Sample viewer

vx.netlux.org/Virus.DOS.Zlo.1133

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:02:02.413346786Z 14 PC: 12af3 | Set default drive (Drive = 'C')
2018-12-17T23:02:02.415303029Z 59 PC: 12b13 | Change current directory
2018-12-17T23:02:02.420777378Z 26 PC: 12c05 | Set disk transfer address
2018-12-17T23:02:02.422381068Z 78 PC: 12c12 | Find first file
2018-12-17T23:02:02.428709923Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:02.433092502Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:02.436341422Z 61 PC: 12c34 | Open file (Filename = 'COMMAND.COM')
2018-12-17T23:02:02.443303893Z 63 PC: 12c44 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:02.44872171Z 87 PC: 12de6 | Get or set file date and time
2018-12-17T23:02:02.450391808Z 66 PC: 12c79 | Move file pointer
2018-12-17T23:02:02.451969819Z 64 PC: 12c86 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:02.455181474Z 66 PC: 12c93 | Move file pointer
2018-12-17T23:02:02.457067302Z 64 PC: 12cb0 | Write file or device (Write 1133 bytes on handle 5)
2018-12-17T23:02:02.810865515Z 87 PC: 12e0c | Get or set file date and time
2018-12-17T23:02:02.812994181Z 62 PC: 12cbb | Close file
2018-12-17T23:02:02.837228133Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:02.84379006Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:02.847036482Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:02.851599149Z 91 PC: 12cde | Create new file
2018-12-17T23:02:02.863365519Z 42 PC: 12ce7 | Get date 0x12ce7: mov si, bp
0x12ce9: add si, 0x3cb
0x12ced: mov dh, 0
0x12cef: cmp dl, 0x1b
0x12cf2: jb 0x12cf8
0x12cf4: nop
0x12cf5: nop
0x12cf6: mov dl, 1
0x12cf8: mov word ptr [si], dx
0x12cfa: mov ah, 0x40
0x12cfc: mov cx, 2
0x12cff: mov dx, si
0x12d01: int 0x21
0x12d03: mov ah, 0x3e
0x12d05: int 0x21
0x12d07: clc
0x12d08: jmp 0x12d4e
0x12d0a: nop
0x12d0b: mov ax, 0x3d02
0x12d0e: mov dx, bp
2018-12-17T23:02:02.865741826Z 64 PC: 12d03 | Write file or device (Write 2 bytes on handle 5)
2018-12-17T23:02:02.870774351Z 62 PC: 12d07 | Close file
2018-12-17T23:02:02.880509516Z 26 PC: 12ba2 | Set disk transfer address
2018-12-17T23:02:02.882251377Z 78 PC: 12baf | Find first file
2018-12-17T23:02:02.891594621Z 59 PC: 12b29 | Change current directory
2018-12-17T23:02:02.899209476Z 26 PC: 12c05 | Set disk transfer address
2018-12-17T23:02:02.900510767Z 78 PC: 12c12 | Find first file
2018-12-17T23:02:02.913372225Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:02.917134177Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:02.920770717Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:02.924628774Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:02.929664551Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:02.933552416Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:02.937426188Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:02.942534201Z 61 PC: 12c34 | Open file (Filename = 'EDIT.COM')
2018-12-17T23:02:02.950534672Z 63 PC: 12c44 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:02.957089513Z 87 PC: 12de6 | Get or set file date and time
2018-12-17T23:02:02.959782756Z 66 PC: 12c79 | Move file pointer
2018-12-17T23:02:02.96158487Z 64 PC: 12c86 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:02.964599185Z 66 PC: 12c93 | Move file pointer
2018-12-17T23:02:02.966920561Z 64 PC: 12cb0 | Write file or device (Write 1133 bytes on handle 5)
2018-12-17T23:02:02.97618326Z 87 PC: 12e0c | Get or set file date and time
2018-12-17T23:02:02.977936685Z 62 PC: 12cbb | Close file
2018-12-17T23:02:02.986069302Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:02.992127491Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:02.996985352Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.003329306Z 61 PC: 12c34 | Open file (Filename = 'FORMAT.COM')
2018-12-17T23:02:03.012413116Z 63 PC: 12c44 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:03.018871327Z 87 PC: 12de6 | Get or set file date and time
2018-12-17T23:02:03.020749618Z 66 PC: 12c79 | Move file pointer
2018-12-17T23:02:03.02369615Z 64 PC: 12c86 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:03.026799722Z 66 PC: 12c93 | Move file pointer
2018-12-17T23:02:03.028426826Z 64 PC: 12cb0 | Write file or device (Write 1133 bytes on handle 5)
2018-12-17T23:02:03.038859233Z 87 PC: 12e0c | Get or set file date and time
2018-12-17T23:02:03.040779081Z 62 PC: 12cbb | Close file
2018-12-17T23:02:03.048309153Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.052841236Z 61 PC: 12c34 | Open file (Filename = 'KEYB.COM')
2018-12-17T23:02:03.060610142Z 63 PC: 12c44 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:03.067221998Z 87 PC: 12de6 | Get or set file date and time
2018-12-17T23:02:03.069609295Z 66 PC: 12c79 | Move file pointer
2018-12-17T23:02:03.071439822Z 64 PC: 12c86 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:03.074523744Z 66 PC: 12c93 | Move file pointer
2018-12-17T23:02:03.076409936Z 64 PC: 12cb0 | Write file or device (Write 1133 bytes on handle 5)
2018-12-17T23:02:03.086824649Z 87 PC: 12e0c | Get or set file date and time
2018-12-17T23:02:03.088711874Z 62 PC: 12cbb | Close file
2018-12-17T23:02:03.095366236Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.099921036Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.103530668Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.111172726Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.115415437Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.118751958Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.122216607Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.12627338Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.129825958Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.133061945Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.13721682Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.141296157Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.145144009Z 61 PC: 12c34 | Open file (Filename = 'SYS.COM')
2018-12-17T23:02:03.153413148Z 63 PC: 12c44 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:03.166806835Z 87 PC: 12de6 | Get or set file date and time
2018-12-17T23:02:03.16876483Z 66 PC: 12c79 | Move file pointer
2018-12-17T23:02:03.171191617Z 64 PC: 12c86 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:03.174421409Z 66 PC: 12c93 | Move file pointer
2018-12-17T23:02:03.177140107Z 64 PC: 12cb0 | Write file or device (Write 1133 bytes on handle 5)
2018-12-17T23:02:03.188092657Z 87 PC: 12e0c | Get or set file date and time
2018-12-17T23:02:03.189966652Z 62 PC: 12cbb | Close file
2018-12-17T23:02:03.197976549Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.202388062Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.206305686Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.20972554Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.213171292Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.217349098Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.220843719Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.228291707Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.23275503Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.236449956Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.239848819Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.243951193Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.247969557Z 91 PC: 12cde | Create new file
2018-12-17T23:02:03.254389436Z 61 PC: 12d16 | Open file (Filename = 'C:\system.2st')
2018-12-17T23:02:03.262321185Z 63 PC: 12d24 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:03.265933203Z 42 PC: 12d28 | Get date 0x12d28: mov dh, 0
0x12d2a: mov si, bp
0x12d2c: add si, 0x3c9
0x12d30: mov ax, word ptr [si]
0x12d32: add ax, 5
0x12d35: cmp ax, dx
0x12d37: jb 0x12d43
0x12d39: nop
0x12d3a: nop
0x12d3b: mov ah, 0x3e
0x12d3d: int 0x21
0x12d3f: clc
0x12d40: jmp 0x12d4e
0x12d42: nop
0x12d43: mov ah, 0x41
0x12d45: mov dx, bp
0x12d47: add dx, 0x3cd
0x12d4b: int 0x21
0x12d4d: stc
0x12d4e: ret
2018-12-17T23:02:03.268555393Z 62 PC: 12d3f | Close file
2018-12-17T23:02:03.271386625Z 26 PC: 12ba2 | Set disk transfer address
2018-12-17T23:02:03.272867676Z 78 PC: 12baf | Find first file
2018-12-17T23:02:03.279972705Z 79 PC: 12bc5 | Find next file
2018-12-17T23:02:03.284541476Z 79 PC: 12bc9 | Find next file
2018-12-17T23:02:03.288422596Z 59 PC: 12b1e | Change current directory
2018-12-17T23:02:03.293083264Z 26 PC: 12b83 | Set disk transfer address
2018-12-17T23:02:03.295129231Z 79 PC: 12b87 | Find next file
2018-12-17T23:02:03.298636719Z 59 PC: 12b29 | Change current directory
2018-12-17T23:02:03.305671573Z 26 PC: 12c05 | Set disk transfer address
2018-12-17T23:02:03.307176854Z 78 PC: 12c12 | Find first file
2018-12-17T23:02:03.317833774Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.321650433Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.325683946Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.330217721Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.334037681Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.337874719Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.342713652Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.347495963Z 61 PC: 12c34 | Open file (Filename = 'WIN.COM')
2018-12-17T23:02:03.356135129Z 63 PC: 12c44 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:03.363378158Z 87 PC: 12de6 | Get or set file date and time
2018-12-17T23:02:03.365236548Z 66 PC: 12c79 | Move file pointer
2018-12-17T23:02:03.366991789Z 64 PC: 12c86 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:03.370564395Z 66 PC: 12c93 | Move file pointer
2018-12-17T23:02:03.372192808Z 64 PC: 12cb0 | Write file or device (Write 1133 bytes on handle 5)
2018-12-17T23:02:03.386071635Z 87 PC: 12e0c | Get or set file date and time
2018-12-17T23:02:03.388735371Z 62 PC: 12cbb | Close file
