Sample viewer

vx.netlux.org/Virus.DOS.HLLP.Krile.4768

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:00:45.949296288Z 98 PC: 17de6 | Get current PSP
2018-12-17T23:00:45.951917053Z 71 PC: 12c94 | Get current directory
2018-12-17T23:00:45.956379799Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:45.962797098Z 65 PC: 13bf8 | Delete file (Filename = 'anti-vir.dat')
2018-12-17T23:00:45.975948712Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:45.983046138Z 65 PC: 13bf8 | Delete file (Filename = 'chklist.ms')
2018-12-17T23:00:45.989918011Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:45.997092714Z 65 PC: 13bf8 | Delete file (Filename = 'chklist.cps')
2018-12-17T23:00:46.005072799Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:46.017702372Z 65 PC: 13bf8 | Delete file (Filename = 'vs.vsn')
2018-12-17T23:00:46.030366189Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:46.049289339Z 65 PC: 13bf8 | Delete file (Filename = 'ivb.ntz')
2018-12-17T23:00:46.056939434Z 26 PC: 12d55 | Set disk transfer address
2018-12-17T23:00:46.058788499Z 78 PC: 12d67 | Find first file
2018-12-17T23:00:46.074686934Z 67 PC: 1348c | Get or set file attributes
2018-12-17T23:00:46.081398035Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:46.100337164Z 61 PC: 135da | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:00:46.113828607Z 63 PC: 1367c | Read file or device (Read 4768 bytes on handle 5)
2018-12-17T23:00:46.123145003Z 62 PC: 136c2 | Close file
2018-12-17T23:00:46.125559039Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:46.137124412Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:46.144750642Z 65 PC: 13bf8 | Delete file (Filename = 'anti-vir.dat')
2018-12-17T23:00:46.15166187Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:46.158087384Z 65 PC: 13bf8 | Delete file (Filename = 'chklist.ms')
2018-12-17T23:00:46.165976449Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:46.177817319Z 65 PC: 13bf8 | Delete file (Filename = 'chklist.cps')
2018-12-17T23:00:46.190724293Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:46.197775433Z 65 PC: 13bf8 | Delete file (Filename = 'vs.vsn')
2018-12-17T23:00:46.208436176Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:46.21469101Z 65 PC: 13bf8 | Delete file (Filename = 'ivb.ntz')
2018-12-17T23:00:46.222307022Z 47 PC: 17c25 | Get disk transfer address
2018-12-17T23:00:46.22352503Z 26 PC: 17c30 | Set disk transfer address
2018-12-17T23:00:46.224774498Z 78 PC: 17c3c | Find first file
2018-12-17T23:00:46.237083178Z 26 PC: 17c4e | Set disk transfer address
2018-12-17T23:00:46.240425007Z 26 PC: 13a9b | Set disk transfer address
2018-12-17T23:00:46.241745649Z 78 PC: 13aad | Find first file
2018-12-17T23:00:46.255329855Z 67 PC: 1348c | Get or set file attributes
2018-12-17T23:00:46.262528693Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:46.273202581Z 61 PC: 135da | Open file (Filename = 'TEST.EXE')
2018-12-17T23:00:46.280892471Z 66 PC: 17f0b | Move file pointer
2018-12-17T23:00:46.283702621Z 63 PC: 1367c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:00:46.290886251Z 62 PC: 136c2 | Close file
2018-12-17T23:00:46.292947794Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:46.305164311Z 47 PC: 17c62 | Get disk transfer address
2018-12-17T23:00:46.306822487Z 26 PC: 17c6d | Set disk transfer address
2018-12-17T23:00:46.308465875Z 79 PC: 17c71 | Find next file
2018-12-17T23:00:46.312869099Z 26 PC: 17c81 | Set disk transfer address
2018-12-17T23:00:46.315212703Z 47 PC: 17c25 | Get disk transfer address
2018-12-17T23:00:46.316804284Z 26 PC: 17c30 | Set disk transfer address
2018-12-17T23:00:46.319242997Z 78 PC: 17c3c | Find first file
2018-12-17T23:00:46.32723787Z 26 PC: 17c4e | Set disk transfer address
2018-12-17T23:00:46.331334638Z 26 PC: 13a9b | Set disk transfer address
2018-12-17T23:00:46.333656241Z 78 PC: 13aad | Find first file
2018-12-17T23:00:46.340211108Z 47 PC: 17c62 | Get disk transfer address
2018-12-17T23:00:46.341493248Z 26 PC: 17c6d | Set disk transfer address
2018-12-17T23:00:46.342849957Z 79 PC: 17c71 | Find next file
2018-12-17T23:00:46.34676296Z 26 PC: 17c81 | Set disk transfer address
