018-12-17T22:49:14.042838507Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:14.045669837Z 61 PC: 12b41 | Open file (Filename = 'XCOPY.COM')
2018-12-17T22:49:14.052089168Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:14.058040906Z 62 PC: 12b53 | Close file
2018-12-17T22:49:14.059775974Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:14.062682325Z 61 PC: 12b41 | Open file (Filename = 'DEFRAG.COM')
2018-12-17T22:49:14.069991189Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:14.077210154Z 62 PC: 12b53 | Close file
2018-12-17T22:49:14.079265555Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:14.085958741Z 61 PC: 12b41 | Open file (Filename = 'EMM386.COM')
2018-12-17T22:49:14.094456771Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:14.100261002Z 62 PC: 12b53 | Close file
2018-12-17T22:49:14.102938061Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:14.106321419Z 61 PC: 12b41 | Open file (Filename = 'MSCDEX.COM')
2018-12-17T22:49:14.113474152Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:14.119277039Z 62 PC: 12b53 | Close file
2018-12-17T22:49:14.121878893Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:14.125577558Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:14.132415563Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:14.137035142Z 78 PC: 12aea | Find first file
2018-12-17T22:49:14.142398777Z 79 PC: 12af9 | Find next file
2018-12-17T22:49:14.147092126Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:14.148191322Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:14.154623225Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:14.16188927Z 61 PC: 12b41 | Open file (Filename = 'SETUP.COM')
2018-12-17T22:49:14.168569004Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:14.174991469Z 62 PC: 12b53 | Close file
2018-12-17T22:49:14.178271383Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:14.181545936Z 61 PC: 12b41 | Open file (Filename = 'WINHELP.COM')
2018-12-17T22:49:14.188387722Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:14.195927256Z 62 PC: 12b53 | Close file
2018-12-17T22:49:14.197737675Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:14.200940102Z 61 PC: 12b41 | Open file (Filename = 'WIN.COM')
2018-12-17T22:49:14.216685174Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:14.223168663Z 62 PC: 12b53 | Close file
2018-12-17T22:49:14.225223572Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:14.228893429Z 61 PC: 12b41 | Open file (Filename = 'MSD.COM')
2018-12-17T22:49:14.235521298Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:14.241071045Z 62 PC: 12b53 | Close file
2018-12-17T22:49:14.242644938Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:14.245854026Z 61 PC: 12b41 | Open file (Filename = 'PACKAGER.COM')
2018-12-17T22:49:14.252452487Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:14.259147709Z 62 PC: 12b53 | Close file
2018-12-17T22:49:14.260826333Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:14.263803551Z 61 PC: 12b41 | Open file (Filename = 'PBRUSH.COM')
2018-12-17T22:49:14.270750289Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:14.275991258Z 62 PC: 12b53 | Close file
2018-12-17T22:49:14.277623843Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:14.284225774Z 61 PC: 12b41 | Open file (Filename = 'SOL.COM')
2018-12-17T22:49:14.291444809Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:14.296978083Z 62 PC: 12b53 | Close file
2018-12-17T22:49:14.298742166Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:14.30251282Z 61 PC: 12b41 | Open file (Filename = 'TERMINAL.COM')
2018-12-17T22:49:14.310269622Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:14.315635374Z 62 PC: 12b53 | Close file
2018-12-17T22:49:14.318790676Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:14.321639789Z 61 PC: 12b41 | Open file (Filename = 'WINFILE.COM')
2018-12-17T22:49:14.329276895Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:14.335701374Z 62 PC: 12b53 | Close file
2018-12-17T22:49:14.337559837Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:14.340762378Z 61 PC: 12b41 | Open file (Filename = 'WINTUTOR.COM')
2018-12-17T22:49:14.347951555Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:14.354273055Z 62 PC: 12b53 | Close file
2018-12-17T22:49:14.356099265Z 67 PC: 12b67 | Get or set file attributes
2018-12-17T22:49:14.362068276Z 67 PC: 12b71 | Get or set file attributes
2018-12-17T22:49:14.862731472Z 61 PC: 12b7a | Open file (Filename = 'WINTUTOR.COM')
2018-12-17T22:49:14.868368722Z 87 PC: 12b82 | Get or set file date and time
2018-12-17T22:49:14.869854593Z 64 PC: 12baa | Write file or device (Write 505 bytes on handle 5)
