Sample viewer

vx.netlux.org/Virus.DOS.HLLP.Krile.4515

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T21:59:32.439014295Z 98 PC: 17a46 | Get current PSP
2018-12-17T21:59:32.442302095Z 71 PC: 12c94 | Get current directory
2018-12-17T21:59:32.446072091Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:32.452216254Z 65 PC: 13ba9 | Delete file (Filename = 'anti-vir.dat')
2018-12-17T21:59:32.46454919Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:32.47124682Z 65 PC: 13ba9 | Delete file (Filename = 'chklist.ms')
2018-12-17T21:59:32.482914922Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:32.494195209Z 65 PC: 13ba9 | Delete file (Filename = 'chklist.cps')
2018-12-17T21:59:32.501274048Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:32.506774272Z 65 PC: 13ba9 | Delete file (Filename = 'vs.vsn')
2018-12-17T21:59:32.512784643Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:32.519231999Z 65 PC: 13ba9 | Delete file (Filename = 'ivb.ntz')
2018-12-17T21:59:32.525831373Z 26 PC: 12d55 | Set disk transfer address
2018-12-17T21:59:32.528193442Z 78 PC: 12d67 | Find first file
2018-12-17T21:59:32.538459145Z 67 PC: 1343d | Get or set file attributes
2018-12-17T21:59:32.545019817Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:32.562271599Z 61 PC: 1358b | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T21:59:32.571195449Z 63 PC: 1362d | Read file or device (Read 4515 bytes on handle 5)
2018-12-17T21:59:32.57938138Z 62 PC: 13673 | Close file
2018-12-17T21:59:32.581462866Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:32.598363055Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:32.612168909Z 65 PC: 13ba9 | Delete file (Filename = 'anti-vir.dat')
2018-12-17T21:59:32.618322278Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:32.624900305Z 65 PC: 13ba9 | Delete file (Filename = 'chklist.ms')
2018-12-17T21:59:32.634665803Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:32.638822455Z 65 PC: 13ba9 | Delete file (Filename = 'chklist.cps')
2018-12-17T21:59:32.645209029Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:32.651598272Z 65 PC: 13ba9 | Delete file (Filename = 'vs.vsn')
2018-12-17T21:59:32.656560919Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:32.663691437Z 65 PC: 13ba9 | Delete file (Filename = 'ivb.ntz')
2018-12-17T21:59:32.672484665Z 47 PC: 17885 | Get disk transfer address
2018-12-17T21:59:32.674233352Z 26 PC: 17890 | Set disk transfer address
2018-12-17T21:59:32.675929163Z 78 PC: 1789c | Find first file
2018-12-17T21:59:32.686362402Z 26 PC: 178ae | Set disk transfer address
2018-12-17T21:59:32.689237398Z 26 PC: 13a4c | Set disk transfer address
2018-12-17T21:59:32.690244381Z 78 PC: 13a5e | Find first file
2018-12-17T21:59:32.702262422Z 67 PC: 1343d | Get or set file attributes
2018-12-17T21:59:32.708337317Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:32.718564909Z 61 PC: 1358b | Open file (Filename = 'TEST.EXE')
2018-12-17T21:59:32.725866628Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:32.727602189Z 63 PC: 1362d | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:59:32.734136604Z 62 PC: 13673 | Close file
2018-12-17T21:59:32.73635513Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:32.757755748Z 47 PC: 178c2 | Get disk transfer address
2018-12-17T21:59:32.758897235Z 26 PC: 178cd | Set disk transfer address
2018-12-17T21:59:32.760559056Z 79 PC: 178d1 | Find next file
2018-12-17T21:59:32.762989335Z 26 PC: 178e1 | Set disk transfer address
2018-12-17T21:59:32.764704054Z 47 PC: 17885 | Get disk transfer address
2018-12-17T21:59:32.766991324Z 26 PC: 17890 | Set disk transfer address
2018-12-17T21:59:32.768179016Z 78 PC: 1789c | Find first file
2018-12-17T21:59:32.779128224Z 26 PC: 178ae | Set disk transfer address
2018-12-17T21:59:32.783138719Z 26 PC: 13a4c | Set disk transfer address
2018-12-17T21:59:32.784242733Z 78 PC: 13a5e | Find first file
2018-12-17T21:59:32.790597401Z 47 PC: 178c2 | Get disk transfer address
2018-12-17T21:59:32.792586097Z 26 PC: 178cd | Set disk transfer address
2018-12-17T21:59:32.794174364Z 79 PC: 178d1 | Find next file
2018-12-17T21:59:32.796904553Z 26 PC: 178e1 | Set disk transfer address
2018-12-17T21:59:32.8003383Z 26 PC: 13a4c | Set disk transfer address
2018-12-17T21:59:32.802519841Z 78 PC: 13a5e | Find first file
2018-12-17T21:59:32.808958392Z 47 PC: 178c2 | Get disk transfer address
2018-12-17T21:59:32.810101133Z 26 PC: 178cd | Set disk transfer address
2018-12-17T21:59:32.81185774Z 79 PC: 178d1 | Find next file
2018-12-17T21:59:32.81474454Z 26 PC: 178e1 | Set disk transfer address
2018-12-17T21:59:32.81797855Z 26 PC: 13a4c | Set disk transfer address
2018-12-17T21:59:32.820151589Z 78 PC: 13a5e | Find first file
2018-12-17T21:59:32.8264668Z 47 PC: 178c2 | Get disk transfer address
2018-12-17T21:59:32.827906769Z 26 PC: 178cd | Set disk transfer address
2018-12-17T21:59:32.830486724Z 79 PC: 178d1 | Find next file
2018-12-17T21:59:32.833028191Z 26 PC: 178e1 | Set disk transfer address
2018-12-17T21:59:32.83591452Z 26 PC: 13a4c | Set disk transfer address
2018-12-17T21:59:32.837847532Z 78 PC: 13a5e | Find first file
2018-12-17T21:59:32.843601153Z 47 PC: 178c2 | Get disk transfer address
2018-12-17T21:59:32.844612972Z 26 PC: 178cd | Set disk transfer address
2018-12-17T21:59:32.846520031Z 79 PC: 178d1 | Find next file
2018-12-17T21:59:32.84900997Z 26 PC: 178e1 | Set disk transfer address
2018-12-17T21:59:32.851872624Z 26 PC: 13a4c | Set disk transfer address
2018-12-17T21:59:32.853450279Z 78 PC: 13a5e | Find first file
2018-12-17T21:59:32.859852934Z 47 PC: 178c2 | Get disk transfer address
2018-12-17T21:59:32.860953111Z 26 PC: 178cd | Set disk transfer address
2018-12-17T21:59:32.862693455Z 79 PC: 178d1 | Find next file
2018-12-17T21:59:32.865040539Z 26 PC: 178e1 | Set disk transfer address
2018-12-17T21:59:32.868748688Z 47 PC: 178c2 | Get disk transfer address
2018-12-17T21:59:32.870766457Z 26 PC: 178cd | Set disk transfer address
2018-12-17T21:59:32.872067899Z 79 PC: 178d1 | Find next file
2018-12-17T21:59:32.874601802Z 26 PC: 178e1 | Set disk transfer address
2018-12-17T21:59:32.877588744Z 26 PC: 13a4c | Set disk transfer address
2018-12-17T21:59:32.879733154Z 78 PC: 13a5e | Find first file
2018-12-17T21:59:32.885909921Z 47 PC: 178c2 | Get disk transfer address
2018-12-17T21:59:32.887226587Z 26 PC: 178cd | Set disk transfer address
2018-12-17T21:59:32.889439217Z 79 PC: 178d1 | Find next file
2018-12-17T21:59:32.892011421Z 26 PC: 178e1 | Set disk transfer address
2018-12-17T21:59:32.893741507Z 98 PC: 17a7d | Get current PSP
2018-12-17T21:59:32.896310606Z 98 PC: 17a7d | Get current PSP
2018-12-17T21:59:32.899093185Z 98 PC: 17a7d | Get current PSP
2018-12-17T21:59:32.901548824Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:32.911808242Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T21:59:32.918353685Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:32.924923152Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T21:59:32.933296319Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:32.939935431Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T21:59:32.946660159Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:32.954073315Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T21:59:32.961744827Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:32.968413244Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T21:59:32.976237908Z 47 PC: 17885 | Get disk transfer address
2018-12-17T21:59:32.977708649Z 26 PC: 17890 | Set disk transfer address
2018-12-17T21:59:32.979191129Z 78 PC: 1789c | Find first file
2018-12-17T21:59:32.986371487Z 26 PC: 178ae | Set disk transfer address
2018-12-17T21:59:32.989573562Z 26 PC: 13a4c | Set disk transfer address
2018-12-17T21:59:32.990954937Z 78 PC: 13a5e | Find first file
2018-12-17T21:59:32.998972117Z 67 PC: 1343d | Get or set file attributes
2018-12-17T21:59:33.005501198Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:33.346010603Z 61 PC: 1358b | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T21:59:33.354054316Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:33.356282512Z 63 PC: 1362d | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:59:33.362038926Z 62 PC: 13673 | Close file