2018-12-17T23:02:03.396837704Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.400691656Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.405229667Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.408720716Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.412051875Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.416204926Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.423043889Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.426391369Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.430479679Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.4340701Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.437501792Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.441540453Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.445176326Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.448889304Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.454236458Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.458067976Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.461876405Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.466180595Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.469735706Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.473329342Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.477557705Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.4814053Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.488611427Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.493286808Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.497442541Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.501291623Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.505751932Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.50921241Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.511753369Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.514467587Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.516665007Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.518799779Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.521189925Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.523563582Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.526270656Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.528939488Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.531208906Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.533422427Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.538118484Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.540398352Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.542692687Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.545637786Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.547930854Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.550178463Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.552605088Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.555319612Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.557542061Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.560139299Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.562746691Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.565069916Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.567541319Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.570562214Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.573023305Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.575829613Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.581106438Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.5840663Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.586742889Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.589700985Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.591976711Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.595028105Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.597354942Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.599602177Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.603138724Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.605451527Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.607817505Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.610305208Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.613049884Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.615373095Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.618135011Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.620951622Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.625305618Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.6276064Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.630700481Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.632931625Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.635229906Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.638197733Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.640458513Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.642714512Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.645528168Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.64790321Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.650152456Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.652902667Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.655243845Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.657608792Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.660465268Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.662823232Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.667043227Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.669763428Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.672258604Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.675802256Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.680740662Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.684663644Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.688535905Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.693283798Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.697387886Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.701165183Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.705768343Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.709665316Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.713241472Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.717385312Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.724638984Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.728114872Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.732134519Z 91 PC: 12cde | Create new file
2018-12-17T23:02:03.738816282Z 61 PC: 12d16 | Open file (Filename = 'C:\system.2st')
2018-12-17T23:02:03.74679313Z 63 PC: 12d24 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:03.755151068Z 42 PC: 12d28 | Get date 0x12d28: mov dh, 0
0x12d2a: mov si, bp
0x12d2c: add si, 0x3c9
0x12d30: mov ax, word ptr [si]
0x12d32: add ax, 5
0x12d35: cmp ax, dx
0x12d37: jb 0x12d43
0x12d39: nop
0x12d3a: nop
0x12d3b: mov ah, 0x3e
0x12d3d: int 0x21
0x12d3f: clc
0x12d40: jmp 0x12d4e
0x12d42: nop
0x12d43: mov ah, 0x41
0x12d45: mov dx, bp
0x12d47: add dx, 0x3cd
0x12d4b: int 0x21
0x12d4d: stc
0x12d4e: ret
2018-12-17T23:02:03.757960288Z 62 PC: 12d3f | Close file
2018-12-17T23:02:03.760437266Z 26 PC: 12ba2 | Set disk transfer address
2018-12-17T23:02:03.76233373Z 78 PC: 12baf | Find first file
2018-12-17T23:02:03.770249411Z 79 PC: 12bc5 | Find next file
2018-12-17T23:02:03.774376743Z 79 PC: 12bc9 | Find next file
2018-12-17T23:02:03.778247068Z 59 PC: 12b29 | Change current directory
2018-12-17T23:02:03.786524789Z 26 PC: 12c05 | Set disk transfer address
2018-12-17T23:02:03.78785089Z 78 PC: 12c12 | Find first file
2018-12-17T23:02:03.797405714Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.80195476Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.80571981Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.808985943Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.81400628Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.817668245Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.821243826Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.825923576Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.829415879Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.832915068Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.838549544Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.842145921Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.846023177Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.850580502Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.857696556Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.861628985Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.866394607Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.869950759Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.873523824Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.877846227Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.881777966Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.896777762Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.901011359Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.904650943Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.908237684Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.914412782Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.91819856Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.922025247Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.926625836Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.930354885Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.937460999Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.941768094Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.945312618Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.948588715Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.95562888Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.959791089Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.964744919Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.968642207Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.972658947Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.976964821Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.980316234Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.984372449Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.989096773Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.992713226Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:03.996072806Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.00095315Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.007894654Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.01124827Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.015152585Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.018897541Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.022668649Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.029689286Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.036027018Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.039785077Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.044616468Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.04811433Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.051564446Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.055628088Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.060047622Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.063833134Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.068263413Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.071902172Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.079076147Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.083518594Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.087337227Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.090733381Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.094648808Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.098415838Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.103391501Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.107285315Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.110792027Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.114543863Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.118088312Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.121435352Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.125417228Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.128880932Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.132974634Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.137403215Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.144260313Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.147641097Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.151660995Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.154991122Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.158313349Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.161997457Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.165288651Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.169393756Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.174559739Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.177889169Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.181235482Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.184772225Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.188185789Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.190553827Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.194391334Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.198292638Z 79 PC: 12cbf | Find next file
2018-12-17T23:02:04.205540074Z 91 PC: 12cde | Create new file
2018-12-17T23:02:04.21201039Z 61 PC: 12d16 | Open file (Filename = 'C:\system.2st')
2018-12-17T23:02:04.218875159Z 63 PC: 12d24 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:04.222920232Z 42 PC: 12d28 | Get date 0x12d28: mov dh, 0
0x12d2a: mov si, bp
0x12d2c: add si, 0x3c9
0x12d30: mov ax, word ptr [si]
0x12d32: add ax, 5
0x12d35: cmp ax, dx
0x12d37: jb 0x12d43
0x12d39: nop
0x12d3a: nop
0x12d3b: mov ah, 0x3e
0x12d3d: int 0x21
0x12d3f: clc
0x12d40: jmp 0x12d4e
0x12d42: nop
0x12d43: mov ah, 0x41
0x12d45: mov dx, bp
0x12d47: add dx, 0x3cd
0x12d4b: int 0x21
0x12d4d: stc
0x12d4e: ret
2018-12-17T23:02:04.22560646Z 62 PC: 12d3f | Close file
2018-12-17T23:02:04.228061814Z 26 PC: 12ba2 | Set disk transfer address
2018-12-17T23:02:04.23151349Z 78 PC: 12baf | Find first file
2018-12-17T23:02:04.239904253Z 79 PC: 12bc5 | Find next file
2018-12-17T23:02:04.243927272Z 79 PC: 12bc9 | Find next file
2018-12-17T23:02:04.249147278Z 59 PC: 12b1e | Change current directory
2018-12-17T23:02:04.256288155Z 26 PC: 12b83 | Set disk transfer address
2018-12-17T23:02:04.257919595Z 79 PC: 12b87 | Find next file
2018-12-17T23:02:04.262914358Z 59 PC: 12b29 | Change current directory
2018-12-17T23:02:04.270360913Z 26 PC: 12c05 | Set disk transfer address
2018-12-17T23:02:04.271970492Z 78 PC: 12c12 | Find first file
2018-12-17T23:02:04.280519357Z 91 PC: 12cde | Create new file
2018-12-17T23:02:04.287050381Z 61 PC: 12d16 | Open file (Filename = 'C:\system.2st')
2018-12-17T23:02:04.29381988Z 63 PC: 12d24 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:04.297199641Z 42 PC: 12d28 | Get date 0x12d28: mov dh, 0
0x12d2a: mov si, bp
0x12d2c: add si, 0x3c9
0x12d30: mov ax, word ptr [si]
0x12d32: add ax, 5
0x12d35: cmp ax, dx
0x12d37: jb 0x12d43
0x12d39: nop
0x12d3a: nop
0x12d3b: mov ah, 0x3e
0x12d3d: int 0x21
0x12d3f: clc
0x12d40: jmp 0x12d4e
0x12d42: nop
0x12d43: mov ah, 0x41
0x12d45: mov dx, bp
0x12d47: add dx, 0x3cd
0x12d4b: int 0x21
0x12d4d: stc
0x12d4e: ret
2018-12-17T23:02:04.299805812Z 62 PC: 12d3f | Close file
2018-12-17T23:02:04.301969484Z 26 PC: 12ba2 | Set disk transfer address
2018-12-17T23:02:04.303869176Z 78 PC: 12baf | Find first file
2018-12-17T23:02:04.310619699Z 79 PC: 12bc5 | Find next file
2018-12-17T23:02:04.312888381Z 79 PC: 12bc9 | Find next file
2018-12-17T23:02:04.316271974Z 59 PC: 12b1e | Change current directory
2018-12-17T23:02:04.320140995Z 26 PC: 12b83 | Set disk transfer address
2018-12-17T23:02:04.321495041Z 79 PC: 12b87 | Find next file
2018-12-17T23:02:04.324260507Z 59 PC: 12b1e | Change current directory
2018-12-17T23:02:04.327368342Z 26 PC: 12b83 | Set disk transfer address
2018-12-17T23:02:04.329521431Z 79 PC: 12b87 | Find next file
2018-12-17T23:02:04.331883951Z 14 PC: 12ac1 | Set default drive (Drive = 'C')
2018-12-17T23:02:04.33342025Z 76 PC: 12ad4 | Terminate with return code (Return code = '0')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":14080,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:39:45.30200805Z 14 PC: 12af3 | Set default drive (Drive = 'C')
2018-12-25T12:39:45.303801354Z 59 PC: 12b13 | Change current directory
2018-12-25T12:39:45.307906852Z 26 PC: 12c05 | Set disk transfer address
2018-12-25T12:39:45.308805087Z 78 PC: 12c12 | Find first file
2018-12-25T12:39:45.315041083Z 79 PC: 12cbf | Find next file
2018-12-25T12:39:45.31868666Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.32123246Z 61 PC: 12c34 | Open file (Filename = 'COMMAND.COM')
2018-12-25T12:39:45.327872093Z 63 PC: 12c44 | Read file or device (Read 4 bytes on handle 5)
2018-12-25T12:39:45.331582598Z 87 PC: 12de6 | Get or set file date and time
2018-12-25T12:39:45.333376123Z 66 PC: 12c79 | Move file pointer
2018-12-25T12:39:45.335169923Z 64 PC: 12c86 | Write file or device (Write 4 bytes on handle 5)
2018-12-25T12:39:45.338755682Z 66 PC: 12c93 | Move file pointer
2018-12-25T12:39:45.340646339Z 64 PC: 12cb0 | Write file or device (Write 1133 bytes on handle 5)
2018-12-25T12:39:45.700100436Z 87 PC: 12e0c | Get or set file date and time
2018-12-25T12:39:45.702602326Z 62 PC: 12cbb | Close file
2018-12-25T12:39:45.710443097Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.713351324Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.717281183Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.720728454Z 91 PC: 12cde | Create new file
2018-12-25T12:39:45.736149294Z 42 PC: 12ce7 | Get date 0x12ce7: mov si, bp
0x12ce9: add si, 0x3cb
0x12ced: mov dh, 0
0x12cef: cmp dl, 0x1b
0x12cf2: jb 0x12cf8
0x12cf4: nop
0x12cf5: nop
0x12cf6: mov dl, 1
0x12cf8: mov word ptr [si], dx
0x12cfa: mov ah, 0x40
0x12cfc: mov cx, 2
0x12cff: mov dx, si
0x12d01: int 0x21
0x12d03: mov ah, 0x3e
0x12d05: int 0x21
0x12d07: clc
0x12d08: jmp 0x12d4e
0x12d0a: nop
0x12d0b: mov ax, 0x3d02
0x12d0e: mov dx, bp
2018-12-25T12:39:45.738630284Z 64 PC: 12d03 | Write file or device (Write 2 bytes on handle 5)
2018-12-25T12:39:45.74286888Z 62 PC: 12d07 | Close file
2018-12-25T12:39:45.75217236Z 26 PC: 12ba2 | Set disk transfer address
2018-12-25T12:39:45.753461522Z 78 PC: 12baf | Find first file
2018-12-25T12:39:45.761838752Z 59 PC: 12b29 | Change current directory
2018-12-25T12:39:45.768139219Z 26 PC: 12c05 | Set disk transfer address (See above)
2018-12-25T12:39:45.769202615Z 78 PC: 12c12 | Find first file (See above)
2018-12-25T12:39:45.787982853Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.79147082Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.795953331Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.800901146Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.804411308Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.80781306Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.811654556Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.814363028Z 61 PC: 12c34 | Open file (See above)
2018-12-25T12:39:45.819031163Z 63 PC: 12c44 | Read file or device (See above)
2018-12-25T12:39:45.823141503Z 87 PC: 12de6 | Get or set file date and time (See above)
2018-12-25T12:39:45.824728152Z 66 PC: 12c79 | Move file pointer (See above)
2018-12-25T12:39:45.826157994Z 64 PC: 12c86 | Write file or device (See above)
2018-12-25T12:39:45.829324186Z 66 PC: 12c93 | Move file pointer (See above)
2018-12-25T12:39:45.831136831Z 64 PC: 12cb0 | Write file or device (See above)
2018-12-25T12:39:45.839372872Z 87 PC: 12e0c | Get or set file date and time (See above)
2018-12-25T12:39:45.840900541Z 62 PC: 12cbb | Close file (See above)
2018-12-25T12:39:45.84867006Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.852387393Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.855882587Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.860134106Z 61 PC: 12c34 | Open file (See above)
2018-12-25T12:39:45.868319425Z 63 PC: 12c44 | Read file or device (See above)
2018-12-25T12:39:45.874417181Z 87 PC: 12de6 | Get or set file date and time (See above)
2018-12-25T12:39:45.876402081Z 66 PC: 12c79 | Move file pointer (See above)