2018-12-17T23:00:46.350496696Z 26 PC: 13a9b | Set disk transfer address
2018-12-17T23:00:46.351952562Z 78 PC: 13aad | Find first file
2018-12-17T23:00:46.359454189Z 47 PC: 17c62 | Get disk transfer address
2018-12-17T23:00:46.361033577Z 26 PC: 17c6d | Set disk transfer address
2018-12-17T23:00:46.36224859Z 79 PC: 17c71 | Find next file
2018-12-17T23:00:46.366192341Z 26 PC: 17c81 | Set disk transfer address
2018-12-17T23:00:46.370658604Z 26 PC: 13a9b | Set disk transfer address
2018-12-17T23:00:46.372445932Z 78 PC: 13aad | Find first file
2018-12-17T23:00:46.380022559Z 47 PC: 17c62 | Get disk transfer address
2018-12-17T23:00:46.381812783Z 26 PC: 17c6d | Set disk transfer address
2018-12-17T23:00:46.383360742Z 79 PC: 17c71 | Find next file
2018-12-17T23:00:46.387296077Z 26 PC: 17c81 | Set disk transfer address
2018-12-17T23:00:46.391373289Z 26 PC: 13a9b | Set disk transfer address
2018-12-17T23:00:46.39266706Z 78 PC: 13aad | Find first file
2018-12-17T23:00:46.400182402Z 47 PC: 17c62 | Get disk transfer address
2018-12-17T23:00:46.401912343Z 26 PC: 17c6d | Set disk transfer address
2018-12-17T23:00:46.4031188Z 79 PC: 17c71 | Find next file
2018-12-17T23:00:46.406209849Z 26 PC: 17c81 | Set disk transfer address
2018-12-17T23:00:46.411941519Z 26 PC: 13a9b | Set disk transfer address
2018-12-17T23:00:46.413626426Z 78 PC: 13aad | Find first file
2018-12-17T23:00:46.420648321Z 47 PC: 17c62 | Get disk transfer address
2018-12-17T23:00:46.423463871Z 26 PC: 17c6d | Set disk transfer address
2018-12-17T23:00:46.425110465Z 79 PC: 17c71 | Find next file
2018-12-17T23:00:46.428294078Z 26 PC: 17c81 | Set disk transfer address
2018-12-17T23:00:46.433505861Z 47 PC: 17c62 | Get disk transfer address
2018-12-17T23:00:46.434908547Z 26 PC: 17c6d | Set disk transfer address
2018-12-17T23:00:46.436069649Z 79 PC: 17c71 | Find next file
2018-12-17T23:00:46.440127184Z 26 PC: 17c81 | Set disk transfer address
2018-12-17T23:00:46.444377821Z 26 PC: 13a9b | Set disk transfer address
2018-12-17T23:00:46.446124474Z 78 PC: 13aad | Find first file
2018-12-17T23:00:46.452974897Z 47 PC: 17c62 | Get disk transfer address
2018-12-17T23:00:46.454906947Z 26 PC: 17c6d | Set disk transfer address
2018-12-17T23:00:46.456277843Z 79 PC: 17c71 | Find next file
2018-12-17T23:00:46.459147455Z 26 PC: 17c81 | Set disk transfer address
2018-12-17T23:00:46.461830858Z 98 PC: 17e1d | Get current PSP
2018-12-17T23:00:46.463942125Z 98 PC: 17e1d | Get current PSP
2018-12-17T23:00:46.466337246Z 98 PC: 17e1d | Get current PSP
2018-12-17T23:00:46.469866989Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:46.480759718Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T23:00:46.487892812Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:46.496149878Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T23:00:46.503775928Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:46.511138253Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T23:00:46.51957705Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:46.527141926Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T23:00:46.534675452Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:46.543670866Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T23:00:46.551321222Z 47 PC: 17c25 | Get disk transfer address
2018-12-17T23:00:46.552962667Z 26 PC: 17c30 | Set disk transfer address
2018-12-17T23:00:46.554589023Z 78 PC: 17c3c | Find first file
2018-12-17T23:00:46.562770587Z 26 PC: 17c4e | Set disk transfer address
2018-12-17T23:00:46.567033297Z 26 PC: 13a9b | Set disk transfer address
2018-12-17T23:00:46.568803754Z 78 PC: 13aad | Find first file
2018-12-17T23:00:46.577088813Z 67 PC: 1348c | Get or set file attributes
2018-12-17T23:00:46.584620275Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:47.840265134Z 61 PC: 135da | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T23:00:47.848719651Z 66 PC: 17f0b | Move file pointer
2018-12-17T23:00:47.852294258Z 63 PC: 1367c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:00:47.858579649Z 62 PC: 136c2 | Close file