2018-12-17T22:49:14.87293651Z 87 PC: 12bb2 | Get or set file date and time
2018-12-17T22:49:14.87437355Z 62 PC: 12bb6 | Close file
2018-12-17T22:49:15.129381997Z 14 PC: 12bd4 | Set default drive (Drive = 'A')
2018-12-17T22:49:15.133982506Z 59 PC: 12bdc | Change current directory
2018-12-17T22:49:15.136252059Z 25 PC: 12a56 | Get default drive
2018-12-17T22:49:15.13780713Z 71 PC: 12a68 | Get current directory
2018-12-17T22:49:15.146365962Z 14 PC: 12a6e | Set default drive (Drive = 'A')
2018-12-17T22:49:15.147530345Z 14 PC: 12ac4 | Set default drive (Drive = 'C')
2018-12-17T22:49:15.149504453Z 59 PC: 12acc | Change current directory
2018-12-17T22:49:15.152794313Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:15.158097237Z 61 PC: 12b41 | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:49:15.164714928Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:15.170291376Z 62 PC: 12b53 | Close file
2018-12-17T22:49:15.172263591Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:15.176633122Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:15.183108917Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:15.1868377Z 78 PC: 12aea | Find first file
2018-12-17T22:49:15.193833054Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:15.195215037Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:15.202094699Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:15.207804065Z 61 PC: 12b41 | Open file (Filename = 'ATTRIB.COM')
2018-12-17T22:49:15.214238016Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:15.220868595Z 62 PC: 12b53 | Close file
2018-12-17T22:49:15.222842456Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:15.225787912Z 61 PC: 12b41 | Open file (Filename = 'CHKDSK.COM')
2018-12-17T22:49:15.233644062Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:15.240336655Z 62 PC: 12b53 | Close file
2018-12-17T22:49:15.24292416Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:15.246351576Z 61 PC: 12b41 | Open file (Filename = 'DEBUG.COM')
2018-12-17T22:49:15.257077044Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:15.273149353Z 62 PC: 12b53 | Close file
2018-12-17T22:49:15.275430165Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:15.280319956Z 61 PC: 12b41 | Open file (Filename = 'EDIT.COM')
2018-12-17T22:49:15.287396737Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:15.29440476Z 62 PC: 12b53 | Close file
2018-12-17T22:49:15.297607874Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:15.301542504Z 61 PC: 12b41 | Open file (Filename = 'EXPAND.COM')
2018-12-17T22:49:15.309255419Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:15.317934821Z 62 PC: 12b53 | Close file
2018-12-17T22:49:15.319820033Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:15.32431692Z 61 PC: 12b41 | Open file (Filename = 'FDISK.COM')
2018-12-17T22:49:15.330964744Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:15.336834267Z 62 PC: 12b53 | Close file
2018-12-17T22:49:15.338932716Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:15.34383529Z 61 PC: 12b41 | Open file (Filename = 'FORMAT.COM')
2018-12-17T22:49:15.350592728Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:15.356908489Z 62 PC: 12b53 | Close file
2018-12-17T22:49:15.360254402Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:15.363446543Z 61 PC: 12b41 | Open file (Filename = 'KEYB.COM')
2018-12-17T22:49:15.370399844Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:15.377279709Z 62 PC: 12b53 | Close file
2018-12-17T22:49:15.37926835Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:15.383194268Z 61 PC: 12b41 | Open file (Filename = 'MEM.COM')
2018-12-17T22:49:15.391988401Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:15.398153467Z 62 PC: 12b53 | Close file
2018-12-17T22:49:15.40034932Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:15.404946952Z 61 PC: 12b41 | Open file (Filename = 'NLSFUNC.COM')
2018-12-17T22:49:15.411652086Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:15.417370192Z 62 PC: 12b53 | Close file
2018-12-17T22:49:15.420660936Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:15.423932261Z 61 PC: 12b41 | Open file (Filename = 'QBASIC.COM')
2018-12-17T22:49:15.431229135Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:15.439165643Z 62 PC: 12b53 | Close file
2018-12-17T22:49:15.441153428Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:15.444491683Z 61 PC: 12b41 | Open file (Filename = 'REPLACE.COM')
2018-12-17T22:49:15.452538724Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:15.458742186Z 62 PC: 12b53 | Close file
