Sample viewer

vx.netlux.org/Virus.DOS.Weed.4080.b

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:54:46.141881444Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:46.149792045Z 65 PC: 132c0 | Delete file (Filename = 'chklist.ms')
2018-12-17T22:54:46.156639176Z 98 PC: 18c74 | Get current PSP
2018-12-17T22:54:46.158674494Z 26 PC: 12b4e | Set disk transfer address
2018-12-17T22:54:46.160248014Z 78 PC: 12b60 | Find first file
2018-12-17T22:54:46.167676019Z 67 PC: 13120 | Get or set file attributes
2018-12-17T22:54:46.174292936Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:46.194435267Z 61 PC: 132ee | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:54:46.204890785Z 63 PC: 13390 | Read file or device (Read 4080 bytes on handle 5)
2018-12-17T22:54:46.214186363Z 62 PC: 133d6 | Close file
2018-12-17T22:54:46.216812843Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:46.231857455Z 47 PC: 188e5 | Get disk transfer address
2018-12-17T22:54:46.239290497Z 26 PC: 188f0 | Set disk transfer address
2018-12-17T22:54:46.240958776Z 78 PC: 188fc | Find first file
2018-12-17T22:54:46.248673799Z 26 PC: 1890e | Set disk transfer address
2018-12-17T22:54:46.250881893Z 67 PC: 13120 | Get or set file attributes
2018-12-17T22:54:46.257470097Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:46.268828193Z 61 PC: 13531 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:54:46.277127405Z 66 PC: 13561 | Move file pointer
2018-12-17T22:54:46.287403897Z 63 PC: 13596 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:54:46.295567825Z 63 PC: 13596 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:54:46.298943646Z 63 PC: 13596 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:54:46.30266167Z 63 PC: 13596 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:54:46.306213882Z 62 PC: 1360e | Close file
2018-12-17T22:54:46.308630809Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:46.318733584Z 47 PC: 18922 | Get disk transfer address
2018-12-17T22:54:46.319940985Z 26 PC: 1892d | Set disk transfer address
2018-12-17T22:54:46.332392538Z 79 PC: 18931 | Find next file
2018-12-17T22:54:46.33614095Z 26 PC: 18941 | Set disk transfer address
2018-12-17T22:54:46.338595347Z 47 PC: 188e5 | Get disk transfer address
2018-12-17T22:54:46.343693729Z 26 PC: 188f0 | Set disk transfer address
2018-12-17T22:54:46.346095697Z 78 PC: 188fc | Find first file
2018-12-17T22:54:46.366270429Z 26 PC: 1890e | Set disk transfer address
2018-12-17T22:54:46.371158534Z 67 PC: 13120 | Get or set file attributes
2018-12-17T22:54:46.37777971Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:46.388624211Z 61 PC: 13531 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:54:46.39733141Z 66 PC: 13561 | Move file pointer
2018-12-17T22:54:46.399217568Z 63 PC: 13596 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:54:46.40639999Z 63 PC: 13596 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:54:46.409952583Z 63 PC: 13596 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:54:46.413063956Z 63 PC: 13596 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:54:46.416114524Z 62 PC: 1360e | Close file
2018-12-17T22:54:46.418365398Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:46.434001834Z 26 PC: 1300b | Set disk transfer address
2018-12-17T22:54:46.435773587Z 78 PC: 1301d | Find first file
2018-12-17T22:54:46.458475122Z 67 PC: 13120 | Get or set file attributes
2018-12-17T22:54:46.46571951Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:46.476890916Z 61 PC: 132ee | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:54:46.485064141Z 87 PC: 1321a | Get or set file date and time
2018-12-17T22:54:46.488139206Z 63 PC: 13390 | Read file or device (Read 4080 bytes on handle 5)
