Sample viewer

vx.netlux.org/Virus.DOS.Szamalk.2034

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:03:51.408662225Z 26 PC: 13576 | Set disk transfer address
2018-12-17T23:03:51.415089237Z 42 PC: 13580 | Get date 0x13580: cmp cx, 0x7c8
0x13584: jb 0x135ef
0x13586: cmp dh, 9
0x13589: jb 0x135ef
0x1358b: cmp dl, 1
0x1358e: jne 0x135ef
0x13590: call 0x1373e
0x13593: mov al, 2
0x13595: push ax
0x13596: mov cx, 0x80
0x13599: mov dx, 0
0x1359c: push ds
0x1359d: mov ds, dx
0x1359f: mov bx, 0
0x135a2: int 0x26
0x135a4: popf
0x135a5: pop ds
0x135a6: pop ax
0x135a7: inc al
0x135a9: cmp al, 0
2018-12-17T23:03:51.418168685Z 78 PC: 13608 | Find first file
2018-12-17T23:03:51.424832119Z 67 PC: 138e1 | Get or set file attributes
2018-12-17T23:03:51.431141196Z 67 PC: 138e1 | Get or set file attributes
2018-12-17T23:03:51.448379621Z 61 PC: 13789 | Open file (Filename = 'SLEEP.COM')
2018-12-17T23:03:51.45578509Z 87 PC: 138a9 | Get or set file date and time
2018-12-17T23:03:51.457120635Z 63 PC: 13795 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:03:51.464141915Z 62 PC: 137a7 | Close file
2018-12-17T23:03:51.465865827Z 67 PC: 138e1 | Get or set file attributes
2018-12-17T23:03:51.476928Z 79 PC: 13673 | Find next file
2018-12-17T23:03:51.481096536Z 67 PC: 138e1 | Get or set file attributes
2018-12-17T23:03:51.487279225Z 67 PC: 138e1 | Get or set file attributes
2018-12-17T23:03:51.49803092Z 61 PC: 13789 | Open file (Filename = 'PRINT.COM')
2018-12-17T23:03:51.505917745Z 87 PC: 138a9 | Get or set file date and time
2018-12-17T23:03:51.507579684Z 63 PC: 13795 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:03:51.514485622Z 62 PC: 137a7 | Close file
2018-12-17T23:03:51.517426145Z 67 PC: 138e1 | Get or set file attributes
2018-12-17T23:03:51.528365562Z 79 PC: 13673 | Find next file
2018-12-17T23:03:51.530552755Z 67 PC: 138e1 | Get or set file attributes
2018-12-17T23:03:51.53498973Z 67 PC: 138e1 | Get or set file attributes
2018-12-17T23:03:51.541676372Z 61 PC: 13789 | Open file (Filename = 'HELLO.COM')
2018-12-17T23:03:51.548748086Z 87 PC: 138a9 | Get or set file date and time
2018-12-17T23:03:51.550251663Z 63 PC: 13795 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:03:51.556671874Z 62 PC: 137a7 | Close file
2018-12-17T23:03:51.558179191Z 67 PC: 138e1 | Get or set file attributes
2018-12-17T23:03:51.56474055Z 79 PC: 13673 | Find next file
2018-12-17T23:03:51.568241455Z 67 PC: 138e1 | Get or set file attributes
2018-12-17T23:03:51.574182615Z 67 PC: 138e1 | Get or set file attributes
2018-12-17T23:03:51.584386714Z 61 PC: 13789 | Open file (Filename = 'PHANG.COM')
2018-12-17T23:03:51.59879455Z 87 PC: 138a9 | Get or set file date and time
2018-12-17T23:03:51.601069217Z 63 PC: 13795 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:03:51.608824931Z 62 PC: 137a7 | Close file
2018-12-17T23:03:51.612406406Z 67 PC: 138e1 | Get or set file attributes
2018-12-17T23:03:51.623462691Z 79 PC: 13673 | Find next file
2018-12-17T23:03:51.627019773Z 67 PC: 138e1 | Get or set file attributes
2018-12-17T23:03:51.634668873Z 67 PC: 138e1 | Get or set file attributes
2018-12-17T23:03:51.64514072Z 61 PC: 13789 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T23:03:51.652758585Z 87 PC: 138a9 | Get or set file date and time
2018-12-17T23:03:51.65482487Z 63 PC: 13795 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:03:51.662106822Z 62 PC: 137a7 | Close file
2018-12-17T23:03:51.663413406Z 67 PC: 138e1 | Get or set file attributes
