Sample viewer

vx.netlux.org/Virus.DOS.Weed.5590

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:05:36.196970771Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:36.204132698Z 65 PC: 133a8 | Delete file (Filename = 'anti-vir.dat')
2018-12-17T23:05:36.210778615Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:36.216991096Z 65 PC: 133a8 | Delete file (Filename = 'chklist.ms')
2018-12-17T23:05:36.223972313Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:36.237262994Z 65 PC: 133a8 | Delete file (Filename = 'chklist.cps')
2018-12-17T23:05:36.244872042Z 98 PC: 1b596 | Get current PSP
2018-12-17T23:05:36.247044116Z 26 PC: 12b85 | Set disk transfer address
2018-12-17T23:05:36.249751638Z 78 PC: 12b97 | Find first file
2018-12-17T23:05:36.256632386Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:36.263317516Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:36.282415297Z 61 PC: 133d6 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:05:36.290638549Z 63 PC: 13478 | Read file or device (Read 5590 bytes on handle 5)
2018-12-17T23:05:36.299519318Z 62 PC: 134be | Close file
2018-12-17T23:05:36.302391589Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:36.314276607Z 47 PC: 1b2f5 | Get disk transfer address
2018-12-17T23:05:36.315912042Z 26 PC: 1b300 | Set disk transfer address
2018-12-17T23:05:36.317870745Z 78 PC: 1b30c | Find first file
2018-12-17T23:05:36.324859035Z 26 PC: 1b31e | Set disk transfer address
2018-12-17T23:05:36.326828478Z 48 PC: 1b3fa | Get DOS version
2018-12-17T23:05:36.328199927Z 61 PC: 1b419 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:05:36.336770152Z 62 PC: 1b2af | Close file
2018-12-17T23:05:36.339367536Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:36.345725581Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:36.357634545Z 61 PC: 13619 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:05:36.369952667Z 66 PC: 13649 | Move file pointer
2018-12-17T23:05:36.371527529Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:36.379744319Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:36.382590351Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:36.385637841Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:36.389533005Z 62 PC: 136f6 | Close file
2018-12-17T23:05:36.391781754Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:36.402867699Z 47 PC: 1b332 | Get disk transfer address
2018-12-17T23:05:36.404996923Z 26 PC: 1b33d | Set disk transfer address
2018-12-17T23:05:36.406545354Z 79 PC: 1b341 | Find next file
2018-12-17T23:05:36.40939387Z 26 PC: 1b351 | Set disk transfer address
2018-12-17T23:05:36.411737728Z 47 PC: 1b2f5 | Get disk transfer address
2018-12-17T23:05:36.413175251Z 26 PC: 1b300 | Set disk transfer address
2018-12-17T23:05:36.414468342Z 78 PC: 1b30c | Find first file
2018-12-17T23:05:36.420884978Z 26 PC: 1b31e | Set disk transfer address
2018-12-17T23:05:36.423546102Z 48 PC: 1b3fa | Get DOS version
2018-12-17T23:05:36.424818184Z 61 PC: 1b419 | Open file (Filename = 'SLEEP.COM')
2018-12-17T23:05:36.4325436Z 62 PC: 1b2af | Close file
2018-12-17T23:05:36.43594161Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:36.442284767Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:36.456006328Z 61 PC: 13619 | Open file (Filename = 'SLEEP.COM')
2018-12-17T23:05:36.464024245Z 66 PC: 13649 | Move file pointer
2018-12-17T23:05:36.465855759Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:36.473198886Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:36.477109079Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:36.479936305Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:36.482684172Z 62 PC: 136f6 | Close file
2018-12-17T23:05:36.484995127Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:36.497288613Z 26 PC: 1312c | Set disk transfer address
2018-12-17T23:05:36.499088478Z 78 PC: 1313e | Find first file
2018-12-17T23:05:36.506677658Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:36.514865774Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:36.526888221Z 61 PC: 133d6 | Open file (Filename = 'SLEEP.COM')