2018-12-17T22:49:15.462268178Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:15.465288211Z 61 PC: 12b41 | Open file (Filename = 'RESTORE.COM')
2018-12-17T22:49:15.471795713Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:15.477888907Z 62 PC: 12b53 | Close file
2018-12-17T22:49:15.480900344Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:15.48451552Z 61 PC: 12b41 | Open file (Filename = 'SCANDISK.COM')
2018-12-17T22:49:15.49106232Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:15.497762333Z 62 PC: 12b53 | Close file
2018-12-17T22:49:15.499875125Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:15.503315857Z 61 PC: 12b41 | Open file (Filename = 'SETUP.COM')
2018-12-17T22:49:15.510389962Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:15.517031922Z 62 PC: 12b53 | Close file
2018-12-17T22:49:15.519137369Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:15.522705914Z 61 PC: 12b41 | Open file (Filename = 'SYS.COM')
2018-12-17T22:49:15.531652755Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:15.537385037Z 62 PC: 12b53 | Close file
2018-12-17T22:49:15.539414999Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:15.544293765Z 61 PC: 12b41 | Open file (Filename = 'XCOPY.COM')
2018-12-17T22:49:15.551152736Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:15.556805488Z 62 PC: 12b53 | Close file
2018-12-17T22:49:15.55975546Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:15.562856864Z 61 PC: 12b41 | Open file (Filename = 'DEFRAG.COM')
2018-12-17T22:49:15.570066835Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:15.577225953Z 62 PC: 12b53 | Close file
2018-12-17T22:49:15.579196844Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:15.585368865Z 61 PC: 12b41 | Open file (Filename = 'EMM386.COM')
2018-12-17T22:49:15.594617038Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:15.600450244Z 62 PC: 12b53 | Close file
2018-12-17T22:49:15.602644783Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:15.607706436Z 61 PC: 12b41 | Open file (Filename = 'MSCDEX.COM')
2018-12-17T22:49:15.614731765Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:15.6206015Z 62 PC: 12b53 | Close file
2018-12-17T22:49:15.624300559Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:15.627430941Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:15.633686369Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:15.640526453Z 78 PC: 12aea | Find first file
2018-12-17T22:49:15.646036743Z 79 PC: 12af9 | Find next file
2018-12-17T22:49:15.649575692Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:15.651719481Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:15.659677719Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:15.669060746Z 61 PC: 12b41 | Open file (Filename = 'SETUP.COM')
2018-12-17T22:49:15.678123888Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:15.68375788Z 62 PC: 12b53 | Close file
2018-12-17T22:49:15.685812872Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:15.690435008Z 61 PC: 12b41 | Open file (Filename = 'WINHELP.COM')
2018-12-17T22:49:15.69729006Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:15.702762738Z 62 PC: 12b53 | Close file
2018-12-17T22:49:15.705930163Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:15.709489098Z 61 PC: 12b41 | Open file (Filename = 'WIN.COM')
2018-12-17T22:49:15.716486008Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:15.72217277Z 62 PC: 12b53 | Close file
2018-12-17T22:49:15.725758763Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:15.728947526Z 61 PC: 12b41 | Open file (Filename = 'MSD.COM')
2018-12-17T22:49:15.736908182Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:15.74358811Z 62 PC: 12b53 | Close file
2018-12-17T22:49:15.745677604Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:15.748886396Z 61 PC: 12b41 | Open file (Filename = 'PACKAGER.COM')
2018-12-17T22:49:15.756133672Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:15.76163451Z 62 PC: 12b53 | Close file
2018-12-17T22:49:15.763662226Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:15.767360489Z 61 PC: 12b41 | Open file (Filename = 'PBRUSH.COM')
2018-12-17T22:49:15.774195789Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:15.779839751Z 62 PC: 12b53 | Close file
2018-12-17T22:49:15.782328931Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:15.788485092Z 61 PC: 12b41 | Open file (Filename = 'SOL.COM')
2018-12-17T22:49:15.796033454Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:15.80217106Z 62 PC: 12b53 | Close file
2018-12-17T22:49:15.804181962Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:15.807426281Z 61 PC: 12b41 | Open file (Filename = 'TERMINAL.COM')