2018-12-17T21:59:33.364935683Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:33.375559738Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:33.385167954Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T21:59:33.392805917Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:33.399573093Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T21:59:33.406128599Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:33.412465093Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T21:59:33.41947029Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:33.427008489Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T21:59:33.434217142Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:33.440532978Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T21:59:33.447369872Z 86 PC: 13f06 | Rename file
2018-12-17T21:59:33.459204163Z 26 PC: 13325 | Set disk transfer address
2018-12-17T21:59:33.460715117Z 78 PC: 13337 | Find first file
2018-12-17T21:59:33.467230998Z 67 PC: 1343d | Get or set file attributes
2018-12-17T21:59:33.473642061Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:33.484005932Z 61 PC: 1358b | Open file (Filename = 'C:\DOS\ATTRIB.���')
2018-12-17T21:59:33.491189963Z 87 PC: 134f8 | Get or set file date and time
2018-12-17T21:59:33.492982827Z 63 PC: 1362d | Read file or device (Read 4515 bytes on handle 5)
2018-12-17T21:59:33.500707104Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:33.502833607Z 64 PC: 135d7 | Write file or device (Write 4515 bytes on handle 5)
2018-12-17T21:59:33.510640586Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:33.526542721Z 64 PC: 135d7 | Write file or device (Write 4515 bytes on handle 5)
2018-12-17T21:59:33.537701438Z 87 PC: 1355a | Get or set file date and time
2018-12-17T21:59:33.539615991Z 62 PC: 13673 | Close file
2018-12-17T21:59:33.547690897Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:33.558018599Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:33.564515449Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T21:59:33.572182785Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:33.578457914Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T21:59:33.584529931Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:33.589261271Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T21:59:33.594281537Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:33.598362603Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T21:59:33.605194437Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:33.609351029Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T21:59:33.613947056Z 86 PC: 13f22 | Rename file
2018-12-17T21:59:33.622479285Z 47 PC: 178c2 | Get disk transfer address
2018-12-17T21:59:33.623498636Z 26 PC: 178cd | Set disk transfer address
2018-12-17T21:59:33.624509476Z 79 PC: 178d1 | Find next file
2018-12-17T21:59:33.627535791Z 26 PC: 178e1 | Set disk transfer address
2018-12-17T21:59:33.629759241Z 26 PC: 13a4c | Set disk transfer address
2018-12-17T21:59:33.630797805Z 78 PC: 13a5e | Find first file
2018-12-17T21:59:33.63577612Z 67 PC: 1343d | Get or set file attributes
2018-12-17T21:59:33.640192312Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:33.646925142Z 61 PC: 1358b | Open file (Filename = 'C:\DOS\CHKDSK.EXE')
2018-12-17T21:59:33.653178774Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:33.65480407Z 63 PC: 1362d | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:59:33.658617849Z 62 PC: 13673 | Close file
2018-12-17T21:59:33.660856492Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:33.667587455Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:33.671679516Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T21:59:33.676874629Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:33.680851692Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T21:59:33.68546287Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:33.690244892Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T21:59:33.694450723Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:33.698660176Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T21:59:33.70352508Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:33.708194492Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T21:59:33.714378722Z 86 PC: 13f06 | Rename file
2018-12-17T21:59:33.726560892Z 26 PC: 13325 | Set disk transfer address
2018-12-17T21:59:33.728230742Z 78 PC: 13337 | Find first file
2018-12-17T21:59:33.734851143Z 67 PC: 1343d | Get or set file attributes
2018-12-17T21:59:33.741963489Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:33.751535375Z 61 PC: 1358b | Open file (Filename = 'C:\DOS\CHKDSK.���')
2018-12-17T21:59:33.758678355Z 87 PC: 134f8 | Get or set file date and time
2018-12-17T21:59:33.761017641Z 63 PC: 1362d | Read file or device (Read 4515 bytes on handle 5)
2018-12-17T21:59:33.76839483Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:33.77049409Z 64 PC: 135d7 | Write file or device (Write 4515 bytes on handle 5)
2018-12-17T21:59:33.778781468Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:33.793312757Z 64 PC: 135d7 | Write file or device (Write 4515 bytes on handle 5)
2018-12-17T21:59:33.805548255Z 87 PC: 1355a | Get or set file date and time
2018-12-17T21:59:33.807839291Z 62 PC: 13673 | Close file
2018-12-17T21:59:33.815389837Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:33.825267555Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:33.833377676Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T21:59:33.840656846Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:33.848301877Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T21:59:33.856510839Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:33.863093226Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T21:59:33.870880024Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:33.877502753Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T21:59:33.884160259Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:33.8902242Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T21:59:33.897410048Z 86 PC: 13f22 | Rename file
2018-12-17T21:59:33.909177479Z 47 PC: 178c2 | Get disk transfer address
2018-12-17T21:59:33.910605641Z 26 PC: 178cd | Set disk transfer address
2018-12-17T21:59:33.912415282Z 79 PC: 178d1 | Find next file
2018-12-17T21:59:33.915682099Z 26 PC: 178e1 | Set disk transfer address
2018-12-17T21:59:33.919024091Z 26 PC: 13a4c | Set disk transfer address
2018-12-17T21:59:33.921138949Z 78 PC: 13a5e | Find first file
2018-12-17T21:59:33.927823498Z 67 PC: 1343d | Get or set file attributes
2018-12-17T21:59:33.933830136Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:33.944100388Z 61 PC: 1358b | Open file (Filename = 'C:\DOS\DEBUG.EXE')
2018-12-17T21:59:33.951328652Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:33.95305391Z 63 PC: 1362d | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:59:33.960253038Z 62 PC: 13673 | Close file
2018-12-17T21:59:33.961923526Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:33.973434972Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:33.980562148Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T21:59:33.987222138Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:33.993877992Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T21:59:34.001647433Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.008122061Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T21:59:34.015023953Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.022280821Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T21:59:34.028885729Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.035077849Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T21:59:34.043438241Z 86 PC: 13f06 | Rename file
2018-12-17T21:59:34.054634381Z 26 PC: 13325 | Set disk transfer address
2018-12-17T21:59:34.0560322Z 78 PC: 13337 | Find first file
2018-12-17T21:59:34.063635407Z 67 PC: 1343d | Get or set file attributes
2018-12-17T21:59:34.06809217Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.07569755Z 61 PC: 1358b | Open file (Filename = 'C:\DOS\DEBUG.���')
2018-12-17T21:59:34.081001227Z 87 PC: 134f8 | Get or set file date and time
2018-12-17T21:59:34.082775826Z 63 PC: 1362d | Read file or device (Read 4515 bytes on handle 5)
2018-12-17T21:59:34.087378012Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:34.08903816Z 64 PC: 135d7 | Write file or device (Write 4515 bytes on handle 5)
2018-12-17T21:59:34.094726095Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:34.103296869Z 64 PC: 135d7 | Write file or device (Write 4515 bytes on handle 5)
2018-12-17T21:59:34.110910949Z 87 PC: 1355a | Get or set file date and time
2018-12-17T21:59:34.112208574Z 62 PC: 13673 | Close file
