Sample viewer

vx.netlux.org/Virus.DOS.HLLP.Krile.5504

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:56:08.412343837Z 74 PC: 13aca | Reallocate memory
2018-12-17T22:56:08.484181997Z 74 PC: 188b9 | Reallocate memory
2018-12-17T22:56:08.487777231Z 98 PC: 17db6 | Get current PSP
2018-12-17T22:56:08.491020885Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:08.497867937Z 65 PC: 13898 | Delete file (Filename = 'anti-vir.dat')
2018-12-17T22:56:08.505747347Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:08.51268126Z 65 PC: 13898 | Delete file (Filename = 'chklist.ms')
2018-12-17T22:56:08.520861796Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:08.527762669Z 65 PC: 13898 | Delete file (Filename = 'chklist.cps')
2018-12-17T22:56:08.534746948Z 26 PC: 12bdc | Set disk transfer address
2018-12-17T22:56:08.537163814Z 78 PC: 12bee | Find first file
2018-12-17T22:56:08.544828912Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:56:08.552384517Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:08.579338256Z 61 PC: 13236 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:56:08.591824701Z 63 PC: 132d8 | Read file or device (Read 5504 bytes on handle 5)
2018-12-17T22:56:08.60383905Z 62 PC: 1331e | Close file
2018-12-17T22:56:08.607255815Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:08.619641048Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:08.62622865Z 65 PC: 13898 | Delete file (Filename = 'anti-vir.dat')
2018-12-17T22:56:08.633507628Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:08.646610169Z 65 PC: 13898 | Delete file (Filename = 'chklist.ms')
2018-12-17T22:56:08.653883547Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:08.660932509Z 65 PC: 13898 | Delete file (Filename = 'chklist.cps')
2018-12-17T22:56:08.668900438Z 47 PC: 17bf5 | Get disk transfer address
2018-12-17T22:56:08.670163538Z 26 PC: 17c00 | Set disk transfer address
2018-12-17T22:56:08.671382889Z 78 PC: 17c0c | Find first file
2018-12-17T22:56:08.678631142Z 26 PC: 17c1e | Set disk transfer address
2018-12-17T22:56:08.682292379Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:56:08.683518819Z 78 PC: 136ef | Find first file
2018-12-17T22:56:08.696838559Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:56:08.709654782Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:08.720929122Z 61 PC: 13236 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:56:08.72981861Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:08.732028184Z 63 PC: 132d8 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:56:08.739808436Z 62 PC: 1331e | Close file
2018-12-17T22:56:08.743166915Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:08.754723657Z 47 PC: 17c32 | Get disk transfer address
2018-12-17T22:56:08.756174628Z 26 PC: 17c3d | Set disk transfer address
2018-12-17T22:56:08.757736875Z 79 PC: 17c41 | Find next file
2018-12-17T22:56:08.761934485Z 26 PC: 17c51 | Set disk transfer address
2018-12-17T22:56:08.764215072Z 47 PC: 17bf5 | Get disk transfer address
2018-12-17T22:56:08.765615675Z 26 PC: 17c00 | Set disk transfer address
2018-12-17T22:56:08.767783534Z 78 PC: 17c0c | Find first file
2018-12-17T22:56:08.775489862Z 26 PC: 17c1e | Set disk transfer address
2018-12-17T22:56:08.779626754Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:56:08.782171814Z 78 PC: 136ef | Find first file
2018-12-17T22:56:08.789204834Z 47 PC: 17c32 | Get disk transfer address
2018-12-17T22:56:08.790742989Z 26 PC: 17c3d | Set disk transfer address
2018-12-17T22:56:08.793074381Z 79 PC: 17c41 | Find next file
2018-12-17T22:56:08.796040579Z 26 PC: 17c51 | Set disk transfer address
2018-12-17T22:56:08.798261808Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:56:08.799492822Z 78 PC: 136ef | Find first file
2018-12-17T22:56:08.80722789Z 47 PC: 17c32 | Get disk transfer address
2018-12-17T22:56:08.808597431Z 26 PC: 17c3d | Set disk transfer address
2018-12-17T22:56:08.810366779Z 79 PC: 17c41 | Find next file
2018-12-17T22:56:08.814136479Z 26 PC: 17c51 | Set disk transfer address
2018-12-17T22:56:08.817930309Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:56:08.819178904Z 78 PC: 136ef | Find first file
2018-12-17T22:56:08.825763619Z 47 PC: 17c32 | Get disk transfer address
2018-12-17T22:56:08.826934125Z 26 PC: 17c3d | Set disk transfer address
2018-12-17T22:56:08.828097869Z 79 PC: 17c41 | Find next file
2018-12-17T22:56:08.831640694Z 26 PC: 17c51 | Set disk transfer address
2018-12-17T22:56:08.8383916Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:56:08.839633554Z 78 PC: 136ef | Find first file
2018-12-17T22:56:08.847941536Z 47 PC: 17c32 | Get disk transfer address
2018-12-17T22:56:08.849240123Z 26 PC: 17c3d | Set disk transfer address
2018-12-17T22:56:08.850533442Z 79 PC: 17c41 | Find next file
2018-12-17T22:56:08.854025336Z 26 PC: 17c51 | Set disk transfer address
2018-12-17T22:56:08.858039691Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:56:08.859552955Z 78 PC: 136ef | Find first file
2018-12-17T22:56:08.867071421Z 47 PC: 17c32 | Get disk transfer address
2018-12-17T22:56:08.868459537Z 26 PC: 17c3d | Set disk transfer address
2018-12-17T22:56:08.870878286Z 79 PC: 17c41 | Find next file
2018-12-17T22:56:08.874456222Z 26 PC: 17c51 | Set disk transfer address
2018-12-17T22:56:08.878731946Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:56:08.879854637Z 78 PC: 136ef | Find first file
2018-12-17T22:56:08.887434788Z 47 PC: 17c32 | Get disk transfer address