2018-12-17T23:03:51.672547803Z 79 PC: 13673 | Find next file
2018-12-17T23:03:51.675342059Z 67 PC: 138e1 | Get or set file attributes
2018-12-17T23:03:51.679145088Z 67 PC: 138e1 | Get or set file attributes
2018-12-17T23:03:51.685640834Z 61 PC: 13789 | Open file (Filename = 'MANDEL.COM')
2018-12-17T23:03:51.690940105Z 87 PC: 138a9 | Get or set file date and time
2018-12-17T23:03:51.692828279Z 63 PC: 13795 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:03:51.697244248Z 62 PC: 137a7 | Close file
2018-12-17T23:03:51.700240918Z 67 PC: 138e1 | Get or set file attributes
2018-12-17T23:03:51.713564313Z 79 PC: 13673 | Find next file
2018-12-17T23:03:51.716524197Z 67 PC: 138e1 | Get or set file attributes
2018-12-17T23:03:51.728965366Z 67 PC: 138e1 | Get or set file attributes
2018-12-17T23:03:51.740025372Z 61 PC: 13789 | Open file (Filename = 'PAH.COM')
2018-12-17T23:03:51.747835954Z 87 PC: 138a9 | Get or set file date and time
2018-12-17T23:03:51.750335551Z 63 PC: 13795 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:03:51.757438385Z 62 PC: 137a7 | Close file
2018-12-17T23:03:51.75965424Z 67 PC: 138e1 | Get or set file attributes
2018-12-17T23:03:51.772285665Z 79 PC: 13673 | Find next file
2018-12-17T23:03:51.775708547Z 26 PC: 13780 | Set disk transfer address

{"DateBased":true,"Day":1,"Month":1,"Year":1992,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":14673,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:41:21.505395973Z 26 PC: 13576 | Set disk transfer address
2018-12-25T12:41:21.507534588Z 42 PC: 13580 | Get date 0x13580: cmp cx, 0x7c8
0x13584: jb 0x135ef
0x13586: cmp dh, 9
0x13589: jb 0x135ef
0x1358b: cmp dl, 1
0x1358e: jne 0x135ef
0x13590: call 0x1373e
0x13593: mov al, 2
0x13595: push ax
0x13596: mov cx, 0x80
0x13599: mov dx, 0
0x1359c: push ds
0x1359d: mov ds, dx
0x1359f: mov bx, 0
0x135a2: int 0x26
0x135a4: popf
0x135a5: pop ds
0x135a6: pop ax
0x135a7: inc al
0x135a9: cmp al, 0
2018-12-25T12:41:21.510396912Z 78 PC: 13608 | Find first file
2018-12-25T12:41:21.516843565Z 67 PC: 138e1 | Get or set file attributes
2018-12-25T12:41:21.530868035Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:21.54893715Z 61 PC: 13789 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:41:21.553297247Z 87 PC: 138a9 | Get or set file date and time
2018-12-25T12:41:21.554441818Z 63 PC: 13795 | Read file or device (Read 3 bytes on handle 5)
2018-12-25T12:41:21.559465358Z 62 PC: 137a7 | Close file
2018-12-25T12:41:21.560860436Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:21.567320938Z 79 PC: 13673 | Find next file
2018-12-25T12:41:21.57017838Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:21.576311898Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:21.585859415Z 61 PC: 13789 | Open file (See above)
2018-12-25T12:41:21.597138688Z 87 PC: 138a9 | Get or set file date and time (See above)
2018-12-25T12:41:21.598662853Z 63 PC: 13795 | Read file or device (See above)
2018-12-25T12:41:21.604855098Z 62 PC: 137a7 | Close file (See above)
2018-12-25T12:41:21.606479846Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:21.620254788Z 79 PC: 13673 | Find next file (See above)
2018-12-25T12:41:21.622940331Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:21.628439655Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:21.63894454Z 61 PC: 13789 | Open file (See above)
2018-12-25T12:41:21.645444689Z 87 PC: 138a9 | Get or set file date and time (See above)