2018-12-17T22:54:46.491614814Z 66 PC: 18abb | Move file pointer
2018-12-17T22:54:46.494114406Z 64 PC: 1333a | Write file or device (Write 4080 bytes on handle 5)
2018-12-17T22:54:46.505154173Z 66 PC: 18abb | Move file pointer
2018-12-17T22:54:46.51365231Z 64 PC: 1333a | Write file or device (Write 4080 bytes on handle 5)
2018-12-17T22:54:46.524764454Z 87 PC: 1327c | Get or set file date and time
2018-12-17T22:54:46.534431239Z 62 PC: 133d6 | Close file
2018-12-17T22:54:46.543909519Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:46.555107905Z 47 PC: 18922 | Get disk transfer address
2018-12-17T22:54:46.556607447Z 26 PC: 1892d | Set disk transfer address
2018-12-17T22:54:46.558451476Z 79 PC: 18931 | Find next file
2018-12-17T22:54:46.561808381Z 26 PC: 18941 | Set disk transfer address
2018-12-17T22:54:46.564068192Z 67 PC: 13120 | Get or set file attributes
2018-12-17T22:54:46.571783776Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:46.582744294Z 61 PC: 13531 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:54:46.590326848Z 66 PC: 13561 | Move file pointer
2018-12-17T22:54:46.593401763Z 63 PC: 13596 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:54:46.595937212Z 63 PC: 13596 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:54:46.598449659Z 63 PC: 13596 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:54:46.601814499Z 63 PC: 13596 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:54:46.604656936Z 62 PC: 1360e | Close file
2018-12-17T22:54:46.607095524Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:46.619284824Z 26 PC: 1300b | Set disk transfer address
2018-12-17T22:54:46.620941219Z 78 PC: 1301d | Find first file
2018-12-17T22:54:46.628558879Z 67 PC: 13120 | Get or set file attributes
2018-12-17T22:54:46.635131293Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:46.647118875Z 61 PC: 132ee | Open file (Filename = 'PRINT.COM')
2018-12-17T22:54:46.654735933Z 87 PC: 1321a | Get or set file date and time
2018-12-17T22:54:46.656829862Z 63 PC: 13390 | Read file or device (Read 4080 bytes on handle 5)
2018-12-17T22:54:46.665396167Z 66 PC: 18abb | Move file pointer
2018-12-17T22:54:46.667869991Z 64 PC: 1333a | Write file or device (Write 4080 bytes on handle 5)
2018-12-17T22:54:46.67785823Z 66 PC: 18abb | Move file pointer
2018-12-17T22:54:46.688407536Z 64 PC: 1333a | Write file or device (Write 4080 bytes on handle 5)
2018-12-17T22:54:46.69898849Z 87 PC: 1327c | Get or set file date and time
2018-12-17T22:54:46.701141581Z 62 PC: 133d6 | Close file
2018-12-17T22:54:46.711246519Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:46.72231983Z 47 PC: 18922 | Get disk transfer address
2018-12-17T22:54:46.723997807Z 26 PC: 1892d | Set disk transfer address
2018-12-17T22:54:46.725640326Z 79 PC: 18931 | Find next file
2018-12-17T22:54:46.730129421Z 26 PC: 18941 | Set disk transfer address
2018-12-17T22:54:46.732359707Z 67 PC: 13120 | Get or set file attributes
2018-12-17T22:54:46.738924216Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:46.750956481Z 61 PC: 13531 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:54:46.764384221Z 66 PC: 13561 | Move file pointer
2018-12-17T22:54:46.76635611Z 63 PC: 13596 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:54:46.774657967Z 63 PC: 13596 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:54:46.778223786Z 63 PC: 13596 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:54:46.781397656Z 63 PC: 13596 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:54:46.785642702Z 62 PC: 1360e | Close file
2018-12-17T22:54:46.78801804Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:46.799364675Z 26 PC: 1300b | Set disk transfer address