2018-12-17T21:59:34.119566193Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.126354262Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.131228382Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T21:59:34.136360699Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.140373006Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T21:59:34.145670676Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.150282519Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T21:59:34.15468251Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.158628211Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T21:59:34.163934442Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.168393723Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T21:59:34.172692687Z 86 PC: 13f22 | Rename file
2018-12-17T21:59:34.183138704Z 47 PC: 178c2 | Get disk transfer address
2018-12-17T21:59:34.184846993Z 26 PC: 178cd | Set disk transfer address
2018-12-17T21:59:34.186444908Z 79 PC: 178d1 | Find next file
2018-12-17T21:59:34.19019652Z 26 PC: 178e1 | Set disk transfer address
2018-12-17T21:59:34.192409253Z 47 PC: 178c2 | Get disk transfer address
2018-12-17T21:59:34.193478329Z 26 PC: 178cd | Set disk transfer address
2018-12-17T21:59:34.194930084Z 79 PC: 178d1 | Find next file
2018-12-17T21:59:34.197034591Z 26 PC: 178e1 | Set disk transfer address
2018-12-17T21:59:34.199717289Z 26 PC: 13a4c | Set disk transfer address
2018-12-17T21:59:34.202167022Z 78 PC: 13a5e | Find first file
2018-12-17T21:59:34.208422345Z 67 PC: 1343d | Get or set file attributes
2018-12-17T21:59:34.213059226Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.219977898Z 61 PC: 1358b | Open file (Filename = 'C:\DOS\FDISK.EXE')
2018-12-17T21:59:34.224540911Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:34.22588409Z 63 PC: 1362d | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:59:34.231022871Z 62 PC: 13673 | Close file
2018-12-17T21:59:34.232560299Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.239987588Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.244604363Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T21:59:34.248913139Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.253229304Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T21:59:34.257974936Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.261999312Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T21:59:34.267246656Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.274516772Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T21:59:34.281361253Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.287979122Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T21:59:34.295428618Z 86 PC: 13f06 | Rename file
2018-12-17T21:59:34.307113604Z 26 PC: 13325 | Set disk transfer address
2018-12-17T21:59:34.308665011Z 78 PC: 13337 | Find first file
2018-12-17T21:59:34.316047293Z 67 PC: 1343d | Get or set file attributes
2018-12-17T21:59:34.322353266Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.332534835Z 61 PC: 1358b | Open file (Filename = 'C:\DOS\FDISK.���')
2018-12-17T21:59:34.340618954Z 87 PC: 134f8 | Get or set file date and time
2018-12-17T21:59:34.342342738Z 63 PC: 1362d | Read file or device (Read 4515 bytes on handle 5)
2018-12-17T21:59:34.350882796Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:34.353280814Z 64 PC: 135d7 | Write file or device (Write 4515 bytes on handle 5)
2018-12-17T21:59:34.361673909Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:34.380113523Z 64 PC: 135d7 | Write file or device (Write 4515 bytes on handle 5)
2018-12-17T21:59:34.390866134Z 87 PC: 1355a | Get or set file date and time
2018-12-17T21:59:34.393348803Z 62 PC: 13673 | Close file
2018-12-17T21:59:34.402633513Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.414835173Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.421261534Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T21:59:34.429139255Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.436301146Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T21:59:34.443030549Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.450452573Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T21:59:34.470985076Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.481229116Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T21:59:34.488625468Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.495546085Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T21:59:34.502093214Z 86 PC: 13f22 | Rename file
2018-12-17T21:59:34.518437911Z 47 PC: 178c2 | Get disk transfer address
2018-12-17T21:59:34.519842845Z 26 PC: 178cd | Set disk transfer address
2018-12-17T21:59:34.520874169Z 79 PC: 178d1 | Find next file
2018-12-17T21:59:34.524699193Z 26 PC: 178e1 | Set disk transfer address
2018-12-17T21:59:34.527639734Z 26 PC: 13a4c | Set disk transfer address
2018-12-17T21:59:34.529255969Z 78 PC: 13a5e | Find first file
2018-12-17T21:59:34.536603846Z 67 PC: 1343d | Get or set file attributes
2018-12-17T21:59:34.5424137Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.553196469Z 61 PC: 1358b | Open file (Filename = 'C:\DOS\MEM.EXE')
2018-12-17T21:59:34.561920901Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:34.563917478Z 63 PC: 1362d | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:59:34.570769497Z 62 PC: 13673 | Close file
2018-12-17T21:59:34.573044886Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.584083031Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.593497665Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T21:59:34.600494625Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.607630288Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T21:59:34.615150628Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.621790247Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T21:59:34.629405826Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.636181521Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T21:59:34.643133013Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.650102457Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T21:59:34.656453871Z 86 PC: 13f06 | Rename file
2018-12-17T21:59:34.667751508Z 26 PC: 13325 | Set disk transfer address
2018-12-17T21:59:34.669755616Z 78 PC: 13337 | Find first file
2018-12-17T21:59:34.676095243Z 67 PC: 1343d | Get or set file attributes
2018-12-17T21:59:34.682202749Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.693080656Z 61 PC: 1358b | Open file (Filename = 'C:\DOS\MEM.���')
2018-12-17T21:59:34.700297823Z 87 PC: 134f8 | Get or set file date and time
2018-12-17T21:59:34.702007562Z 63 PC: 1362d | Read file or device (Read 4515 bytes on handle 5)
2018-12-17T21:59:34.709818843Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:34.711761724Z 64 PC: 135d7 | Write file or device (Write 4515 bytes on handle 5)
2018-12-17T21:59:34.719600901Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:34.735255344Z 64 PC: 135d7 | Write file or device (Write 4515 bytes on handle 5)
2018-12-17T21:59:34.744500346Z 87 PC: 1355a | Get or set file date and time
2018-12-17T21:59:34.746782341Z 62 PC: 13673 | Close file
2018-12-17T21:59:34.753986962Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.764411283Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.771221248Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T21:59:34.777577662Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.783767354Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T21:59:34.790925172Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.796911382Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T21:59:34.803206981Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.81064854Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T21:59:34.817242691Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.824197377Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T21:59:34.831754228Z 86 PC: 13f22 | Rename file
2018-12-17T21:59:34.842744646Z 47 PC: 178c2 | Get disk transfer address
2018-12-17T21:59:34.844159774Z 26 PC: 178cd | Set disk transfer address
2018-12-17T21:59:34.845720904Z 79 PC: 178d1 | Find next file
2018-12-17T21:59:34.848551876Z 26 PC: 178e1 | Set disk transfer address
2018-12-17T21:59:34.852206287Z 26 PC: 13a4c | Set disk transfer address
2018-12-17T21:59:34.853308374Z 78 PC: 13a5e | Find first file
2018-12-17T21:59:34.859464423Z 67 PC: 1343d | Get or set file attributes
2018-12-17T21:59:34.866496222Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.876059925Z 61 PC: 1358b | Open file (Filename = 'C:\DOS\NLSFUNC.EXE')