2018-12-25T12:39:45.877788748Z 64 PC: 12c86 | Write file or device (See above)
2018-12-25T12:39:45.88083522Z 66 PC: 12c93 | Move file pointer (See above)
2018-12-25T12:39:45.882852009Z 64 PC: 12cb0 | Write file or device (See above)
2018-12-25T12:39:45.89161306Z 87 PC: 12e0c | Get or set file date and time (See above)
2018-12-25T12:39:45.893237769Z 62 PC: 12cbb | Close file (See above)
2018-12-25T12:39:45.917060488Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.920614333Z 61 PC: 12c34 | Open file (See above)
2018-12-25T12:39:45.928980606Z 63 PC: 12c44 | Read file or device (See above)
2018-12-25T12:39:45.936249677Z 87 PC: 12de6 | Get or set file date and time (See above)
2018-12-25T12:39:45.93836292Z 66 PC: 12c79 | Move file pointer (See above)
2018-12-25T12:39:45.940468149Z 64 PC: 12c86 | Write file or device (See above)
2018-12-25T12:39:45.948680453Z 66 PC: 12c93 | Move file pointer (See above)
2018-12-25T12:39:45.951613602Z 64 PC: 12cb0 | Write file or device (See above)
2018-12-25T12:39:45.963716893Z 87 PC: 12e0c | Get or set file date and time (See above)
2018-12-25T12:39:45.965458496Z 62 PC: 12cbb | Close file (See above)
2018-12-25T12:39:45.973331123Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.977549474Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.980908321Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.987911174Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.992371874Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.996043402Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.004258272Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.008167493Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.011997142Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.015255583Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.01953071Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.023724425Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.027154771Z 61 PC: 12c34 | Open file (See above)
2018-12-25T12:39:46.035172904Z 63 PC: 12c44 | Read file or device (See above)
2018-12-25T12:39:46.041929792Z 87 PC: 12de6 | Get or set file date and time (See above)
2018-12-25T12:39:46.043675645Z 66 PC: 12c79 | Move file pointer (See above)
2018-12-25T12:39:46.045634972Z 64 PC: 12c86 | Write file or device (See above)
2018-12-25T12:39:46.049689287Z 66 PC: 12c93 | Move file pointer (See above)
2018-12-25T12:39:46.051334388Z 64 PC: 12cb0 | Write file or device (See above)
2018-12-25T12:39:46.060693862Z 87 PC: 12e0c | Get or set file date and time (See above)
2018-12-25T12:39:46.063285316Z 62 PC: 12cbb | Close file (See above)
2018-12-25T12:39:46.072084278Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.076411639Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.080851318Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.084512145Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.087767087Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.091757817Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.096147552Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.103507346Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.107067087Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.117843676Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.121291542Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.124587933Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.128099703Z 91 PC: 12cde | Create new file (See above)
2018-12-25T12:39:46.134508979Z 61 PC: 12d16 | Open file (Filename = 'C:\system.2st')
2018-12-25T12:39:46.142131338Z 63 PC: 12d24 | Read file or device (Read 2 bytes on handle 5)
2018-12-25T12:39:46.145881655Z 42 PC: 12d28 | Get date 0x12d28: mov dh, 0
0x12d2a: mov si, bp
0x12d2c: add si, 0x3c9
0x12d30: mov ax, word ptr [si]
0x12d32: add ax, 5
0x12d35: cmp ax, dx
0x12d37: jb 0x12d43
0x12d39: nop
0x12d3a: nop
0x12d3b: mov ah, 0x3e
0x12d3d: int 0x21
0x12d3f: clc
0x12d40: jmp 0x12d4e
0x12d42: nop
0x12d43: mov ah, 0x41
0x12d45: mov dx, bp
0x12d47: add dx, 0x3cd
0x12d4b: int 0x21
0x12d4d: stc
0x12d4e: ret
2018-12-25T12:39:46.148289499Z 62 PC: 12d3f | Close file
2018-12-25T12:39:46.150404525Z 26 PC: 12ba2 | Set disk transfer address (See above)
2018-12-25T12:39:46.152037907Z 78 PC: 12baf | Find first file (See above)
2018-12-25T12:39:46.158579567Z 79 PC: 12bc5 | Find next file
2018-12-25T12:39:46.161977839Z 79 PC: 12bc9 | Find next file
2018-12-25T12:39:46.166060583Z 59 PC: 12b1e | Change current directory
2018-12-25T12:39:46.171148161Z 26 PC: 12b83 | Set disk transfer address
2018-12-25T12:39:46.18158198Z 79 PC: 12b87 | Find next file
2018-12-25T12:39:46.186187585Z 59 PC: 12b29 | Change current directory (See above)
2018-12-25T12:39:46.192986683Z 26 PC: 12c05 | Set disk transfer address (See above)
2018-12-25T12:39:46.194505069Z 78 PC: 12c12 | Find first file (See above)
2018-12-25T12:39:46.204482528Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.208929915Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.212235168Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.215529607Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.219703731Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.223184873Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.226932909Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.232001342Z 61 PC: 12c34 | Open file (See above)
2018-12-25T12:39:46.240759627Z 63 PC: 12c44 | Read file or device (See above)
2018-12-25T12:39:46.247578722Z 87 PC: 12de6 | Get or set file date and time (See above)
2018-12-25T12:39:46.250517978Z 66 PC: 12c79 | Move file pointer (See above)
2018-12-25T12:39:46.252752516Z 64 PC: 12c86 | Write file or device (See above)
2018-12-25T12:39:46.256253328Z 66 PC: 12c93 | Move file pointer (See above)
2018-12-25T12:39:46.259366003Z 64 PC: 12cb0 | Write file or device (See above)
2018-12-25T12:39:46.273558979Z 87 PC: 12e0c | Get or set file date and time (See above)
2018-12-25T12:39:46.275439674Z 62 PC: 12cbb | Close file (See above)
2018-12-25T12:39:46.2853069Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.289145292Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.29252386Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.297334067Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.301117653Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.30489864Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.31271871Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.316191607Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.319602158Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.323978553Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.327398665Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.330814642Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.334432311Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.338404131Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.341642703Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.345714352Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.349650247Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.353271408Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.357097833Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.362010813Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.365914355Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.36978895Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.378174143Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.382014556Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.38532367Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.389773004Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.393107734Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.396626122Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.401050314Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.404509284Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.408088789Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.412563717Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.417096153Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.420797237Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.425325633Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.429389153Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.433160996Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.437702226Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.44506076Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.44848693Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.45253887Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.456341439Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.460008413Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.463933692Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.467642535Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.471308135Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.474821867Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.478339203Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.481618428Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.485942346Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.489722619Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.492914921Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.49617967Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.499708096Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.506561351Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.510502874Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.515216257Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.519001831Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.522871418Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.527728464Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.531527676Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.535305262Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.53997843Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.544090454Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.547884549Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.552426609Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.557286831Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.560760973Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.564947835Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.568924676Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.576173095Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.580827313Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.584939705Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.588734754Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.59333173Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.597560916Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.601377221Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.605417975Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.610113016Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.615118136Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.619030762Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.624609244Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.628256034Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.631768358Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.635995018Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.639497836Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.646781079Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.65197399Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.655828105Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.659617796Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.665804426Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.669733338Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.673555825Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.678225521Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.682346766Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.686116849Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.690767796Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.69510974Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.698718763Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.703829063Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.710838329Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.719722841Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.724211033Z 91 PC: 12cde | Create new file (See above)
2018-12-25T12:39:46.731214536Z 61 PC: 12d16 | Open file (See above)
2018-12-25T12:39:46.738317293Z 63 PC: 12d24 | Read file or device (See above)
2018-12-25T12:39:46.745280879Z 42 PC: 12d28 | Get date (See above)
2018-12-25T12:39:46.748046706Z 62 PC: 12d3f | Close file (See above)
2018-12-25T12:39:46.75009371Z 26 PC: 12ba2 | Set disk transfer address (See above)
2018-12-25T12:39:46.751990499Z 78 PC: 12baf | Find first file (See above)
2018-12-25T12:39:46.759472565Z 79 PC: 12bc5 | Find next file (See above)
2018-12-25T12:39:46.762803754Z 79 PC: 12bc9 | Find next file (See above)
2018-12-25T12:39:46.766768628Z 59 PC: 12b29 | Change current directory (See above)
2018-12-25T12:39:46.787462319Z 26 PC: 12c05 | Set disk transfer address (See above)
2018-12-25T12:39:46.788824269Z 78 PC: 12c12 | Find first file (See above)
2018-12-25T12:39:46.800239053Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.804915396Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.808523647Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.812328483Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.816725903Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.821013291Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.825973775Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.830474997Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.834546831Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.838628243Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.842889989Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.84683862Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.851191117Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.855809596Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.863042894Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.866983643Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.871896328Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.875680651Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.879404184Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.88395203Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.887729837Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.891532029Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.896654552Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.900469668Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.904693268Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.909383981Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.913130849Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.916881048Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.921695172Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.926108303Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.933420973Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.938621466Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.942648712Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.946536595Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.950599668Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.954030757Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.95741922Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.960853862Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.965231621Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.96884653Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.973533222Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.977093482Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.981214162Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.986223234Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.990068939Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.99427545Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.002304747Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.005729221Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.009673281Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.013772799Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.017167029Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.020550811Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.025004622Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.028434564Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.03247185Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.037870283Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.041574204Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.045018326Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.048809893Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.052244676Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.05587282Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.060324217Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.067597743Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.071775201Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.075434953Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.078951531Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.083576689Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.087108421Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.090630248Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.094887806Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.098412642Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.101747425Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.106696918Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.110090565Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.1133793Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.117445847Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.120945268Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.124588095Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.132435651Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.135821731Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.139226112Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.14336963Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.146867873Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.150384817Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.154512126Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.158082823Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.161748346Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.16657041Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.170619661Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.175498862Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.179982482Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.18390897Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.187669538Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.192638744Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.199593459Z 91 PC: 12cde | Create new file (See above)
2018-12-25T12:39:47.206503832Z 61 PC: 12d16 | Open file (See above)
2018-12-25T12:39:47.214841434Z 63 PC: 12d24 | Read file or device (See above)
2018-12-25T12:39:47.218106519Z 42 PC: 12d28 | Get date (See above)
2018-12-25T12:39:47.220899308Z 62 PC: 12d3f | Close file (See above)
2018-12-25T12:39:47.224072566Z 26 PC: 12ba2 | Set disk transfer address (See above)
2018-12-25T12:39:47.225296764Z 78 PC: 12baf | Find first file (See above)
2018-12-25T12:39:47.231784222Z 79 PC: 12bc5 | Find next file (See above)
2018-12-25T12:39:47.236128116Z 79 PC: 12bc9 | Find next file (See above)
2018-12-25T12:39:47.239891933Z 59 PC: 12b1e | Change current directory (See above)
2018-12-25T12:39:47.246884695Z 26 PC: 12b83 | Set disk transfer address (See above)
2018-12-25T12:39:47.249055784Z 79 PC: 12b87 | Find next file (See above)
2018-12-25T12:39:47.252797621Z 59 PC: 12b29 | Change current directory (See above)
2018-12-25T12:39:47.259663257Z 26 PC: 12c05 | Set disk transfer address (See above)