2018-12-17T23:05:36.533046881Z 87 PC: 13302 | Get or set file date and time
2018-12-17T23:05:36.535326798Z 63 PC: 13478 | Read file or device (Read 5590 bytes on handle 5)
2018-12-17T23:05:36.54128371Z 66 PC: 1b58b | Move file pointer
2018-12-17T23:05:36.543312645Z 64 PC: 13422 | Write file or device (Write 5590 bytes on handle 5)
2018-12-17T23:05:36.552934016Z 66 PC: 1b58b | Move file pointer
2018-12-17T23:05:36.555865228Z 64 PC: 13422 | Write file or device (Write 5590 bytes on handle 5)
2018-12-17T23:05:36.564289518Z 87 PC: 13364 | Get or set file date and time
2018-12-17T23:05:36.5665826Z 62 PC: 134be | Close file
2018-12-17T23:05:36.573871196Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:36.582326815Z 47 PC: 1b332 | Get disk transfer address
2018-12-17T23:05:36.583932123Z 26 PC: 1b33d | Set disk transfer address
2018-12-17T23:05:36.58629703Z 79 PC: 1b341 | Find next file
2018-12-17T23:05:36.588723292Z 26 PC: 1b351 | Set disk transfer address
2018-12-17T23:05:36.590999653Z 48 PC: 1b3fa | Get DOS version
2018-12-17T23:05:36.592677678Z 61 PC: 1b419 | Open file (Filename = 'PRINT.COM')
2018-12-17T23:05:36.599049459Z 62 PC: 1b2af | Close file
2018-12-17T23:05:36.601234518Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:36.607444174Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:36.616063031Z 61 PC: 13619 | Open file (Filename = 'PRINT.COM')
2018-12-17T23:05:36.62219947Z 66 PC: 13649 | Move file pointer
2018-12-17T23:05:36.62456621Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:36.626514764Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:36.62818288Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:36.631058858Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:36.633048209Z 62 PC: 136f6 | Close file
2018-12-17T23:05:36.634824429Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:36.644591104Z 26 PC: 1312c | Set disk transfer address
2018-12-17T23:05:36.645944188Z 78 PC: 1313e | Find first file
2018-12-17T23:05:36.652221351Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:36.659589115Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:36.671300587Z 61 PC: 133d6 | Open file (Filename = 'PRINT.COM')
2018-12-17T23:05:36.678732532Z 87 PC: 13302 | Get or set file date and time
2018-12-17T23:05:36.680866384Z 63 PC: 13478 | Read file or device (Read 5590 bytes on handle 5)
2018-12-17T23:05:36.688543269Z 66 PC: 1b58b | Move file pointer
2018-12-17T23:05:36.690510137Z 64 PC: 13422 | Write file or device (Write 5590 bytes on handle 5)
2018-12-17T23:05:36.698167666Z 66 PC: 1b58b | Move file pointer
2018-12-17T23:05:36.701656606Z 64 PC: 13422 | Write file or device (Write 5590 bytes on handle 5)
2018-12-17T23:05:36.709758851Z 87 PC: 13364 | Get or set file date and time
2018-12-17T23:05:36.711446685Z 62 PC: 134be | Close file
2018-12-17T23:05:36.719439855Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:36.728697093Z 47 PC: 1b332 | Get disk transfer address
2018-12-17T23:05:36.730173058Z 26 PC: 1b33d | Set disk transfer address
2018-12-17T23:05:36.731655215Z 79 PC: 1b341 | Find next file
2018-12-17T23:05:36.734518589Z 26 PC: 1b351 | Set disk transfer address
2018-12-17T23:05:36.736289609Z 48 PC: 1b3fa | Get DOS version
2018-12-17T23:05:36.737479416Z 61 PC: 1b419 | Open file (Filename = 'HELLO.COM')
2018-12-17T23:05:36.744107369Z 62 PC: 1b2af | Close file
2018-12-17T23:05:36.746266309Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:36.751331433Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:36.76066333Z 61 PC: 13619 | Open file (Filename = 'HELLO.COM')
2018-12-17T23:05:36.76747046Z 66 PC: 13649 | Move file pointer
2018-12-17T23:05:36.76927322Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:36.777771439Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:36.780821945Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:36.783866119Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:36.78806768Z 62 PC: 136f6 | Close file