2018-12-17T22:54:46.801014409Z 78 PC: 1301d | Find first file
2018-12-17T22:54:46.813043938Z 67 PC: 13120 | Get or set file attributes
2018-12-17T22:54:46.819593209Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:46.830770736Z 61 PC: 132ee | Open file (Filename = 'HELLO.COM')
2018-12-17T22:54:46.839085257Z 87 PC: 1321a | Get or set file date and time
2018-12-17T22:54:46.841018684Z 63 PC: 13390 | Read file or device (Read 4080 bytes on handle 5)
2018-12-17T22:54:46.84433408Z 66 PC: 18abb | Move file pointer
2018-12-17T22:54:46.848931329Z 64 PC: 1333a | Write file or device (Write 4080 bytes on handle 5)
2018-12-17T22:54:46.861368445Z 66 PC: 18abb | Move file pointer
2018-12-17T22:54:46.870052612Z 64 PC: 1333a | Write file or device (Write 4080 bytes on handle 5)
2018-12-17T22:54:46.880833863Z 87 PC: 1327c | Get or set file date and time
2018-12-17T22:54:46.883245921Z 62 PC: 133d6 | Close file
2018-12-17T22:54:46.892847382Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:46.903932766Z 47 PC: 18922 | Get disk transfer address
2018-12-17T22:54:46.906335245Z 26 PC: 1892d | Set disk transfer address
2018-12-17T22:54:46.907785574Z 79 PC: 18931 | Find next file
2018-12-17T22:54:46.910912186Z 26 PC: 18941 | Set disk transfer address
2018-12-17T22:54:46.914050069Z 67 PC: 13120 | Get or set file attributes
2018-12-17T22:54:46.920415403Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:46.931091627Z 61 PC: 13531 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:54:46.939215138Z 66 PC: 13561 | Move file pointer
2018-12-17T22:54:46.941594564Z 63 PC: 13596 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:54:46.949177549Z 63 PC: 13596 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:54:46.952407135Z 63 PC: 13596 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:54:46.95592901Z 63 PC: 13596 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:54:46.958284662Z 62 PC: 1360e | Close file
2018-12-17T22:54:46.960753025Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:46.972731408Z 26 PC: 1300b | Set disk transfer address
2018-12-17T22:54:46.974193849Z 78 PC: 1301d | Find first file
2018-12-17T22:54:46.980803964Z 67 PC: 13120 | Get or set file attributes
2018-12-17T22:54:46.987711789Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:46.999872486Z 61 PC: 132ee | Open file (Filename = 'PHANG.COM')
2018-12-17T22:54:47.007462293Z 87 PC: 1321a | Get or set file date and time
2018-12-17T22:54:47.010443512Z 63 PC: 13390 | Read file or device (Read 4080 bytes on handle 5)
2018-12-17T22:54:47.013621159Z 66 PC: 18abb | Move file pointer
2018-12-17T22:54:47.016049517Z 64 PC: 1333a | Write file or device (Write 4080 bytes on handle 5)
2018-12-17T22:54:47.027741682Z 66 PC: 18abb | Move file pointer
2018-12-17T22:54:47.034803847Z 64 PC: 1333a | Write file or device (Write 4080 bytes on handle 5)
2018-12-17T22:54:47.043625522Z 87 PC: 1327c | Get or set file date and time
2018-12-17T22:54:47.04610189Z 62 PC: 133d6 | Close file
2018-12-17T22:54:47.053489117Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:47.062303027Z 47 PC: 18922 | Get disk transfer address
2018-12-17T22:54:47.064745663Z 26 PC: 1892d | Set disk transfer address
2018-12-17T22:54:47.065864217Z 79 PC: 18931 | Find next file
2018-12-17T22:54:47.068516086Z 26 PC: 18941 | Set disk transfer address
2018-12-17T22:54:47.071176531Z 67 PC: 13120 | Get or set file attributes
2018-12-17T22:54:47.080036177Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:47.091704978Z 61 PC: 13531 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:54:47.099879325Z 66 PC: 13561 | Move file pointer