2018-12-17T22:49:15.815645233Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:15.821275416Z 62 PC: 12b53 | Close file
2018-12-17T22:49:15.823277674Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:15.827477458Z 61 PC: 12b41 | Open file (Filename = 'WINFILE.COM')
2018-12-17T22:49:15.83423382Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:15.839861027Z 62 PC: 12b53 | Close file
2018-12-17T22:49:15.842345294Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:15.845573881Z 61 PC: 12b41 | Open file (Filename = 'WINTUTOR.COM')
2018-12-17T22:49:15.852382573Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:15.858569277Z 62 PC: 12b53 | Close file
2018-12-17T22:49:15.860297255Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:15.864116789Z 61 PC: 12b41 | Open file (Filename = 'WRITE.COM')
2018-12-17T22:49:15.87184735Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:15.877280837Z 62 PC: 12b53 | Close file
2018-12-17T22:49:15.879168917Z 67 PC: 12b67 | Get or set file attributes
2018-12-17T22:49:15.885772Z 67 PC: 12b71 | Get or set file attributes
2018-12-17T22:49:15.896959283Z 61 PC: 12b7a | Open file (Filename = 'WRITE.COM')
2018-12-17T22:49:15.906442445Z 87 PC: 12b82 | Get or set file date and time
2018-12-17T22:49:15.910287046Z 64 PC: 12baa | Write file or device (Write 505 bytes on handle 5)
2018-12-17T22:49:15.916048202Z 87 PC: 12bb2 | Get or set file date and time
2018-12-17T22:49:15.917896201Z 62 PC: 12bb6 | Close file
2018-12-17T22:49:15.925626646Z 14 PC: 12bd4 | Set default drive (Drive = 'A')
2018-12-17T22:49:15.928864074Z 59 PC: 12bdc | Change current directory
2018-12-17T22:49:15.931775589Z 25 PC: 12a56 | Get default drive
2018-12-17T22:49:15.934672849Z 71 PC: 12a68 | Get current directory
2018-12-17T22:49:15.93860969Z 14 PC: 12a6e | Set default drive (Drive = 'A')
2018-12-17T22:49:15.941791381Z 14 PC: 12ac4 | Set default drive (Drive = 'C')
2018-12-17T22:49:15.943363847Z 59 PC: 12acc | Change current directory
2018-12-17T22:49:15.947487827Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:15.954390059Z 61 PC: 12b41 | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:49:15.961243758Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:15.967484056Z 62 PC: 12b53 | Close file
2018-12-17T22:49:15.971259774Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:15.973930162Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:15.979614422Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:15.985170301Z 78 PC: 12aea | Find first file
2018-12-17T22:49:15.99132676Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:15.992978432Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:15.99947709Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:16.005748645Z 61 PC: 12b41 | Open file (Filename = 'ATTRIB.COM')
2018-12-17T22:49:16.013351538Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.019639713Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.022835416Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.026015572Z 61 PC: 12b41 | Open file (Filename = 'CHKDSK.COM')
2018-12-17T22:49:16.032717683Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.038638596Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.04204254Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.04528372Z 61 PC: 12b41 | Open file (Filename = 'DEBUG.COM')
2018-12-17T22:49:16.052096538Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.059455841Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.061555666Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.064837062Z 61 PC: 12b41 | Open file (Filename = 'EDIT.COM')
2018-12-17T22:49:16.070210083Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.075593984Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.077226249Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.081053729Z 61 PC: 12b41 | Open file (Filename = 'EXPAND.COM')
2018-12-17T22:49:16.086063245Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.09176659Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.093579605Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.097874544Z 61 PC: 12b41 | Open file (Filename = 'FDISK.COM')
2018-12-17T22:49:16.104464542Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.110216077Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.113889161Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.117135616Z 61 PC: 12b41 | Open file (Filename = 'FORMAT.COM')
2018-12-17T22:49:16.123603133Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.130136333Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.132154184Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.135352456Z 61 PC: 12b41 | Open file (Filename = 'KEYB.COM')