2018-12-17T23:00:47.861615033Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:47.873425216Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:47.880399682Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T23:00:47.887815277Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:47.895568025Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T23:00:47.902918638Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:47.90986407Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T23:00:47.918933362Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:47.925841272Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T23:00:47.933186004Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:47.940631164Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T23:00:47.948095641Z 86 PC: 13f55 | Rename file
2018-12-17T23:00:47.960068921Z 26 PC: 13374 | Set disk transfer address
2018-12-17T23:00:47.96231403Z 78 PC: 13386 | Find first file
2018-12-17T23:00:47.969299086Z 67 PC: 1348c | Get or set file attributes
2018-12-17T23:00:47.976907503Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:47.988570429Z 61 PC: 135da | Open file (Filename = 'C:\DOS\ATTRIB.���')
2018-12-17T23:00:47.996357452Z 87 PC: 13547 | Get or set file date and time
2018-12-17T23:00:47.998286556Z 63 PC: 1367c | Read file or device (Read 4768 bytes on handle 5)
2018-12-17T23:00:48.0067445Z 66 PC: 17f0b | Move file pointer
2018-12-17T23:00:48.00945342Z 64 PC: 13626 | Write file or device (Write 4768 bytes on handle 5)
2018-12-17T23:00:48.016780088Z 66 PC: 17f0b | Move file pointer
2018-12-17T23:00:48.031422754Z 64 PC: 13626 | Write file or device (Write 4768 bytes on handle 5)
2018-12-17T23:00:48.043770316Z 87 PC: 135a9 | Get or set file date and time
2018-12-17T23:00:48.045761308Z 62 PC: 136c2 | Close file
2018-12-17T23:00:48.053931541Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:48.065204103Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:48.072305187Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T23:00:48.079820559Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:48.087054853Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T23:00:48.094456352Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:48.102484037Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T23:00:48.11122919Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:48.118747327Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T23:00:48.126195343Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:48.133679247Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T23:00:48.14081708Z 86 PC: 13f71 | Rename file
2018-12-17T23:00:48.153033305Z 47 PC: 17c62 | Get disk transfer address
2018-12-17T23:00:48.154938966Z 26 PC: 17c6d | Set disk transfer address
2018-12-17T23:00:48.156242015Z 79 PC: 17c71 | Find next file
2018-12-17T23:00:48.15985284Z 26 PC: 17c81 | Set disk transfer address
2018-12-17T23:00:48.164934128Z 26 PC: 13a9b | Set disk transfer address
2018-12-17T23:00:48.167211588Z 78 PC: 13aad | Find first file
2018-12-17T23:00:48.174351224Z 67 PC: 1348c | Get or set file attributes
2018-12-17T23:00:48.181816001Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:48.192888649Z 61 PC: 135da | Open file (Filename = 'C:\DOS\CHKDSK.EXE')
2018-12-17T23:00:48.200624175Z 66 PC: 17f0b | Move file pointer
2018-12-17T23:00:48.203759837Z 63 PC: 1367c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:00:48.210169932Z 62 PC: 136c2 | Close file
2018-12-17T23:00:48.212191431Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:48.226505378Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:48.234711479Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T23:00:48.242783066Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:48.251389008Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T23:00:48.25962795Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:48.267416356Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T23:00:48.275283378Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:48.282980953Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T23:00:48.29044569Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:48.298638776Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T23:00:48.306029835Z 86 PC: 13f55 | Rename file
