Sample viewer

vx.netlux.org/Virus.DOS.HLLP.Kremlin.5228

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:59:54.165794524Z 98 PC: 18aa6 | Get current PSP
2018-12-17T22:59:54.168299362Z 71 PC: 12c97 | Get current directory
2018-12-17T22:59:54.172118168Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:54.182862951Z 65 PC: 13c35 | Delete file (Filename = 'anti-vir.dat')
2018-12-17T22:59:54.190162799Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:54.203282795Z 65 PC: 13c35 | Delete file (Filename = 'chklist.ms')
2018-12-17T22:59:54.210896604Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:54.221055926Z 65 PC: 13c35 | Delete file (Filename = 'chklist.cps')
2018-12-17T22:59:54.231041702Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:54.237388529Z 65 PC: 13c35 | Delete file (Filename = 'vs.vsn')
2018-12-17T22:59:54.244336337Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:54.253090247Z 65 PC: 13c35 | Delete file (Filename = 'ivb.ntz')
2018-12-17T22:59:54.260811478Z 26 PC: 12d58 | Set disk transfer address
2018-12-17T22:59:54.264067026Z 78 PC: 12d6a | Find first file
2018-12-17T22:59:54.280374462Z 67 PC: 134ba | Get or set file attributes
2018-12-17T22:59:54.289706139Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:54.309133999Z 61 PC: 13608 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:59:54.317915913Z 63 PC: 136aa | Read file or device (Read 5228 bytes on handle 5)
2018-12-17T22:59:54.33100448Z 62 PC: 136f0 | Close file
2018-12-17T22:59:54.334826573Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:54.362143158Z 47 PC: 188e5 | Get disk transfer address
2018-12-17T22:59:54.36426206Z 26 PC: 188f0 | Set disk transfer address
2018-12-17T22:59:54.367143064Z 78 PC: 188fc | Find first file
2018-12-17T22:59:54.38227408Z 26 PC: 1890e | Set disk transfer address
2018-12-17T22:59:54.388981555Z 26 PC: 13ad8 | Set disk transfer address
2018-12-17T22:59:54.391645832Z 78 PC: 13aea | Find first file
2018-12-17T22:59:54.407192178Z 67 PC: 134ba | Get or set file attributes
2018-12-17T22:59:54.421816191Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:54.443791458Z 61 PC: 13608 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:59:54.461412513Z 66 PC: 18bcb | Move file pointer
2018-12-17T22:59:54.466155847Z 63 PC: 136aa | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:59:54.471405653Z 62 PC: 136f0 | Close file
2018-12-17T22:59:54.475421279Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:54.498716207Z 47 PC: 18922 | Get disk transfer address
2018-12-17T22:59:54.502101048Z 26 PC: 1892d | Set disk transfer address
2018-12-17T22:59:54.505197788Z 79 PC: 18931 | Find next file
2018-12-17T22:59:54.512156876Z 26 PC: 18941 | Set disk transfer address
2018-12-17T22:59:54.516634511Z 47 PC: 188e5 | Get disk transfer address
2018-12-17T22:59:54.519424694Z 26 PC: 188f0 | Set disk transfer address
2018-12-17T22:59:54.523135638Z 78 PC: 188fc | Find first file
2018-12-17T22:59:54.538596985Z 26 PC: 1890e | Set disk transfer address
2018-12-17T22:59:54.545575499Z 26 PC: 13ad8 | Set disk transfer address
2018-12-17T22:59:54.548476731Z 78 PC: 13aea | Find first file
2018-12-17T22:59:54.562120402Z 47 PC: 18922 | Get disk transfer address
2018-12-17T22:59:54.564529068Z 26 PC: 1892d | Set disk transfer address
2018-12-17T22:59:54.566700108Z 79 PC: 18931 | Find next file
2018-12-17T22:59:54.572987584Z 26 PC: 18941 | Set disk transfer address
2018-12-17T22:59:54.580003609Z 26 PC: 13ad8 | Set disk transfer address
2018-12-17T22:59:54.582378121Z 78 PC: 13aea | Find first file
2018-12-17T22:59:54.596182254Z 47 PC: 18922 | Get disk transfer address
2018-12-17T22:59:54.598015419Z 26 PC: 1892d | Set disk transfer address
2018-12-17T22:59:54.599743887Z 79 PC: 18931 | Find next file
2018-12-17T22:59:54.604075788Z 26 PC: 18941 | Set disk transfer address
2018-12-17T22:59:54.6084881Z 26 PC: 13ad8 | Set disk transfer address
2018-12-17T22:59:54.610229212Z 78 PC: 13aea | Find first file
2018-12-17T22:59:54.620021714Z 47 PC: 18922 | Get disk transfer address
2018-12-17T22:59:54.621646257Z 26 PC: 1892d | Set disk transfer address
2018-12-17T22:59:54.623038403Z 79 PC: 18931 | Find next file