2018-12-25T12:41:21.646746414Z 63 PC: 13795 | Read file or device (See above)
2018-12-25T12:41:21.653721118Z 62 PC: 137a7 | Close file (See above)
2018-12-25T12:41:21.655397619Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:21.665126421Z 79 PC: 13673 | Find next file (See above)
2018-12-25T12:41:21.668372731Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:21.679016211Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:21.688583216Z 61 PC: 13789 | Open file (See above)
2018-12-25T12:41:21.696241072Z 87 PC: 138a9 | Get or set file date and time (See above)
2018-12-25T12:41:21.697594117Z 63 PC: 13795 | Read file or device (See above)
2018-12-25T12:41:21.703844707Z 62 PC: 137a7 | Close file (See above)
2018-12-25T12:41:21.714464922Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:21.724969604Z 79 PC: 13673 | Find next file (See above)
2018-12-25T12:41:21.728028094Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:21.734634847Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:21.747600098Z 61 PC: 13789 | Open file (See above)
2018-12-25T12:41:21.754477902Z 87 PC: 138a9 | Get or set file date and time (See above)
2018-12-25T12:41:21.75589075Z 63 PC: 13795 | Read file or device (See above)
2018-12-25T12:41:21.762476916Z 62 PC: 137a7 | Close file (See above)
2018-12-25T12:41:21.763922257Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:21.771068919Z 79 PC: 13673 | Find next file (See above)
2018-12-25T12:41:21.774432167Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:21.780220966Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:21.78991331Z 61 PC: 13789 | Open file (See above)
2018-12-25T12:41:21.80573831Z 87 PC: 138a9 | Get or set file date and time (See above)
2018-12-25T12:41:21.807399444Z 63 PC: 13795 | Read file or device (See above)
2018-12-25T12:41:21.814093521Z 62 PC: 137a7 | Close file (See above)
2018-12-25T12:41:21.816612726Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:21.826331937Z 79 PC: 13673 | Find next file (See above)
2018-12-25T12:41:21.828993083Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:21.835765475Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:21.846879828Z 61 PC: 13789 | Open file (See above)
2018-12-25T12:41:21.853376447Z 87 PC: 138a9 | Get or set file date and time (See above)
2018-12-25T12:41:21.863966596Z 63 PC: 13795 | Read file or device (See above)
2018-12-25T12:41:21.871545731Z 62 PC: 137a7 | Close file (See above)
2018-12-25T12:41:21.87362743Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:21.889252955Z 79 PC: 13673 | Find next file (See above)
2018-12-25T12:41:21.891957173Z 26 PC: 13780 | Set disk transfer address

{"DateBased":true,"Day":1,"Month":9,"Year":1992,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":14673,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:41:21.783298546Z 26 PC: 13576 | Set disk transfer address
2018-12-25T12:41:21.786151846Z 42 PC: 13580 | Get date 0x13580: cmp cx, 0x7c8
0x13584: jb 0x135ef
0x13586: cmp dh, 9
0x13589: jb 0x135ef
0x1358b: cmp dl, 1
0x1358e: jne 0x135ef
0x13590: call 0x1373e
0x13593: mov al, 2
0x13595: push ax
0x13596: mov cx, 0x80
0x13599: mov dx, 0
0x1359c: push ds
0x1359d: mov ds, dx
0x1359f: mov bx, 0
0x135a2: int 0x26
0x135a4: popf
0x135a5: pop ds
0x135a6: pop ax
0x135a7: inc al
0x135a9: cmp al, 0
2018-12-25T12:41:21.788705628Z 78 PC: 1374a | Find first file
2018-12-25T12:41:21.803000672Z 9 PC: 135da | Display string (String= '===== SZ�MALK v�rus V1.10 Copyright (C) SZ�MALK 1992. (R) =====')