2018-12-17T22:56:08.889566682Z 26 PC: 17c3d | Set disk transfer address
2018-12-17T22:56:08.891748181Z 79 PC: 17c41 | Find next file
2018-12-17T22:56:08.896107009Z 26 PC: 17c51 | Set disk transfer address
2018-12-17T22:56:08.900197262Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:56:08.901710829Z 78 PC: 136ef | Find first file
2018-12-17T22:56:08.910416895Z 47 PC: 17c32 | Get disk transfer address
2018-12-17T22:56:08.912080346Z 26 PC: 17c3d | Set disk transfer address
2018-12-17T22:56:08.913579824Z 79 PC: 17c41 | Find next file
2018-12-17T22:56:08.917312719Z 26 PC: 17c51 | Set disk transfer address
2018-12-17T22:56:08.920627732Z 98 PC: 17ded | Get current PSP
2018-12-17T22:56:08.922723638Z 98 PC: 17ded | Get current PSP
2018-12-17T22:56:08.924732862Z 98 PC: 17ded | Get current PSP
2018-12-17T22:56:08.927696581Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:08.93804785Z 65 PC: 13898 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:56:08.945211659Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:08.953908173Z 65 PC: 13898 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:56:08.962208193Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:08.969717341Z 65 PC: 13898 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:56:08.978587277Z 47 PC: 17bf5 | Get disk transfer address
2018-12-17T22:56:08.980193096Z 26 PC: 17c00 | Set disk transfer address
2018-12-17T22:56:08.981074124Z 78 PC: 17c0c | Find first file
2018-12-17T22:56:08.987348932Z 26 PC: 17c1e | Set disk transfer address
2018-12-17T22:56:08.98920774Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:56:08.990281241Z 78 PC: 136ef | Find first file
2018-12-17T22:56:08.995239676Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:56:08.999243063Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:09.340477392Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:56:09.350330303Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:09.353123893Z 63 PC: 132d8 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:56:09.359802085Z 62 PC: 1331e | Close file
2018-12-17T22:56:09.362300758Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:09.375174042Z 86 PC: 13be2 | Rename file
2018-12-17T22:56:09.383996316Z 26 PC: 12fd0 | Set disk transfer address
2018-12-17T22:56:09.385174872Z 78 PC: 12fe2 | Find first file
2018-12-17T22:56:09.390881949Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:56:09.397804146Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:09.407986756Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\ATTRIB.���')
2018-12-17T22:56:09.41647499Z 87 PC: 131a3 | Get or set file date and time
2018-12-17T22:56:09.418299247Z 63 PC: 132d8 | Read file or device (Read 5504 bytes on handle 5)
2018-12-17T22:56:09.426709984Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:09.428917784Z 64 PC: 13282 | Write file or device (Write 5504 bytes on handle 5)
2018-12-17T22:56:09.438626312Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:09.447486592Z 64 PC: 13282 | Write file or device (Write 5504 bytes on handle 5)
2018-12-17T22:56:09.461797636Z 87 PC: 13205 | Get or set file date and time
2018-12-17T22:56:09.4636206Z 62 PC: 1331e | Close file
2018-12-17T22:56:09.471830328Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:09.483586239Z 86 PC: 13bfb | Rename file
2018-12-17T22:56:09.496059068Z 47 PC: 17c32 | Get disk transfer address
2018-12-17T22:56:09.497422275Z 26 PC: 17c3d | Set disk transfer address
2018-12-17T22:56:09.499010158Z 79 PC: 17c41 | Find next file
2018-12-17T22:56:09.502673785Z 26 PC: 17c51 | Set disk transfer address
2018-12-17T22:56:09.505454909Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:56:09.506939583Z 78 PC: 136ef | Find first file
2018-12-17T22:56:09.515658022Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:56:09.522360241Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:09.533540237Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\CHKDSK.EXE')
2018-12-17T22:56:09.543328636Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:09.545709517Z 63 PC: 132d8 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:56:09.552311611Z 62 PC: 1331e | Close file
2018-12-17T22:56:09.555554445Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:09.566898758Z 86 PC: 13be2 | Rename file
2018-12-17T22:56:09.581235403Z 26 PC: 12fd0 | Set disk transfer address
2018-12-17T22:56:09.583895507Z 78 PC: 12fe2 | Find first file
2018-12-17T22:56:09.59102337Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:56:09.598684629Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:09.610853495Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\CHKDSK.���')
2018-12-17T22:56:09.618729388Z 87 PC: 131a3 | Get or set file date and time
2018-12-17T22:56:09.622651076Z 63 PC: 132d8 | Read file or device (Read 5504 bytes on handle 5)
2018-12-17T22:56:09.634118661Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:09.637176867Z 64 PC: 13282 | Write file or device (Write 5504 bytes on handle 5)
2018-12-17T22:56:09.646864173Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:09.657011468Z 64 PC: 13282 | Write file or device (Write 5504 bytes on handle 5)
2018-12-17T22:56:09.671500964Z 87 PC: 13205 | Get or set file date and time
2018-12-17T22:56:09.673574502Z 62 PC: 1331e | Close file
2018-12-17T22:56:09.687910088Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:09.699413841Z 86 PC: 13bfb | Rename file