2018-12-17T23:05:36.79054596Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:36.802605646Z 26 PC: 1312c | Set disk transfer address
2018-12-17T23:05:36.805663035Z 78 PC: 1313e | Find first file
2018-12-17T23:05:36.812755701Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:36.819169933Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:36.830153466Z 61 PC: 133d6 | Open file (Filename = 'HELLO.COM')
2018-12-17T23:05:36.838892097Z 87 PC: 13302 | Get or set file date and time
2018-12-17T23:05:36.840496104Z 63 PC: 13478 | Read file or device (Read 5590 bytes on handle 5)
2018-12-17T23:05:36.843003378Z 66 PC: 1b58b | Move file pointer
2018-12-17T23:05:36.845409342Z 64 PC: 13422 | Write file or device (Write 5590 bytes on handle 5)
2018-12-17T23:05:36.855234617Z 66 PC: 1b58b | Move file pointer
2018-12-17T23:05:36.857585918Z 64 PC: 13422 | Write file or device (Write 5590 bytes on handle 5)
2018-12-17T23:05:36.86684592Z 87 PC: 13364 | Get or set file date and time
2018-12-17T23:05:36.868406815Z 62 PC: 134be | Close file
2018-12-17T23:05:36.87530167Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:36.885213228Z 47 PC: 1b332 | Get disk transfer address
2018-12-17T23:05:36.886483456Z 26 PC: 1b33d | Set disk transfer address
2018-12-17T23:05:36.887518843Z 79 PC: 1b341 | Find next file
2018-12-17T23:05:36.890650241Z 26 PC: 1b351 | Set disk transfer address
2018-12-17T23:05:36.892268043Z 48 PC: 1b3fa | Get DOS version
2018-12-17T23:05:36.893399521Z 61 PC: 1b419 | Open file (Filename = 'PHANG.COM')
2018-12-17T23:05:36.900255502Z 62 PC: 1b2af | Close file
2018-12-17T23:05:36.903013478Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:36.909548325Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:36.923875426Z 61 PC: 13619 | Open file (Filename = 'PHANG.COM')
2018-12-17T23:05:36.937139116Z 66 PC: 13649 | Move file pointer
2018-12-17T23:05:36.938758862Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:36.944630743Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:36.947253875Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:36.948980081Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:36.950963741Z 62 PC: 136f6 | Close file
2018-12-17T23:05:36.953094398Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:36.961314163Z 26 PC: 1312c | Set disk transfer address
2018-12-17T23:05:36.962701672Z 78 PC: 1313e | Find first file
2018-12-17T23:05:36.96898102Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:36.975437811Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:36.986544265Z 61 PC: 133d6 | Open file (Filename = 'PHANG.COM')
2018-12-17T23:05:37.000808116Z 87 PC: 13302 | Get or set file date and time
2018-12-17T23:05:37.003249376Z 63 PC: 13478 | Read file or device (Read 5590 bytes on handle 5)
2018-12-17T23:05:37.010626148Z 66 PC: 1b58b | Move file pointer
2018-12-17T23:05:37.014017464Z 64 PC: 13422 | Write file or device (Write 5590 bytes on handle 5)
2018-12-17T23:05:37.023963756Z 66 PC: 1b58b | Move file pointer
2018-12-17T23:05:37.027453379Z 64 PC: 13422 | Write file or device (Write 5590 bytes on handle 5)
2018-12-17T23:05:37.038214052Z 87 PC: 13364 | Get or set file date and time
2018-12-17T23:05:37.040338877Z 62 PC: 134be | Close file
2018-12-17T23:05:37.049506335Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:37.062326041Z 47 PC: 1b332 | Get disk transfer address
2018-12-17T23:05:37.064002573Z 26 PC: 1b33d | Set disk transfer address
2018-12-17T23:05:37.070556627Z 79 PC: 1b341 | Find next file
2018-12-17T23:05:37.07504643Z 26 PC: 1b351 | Set disk transfer address
2018-12-17T23:05:37.077973374Z 48 PC: 1b3fa | Get DOS version
2018-12-17T23:05:37.079875099Z 61 PC: 1b419 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T23:05:37.089646031Z 62 PC: 1b2af | Close file
2018-12-17T23:05:37.093048129Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:37.099955798Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:37.112155137Z 61 PC: 13619 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T23:05:37.120456005Z 66 PC: 13649 | Move file pointer