2018-12-17T22:59:54.626295234Z 26 PC: 18941 | Set disk transfer address
2018-12-17T22:59:54.630547736Z 26 PC: 13ad8 | Set disk transfer address
2018-12-17T22:59:54.632003111Z 78 PC: 13aea | Find first file
2018-12-17T22:59:54.63862227Z 47 PC: 18922 | Get disk transfer address
2018-12-17T22:59:54.641088054Z 26 PC: 1892d | Set disk transfer address
2018-12-17T22:59:54.64251733Z 79 PC: 18931 | Find next file
2018-12-17T22:59:54.645491048Z 26 PC: 18941 | Set disk transfer address
2018-12-17T22:59:54.649698686Z 26 PC: 13ad8 | Set disk transfer address
2018-12-17T22:59:54.65105249Z 78 PC: 13aea | Find first file
2018-12-17T22:59:54.657694852Z 47 PC: 18922 | Get disk transfer address
2018-12-17T22:59:54.660404004Z 26 PC: 1892d | Set disk transfer address
2018-12-17T22:59:54.662895075Z 79 PC: 18931 | Find next file
2018-12-17T22:59:54.665862302Z 26 PC: 18941 | Set disk transfer address
2018-12-17T22:59:54.670201316Z 47 PC: 18922 | Get disk transfer address
2018-12-17T22:59:54.671936377Z 26 PC: 1892d | Set disk transfer address
2018-12-17T22:59:54.673320047Z 79 PC: 18931 | Find next file
2018-12-17T22:59:54.676497799Z 26 PC: 18941 | Set disk transfer address
2018-12-17T22:59:54.680446289Z 26 PC: 13ad8 | Set disk transfer address
2018-12-17T22:59:54.681767782Z 78 PC: 13aea | Find first file
2018-12-17T22:59:54.688215399Z 47 PC: 18922 | Get disk transfer address
2018-12-17T22:59:54.690728262Z 26 PC: 1892d | Set disk transfer address
2018-12-17T22:59:54.691963483Z 79 PC: 18931 | Find next file
2018-12-17T22:59:54.694606129Z 26 PC: 18941 | Set disk transfer address
2018-12-17T22:59:54.697583715Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:54.703748701Z 65 PC: 13c35 | Delete file (Filename = 'anti-vir.dat')
2018-12-17T22:59:54.710679296Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:54.717937666Z 65 PC: 13c35 | Delete file (Filename = 'chklist.ms')
2018-12-17T22:59:54.724551866Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:54.730644545Z 65 PC: 13c35 | Delete file (Filename = 'chklist.cps')
2018-12-17T22:59:54.738483698Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:54.745127654Z 65 PC: 13c35 | Delete file (Filename = 'vs.vsn')
2018-12-17T22:59:54.751891645Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:54.758759171Z 65 PC: 13c35 | Delete file (Filename = 'ivb.ntz')
2018-12-17T22:59:54.765741282Z 47 PC: 188e5 | Get disk transfer address
2018-12-17T22:59:54.767308207Z 26 PC: 188f0 | Set disk transfer address
2018-12-17T22:59:54.769064467Z 78 PC: 188fc | Find first file
2018-12-17T22:59:54.77633453Z 26 PC: 1890e | Set disk transfer address
2018-12-17T22:59:54.779806194Z 26 PC: 13ad8 | Set disk transfer address
2018-12-17T22:59:54.781298769Z 78 PC: 13aea | Find first file
2018-12-17T22:59:54.789039977Z 67 PC: 134ba | Get or set file attributes
2018-12-17T22:59:54.795257932Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:54.8063358Z 61 PC: 13608 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:59:54.81496081Z 66 PC: 18bcb | Move file pointer
2018-12-17T22:59:54.817041189Z 63 PC: 136aa | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:59:54.820264146Z 62 PC: 136f0 | Close file
2018-12-17T22:59:54.823067845Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:54.833968881Z 47 PC: 18922 | Get disk transfer address
2018-12-17T22:59:54.83553312Z 26 PC: 1892d | Set disk transfer address
2018-12-17T22:59:54.837987403Z 79 PC: 18931 | Find next file
2018-12-17T22:59:54.841578681Z 26 PC: 18941 | Set disk transfer address
2018-12-17T22:59:54.844486286Z 47 PC: 188e5 | Get disk transfer address
2018-12-17T22:59:54.847284295Z 26 PC: 188f0 | Set disk transfer address
2018-12-17T22:59:54.849013725Z 78 PC: 188fc | Find first file
2018-12-17T22:59:54.85567348Z 26 PC: 1890e | Set disk transfer address
2018-12-17T22:59:54.859726577Z 26 PC: 13ad8 | Set disk transfer address
2018-12-17T22:59:54.862419618Z 78 PC: 13aea | Find first file
2018-12-17T22:59:54.869211682Z 47 PC: 18922 | Get disk transfer address
2018-12-17T22:59:54.871463784Z 26 PC: 1892d | Set disk transfer address
2018-12-17T22:59:54.872993218Z 79 PC: 18931 | Find next file
2018-12-17T22:59:54.876858413Z 26 PC: 18941 | Set disk transfer address