2018-12-25T12:39:47.261217633Z 78 PC: 12c12 | Find first file (See above)
2018-12-25T12:39:47.271089474Z 91 PC: 12cde | Create new file (See above)
2018-12-25T12:39:47.278463937Z 61 PC: 12d16 | Open file (See above)
2018-12-25T12:39:47.285215683Z 63 PC: 12d24 | Read file or device (See above)
2018-12-25T12:39:47.288079992Z 42 PC: 12d28 | Get date (See above)
2018-12-25T12:39:47.291219478Z 62 PC: 12d3f | Close file (See above)
2018-12-25T12:39:47.293369483Z 26 PC: 12ba2 | Set disk transfer address (See above)
2018-12-25T12:39:47.294526207Z 78 PC: 12baf | Find first file (See above)
2018-12-25T12:39:47.301601886Z 79 PC: 12bc5 | Find next file (See above)
2018-12-25T12:39:47.304915931Z 79 PC: 12bc9 | Find next file (See above)
2018-12-25T12:39:47.3089608Z 59 PC: 12b1e | Change current directory (See above)
2018-12-25T12:39:47.315703571Z 26 PC: 12b83 | Set disk transfer address (See above)
2018-12-25T12:39:47.317165427Z 79 PC: 12b87 | Find next file (See above)
2018-12-25T12:39:47.321026793Z 59 PC: 12b1e | Change current directory (See above)
2018-12-25T12:39:47.32630975Z 26 PC: 12b83 | Set disk transfer address (See above)
2018-12-25T12:39:47.327503743Z 79 PC: 12b87 | Find next file (See above)
2018-12-25T12:39:47.330399381Z 14 PC: 12ac1 | Set default drive (Drive = 'C')
2018-12-25T12:39:47.332766361Z 76 PC: 12ad4 | Terminate with return code (Return code = '0')

{"DateBased":true,"Day":27,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":14080,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:39:45.317335717Z 14 PC: 12af3 | Set default drive (Drive = 'C')
2018-12-25T12:39:45.319700399Z 59 PC: 12b13 | Change current directory
2018-12-25T12:39:45.323214764Z 26 PC: 12c05 | Set disk transfer address
2018-12-25T12:39:45.331905266Z 78 PC: 12c12 | Find first file
2018-12-25T12:39:45.337594673Z 79 PC: 12cbf | Find next file
2018-12-25T12:39:45.340789766Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.343648004Z 61 PC: 12c34 | Open file (Filename = 'COMMAND.COM')
2018-12-25T12:39:45.349599247Z 63 PC: 12c44 | Read file or device (Read 4 bytes on handle 5)
2018-12-25T12:39:45.36363407Z 87 PC: 12de6 | Get or set file date and time
2018-12-25T12:39:45.36504203Z 66 PC: 12c79 | Move file pointer
2018-12-25T12:39:45.366879168Z 64 PC: 12c86 | Write file or device (Write 4 bytes on handle 5)
2018-12-25T12:39:45.37013289Z 66 PC: 12c93 | Move file pointer
2018-12-25T12:39:45.371352273Z 64 PC: 12cb0 | Write file or device (Write 1133 bytes on handle 5)
2018-12-25T12:39:45.707004453Z 87 PC: 12e0c | Get or set file date and time
2018-12-25T12:39:45.70960998Z 62 PC: 12cbb | Close file
2018-12-25T12:39:45.717326936Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.719981492Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.726948908Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.72932618Z 91 PC: 12cde | Create new file
2018-12-25T12:39:45.740272074Z 42 PC: 12ce7 | Get date 0x12ce7: mov si, bp
0x12ce9: add si, 0x3cb
0x12ced: mov dh, 0
0x12cef: cmp dl, 0x1b
0x12cf2: jb 0x12cf8
0x12cf4: nop
0x12cf5: nop
0x12cf6: mov dl, 1
0x12cf8: mov word ptr [si], dx
0x12cfa: mov ah, 0x40
0x12cfc: mov cx, 2
0x12cff: mov dx, si
0x12d01: int 0x21
0x12d03: mov ah, 0x3e
0x12d05: int 0x21
0x12d07: clc
0x12d08: jmp 0x12d4e
0x12d0a: nop
0x12d0b: mov ax, 0x3d02
0x12d0e: mov dx, bp
2018-12-25T12:39:45.743754843Z 64 PC: 12d03 | Write file or device (Write 2 bytes on handle 5)
2018-12-25T12:39:45.748142562Z 62 PC: 12d07 | Close file
2018-12-25T12:39:45.755843585Z 26 PC: 12ba2 | Set disk transfer address
2018-12-25T12:39:45.757737843Z 78 PC: 12baf | Find first file
2018-12-25T12:39:45.763888861Z 59 PC: 12b29 | Change current directory
2018-12-25T12:39:45.769844522Z 26 PC: 12c05 | Set disk transfer address (See above)
2018-12-25T12:39:45.771004056Z 78 PC: 12c12 | Find first file (See above)
2018-12-25T12:39:45.78040974Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.784256186Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.787524703Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.798884921Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.802018796Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.805075036Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.808976953Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.81289041Z 61 PC: 12c34 | Open file (See above)
2018-12-25T12:39:45.81966603Z 63 PC: 12c44 | Read file or device (See above)
2018-12-25T12:39:45.826615338Z 87 PC: 12de6 | Get or set file date and time (See above)
2018-12-25T12:39:45.827944103Z 66 PC: 12c79 | Move file pointer (See above)
2018-12-25T12:39:45.829256247Z 64 PC: 12c86 | Write file or device (See above)
2018-12-25T12:39:45.833222988Z 66 PC: 12c93 | Move file pointer (See above)
2018-12-25T12:39:45.834587364Z 64 PC: 12cb0 | Write file or device (See above)
2018-12-25T12:39:45.841544005Z 87 PC: 12e0c | Get or set file date and time (See above)
2018-12-25T12:39:45.84397739Z 62 PC: 12cbb | Close file (See above)
2018-12-25T12:39:45.850106851Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.853092097Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.856310036Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.86055887Z 61 PC: 12c34 | Open file (See above)
2018-12-25T12:39:45.867270607Z 63 PC: 12c44 | Read file or device (See above)
2018-12-25T12:39:45.872788103Z 87 PC: 12de6 | Get or set file date and time (See above)
2018-12-25T12:39:45.875216477Z 66 PC: 12c79 | Move file pointer (See above)
2018-12-25T12:39:45.876756798Z 64 PC: 12c86 | Write file or device (See above)
2018-12-25T12:39:45.879282553Z 66 PC: 12c93 | Move file pointer (See above)
2018-12-25T12:39:45.881549816Z 64 PC: 12cb0 | Write file or device (See above)
2018-12-25T12:39:45.89557479Z 87 PC: 12e0c | Get or set file date and time (See above)
2018-12-25T12:39:45.897026368Z 62 PC: 12cbb | Close file (See above)
2018-12-25T12:39:45.903852128Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.90699958Z 61 PC: 12c34 | Open file (See above)
2018-12-25T12:39:45.913459554Z 63 PC: 12c44 | Read file or device (See above)
2018-12-25T12:39:45.919523279Z 87 PC: 12de6 | Get or set file date and time (See above)
2018-12-25T12:39:45.921162697Z 66 PC: 12c79 | Move file pointer (See above)
2018-12-25T12:39:45.92274042Z 64 PC: 12c86 | Write file or device (See above)
2018-12-25T12:39:45.926982681Z 66 PC: 12c93 | Move file pointer (See above)
2018-12-25T12:39:45.928607185Z 64 PC: 12cb0 | Write file or device (See above)
2018-12-25T12:39:45.941134491Z 87 PC: 12e0c | Get or set file date and time (See above)
2018-12-25T12:39:45.943834259Z 62 PC: 12cbb | Close file (See above)
2018-12-25T12:39:45.951381756Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.954331888Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.958503043Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.96519361Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.968429531Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.972531346Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.975613431Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.978552954Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.982118994Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.985208126Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.988117885Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.991215548Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:45.995261438Z 61 PC: 12c34 | Open file (See above)
2018-12-25T12:39:46.002548013Z 63 PC: 12c44 | Read file or device (See above)
2018-12-25T12:39:46.007993716Z 87 PC: 12de6 | Get or set file date and time (See above)
2018-12-25T12:39:46.009977614Z 66 PC: 12c79 | Move file pointer (See above)
2018-12-25T12:39:46.011243608Z 64 PC: 12c86 | Write file or device (See above)
2018-12-25T12:39:46.013756066Z 66 PC: 12c93 | Move file pointer (See above)
2018-12-25T12:39:46.016120138Z 64 PC: 12cb0 | Write file or device (See above)
2018-12-25T12:39:46.02421279Z 87 PC: 12e0c | Get or set file date and time (See above)
2018-12-25T12:39:46.025640845Z 62 PC: 12cbb | Close file (See above)
2018-12-25T12:39:46.033612315Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.03653871Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.039648705Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.044244672Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.047592983Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.050789023Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.054983335Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.061629048Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.064895007Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.069703659Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.073284067Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.076972505Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.080680825Z 91 PC: 12cde | Create new file (See above)
2018-12-25T12:39:46.08691106Z 61 PC: 12d16 | Open file (Filename = 'C:\system.2st')
2018-12-25T12:39:46.092766245Z 63 PC: 12d24 | Read file or device (Read 2 bytes on handle 5)
2018-12-25T12:39:46.096020533Z 42 PC: 12d28 | Get date 0x12d28: mov dh, 0
0x12d2a: mov si, bp
0x12d2c: add si, 0x3c9
0x12d30: mov ax, word ptr [si]
0x12d32: add ax, 5
0x12d35: cmp ax, dx
0x12d37: jb 0x12d43
0x12d39: nop
0x12d3a: nop
0x12d3b: mov ah, 0x3e
0x12d3d: int 0x21
0x12d3f: clc
0x12d40: jmp 0x12d4e
0x12d42: nop
0x12d43: mov ah, 0x41
0x12d45: mov dx, bp
0x12d47: add dx, 0x3cd
0x12d4b: int 0x21
0x12d4d: stc
0x12d4e: ret
2018-12-25T12:39:46.098699104Z 65 PC: 12d4d | Delete file (Filename = 'C:\system.2st')
2018-12-25T12:39:46.10848146Z 78 PC: 12d6f | Find first file