2018-12-25T12:41:21.808230886Z 9 PC: 135da | Display string (See above)
2018-12-25T12:41:21.812555802Z 9 PC: 135da | Display string (See above)
2018-12-25T12:41:21.817381946Z 9 PC: 135da | Display string (See above)
2018-12-25T12:41:21.82136735Z 9 PC: 135da | Display string (See above)
2018-12-25T12:41:21.828167049Z 9 PC: 135da | Display string (See above)
2018-12-25T12:41:21.83566697Z 9 PC: 135da | Display string (See above)
2018-12-25T12:41:21.838367173Z 9 PC: 135da | Display string (See above)
2018-12-25T12:41:21.843045536Z 9 PC: 135da | Display string (See above)
2018-12-25T12:41:21.859548569Z 9 PC: 135da | Display string (See above)
2018-12-25T12:41:21.8631224Z 9 PC: 135da | Display string (See above)
2018-12-25T12:41:21.873048686Z 9 PC: 135da | Display string (See above)

{"DateBased":true,"Day":2,"Month":9,"Year":1992,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":14673,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:41:21.82042614Z 26 PC: 13576 | Set disk transfer address
2018-12-25T12:41:21.822833381Z 42 PC: 13580 | Get date 0x13580: cmp cx, 0x7c8
0x13584: jb 0x135ef
0x13586: cmp dh, 9
0x13589: jb 0x135ef
0x1358b: cmp dl, 1
0x1358e: jne 0x135ef
0x13590: call 0x1373e
0x13593: mov al, 2
0x13595: push ax
0x13596: mov cx, 0x80
0x13599: mov dx, 0
0x1359c: push ds
0x1359d: mov ds, dx
0x1359f: mov bx, 0
0x135a2: int 0x26
0x135a4: popf
0x135a5: pop ds
0x135a6: pop ax
0x135a7: inc al
0x135a9: cmp al, 0
2018-12-25T12:41:21.826353084Z 78 PC: 13608 | Find first file
2018-12-25T12:41:21.832211892Z 67 PC: 138e1 | Get or set file attributes
2018-12-25T12:41:21.838599737Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:21.853936767Z 61 PC: 13789 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:41:21.860473215Z 87 PC: 138a9 | Get or set file date and time
2018-12-25T12:41:21.862206445Z 63 PC: 13795 | Read file or device (Read 3 bytes on handle 5)
2018-12-25T12:41:21.868438753Z 62 PC: 137a7 | Close file
2018-12-25T12:41:21.870009739Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:21.880311396Z 79 PC: 13673 | Find next file
2018-12-25T12:41:21.882998043Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:21.888480488Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:21.897916862Z 61 PC: 13789 | Open file (See above)
2018-12-25T12:41:21.904354984Z 87 PC: 138a9 | Get or set file date and time (See above)
2018-12-25T12:41:21.90562773Z 63 PC: 13795 | Read file or device (See above)
2018-12-25T12:41:21.912062228Z 62 PC: 137a7 | Close file (See above)
2018-12-25T12:41:21.914927162Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:21.924870609Z 79 PC: 13673 | Find next file (See above)
2018-12-25T12:41:21.92787182Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:21.939912688Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:21.950216901Z 61 PC: 13789 | Open file (See above)
2018-12-25T12:41:21.95666391Z 87 PC: 138a9 | Get or set file date and time (See above)
2018-12-25T12:41:21.958625947Z 63 PC: 13795 | Read file or device (See above)
2018-12-25T12:41:21.96507202Z 62 PC: 137a7 | Close file (See above)
2018-12-25T12:41:21.966833811Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:21.97700599Z 79 PC: 13673 | Find next file (See above)
2018-12-25T12:41:21.980631845Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:21.986179274Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:21.999633605Z 61 PC: 13789 | Open file (See above)