2018-12-17T23:00:48.318257021Z 26 PC: 13374 | Set disk transfer address
2018-12-17T23:00:48.32044317Z 78 PC: 13386 | Find first file
2018-12-17T23:00:48.327762693Z 67 PC: 1348c | Get or set file attributes
2018-12-17T23:00:48.334209278Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:48.345352286Z 61 PC: 135da | Open file (Filename = 'C:\DOS\CHKDSK.���')
2018-12-17T23:00:48.35292137Z 87 PC: 13547 | Get or set file date and time
2018-12-17T23:00:48.354550481Z 63 PC: 1367c | Read file or device (Read 4768 bytes on handle 5)
2018-12-17T23:00:48.363535265Z 66 PC: 17f0b | Move file pointer
2018-12-17T23:00:48.365518642Z 64 PC: 13626 | Write file or device (Write 4768 bytes on handle 5)
2018-12-17T23:00:48.374210255Z 66 PC: 17f0b | Move file pointer
2018-12-17T23:00:48.388957516Z 64 PC: 13626 | Write file or device (Write 4768 bytes on handle 5)
2018-12-17T23:00:48.407694415Z 87 PC: 135a9 | Get or set file date and time
2018-12-17T23:00:48.40975597Z 62 PC: 136c2 | Close file
2018-12-17T23:00:48.41939888Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:48.431924036Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:48.439230315Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T23:00:48.454309481Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:48.461440421Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T23:00:48.46852821Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:48.476397537Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T23:00:48.484638844Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:48.49157083Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T23:00:48.499952249Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:48.507984483Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T23:00:48.514921238Z 86 PC: 13f71 | Rename file
2018-12-17T23:00:48.526820068Z 47 PC: 17c62 | Get disk transfer address
2018-12-17T23:00:48.529151028Z 26 PC: 17c6d | Set disk transfer address
2018-12-17T23:00:48.530471078Z 79 PC: 17c71 | Find next file
2018-12-17T23:00:48.533840159Z 26 PC: 17c81 | Set disk transfer address
2018-12-17T23:00:48.538266157Z 26 PC: 13a9b | Set disk transfer address
2018-12-17T23:00:48.539333201Z 78 PC: 13aad | Find first file
2018-12-17T23:00:48.545868151Z 67 PC: 1348c | Get or set file attributes
2018-12-17T23:00:48.55297208Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:48.564140397Z 61 PC: 135da | Open file (Filename = 'C:\DOS\DEBUG.EXE')
2018-12-17T23:00:48.571694923Z 66 PC: 17f0b | Move file pointer
2018-12-17T23:00:48.574349852Z 63 PC: 1367c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:00:48.580521399Z 62 PC: 136c2 | Close file
2018-12-17T23:00:48.583231512Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:48.597916787Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:48.604733917Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T23:00:48.61199937Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:48.620057572Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T23:00:48.627218819Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:48.634194688Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T23:00:48.642153023Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:48.649136856Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T23:00:48.656312971Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:48.663591288Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T23:00:48.670393731Z 86 PC: 13f55 | Rename file
2018-12-17T23:00:48.683792829Z 26 PC: 13374 | Set disk transfer address
2018-12-17T23:00:48.686360003Z 78 PC: 13386 | Find first file
2018-12-17T23:00:48.694124824Z 67 PC: 1348c | Get or set file attributes
2018-12-17T23:00:48.700580575Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:48.712802291Z 61 PC: 135da | Open file (Filename = 'C:\DOS\DEBUG.���')
2018-12-17T23:00:48.720526316Z 87 PC: 13547 | Get or set file date and time
2018-12-17T23:00:48.722570076Z 63 PC: 1367c | Read file or device (Read 4768 bytes on handle 5)
2018-12-17T23:00:48.734969927Z 66 PC: 17f0b | Move file pointer
2018-12-17T23:00:48.737092095Z 64 PC: 13626 | Write file or device (Write 4768 bytes on handle 5)