2018-12-17T22:59:54.881096197Z 26 PC: 13ad8 | Set disk transfer address
2018-12-17T22:59:54.882605724Z 78 PC: 13aea | Find first file
2018-12-17T22:59:54.889404911Z 47 PC: 18922 | Get disk transfer address
2018-12-17T22:59:54.891775656Z 26 PC: 1892d | Set disk transfer address
2018-12-17T22:59:54.893250398Z 79 PC: 18931 | Find next file
2018-12-17T22:59:54.896140268Z 26 PC: 18941 | Set disk transfer address
2018-12-17T22:59:54.907435745Z 26 PC: 13ad8 | Set disk transfer address
2018-12-17T22:59:54.909196765Z 78 PC: 13aea | Find first file
2018-12-17T22:59:54.916060154Z 47 PC: 18922 | Get disk transfer address
2018-12-17T22:59:54.917862872Z 26 PC: 1892d | Set disk transfer address
2018-12-17T22:59:54.920453089Z 79 PC: 18931 | Find next file
2018-12-17T22:59:54.923544459Z 26 PC: 18941 | Set disk transfer address
2018-12-17T22:59:54.927197384Z 26 PC: 13ad8 | Set disk transfer address
2018-12-17T22:59:54.929096422Z 78 PC: 13aea | Find first file
2018-12-17T22:59:54.935728265Z 47 PC: 18922 | Get disk transfer address
2018-12-17T22:59:54.937162951Z 26 PC: 1892d | Set disk transfer address
2018-12-17T22:59:54.943491785Z 79 PC: 18931 | Find next file
2018-12-17T22:59:54.946374062Z 26 PC: 18941 | Set disk transfer address
2018-12-17T22:59:54.949690605Z 26 PC: 13ad8 | Set disk transfer address
2018-12-17T22:59:54.951328353Z 78 PC: 13aea | Find first file
2018-12-17T22:59:54.95796761Z 47 PC: 18922 | Get disk transfer address
2018-12-17T22:59:54.95927679Z 26 PC: 1892d | Set disk transfer address
2018-12-17T22:59:54.96549751Z 79 PC: 18931 | Find next file
2018-12-17T22:59:54.968611733Z 26 PC: 18941 | Set disk transfer address
2018-12-17T22:59:54.973156123Z 47 PC: 18922 | Get disk transfer address
2018-12-17T22:59:54.975038159Z 26 PC: 1892d | Set disk transfer address
2018-12-17T22:59:54.976210152Z 79 PC: 18931 | Find next file
2018-12-17T22:59:54.979102708Z 26 PC: 18941 | Set disk transfer address
2018-12-17T22:59:54.983184679Z 26 PC: 13ad8 | Set disk transfer address
2018-12-17T22:59:54.984726948Z 78 PC: 13aea | Find first file
2018-12-17T22:59:54.99145387Z 47 PC: 18922 | Get disk transfer address
2018-12-17T22:59:54.993349292Z 26 PC: 1892d | Set disk transfer address
2018-12-17T22:59:54.994826277Z 79 PC: 18931 | Find next file
2018-12-17T22:59:54.997721558Z 26 PC: 18941 | Set disk transfer address
2018-12-17T22:59:54.999951218Z 98 PC: 18add | Get current PSP
2018-12-17T22:59:55.00196878Z 98 PC: 18add | Get current PSP
2018-12-17T22:59:55.004220732Z 98 PC: 18add | Get current PSP
2018-12-17T22:59:55.008161888Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:55.018591528Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:59:55.025973682Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:55.03387455Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:59:55.042217739Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:55.049171246Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:59:55.057669717Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:55.064726109Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:59:55.07210729Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:55.080026772Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:59:55.087223106Z 47 PC: 188e5 | Get disk transfer address
2018-12-17T22:59:55.088490588Z 26 PC: 188f0 | Set disk transfer address
2018-12-17T22:59:55.09069461Z 78 PC: 188fc | Find first file
2018-12-17T22:59:55.097458962Z 26 PC: 1890e | Set disk transfer address
2018-12-17T22:59:55.100702939Z 26 PC: 13ad8 | Set disk transfer address
2018-12-17T22:59:55.103146601Z 78 PC: 13aea | Find first file
2018-12-17T22:59:55.110796498Z 67 PC: 134ba | Get or set file attributes
2018-12-17T22:59:55.117493713Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:55.463040271Z 61 PC: 13608 | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:59:55.471274836Z 66 PC: 18bcb | Move file pointer
2018-12-17T22:59:55.47351171Z 63 PC: 136aa | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:59:55.480592096Z 62 PC: 136f0 | Close file