2018-12-17T21:59:34.883110411Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:34.885814995Z 63 PC: 1362d | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:59:34.891860832Z 62 PC: 13673 | Close file
2018-12-17T21:59:34.893615076Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.905031Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.911362145Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T21:59:34.919283619Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.926869163Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T21:59:34.933889566Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.940388081Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T21:59:34.947791733Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.955018845Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T21:59:34.962550424Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:34.969425195Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T21:59:34.976699816Z 86 PC: 13f06 | Rename file
2018-12-17T21:59:34.988494211Z 26 PC: 13325 | Set disk transfer address
2018-12-17T21:59:34.989863857Z 78 PC: 13337 | Find first file
2018-12-17T21:59:34.99641739Z 67 PC: 1343d | Get or set file attributes
2018-12-17T21:59:35.0035103Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.013481337Z 61 PC: 1358b | Open file (Filename = 'C:\DOS\NLSFUNC.���')
2018-12-17T21:59:35.021457822Z 87 PC: 134f8 | Get or set file date and time
2018-12-17T21:59:35.024507604Z 63 PC: 1362d | Read file or device (Read 4515 bytes on handle 5)
2018-12-17T21:59:35.031697074Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:35.034057797Z 64 PC: 135d7 | Write file or device (Write 4515 bytes on handle 5)
2018-12-17T21:59:35.042585293Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:35.056873365Z 64 PC: 135d7 | Write file or device (Write 4515 bytes on handle 5)
2018-12-17T21:59:35.066606894Z 87 PC: 1355a | Get or set file date and time
2018-12-17T21:59:35.068813207Z 62 PC: 13673 | Close file
2018-12-17T21:59:35.076031622Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.087754582Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.094318198Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T21:59:35.101128352Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.108145939Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T21:59:35.114889685Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.121265007Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T21:59:35.128592874Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.134271034Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T21:59:35.138787197Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.143126639Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T21:59:35.147054977Z 86 PC: 13f22 | Rename file
2018-12-17T21:59:35.155002876Z 47 PC: 178c2 | Get disk transfer address
2018-12-17T21:59:35.156337546Z 26 PC: 178cd | Set disk transfer address
2018-12-17T21:59:35.157913316Z 79 PC: 178d1 | Find next file
2018-12-17T21:59:35.161733786Z 26 PC: 178e1 | Set disk transfer address
2018-12-17T21:59:35.164709333Z 26 PC: 13a4c | Set disk transfer address
2018-12-17T21:59:35.165912222Z 78 PC: 13a5e | Find first file
2018-12-17T21:59:35.172525683Z 67 PC: 1343d | Get or set file attributes
2018-12-17T21:59:35.178486074Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.188564347Z 61 PC: 1358b | Open file (Filename = 'C:\DOS\QBASIC.EXE')
2018-12-17T21:59:35.196601972Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:35.198984634Z 63 PC: 1362d | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:59:35.205607278Z 62 PC: 13673 | Close file
2018-12-17T21:59:35.207827577Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.219665909Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.227067887Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T21:59:35.234449802Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.240981494Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T21:59:35.248977832Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.255262495Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T21:59:35.262013323Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.2694662Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T21:59:35.277464039Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.283784164Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T21:59:35.290924023Z 86 PC: 13f06 | Rename file
2018-12-17T21:59:35.301767169Z 26 PC: 13325 | Set disk transfer address
2018-12-17T21:59:35.303789684Z 78 PC: 13337 | Find first file
2018-12-17T21:59:35.310278315Z 67 PC: 1343d | Get or set file attributes
2018-12-17T21:59:35.316425423Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.327588465Z 61 PC: 1358b | Open file (Filename = 'C:\DOS\QBASIC.���')
2018-12-17T21:59:35.334640759Z 87 PC: 134f8 | Get or set file date and time
2018-12-17T21:59:35.336272775Z 63 PC: 1362d | Read file or device (Read 4515 bytes on handle 5)
2018-12-17T21:59:35.345693681Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:35.348051971Z 64 PC: 135d7 | Write file or device (Write 4515 bytes on handle 5)
2018-12-17T21:59:35.35573918Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:35.371208504Z 64 PC: 135d7 | Write file or device (Write 4515 bytes on handle 5)
2018-12-17T21:59:35.38039306Z 87 PC: 1355a | Get or set file date and time
2018-12-17T21:59:35.382406829Z 62 PC: 13673 | Close file
2018-12-17T21:59:35.390704799Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.403900793Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.411164912Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T21:59:35.418840714Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.425664825Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T21:59:35.432386233Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.439611916Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T21:59:35.447023366Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.453985443Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T21:59:35.461744332Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.468340308Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T21:59:35.476445095Z 86 PC: 13f22 | Rename file
2018-12-17T21:59:35.488123068Z 47 PC: 178c2 | Get disk transfer address
2018-12-17T21:59:35.489563335Z 26 PC: 178cd | Set disk transfer address
2018-12-17T21:59:35.491438355Z 79 PC: 178d1 | Find next file
2018-12-17T21:59:35.494652978Z 26 PC: 178e1 | Set disk transfer address
2018-12-17T21:59:35.497611148Z 26 PC: 13a4c | Set disk transfer address
2018-12-17T21:59:35.499654192Z 78 PC: 13a5e | Find first file
2018-12-17T21:59:35.505956095Z 67 PC: 1343d | Get or set file attributes
2018-12-17T21:59:35.512105835Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.522638655Z 61 PC: 1358b | Open file (Filename = 'C:\DOS\REPLACE.EXE')
2018-12-17T21:59:35.529953465Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:35.531625983Z 63 PC: 1362d | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:59:35.537864237Z 62 PC: 13673 | Close file
2018-12-17T21:59:35.539462285Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.550353188Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.556394715Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T21:59:35.562837219Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.569411501Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T21:59:35.575757295Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.581733295Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T21:59:35.588845795Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.595169872Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T21:59:35.603543257Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.610286092Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T21:59:35.616783136Z 86 PC: 13f06 | Rename file
2018-12-17T21:59:35.628606014Z 26 PC: 13325 | Set disk transfer address
2018-12-17T21:59:35.629983243Z 78 PC: 13337 | Find first file
2018-12-17T21:59:35.636474795Z 67 PC: 1343d | Get or set file attributes
2018-12-17T21:59:35.643645485Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.653810266Z 61 PC: 1358b | Open file (Filename = 'C:\DOS\REPLACE.���')
2018-12-17T21:59:35.661693247Z 87 PC: 134f8 | Get or set file date and time
2018-12-17T21:59:35.664429017Z 63 PC: 1362d | Read file or device (Read 4515 bytes on handle 5)
2018-12-17T21:59:35.67433394Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:35.67663148Z 64 PC: 135d7 | Write file or device (Write 4515 bytes on handle 5)