2018-12-17T23:00:48.7455613Z 66 PC: 17f0b | Move file pointer
2018-12-17T23:00:48.762619484Z 64 PC: 13626 | Write file or device (Write 4768 bytes on handle 5)
2018-12-17T23:00:48.772529066Z 87 PC: 135a9 | Get or set file date and time
2018-12-17T23:00:48.77448965Z 62 PC: 136c2 | Close file
2018-12-17T23:00:48.783835893Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:48.794920762Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:48.801890409Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T23:00:48.810370164Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:48.817954806Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T23:00:48.825041132Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:48.833132357Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T23:00:48.840448665Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:48.847086589Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T23:00:48.855269636Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:48.862128194Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T23:00:48.869064858Z 86 PC: 13f71 | Rename file
2018-12-17T23:00:48.883023088Z 47 PC: 17c62 | Get disk transfer address
2018-12-17T23:00:48.884860731Z 26 PC: 17c6d | Set disk transfer address
2018-12-17T23:00:48.886060255Z 79 PC: 17c71 | Find next file
2018-12-17T23:00:48.890646663Z 26 PC: 17c81 | Set disk transfer address
2018-12-17T23:00:48.894637463Z 47 PC: 17c62 | Get disk transfer address
2018-12-17T23:00:48.896209296Z 26 PC: 17c6d | Set disk transfer address
2018-12-17T23:00:48.89942556Z 79 PC: 17c71 | Find next file
2018-12-17T23:00:48.903756589Z 26 PC: 17c81 | Set disk transfer address
2018-12-17T23:00:48.907869798Z 26 PC: 13a9b | Set disk transfer address
2018-12-17T23:00:48.910508977Z 78 PC: 13aad | Find first file
2018-12-17T23:00:48.91758845Z 67 PC: 1348c | Get or set file attributes
2018-12-17T23:00:48.924364724Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:48.935578736Z 61 PC: 135da | Open file (Filename = 'C:\DOS\FDISK.EXE')
2018-12-17T23:00:48.943278114Z 66 PC: 17f0b | Move file pointer
2018-12-17T23:00:48.945366158Z 63 PC: 1367c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:00:48.952664192Z 62 PC: 136c2 | Close file
2018-12-17T23:00:48.95480199Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:48.9659936Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:48.973494695Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T23:00:48.980821954Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:48.988180612Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T23:00:48.996951003Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:49.003498687Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T23:00:49.010480767Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:49.018705592Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T23:00:49.025691319Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:49.032202364Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T23:00:49.039504075Z 86 PC: 13f55 | Rename file
2018-12-17T23:00:49.05174638Z 26 PC: 13374 | Set disk transfer address
2018-12-17T23:00:49.053017689Z 78 PC: 13386 | Find first file
2018-12-17T23:00:49.060972467Z 67 PC: 1348c | Get or set file attributes
2018-12-17T23:00:49.068201441Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:49.079390747Z 61 PC: 135da | Open file (Filename = 'C:\DOS\FDISK.���')
2018-12-17T23:00:49.087634528Z 87 PC: 13547 | Get or set file date and time
2018-12-17T23:00:49.089573331Z 63 PC: 1367c | Read file or device (Read 4768 bytes on handle 5)
2018-12-17T23:00:49.097531536Z 66 PC: 17f0b | Move file pointer
2018-12-17T23:00:49.1000456Z 64 PC: 13626 | Write file or device (Write 4768 bytes on handle 5)
2018-12-17T23:00:49.108221083Z 66 PC: 17f0b | Move file pointer
2018-12-17T23:00:49.122831708Z 64 PC: 13626 | Write file or device (Write 4768 bytes on handle 5)
2018-12-17T23:00:49.132647583Z 87 PC: 135a9 | Get or set file date and time
2018-12-17T23:00:49.134588851Z 62 PC: 136c2 | Close file