2018-12-17T22:59:55.483628732Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:55.495211439Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:55.503412281Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:59:55.511753256Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:55.519184241Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:59:55.52705381Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:55.534528316Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:59:55.542381314Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:55.549646158Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:59:55.558492823Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:55.565575232Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:59:55.573760985Z 86 PC: 13f92 | Rename file
2018-12-17T22:59:55.597060582Z 26 PC: 133a2 | Set disk transfer address
2018-12-17T22:59:55.598643417Z 78 PC: 133b4 | Find first file
2018-12-17T22:59:55.60628107Z 67 PC: 134ba | Get or set file attributes
2018-12-17T22:59:55.614606856Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:55.627199933Z 61 PC: 13608 | Open file (Filename = 'C:\DOS\ATTRIB.���')
2018-12-17T22:59:55.634746294Z 87 PC: 13575 | Get or set file date and time
2018-12-17T22:59:55.637344497Z 63 PC: 136aa | Read file or device (Read 5228 bytes on handle 5)
2018-12-17T22:59:55.645655966Z 66 PC: 18bcb | Move file pointer
2018-12-17T22:59:55.648791068Z 64 PC: 13654 | Write file or device (Write 5228 bytes on handle 5)
2018-12-17T22:59:55.674630017Z 66 PC: 18bcb | Move file pointer
2018-12-17T22:59:55.689758647Z 64 PC: 13654 | Write file or device (Write 5228 bytes on handle 5)
2018-12-17T22:59:55.721597261Z 87 PC: 135d7 | Get or set file date and time
2018-12-17T22:59:55.725021797Z 62 PC: 136f0 | Close file
2018-12-17T22:59:55.769159433Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:55.787634223Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:55.795587149Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:59:55.803747394Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:55.810960088Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:59:55.819295102Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:55.826377172Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:59:55.833669326Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:55.841249892Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:59:55.848405529Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:55.856022413Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:59:55.863579365Z 86 PC: 13fae | Rename file
2018-12-17T22:59:55.909920002Z 47 PC: 18922 | Get disk transfer address
2018-12-17T22:59:55.91160582Z 26 PC: 1892d | Set disk transfer address
2018-12-17T22:59:55.913924477Z 79 PC: 18931 | Find next file
2018-12-17T22:59:55.91841179Z 26 PC: 18941 | Set disk transfer address
2018-12-17T22:59:55.92194505Z 26 PC: 13ad8 | Set disk transfer address
2018-12-17T22:59:55.923480656Z 78 PC: 13aea | Find first file
2018-12-17T22:59:55.930948069Z 67 PC: 134ba | Get or set file attributes
2018-12-17T22:59:55.937740103Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:55.985992984Z 61 PC: 13608 | Open file (Filename = 'C:\DOS\CHKDSK.EXE')
2018-12-17T22:59:55.99452092Z 66 PC: 18bcb | Move file pointer
2018-12-17T22:59:55.996539965Z 63 PC: 136aa | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:59:56.002542515Z 62 PC: 136f0 | Close file
2018-12-17T22:59:56.004789518Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:56.030228836Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:56.037101681Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:59:56.045362425Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:56.052584798Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:59:56.060119969Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:56.069077943Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:59:56.076466939Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:56.083397985Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:59:56.091615538Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:56.098332731Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:59:56.105141516Z 86 PC: 13f92 | Rename file
2018-12-17T22:59:56.138696195Z 26 PC: 133a2 | Set disk transfer address
2018-12-17T22:59:56.139927048Z 78 PC: 133b4 | Find first file
