Sample viewer

vx.netlux.org/Virus.DOS.VCode.1886

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:51:43.927636746Z 42 PC: 169ac | Get date 0x169ac: cmp dh, 6
0x169af: jne 0x169cc
0x169b1: mov byte ptr cs:[0x24], 0
0x169b7: mov al, byte ptr [0x24]
0x169ba: mov cx, 0x24
0x169bd: xor dx, dx
0x169bf: inc dx
0x169c0: mov bx, 0x90
0x169c3: int 0x26
0x169c5: inc byte ptr cs:[0x24]
0x169ca: jmp 0x169b7
0x169cc: ret
0x169cd: pushf
0x169ce: push es
0x169cf: mov ax, cs
0x169d1: mov es, ax
0x169d3: mov di, dx
0x169d5: mov byte ptr cs:[0x26], 0
0x169db: mov al, 0x5c
0x169dd: inc byte ptr es:[0x26]
2018-12-17T22:51:43.93099309Z 47 PC: 1680c | Get disk transfer address
2018-12-17T22:51:43.932716255Z 26 PC: 1681d | Set disk transfer address
2018-12-17T22:51:43.934046581Z 53 PC: 16822 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:51:43.937776727Z 37 PC: 16834 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:51:43.939279006Z 54 PC: 16868 | Get free disk space
2018-12-17T22:51:43.978502972Z 78 PC: 16a4c | Find first file
2018-12-17T22:51:43.993774019Z 78 PC: 168d3 | Find first file
2018-12-17T22:51:43.998543591Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:44.000515952Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:44.002807738Z 78 PC: 16a4c | Find first file
2018-12-17T22:51:44.009708437Z 54 PC: 16ade | Get free disk space
2018-12-17T22:51:44.01298935Z 67 PC: 16aff | Get or set file attributes
2018-12-17T22:51:44.020057573Z 61 PC: 16b0d | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:51:44.027730587Z 87 PC: 16b1a | Get or set file date and time
2018-12-17T22:51:44.029137669Z 66 PC: 16b34 | Move file pointer
2018-12-17T22:51:44.030537785Z 63 PC: 16b44 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:51:44.036929666Z 67 PC: 16b62 | Get or set file attributes
2018-12-17T22:51:44.714015078Z 62 PC: 16b6c | Close file
2018-12-17T22:51:44.716169442Z 61 PC: 16b78 | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:51:44.732393405Z 66 PC: 16b95 | Move file pointer
2018-12-17T22:51:44.734265702Z 63 PC: 16ba1 | Read file or device (Read 28 bytes on handle 5)
2018-12-17T22:51:44.740098497Z 66 PC: 16c2d | Move file pointer
2018-12-17T22:51:44.742615225Z 64 PC: 16c39 | Write file or device (Write 28 bytes on handle 5)
2018-12-17T22:51:44.745619104Z 66 PC: 16c4c | Move file pointer
2018-12-17T22:51:44.748059484Z 64 PC: 16c5c | Write file or device (Write 1886 bytes on handle 5)
2018-12-17T22:51:44.759258447Z 87 PC: 16c79 | Get or set file date and time
2018-12-17T22:51:44.761425961Z 62 PC: 16c7d | Close file
2018-12-17T22:51:44.781527344Z 67 PC: 16c8c | Get or set file attributes
2018-12-17T22:51:44.821212011Z 78 PC: 16a4c | Find first file
2018-12-17T22:51:44.828646764Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:44.83221385Z 54 PC: 16ade | Get free disk space
2018-12-17T22:51:44.835528346Z 67 PC: 16aff | Get or set file attributes
2018-12-17T22:51:44.841634606Z 61 PC: 16b0d | Open file (Filename = 'C:\DOS\CHKDSK.EXE')
2018-12-17T22:51:44.853885187Z 87 PC: 16b1a | Get or set file date and time
2018-12-17T22:51:44.855585743Z 66 PC: 16b34 | Move file pointer
2018-12-17T22:51:44.858368356Z 63 PC: 16b44 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:51:44.869957654Z 67 PC: 16b62 | Get or set file attributes
2018-12-17T22:51:44.880515521Z 62 PC: 16b6c | Close file
2018-12-17T22:51:44.883231055Z 61 PC: 16b78 | Open file (Filename = 'C:\DOS\CHKDSK.EXE')
2018-12-17T22:51:44.890373457Z 66 PC: 16b95 | Move file pointer
2018-12-17T22:51:44.892018877Z 63 PC: 16ba1 | Read file or device (Read 28 bytes on handle 5)
2018-12-17T22:51:44.899054665Z 66 PC: 16c2d | Move file pointer
2018-12-17T22:51:44.90081456Z 64 PC: 16c39 | Write file or device (Write 28 bytes on handle 5)
2018-12-17T22:51:44.903917142Z 66 PC: 16c4c | Move file pointer
2018-12-17T22:51:44.906561578Z 64 PC: 16c5c | Write file or device (Write 1886 bytes on handle 5)
2018-12-17T22:51:44.915443169Z 87 PC: 16c79 | Get or set file date and time
2018-12-17T22:51:44.91698254Z 62 PC: 16c7d | Close file
2018-12-17T22:51:44.926799352Z 67 PC: 16c8c | Get or set file attributes
2018-12-17T22:51:44.937231769Z 78 PC: 16a4c | Find first file
2018-12-17T22:51:44.944494764Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:44.948595952Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:44.95239276Z 54 PC: 16ade | Get free disk space
2018-12-17T22:51:44.955321906Z 67 PC: 16aff | Get or set file attributes
2018-12-17T22:51:44.962698366Z 61 PC: 16b0d | Open file (Filename = 'C:\DOS\DEBUG.EXE')
2018-12-17T22:51:44.969783566Z 87 PC: 16b1a | Get or set file date and time
2018-12-17T22:51:44.971390577Z 66 PC: 16b34 | Move file pointer
2018-12-17T22:51:44.973302872Z 63 PC: 16b44 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:51:44.979797757Z 67 PC: 16b62 | Get or set file attributes
2018-12-17T22:51:44.989531091Z 62 PC: 16b6c | Close file
2018-12-17T22:51:44.991838017Z 61 PC: 16b78 | Open file (Filename = 'C:\DOS\DEBUG.EXE')
2018-12-17T22:51:44.999649681Z 66 PC: 16b95 | Move file pointer
2018-12-17T22:51:45.001303145Z 63 PC: 16ba1 | Read file or device (Read 28 bytes on handle 5)
2018-12-17T22:51:45.006868263Z 66 PC: 16c2d | Move file pointer
2018-12-17T22:51:45.009788317Z 64 PC: 16c39 | Write file or device (Write 28 bytes on handle 5)
2018-12-17T22:51:45.012711021Z 66 PC: 16c4c | Move file pointer
2018-12-17T22:51:45.014385035Z 64 PC: 16c5c | Write file or device (Write 1886 bytes on handle 5)
2018-12-17T22:51:45.024250632Z 87 PC: 16c79 | Get or set file date and time
2018-12-17T22:51:45.026042176Z 62 PC: 16c7d | Close file
2018-12-17T22:51:45.033180934Z 67 PC: 16c8c | Get or set file attributes
2018-12-17T22:51:45.043173774Z 78 PC: 16a4c | Find first file
2018-12-17T22:51:45.049304182Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:45.052298128Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:45.055716692Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:45.058848694Z 54 PC: 16ade | Get free disk space
2018-12-17T22:51:45.061269454Z 67 PC: 16aff | Get or set file attributes
2018-12-17T22:51:45.067392593Z 61 PC: 16b0d | Open file (Filename = 'C:\DOS\EXPAND.EXE')
2018-12-17T22:51:45.074952018Z 87 PC: 16b1a | Get or set file date and time
2018-12-17T22:51:45.076194742Z 66 PC: 16b34 | Move file pointer
2018-12-17T22:51:45.077865425Z 63 PC: 16b44 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:51:45.083508146Z 67 PC: 16b62 | Get or set file attributes
2018-12-17T22:51:45.092942487Z 62 PC: 16b6c | Close file
2018-12-17T22:51:45.095238332Z 61 PC: 16b78 | Open file (Filename = 'C:\DOS\EXPAND.EXE')
2018-12-17T22:51:45.102274208Z 66 PC: 16b95 | Move file pointer
2018-12-17T22:51:45.103910298Z 63 PC: 16ba1 | Read file or device (Read 28 bytes on handle 5)
2018-12-17T22:51:45.110402601Z 66 PC: 16c2d | Move file pointer
2018-12-17T22:51:45.11205145Z 64 PC: 16c39 | Write file or device (Write 28 bytes on handle 5)
2018-12-17T22:51:45.114919381Z 66 PC: 16c4c | Move file pointer
2018-12-17T22:51:45.117493735Z 64 PC: 16c5c | Write file or device (Write 1886 bytes on handle 5)
2018-12-17T22:51:45.125324634Z 87 PC: 16c79 | Get or set file date and time
2018-12-17T22:51:45.127030673Z 62 PC: 16c7d | Close file
2018-12-17T22:51:45.437470304Z 67 PC: 16c8c | Get or set file attributes
2018-12-17T22:51:45.462479943Z 78 PC: 16a4c | Find first file
2018-12-17T22:51:45.467500831Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:45.470253434Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:45.473792755Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:45.477523033Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:45.482239269Z 54 PC: 16ade | Get free disk space
2018-12-17T22:51:45.485519268Z 67 PC: 16aff | Get or set file attributes
2018-12-17T22:51:45.49290375Z 61 PC: 16b0d | Open file (Filename = 'C:\DOS\FDISK.EXE')
2018-12-17T22:51:45.508791963Z 87 PC: 16b1a | Get or set file date and time
2018-12-17T22:51:45.510538048Z 66 PC: 16b34 | Move file pointer
2018-12-17T22:51:45.512418903Z 63 PC: 16b44 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:51:45.532124398Z 67 PC: 16b62 | Get or set file attributes
2018-12-17T22:51:45.542904738Z 62 PC: 16b6c | Close file
2018-12-17T22:51:45.544678457Z 61 PC: 16b78 | Open file (Filename = 'C:\DOS\FDISK.EXE')
2018-12-17T22:51:45.552748264Z 66 PC: 16b95 | Move file pointer
2018-12-17T22:51:45.554327856Z 63 PC: 16ba1 | Read file or device (Read 28 bytes on handle 5)
2018-12-17T22:51:45.559955284Z 66 PC: 16c2d | Move file pointer
2018-12-17T22:51:45.562419765Z 64 PC: 16c39 | Write file or device (Write 28 bytes on handle 5)
2018-12-17T22:51:45.566122207Z 66 PC: 16c4c | Move file pointer
2018-12-17T22:51:45.568087794Z 64 PC: 16c5c | Write file or device (Write 1886 bytes on handle 5)
2018-12-17T22:51:45.58058845Z 87 PC: 16c79 | Get or set file date and time
2018-12-17T22:51:45.582618757Z 62 PC: 16c7d | Close file
2018-12-17T22:51:45.589952839Z 67 PC: 16c8c | Get or set file attributes
2018-12-17T22:51:45.601146103Z 78 PC: 16a4c | Find first file
2018-12-17T22:51:45.615601394Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:45.619024614Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:45.623491605Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:45.626751491Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:45.629760463Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:45.634246056Z 54 PC: 16ade | Get free disk space