2018-12-17T22:54:47.101700882Z 63 PC: 13596 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:54:47.108689338Z 63 PC: 13596 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:54:47.111930445Z 63 PC: 13596 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:54:47.114219982Z 63 PC: 13596 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:54:47.115876478Z 62 PC: 1360e | Close file
2018-12-17T22:54:47.118179761Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:47.126682336Z 26 PC: 1300b | Set disk transfer address
2018-12-17T22:54:47.128257439Z 78 PC: 1301d | Find first file
2018-12-17T22:54:47.134126349Z 67 PC: 13120 | Get or set file attributes
2018-12-17T22:54:47.141892268Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:47.155316462Z 61 PC: 132ee | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:54:47.16394876Z 87 PC: 1321a | Get or set file date and time
2018-12-17T22:54:47.166337734Z 63 PC: 13390 | Read file or device (Read 4080 bytes on handle 5)
2018-12-17T22:54:47.174327224Z 66 PC: 18abb | Move file pointer
2018-12-17T22:54:47.177603828Z 64 PC: 1333a | Write file or device (Write 4080 bytes on handle 5)
2018-12-17T22:54:47.18731168Z 66 PC: 18abb | Move file pointer
2018-12-17T22:54:47.195795198Z 64 PC: 1333a | Write file or device (Write 4080 bytes on handle 5)
2018-12-17T22:54:47.206307504Z 87 PC: 1327c | Get or set file date and time
2018-12-17T22:54:47.208996662Z 62 PC: 133d6 | Close file
2018-12-17T22:54:47.217512662Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:47.228473481Z 47 PC: 18922 | Get disk transfer address
2018-12-17T22:54:47.231133475Z 26 PC: 1892d | Set disk transfer address
2018-12-17T22:54:47.232442007Z 79 PC: 18931 | Find next file
2018-12-17T22:54:47.235421111Z 26 PC: 18941 | Set disk transfer address
2018-12-17T22:54:47.239028818Z 98 PC: 18cab | Get current PSP
2018-12-17T22:54:47.24119841Z 47 PC: 188e5 | Get disk transfer address
2018-12-17T22:54:47.242504276Z 26 PC: 188f0 | Set disk transfer address
2018-12-17T22:54:47.244597504Z 78 PC: 188fc | Find first file
2018-12-17T22:54:47.254295668Z 26 PC: 1890e | Set disk transfer address
2018-12-17T22:54:47.256537806Z 67 PC: 13120 | Get or set file attributes
2018-12-17T22:54:47.264389305Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:47.270948144Z 61 PC: 13531 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:54:47.278187923Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:47.286193593Z 26 PC: 1300b | Set disk transfer address
2018-12-17T22:54:47.288087445Z 78 PC: 1301d | Find first file
2018-12-17T22:54:47.296249379Z 67 PC: 13120 | Get or set file attributes
2018-12-17T22:54:47.304737286Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:47.644972124Z 61 PC: 132ee | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:54:47.653149076Z 87 PC: 1321a | Get or set file date and time
2018-12-17T22:54:47.656026008Z 63 PC: 13390 | Read file or device (Read 4080 bytes on handle 5)
2018-12-17T22:54:47.664086853Z 66 PC: 18abb | Move file pointer
2018-12-17T22:54:47.666358987Z 64 PC: 1333a | Write file or device (Write 4080 bytes on handle 5)
2018-12-17T22:54:47.674525569Z 66 PC: 18abb | Move file pointer
2018-12-17T22:54:47.683744141Z 64 PC: 1333a | Write file or device (Write 4080 bytes on handle 5)
2018-12-17T22:54:47.696009694Z 87 PC: 1327c | Get or set file date and time
2018-12-17T22:54:47.698490351Z 62 PC: 133d6 | Close file
2018-12-17T22:54:47.707947191Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:47.719226118Z 47 PC: 18922 | Get disk transfer address
2018-12-17T22:54:47.721075898Z 26 PC: 1892d | Set disk transfer address
2018-12-17T22:54:47.724030716Z 79 PC: 18931 | Find next file
2018-12-17T22:54:47.727892541Z 26 PC: 18941 | Set disk transfer address