2018-12-25T12:39:46.115476474Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:46.121262236Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:46.127257084Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:46.134282927Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:46.140195249Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:46.146051503Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:46.152383944Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:46.158415008Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:46.16418485Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:46.170091654Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:46.176046715Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:46.18178319Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:46.187709193Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:46.193981339Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:46.200589126Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:46.202809719Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:46.209039958Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:46.214935164Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:46.218642041Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:46.225070149Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:46.231080217Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:46.237264801Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:46.242341509Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:46.247891977Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:46.251647234Z 26 PC: 12ba2 | Set disk transfer address (See above)
2018-12-25T12:39:46.254095499Z 78 PC: 12baf | Find first file (See above)
2018-12-25T12:39:46.259906027Z 79 PC: 12bc5 | Find next file
2018-12-25T12:39:46.263731585Z 79 PC: 12bc9 | Find next file
2018-12-25T12:39:46.26755721Z 59 PC: 12b1e | Change current directory
2018-12-25T12:39:46.271625585Z 26 PC: 12b83 | Set disk transfer address
2018-12-25T12:39:46.272846297Z 79 PC: 12b87 | Find next file
2018-12-25T12:39:46.27664259Z 59 PC: 12b29 | Change current directory (See above)
2018-12-25T12:39:46.282417871Z 26 PC: 12c05 | Set disk transfer address (See above)
2018-12-25T12:39:46.283651675Z 78 PC: 12c12 | Find first file (See above)
2018-12-25T12:39:46.290004814Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.29207786Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.294094599Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.296637618Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.298648486Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.300691176Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.303299379Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.305325536Z 61 PC: 12c34 | Open file (See above)
2018-12-25T12:39:46.309487302Z 63 PC: 12c44 | Read file or device (See above)
2018-12-25T12:39:46.313435325Z 87 PC: 12de6 | Get or set file date and time (See above)
2018-12-25T12:39:46.314648199Z 66 PC: 12c79 | Move file pointer (See above)
2018-12-25T12:39:46.315707169Z 64 PC: 12c86 | Write file or device (See above)
2018-12-25T12:39:46.31897676Z 66 PC: 12c93 | Move file pointer (See above)
2018-12-25T12:39:46.32057664Z 64 PC: 12cb0 | Write file or device (See above)
2018-12-25T12:39:46.33278785Z 87 PC: 12e0c | Get or set file date and time (See above)
2018-12-25T12:39:46.335343621Z 62 PC: 12cbb | Close file (See above)
2018-12-25T12:39:46.342297173Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.345317021Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.349064233Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.352414906Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.35569913Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.359570663Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.365555145Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.368465504Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.372539705Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.375883249Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.379190056Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.38332194Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.386986985Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.390286604Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.402304341Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.405688649Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.408972486Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.413556531Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.416809995Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.420078511Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.423662269Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.427187268Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.433339454Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.437325791Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.441219369Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.444515401Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.447967987Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.451218572Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.454313261Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.458312738Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.461761575Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.464998973Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.469008359Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.472480818Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.475756959Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.479758812Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.484060119Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.487223069Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.493639915Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.49742506Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.500656832Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.50463901Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.508184778Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.511185468Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.514324944Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.517886953Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.521090492Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.524496537Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.528359139Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.531423317Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.53646374Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.540074059Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.544473419Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.55008735Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.558953223Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.562330406Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.565879653Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.570139412Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.573253489Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.576411486Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.579249287Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.58257226Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.586701196Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.590210523Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.593556133Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.597437896Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.600835923Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.604161562Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.608306429Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.611769071Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.61805767Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.622930275Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.625988956Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.628957499Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.632654473Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.635730026Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.638710504Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.642389829Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.645464132Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.648434847Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.652103633Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.655175704Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.658205784Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.661982474Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.665534705Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.668774046Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.675657316Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.678667395Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.681566458Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.68616551Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.689118539Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.692818569Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.696852145Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.699870323Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.702855903Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.706795597Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.709797437Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.713088292Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.716876353Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.719911912Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.725888474Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.729374591Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.732062489Z 91 PC: 12cde | Create new file (See above)
2018-12-25T12:39:46.741875776Z 42 PC: 12ce7 | Get date (See above)
2018-12-25T12:39:46.744765542Z 64 PC: 12d03 | Write file or device (See above)
2018-12-25T12:39:46.74863542Z 62 PC: 12d07 | Close file (See above)
2018-12-25T12:39:46.755731674Z 26 PC: 12ba2 | Set disk transfer address (See above)
2018-12-25T12:39:46.757542895Z 78 PC: 12baf | Find first file (See above)
2018-12-25T12:39:46.763791901Z 79 PC: 12bc5 | Find next file (See above)
2018-12-25T12:39:46.766840676Z 79 PC: 12bc9 | Find next file (See above)
2018-12-25T12:39:46.770551257Z 59 PC: 12b29 | Change current directory (See above)