2018-12-17T22:59:56.147047419Z 67 PC: 134ba | Get or set file attributes
2018-12-17T22:59:56.156253139Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:56.207212596Z 61 PC: 13608 | Open file (Filename = 'C:\DOS\CHKDSK.���')
2018-12-17T22:59:56.215371258Z 87 PC: 13575 | Get or set file date and time
2018-12-17T22:59:56.218289313Z 63 PC: 136aa | Read file or device (Read 5228 bytes on handle 5)
2018-12-17T22:59:56.226935912Z 66 PC: 18bcb | Move file pointer
2018-12-17T22:59:56.229474172Z 64 PC: 13654 | Write file or device (Write 5228 bytes on handle 5)
2018-12-17T22:59:56.264762268Z 66 PC: 18bcb | Move file pointer
2018-12-17T22:59:56.280937786Z 64 PC: 13654 | Write file or device (Write 5228 bytes on handle 5)
2018-12-17T22:59:56.3588581Z 87 PC: 135d7 | Get or set file date and time
2018-12-17T22:59:56.362524951Z 62 PC: 136f0 | Close file
2018-12-17T22:59:56.401149076Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:56.412675658Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:56.421062789Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:59:56.42877926Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:56.436756872Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:59:56.445469385Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:56.452650912Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:59:56.460705609Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:56.467775776Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:59:56.476955096Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:56.484921627Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:59:56.491985683Z 86 PC: 13fae | Rename file
2018-12-17T22:59:56.505670861Z 47 PC: 18922 | Get disk transfer address
2018-12-17T22:59:56.507346019Z 26 PC: 1892d | Set disk transfer address
2018-12-17T22:59:56.508965342Z 79 PC: 18931 | Find next file
2018-12-17T22:59:56.513778047Z 26 PC: 18941 | Set disk transfer address
2018-12-17T22:59:56.515829402Z 47 PC: 188e5 | Get disk transfer address
2018-12-17T22:59:56.517193715Z 26 PC: 188f0 | Set disk transfer address
2018-12-17T22:59:56.519572335Z 78 PC: 188fc | Find first file
2018-12-17T22:59:56.529206991Z 26 PC: 1890e | Set disk transfer address
2018-12-17T22:59:56.532935889Z 26 PC: 13ad8 | Set disk transfer address
2018-12-17T22:59:56.536097601Z 78 PC: 13aea | Find first file
2018-12-17T22:59:56.544037974Z 47 PC: 18922 | Get disk transfer address
2018-12-17T22:59:56.547104086Z 26 PC: 1892d | Set disk transfer address
2018-12-17T22:59:56.549845958Z 79 PC: 18931 | Find next file
2018-12-17T22:59:56.553792204Z 26 PC: 18941 | Set disk transfer address
2018-12-17T22:59:56.5580682Z 26 PC: 13ad8 | Set disk transfer address
2018-12-17T22:59:56.560978128Z 78 PC: 13aea | Find first file
2018-12-17T22:59:56.568153543Z 67 PC: 134ba | Get or set file attributes
2018-12-17T22:59:56.575682452Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:56.588084028Z 61 PC: 13608 | Open file (Filename = 'C:\DOS\FORMAT.COM')
2018-12-17T22:59:56.595882674Z 66 PC: 18bcb | Move file pointer
2018-12-17T22:59:56.598119968Z 63 PC: 136aa | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:59:56.605260297Z 62 PC: 136f0 | Close file
2018-12-17T22:59:56.607508281Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:56.618685566Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:56.628007515Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:59:56.637664784Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:56.645705865Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:59:56.654118334Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:56.660954992Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:59:56.668155123Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:56.675701955Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:59:56.682959425Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:56.689974628Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:59:56.697873983Z 86 PC: 13f92 | Rename file
2018-12-17T22:59:56.712233428Z 26 PC: 133a2 | Set disk transfer address
2018-12-17T22:59:56.713632948Z 78 PC: 133b4 | Find first file
2018-12-17T22:59:56.721594771Z 67 PC: 134ba | Get or set file attributes