2018-12-17T22:54:47.730293978Z 67 PC: 13120 | Get or set file attributes
2018-12-17T22:54:47.738285732Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:47.744936684Z 61 PC: 13531 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:54:47.752245614Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:47.760558211Z 26 PC: 1300b | Set disk transfer address
2018-12-17T22:54:47.762780712Z 78 PC: 1301d | Find first file
2018-12-17T22:54:47.770161797Z 67 PC: 13120 | Get or set file attributes
2018-12-17T22:54:47.778253288Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:47.78945493Z 61 PC: 132ee | Open file (Filename = 'C:\DOS\CHKDSK.EXE')
2018-12-17T22:54:47.796945772Z 87 PC: 1321a | Get or set file date and time
2018-12-17T22:54:47.799508913Z 63 PC: 13390 | Read file or device (Read 4080 bytes on handle 5)
2018-12-17T22:54:47.80745469Z 66 PC: 18abb | Move file pointer
2018-12-17T22:54:47.81067577Z 64 PC: 1333a | Write file or device (Write 4080 bytes on handle 5)
2018-12-17T22:54:47.820213983Z 66 PC: 18abb | Move file pointer
2018-12-17T22:54:47.830016784Z 64 PC: 1333a | Write file or device (Write 4080 bytes on handle 5)
2018-12-17T22:54:47.840304858Z 87 PC: 1327c | Get or set file date and time
2018-12-17T22:54:47.842571161Z 62 PC: 133d6 | Close file
2018-12-17T22:54:47.850804138Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:47.861366508Z 47 PC: 18922 | Get disk transfer address
2018-12-17T22:54:47.862943745Z 26 PC: 1892d | Set disk transfer address
2018-12-17T22:54:47.865573822Z 79 PC: 18931 | Find next file
2018-12-17T22:54:47.86913963Z 26 PC: 18941 | Set disk transfer address
2018-12-17T22:54:47.871256362Z 67 PC: 13120 | Get or set file attributes
2018-12-17T22:54:47.879007092Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:47.885578364Z 61 PC: 13531 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:54:47.893264703Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:47.900816329Z 26 PC: 1300b | Set disk transfer address
2018-12-17T22:54:47.90233172Z 78 PC: 1301d | Find first file
2018-12-17T22:54:47.909337428Z 67 PC: 13120 | Get or set file attributes
2018-12-17T22:54:47.916799356Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:47.926334283Z 61 PC: 132ee | Open file (Filename = 'C:\DOS\DEBUG.EXE')
2018-12-17T22:54:47.931872672Z 87 PC: 1321a | Get or set file date and time
2018-12-17T22:54:47.934606094Z 63 PC: 13390 | Read file or device (Read 4080 bytes on handle 5)
2018-12-17T22:54:47.940192603Z 66 PC: 18abb | Move file pointer
2018-12-17T22:54:47.941821978Z 64 PC: 1333a | Write file or device (Write 4080 bytes on handle 5)
2018-12-17T22:54:47.948322336Z 66 PC: 18abb | Move file pointer
2018-12-17T22:54:47.957375747Z 64 PC: 1333a | Write file or device (Write 4080 bytes on handle 5)
2018-12-17T22:54:47.972933313Z 87 PC: 1327c | Get or set file date and time
2018-12-17T22:54:47.975539185Z 62 PC: 133d6 | Close file
2018-12-17T22:54:47.984021492Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:47.994897812Z 47 PC: 18922 | Get disk transfer address
2018-12-17T22:54:47.997432079Z 26 PC: 1892d | Set disk transfer address
2018-12-17T22:54:48.024738217Z 79 PC: 18931 | Find next file
2018-12-17T22:54:48.029533728Z 26 PC: 18941 | Set disk transfer address
2018-12-17T22:54:48.032713349Z 67 PC: 13120 | Get or set file attributes
2018-12-17T22:54:48.040127186Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:48.04652424Z 61 PC: 13531 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:54:48.054623075Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:48.061932535Z 26 PC: 1300b | Set disk transfer address
2018-12-17T22:54:48.063573151Z 78 PC: 1301d | Find first file
2018-12-17T22:54:48.069565554Z 67 PC: 13120 | Get or set file attributes