2018-12-17T22:49:16.142475518Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.151232657Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.153051548Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.157863528Z 61 PC: 12b41 | Open file (Filename = 'MEM.COM')
2018-12-17T22:49:16.166431966Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.17299162Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.174997968Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.180199485Z 61 PC: 12b41 | Open file (Filename = 'NLSFUNC.COM')
2018-12-17T22:49:16.18707485Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.192521066Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.195402518Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.198851692Z 61 PC: 12b41 | Open file (Filename = 'QBASIC.COM')
2018-12-17T22:49:16.205762005Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.212561077Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.214477703Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.217386995Z 61 PC: 12b41 | Open file (Filename = 'REPLACE.COM')
2018-12-17T22:49:16.225323109Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.231905008Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.233987397Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.237266883Z 61 PC: 12b41 | Open file (Filename = 'RESTORE.COM')
2018-12-17T22:49:16.244950737Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.250390853Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.252095753Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.256349531Z 61 PC: 12b41 | Open file (Filename = 'SCANDISK.COM')
2018-12-17T22:49:16.262880141Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.268173284Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.26988362Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.274360521Z 61 PC: 12b41 | Open file (Filename = 'SETUP.COM')
2018-12-17T22:49:16.281112039Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.2867688Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.289458174Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.293862617Z 61 PC: 12b41 | Open file (Filename = 'SYS.COM')
2018-12-17T22:49:16.300827412Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.306554122Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.308555745Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.313261056Z 61 PC: 12b41 | Open file (Filename = 'XCOPY.COM')
2018-12-17T22:49:16.320167961Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.325804056Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.328556618Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.331774134Z 61 PC: 12b41 | Open file (Filename = 'DEFRAG.COM')
2018-12-17T22:49:16.338627533Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.344339047Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.347861597Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.354139346Z 61 PC: 12b41 | Open file (Filename = 'EMM386.COM')
2018-12-17T22:49:16.359993409Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.366118031Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.367740496Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.369759366Z 61 PC: 12b41 | Open file (Filename = 'MSCDEX.COM')
2018-12-17T22:49:16.374608409Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.378251903Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.379593071Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.384650951Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:16.389205253Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:16.39161182Z 78 PC: 12aea | Find first file
2018-12-17T22:49:16.395192942Z 79 PC: 12af9 | Find next file
2018-12-17T22:49:16.397837028Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:16.399073823Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:16.403019907Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:16.407788963Z 61 PC: 12b41 | Open file (Filename = 'SETUP.COM')
2018-12-17T22:49:16.411925066Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.415706122Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.417657138Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.420008345Z 61 PC: 12b41 | Open file (Filename = 'WINHELP.COM')
2018-12-17T22:49:16.424482938Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.428410828Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.430662212Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.432673011Z 61 PC: 12b41 | Open file (Filename = 'WIN.COM')