2018-12-17T22:56:09.708538472Z 47 PC: 17c32 | Get disk transfer address
2018-12-17T22:56:09.709910734Z 26 PC: 17c3d | Set disk transfer address
2018-12-17T22:56:09.711425918Z 79 PC: 17c41 | Find next file
2018-12-17T22:56:09.714643013Z 26 PC: 17c51 | Set disk transfer address
2018-12-17T22:56:09.716919878Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:56:09.717933951Z 78 PC: 136ef | Find first file
2018-12-17T22:56:09.722668447Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:56:09.727456586Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:09.734148222Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\DEBUG.EXE')
2018-12-17T22:56:09.738882564Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:09.741098104Z 63 PC: 132d8 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:56:09.745080264Z 62 PC: 1331e | Close file
2018-12-17T22:56:09.746538933Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:09.753593203Z 86 PC: 13be2 | Rename file
2018-12-17T22:56:09.76354084Z 26 PC: 12fd0 | Set disk transfer address
2018-12-17T22:56:09.764765573Z 78 PC: 12fe2 | Find first file
2018-12-17T22:56:09.776212697Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:56:09.784328662Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:09.798149851Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\DEBUG.���')
2018-12-17T22:56:09.804993805Z 87 PC: 131a3 | Get or set file date and time
2018-12-17T22:56:09.806763155Z 63 PC: 132d8 | Read file or device (Read 5504 bytes on handle 5)
2018-12-17T22:56:09.811835225Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:09.813235061Z 64 PC: 13282 | Write file or device (Write 5504 bytes on handle 5)
2018-12-17T22:56:09.81901949Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:09.823682913Z 64 PC: 13282 | Write file or device (Write 5504 bytes on handle 5)
2018-12-17T22:56:09.830446734Z 87 PC: 13205 | Get or set file date and time
2018-12-17T22:56:09.83286247Z 62 PC: 1331e | Close file
2018-12-17T22:56:09.840649536Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:09.847600355Z 86 PC: 13bfb | Rename file
2018-12-17T22:56:09.860808988Z 47 PC: 17c32 | Get disk transfer address
2018-12-17T22:56:09.862360226Z 26 PC: 17c3d | Set disk transfer address
2018-12-17T22:56:09.863746476Z 79 PC: 17c41 | Find next file
2018-12-17T22:56:09.867987611Z 26 PC: 17c51 | Set disk transfer address
2018-12-17T22:56:09.870715022Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:56:09.872195058Z 78 PC: 136ef | Find first file
2018-12-17T22:56:09.879157379Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:56:09.885872799Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:09.896563124Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\EXPAND.EXE')
2018-12-17T22:56:09.905038653Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:09.907010013Z 63 PC: 132d8 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:56:09.914476086Z 62 PC: 1331e | Close file
2018-12-17T22:56:09.917686887Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:09.92937576Z 86 PC: 13be2 | Rename file
2018-12-17T22:56:09.941920239Z 26 PC: 12fd0 | Set disk transfer address
2018-12-17T22:56:09.944423537Z 78 PC: 12fe2 | Find first file
2018-12-17T22:56:09.951662971Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:56:09.95883653Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:09.970657543Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\EXPAND.���')
2018-12-17T22:56:09.980134826Z 87 PC: 131a3 | Get or set file date and time
2018-12-17T22:56:09.982246773Z 63 PC: 132d8 | Read file or device (Read 5504 bytes on handle 5)
2018-12-17T22:56:09.991607109Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:09.993925315Z 64 PC: 13282 | Write file or device (Write 5504 bytes on handle 5)
2018-12-17T22:56:10.002467019Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:10.011887828Z 64 PC: 13282 | Write file or device (Write 5504 bytes on handle 5)
2018-12-17T22:56:10.022098455Z 87 PC: 13205 | Get or set file date and time
2018-12-17T22:56:10.02424911Z 62 PC: 1331e | Close file
2018-12-17T22:56:10.033243867Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:10.04565944Z 86 PC: 13bfb | Rename file
2018-12-17T22:56:10.058358924Z 47 PC: 17c32 | Get disk transfer address
2018-12-17T22:56:10.060530892Z 26 PC: 17c3d | Set disk transfer address
2018-12-17T22:56:10.063113511Z 79 PC: 17c41 | Find next file
2018-12-17T22:56:10.066750669Z 26 PC: 17c51 | Set disk transfer address
2018-12-17T22:56:10.070050614Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:56:10.071361238Z 78 PC: 136ef | Find first file
2018-12-17T22:56:10.078653111Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:56:10.085863456Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:10.09716861Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\FDISK.EXE')
2018-12-17T22:56:10.10610644Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:10.121942473Z 63 PC: 132d8 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:56:10.133449935Z 62 PC: 1331e | Close file
2018-12-17T22:56:10.135509311Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:10.1469485Z 86 PC: 13be2 | Rename file
2018-12-17T22:56:10.159632747Z 26 PC: 12fd0 | Set disk transfer address
2018-12-17T22:56:10.160834761Z 78 PC: 12fe2 | Find first file
2018-12-17T22:56:10.168163061Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:56:10.175759989Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:10.187202092Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\FDISK.���')