2018-12-17T22:59:56.728340448Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:56.738837335Z 61 PC: 13608 | Open file (Filename = 'C:\DOS\FORMAT.���')
2018-12-17T22:59:56.747099792Z 87 PC: 13575 | Get or set file date and time
2018-12-17T22:59:56.748783847Z 63 PC: 136aa | Read file or device (Read 5228 bytes on handle 5)
2018-12-17T22:59:56.756936498Z 66 PC: 18bcb | Move file pointer
2018-12-17T22:59:56.759708737Z 64 PC: 13654 | Write file or device (Write 5228 bytes on handle 5)
2018-12-17T22:59:56.7679047Z 66 PC: 18bcb | Move file pointer
2018-12-17T22:59:56.783307306Z 64 PC: 13654 | Write file or device (Write 5228 bytes on handle 5)
2018-12-17T22:59:56.793549534Z 87 PC: 135d7 | Get or set file date and time
2018-12-17T22:59:56.795259066Z 62 PC: 136f0 | Close file
2018-12-17T22:59:56.803070897Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:56.814377275Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:56.821240202Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:59:56.82983789Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:56.837870455Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:59:56.845268558Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:56.852555963Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:59:56.860890686Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:56.871016947Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:59:56.880191388Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:56.888413419Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:59:56.895702427Z 86 PC: 13fae | Rename file
2018-12-17T22:59:56.910612417Z 47 PC: 18922 | Get disk transfer address
2018-12-17T22:59:56.912466401Z 26 PC: 1892d | Set disk transfer address
2018-12-17T22:59:56.914054125Z 79 PC: 18931 | Find next file
2018-12-17T22:59:56.918985072Z 26 PC: 18941 | Set disk transfer address
2018-12-17T22:59:56.922296825Z 26 PC: 13ad8 | Set disk transfer address
2018-12-17T22:59:56.923564347Z 78 PC: 13aea | Find first file
2018-12-17T22:59:56.931594418Z 67 PC: 134ba | Get or set file attributes
2018-12-17T22:59:56.938290872Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:56.949102871Z 61 PC: 13608 | Open file (Filename = 'C:\DOS\KEYB.COM')
2018-12-17T22:59:56.958231687Z 66 PC: 18bcb | Move file pointer
2018-12-17T22:59:56.961109375Z 63 PC: 136aa | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:59:56.967825777Z 62 PC: 136f0 | Close file
2018-12-17T22:59:56.971177505Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:56.982658551Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:56.98761744Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:59:56.993346176Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:56.998990193Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:59:57.004744166Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:57.01038658Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:59:57.016486684Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:57.021360373Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:59:57.02734559Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:57.032304399Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:59:57.038615479Z 86 PC: 13f92 | Rename file
2018-12-17T22:59:57.059355346Z 26 PC: 133a2 | Set disk transfer address
2018-12-17T22:59:57.060631053Z 78 PC: 133b4 | Find first file
2018-12-17T22:59:57.068474894Z 67 PC: 134ba | Get or set file attributes
2018-12-17T22:59:57.077060859Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:57.086265737Z 61 PC: 13608 | Open file (Filename = 'C:\DOS\KEYB.���')
2018-12-17T22:59:57.092652139Z 87 PC: 13575 | Get or set file date and time
2018-12-17T22:59:57.095719293Z 63 PC: 136aa | Read file or device (Read 5228 bytes on handle 5)
2018-12-17T22:59:57.104727562Z 66 PC: 18bcb | Move file pointer
2018-12-17T22:59:57.107071967Z 64 PC: 13654 | Write file or device (Write 5228 bytes on handle 5)
2018-12-17T22:59:57.115950984Z 66 PC: 18bcb | Move file pointer
2018-12-17T22:59:57.130724167Z 64 PC: 13654 | Write file or device (Write 5228 bytes on handle 5)
2018-12-17T22:59:57.140685246Z 87 PC: 135d7 | Get or set file date and time