2018-12-17T22:51:45.63696072Z 67 PC: 16aff | Get or set file attributes
2018-12-17T22:51:45.643138553Z 61 PC: 16b0d | Open file (Filename = 'C:\DOS\MEM.EXE')
2018-12-17T22:51:45.651375539Z 87 PC: 16b1a | Get or set file date and time
2018-12-17T22:51:45.653269216Z 66 PC: 16b34 | Move file pointer
2018-12-17T22:51:45.655116572Z 63 PC: 16b44 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:51:45.662891073Z 67 PC: 16b62 | Get or set file attributes
2018-12-17T22:51:45.673372044Z 62 PC: 16b6c | Close file
2018-12-17T22:51:45.675074548Z 61 PC: 16b78 | Open file (Filename = 'C:\DOS\MEM.EXE')
2018-12-17T22:51:45.682839958Z 66 PC: 16b95 | Move file pointer
2018-12-17T22:51:45.684157956Z 63 PC: 16ba1 | Read file or device (Read 28 bytes on handle 5)
2018-12-17T22:51:45.690645793Z 66 PC: 16c2d | Move file pointer
2018-12-17T22:51:45.692944044Z 64 PC: 16c39 | Write file or device (Write 28 bytes on handle 5)
2018-12-17T22:51:45.695496233Z 66 PC: 16c4c | Move file pointer
2018-12-17T22:51:45.696775704Z 64 PC: 16c5c | Write file or device (Write 1886 bytes on handle 5)
2018-12-17T22:51:45.705619879Z 87 PC: 16c79 | Get or set file date and time
2018-12-17T22:51:45.707749517Z 62 PC: 16c7d | Close file
2018-12-17T22:51:45.71555312Z 67 PC: 16c8c | Get or set file attributes
2018-12-17T22:51:45.727375402Z 78 PC: 16a4c | Find first file
2018-12-17T22:51:45.734496869Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:45.737807785Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:45.742221284Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:45.745828772Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:45.749037056Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:45.752888524Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:45.759146669Z 54 PC: 16ade | Get free disk space
2018-12-17T22:51:45.761862293Z 67 PC: 16aff | Get or set file attributes
2018-12-17T22:51:45.768698776Z 61 PC: 16b0d | Open file (Filename = 'C:\DOS\NLSFUNC.EXE')
2018-12-17T22:51:45.776223476Z 87 PC: 16b1a | Get or set file date and time
2018-12-17T22:51:45.777919823Z 66 PC: 16b34 | Move file pointer
2018-12-17T22:51:45.780443584Z 63 PC: 16b44 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:51:45.786745884Z 67 PC: 16b62 | Get or set file attributes
2018-12-17T22:51:45.797176107Z 62 PC: 16b6c | Close file
2018-12-17T22:51:45.799417066Z 61 PC: 16b78 | Open file (Filename = 'C:\DOS\NLSFUNC.EXE')
2018-12-17T22:51:45.807274736Z 66 PC: 16b95 | Move file pointer
2018-12-17T22:51:45.808911695Z 63 PC: 16ba1 | Read file or device (Read 28 bytes on handle 5)
2018-12-17T22:51:45.815312643Z 66 PC: 16c2d | Move file pointer
2018-12-17T22:51:45.817687188Z 64 PC: 16c39 | Write file or device (Write 28 bytes on handle 5)
2018-12-17T22:51:45.820570938Z 66 PC: 16c4c | Move file pointer
2018-12-17T22:51:45.822392795Z 64 PC: 16c5c | Write file or device (Write 1886 bytes on handle 5)
2018-12-17T22:51:45.831091282Z 87 PC: 16c79 | Get or set file date and time
2018-12-17T22:51:45.832854931Z 62 PC: 16c7d | Close file
2018-12-17T22:51:45.840116535Z 67 PC: 16c8c | Get or set file attributes
2018-12-17T22:51:45.857663132Z 78 PC: 16a4c | Find first file
2018-12-17T22:51:45.864618397Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:45.868275119Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:45.871513183Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:45.874760052Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:45.878843856Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:45.882410389Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:45.885615268Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:45.889482106Z 54 PC: 16ade | Get free disk space
2018-12-17T22:51:45.892960547Z 67 PC: 16aff | Get or set file attributes
2018-12-17T22:51:45.899677538Z 61 PC: 16b0d | Open file (Filename = 'C:\DOS\QBASIC.EXE')
2018-12-17T22:51:45.907539991Z 87 PC: 16b1a | Get or set file date and time
2018-12-17T22:51:45.909467588Z 66 PC: 16b34 | Move file pointer
2018-12-17T22:51:45.911064066Z 63 PC: 16b44 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:51:45.917758842Z 67 PC: 16b62 | Get or set file attributes
2018-12-17T22:51:45.927408465Z 62 PC: 16b6c | Close file
2018-12-17T22:51:45.930019569Z 61 PC: 16b78 | Open file (Filename = 'C:\DOS\QBASIC.EXE')
2018-12-17T22:51:45.938786451Z 66 PC: 16b95 | Move file pointer
2018-12-17T22:51:45.940737249Z 63 PC: 16ba1 | Read file or device (Read 28 bytes on handle 5)
2018-12-17T22:51:45.946422627Z 66 PC: 16c2d | Move file pointer
2018-12-17T22:51:45.948756515Z 64 PC: 16c39 | Write file or device (Write 28 bytes on handle 5)
2018-12-17T22:51:45.956546988Z 66 PC: 16c4c | Move file pointer
2018-12-17T22:51:45.958182876Z 64 PC: 16c5c | Write file or device (Write 1886 bytes on handle 5)
2018-12-17T22:51:45.971883145Z 87 PC: 16c79 | Get or set file date and time
2018-12-17T22:51:45.975838791Z 62 PC: 16c7d | Close file
2018-12-17T22:51:45.990848253Z 67 PC: 16c8c | Get or set file attributes
2018-12-17T22:51:46.006902195Z 78 PC: 16a4c | Find first file
2018-12-17T22:51:46.019280105Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.022300849Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.026208474Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.030193103Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.033742639Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.038413554Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.041802298Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.044963596Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.059152877Z 54 PC: 16ade | Get free disk space
2018-12-17T22:51:46.061870704Z 67 PC: 16aff | Get or set file attributes
2018-12-17T22:51:46.065684939Z 61 PC: 16b0d | Open file (Filename = 'C:\DOS\REPLACE.EXE')
2018-12-17T22:51:46.072725854Z 87 PC: 16b1a | Get or set file date and time
2018-12-17T22:51:46.075142222Z 66 PC: 16b34 | Move file pointer
2018-12-17T22:51:46.077006221Z 63 PC: 16b44 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:51:46.08217232Z 67 PC: 16b62 | Get or set file attributes
2018-12-17T22:51:46.088723419Z 62 PC: 16b6c | Close file
2018-12-17T22:51:46.090228346Z 61 PC: 16b78 | Open file (Filename = 'C:\DOS\REPLACE.EXE')
2018-12-17T22:51:46.095892489Z 66 PC: 16b95 | Move file pointer
2018-12-17T22:51:46.097385878Z 63 PC: 16ba1 | Read file or device (Read 28 bytes on handle 5)
2018-12-17T22:51:46.101769442Z 66 PC: 16c2d | Move file pointer
2018-12-17T22:51:46.10386799Z 64 PC: 16c39 | Write file or device (Write 28 bytes on handle 5)
2018-12-17T22:51:46.105727585Z 66 PC: 16c4c | Move file pointer
2018-12-17T22:51:46.107274843Z 64 PC: 16c5c | Write file or device (Write 1886 bytes on handle 5)
2018-12-17T22:51:46.117785259Z 87 PC: 16c79 | Get or set file date and time
2018-12-17T22:51:46.120321849Z 62 PC: 16c7d | Close file
2018-12-17T22:51:46.127445028Z 67 PC: 16c8c | Get or set file attributes
2018-12-17T22:51:46.13940763Z 78 PC: 16a4c | Find first file
2018-12-17T22:51:46.146302078Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.149661929Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.153730532Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.157557442Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.160852413Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.165044881Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.16880675Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.172148033Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.176326933Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.180112828Z 54 PC: 16ade | Get free disk space
2018-12-17T22:51:46.183016679Z 67 PC: 16aff | Get or set file attributes
2018-12-17T22:51:46.190178845Z 61 PC: 16b0d | Open file (Filename = 'C:\DOS\RESTORE.EXE')
2018-12-17T22:51:46.198376078Z 87 PC: 16b1a | Get or set file date and time
2018-12-17T22:51:46.199780761Z 66 PC: 16b34 | Move file pointer
2018-12-17T22:51:46.202227939Z 63 PC: 16b44 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:51:46.208552336Z 67 PC: 16b62 | Get or set file attributes
2018-12-17T22:51:46.218408706Z 62 PC: 16b6c | Close file
2018-12-17T22:51:46.2213525Z 61 PC: 16b78 | Open file (Filename = 'C:\DOS\RESTORE.EXE')
2018-12-17T22:51:46.228595831Z 66 PC: 16b95 | Move file pointer
2018-12-17T22:51:46.229995376Z 63 PC: 16ba1 | Read file or device (Read 28 bytes on handle 5)
2018-12-17T22:51:46.236668659Z 66 PC: 16c2d | Move file pointer
2018-12-17T22:51:46.238368291Z 64 PC: 16c39 | Write file or device (Write 28 bytes on handle 5)
2018-12-17T22:51:46.2414278Z 66 PC: 16c4c | Move file pointer
2018-12-17T22:51:46.257171117Z 64 PC: 16c5c | Write file or device (Write 1886 bytes on handle 5)
2018-12-17T22:51:46.279512087Z 87 PC: 16c79 | Get or set file date and time
2018-12-17T22:51:46.280931216Z 62 PC: 16c7d | Close file
2018-12-17T22:51:46.301823187Z 67 PC: 16c8c | Get or set file attributes
2018-12-17T22:51:46.3144212Z 78 PC: 16a4c | Find first file