2018-12-17T22:56:10.195702371Z 87 PC: 131a3 | Get or set file date and time
2018-12-17T22:56:10.197454216Z 63 PC: 132d8 | Read file or device (Read 5504 bytes on handle 5)
2018-12-17T22:56:10.205921677Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:10.208677784Z 64 PC: 13282 | Write file or device (Write 5504 bytes on handle 5)
2018-12-17T22:56:10.217675472Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:10.226672112Z 64 PC: 13282 | Write file or device (Write 5504 bytes on handle 5)
2018-12-17T22:56:10.237456963Z 87 PC: 13205 | Get or set file date and time
2018-12-17T22:56:10.240630739Z 62 PC: 1331e | Close file
2018-12-17T22:56:10.248900377Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:10.260932213Z 86 PC: 13bfb | Rename file
2018-12-17T22:56:10.277605339Z 47 PC: 17c32 | Get disk transfer address
2018-12-17T22:56:10.279669971Z 26 PC: 17c3d | Set disk transfer address
2018-12-17T22:56:10.280874826Z 79 PC: 17c41 | Find next file
2018-12-17T22:56:10.286950702Z 26 PC: 17c51 | Set disk transfer address
2018-12-17T22:56:10.290820975Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:56:10.292087717Z 78 PC: 136ef | Find first file
2018-12-17T22:56:10.301847866Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:56:10.310490855Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:10.322354661Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\MEM.EXE')
2018-12-17T22:56:10.328486979Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:10.330353154Z 63 PC: 132d8 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:56:10.336909018Z 62 PC: 1331e | Close file
2018-12-17T22:56:10.3403698Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:10.352768883Z 86 PC: 13be2 | Rename file
2018-12-17T22:56:10.365469563Z 26 PC: 12fd0 | Set disk transfer address
2018-12-17T22:56:10.368081474Z 78 PC: 12fe2 | Find first file
2018-12-17T22:56:10.375907049Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:56:10.383099614Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:10.400130272Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\MEM.���')
2018-12-17T22:56:10.408542869Z 87 PC: 131a3 | Get or set file date and time
2018-12-17T22:56:10.410686544Z 63 PC: 132d8 | Read file or device (Read 5504 bytes on handle 5)
2018-12-17T22:56:10.419780148Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:10.422562711Z 64 PC: 13282 | Write file or device (Write 5504 bytes on handle 5)
2018-12-17T22:56:10.431180665Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:10.440474391Z 64 PC: 13282 | Write file or device (Write 5504 bytes on handle 5)
2018-12-17T22:56:10.452285701Z 87 PC: 13205 | Get or set file date and time
2018-12-17T22:56:10.45444575Z 62 PC: 1331e | Close file
2018-12-17T22:56:10.462514652Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:10.471589676Z 86 PC: 13bfb | Rename file
2018-12-17T22:56:10.48412486Z 47 PC: 17c32 | Get disk transfer address
2018-12-17T22:56:10.486096326Z 26 PC: 17c3d | Set disk transfer address
2018-12-17T22:56:10.488607462Z 79 PC: 17c41 | Find next file
2018-12-17T22:56:10.492480231Z 26 PC: 17c51 | Set disk transfer address
2018-12-17T22:56:10.495819588Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:56:10.497656549Z 78 PC: 136ef | Find first file
2018-12-17T22:56:10.504982058Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:56:10.512213Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:10.525044069Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\NLSFUNC.EXE')
2018-12-17T22:56:10.534234152Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:10.537046273Z 63 PC: 132d8 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:56:10.543915307Z 62 PC: 1331e | Close file
2018-12-17T22:56:10.546708496Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:10.559270484Z 86 PC: 13be2 | Rename file
2018-12-17T22:56:10.572468777Z 26 PC: 12fd0 | Set disk transfer address
2018-12-17T22:56:10.574322531Z 78 PC: 12fe2 | Find first file
2018-12-17T22:56:10.58346716Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:56:10.591232989Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:10.602941943Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\NLSFUNC.���')
2018-12-17T22:56:10.613141746Z 87 PC: 131a3 | Get or set file date and time
2018-12-17T22:56:10.6152702Z 63 PC: 132d8 | Read file or device (Read 5504 bytes on handle 5)
2018-12-17T22:56:10.623598677Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:10.627277734Z 64 PC: 13282 | Write file or device (Write 5504 bytes on handle 5)
2018-12-17T22:56:10.902562005Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:10.912061159Z 64 PC: 13282 | Write file or device (Write 5504 bytes on handle 5)
2018-12-17T22:56:10.941208551Z 87 PC: 13205 | Get or set file date and time
2018-12-17T22:56:10.943197936Z 62 PC: 1331e | Close file
2018-12-17T22:56:10.950942889Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:10.962639806Z 86 PC: 13bfb | Rename file
2018-12-17T22:56:10.974927665Z 47 PC: 17c32 | Get disk transfer address
2018-12-17T22:56:10.976032002Z 26 PC: 17c3d | Set disk transfer address
2018-12-17T22:56:10.978176421Z 79 PC: 17c41 | Find next file
2018-12-17T22:56:10.981491416Z 26 PC: 17c51 | Set disk transfer address
2018-12-17T22:56:10.984118419Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:56:10.98640605Z 78 PC: 136ef | Find first file