2018-12-17T22:59:57.143557714Z 62 PC: 136f0 | Close file
2018-12-17T22:59:57.151583647Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:57.163219824Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:57.171234888Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:59:57.17840394Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:57.185286484Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:59:57.193468991Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:57.200275803Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:59:57.20747373Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:57.214897791Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:59:57.221889321Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:57.229145618Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:59:57.236871046Z 86 PC: 13fae | Rename file
2018-12-17T22:59:57.248692451Z 47 PC: 18922 | Get disk transfer address
2018-12-17T22:59:57.25016043Z 26 PC: 1892d | Set disk transfer address
2018-12-17T22:59:57.251636173Z 79 PC: 18931 | Find next file
2018-12-17T22:59:57.255017257Z 26 PC: 18941 | Set disk transfer address
2018-12-17T22:59:57.259159942Z 26 PC: 13ad8 | Set disk transfer address
2018-12-17T22:59:57.260447742Z 78 PC: 13aea | Find first file
2018-12-17T22:59:57.267239456Z 67 PC: 134ba | Get or set file attributes
2018-12-17T22:59:57.274113063Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:57.284505233Z 61 PC: 13608 | Open file (Filename = 'C:\DOS\SYS.COM')
2018-12-17T22:59:57.292988646Z 66 PC: 18bcb | Move file pointer
2018-12-17T22:59:57.295384318Z 63 PC: 136aa | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:59:57.30115374Z 62 PC: 136f0 | Close file
2018-12-17T22:59:57.303187081Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:57.3153457Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:57.322318745Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:59:57.329632729Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:57.337544869Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:59:57.344626087Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:57.351247831Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:59:57.35999015Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:57.366750955Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:59:57.374085047Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:57.38177543Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:59:57.388990469Z 86 PC: 13f92 | Rename file
2018-12-17T22:59:57.401929145Z 26 PC: 133a2 | Set disk transfer address
2018-12-17T22:59:57.403264514Z 78 PC: 133b4 | Find first file
2018-12-17T22:59:57.4100043Z 67 PC: 134ba | Get or set file attributes
2018-12-17T22:59:57.417883246Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:57.428317084Z 61 PC: 13608 | Open file (Filename = 'C:\DOS\SYS.���')
2018-12-17T22:59:57.435547903Z 87 PC: 13575 | Get or set file date and time
2018-12-17T22:59:57.437602293Z 63 PC: 136aa | Read file or device (Read 5228 bytes on handle 5)
2018-12-17T22:59:57.445915667Z 66 PC: 18bcb | Move file pointer
2018-12-17T22:59:57.44783795Z 64 PC: 13654 | Write file or device (Write 5228 bytes on handle 5)
2018-12-17T22:59:57.47106559Z 66 PC: 18bcb | Move file pointer
2018-12-17T22:59:57.487429743Z 64 PC: 13654 | Write file or device (Write 5228 bytes on handle 5)
2018-12-17T22:59:57.497269214Z 87 PC: 135d7 | Get or set file date and time
2018-12-17T22:59:57.499579476Z 62 PC: 136f0 | Close file
2018-12-17T22:59:57.507346873Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:57.518533976Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:57.526472585Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:59:57.533799624Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:57.541989395Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:59:57.549400674Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:57.556109922Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:59:57.564911573Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:57.571887212Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:59:57.579271068Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:57.587408881Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:59:57.594707306Z 86 PC: 13fae | Rename file