2018-12-17T22:49:16.436760253Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.441352503Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.442624745Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.444657344Z 61 PC: 12b41 | Open file (Filename = 'MSD.COM')
2018-12-17T22:49:16.450099978Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.45370573Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.455114917Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.459707291Z 61 PC: 12b41 | Open file (Filename = 'PACKAGER.COM')
2018-12-17T22:49:16.463759091Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.467111499Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.468332139Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.471298871Z 61 PC: 12b41 | Open file (Filename = 'PBRUSH.COM')
2018-12-17T22:49:16.47548582Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.478941334Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.480768504Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.484542947Z 61 PC: 12b41 | Open file (Filename = 'SOL.COM')
2018-12-17T22:49:16.488590654Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.492066142Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.49398697Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.49591156Z 61 PC: 12b41 | Open file (Filename = 'TERMINAL.COM')
2018-12-17T22:49:16.500368039Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.503789046Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.505784674Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.507719875Z 61 PC: 12b41 | Open file (Filename = 'WINFILE.COM')
2018-12-17T22:49:16.511888733Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.516359845Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.517582191Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.519572182Z 61 PC: 12b41 | Open file (Filename = 'WINTUTOR.COM')
2018-12-17T22:49:16.524273316Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.527929979Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.52912475Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.531173075Z 61 PC: 12b41 | Open file (Filename = 'WRITE.COM')
2018-12-17T22:49:16.537504811Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.541815909Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.543511292Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.546858671Z 61 PC: 12b41 | Open file (Filename = 'CALC.COM')
2018-12-17T22:49:16.553310218Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.566547971Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.569033812Z 67 PC: 12b67 | Get or set file attributes
2018-12-17T22:49:16.576366502Z 67 PC: 12b71 | Get or set file attributes
2018-12-17T22:49:16.585297683Z 61 PC: 12b7a | Open file (Filename = 'CALC.COM')
2018-12-17T22:49:16.59166268Z 87 PC: 12b82 | Get or set file date and time
2018-12-17T22:49:16.593802601Z 64 PC: 12baa | Write file or device (Write 505 bytes on handle 5)
2018-12-17T22:49:16.596748828Z 87 PC: 12bb2 | Get or set file date and time
2018-12-17T22:49:16.598478235Z 62 PC: 12bb6 | Close file
2018-12-17T22:49:16.6049544Z 14 PC: 12bd4 | Set default drive (Drive = 'A')
2018-12-17T22:49:16.60721001Z 59 PC: 12bdc | Change current directory
2018-12-17T22:49:16.61035247Z 25 PC: 12a56 | Get default drive
2018-12-17T22:49:16.611653917Z 71 PC: 12a68 | Get current directory
2018-12-17T22:49:16.614777833Z 14 PC: 12a6e | Set default drive (Drive = 'A')
2018-12-17T22:49:16.61844709Z 14 PC: 12ac4 | Set default drive (Drive = 'C')
2018-12-17T22:49:16.619907503Z 59 PC: 12acc | Change current directory
2018-12-17T22:49:16.623629746Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:16.63076898Z 61 PC: 12b41 | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:49:16.636809488Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.643035773Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.646400124Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.648835313Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:16.654336024Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:16.658681586Z 78 PC: 12aea | Find first file
2018-12-17T22:49:16.663580015Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:16.664592262Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:16.671263314Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:16.677590772Z 61 PC: 12b41 | Open file (Filename = 'ATTRIB.COM')
2018-12-17T22:49:16.684234593Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.69152855Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.693334963Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.696289675Z 61 PC: 12b41 | Open file (Filename = 'CHKDSK.COM')