2018-12-17T22:54:48.074833384Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:48.082418943Z 61 PC: 132ee | Open file (Filename = 'C:\DOS\EXPAND.EXE')
2018-12-17T22:54:48.089878606Z 87 PC: 1321a | Get or set file date and time
2018-12-17T22:54:48.092117097Z 63 PC: 13390 | Read file or device (Read 4080 bytes on handle 5)
2018-12-17T22:54:48.100108861Z 66 PC: 18abb | Move file pointer
2018-12-17T22:54:48.103726185Z 64 PC: 1333a | Write file or device (Write 4080 bytes on handle 5)
2018-12-17T22:54:48.112139562Z 66 PC: 18abb | Move file pointer
2018-12-17T22:54:48.120714864Z 64 PC: 1333a | Write file or device (Write 4080 bytes on handle 5)
2018-12-17T22:54:48.13164213Z 87 PC: 1327c | Get or set file date and time
2018-12-17T22:54:48.133927038Z 62 PC: 133d6 | Close file
2018-12-17T22:54:48.141853379Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:48.153736613Z 47 PC: 18922 | Get disk transfer address
2018-12-17T22:54:48.155907176Z 26 PC: 1892d | Set disk transfer address
2018-12-17T22:54:48.157430862Z 79 PC: 18931 | Find next file
2018-12-17T22:54:48.162212076Z 26 PC: 18941 | Set disk transfer address
2018-12-17T22:54:48.16443063Z 67 PC: 13120 | Get or set file attributes
2018-12-17T22:54:48.171164367Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:48.178966765Z 61 PC: 13531 | Open file (Filename = 'FDISK.EXE')
2018-12-17T22:54:48.186319075Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:48.192737179Z 26 PC: 1300b | Set disk transfer address
2018-12-17T22:54:48.194969288Z 78 PC: 1301d | Find first file
2018-12-17T22:54:48.201472091Z 67 PC: 13120 | Get or set file attributes
2018-12-17T22:54:48.2080262Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:48.219830776Z 61 PC: 132ee | Open file (Filename = 'C:\DOS\FDISK.EXE')
2018-12-17T22:54:48.228215369Z 87 PC: 1321a | Get or set file date and time
2018-12-17T22:54:48.22985863Z 63 PC: 13390 | Read file or device (Read 4080 bytes on handle 5)
2018-12-17T22:54:48.23900724Z 66 PC: 18abb | Move file pointer
2018-12-17T22:54:48.242153028Z 64 PC: 1333a | Write file or device (Write 4080 bytes on handle 5)
2018-12-17T22:54:48.25060137Z 66 PC: 18abb | Move file pointer
2018-12-17T22:54:48.259342243Z 64 PC: 1333a | Write file or device (Write 4080 bytes on handle 5)
2018-12-17T22:54:48.269161114Z 87 PC: 1327c | Get or set file date and time
2018-12-17T22:54:48.271164112Z 62 PC: 133d6 | Close file
2018-12-17T22:54:48.280326658Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:48.292636114Z 47 PC: 18922 | Get disk transfer address
2018-12-17T22:54:48.294510921Z 26 PC: 1892d | Set disk transfer address
2018-12-17T22:54:48.297029148Z 79 PC: 18931 | Find next file
2018-12-17T22:54:48.301000368Z 26 PC: 18941 | Set disk transfer address
2018-12-17T22:54:48.303483299Z 47 PC: 188e5 | Get disk transfer address
2018-12-17T22:54:48.306320116Z 26 PC: 188f0 | Set disk transfer address
2018-12-17T22:54:48.308456465Z 78 PC: 188fc | Find first file
2018-12-17T22:54:48.31588055Z 26 PC: 1890e | Set disk transfer address
2018-12-17T22:54:48.319184456Z 67 PC: 13120 | Get or set file attributes
2018-12-17T22:54:48.326627126Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:48.333326479Z 61 PC: 13531 | Open file (Filename = 'EDIT.COM')
2018-12-17T22:54:48.341794058Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:48.349077769Z 26 PC: 1300b | Set disk transfer address
2018-12-17T22:54:48.350930665Z 78 PC: 1301d | Find first file
2018-12-17T22:54:48.359402181Z 67 PC: 13120 | Get or set file attributes
2018-12-17T22:54:48.367723385Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:48.378738616Z 61 PC: 132ee | Open file (Filename = 'C:\DOS\EDIT.COM')