2018-12-17T22:51:46.334425212Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.339302091Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.342605359Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.345798809Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.349440385Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.352551791Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.355954687Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.359756649Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.363161546Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.366583909Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.370008756Z 54 PC: 16ade | Get free disk space
2018-12-17T22:51:46.37300934Z 67 PC: 16aff | Get or set file attributes
2018-12-17T22:51:46.378930065Z 61 PC: 16b0d | Open file (Filename = 'C:\DOS\SCANDISK.EXE')
2018-12-17T22:51:46.383500142Z 87 PC: 16b1a | Get or set file date and time
2018-12-17T22:51:46.384576181Z 66 PC: 16b34 | Move file pointer
2018-12-17T22:51:46.386202527Z 63 PC: 16b44 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:51:46.390063593Z 67 PC: 16b62 | Get or set file attributes
2018-12-17T22:51:46.409651866Z 62 PC: 16b6c | Close file
2018-12-17T22:51:46.411742486Z 61 PC: 16b78 | Open file (Filename = 'C:\DOS\SCANDISK.EXE')
2018-12-17T22:51:46.417032161Z 66 PC: 16b95 | Move file pointer
2018-12-17T22:51:46.418426471Z 63 PC: 16ba1 | Read file or device (Read 28 bytes on handle 5)
2018-12-17T22:51:46.423048028Z 66 PC: 16c2d | Move file pointer
2018-12-17T22:51:46.424306475Z 64 PC: 16c39 | Write file or device (Write 28 bytes on handle 5)
2018-12-17T22:51:46.426194359Z 66 PC: 16c4c | Move file pointer
2018-12-17T22:51:46.428063238Z 64 PC: 16c5c | Write file or device (Write 1886 bytes on handle 5)
2018-12-17T22:51:46.433629906Z 87 PC: 16c79 | Get or set file date and time
2018-12-17T22:51:46.434825552Z 62 PC: 16c7d | Close file
2018-12-17T22:51:46.439849384Z 67 PC: 16c8c | Get or set file attributes
2018-12-17T22:51:46.44649519Z 78 PC: 16a4c | Find first file
2018-12-17T22:51:46.451036339Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.454056706Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.456402454Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.459736739Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.461932226Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.464211416Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.4670594Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.469298858Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.471446833Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.47457231Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.478018882Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.481177658Z 54 PC: 16ade | Get free disk space
2018-12-17T22:51:46.4846294Z 67 PC: 16aff | Get or set file attributes
2018-12-17T22:51:46.490501136Z 61 PC: 16b0d | Open file (Filename = 'C:\DOS\SETUP.EXE')
2018-12-17T22:51:46.495809455Z 87 PC: 16b1a | Get or set file date and time
2018-12-17T22:51:46.497570902Z 66 PC: 16b34 | Move file pointer
2018-12-17T22:51:46.498736865Z 63 PC: 16b44 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:51:46.503409592Z 67 PC: 16b62 | Get or set file attributes
2018-12-17T22:51:46.514365895Z 62 PC: 16b6c | Close file
2018-12-17T22:51:46.516676808Z 61 PC: 16b78 | Open file (Filename = 'C:\DOS\SETUP.EXE')
2018-12-17T22:51:46.524745784Z 66 PC: 16b95 | Move file pointer
2018-12-17T22:51:46.526449215Z 63 PC: 16ba1 | Read file or device (Read 28 bytes on handle 5)
2018-12-17T22:51:46.533267999Z 66 PC: 16c2d | Move file pointer
2018-12-17T22:51:46.535693158Z 64 PC: 16c39 | Write file or device (Write 28 bytes on handle 5)
2018-12-17T22:51:46.538662449Z 66 PC: 16c4c | Move file pointer
2018-12-17T22:51:46.540276296Z 64 PC: 16c5c | Write file or device (Write 1886 bytes on handle 5)
2018-12-17T22:51:46.548606524Z 87 PC: 16c79 | Get or set file date and time
2018-12-17T22:51:46.550785706Z 62 PC: 16c7d | Close file
2018-12-17T22:51:46.558349439Z 67 PC: 16c8c | Get or set file attributes
2018-12-17T22:51:46.56871634Z 78 PC: 16a4c | Find first file
2018-12-17T22:51:46.574888717Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.57945257Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.582733996Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.58575295Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.589830755Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.592896031Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.596032143Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.600612722Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.60371029Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.606903063Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.610477549Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.613624474Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.616900518Z 54 PC: 16ade | Get free disk space
2018-12-17T22:51:46.620183365Z 67 PC: 16aff | Get or set file attributes
2018-12-17T22:51:46.626468233Z 61 PC: 16b0d | Open file (Filename = 'C:\DOS\XCOPY.EXE')
2018-12-17T22:51:46.634163295Z 87 PC: 16b1a | Get or set file date and time
2018-12-17T22:51:46.636028924Z 66 PC: 16b34 | Move file pointer
2018-12-17T22:51:46.637632045Z 63 PC: 16b44 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:51:46.644357205Z 67 PC: 16b62 | Get or set file attributes
2018-12-17T22:51:46.654236582Z 62 PC: 16b6c | Close file
2018-12-17T22:51:46.65615388Z 61 PC: 16b78 | Open file (Filename = 'C:\DOS\XCOPY.EXE')
2018-12-17T22:51:46.665549153Z 66 PC: 16b95 | Move file pointer
2018-12-17T22:51:46.66691949Z 63 PC: 16ba1 | Read file or device (Read 28 bytes on handle 5)
2018-12-17T22:51:46.671192274Z 66 PC: 16c2d | Move file pointer
2018-12-17T22:51:46.6726972Z 64 PC: 16c39 | Write file or device (Write 28 bytes on handle 5)
2018-12-17T22:51:46.674537308Z 66 PC: 16c4c | Move file pointer
2018-12-17T22:51:46.675588125Z 64 PC: 16c5c | Write file or device (Write 1886 bytes on handle 5)
2018-12-17T22:51:46.691349897Z 87 PC: 16c79 | Get or set file date and time
2018-12-17T22:51:46.693273003Z 62 PC: 16c7d | Close file
2018-12-17T22:51:46.7007719Z 67 PC: 16c8c | Get or set file attributes
2018-12-17T22:51:46.712000778Z 78 PC: 16a4c | Find first file
2018-12-17T22:51:46.719029253Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.723426173Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.727477345Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.73093562Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.735129314Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.738884662Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.743119936Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.747918848Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.763993881Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.766893221Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.770626196Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.774214495Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.777302526Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.781682395Z 54 PC: 16ade | Get free disk space
2018-12-17T22:51:46.784401706Z 67 PC: 16aff | Get or set file attributes
2018-12-17T22:51:46.789940307Z 61 PC: 16b0d | Open file (Filename = 'C:\DOS\DEFRAG.EXE')
2018-12-17T22:51:46.798704284Z 87 PC: 16b1a | Get or set file date and time
2018-12-17T22:51:46.800469271Z 66 PC: 16b34 | Move file pointer
2018-12-17T22:51:46.802270626Z 63 PC: 16b44 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:51:46.810199683Z 67 PC: 16b62 | Get or set file attributes
2018-12-17T22:51:46.816947453Z 62 PC: 16b6c | Close file
2018-12-17T22:51:46.819167283Z 61 PC: 16b78 | Open file (Filename = 'C:\DOS\DEFRAG.EXE')
2018-12-17T22:51:46.824228278Z 66 PC: 16b95 | Move file pointer
2018-12-17T22:51:46.825678556Z 63 PC: 16ba1 | Read file or device (Read 28 bytes on handle 5)
2018-12-17T22:51:46.831254879Z 66 PC: 16c2d | Move file pointer
2018-12-17T22:51:46.833071728Z 64 PC: 16c39 | Write file or device (Write 28 bytes on handle 5)
2018-12-17T22:51:46.836002725Z 66 PC: 16c4c | Move file pointer
2018-12-17T22:51:46.838500045Z 64 PC: 16c5c | Write file or device (Write 1886 bytes on handle 5)
2018-12-17T22:51:46.846717128Z 87 PC: 16c79 | Get or set file date and time
2018-12-17T22:51:46.848501089Z 62 PC: 16c7d | Close file
2018-12-17T22:51:46.85603206Z 67 PC: 16c8c | Get or set file attributes
2018-12-17T22:51:46.866707795Z 78 PC: 16a4c | Find first file
2018-12-17T22:51:46.873287966Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.8779198Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.881222164Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.884651767Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.88882056Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.89221612Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.896203344Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.899691108Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.902767731Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.907312003Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.91076802Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.914134873Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.918840073Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.922274788Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:46.929776349Z 54 PC: 16ade | Get free disk space
2018-12-17T22:51:46.933989544Z 67 PC: 16aff | Get or set file attributes