2018-12-17T23:00:49.143588953Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:49.155404486Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:49.162118332Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T23:00:49.169559164Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:49.176193211Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T23:00:49.183342205Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:49.19067302Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T23:00:49.198890161Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:49.207047219Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T23:00:49.215264941Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:49.222295623Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T23:00:49.22943578Z 86 PC: 13f71 | Rename file
2018-12-17T23:00:49.24263366Z 47 PC: 17c62 | Get disk transfer address
2018-12-17T23:00:49.243856168Z 26 PC: 17c6d | Set disk transfer address
2018-12-17T23:00:49.245029252Z 79 PC: 17c71 | Find next file
2018-12-17T23:00:49.248876291Z 26 PC: 17c81 | Set disk transfer address
2018-12-17T23:00:49.250893582Z 47 PC: 17c25 | Get disk transfer address
2018-12-17T23:00:49.252229873Z 26 PC: 17c30 | Set disk transfer address
2018-12-17T23:00:49.254210495Z 78 PC: 17c3c | Find first file
2018-12-17T23:00:49.261897089Z 26 PC: 17c4e | Set disk transfer address
2018-12-17T23:00:49.266175569Z 26 PC: 13a9b | Set disk transfer address
2018-12-17T23:00:49.270695643Z 78 PC: 13aad | Find first file
2018-12-17T23:00:49.278657794Z 47 PC: 17c62 | Get disk transfer address
2018-12-17T23:00:49.280331289Z 26 PC: 17c6d | Set disk transfer address
2018-12-17T23:00:49.283316549Z 79 PC: 17c71 | Find next file
2018-12-17T23:00:49.287753997Z 26 PC: 17c81 | Set disk transfer address
2018-12-17T23:00:49.291962415Z 26 PC: 13a9b | Set disk transfer address
2018-12-17T23:00:49.294566589Z 78 PC: 13aad | Find first file
2018-12-17T23:00:49.303825959Z 67 PC: 1348c | Get or set file attributes
2018-12-17T23:00:49.312992313Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:49.323909668Z 61 PC: 135da | Open file (Filename = 'C:\DOS\FORMAT.COM')
2018-12-17T23:00:49.332384293Z 66 PC: 17f0b | Move file pointer
2018-12-17T23:00:49.335922662Z 63 PC: 1367c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:00:49.342010212Z 62 PC: 136c2 | Close file
2018-12-17T23:00:49.344002996Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:49.356219983Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:49.364319603Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T23:00:49.372106686Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:49.379355087Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T23:00:49.387062691Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:49.393828615Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T23:00:49.402098194Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:49.41078635Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T23:00:49.418116164Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:49.426404449Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T23:00:49.433651587Z 86 PC: 13f55 | Rename file
2018-12-17T23:00:49.446178656Z 26 PC: 13374 | Set disk transfer address
2018-12-17T23:00:49.448367891Z 78 PC: 13386 | Find first file
2018-12-17T23:00:49.455503008Z 67 PC: 1348c | Get or set file attributes
2018-12-17T23:00:49.462121706Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:49.474296544Z 61 PC: 135da | Open file (Filename = 'C:\DOS\FORMAT.���')
2018-12-17T23:00:49.481719853Z 87 PC: 13547 | Get or set file date and time
2018-12-17T23:00:49.48330967Z 63 PC: 1367c | Read file or device (Read 4768 bytes on handle 5)
2018-12-17T23:00:49.491855259Z 66 PC: 17f0b | Move file pointer
2018-12-17T23:00:49.493871437Z 64 PC: 13626 | Write file or device (Write 4768 bytes on handle 5)
2018-12-17T23:00:49.503144893Z 66 PC: 17f0b | Move file pointer
2018-12-17T23:00:49.517890162Z 64 PC: 13626 | Write file or device (Write 4768 bytes on handle 5)
2018-12-17T23:00:49.527781689Z 87 PC: 135a9 | Get or set file date and time
2018-12-17T23:00:49.530060902Z 62 PC: 136c2 | Close file