2018-12-17T22:54:48.387908827Z 87 PC: 1321a | Get or set file date and time
2018-12-17T22:54:48.390455177Z 63 PC: 13390 | Read file or device (Read 4080 bytes on handle 5)
2018-12-17T22:54:48.397249758Z 66 PC: 18abb | Move file pointer
2018-12-17T22:54:48.400971139Z 64 PC: 1333a | Write file or device (Write 4080 bytes on handle 5)
2018-12-17T22:54:48.410527576Z 66 PC: 18abb | Move file pointer
2018-12-17T22:54:48.418652099Z 64 PC: 1333a | Write file or device (Write 4080 bytes on handle 5)
2018-12-17T22:54:48.430053527Z 87 PC: 1327c | Get or set file date and time
2018-12-17T22:54:48.432387598Z 62 PC: 133d6 | Close file
2018-12-17T22:54:48.440275897Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:48.452184699Z 47 PC: 18922 | Get disk transfer address
2018-12-17T22:54:48.453789959Z 26 PC: 1892d | Set disk transfer address
2018-12-17T22:54:48.455296704Z 79 PC: 18931 | Find next file
2018-12-17T22:54:48.459722229Z 26 PC: 18941 | Set disk transfer address
2018-12-17T22:54:48.462194329Z 67 PC: 13120 | Get or set file attributes
2018-12-17T22:54:48.468935771Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:48.476210085Z 61 PC: 13531 | Open file (Filename = 'FORMAT.COM')
2018-12-17T22:54:48.48368155Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:48.49030512Z 26 PC: 1300b | Set disk transfer address
2018-12-17T22:54:48.492530306Z 78 PC: 1301d | Find first file
2018-12-17T22:54:48.500348453Z 67 PC: 13120 | Get or set file attributes
2018-12-17T22:54:48.507007169Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:48.518731184Z 61 PC: 132ee | Open file (Filename = 'C:\DOS\FORMAT.COM')
2018-12-17T22:54:48.526652204Z 87 PC: 1321a | Get or set file date and time
2018-12-17T22:54:48.528558791Z 63 PC: 13390 | Read file or device (Read 4080 bytes on handle 5)
2018-12-17T22:54:48.537334038Z 66 PC: 18abb | Move file pointer
2018-12-17T22:54:48.539589782Z 64 PC: 1333a | Write file or device (Write 4080 bytes on handle 5)
2018-12-17T22:54:48.547819122Z 66 PC: 18abb | Move file pointer
2018-12-17T22:54:48.557050007Z 64 PC: 1333a | Write file or device (Write 4080 bytes on handle 5)
2018-12-17T22:54:48.567648765Z 87 PC: 1327c | Get or set file date and time
2018-12-17T22:54:48.569614353Z 62 PC: 133d6 | Close file
2018-12-17T22:54:48.579682873Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:48.591331446Z 47 PC: 18922 | Get disk transfer address
2018-12-17T22:54:48.593158092Z 26 PC: 1892d | Set disk transfer address
2018-12-17T22:54:48.595853663Z 79 PC: 18931 | Find next file
2018-12-17T22:54:48.599791811Z 26 PC: 18941 | Set disk transfer address
2018-12-17T22:54:48.602149356Z 67 PC: 13120 | Get or set file attributes
2018-12-17T22:54:48.610451313Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:48.617240024Z 61 PC: 13531 | Open file (Filename = 'KEYB.COM')
2018-12-17T22:54:48.624978832Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:48.63327627Z 26 PC: 1300b | Set disk transfer address
2018-12-17T22:54:48.634957563Z 78 PC: 1301d | Find first file
2018-12-17T22:54:48.642238329Z 67 PC: 13120 | Get or set file attributes
2018-12-17T22:54:48.650126098Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:48.660915885Z 61 PC: 132ee | Open file (Filename = 'C:\DOS\KEYB.COM')
2018-12-17T22:54:48.668587917Z 87 PC: 1321a | Get or set file date and time
2018-12-17T22:54:48.671975209Z 63 PC: 13390 | Read file or device (Read 4080 bytes on handle 5)
2018-12-17T22:54:48.679907761Z 66 PC: 18abb | Move file pointer
2018-12-17T22:54:48.682296014Z 64 PC: 1333a | Write file or device (Write 4080 bytes on handle 5)
2018-12-17T22:54:48.691428925Z 66 PC: 18abb | Move file pointer
2018-12-17T22:54:48.700545654Z 64 PC: 1333a | Write file or device (Write 4080 bytes on handle 5)