2018-12-17T22:56:10.995060733Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:56:11.002427088Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:11.013103991Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\QBASIC.EXE')
2018-12-17T22:56:11.021181389Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:11.023190415Z 63 PC: 132d8 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:56:11.029798476Z 62 PC: 1331e | Close file
2018-12-17T22:56:11.03217891Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:11.04377503Z 86 PC: 13be2 | Rename file
2018-12-17T22:56:11.056314513Z 26 PC: 12fd0 | Set disk transfer address
2018-12-17T22:56:11.05755145Z 78 PC: 12fe2 | Find first file
2018-12-17T22:56:11.067737752Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:56:11.075009112Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:11.086268918Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\QBASIC.���')
2018-12-17T22:56:11.095432039Z 87 PC: 131a3 | Get or set file date and time
2018-12-17T22:56:11.097772885Z 63 PC: 132d8 | Read file or device (Read 5504 bytes on handle 5)
2018-12-17T22:56:11.106298946Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:11.109392367Z 64 PC: 13282 | Write file or device (Write 5504 bytes on handle 5)
2018-12-17T22:56:11.118322152Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:11.128783083Z 64 PC: 13282 | Write file or device (Write 5504 bytes on handle 5)
2018-12-17T22:56:11.13972099Z 87 PC: 13205 | Get or set file date and time
2018-12-17T22:56:11.14224729Z 62 PC: 1331e | Close file
2018-12-17T22:56:11.150560977Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:11.159712167Z 86 PC: 13bfb | Rename file
2018-12-17T22:56:11.17225725Z 47 PC: 17c32 | Get disk transfer address
2018-12-17T22:56:11.17342326Z 26 PC: 17c3d | Set disk transfer address
2018-12-17T22:56:11.175058139Z 79 PC: 17c41 | Find next file
2018-12-17T22:56:11.178574615Z 26 PC: 17c51 | Set disk transfer address
2018-12-17T22:56:11.18165073Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:56:11.183560234Z 78 PC: 136ef | Find first file
2018-12-17T22:56:11.191738936Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:56:11.198574802Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:11.210379046Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\REPLACE.EXE')
2018-12-17T22:56:11.218542999Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:11.220547387Z 63 PC: 132d8 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:56:11.228379923Z 62 PC: 1331e | Close file
2018-12-17T22:56:11.230743443Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:11.242323944Z 86 PC: 13be2 | Rename file
2018-12-17T22:56:11.251181718Z 26 PC: 12fd0 | Set disk transfer address
2018-12-17T22:56:11.252367555Z 78 PC: 12fe2 | Find first file
2018-12-17T22:56:11.26116794Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:56:11.268686331Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:11.279608639Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\REPLACE.���')
2018-12-17T22:56:11.28782637Z 87 PC: 131a3 | Get or set file date and time
2018-12-17T22:56:11.289759571Z 63 PC: 132d8 | Read file or device (Read 5504 bytes on handle 5)
2018-12-17T22:56:11.298276461Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:11.300878085Z 64 PC: 13282 | Write file or device (Write 5504 bytes on handle 5)
2018-12-17T22:56:11.309431528Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:11.319490284Z 64 PC: 13282 | Write file or device (Write 5504 bytes on handle 5)
2018-12-17T22:56:11.327402517Z 87 PC: 13205 | Get or set file date and time
2018-12-17T22:56:11.328861241Z 62 PC: 1331e | Close file
2018-12-17T22:56:11.336345744Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:11.348521988Z 86 PC: 13bfb | Rename file
2018-12-17T22:56:11.361483626Z 47 PC: 17c32 | Get disk transfer address
2018-12-17T22:56:11.362865423Z 26 PC: 17c3d | Set disk transfer address
2018-12-17T22:56:11.365796636Z 79 PC: 17c41 | Find next file
2018-12-17T22:56:11.369449935Z 26 PC: 17c51 | Set disk transfer address
2018-12-17T22:56:11.372100392Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:56:11.374090675Z 78 PC: 136ef | Find first file
2018-12-17T22:56:11.382515614Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:56:11.391002279Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:11.403245272Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\RESTORE.EXE')
2018-12-17T22:56:11.410981889Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:11.412760452Z 63 PC: 132d8 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:56:11.419196289Z 62 PC: 1331e | Close file
2018-12-17T22:56:11.420728957Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:11.427487857Z 86 PC: 13be2 | Rename file
2018-12-17T22:56:11.434844116Z 26 PC: 12fd0 | Set disk transfer address
2018-12-17T22:56:11.435925188Z 78 PC: 12fe2 | Find first file
2018-12-17T22:56:11.440323365Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:56:11.452617667Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:11.464016709Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\RESTORE.���')
2018-12-17T22:56:11.479385201Z 87 PC: 131a3 | Get or set file date and time
2018-12-17T22:56:11.4821039Z 63 PC: 132d8 | Read file or device (Read 5504 bytes on handle 5)
2018-12-17T22:56:11.491112879Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:11.494270868Z 64 PC: 13282 | Write file or device (Write 5504 bytes on handle 5)