2018-12-17T22:51:46.940496951Z 61 PC: 16b0d | Open file (Filename = 'C:\DOS\EMM386.EXE')
2018-12-17T22:51:46.948441786Z 87 PC: 16b1a | Get or set file date and time
2018-12-17T22:51:46.951217152Z 66 PC: 16b34 | Move file pointer
2018-12-17T22:51:46.95290622Z 63 PC: 16b44 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:51:46.959226143Z 67 PC: 16b62 | Get or set file attributes
2018-12-17T22:51:46.969854591Z 62 PC: 16b6c | Close file
2018-12-17T22:51:46.971951391Z 61 PC: 16b78 | Open file (Filename = 'C:\DOS\EMM386.EXE')
2018-12-17T22:51:46.980028478Z 66 PC: 16b95 | Move file pointer
2018-12-17T22:51:46.98211396Z 63 PC: 16ba1 | Read file or device (Read 28 bytes on handle 5)
2018-12-17T22:51:46.987971216Z 66 PC: 16c2d | Move file pointer
2018-12-17T22:51:46.990477537Z 64 PC: 16c39 | Write file or device (Write 28 bytes on handle 5)
2018-12-17T22:51:46.993749164Z 66 PC: 16c4c | Move file pointer
2018-12-17T22:51:46.995410421Z 64 PC: 16c5c | Write file or device (Write 1886 bytes on handle 5)
2018-12-17T22:51:47.003790404Z 87 PC: 16c79 | Get or set file date and time
2018-12-17T22:51:47.006155554Z 62 PC: 16c7d | Close file
2018-12-17T22:51:47.013194207Z 67 PC: 16c8c | Get or set file attributes
2018-12-17T22:51:47.024267341Z 78 PC: 16a4c | Find first file
2018-12-17T22:51:47.030619562Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:47.033937792Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:47.038036683Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:47.041202447Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:47.044426321Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:47.047825232Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:47.051169107Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:47.055261681Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:47.058388069Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:47.061576671Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:47.06561658Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:47.068805444Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:47.071902805Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:47.075406343Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:47.07875127Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:47.087090749Z 54 PC: 16ade | Get free disk space
2018-12-17T22:51:47.090845302Z 67 PC: 16aff | Get or set file attributes
2018-12-17T22:51:47.097273938Z 61 PC: 16b0d | Open file (Filename = 'C:\DOS\MSCDEX.EXE')
2018-12-17T22:51:47.104775432Z 87 PC: 16b1a | Get or set file date and time
2018-12-17T22:51:47.107081971Z 66 PC: 16b34 | Move file pointer
2018-12-17T22:51:47.108584904Z 63 PC: 16b44 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:51:47.115210238Z 67 PC: 16b62 | Get or set file attributes
2018-12-17T22:51:47.122123545Z 62 PC: 16b6c | Close file
2018-12-17T22:51:47.123564606Z 61 PC: 16b78 | Open file (Filename = 'C:\DOS\MSCDEX.EXE')
2018-12-17T22:51:47.129121313Z 66 PC: 16b95 | Move file pointer
2018-12-17T22:51:47.130249062Z 63 PC: 16ba1 | Read file or device (Read 28 bytes on handle 5)
2018-12-17T22:51:47.134080948Z 66 PC: 16c2d | Move file pointer
2018-12-17T22:51:47.135894451Z 64 PC: 16c39 | Write file or device (Write 28 bytes on handle 5)
2018-12-17T22:51:47.137876521Z 66 PC: 16c4c | Move file pointer
2018-12-17T22:51:47.13931401Z 64 PC: 16c5c | Write file or device (Write 1886 bytes on handle 5)
2018-12-17T22:51:47.145181828Z 87 PC: 16c79 | Get or set file date and time
2018-12-17T22:51:47.146939739Z 62 PC: 16c7d | Close file
2018-12-17T22:51:47.152588148Z 67 PC: 16c8c | Get or set file attributes
2018-12-17T22:51:47.16016707Z 78 PC: 16a4c | Find first file
2018-12-17T22:51:47.16668463Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:47.171371122Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:47.174966409Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:47.177880854Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:47.182014978Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:47.184963899Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:47.188157864Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:47.191969882Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:47.195040351Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:47.198335259Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:47.202279234Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:47.205415663Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:47.209772646Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:47.21323263Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:47.21643666Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:47.220544919Z 79 PC: 16a5a | Find next file
2018-12-17T22:51:47.223846077Z 78 PC: 168d3 | Find first file
2018-12-17T22:51:47.227825724Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:47.230516774Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:47.232553903Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:47.234529984Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:47.237081156Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:47.239110352Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:47.241086975Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:47.243751256Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:47.245680926Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:47.248283754Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:47.250613335Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:47.252666328Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:47.255090394Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:47.257472904Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:47.259504604Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:47.262077804Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:47.26415561Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:47.266236448Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:47.268856786Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:47.270794074Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:47.273078806Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:47.27617357Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:47.278269989Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:47.281388704Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:47.283518432Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:47.285643904Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:47.28826532Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:47.290755566Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:47.293031601Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:47.295464368Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:47.297588245Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:47.300774093Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:47.303091242Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:47.305453909Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:47.308287174Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:47.311203631Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:47.315019056Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:47.318808984Z 78 PC: 168d3 | Find first file
2018-12-17T22:51:47.324696589Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:47.327782519Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:47.331123581Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:47.333947943Z 79 PC: 168e1 | Find next file
2018-12-17T22:51:47.337524471Z 37 PC: 16951 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:51:47.339230231Z 26 PC: 1695a | Set disk transfer address
2018-12-17T22:51:47.342953867Z 99 PC: 13726 | Get DBCS lead byte table pointer
2018-12-17T22:51:47.345057802Z 68 PC: 13740 | I/O control for devices (Set for = '')
2018-12-17T22:51:47.346857136Z 68 PC: 1374b | I/O control for devices (Set for = '')
2018-12-17T22:51:47.349519743Z 68 PC: 13756 | I/O control for devices (Set for = '')
2018-12-17T22:51:47.351310439Z 68 PC: 1375e | I/O control for devices (Set for = '��b���g�t�S3����[r�2��W�<t�<u�6�u����>��>W')
2018-12-17T22:51:47.353237445Z 48 PC: 13763 | Get DOS version
2018-12-17T22:51:47.355539784Z 64 PC: 139e5 | Write file or device (Write 27 bytes on handle 2)
2018-12-17T22:51:47.360442378Z 76 PC: 1474b | Terminate with return code (Return code = '0')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":10657,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:28:43.439793188Z 42 PC: 169ac | Get date 0x169ac: cmp dh, 6
0x169af: jne 0x169cc
0x169b1: mov byte ptr cs:[0x24], 0
0x169b7: mov al, byte ptr [0x24]
0x169ba: mov cx, 0x24
0x169bd: xor dx, dx
0x169bf: inc dx
0x169c0: mov bx, 0x90
0x169c3: int 0x26
0x169c5: inc byte ptr cs:[0x24]
0x169ca: jmp 0x169b7
0x169cc: ret
0x169cd: pushf
0x169ce: push es
0x169cf: mov ax, cs
0x169d1: mov es, ax
0x169d3: mov di, dx
0x169d5: mov byte ptr cs:[0x26], 0
0x169db: mov al, 0x5c
0x169dd: inc byte ptr es:[0x26]
2018-12-25T12:28:43.451133176Z 47 PC: 1680c | Get disk transfer address
2018-12-25T12:28:43.452384421Z 26 PC: 1681d | Set disk transfer address