2018-12-17T23:00:49.540206026Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:49.552027861Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:49.559394554Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T23:00:49.568357586Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:49.575646693Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T23:00:49.583308831Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:49.592212552Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T23:00:49.599903795Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:49.60786779Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T23:00:49.616792782Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:49.623947737Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T23:00:49.631052838Z 86 PC: 13f71 | Rename file
2018-12-17T23:00:49.644756549Z 47 PC: 17c62 | Get disk transfer address
2018-12-17T23:00:49.646875891Z 26 PC: 17c6d | Set disk transfer address
2018-12-17T23:00:49.648852646Z 79 PC: 17c71 | Find next file
2018-12-17T23:00:49.653598043Z 26 PC: 17c81 | Set disk transfer address
2018-12-17T23:00:49.657608609Z 26 PC: 13a9b | Set disk transfer address
2018-12-17T23:00:49.658903954Z 78 PC: 13aad | Find first file
2018-12-17T23:00:49.66671441Z 67 PC: 1348c | Get or set file attributes
2018-12-17T23:00:49.674642478Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:49.685839469Z 61 PC: 135da | Open file (Filename = 'C:\DOS\KEYB.COM')
2018-12-17T23:00:49.695013438Z 66 PC: 17f0b | Move file pointer
2018-12-17T23:00:49.697602403Z 63 PC: 1367c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:00:49.70378452Z 62 PC: 136c2 | Close file
2018-12-17T23:00:49.707133423Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:49.720644392Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:49.727942886Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T23:00:49.73625745Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:49.744220925Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T23:00:49.751803864Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:49.759542586Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T23:00:49.767636776Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:49.780793749Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T23:00:49.788464283Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:49.795285041Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T23:00:49.803995649Z 86 PC: 13f55 | Rename file
2018-12-17T23:00:49.816991159Z 26 PC: 13374 | Set disk transfer address
2018-12-17T23:00:49.818850142Z 78 PC: 13386 | Find first file
2018-12-17T23:00:49.827155409Z 67 PC: 1348c | Get or set file attributes
2018-12-17T23:00:49.834545896Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:49.845772453Z 61 PC: 135da | Open file (Filename = 'C:\DOS\KEYB.���')
2018-12-17T23:00:49.854633603Z 87 PC: 13547 | Get or set file date and time
2018-12-17T23:00:49.857028394Z 63 PC: 1367c | Read file or device (Read 4768 bytes on handle 5)
2018-12-17T23:00:49.865802191Z 66 PC: 17f0b | Move file pointer
2018-12-17T23:00:49.870448061Z 64 PC: 13626 | Write file or device (Write 4768 bytes on handle 5)
2018-12-17T23:00:49.879395444Z 66 PC: 17f0b | Move file pointer
2018-12-17T23:00:49.894322053Z 64 PC: 13626 | Write file or device (Write 4768 bytes on handle 5)
2018-12-17T23:00:49.906547917Z 87 PC: 135a9 | Get or set file date and time
2018-12-17T23:00:49.90859799Z 62 PC: 136c2 | Close file
2018-12-17T23:00:49.917986031Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:49.930248844Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:49.938243808Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T23:00:49.947022794Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:49.954185214Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T23:00:49.961815222Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:49.969953134Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T23:00:49.977988123Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:49.985393698Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T23:00:49.993804162Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:50.001922377Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T23:00:50.009220762Z 86 PC: 13f71 | Rename file