2018-12-25T12:41:22.007216972Z 87 PC: 138a9 | Get or set file date and time (See above)
2018-12-25T12:41:22.008767396Z 63 PC: 13795 | Read file or device (See above)
2018-12-25T12:41:22.016014414Z 62 PC: 137a7 | Close file (See above)
2018-12-25T12:41:22.018290905Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:22.028440349Z 79 PC: 13673 | Find next file (See above)
2018-12-25T12:41:22.031970371Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:22.037616168Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:22.047332917Z 61 PC: 13789 | Open file (See above)
2018-12-25T12:41:22.059581103Z 87 PC: 138a9 | Get or set file date and time (See above)
2018-12-25T12:41:22.060895985Z 63 PC: 13795 | Read file or device (See above)
2018-12-25T12:41:22.067316852Z 62 PC: 137a7 | Close file (See above)
2018-12-25T12:41:22.069578304Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:22.080039518Z 79 PC: 13673 | Find next file (See above)
2018-12-25T12:41:22.082959172Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:22.088992066Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:22.09948955Z 61 PC: 13789 | Open file (See above)
2018-12-25T12:41:22.106173864Z 87 PC: 138a9 | Get or set file date and time (See above)
2018-12-25T12:41:22.10800397Z 63 PC: 13795 | Read file or device (See above)
2018-12-25T12:41:22.1152151Z 62 PC: 137a7 | Close file (See above)
2018-12-25T12:41:22.116921246Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:22.129154619Z 79 PC: 13673 | Find next file (See above)
2018-12-25T12:41:22.132857193Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:22.138935152Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:22.147012565Z 61 PC: 13789 | Open file (See above)
2018-12-25T12:41:22.151960606Z 87 PC: 138a9 | Get or set file date and time (See above)
2018-12-25T12:41:22.153104194Z 63 PC: 13795 | Read file or device (See above)
2018-12-25T12:41:22.157165585Z 62 PC: 137a7 | Close file (See above)
2018-12-25T12:41:22.159028655Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:22.165531273Z 79 PC: 13673 | Find next file (See above)
2018-12-25T12:41:22.167358428Z 26 PC: 13780 | Set disk transfer address

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":14673,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:41:21.81385343Z 26 PC: 13576 | Set disk transfer address
2018-12-25T12:41:21.815613227Z 42 PC: 13580 | Get date 0x13580: cmp cx, 0x7c8
0x13584: jb 0x135ef
0x13586: cmp dh, 9
0x13589: jb 0x135ef
0x1358b: cmp dl, 1
0x1358e: jne 0x135ef
0x13590: call 0x1373e
0x13593: mov al, 2
0x13595: push ax
0x13596: mov cx, 0x80
0x13599: mov dx, 0
0x1359c: push ds
0x1359d: mov ds, dx
0x1359f: mov bx, 0
0x135a2: int 0x26
0x135a4: popf
0x135a5: pop ds
0x135a6: pop ax
0x135a7: inc al
0x135a9: cmp al, 0
2018-12-25T12:41:21.818283971Z 78 PC: 13608 | Find first file
2018-12-25T12:41:21.824292775Z 67 PC: 138e1 | Get or set file attributes
2018-12-25T12:41:21.830111909Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:21.846724219Z 61 PC: 13789 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:41:21.853406205Z 87 PC: 138a9 | Get or set file date and time
2018-12-25T12:41:21.855026395Z 63 PC: 13795 | Read file or device (Read 3 bytes on handle 5)
2018-12-25T12:41:21.861190392Z 62 PC: 137a7 | Close file
2018-12-25T12:41:21.862856767Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:21.875132128Z 79 PC: 13673 | Find next file