2018-12-17T22:56:11.502790895Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:11.512699044Z 64 PC: 13282 | Write file or device (Write 5504 bytes on handle 5)
2018-12-17T22:56:11.525326291Z 87 PC: 13205 | Get or set file date and time
2018-12-17T22:56:11.527105484Z 62 PC: 1331e | Close file
2018-12-17T22:56:11.534930784Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:11.546422254Z 86 PC: 13bfb | Rename file
2018-12-17T22:56:11.55386579Z 47 PC: 17c32 | Get disk transfer address
2018-12-17T22:56:11.555194121Z 26 PC: 17c3d | Set disk transfer address
2018-12-17T22:56:11.556736546Z 79 PC: 17c41 | Find next file
2018-12-17T22:56:11.560423288Z 26 PC: 17c51 | Set disk transfer address
2018-12-17T22:56:11.563586235Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:56:11.564945014Z 78 PC: 136ef | Find first file
2018-12-17T22:56:11.571970639Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:56:11.579698248Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:11.590574593Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\SCANDISK.EXE')
2018-12-17T22:56:11.598099238Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:11.600420114Z 63 PC: 132d8 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:56:11.606581272Z 62 PC: 1331e | Close file
2018-12-17T22:56:11.608482528Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:11.620153901Z 86 PC: 13be2 | Rename file
2018-12-17T22:56:11.632855077Z 26 PC: 12fd0 | Set disk transfer address
2018-12-17T22:56:11.634244189Z 78 PC: 12fe2 | Find first file
2018-12-17T22:56:11.642927701Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:56:11.649905466Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:11.661004188Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\SCANDISK.���')
2018-12-17T22:56:11.670404789Z 87 PC: 131a3 | Get or set file date and time
2018-12-17T22:56:11.672474603Z 63 PC: 132d8 | Read file or device (Read 5504 bytes on handle 5)
2018-12-17T22:56:11.681644475Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:11.684461725Z 64 PC: 13282 | Write file or device (Write 5504 bytes on handle 5)
2018-12-17T22:56:11.693328619Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:11.702700294Z 64 PC: 13282 | Write file or device (Write 5504 bytes on handle 5)
2018-12-17T22:56:11.713675563Z 87 PC: 13205 | Get or set file date and time
2018-12-17T22:56:11.715335222Z 62 PC: 1331e | Close file
2018-12-17T22:56:11.723964378Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:11.731128127Z 86 PC: 13bfb | Rename file
2018-12-17T22:56:11.743480705Z 47 PC: 17c32 | Get disk transfer address
2018-12-17T22:56:11.744833114Z 26 PC: 17c3d | Set disk transfer address
2018-12-17T22:56:11.745938247Z 79 PC: 17c41 | Find next file
2018-12-17T22:56:11.749109048Z 26 PC: 17c51 | Set disk transfer address
2018-12-17T22:56:11.752099506Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:56:11.753102053Z 78 PC: 136ef | Find first file
2018-12-17T22:56:11.760594516Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:56:11.768303439Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:11.779313183Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\SETUP.EXE')
2018-12-17T22:56:11.787655658Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:11.789627719Z 63 PC: 132d8 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:56:11.795713806Z 62 PC: 1331e | Close file
2018-12-17T22:56:11.797964734Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:11.809434418Z 86 PC: 13be2 | Rename file
2018-12-17T22:56:11.822585736Z 26 PC: 12fd0 | Set disk transfer address
2018-12-17T22:56:11.824511147Z 78 PC: 12fe2 | Find first file
2018-12-17T22:56:11.833002261Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:56:11.840254724Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:11.851217121Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\SETUP.���')
2018-12-17T22:56:11.858995906Z 87 PC: 131a3 | Get or set file date and time
2018-12-17T22:56:11.861800812Z 63 PC: 132d8 | Read file or device (Read 5504 bytes on handle 5)
2018-12-17T22:56:11.870211597Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:11.872228875Z 64 PC: 13282 | Write file or device (Write 5504 bytes on handle 5)
2018-12-17T22:56:11.881262209Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:11.890706354Z 64 PC: 13282 | Write file or device (Write 5504 bytes on handle 5)
2018-12-17T22:56:11.900809047Z 87 PC: 13205 | Get or set file date and time
2018-12-17T22:56:11.90290294Z 62 PC: 1331e | Close file
2018-12-17T22:56:11.910818741Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:11.921402937Z 86 PC: 13bfb | Rename file
2018-12-17T22:56:11.93399744Z 47 PC: 17c32 | Get disk transfer address
2018-12-17T22:56:11.935079066Z 26 PC: 17c3d | Set disk transfer address
2018-12-17T22:56:11.93660015Z 79 PC: 17c41 | Find next file
2018-12-17T22:56:11.939907596Z 26 PC: 17c51 | Set disk transfer address
2018-12-17T22:56:11.942532643Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:56:11.944140051Z 78 PC: 136ef | Find first file
2018-12-17T22:56:11.951243228Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:56:11.958805328Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:11.969936363Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\XCOPY.EXE')
2018-12-17T22:56:11.977770015Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:11.979677642Z 63 PC: 132d8 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:56:11.985258515Z 62 PC: 1331e | Close file