2018-12-17T22:49:16.702575944Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.710325145Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.712084163Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.715107434Z 61 PC: 12b41 | Open file (Filename = 'DEBUG.COM')
2018-12-17T22:49:16.721940965Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.729728015Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.732415834Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.735872973Z 61 PC: 12b41 | Open file (Filename = 'EDIT.COM')
2018-12-17T22:49:16.743986028Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.749743038Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.75177489Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.7548734Z 61 PC: 12b41 | Open file (Filename = 'EXPAND.COM')
2018-12-17T22:49:16.762104781Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.767541043Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.769433164Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.772375157Z 61 PC: 12b41 | Open file (Filename = 'FDISK.COM')
2018-12-17T22:49:16.781139206Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.786636157Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.788347963Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.792482767Z 61 PC: 12b41 | Open file (Filename = 'FORMAT.COM')
2018-12-17T22:49:16.79918892Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.804537273Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.807239765Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.81011124Z 61 PC: 12b41 | Open file (Filename = 'KEYB.COM')
2018-12-17T22:49:16.81650528Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.827705714Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.830623179Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.833558286Z 61 PC: 12b41 | Open file (Filename = 'MEM.COM')
2018-12-17T22:49:16.840255072Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.84818207Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.849889616Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.853046411Z 61 PC: 12b41 | Open file (Filename = 'NLSFUNC.COM')
2018-12-17T22:49:16.861159557Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.867020601Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.869142987Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.873124849Z 61 PC: 12b41 | Open file (Filename = 'QBASIC.COM')
2018-12-17T22:49:16.880001709Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.885651381Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.887614142Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.891735805Z 61 PC: 12b41 | Open file (Filename = 'REPLACE.COM')
2018-12-17T22:49:16.899194342Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.905307424Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.907250186Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.911451338Z 61 PC: 12b41 | Open file (Filename = 'RESTORE.COM')
2018-12-17T22:49:16.920557755Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.926372311Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.933364798Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.936426899Z 61 PC: 12b41 | Open file (Filename = 'SCANDISK.COM')
2018-12-17T22:49:16.943002679Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.948961317Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.951276223Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.954232578Z 61 PC: 12b41 | Open file (Filename = 'SETUP.COM')
2018-12-17T22:49:16.960889094Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.967964679Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.969955117Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:16.973159953Z 61 PC: 12b41 | Open file (Filename = 'SYS.COM')
2018-12-17T22:49:16.989056059Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:16.995488219Z 62 PC: 12b53 | Close file
2018-12-17T22:49:16.997440935Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:17.006472531Z 61 PC: 12b41 | Open file (Filename = 'XCOPY.COM')
2018-12-17T22:49:17.01518153Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:17.021059768Z 62 PC: 12b53 | Close file
2018-12-17T22:49:17.023283191Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:17.027891294Z 61 PC: 12b41 | Open file (Filename = 'DEFRAG.COM')
2018-12-17T22:49:17.035192879Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:17.041156464Z 62 PC: 12b53 | Close file
2018-12-17T22:49:17.043320124Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:17.051328469Z 61 PC: 12b41 | Open file (Filename = 'EMM386.COM')