2018-12-25T12:41:21.877805736Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:21.88381566Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:21.893353565Z 61 PC: 13789 | Open file (See above)
2018-12-25T12:41:21.899951372Z 87 PC: 138a9 | Get or set file date and time (See above)
2018-12-25T12:41:21.901222667Z 63 PC: 13795 | Read file or device (See above)
2018-12-25T12:41:21.907262604Z 62 PC: 137a7 | Close file (See above)
2018-12-25T12:41:21.909040895Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:21.918938595Z 79 PC: 13673 | Find next file (See above)
2018-12-25T12:41:21.921811122Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:21.928039027Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:21.93777079Z 61 PC: 13789 | Open file (See above)
2018-12-25T12:41:21.945502646Z 87 PC: 138a9 | Get or set file date and time (See above)
2018-12-25T12:41:21.947353177Z 63 PC: 13795 | Read file or device (See above)
2018-12-25T12:41:21.953606091Z 62 PC: 137a7 | Close file (See above)
2018-12-25T12:41:21.955275834Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:21.965554537Z 79 PC: 13673 | Find next file (See above)
2018-12-25T12:41:21.96879573Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:21.974360976Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:21.984587575Z 61 PC: 13789 | Open file (See above)
2018-12-25T12:41:21.990998861Z 87 PC: 138a9 | Get or set file date and time (See above)
2018-12-25T12:41:21.992339246Z 63 PC: 13795 | Read file or device (See above)
2018-12-25T12:41:21.999685207Z 62 PC: 137a7 | Close file (See above)
2018-12-25T12:41:22.001526589Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:22.011891372Z 79 PC: 13673 | Find next file (See above)
2018-12-25T12:41:22.016528154Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:22.022748453Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:22.03246505Z 61 PC: 13789 | Open file (See above)
2018-12-25T12:41:22.039970377Z 87 PC: 138a9 | Get or set file date and time (See above)
2018-12-25T12:41:22.041511771Z 63 PC: 13795 | Read file or device (See above)
2018-12-25T12:41:22.047906458Z 62 PC: 137a7 | Close file (See above)
2018-12-25T12:41:22.050283968Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:22.060126561Z 79 PC: 13673 | Find next file (See above)
2018-12-25T12:41:22.064222025Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:22.075090373Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:22.08473576Z 61 PC: 13789 | Open file (See above)
2018-12-25T12:41:22.091117Z 87 PC: 138a9 | Get or set file date and time (See above)
2018-12-25T12:41:22.092580123Z 63 PC: 13795 | Read file or device (See above)
2018-12-25T12:41:22.099233968Z 62 PC: 137a7 | Close file (See above)
2018-12-25T12:41:22.101226106Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:22.11121027Z 79 PC: 13673 | Find next file (See above)
2018-12-25T12:41:22.11299625Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:22.116455781Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:22.126739583Z 61 PC: 13789 | Open file (See above)
2018-12-25T12:41:22.138256293Z 87 PC: 138a9 | Get or set file date and time (See above)
2018-12-25T12:41:22.139722786Z 63 PC: 13795 | Read file or device (See above)
2018-12-25T12:41:22.1461959Z 62 PC: 137a7 | Close file (See above)
2018-12-25T12:41:22.147677099Z 67 PC: 138e1 | Get or set file attributes (See above)
2018-12-25T12:41:22.157161289Z 79 PC: 13673 | Find next file (See above)
2018-12-25T12:41:22.16019886Z 26 PC: 13780 | Set disk transfer address