2018-12-17T22:56:11.987535616Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:11.999838794Z 86 PC: 13be2 | Rename file
2018-12-17T22:56:12.011934564Z 26 PC: 12fd0 | Set disk transfer address
2018-12-17T22:56:12.013101127Z 78 PC: 12fe2 | Find first file
2018-12-17T22:56:12.021136602Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:56:12.027925189Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:12.038399465Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\XCOPY.���')
2018-12-17T22:56:12.046260139Z 87 PC: 131a3 | Get or set file date and time
2018-12-17T22:56:12.048296323Z 63 PC: 132d8 | Read file or device (Read 5504 bytes on handle 5)
2018-12-17T22:56:12.056595402Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:12.05964917Z 64 PC: 13282 | Write file or device (Write 5504 bytes on handle 5)
2018-12-17T22:56:12.067999506Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:12.077361562Z 64 PC: 13282 | Write file or device (Write 5504 bytes on handle 5)
2018-12-17T22:56:12.087138423Z 87 PC: 13205 | Get or set file date and time
2018-12-17T22:56:12.088851132Z 62 PC: 1331e | Close file
2018-12-17T22:56:12.097050786Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:12.107778485Z 86 PC: 13bfb | Rename file
2018-12-17T22:56:12.120088388Z 47 PC: 17c32 | Get disk transfer address
2018-12-17T22:56:12.121790871Z 26 PC: 17c3d | Set disk transfer address
2018-12-17T22:56:12.123051846Z 79 PC: 17c41 | Find next file
2018-12-17T22:56:12.1266875Z 26 PC: 17c51 | Set disk transfer address
2018-12-17T22:56:12.12976246Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:56:12.130931904Z 78 PC: 136ef | Find first file
2018-12-17T22:56:12.13804Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:56:12.145815286Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:12.156635398Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\DEFRAG.EXE')
2018-12-17T22:56:12.164774145Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:12.166772377Z 63 PC: 132d8 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:56:12.172828338Z 62 PC: 1331e | Close file
2018-12-17T22:56:12.17552954Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:12.186684814Z 86 PC: 13be2 | Rename file
2018-12-17T22:56:12.198853287Z 26 PC: 12fd0 | Set disk transfer address
2018-12-17T22:56:12.201509087Z 78 PC: 12fe2 | Find first file
2018-12-17T22:56:12.209179597Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:56:12.216074753Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:12.241294358Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\DEFRAG.���')
2018-12-17T22:56:12.249238277Z 87 PC: 131a3 | Get or set file date and time
2018-12-17T22:56:12.25153823Z 63 PC: 132d8 | Read file or device (Read 5504 bytes on handle 5)
2018-12-17T22:56:12.260729464Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:12.262864009Z 64 PC: 13282 | Write file or device (Write 5504 bytes on handle 5)
2018-12-17T22:56:12.272423836Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:12.281767006Z 64 PC: 13282 | Write file or device (Write 5504 bytes on handle 5)
2018-12-17T22:56:12.291995981Z 87 PC: 13205 | Get or set file date and time
2018-12-17T22:56:12.294155885Z 62 PC: 1331e | Close file
2018-12-17T22:56:12.302130216Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:12.312845527Z 86 PC: 13bfb | Rename file
2018-12-17T22:56:12.320498345Z 47 PC: 17c32 | Get disk transfer address
2018-12-17T22:56:12.321475869Z 26 PC: 17c3d | Set disk transfer address
2018-12-17T22:56:12.323487022Z 79 PC: 17c41 | Find next file
2018-12-17T22:56:12.326908016Z 26 PC: 17c51 | Set disk transfer address
2018-12-17T22:56:12.329364027Z 47 PC: 17c32 | Get disk transfer address
2018-12-17T22:56:12.330998857Z 26 PC: 17c3d | Set disk transfer address
2018-12-17T22:56:12.332075382Z 79 PC: 17c41 | Find next file
2018-12-17T22:56:12.335334083Z 26 PC: 17c51 | Set disk transfer address
2018-12-17T22:56:12.338495708Z 47 PC: 17c32 | Get disk transfer address
2018-12-17T22:56:12.339617647Z 26 PC: 17c3d | Set disk transfer address
2018-12-17T22:56:12.340648376Z 79 PC: 17c41 | Find next file
2018-12-17T22:56:12.343852143Z 26 PC: 17c51 | Set disk transfer address
2018-12-17T22:56:12.345666213Z 47 PC: 17bf5 | Get disk transfer address
2018-12-17T22:56:12.346962789Z 26 PC: 17c00 | Set disk transfer address
2018-12-17T22:56:12.348400998Z 78 PC: 17c0c | Find first file
2018-12-17T22:56:12.355348118Z 26 PC: 17c1e | Set disk transfer address
2018-12-17T22:56:12.358367877Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:56:12.359732187Z 78 PC: 136ef | Find first file
2018-12-17T22:56:12.366814516Z 47 PC: 17c32 | Get disk transfer address
2018-12-17T22:56:12.368576792Z 26 PC: 17c3d | Set disk transfer address
2018-12-17T22:56:12.36966819Z 79 PC: 17c41 | Find next file
2018-12-17T22:56:12.372969144Z 26 PC: 17c51 | Set disk transfer address
2018-12-17T22:56:12.375630841Z 86 PC: 13be2 | Rename file
2018-12-17T22:56:12.390960861Z 26 PC: 12d03 | Set disk transfer address
2018-12-17T22:56:12.392087744Z 78 PC: 12d15 | Find first file
2018-12-17T22:56:12.396460371Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:56:12.400449848Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:12.407367394Z 61 PC: 13236 | Open file (Filename = 'A:\TEST.���')
2018-12-17T22:56:12.414791895Z 87 PC: 131a3 | Get or set file date and time