2018-12-17T22:54:48.710763155Z 87 PC: 1327c | Get or set file date and time
2018-12-17T22:54:48.713968906Z 62 PC: 133d6 | Close file
2018-12-17T22:54:48.722001075Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:48.732422239Z 47 PC: 18922 | Get disk transfer address
2018-12-17T22:54:48.734562726Z 26 PC: 1892d | Set disk transfer address
2018-12-17T22:54:48.735785436Z 79 PC: 18931 | Find next file
2018-12-17T22:54:48.742571321Z 26 PC: 18941 | Set disk transfer address
2018-12-17T22:54:48.745047429Z 67 PC: 13120 | Get or set file attributes
2018-12-17T22:54:48.751749617Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:48.75834285Z 61 PC: 13531 | Open file (Filename = 'SYS.COM')
2018-12-17T22:54:48.766537585Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:48.77793722Z 26 PC: 1300b | Set disk transfer address
2018-12-17T22:54:48.779725554Z 78 PC: 1301d | Find first file
2018-12-17T22:54:48.787845038Z 67 PC: 13120 | Get or set file attributes
2018-12-17T22:54:48.794690886Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:48.805557528Z 61 PC: 132ee | Open file (Filename = 'C:\DOS\SYS.COM')
2018-12-17T22:54:48.81567486Z 87 PC: 1321a | Get or set file date and time
2018-12-17T22:54:48.817764802Z 63 PC: 13390 | Read file or device (Read 4080 bytes on handle 5)
2018-12-17T22:54:48.828579686Z 66 PC: 18abb | Move file pointer
2018-12-17T22:54:48.831209223Z 64 PC: 1333a | Write file or device (Write 4080 bytes on handle 5)
2018-12-17T22:54:48.839460955Z 66 PC: 18abb | Move file pointer
2018-12-17T22:54:48.848129613Z 64 PC: 1333a | Write file or device (Write 4080 bytes on handle 5)
2018-12-17T22:54:48.858974073Z 87 PC: 1327c | Get or set file date and time
2018-12-17T22:54:48.861053104Z 62 PC: 133d6 | Close file
2018-12-17T22:54:48.869340013Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:48.887706523Z 47 PC: 18922 | Get disk transfer address
2018-12-17T22:54:48.889243544Z 26 PC: 1892d | Set disk transfer address
2018-12-17T22:54:48.890944023Z 79 PC: 18931 | Find next file
2018-12-17T22:54:48.899266709Z 26 PC: 18941 | Set disk transfer address
2018-12-17T22:54:48.901222609Z 98 PC: 18cab | Get current PSP
2018-12-17T22:54:48.903416526Z 26 PC: 12d8f | Set disk transfer address
2018-12-17T22:54:48.905619159Z 78 PC: 12da1 | Find first file
2018-12-17T22:54:48.912508559Z 67 PC: 13120 | Get or set file attributes
2018-12-17T22:54:48.919159521Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:48.930711973Z 61 PC: 132ee | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:54:48.938229735Z 87 PC: 1321a | Get or set file date and time
2018-12-17T22:54:48.940481641Z 66 PC: 18abb | Move file pointer
2018-12-17T22:54:48.943617901Z 63 PC: 13390 | Read file or device (Read 4080 bytes on handle 5)
2018-12-17T22:54:48.952609946Z 66 PC: 18abb | Move file pointer
2018-12-17T22:54:48.961736725Z 64 PC: 1333a | Write file or device (Write 4080 bytes on handle 5)
2018-12-17T22:54:48.972306819Z 87 PC: 1327c | Get or set file date and time
2018-12-17T22:54:48.974317692Z 62 PC: 133d6 | Close file
2018-12-17T22:54:48.983317321Z 61 PC: 13664 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:54:48.991155566Z 66 PC: 13697 | Move file pointer
2018-12-17T22:54:48.992965701Z 64 PC: 136d0 | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:54:49.001929965Z 62 PC: 136f3 | Close file
2018-12-17T22:54:49.010410567Z 61 PC: 132ee | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:54:49.017908812Z 87 PC: 1327c | Get or set file date and time
2018-12-17T22:54:49.020706525Z 62 PC: 133d6 | Close file
2018-12-17T22:54:49.029245659Z 67 PC: 13157 | Get or set file attributes
2018-12-17T22:54:49.040031458Z 75 PC: 12ea2 | Execute program