2018-12-25T12:39:46.776177087Z 26 PC: 12c05 | Set disk transfer address (See above)
2018-12-25T12:39:46.77714557Z 78 PC: 12c12 | Find first file (See above)
2018-12-25T12:39:46.786077636Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.789053074Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.792124558Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.796036122Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.799004349Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.801985537Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.806062508Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.809097344Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.812232375Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.816250911Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.819400192Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.822538483Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.826082776Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.829087348Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.835805952Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.839675766Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.842700957Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.845630443Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.849126553Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.852015378Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.85488015Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.857839728Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.860721218Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.863707676Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.868168155Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.871198436Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.87412541Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.877619215Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.880586334Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.883613797Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.890281127Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.893174482Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.896558937Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.900553318Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.90392671Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.907454096Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.910502746Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.913756646Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.917738419Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.92140312Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.924661008Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.928943091Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.932181222Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.935421522Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.939728703Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.942973713Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.949547788Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.953999658Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.95694797Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.959893327Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.963983984Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.967153178Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.971038187Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.975199586Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.978360907Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.981721628Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.985711348Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.988861973Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.992775026Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.995840397Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:46.998654337Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.002250539Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.008497124Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.02298493Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.026639598Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.029548071Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.032324756Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.036619251Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.039561897Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.042337723Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.045887611Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.048911088Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.051941389Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.056018766Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.059739853Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.062976533Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.067237716Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.070486785Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.077193361Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.080949257Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.084212568Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.088249513Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.091601886Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.094810375Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.09877862Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.103136754Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.106403601Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.110450828Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.114391963Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.118085525Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.122294834Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.125655641Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.128937614Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.133305844Z 79 PC: 12cbf | Find next file (See above)
2018-12-25T12:39:47.139041605Z 91 PC: 12cde | Create new file (See above)
2018-12-25T12:39:47.144896727Z 61 PC: 12d16 | Open file (See above)
2018-12-25T12:39:47.151667177Z 63 PC: 12d24 | Read file or device (See above)
2018-12-25T12:39:47.154192044Z 42 PC: 12d28 | Get date (See above)
2018-12-25T12:39:47.156577877Z 65 PC: 12d4d | Delete file (See above)
2018-12-25T12:39:47.167726002Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:47.174865177Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:47.18228413Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:47.188468038Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:47.194684294Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:47.201966055Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:47.208154897Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:47.214927387Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:47.222013353Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:47.228707726Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:47.235791165Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:47.242950069Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:47.249138984Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:47.255508794Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:47.262032574Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:47.268046877Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:47.27058215Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:47.276824052Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:47.283017451Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:47.286967753Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:47.293137716Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:47.300007051Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:47.306916907Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:47.31073497Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:47.317027167Z 78 PC: 12d6f | Find first file (See above)
2018-12-25T12:39:47.321439799Z 26 PC: 12ba2 | Set disk transfer address (See above)
2018-12-25T12:39:47.322444687Z 78 PC: 12baf | Find first file (See above)
2018-12-25T12:39:47.328638524Z 79 PC: 12bc5 | Find next file (See above)
2018-12-25T12:39:47.332426359Z 79 PC: 12bc9 | Find next file (See above)
2018-12-25T12:39:47.335733648Z 59 PC: 12b1e | Change current directory (See above)
2018-12-25T12:39:47.34136463Z 26 PC: 12b83 | Set disk transfer address (See above)
2018-12-25T12:39:47.343083899Z 79 PC: 12b87 | Find next file (See above)
2018-12-25T12:39:47.346558878Z 59 PC: 12b29 | Change current directory (See above)
2018-12-25T12:39:47.353119608Z 26 PC: 12c05 | Set disk transfer address (See above)
2018-12-25T12:39:47.354787692Z 78 PC: 12c12 | Find first file (See above)
2018-12-25T12:39:47.364005749Z 91 PC: 12cde | Create new file (See above)
2018-12-25T12:39:47.375027397Z 42 PC: 12ce7 | Get date (See above)
2018-12-25T12:39:47.377607635Z 64 PC: 12d03 | Write file or device (See above)
2018-12-25T12:39:47.381186524Z 62 PC: 12d07 | Close file (See above)
2018-12-25T12:39:47.390352781Z 26 PC: 12ba2 | Set disk transfer address (See above)
2018-12-25T12:39:47.391359438Z 78 PC: 12baf | Find first file (See above)
2018-12-25T12:39:47.396887928Z 79 PC: 12bc5 | Find next file (See above)
2018-12-25T12:39:47.401468331Z 79 PC: 12bc9 | Find next file (See above)
2018-12-25T12:39:47.4042738Z 59 PC: 12b1e | Change current directory (See above)
2018-12-25T12:39:47.410104849Z 26 PC: 12b83 | Set disk transfer address (See above)
2018-12-25T12:39:47.411731138Z 79 PC: 12b87 | Find next file (See above)
2018-12-25T12:39:47.414659405Z 59 PC: 12b1e | Change current directory (See above)
2018-12-25T12:39:47.418606368Z 26 PC: 12b83 | Set disk transfer address (See above)
2018-12-25T12:39:47.420018264Z 79 PC: 12b87 | Find next file (See above)
2018-12-25T12:39:47.422541813Z 14 PC: 12ac1 | Set default drive (Drive = 'C')
2018-12-25T12:39:47.424376243Z 76 PC: 12ad4 | Terminate with return code (Return code = '0')