2018-12-17T21:59:35.686170869Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:35.697324027Z 64 PC: 135d7 | Write file or device (Write 4515 bytes on handle 5)
2018-12-17T21:59:35.703881352Z 87 PC: 1355a | Get or set file date and time
2018-12-17T21:59:35.705285717Z 62 PC: 13673 | Close file
2018-12-17T21:59:35.710205465Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.718920851Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.724297068Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T21:59:35.72924029Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.734437245Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T21:59:35.739753087Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.743996127Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T21:59:35.748587806Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.75260843Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T21:59:35.757880858Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.762341655Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T21:59:35.766904488Z 86 PC: 13f22 | Rename file
2018-12-17T21:59:35.774646573Z 47 PC: 178c2 | Get disk transfer address
2018-12-17T21:59:35.775571763Z 26 PC: 178cd | Set disk transfer address
2018-12-17T21:59:35.782584735Z 79 PC: 178d1 | Find next file
2018-12-17T21:59:35.785639522Z 26 PC: 178e1 | Set disk transfer address
2018-12-17T21:59:35.788631299Z 26 PC: 13a4c | Set disk transfer address
2018-12-17T21:59:35.790606327Z 78 PC: 13a5e | Find first file
2018-12-17T21:59:35.797960963Z 67 PC: 1343d | Get or set file attributes
2018-12-17T21:59:35.802662213Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.811874772Z 61 PC: 1358b | Open file (Filename = 'C:\DOS\RESTORE.EXE')
2018-12-17T21:59:35.819765889Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:35.822195521Z 63 PC: 1362d | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:59:35.828639274Z 62 PC: 13673 | Close file
2018-12-17T21:59:35.830395501Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.84104143Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.847850716Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T21:59:35.855101785Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.862011299Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T21:59:35.868538858Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.875013187Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T21:59:35.881876455Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.888269003Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T21:59:35.894840068Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.902293887Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T21:59:35.909279199Z 86 PC: 13f06 | Rename file
2018-12-17T21:59:35.921926615Z 26 PC: 13325 | Set disk transfer address
2018-12-17T21:59:35.923390734Z 78 PC: 13337 | Find first file
2018-12-17T21:59:35.929569189Z 67 PC: 1343d | Get or set file attributes
2018-12-17T21:59:35.936597931Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:35.946990783Z 61 PC: 1358b | Open file (Filename = 'C:\DOS\RESTORE.���')
2018-12-17T21:59:35.953971705Z 87 PC: 134f8 | Get or set file date and time
2018-12-17T21:59:35.955861193Z 63 PC: 1362d | Read file or device (Read 4515 bytes on handle 5)
2018-12-17T21:59:35.962900558Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:35.964748565Z 64 PC: 135d7 | Write file or device (Write 4515 bytes on handle 5)
2018-12-17T21:59:35.972195275Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:35.987025903Z 64 PC: 135d7 | Write file or device (Write 4515 bytes on handle 5)
2018-12-17T21:59:35.999127936Z 87 PC: 1355a | Get or set file date and time
2018-12-17T21:59:36.001381128Z 62 PC: 13673 | Close file
2018-12-17T21:59:36.008638956Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.019230541Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.025515137Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T21:59:36.033049153Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.039387797Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T21:59:36.04663543Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.053711678Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T21:59:36.060803725Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.067449714Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T21:59:36.074447979Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.080483597Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T21:59:36.087096305Z 86 PC: 13f22 | Rename file
2018-12-17T21:59:36.098473615Z 47 PC: 178c2 | Get disk transfer address
2018-12-17T21:59:36.099529024Z 26 PC: 178cd | Set disk transfer address
2018-12-17T21:59:36.101169642Z 79 PC: 178d1 | Find next file
2018-12-17T21:59:36.104170462Z 26 PC: 178e1 | Set disk transfer address
2018-12-17T21:59:36.107031434Z 26 PC: 13a4c | Set disk transfer address
2018-12-17T21:59:36.108361675Z 78 PC: 13a5e | Find first file
2018-12-17T21:59:36.115501001Z 67 PC: 1343d | Get or set file attributes
2018-12-17T21:59:36.122698109Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.132689408Z 61 PC: 1358b | Open file (Filename = 'C:\DOS\SCANDISK.EXE')
2018-12-17T21:59:36.139889471Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:36.142628331Z 63 PC: 1362d | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:59:36.148036676Z 62 PC: 13673 | Close file
2018-12-17T21:59:36.150697289Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.161881094Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.168158762Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T21:59:36.176362232Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.182516929Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T21:59:36.189738987Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.196546604Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T21:59:36.203457619Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.210762072Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T21:59:36.218619423Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.224833959Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T21:59:36.231476987Z 86 PC: 13f06 | Rename file
2018-12-17T21:59:36.243330216Z 26 PC: 13325 | Set disk transfer address
2018-12-17T21:59:36.24554822Z 78 PC: 13337 | Find first file
2018-12-17T21:59:36.251962317Z 67 PC: 1343d | Get or set file attributes
2018-12-17T21:59:36.258141717Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.26899637Z 61 PC: 1358b | Open file (Filename = 'C:\DOS\SCANDISK.���')
2018-12-17T21:59:36.276128523Z 87 PC: 134f8 | Get or set file date and time
2018-12-17T21:59:36.278359738Z 63 PC: 1362d | Read file or device (Read 4515 bytes on handle 5)
2018-12-17T21:59:36.285814093Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:36.287720619Z 64 PC: 135d7 | Write file or device (Write 4515 bytes on handle 5)
2018-12-17T21:59:36.296435245Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:36.31166806Z 64 PC: 135d7 | Write file or device (Write 4515 bytes on handle 5)
2018-12-17T21:59:36.320493993Z 87 PC: 1355a | Get or set file date and time
2018-12-17T21:59:36.322017676Z 62 PC: 13673 | Close file
2018-12-17T21:59:36.328817651Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.339093146Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.342979015Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T21:59:36.347154839Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.353251753Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T21:59:36.359682561Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.366879151Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T21:59:36.373646402Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.379855439Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T21:59:36.387381827Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.393504783Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T21:59:36.400471701Z 86 PC: 13f22 | Rename file
2018-12-17T21:59:36.411506464Z 47 PC: 178c2 | Get disk transfer address
2018-12-17T21:59:36.412504845Z 26 PC: 178cd | Set disk transfer address
2018-12-17T21:59:36.414510288Z 79 PC: 178d1 | Find next file
2018-12-17T21:59:36.417355749Z 26 PC: 178e1 | Set disk transfer address
2018-12-17T21:59:36.421931781Z 26 PC: 13a4c | Set disk transfer address
2018-12-17T21:59:36.423053597Z 78 PC: 13a5e | Find first file
2018-12-17T21:59:36.429937975Z 67 PC: 1343d | Get or set file attributes
2018-12-17T21:59:36.436930239Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.446585176Z 61 PC: 1358b | Open file (Filename = 'C:\DOS\SETUP.EXE')