2018-12-17T22:49:17.059518276Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:17.065900903Z 62 PC: 12b53 | Close file
2018-12-17T22:49:17.070446861Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:17.074472371Z 61 PC: 12b41 | Open file (Filename = 'MSCDEX.COM')
2018-12-17T22:49:17.081497884Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:17.090190648Z 62 PC: 12b53 | Close file
2018-12-17T22:49:17.094360935Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:17.097139128Z 23 PC: 12ad7 | Rename file
2018-12-17T22:49:17.103704677Z 59 PC: 12adf | Change current directory
2018-12-17T22:49:17.107194928Z 78 PC: 12aea | Find first file
2018-12-17T22:49:17.112778371Z 79 PC: 12af9 | Find next file
2018-12-17T22:49:17.115945606Z 47 PC: 12b02 | Get disk transfer address
2018-12-17T22:49:17.118484875Z 59 PC: 12b16 | Change current directory
2018-12-17T22:49:17.125009321Z 78 PC: 12b2d | Find first file
2018-12-17T22:49:17.130751385Z 61 PC: 12b41 | Open file (Filename = 'SETUP.COM')
2018-12-17T22:49:17.137119495Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:17.142877218Z 62 PC: 12b53 | Close file
2018-12-17T22:49:17.144967266Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:17.147790934Z 61 PC: 12b41 | Open file (Filename = 'WINHELP.COM')
2018-12-17T22:49:17.153774966Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:17.161239912Z 62 PC: 12b53 | Close file
2018-12-17T22:49:17.163001946Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:17.166186082Z 61 PC: 12b41 | Open file (Filename = 'WIN.COM')
2018-12-17T22:49:17.174619833Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:17.180379021Z 62 PC: 12b53 | Close file
2018-12-17T22:49:17.182462673Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:17.185928266Z 61 PC: 12b41 | Open file (Filename = 'MSD.COM')
2018-12-17T22:49:17.194909403Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:17.200734099Z 62 PC: 12b53 | Close file
2018-12-17T22:49:17.202966266Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:17.207610137Z 61 PC: 12b41 | Open file (Filename = 'PACKAGER.COM')
2018-12-17T22:49:17.214781946Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:17.220425621Z 62 PC: 12b53 | Close file
2018-12-17T22:49:17.222756219Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:17.227598428Z 61 PC: 12b41 | Open file (Filename = 'PBRUSH.COM')
2018-12-17T22:49:17.234693467Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:17.240694232Z 62 PC: 12b53 | Close file
2018-12-17T22:49:17.244040233Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:17.250238484Z 61 PC: 12b41 | Open file (Filename = 'SOL.COM')
2018-12-17T22:49:17.257202245Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:17.264755206Z 62 PC: 12b53 | Close file
2018-12-17T22:49:17.266917705Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:17.270205378Z 61 PC: 12b41 | Open file (Filename = 'TERMINAL.COM')
2018-12-17T22:49:17.277321159Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:17.284558192Z 62 PC: 12b53 | Close file
2018-12-17T22:49:17.286537782Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:17.289772357Z 61 PC: 12b41 | Open file (Filename = 'WINFILE.COM')
2018-12-17T22:49:17.298343236Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:17.303878357Z 62 PC: 12b53 | Close file
2018-12-17T22:49:17.305838455Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:17.309506977Z 61 PC: 12b41 | Open file (Filename = 'WINTUTOR.COM')
2018-12-17T22:49:17.317115694Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:17.322576964Z 62 PC: 12b53 | Close file
2018-12-17T22:49:17.324140151Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:17.328185774Z 61 PC: 12b41 | Open file (Filename = 'WRITE.COM')
2018-12-17T22:49:17.335597661Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:17.341384048Z 62 PC: 12b53 | Close file
2018-12-17T22:49:17.343096469Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:17.347556153Z 61 PC: 12b41 | Open file (Filename = 'CALC.COM')
2018-12-17T22:49:17.354424309Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:17.35970674Z 62 PC: 12b53 | Close file
2018-12-17T22:49:17.36147959Z 79 PC: 12b36 | Find next file
2018-12-17T22:49:17.365736974Z 61 PC: 12b41 | Open file (Filename = 'CALENDAR.COM')
2018-12-17T22:49:17.372479449Z 63 PC: 12b4f | Read file or device (Read 505 bytes on handle 5)
2018-12-17T22:49:17.378577846Z 62 PC: 12b53 | Close file
2018-12-17T22:49:17.380550671Z 67 PC: 12b67 | Get or set file attributes
2018-12-17T22:49:17.38789489Z 67 PC: 12b71 | Get or set file attributes