2018-12-17T22:59:57.607420489Z 47 PC: 18922 | Get disk transfer address
2018-12-17T22:59:57.610041514Z 26 PC: 1892d | Set disk transfer address
2018-12-17T22:59:57.611266316Z 79 PC: 18931 | Find next file
2018-12-17T22:59:57.614866562Z 26 PC: 18941 | Set disk transfer address
2018-12-17T22:59:57.618848545Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:57.625607036Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:59:57.632907696Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:57.640798384Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:59:57.648339836Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:57.655301679Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:59:57.663728627Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:57.671908619Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:59:57.679354702Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:57.687238358Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:59:57.694532154Z 86 PC: 13f92 | Rename file
2018-12-17T22:59:57.707036644Z 26 PC: 12e8e | Set disk transfer address
2018-12-17T22:59:57.709101614Z 78 PC: 12ea0 | Find first file
2018-12-17T22:59:57.716451076Z 67 PC: 134ba | Get or set file attributes
2018-12-17T22:59:57.723102216Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:57.7355295Z 61 PC: 13608 | Open file (Filename = 'A:\TEST.���')
2018-12-17T22:59:57.743354725Z 87 PC: 13575 | Get or set file date and time
2018-12-17T22:59:57.745572673Z 66 PC: 18bcb | Move file pointer
2018-12-17T22:59:57.748490747Z 63 PC: 136aa | Read file or device (Read 5228 bytes on handle 5)
2018-12-17T22:59:57.757769124Z 66 PC: 18bcb | Move file pointer
2018-12-17T22:59:57.776331278Z 64 PC: 13654 | Write file or device (Write 5228 bytes on handle 5)
2018-12-17T22:59:57.785371226Z 87 PC: 135d7 | Get or set file date and time
2018-12-17T22:59:57.786978747Z 62 PC: 136f0 | Close file
2018-12-17T22:59:57.795518726Z 61 PC: 13608 | Open file (Filename = 'A:\TEST.���')
2018-12-17T22:59:57.803466892Z 66 PC: 18bcb | Move file pointer
2018-12-17T22:59:57.805417338Z 64 PC: 13654 | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:59:57.81436875Z 87 PC: 135d7 | Get or set file date and time
2018-12-17T22:59:57.816001428Z 62 PC: 136f0 | Close file
2018-12-17T22:59:57.823732677Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:57.835106913Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:57.84173559Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:59:57.848833448Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:57.856175125Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:59:57.864422174Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:57.87163073Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:59:57.879750931Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:57.88726912Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:59:57.895640712Z 67 PC: 134f1 | Get or set file attributes
2018-12-17T22:59:57.90363763Z 65 PC: 13c35 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:59:57.911112638Z 86 PC: 13fae | Rename file
2018-12-17T22:59:57.926207124Z 75 PC: 13138 | Execute program
2018-12-17T22:59:57.949172793Z 80 PC: 1b4c9 | Set current PSP
2018-12-17T22:59:57.950376866Z 48 PC: 1b4ce | Get DOS version
2018-12-17T22:59:57.953288528Z 99 PC: 21cb0 | Get DBCS lead byte table pointer
2018-12-17T22:59:57.956459707Z 101 PC: 1b554 | Get extended country info
2018-12-17T22:59:57.957898411Z 99 PC: 1b55a | Get DBCS lead byte table pointer
2018-12-17T22:59:57.960375947Z 74 PC: 1b5bc | Reallocate memory
2018-12-17T22:59:57.961882608Z 25 PC: 1b5f3 | Get default drive
2018-12-17T22:59:57.963215583Z 37 PC: 1b0b3 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T22:59:57.965463307Z 37 PC: 1b0ba | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:59:57.967056542Z 37 PC: 1b0c1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:59:57.971968883Z 74 PC: 1a25c | Reallocate memory
2018-12-17T22:59:57.97455359Z 72 PC: 1a29d | Allocate memory
2018-12-17T22:59:57.976246261Z 72 PC: 1a2d5 | Allocate memory
2018-12-17T22:59:57.978530835Z 72 PC: 1a2dd | Allocate memory