2018-12-17T21:59:36.453901932Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:36.456117622Z 63 PC: 1362d | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:59:36.461512057Z 62 PC: 13673 | Close file
2018-12-17T21:59:36.465226353Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.476622199Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.483075854Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T21:59:36.491116774Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.498427449Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T21:59:36.506222015Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.51233493Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T21:59:36.518768494Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.525310102Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T21:59:36.531753396Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.537915376Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T21:59:36.544363636Z 86 PC: 13f06 | Rename file
2018-12-17T21:59:36.555109554Z 26 PC: 13325 | Set disk transfer address
2018-12-17T21:59:36.55725069Z 78 PC: 13337 | Find first file
2018-12-17T21:59:36.56342236Z 67 PC: 1343d | Get or set file attributes
2018-12-17T21:59:36.569667862Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.57934274Z 61 PC: 1358b | Open file (Filename = 'C:\DOS\SETUP.���')
2018-12-17T21:59:36.586046625Z 87 PC: 134f8 | Get or set file date and time
2018-12-17T21:59:36.587962621Z 63 PC: 1362d | Read file or device (Read 4515 bytes on handle 5)
2018-12-17T21:59:36.594752079Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:36.596518452Z 64 PC: 135d7 | Write file or device (Write 4515 bytes on handle 5)
2018-12-17T21:59:36.604178721Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:36.618951845Z 64 PC: 135d7 | Write file or device (Write 4515 bytes on handle 5)
2018-12-17T21:59:36.627957365Z 87 PC: 1355a | Get or set file date and time
2018-12-17T21:59:36.629407597Z 62 PC: 13673 | Close file
2018-12-17T21:59:36.636455047Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.64663982Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.652020881Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T21:59:36.658058551Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.664153895Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T21:59:36.671221947Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.677111719Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T21:59:36.684128095Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.690625253Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T21:59:36.697538421Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.704378054Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T21:59:36.710561597Z 86 PC: 13f22 | Rename file
2018-12-17T21:59:36.721410906Z 47 PC: 178c2 | Get disk transfer address
2018-12-17T21:59:36.723917102Z 26 PC: 178cd | Set disk transfer address
2018-12-17T21:59:36.725261927Z 79 PC: 178d1 | Find next file
2018-12-17T21:59:36.728982257Z 26 PC: 178e1 | Set disk transfer address
2018-12-17T21:59:36.732205975Z 26 PC: 13a4c | Set disk transfer address
2018-12-17T21:59:36.733513338Z 78 PC: 13a5e | Find first file
2018-12-17T21:59:36.740799724Z 67 PC: 1343d | Get or set file attributes
2018-12-17T21:59:36.748843759Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.759049632Z 61 PC: 1358b | Open file (Filename = 'C:\DOS\XCOPY.EXE')
2018-12-17T21:59:36.766423506Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:36.768246362Z 63 PC: 1362d | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:59:36.774124865Z 62 PC: 13673 | Close file
2018-12-17T21:59:36.775903489Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.786947588Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.793027496Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T21:59:36.799519999Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.806470965Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T21:59:36.813777769Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.820841734Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T21:59:36.827384753Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.833682432Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T21:59:36.840621579Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.846707451Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T21:59:36.853375543Z 86 PC: 13f06 | Rename file
2018-12-17T21:59:36.864482068Z 26 PC: 13325 | Set disk transfer address
2018-12-17T21:59:36.86545777Z 78 PC: 13337 | Find first file
2018-12-17T21:59:36.872939594Z 67 PC: 1343d | Get or set file attributes
2018-12-17T21:59:36.880868983Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.892362747Z 61 PC: 1358b | Open file (Filename = 'C:\DOS\XCOPY.���')
2018-12-17T21:59:36.899702365Z 87 PC: 134f8 | Get or set file date and time
2018-12-17T21:59:36.901790414Z 63 PC: 1362d | Read file or device (Read 4515 bytes on handle 5)
2018-12-17T21:59:36.910110175Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:36.912336523Z 64 PC: 135d7 | Write file or device (Write 4515 bytes on handle 5)
2018-12-17T21:59:36.920097779Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:36.936213521Z 64 PC: 135d7 | Write file or device (Write 4515 bytes on handle 5)
2018-12-17T21:59:36.945498999Z 87 PC: 1355a | Get or set file date and time
2018-12-17T21:59:36.948523414Z 62 PC: 13673 | Close file
2018-12-17T21:59:36.955655353Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.966355206Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.974083475Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T21:59:36.981728418Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:36.988651114Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T21:59:36.995990579Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:37.003392315Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T21:59:37.011842908Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:37.018250612Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T21:59:37.025400477Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:37.031718209Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T21:59:37.038166012Z 86 PC: 13f22 | Rename file
2018-12-17T21:59:37.050377837Z 47 PC: 178c2 | Get disk transfer address
2018-12-17T21:59:37.051443817Z 26 PC: 178cd | Set disk transfer address
2018-12-17T21:59:37.052426007Z 79 PC: 178d1 | Find next file
2018-12-17T21:59:37.055815021Z 26 PC: 178e1 | Set disk transfer address
2018-12-17T21:59:37.058923491Z 26 PC: 13a4c | Set disk transfer address
2018-12-17T21:59:37.060688582Z 78 PC: 13a5e | Find first file
2018-12-17T21:59:37.068096618Z 67 PC: 1343d | Get or set file attributes
2018-12-17T21:59:37.074380943Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:37.085018684Z 61 PC: 1358b | Open file (Filename = 'C:\DOS\DEFRAG.EXE')
2018-12-17T21:59:37.091949891Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:37.094876606Z 63 PC: 1362d | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:59:37.100405928Z 62 PC: 13673 | Close file
2018-12-17T21:59:37.102240858Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:37.113181045Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:37.119573467Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T21:59:37.127724846Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:37.134806594Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T21:59:37.141716819Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:37.149295983Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T21:59:37.156139673Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:37.164580515Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T21:59:37.171227838Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:37.177509949Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T21:59:37.185837242Z 86 PC: 13f06 | Rename file
2018-12-17T21:59:37.213759078Z 26 PC: 13325 | Set disk transfer address
2018-12-17T21:59:37.215275314Z 78 PC: 13337 | Find first file
2018-12-17T21:59:37.223419521Z 67 PC: 1343d | Get or set file attributes
2018-12-17T21:59:37.229866032Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:37.240524628Z 61 PC: 1358b | Open file (Filename = 'C:\DOS\DEFRAG.���')
2018-12-17T21:59:37.248323074Z 87 PC: 134f8 | Get or set file date and time
2018-12-17T21:59:37.249801159Z 63 PC: 1362d | Read file or device (Read 4515 bytes on handle 5)