2018-12-17T23:00:50.022913162Z 47 PC: 17c62 | Get disk transfer address
2018-12-17T23:00:50.024621692Z 26 PC: 17c6d | Set disk transfer address
2018-12-17T23:00:50.026247407Z 79 PC: 17c71 | Find next file
2018-12-17T23:00:50.031266308Z 26 PC: 17c81 | Set disk transfer address
2018-12-17T23:00:50.034069446Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:50.042943922Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T23:00:50.051140715Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:50.058025462Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T23:00:50.065995018Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:50.073338076Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T23:00:50.080517437Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:50.087158817Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T23:00:50.094499621Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:50.101223005Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T23:00:50.108225584Z 86 PC: 13f55 | Rename file
2018-12-17T23:00:50.122722646Z 26 PC: 12eb9 | Set disk transfer address
2018-12-17T23:00:50.124223536Z 78 PC: 12ecb | Find first file
2018-12-17T23:00:50.13255898Z 67 PC: 1348c | Get or set file attributes
2018-12-17T23:00:50.13930701Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:50.150076898Z 61 PC: 135da | Open file (Filename = 'A:\TEST.���')
2018-12-17T23:00:50.158653484Z 87 PC: 13547 | Get or set file date and time
2018-12-17T23:00:50.160746447Z 66 PC: 17f0b | Move file pointer
2018-12-17T23:00:50.170668322Z 63 PC: 1367c | Read file or device (Read 4768 bytes on handle 5)
2018-12-17T23:00:50.180624711Z 66 PC: 17f0b | Move file pointer
2018-12-17T23:00:50.195390517Z 64 PC: 13626 | Write file or device (Write 4768 bytes on handle 5)
2018-12-17T23:00:50.20401805Z 87 PC: 135a9 | Get or set file date and time
2018-12-17T23:00:50.206895106Z 62 PC: 136c2 | Close file
2018-12-17T23:00:50.215126424Z 61 PC: 135da | Open file (Filename = 'A:\TEST.���')
2018-12-17T23:00:50.222497585Z 66 PC: 17f0b | Move file pointer
2018-12-17T23:00:50.224663655Z 64 PC: 13626 | Write file or device (Write 0 bytes on handle 5)
2018-12-17T23:00:50.232455868Z 87 PC: 135a9 | Get or set file date and time
2018-12-17T23:00:50.234667013Z 62 PC: 136c2 | Close file
2018-12-17T23:00:50.243273445Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:50.254944627Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:50.262823733Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T23:00:50.270663986Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:50.277624966Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T23:00:50.285870581Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:50.292927381Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T23:00:50.301100199Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:50.30951464Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T23:00:50.316918994Z 67 PC: 134c3 | Get or set file attributes
2018-12-17T23:00:50.324693023Z 65 PC: 13bf8 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T23:00:50.333030299Z 86 PC: 13f71 | Rename file
2018-12-17T23:00:50.346079039Z 75 PC: 13163 | Execute program
2018-12-17T23:00:50.371305263Z 80 PC: 1b2c9 | Set current PSP
2018-12-17T23:00:50.373902453Z 48 PC: 1b2ce | Get DOS version
2018-12-17T23:00:50.376087659Z 99 PC: 21ab0 | Get DBCS lead byte table pointer
2018-12-17T23:00:50.379374766Z 101 PC: 1b354 | Get extended country info
2018-12-17T23:00:50.382108092Z 99 PC: 1b35a | Get DBCS lead byte table pointer
2018-12-17T23:00:50.383875183Z 74 PC: 1b3bc | Reallocate memory
2018-12-17T23:00:50.386938039Z 25 PC: 1b3f3 | Get default drive
2018-12-17T23:00:50.389244402Z 37 PC: 1aeb3 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T23:00:50.390807469Z 37 PC: 1aeba | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:00:50.39363883Z 37 PC: 1aec1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:00:50.398325437Z 74 PC: 1a05c | Reallocate memory
2018-12-17T23:00:50.399924181Z 72 PC: 1a09d | Allocate memory
2018-12-17T23:00:50.402720275Z 72 PC: 1a0d5 | Allocate memory
2018-12-17T23:00:50.404916232Z 72 PC: 1a0dd | Allocate memory