2018-12-25T12:28:43.457768496Z 53 PC: 16822 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:28:43.470794613Z 37 PC: 16834 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:28:43.472078388Z 54 PC: 16868 | Get free disk space
2018-12-25T12:28:43.511259093Z 78 PC: 16a4c | Find first file
2018-12-25T12:28:43.52038347Z 78 PC: 168d3 | Find first file
2018-12-25T12:28:43.532623834Z 79 PC: 168e1 | Find next file
2018-12-25T12:28:43.536086239Z 79 PC: 168e1 | Find next file (See above)
2018-12-25T12:28:43.540054187Z 78 PC: 16a4c | Find first file (See above)
2018-12-25T12:28:43.54973137Z 54 PC: 16ade | Get free disk space
2018-12-25T12:28:43.552535418Z 67 PC: 16aff | Get or set file attributes
2018-12-25T12:28:43.558746505Z 61 PC: 16b0d | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-25T12:28:43.566138004Z 87 PC: 16b1a | Get or set file date and time
2018-12-25T12:28:43.567497527Z 66 PC: 16b34 | Move file pointer
2018-12-25T12:28:43.568822042Z 63 PC: 16b44 | Read file or device (Read 4 bytes on handle 5)
2018-12-25T12:28:43.575381566Z 67 PC: 16b62 | Get or set file attributes
2018-12-25T12:28:44.572927394Z 62 PC: 16b6c | Close file
2018-12-25T12:28:44.575005135Z 61 PC: 16b78 | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-25T12:28:44.583345751Z 66 PC: 16b95 | Move file pointer
2018-12-25T12:28:44.584981437Z 63 PC: 16ba1 | Read file or device (Read 28 bytes on handle 5)
2018-12-25T12:28:44.591487746Z 66 PC: 16c2d | Move file pointer
2018-12-25T12:28:44.594260571Z 64 PC: 16c39 | Write file or device (Write 28 bytes on handle 5)
2018-12-25T12:28:44.597190937Z 66 PC: 16c4c | Move file pointer
2018-12-25T12:28:44.598835517Z 64 PC: 16c5c | Write file or device (Write 1886 bytes on handle 5)
2018-12-25T12:28:44.628791561Z 87 PC: 16c79 | Get or set file date and time
2018-12-25T12:28:44.630262423Z 62 PC: 16c7d | Close file
2018-12-25T12:28:44.68903462Z 67 PC: 16c8c | Get or set file attributes
2018-12-25T12:28:44.774803076Z 78 PC: 16a4c | Find first file (See above)
2018-12-25T12:28:44.781162692Z 79 PC: 16a5a | Find next file
2018-12-25T12:28:44.7845084Z 54 PC: 16ade | Get free disk space (See above)
2018-12-25T12:28:44.788671466Z 67 PC: 16aff | Get or set file attributes (See above)
2018-12-25T12:28:44.805067594Z 61 PC: 16b0d | Open file (See above)
2018-12-25T12:28:44.822987823Z 87 PC: 16b1a | Get or set file date and time (See above)
2018-12-25T12:28:44.824995243Z 66 PC: 16b34 | Move file pointer (See above)
2018-12-25T12:28:44.826841857Z 63 PC: 16b44 | Read file or device (See above)
2018-12-25T12:28:44.840683177Z 67 PC: 16b62 | Get or set file attributes (See above)
2018-12-25T12:28:44.960127795Z 62 PC: 16b6c | Close file (See above)
2018-12-25T12:28:44.962217777Z 61 PC: 16b78 | Open file (See above)
2018-12-25T12:28:44.969688894Z 66 PC: 16b95 | Move file pointer (See above)
2018-12-25T12:28:44.979767812Z 63 PC: 16ba1 | Read file or device (See above)
2018-12-25T12:28:44.985746405Z 66 PC: 16c2d | Move file pointer (See above)
2018-12-25T12:28:44.987303251Z 64 PC: 16c39 | Write file or device (See above)
2018-12-25T12:28:44.990280157Z 66 PC: 16c4c | Move file pointer (See above)
2018-12-25T12:28:44.993793105Z 64 PC: 16c5c | Write file or device (See above)
2018-12-25T12:28:45.126811351Z 87 PC: 16c79 | Get or set file date and time (See above)
2018-12-25T12:28:45.128790204Z 62 PC: 16c7d | Close file (See above)
2018-12-25T12:28:45.170770814Z 67 PC: 16c8c | Get or set file attributes (See above)
2018-12-25T12:28:45.180591806Z 78 PC: 16a4c | Find first file (See above)
2018-12-25T12:28:45.187104175Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.191535739Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.194974711Z 54 PC: 16ade | Get free disk space (See above)
2018-12-25T12:28:45.19787543Z 67 PC: 16aff | Get or set file attributes (See above)
2018-12-25T12:28:45.205177626Z 61 PC: 16b0d | Open file (See above)
2018-12-25T12:28:45.212229973Z 87 PC: 16b1a | Get or set file date and time (See above)
2018-12-25T12:28:45.213934792Z 66 PC: 16b34 | Move file pointer (See above)
2018-12-25T12:28:45.216615889Z 63 PC: 16b44 | Read file or device (See above)
2018-12-25T12:28:45.222726329Z 67 PC: 16b62 | Get or set file attributes (See above)
2018-12-25T12:28:45.232415678Z 62 PC: 16b6c | Close file (See above)
2018-12-25T12:28:45.236193635Z 61 PC: 16b78 | Open file (See above)
2018-12-25T12:28:45.243583108Z 66 PC: 16b95 | Move file pointer (See above)
2018-12-25T12:28:45.245250421Z 63 PC: 16ba1 | Read file or device (See above)
2018-12-25T12:28:45.251838229Z 66 PC: 16c2d | Move file pointer (See above)
2018-12-25T12:28:45.253799439Z 64 PC: 16c39 | Write file or device (See above)
2018-12-25T12:28:45.256742142Z 66 PC: 16c4c | Move file pointer (See above)
2018-12-25T12:28:45.259128031Z 64 PC: 16c5c | Write file or device (See above)
2018-12-25T12:28:45.268045715Z 87 PC: 16c79 | Get or set file date and time (See above)
2018-12-25T12:28:45.269813139Z 62 PC: 16c7d | Close file (See above)
2018-12-25T12:28:45.277494361Z 67 PC: 16c8c | Get or set file attributes (See above)
2018-12-25T12:28:45.287527262Z 78 PC: 16a4c | Find first file (See above)
2018-12-25T12:28:45.29396369Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.297426789Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.301499352Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.305651366Z 54 PC: 16ade | Get free disk space (See above)
2018-12-25T12:28:45.308535775Z 67 PC: 16aff | Get or set file attributes (See above)
2018-12-25T12:28:45.315731813Z 61 PC: 16b0d | Open file (See above)
2018-12-25T12:28:45.322778904Z 87 PC: 16b1a | Get or set file date and time (See above)
2018-12-25T12:28:45.324483264Z 66 PC: 16b34 | Move file pointer (See above)
2018-12-25T12:28:45.327160447Z 63 PC: 16b44 | Read file or device (See above)
2018-12-25T12:28:45.333207508Z 67 PC: 16b62 | Get or set file attributes (See above)
2018-12-25T12:28:45.342901061Z 62 PC: 16b6c | Close file (See above)
2018-12-25T12:28:45.346042308Z 61 PC: 16b78 | Open file (See above)
2018-12-25T12:28:45.353055659Z 66 PC: 16b95 | Move file pointer (See above)
2018-12-25T12:28:45.354653622Z 63 PC: 16ba1 | Read file or device (See above)
2018-12-25T12:28:45.361116605Z 66 PC: 16c2d | Move file pointer (See above)
2018-12-25T12:28:45.36307109Z 64 PC: 16c39 | Write file or device (See above)
2018-12-25T12:28:45.365931183Z 66 PC: 16c4c | Move file pointer (See above)
2018-12-25T12:28:45.368323465Z 64 PC: 16c5c | Write file or device (See above)
2018-12-25T12:28:45.377183617Z 87 PC: 16c79 | Get or set file date and time (See above)
2018-12-25T12:28:45.378921835Z 62 PC: 16c7d | Close file (See above)
2018-12-25T12:28:45.38682375Z 67 PC: 16c8c | Get or set file attributes (See above)
2018-12-25T12:28:45.396630917Z 78 PC: 16a4c | Find first file (See above)
2018-12-25T12:28:45.403123048Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.407214454Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.41091385Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.414255716Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.417679365Z 54 PC: 16ade | Get free disk space (See above)
2018-12-25T12:28:45.42062309Z 67 PC: 16aff | Get or set file attributes (See above)
2018-12-25T12:28:45.426833901Z 61 PC: 16b0d | Open file (See above)
2018-12-25T12:28:45.434138904Z 87 PC: 16b1a | Get or set file date and time (See above)
2018-12-25T12:28:45.436552252Z 66 PC: 16b34 | Move file pointer (See above)
2018-12-25T12:28:45.438295225Z 63 PC: 16b44 | Read file or device (See above)
2018-12-25T12:28:45.444960288Z 67 PC: 16b62 | Get or set file attributes (See above)
2018-12-25T12:28:45.455100183Z 62 PC: 16b6c | Close file (See above)
2018-12-25T12:28:45.456771525Z 61 PC: 16b78 | Open file (See above)
2018-12-25T12:28:45.463455195Z 66 PC: 16b95 | Move file pointer (See above)
2018-12-25T12:28:45.465420975Z 63 PC: 16ba1 | Read file or device (See above)
2018-12-25T12:28:45.470965543Z 66 PC: 16c2d | Move file pointer (See above)
2018-12-25T12:28:45.472232391Z 64 PC: 16c39 | Write file or device (See above)
2018-12-25T12:28:45.475839967Z 66 PC: 16c4c | Move file pointer (See above)
2018-12-25T12:28:45.477112456Z 64 PC: 16c5c | Write file or device (See above)
2018-12-25T12:28:45.48819306Z 87 PC: 16c79 | Get or set file date and time (See above)
2018-12-25T12:28:45.491060819Z 62 PC: 16c7d | Close file (See above)
2018-12-25T12:28:45.497738951Z 67 PC: 16c8c | Get or set file attributes (See above)
2018-12-25T12:28:45.507494618Z 78 PC: 16a4c | Find first file (See above)
2018-12-25T12:28:45.512382212Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.514316449Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.516241621Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.518673796Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.520701025Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.522800582Z 54 PC: 16ade | Get free disk space (See above)
2018-12-25T12:28:45.525036478Z 67 PC: 16aff | Get or set file attributes (See above)
2018-12-25T12:28:45.528822853Z 61 PC: 16b0d | Open file (See above)
2018-12-25T12:28:45.533193987Z 87 PC: 16b1a | Get or set file date and time (See above)
2018-12-25T12:28:45.534910436Z 66 PC: 16b34 | Move file pointer (See above)
2018-12-25T12:28:45.535940557Z 63 PC: 16b44 | Read file or device (See above)
2018-12-25T12:28:45.539622529Z 67 PC: 16b62 | Get or set file attributes (See above)