2018-12-17T21:59:37.259321498Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:37.262195827Z 64 PC: 135d7 | Write file or device (Write 4515 bytes on handle 5)
2018-12-17T21:59:37.273667438Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:37.293733216Z 64 PC: 135d7 | Write file or device (Write 4515 bytes on handle 5)
2018-12-17T21:59:37.300733555Z 87 PC: 1355a | Get or set file date and time
2018-12-17T21:59:37.303241147Z 62 PC: 13673 | Close file
2018-12-17T21:59:37.30943132Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:37.31687227Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:37.321377721Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T21:59:37.325766887Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:37.331871462Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T21:59:37.338494253Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:37.343678722Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T21:59:37.348176013Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:37.352521803Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T21:59:37.35931217Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:37.363217431Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T21:59:37.367941424Z 86 PC: 13f22 | Rename file
2018-12-17T21:59:37.375400338Z 47 PC: 178c2 | Get disk transfer address
2018-12-17T21:59:37.376759359Z 26 PC: 178cd | Set disk transfer address
2018-12-17T21:59:37.378261098Z 79 PC: 178d1 | Find next file
2018-12-17T21:59:37.381429781Z 26 PC: 178e1 | Set disk transfer address
2018-12-17T21:59:37.385497816Z 47 PC: 178c2 | Get disk transfer address
2018-12-17T21:59:37.386617351Z 26 PC: 178cd | Set disk transfer address
2018-12-17T21:59:37.387723674Z 79 PC: 178d1 | Find next file
2018-12-17T21:59:37.390865318Z 26 PC: 178e1 | Set disk transfer address
2018-12-17T21:59:37.393854636Z 47 PC: 178c2 | Get disk transfer address
2018-12-17T21:59:37.3959218Z 26 PC: 178cd | Set disk transfer address
2018-12-17T21:59:37.397192656Z 79 PC: 178d1 | Find next file
2018-12-17T21:59:37.401561743Z 26 PC: 178e1 | Set disk transfer address
2018-12-17T21:59:37.404298748Z 47 PC: 17885 | Get disk transfer address
2018-12-17T21:59:37.405658734Z 26 PC: 17890 | Set disk transfer address
2018-12-17T21:59:37.408091445Z 78 PC: 1789c | Find first file
2018-12-17T21:59:37.414392894Z 26 PC: 178ae | Set disk transfer address
2018-12-17T21:59:37.418676861Z 26 PC: 13a4c | Set disk transfer address
2018-12-17T21:59:37.420212534Z 78 PC: 13a5e | Find first file
2018-12-17T21:59:37.426479772Z 47 PC: 178c2 | Get disk transfer address
2018-12-17T21:59:37.428773014Z 26 PC: 178cd | Set disk transfer address
2018-12-17T21:59:37.429957805Z 79 PC: 178d1 | Find next file
2018-12-17T21:59:37.434480533Z 26 PC: 178e1 | Set disk transfer address
2018-12-17T21:59:37.437699996Z 26 PC: 13a4c | Set disk transfer address
2018-12-17T21:59:37.439017646Z 78 PC: 13a5e | Find first file
2018-12-17T21:59:37.44616706Z 67 PC: 1343d | Get or set file attributes
2018-12-17T21:59:37.451963717Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:37.462609975Z 61 PC: 1358b | Open file (Filename = 'C:\DOS\FORMAT.COM')
2018-12-17T21:59:37.469500777Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:37.472397081Z 63 PC: 1362d | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:59:37.478410323Z 62 PC: 13673 | Close file
2018-12-17T21:59:37.4803928Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:37.491293081Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:37.497427532Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T21:59:37.504437538Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:37.510989832Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T21:59:37.519012223Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:37.526485231Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T21:59:37.533283069Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:37.540647495Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T21:59:37.548129126Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:37.554246776Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T21:59:37.561271818Z 86 PC: 13f06 | Rename file
2018-12-17T21:59:37.572313253Z 26 PC: 13325 | Set disk transfer address
2018-12-17T21:59:37.574873918Z 78 PC: 13337 | Find first file
2018-12-17T21:59:37.58128903Z 67 PC: 1343d | Get or set file attributes
2018-12-17T21:59:37.588662852Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:37.599079762Z 61 PC: 1358b | Open file (Filename = 'C:\DOS\FORMAT.���')
2018-12-17T21:59:37.606041777Z 87 PC: 134f8 | Get or set file date and time
2018-12-17T21:59:37.617565673Z 63 PC: 1362d | Read file or device (Read 4515 bytes on handle 5)
2018-12-17T21:59:37.62480319Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:37.626635341Z 64 PC: 135d7 | Write file or device (Write 4515 bytes on handle 5)
2018-12-17T21:59:37.634503435Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:37.649730026Z 64 PC: 135d7 | Write file or device (Write 4515 bytes on handle 5)
2018-12-17T21:59:37.667009705Z 87 PC: 1355a | Get or set file date and time
2018-12-17T21:59:37.669365525Z 62 PC: 13673 | Close file
2018-12-17T21:59:37.676945141Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:37.688266086Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:37.694749333Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T21:59:37.702952808Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:37.709860631Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T21:59:37.716898896Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:37.723486368Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T21:59:37.730082615Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:37.736684319Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T21:59:37.743193603Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:37.750096356Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T21:59:37.75659241Z 86 PC: 13f22 | Rename file
2018-12-17T21:59:37.76772005Z 47 PC: 178c2 | Get disk transfer address
2018-12-17T21:59:37.769946027Z 26 PC: 178cd | Set disk transfer address
2018-12-17T21:59:37.771351466Z 79 PC: 178d1 | Find next file
2018-12-17T21:59:37.776557926Z 26 PC: 178e1 | Set disk transfer address
2018-12-17T21:59:37.780001485Z 26 PC: 13a4c | Set disk transfer address
2018-12-17T21:59:37.781938343Z 78 PC: 13a5e | Find first file
2018-12-17T21:59:37.789723541Z 67 PC: 1343d | Get or set file attributes
2018-12-17T21:59:37.796032533Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:37.806970933Z 61 PC: 1358b | Open file (Filename = 'C:\DOS\KEYB.COM')
2018-12-17T21:59:37.813914531Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:37.815737783Z 63 PC: 1362d | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:59:37.821968877Z 62 PC: 13673 | Close file
2018-12-17T21:59:37.823689516Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:37.834906647Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:37.842017289Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T21:59:37.848704276Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:37.856668718Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T21:59:37.863877674Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:37.872020667Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T21:59:37.879444447Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:37.886106166Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T21:59:37.89431727Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:37.901690267Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T21:59:37.91008123Z 86 PC: 13f06 | Rename file
2018-12-17T21:59:37.921209478Z 26 PC: 13325 | Set disk transfer address
2018-12-17T21:59:37.92240523Z 78 PC: 13337 | Find first file
2018-12-17T21:59:37.929772309Z 67 PC: 1343d | Get or set file attributes
2018-12-17T21:59:37.93603036Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:37.946888968Z 61 PC: 1358b | Open file (Filename = 'C:\DOS\KEYB.���')
2018-12-17T21:59:37.954855032Z 87 PC: 134f8 | Get or set file date and time
2018-12-17T21:59:37.956563782Z 63 PC: 1362d | Read file or device (Read 4515 bytes on handle 5)
2018-12-17T21:59:37.964985407Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:37.967348209Z 64 PC: 135d7 | Write file or device (Write 4515 bytes on handle 5)
2018-12-17T21:59:37.976348826Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:37.991791943Z 64 PC: 135d7 | Write file or device (Write 4515 bytes on handle 5)
2018-12-17T21:59:38.00066084Z 87 PC: 1355a | Get or set file date and time