2018-12-17T22:56:12.416475444Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:12.418890239Z 63 PC: 132d8 | Read file or device (Read 5504 bytes on handle 5)
2018-12-17T22:56:12.424045596Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:12.428440365Z 64 PC: 13282 | Write file or device (Write 5504 bytes on handle 5)
2018-12-17T22:56:12.437154823Z 87 PC: 13205 | Get or set file date and time
2018-12-17T22:56:12.438816881Z 62 PC: 1331e | Close file
2018-12-17T22:56:12.447389474Z 61 PC: 13236 | Open file (Filename = 'A:\TEST.���')
2018-12-17T22:56:12.460696081Z 66 PC: 17edb | Move file pointer
2018-12-17T22:56:12.46267298Z 64 PC: 13282 | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:56:12.471285906Z 87 PC: 13205 | Get or set file date and time
2018-12-17T22:56:12.47303706Z 62 PC: 1331e | Close file
2018-12-17T22:56:12.480770866Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:12.49068787Z 86 PC: 13bfb | Rename file
2018-12-17T22:56:12.50345364Z 75 PC: 12e36 | Execute program
2018-12-17T22:56:12.523023396Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:56:12.524585443Z 78 PC: 136ef | Find first file
2018-12-17T22:56:12.531511635Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:12.538535962Z 65 PC: 13898 | Delete file (Filename = 'anti-vir.dat')
2018-12-17T22:56:12.545620303Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:12.551147273Z 65 PC: 13898 | Delete file (Filename = 'chklist.ms')
2018-12-17T22:56:12.559169556Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:56:12.566836228Z 65 PC: 13898 | Delete file (Filename = 'chklist.cps')
2018-12-17T22:56:12.579686442Z 47 PC: 17bf5 | Get disk transfer address
2018-12-17T22:56:12.580847463Z 26 PC: 17c00 | Set disk transfer address
2018-12-17T22:56:12.581813897Z 78 PC: 17c0c | Find first file
2018-12-17T22:56:12.588612993Z 26 PC: 17c1e | Set disk transfer address
2018-12-17T22:56:12.591385977Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:56:12.592751475Z 78 PC: 136ef | Find first file
2018-12-17T22:56:12.599373314Z 47 PC: 17c32 | Get disk transfer address
2018-12-17T22:56:12.600484873Z 26 PC: 17c3d | Set disk transfer address
2018-12-17T22:56:12.602149623Z 79 PC: 17c41 | Find next file
2018-12-17T22:56:12.60458233Z 26 PC: 17c51 | Set disk transfer address
2018-12-17T22:56:12.606829146Z 47 PC: 17bf5 | Get disk transfer address
2018-12-17T22:56:12.608837847Z 26 PC: 17c00 | Set disk transfer address
2018-12-17T22:56:12.609936671Z 78 PC: 17c0c | Find first file
2018-12-17T22:56:12.616634821Z 26 PC: 17c1e | Set disk transfer address
2018-12-17T22:56:12.61973762Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:56:12.620814278Z 78 PC: 136ef | Find first file
2018-12-17T22:56:12.627862224Z 47 PC: 17c32 | Get disk transfer address
2018-12-17T22:56:12.629005099Z 26 PC: 17c3d | Set disk transfer address
2018-12-17T22:56:12.630294129Z 79 PC: 17c41 | Find next file
2018-12-17T22:56:12.633606959Z 26 PC: 17c51 | Set disk transfer address
2018-12-17T22:56:12.636591842Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:56:12.638522412Z 78 PC: 136ef | Find first file
2018-12-17T22:56:12.65107909Z 47 PC: 17c32 | Get disk transfer address
2018-12-17T22:56:12.652186915Z 26 PC: 17c3d | Set disk transfer address
2018-12-17T22:56:12.653893975Z 79 PC: 17c41 | Find next file
2018-12-17T22:56:12.655782943Z 26 PC: 17c51 | Set disk transfer address
2018-12-17T22:56:12.65792009Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:56:12.658871741Z 78 PC: 136ef | Find first file
2018-12-17T22:56:12.662823477Z 47 PC: 17c32 | Get disk transfer address
2018-12-17T22:56:12.665002433Z 26 PC: 17c3d | Set disk transfer address
2018-12-17T22:56:12.666081324Z 79 PC: 17c41 | Find next file
2018-12-17T22:56:12.668128386Z 26 PC: 17c51 | Set disk transfer address
2018-12-17T22:56:12.67043947Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:56:12.671439147Z 78 PC: 136ef | Find first file
2018-12-17T22:56:12.678723897Z 47 PC: 17c32 | Get disk transfer address
2018-12-17T22:56:12.679841242Z 26 PC: 17c3d | Set disk transfer address
2018-12-17T22:56:12.681026341Z 79 PC: 17c41 | Find next file
2018-12-17T22:56:12.684597862Z 26 PC: 17c51 | Set disk transfer address
2018-12-17T22:56:12.686557032Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:56:12.688414498Z 78 PC: 136ef | Find first file
2018-12-17T22:56:12.69261877Z 47 PC: 17c32 | Get disk transfer address
2018-12-17T22:56:12.694117692Z 26 PC: 17c3d | Set disk transfer address
2018-12-17T22:56:12.695826963Z 79 PC: 17c41 | Find next file
2018-12-17T22:56:12.698499336Z 26 PC: 17c51 | Set disk transfer address
2018-12-17T22:56:12.701642863Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:56:12.703197639Z 78 PC: 136ef | Find first file
2018-12-17T22:56:12.709698263Z 47 PC: 17c32 | Get disk transfer address
2018-12-17T22:56:12.711417017Z 26 PC: 17c3d | Set disk transfer address
2018-12-17T22:56:12.712684639Z 79 PC: 17c41 | Find next file
2018-12-17T22:56:12.715905906Z 26 PC: 17c51 | Set disk transfer address
2018-12-17T22:56:12.718832237Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:56:12.720142129Z 78 PC: 136ef | Find first file
2018-12-17T22:56:12.728439685Z 47 PC: 17c32 | Get disk transfer address
2018-12-17T22:56:12.729575324Z 26 PC: 17c3d | Set disk transfer address
2018-12-17T22:56:12.730828431Z 79 PC: 17c41 | Find next file
2018-12-17T22:56:12.73861014Z 26 PC: 17c51 | Set disk transfer address
2018-12-17T22:56:12.740893144Z 76 PC: 12ebd | Terminate with return code (Return code = '0')