2018-12-25T12:28:45.545975133Z 62 PC: 16b6c | Close file (See above)
2018-12-25T12:28:45.547297648Z 61 PC: 16b78 | Open file (See above)
2018-12-25T12:28:45.551711598Z 66 PC: 16b95 | Move file pointer (See above)
2018-12-25T12:28:45.554080938Z 63 PC: 16ba1 | Read file or device (See above)
2018-12-25T12:28:45.559838475Z 66 PC: 16c2d | Move file pointer (See above)
2018-12-25T12:28:45.560973075Z 64 PC: 16c39 | Write file or device (See above)
2018-12-25T12:28:45.563767003Z 66 PC: 16c4c | Move file pointer (See above)
2018-12-25T12:28:45.564901948Z 64 PC: 16c5c | Write file or device (See above)
2018-12-25T12:28:45.572682593Z 87 PC: 16c79 | Get or set file date and time (See above)
2018-12-25T12:28:45.575462775Z 62 PC: 16c7d | Close file (See above)
2018-12-25T12:28:45.590086291Z 67 PC: 16c8c | Get or set file attributes (See above)
2018-12-25T12:28:45.599685161Z 78 PC: 16a4c | Find first file (See above)
2018-12-25T12:28:45.610213821Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.61326997Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.616212496Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.619549295Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.622646251Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.625563555Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.631938529Z 54 PC: 16ade | Get free disk space (See above)
2018-12-25T12:28:45.634574909Z 67 PC: 16aff | Get or set file attributes (See above)
2018-12-25T12:28:45.641640157Z 61 PC: 16b0d | Open file (See above)
2018-12-25T12:28:45.649049214Z 87 PC: 16b1a | Get or set file date and time (See above)
2018-12-25T12:28:45.650218091Z 66 PC: 16b34 | Move file pointer (See above)
2018-12-25T12:28:45.651628938Z 63 PC: 16b44 | Read file or device (See above)
2018-12-25T12:28:45.657578371Z 67 PC: 16b62 | Get or set file attributes (See above)
2018-12-25T12:28:45.667025241Z 62 PC: 16b6c | Close file (See above)
2018-12-25T12:28:45.668888594Z 61 PC: 16b78 | Open file (See above)
2018-12-25T12:28:45.676772314Z 66 PC: 16b95 | Move file pointer (See above)
2018-12-25T12:28:45.678289919Z 63 PC: 16ba1 | Read file or device (See above)
2018-12-25T12:28:45.683794504Z 66 PC: 16c2d | Move file pointer (See above)
2018-12-25T12:28:45.686547776Z 64 PC: 16c39 | Write file or device (See above)
2018-12-25T12:28:45.689247535Z 66 PC: 16c4c | Move file pointer (See above)
2018-12-25T12:28:45.690717462Z 64 PC: 16c5c | Write file or device (See above)
2018-12-25T12:28:45.699693913Z 87 PC: 16c79 | Get or set file date and time (See above)
2018-12-25T12:28:45.701293042Z 62 PC: 16c7d | Close file (See above)
2018-12-25T12:28:45.708838986Z 67 PC: 16c8c | Get or set file attributes (See above)
2018-12-25T12:28:45.718982182Z 78 PC: 16a4c | Find first file (See above)
2018-12-25T12:28:45.725162746Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.728475145Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.73266145Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.736039554Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.739769374Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.742860538Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.745876214Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.749564882Z 54 PC: 16ade | Get free disk space (See above)
2018-12-25T12:28:45.752205153Z 67 PC: 16aff | Get or set file attributes (See above)
2018-12-25T12:28:45.7603943Z 61 PC: 16b0d | Open file (See above)
2018-12-25T12:28:45.76746036Z 87 PC: 16b1a | Get or set file date and time (See above)
2018-12-25T12:28:45.768606039Z 66 PC: 16b34 | Move file pointer (See above)
2018-12-25T12:28:45.769641753Z 63 PC: 16b44 | Read file or device (See above)
2018-12-25T12:28:45.776827402Z 67 PC: 16b62 | Get or set file attributes (See above)
2018-12-25T12:28:45.785917569Z 62 PC: 16b6c | Close file (See above)
2018-12-25T12:28:45.787339657Z 61 PC: 16b78 | Open file (See above)
2018-12-25T12:28:45.794304494Z 66 PC: 16b95 | Move file pointer (See above)
2018-12-25T12:28:45.795446105Z 63 PC: 16ba1 | Read file or device (See above)
2018-12-25T12:28:45.800624966Z 66 PC: 16c2d | Move file pointer (See above)
2018-12-25T12:28:45.80221038Z 64 PC: 16c39 | Write file or device (See above)
2018-12-25T12:28:45.804481837Z 66 PC: 16c4c | Move file pointer (See above)
2018-12-25T12:28:45.805495194Z 64 PC: 16c5c | Write file or device (See above)
2018-12-25T12:28:45.813259975Z 87 PC: 16c79 | Get or set file date and time (See above)
2018-12-25T12:28:45.814371917Z 62 PC: 16c7d | Close file (See above)
2018-12-25T12:28:45.827248421Z 67 PC: 16c8c | Get or set file attributes (See above)
2018-12-25T12:28:45.837698516Z 78 PC: 16a4c | Find first file (See above)
2018-12-25T12:28:45.843533391Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.846594945Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.849832073Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.852754626Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.856172798Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.859287876Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.862467025Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.86609156Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.869394475Z 54 PC: 16ade | Get free disk space (See above)
2018-12-25T12:28:45.872053269Z 67 PC: 16aff | Get or set file attributes (See above)
2018-12-25T12:28:45.878421592Z 61 PC: 16b0d | Open file (See above)
2018-12-25T12:28:45.885112861Z 87 PC: 16b1a | Get or set file date and time (See above)
2018-12-25T12:28:45.886660479Z 66 PC: 16b34 | Move file pointer (See above)
2018-12-25T12:28:45.888543398Z 63 PC: 16b44 | Read file or device (See above)
2018-12-25T12:28:45.894017268Z 67 PC: 16b62 | Get or set file attributes (See above)
2018-12-25T12:28:45.903844241Z 62 PC: 16b6c | Close file (See above)
2018-12-25T12:28:45.905849406Z 61 PC: 16b78 | Open file (See above)
2018-12-25T12:28:45.919286899Z 66 PC: 16b95 | Move file pointer (See above)
2018-12-25T12:28:45.920775167Z 63 PC: 16ba1 | Read file or device (See above)
2018-12-25T12:28:45.926707961Z 66 PC: 16c2d | Move file pointer (See above)
2018-12-25T12:28:45.927886189Z 64 PC: 16c39 | Write file or device (See above)
2018-12-25T12:28:45.93017542Z 66 PC: 16c4c | Move file pointer (See above)
2018-12-25T12:28:45.931897104Z 64 PC: 16c5c | Write file or device (See above)
2018-12-25T12:28:45.939753762Z 87 PC: 16c79 | Get or set file date and time (See above)
2018-12-25T12:28:45.941459444Z 62 PC: 16c7d | Close file (See above)
2018-12-25T12:28:45.948805588Z 67 PC: 16c8c | Get or set file attributes (See above)
2018-12-25T12:28:45.95847981Z 78 PC: 16a4c | Find first file (See above)
2018-12-25T12:28:45.966408549Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.969510905Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.973072869Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.976422987Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.979209808Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.981967654Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.985139635Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.987937442Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.99072239Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:45.994020605Z 54 PC: 16ade | Get free disk space (See above)
2018-12-25T12:28:45.996444913Z 67 PC: 16aff | Get or set file attributes (See above)
2018-12-25T12:28:46.002517293Z 61 PC: 16b0d | Open file (See above)
2018-12-25T12:28:46.009649751Z 87 PC: 16b1a | Get or set file date and time (See above)
2018-12-25T12:28:46.010801521Z 66 PC: 16b34 | Move file pointer (See above)
2018-12-25T12:28:46.01184515Z 63 PC: 16b44 | Read file or device (See above)
2018-12-25T12:28:46.018317381Z 67 PC: 16b62 | Get or set file attributes (See above)
2018-12-25T12:28:46.028693922Z 62 PC: 16b6c | Close file (See above)
2018-12-25T12:28:46.030361924Z 61 PC: 16b78 | Open file (See above)
2018-12-25T12:28:46.037232936Z 66 PC: 16b95 | Move file pointer (See above)
2018-12-25T12:28:46.038408421Z 63 PC: 16ba1 | Read file or device (See above)
2018-12-25T12:28:46.043451719Z 66 PC: 16c2d | Move file pointer (See above)
2018-12-25T12:28:46.044751948Z 64 PC: 16c39 | Write file or device (See above)
2018-12-25T12:28:46.04757841Z 66 PC: 16c4c | Move file pointer (See above)
2018-12-25T12:28:46.048866906Z 64 PC: 16c5c | Write file or device (See above)
2018-12-25T12:28:46.057054518Z 87 PC: 16c79 | Get or set file date and time (See above)
2018-12-25T12:28:46.058831656Z 62 PC: 16c7d | Close file (See above)
2018-12-25T12:28:46.067128548Z 67 PC: 16c8c | Get or set file attributes (See above)
2018-12-25T12:28:46.076606267Z 78 PC: 16a4c | Find first file (See above)
2018-12-25T12:28:46.082824025Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.086379651Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.089245637Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.092131271Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.096378087Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.099568204Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.102859994Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.106662341Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.109478906Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.11228555Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.116508316Z 54 PC: 16ade | Get free disk space (See above)