2018-12-17T21:59:38.003256861Z 62 PC: 13673 | Close file
2018-12-17T21:59:38.010436187Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:38.021224863Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:38.028932803Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T21:59:38.03772857Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:38.044288896Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T21:59:38.051194473Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:38.059058615Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T21:59:38.066766572Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:38.074127881Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T21:59:38.081644303Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:38.088099263Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T21:59:38.096053917Z 86 PC: 13f22 | Rename file
2018-12-17T21:59:38.108073077Z 47 PC: 178c2 | Get disk transfer address
2018-12-17T21:59:38.111061184Z 26 PC: 178cd | Set disk transfer address
2018-12-17T21:59:38.112036692Z 79 PC: 178d1 | Find next file
2018-12-17T21:59:38.114361446Z 26 PC: 178e1 | Set disk transfer address
2018-12-17T21:59:38.117691859Z 26 PC: 13a4c | Set disk transfer address
2018-12-17T21:59:38.118784535Z 78 PC: 13a5e | Find first file
2018-12-17T21:59:38.125473566Z 67 PC: 1343d | Get or set file attributes
2018-12-17T21:59:38.132013647Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:38.141639339Z 61 PC: 1358b | Open file (Filename = 'C:\DOS\SYS.COM')
2018-12-17T21:59:38.150278055Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:38.152379896Z 63 PC: 1362d | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:59:38.159063424Z 62 PC: 13673 | Close file
2018-12-17T21:59:38.161289909Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:38.172812493Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:38.179391828Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T21:59:38.186327933Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:38.194398567Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T21:59:38.210246423Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:38.217807627Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T21:59:38.224855449Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:38.232051445Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T21:59:38.24006518Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:38.246522769Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T21:59:38.253745055Z 86 PC: 13f06 | Rename file
2018-12-17T21:59:38.265477305Z 26 PC: 13325 | Set disk transfer address
2018-12-17T21:59:38.266606599Z 78 PC: 13337 | Find first file
2018-12-17T21:59:38.274805788Z 67 PC: 1343d | Get or set file attributes
2018-12-17T21:59:38.281245937Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:38.292675973Z 61 PC: 1358b | Open file (Filename = 'C:\DOS\SYS.���')
2018-12-17T21:59:38.301491382Z 87 PC: 134f8 | Get or set file date and time
2018-12-17T21:59:38.303298061Z 63 PC: 1362d | Read file or device (Read 4515 bytes on handle 5)
2018-12-17T21:59:38.311661858Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:38.313767285Z 64 PC: 135d7 | Write file or device (Write 4515 bytes on handle 5)
2018-12-17T21:59:38.322371318Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:38.336735355Z 64 PC: 135d7 | Write file or device (Write 4515 bytes on handle 5)
2018-12-17T21:59:38.345427158Z 87 PC: 1355a | Get or set file date and time
2018-12-17T21:59:38.347753311Z 62 PC: 13673 | Close file
2018-12-17T21:59:38.355437249Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:38.367519973Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:38.374226376Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T21:59:38.38156939Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:38.388693025Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T21:59:38.396812688Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:38.404288107Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T21:59:38.411106548Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:38.417973562Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T21:59:38.425818141Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:38.432241785Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T21:59:38.439347967Z 86 PC: 13f22 | Rename file
2018-12-17T21:59:38.450492138Z 47 PC: 178c2 | Get disk transfer address
2018-12-17T21:59:38.452758643Z 26 PC: 178cd | Set disk transfer address
2018-12-17T21:59:38.454002222Z 79 PC: 178d1 | Find next file
2018-12-17T21:59:38.457531138Z 26 PC: 178e1 | Set disk transfer address
2018-12-17T21:59:38.460045764Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:38.466421209Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T21:59:38.474656292Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:38.48099861Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T21:59:38.489455666Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:38.496308359Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T21:59:38.503283479Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:38.510878202Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T21:59:38.51777778Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:38.525190213Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T21:59:38.532022311Z 86 PC: 13f06 | Rename file
2018-12-17T21:59:38.545552735Z 26 PC: 12e7c | Set disk transfer address
2018-12-17T21:59:38.548154614Z 78 PC: 12e8e | Find first file
2018-12-17T21:59:38.55568215Z 67 PC: 1343d | Get or set file attributes
2018-12-17T21:59:38.56258914Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:38.572866003Z 61 PC: 1358b | Open file (Filename = 'A:\TEST.���')
2018-12-17T21:59:38.580417689Z 87 PC: 134f8 | Get or set file date and time
2018-12-17T21:59:38.582690891Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:38.584643266Z 63 PC: 1362d | Read file or device (Read 4515 bytes on handle 5)
2018-12-17T21:59:38.593459817Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:38.607730491Z 64 PC: 135d7 | Write file or device (Write 4515 bytes on handle 5)
2018-12-17T21:59:38.616790863Z 87 PC: 1355a | Get or set file date and time
2018-12-17T21:59:38.618886956Z 62 PC: 13673 | Close file
2018-12-17T21:59:38.626373448Z 61 PC: 1358b | Open file (Filename = 'A:\TEST.���')
2018-12-17T21:59:38.634101195Z 66 PC: 17b6b | Move file pointer
2018-12-17T21:59:38.636220964Z 64 PC: 135d7 | Write file or device (Write 0 bytes on handle 5)
2018-12-17T21:59:38.644907881Z 87 PC: 1355a | Get or set file date and time
2018-12-17T21:59:38.646712391Z 62 PC: 13673 | Close file
2018-12-17T21:59:38.655005514Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:38.665681188Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:38.672075325Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T21:59:38.680070292Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:38.687318426Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T21:59:38.695075955Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:38.701888842Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T21:59:38.708891474Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:38.715951665Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T21:59:38.727312788Z 67 PC: 13474 | Get or set file attributes
2018-12-17T21:59:38.734940497Z 65 PC: 13ba9 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T21:59:38.741867527Z 86 PC: 13f22 | Rename file
2018-12-17T21:59:38.754954215Z 75 PC: 13126 | Execute program
2018-12-17T21:59:38.776755986Z 80 PC: 1b0c9 | Set current PSP
2018-12-17T21:59:38.777712165Z 48 PC: 1b0ce | Get DOS version
2018-12-17T21:59:38.779510558Z 99 PC: 218b0 | Get DBCS lead byte table pointer
2018-12-17T21:59:38.781963471Z 101 PC: 1b154 | Get extended country info
2018-12-17T21:59:38.783754994Z 99 PC: 1b15a | Get DBCS lead byte table pointer
2018-12-17T21:59:38.785268083Z 74 PC: 1b1bc | Reallocate memory
2018-12-17T21:59:38.787167972Z 25 PC: 1b1f3 | Get default drive
2018-12-17T21:59:38.78849855Z 37 PC: 1acb3 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T21:59:38.790351155Z 37 PC: 1acba | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T21:59:38.79154186Z 37 PC: 1acc1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:59:38.796589465Z 74 PC: 19e5c | Reallocate memory
2018-12-17T21:59:38.798309779Z 72 PC: 19e9d | Allocate memory
2018-12-17T21:59:38.800075556Z 72 PC: 19ed5 | Allocate memory
2018-12-17T21:59:38.802710274Z 72 PC: 19edd | Allocate memory