2018-12-25T12:28:46.118892Z 67 PC: 16aff | Get or set file attributes (See above)
2018-12-25T12:28:46.124648068Z 61 PC: 16b0d | Open file (See above)
2018-12-25T12:28:46.135485906Z 87 PC: 16b1a | Get or set file date and time (See above)
2018-12-25T12:28:46.137493306Z 66 PC: 16b34 | Move file pointer (See above)
2018-12-25T12:28:46.139073728Z 63 PC: 16b44 | Read file or device (See above)
2018-12-25T12:28:46.146352576Z 67 PC: 16b62 | Get or set file attributes (See above)
2018-12-25T12:28:46.160161194Z 62 PC: 16b6c | Close file (See above)
2018-12-25T12:28:46.161754885Z 61 PC: 16b78 | Open file (See above)
2018-12-25T12:28:46.169653359Z 66 PC: 16b95 | Move file pointer (See above)
2018-12-25T12:28:46.171017413Z 63 PC: 16ba1 | Read file or device (See above)
2018-12-25T12:28:46.176579619Z 66 PC: 16c2d | Move file pointer (See above)
2018-12-25T12:28:46.178214692Z 64 PC: 16c39 | Write file or device (See above)
2018-12-25T12:28:46.180639977Z 66 PC: 16c4c | Move file pointer (See above)
2018-12-25T12:28:46.181824224Z 64 PC: 16c5c | Write file or device (See above)
2018-12-25T12:28:46.189987212Z 87 PC: 16c79 | Get or set file date and time (See above)
2018-12-25T12:28:46.191356606Z 62 PC: 16c7d | Close file (See above)
2018-12-25T12:28:46.19814013Z 67 PC: 16c8c | Get or set file attributes (See above)
2018-12-25T12:28:46.207661881Z 78 PC: 16a4c | Find first file (See above)
2018-12-25T12:28:46.213708408Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.216970433Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.219963497Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.222672709Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.225935639Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.228688413Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.232153481Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.235324963Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.237662724Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.239538535Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.241614939Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.243631298Z 54 PC: 16ade | Get free disk space (See above)
2018-12-25T12:28:46.245545426Z 67 PC: 16aff | Get or set file attributes (See above)
2018-12-25T12:28:46.249602329Z 61 PC: 16b0d | Open file (See above)
2018-12-25T12:28:46.253669892Z 87 PC: 16b1a | Get or set file date and time (See above)
2018-12-25T12:28:46.255677995Z 66 PC: 16b34 | Move file pointer (See above)
2018-12-25T12:28:46.256673967Z 63 PC: 16b44 | Read file or device (See above)
2018-12-25T12:28:46.260399349Z 67 PC: 16b62 | Get or set file attributes (See above)
2018-12-25T12:28:46.267719704Z 62 PC: 16b6c | Close file (See above)
2018-12-25T12:28:46.269681107Z 61 PC: 16b78 | Open file (See above)
2018-12-25T12:28:46.274967345Z 66 PC: 16b95 | Move file pointer (See above)
2018-12-25T12:28:46.277264225Z 63 PC: 16ba1 | Read file or device (See above)
2018-12-25T12:28:46.282845098Z 66 PC: 16c2d | Move file pointer (See above)
2018-12-25T12:28:46.284323258Z 64 PC: 16c39 | Write file or device (See above)
2018-12-25T12:28:46.28819466Z 66 PC: 16c4c | Move file pointer (See above)
2018-12-25T12:28:46.289420189Z 64 PC: 16c5c | Write file or device (See above)
2018-12-25T12:28:46.297001282Z 87 PC: 16c79 | Get or set file date and time (See above)
2018-12-25T12:28:46.298445641Z 62 PC: 16c7d | Close file (See above)
2018-12-25T12:28:46.305652504Z 67 PC: 16c8c | Get or set file attributes (See above)
2018-12-25T12:28:46.315170036Z 78 PC: 16a4c | Find first file (See above)
2018-12-25T12:28:46.321139253Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.323779393Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.330246067Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.332980707Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.335754177Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.339107765Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.341896672Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.344690657Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.348213622Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.351065361Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.354056316Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.359561573Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.362395108Z 54 PC: 16ade | Get free disk space (See above)
2018-12-25T12:28:46.365220649Z 67 PC: 16aff | Get or set file attributes (See above)
2018-12-25T12:28:46.371877294Z 61 PC: 16b0d | Open file (See above)
2018-12-25T12:28:46.378782473Z 87 PC: 16b1a | Get or set file date and time (See above)
2018-12-25T12:28:46.381693159Z 66 PC: 16b34 | Move file pointer (See above)
2018-12-25T12:28:46.383281805Z 63 PC: 16b44 | Read file or device (See above)
2018-12-25T12:28:46.389251361Z 67 PC: 16b62 | Get or set file attributes (See above)
2018-12-25T12:28:46.399489574Z 62 PC: 16b6c | Close file (See above)
2018-12-25T12:28:46.400766258Z 61 PC: 16b78 | Open file (See above)
2018-12-25T12:28:46.404926559Z 66 PC: 16b95 | Move file pointer (See above)
2018-12-25T12:28:46.406903456Z 63 PC: 16ba1 | Read file or device (See above)
2018-12-25T12:28:46.410229312Z 66 PC: 16c2d | Move file pointer (See above)
2018-12-25T12:28:46.411140268Z 64 PC: 16c39 | Write file or device (See above)
2018-12-25T12:28:46.413285354Z 66 PC: 16c4c | Move file pointer (See above)
2018-12-25T12:28:46.414515414Z 64 PC: 16c5c | Write file or device (See above)
2018-12-25T12:28:46.422310398Z 87 PC: 16c79 | Get or set file date and time (See above)
2018-12-25T12:28:46.426894464Z 62 PC: 16c7d | Close file (See above)
2018-12-25T12:28:46.434079062Z 67 PC: 16c8c | Get or set file attributes (See above)
2018-12-25T12:28:46.445272204Z 78 PC: 16a4c | Find first file (See above)
2018-12-25T12:28:46.451391953Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.454277766Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.45768624Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.460585125Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.463506338Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.46701302Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.46998668Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.473462084Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.476516118Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.479369335Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.482663486Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.485598728Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.488655084Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.492567028Z 54 PC: 16ade | Get free disk space (See above)
2018-12-25T12:28:46.495292525Z 67 PC: 16aff | Get or set file attributes (See above)
2018-12-25T12:28:46.501490867Z 61 PC: 16b0d | Open file (See above)
2018-12-25T12:28:46.510220197Z 87 PC: 16b1a | Get or set file date and time (See above)
2018-12-25T12:28:46.511739985Z 66 PC: 16b34 | Move file pointer (See above)
2018-12-25T12:28:46.513522767Z 63 PC: 16b44 | Read file or device (See above)
2018-12-25T12:28:46.520780271Z 67 PC: 16b62 | Get or set file attributes (See above)
2018-12-25T12:28:46.530432461Z 62 PC: 16b6c | Close file (See above)
2018-12-25T12:28:46.532264358Z 61 PC: 16b78 | Open file (See above)
2018-12-25T12:28:46.539018576Z 66 PC: 16b95 | Move file pointer (See above)
2018-12-25T12:28:46.540321528Z 63 PC: 16ba1 | Read file or device (See above)
2018-12-25T12:28:46.546345677Z 66 PC: 16c2d | Move file pointer (See above)
2018-12-25T12:28:46.547606376Z 64 PC: 16c39 | Write file or device (See above)
2018-12-25T12:28:46.550175923Z 66 PC: 16c4c | Move file pointer (See above)
2018-12-25T12:28:46.551962337Z 64 PC: 16c5c | Write file or device (See above)
2018-12-25T12:28:46.559673819Z 87 PC: 16c79 | Get or set file date and time (See above)
2018-12-25T12:28:46.560997083Z 62 PC: 16c7d | Close file (See above)
2018-12-25T12:28:46.567495301Z 67 PC: 16c8c | Get or set file attributes (See above)
2018-12-25T12:28:46.577670017Z 78 PC: 16a4c | Find first file (See above)
2018-12-25T12:28:46.584026975Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.586959937Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.589753095Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.593033145Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.595857326Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.5987855Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.602129168Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.604860057Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.60732823Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.611743875Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.61466217Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.617671002Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.620918869Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.623879927Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.630724104Z 54 PC: 16ade | Get free disk space (See above)
2018-12-25T12:28:46.633195503Z 67 PC: 16aff | Get or set file attributes (See above)
2018-12-25T12:28:46.639650884Z 61 PC: 16b0d | Open file (See above)
2018-12-25T12:28:46.646675703Z 87 PC: 16b1a | Get or set file date and time (See above)
2018-12-25T12:28:46.647852928Z 66 PC: 16b34 | Move file pointer (See above)
2018-12-25T12:28:46.648926507Z 63 PC: 16b44 | Read file or device (See above)
2018-12-25T12:28:46.655710396Z 67 PC: 16b62 | Get or set file attributes (See above)
2018-12-25T12:28:46.665365977Z 62 PC: 16b6c | Close file (See above)
2018-12-25T12:28:46.666470487Z 61 PC: 16b78 | Open file (See above)
2018-12-25T12:28:46.670982371Z 66 PC: 16b95 | Move file pointer (See above)
2018-12-25T12:28:46.67248514Z 63 PC: 16ba1 | Read file or device (See above)
2018-12-25T12:28:46.67787896Z 66 PC: 16c2d | Move file pointer (See above)
2018-12-25T12:28:46.679194423Z 64 PC: 16c39 | Write file or device (See above)
2018-12-25T12:28:46.681905482Z 66 PC: 16c4c | Move file pointer (See above)
2018-12-25T12:28:46.684133253Z 64 PC: 16c5c | Write file or device (See above)
2018-12-25T12:28:46.691297146Z 87 PC: 16c79 | Get or set file date and time (See above)
2018-12-25T12:28:46.69261812Z 62 PC: 16c7d | Close file (See above)
2018-12-25T12:28:46.699401995Z 67 PC: 16c8c | Get or set file attributes (See above)
2018-12-25T12:28:46.709673407Z 78 PC: 16a4c | Find first file (See above)
2018-12-25T12:28:46.715622313Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.718806631Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.72163377Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.724382338Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.727861168Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.730633562Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.733571042Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.737074031Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.73990828Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.743447777Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.746287909Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.749127315Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.752745586Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.755597351Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.758927827Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.76278784Z 54 PC: 16ade | Get free disk space (See above)
2018-12-25T12:28:46.766918811Z 67 PC: 16aff | Get or set file attributes (See above)
2018-12-25T12:28:46.773741227Z 61 PC: 16b0d | Open file (See above)
2018-12-25T12:28:46.781344705Z 87 PC: 16b1a | Get or set file date and time (See above)
2018-12-25T12:28:46.782994736Z 66 PC: 16b34 | Move file pointer (See above)
2018-12-25T12:28:46.784250496Z 63 PC: 16b44 | Read file or device (See above)
2018-12-25T12:28:46.790707192Z 67 PC: 16b62 | Get or set file attributes (See above)
2018-12-25T12:28:46.800127705Z 62 PC: 16b6c | Close file (See above)
2018-12-25T12:28:46.801747499Z 61 PC: 16b78 | Open file (See above)
2018-12-25T12:28:46.809019469Z 66 PC: 16b95 | Move file pointer (See above)
2018-12-25T12:28:46.817086511Z 63 PC: 16ba1 | Read file or device (See above)
2018-12-25T12:28:46.824031455Z 66 PC: 16c2d | Move file pointer (See above)
2018-12-25T12:28:46.825441804Z 64 PC: 16c39 | Write file or device (See above)
2018-12-25T12:28:46.828548253Z 66 PC: 16c4c | Move file pointer (See above)
2018-12-25T12:28:46.831106723Z 64 PC: 16c5c | Write file or device (See above)
2018-12-25T12:28:46.839388975Z 87 PC: 16c79 | Get or set file date and time (See above)
2018-12-25T12:28:46.840745955Z 62 PC: 16c7d | Close file (See above)
2018-12-25T12:28:46.847572968Z 67 PC: 16c8c | Get or set file attributes (See above)
2018-12-25T12:28:46.857383834Z 78 PC: 16a4c | Find first file (See above)
2018-12-25T12:28:46.863934886Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.868358559Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.871418852Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.874856936Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.878600546Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.882255038Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.88604639Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.8889005Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.891695342Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.89553925Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.898510228Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.901826184Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.904957877Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.908542474Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.912261178Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.915272925Z 79 PC: 16a5a | Find next file (See above)
2018-12-25T12:28:46.91817805Z 78 PC: 168d3 | Find first file (See above)
2018-12-25T12:28:46.924529697Z 79 PC: 168e1 | Find next file (See above)
2018-12-25T12:28:46.927558313Z 79 PC: 168e1 | Find next file (See above)
2018-12-25T12:28:46.930329189Z 79 PC: 168e1 | Find next file (See above)
2018-12-25T12:28:46.934486674Z 79 PC: 168e1 | Find next file (See above)
2018-12-25T12:28:46.937412677Z 79 PC: 168e1 | Find next file (See above)
2018-12-25T12:28:46.940674354Z 79 PC: 168e1 | Find next file (See above)
2018-12-25T12:28:46.944481035Z 79 PC: 168e1 | Find next file (See above)
2018-12-25T12:28:46.947377144Z 79 PC: 168e1 | Find next file (See above)
2018-12-25T12:28:46.954262889Z 79 PC: 168e1 | Find next file (See above)
2018-12-25T12:28:46.95785418Z 79 PC: 168e1 | Find next file (See above)
2018-12-25T12:28:46.961134404Z 79 PC: 168e1 | Find next file (See above)
2018-12-25T12:28:46.965233255Z 79 PC: 168e1 | Find next file (See above)
2018-12-25T12:28:46.968348528Z 79 PC: 168e1 | Find next file (See above)
2018-12-25T12:28:46.971927884Z 79 PC: 168e1 | Find next file (See above)
2018-12-25T12:28:46.976587077Z 79 PC: 168e1 | Find next file (See above)
2018-12-25T12:28:46.980589784Z 79 PC: 168e1 | Find next file (See above)
2018-12-25T12:28:46.984827072Z 79 PC: 168e1 | Find next file (See above)
2018-12-25T12:28:46.988322456Z 79 PC: 168e1 | Find next file (See above)
2018-12-25T12:28:46.991206045Z 79 PC: 168e1 | Find next file (See above)
2018-12-25T12:28:46.995296849Z 79 PC: 168e1 | Find next file (See above)
2018-12-25T12:28:46.998362063Z 79 PC: 168e1 | Find next file (See above)
2018-12-25T12:28:47.001374049Z 79 PC: 168e1 | Find next file (See above)
2018-12-25T12:28:47.005211217Z 79 PC: 168e1 | Find next file (See above)
2018-12-25T12:28:47.007993642Z 79 PC: 168e1 | Find next file (See above)
2018-12-25T12:28:47.010918819Z 79 PC: 168e1 | Find next file (See above)
2018-12-25T12:28:47.014015767Z 79 PC: 168e1 | Find next file (See above)
2018-12-25T12:28:47.016745425Z 79 PC: 168e1 | Find next file (See above)
2018-12-25T12:28:47.020285677Z 79 PC: 168e1 | Find next file (See above)
2018-12-25T12:28:47.023640914Z 79 PC: 168e1 | Find next file (See above)
2018-12-25T12:28:47.026953539Z 79 PC: 168e1 | Find next file (See above)
2018-12-25T12:28:47.031108173Z 79 PC: 168e1 | Find next file (See above)
2018-12-25T12:28:47.034815542Z 79 PC: 168e1 | Find next file (See above)
2018-12-25T12:28:47.038109834Z 79 PC: 168e1 | Find next file (See above)
2018-12-25T12:28:47.042398266Z 79 PC: 168e1 | Find next file (See above)
2018-12-25T12:28:47.045646982Z 79 PC: 168e1 | Find next file (See above)
2018-12-25T12:28:47.049047488Z 79 PC: 168e1 | Find next file (See above)
2018-12-25T12:28:47.052781132Z 79 PC: 168e1 | Find next file (See above)
2018-12-25T12:28:47.056598056Z 78 PC: 168d3 | Find first file (See above)
2018-12-25T12:28:47.062531225Z 79 PC: 168e1 | Find next file (See above)
2018-12-25T12:28:47.064880687Z 79 PC: 168e1 | Find next file (See above)
2018-12-25T12:28:47.067221732Z 79 PC: 168e1 | Find next file (See above)
2018-12-25T12:28:47.070153025Z 79 PC: 168e1 | Find next file (See above)
2018-12-25T12:28:47.073079316Z 37 PC: 16951 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:28:47.074488869Z 26 PC: 1695a | Set disk transfer address
2018-12-25T12:28:47.077975501Z 99 PC: 13726 | Get DBCS lead byte table pointer
2018-12-25T12:28:47.079476209Z 68 PC: 13740 | I/O control for devices (Set for = '')
2018-12-25T12:28:47.081880748Z 68 PC: 1374b | I/O control for devices (Set for = '')
2018-12-25T12:28:47.08371894Z 68 PC: 13756 | I/O control for devices (Set for = '')
2018-12-25T12:28:47.085285371Z 68 PC: 1375e | I/O control for devices (Set for = '��b���g�t�S3����[r�2��W�<t�<u�6�u����>��>W')
2018-12-25T12:28:47.087269238Z 48 PC: 13763 | Get DOS version
2018-12-25T12:28:47.088962566Z 64 PC: 139e5 | Write file or device (Write 27 bytes on handle 2)
2018-12-25T12:28:47.094407347Z 76 PC: 1474b | Terminate with return code (Return code = '0')

{"DateBased":true,"Day":1,"Month":6,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":10657,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:28:43.491105366Z 42 PC: 169ac | Get date 0x169ac: cmp dh, 6
0x169af: jne 0x169cc
0x169b1: mov byte ptr cs:[0x24], 0
0x169b7: mov al, byte ptr [0x24]
0x169ba: mov cx, 0x24
0x169bd: xor dx, dx
0x169bf: inc dx
0x169c0: mov bx, 0x90
0x169c3: int 0x26
0x169c5: inc byte ptr cs:[0x24]
0x169ca: jmp 0x169b7
0x169cc: ret
0x169cd: pushf
0x169ce: push es
0x169cf: mov ax, cs
0x169d1: mov es, ax
0x169d3: mov di, dx
0x169d5: mov byte ptr cs:[0x26], 0
0x169db: mov al, 0x5c
0x169dd: inc byte ptr es:[0x26]