2018-12-17T23:05:37.122590288Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:37.131893682Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:37.134674881Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:37.137320887Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:37.141071519Z 62 PC: 136f6 | Close file
2018-12-17T23:05:37.143752511Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:37.155464673Z 26 PC: 1312c | Set disk transfer address
2018-12-17T23:05:37.157270429Z 78 PC: 1313e | Find first file
2018-12-17T23:05:37.16341872Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:37.170383606Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:37.181530136Z 61 PC: 133d6 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T23:05:37.195661978Z 87 PC: 13302 | Get or set file date and time
2018-12-17T23:05:37.198724968Z 63 PC: 13478 | Read file or device (Read 5590 bytes on handle 5)
2018-12-17T23:05:37.206314959Z 66 PC: 1b58b | Move file pointer
2018-12-17T23:05:37.209102541Z 64 PC: 13422 | Write file or device (Write 5590 bytes on handle 5)
2018-12-17T23:05:37.219179159Z 66 PC: 1b58b | Move file pointer
2018-12-17T23:05:37.222436494Z 64 PC: 13422 | Write file or device (Write 5590 bytes on handle 5)
2018-12-17T23:05:37.233343162Z 87 PC: 13364 | Get or set file date and time
2018-12-17T23:05:37.235709211Z 62 PC: 134be | Close file
2018-12-17T23:05:37.245012734Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:37.257391551Z 47 PC: 1b332 | Get disk transfer address
2018-12-17T23:05:37.259280132Z 26 PC: 1b33d | Set disk transfer address
2018-12-17T23:05:37.261148866Z 79 PC: 1b341 | Find next file
2018-12-17T23:05:37.265575179Z 26 PC: 1b351 | Set disk transfer address
2018-12-17T23:05:37.268700566Z 98 PC: 1b5cd | Get current PSP
2018-12-17T23:05:37.271461317Z 47 PC: 1b2f5 | Get disk transfer address
2018-12-17T23:05:37.274192091Z 26 PC: 1b300 | Set disk transfer address
2018-12-17T23:05:37.276244872Z 78 PC: 1b30c | Find first file
2018-12-17T23:05:37.286637864Z 26 PC: 1b31e | Set disk transfer address
2018-12-17T23:05:37.290093372Z 48 PC: 1b3fa | Get DOS version
2018-12-17T23:05:37.292238976Z 61 PC: 1b419 | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T23:05:37.300841452Z 62 PC: 1b2af | Close file
2018-12-17T23:05:37.304389924Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:37.311773468Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:37.681808471Z 61 PC: 13619 | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T23:05:37.690871362Z 66 PC: 13649 | Move file pointer
2018-12-17T23:05:37.693437176Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:37.701035905Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:37.705270287Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:37.709070092Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:37.712995883Z 62 PC: 136f6 | Close file
2018-12-17T23:05:37.716667277Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:37.72788485Z 26 PC: 1312c | Set disk transfer address
2018-12-17T23:05:37.729757031Z 78 PC: 1313e | Find first file
2018-12-17T23:05:37.737380966Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:37.745384615Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:37.756678722Z 61 PC: 133d6 | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T23:05:37.764941409Z 87 PC: 13302 | Get or set file date and time
2018-12-17T23:05:37.769139223Z 63 PC: 13478 | Read file or device (Read 5590 bytes on handle 5)
2018-12-17T23:05:37.777559155Z 66 PC: 1b58b | Move file pointer
2018-12-17T23:05:37.780246478Z 64 PC: 13422 | Write file or device (Write 5590 bytes on handle 5)
2018-12-17T23:05:37.790000619Z 66 PC: 1b58b | Move file pointer
2018-12-17T23:05:37.79370813Z 64 PC: 13422 | Write file or device (Write 5590 bytes on handle 5)
2018-12-17T23:05:37.806250294Z 87 PC: 13364 | Get or set file date and time
2018-12-17T23:05:37.809347357Z 62 PC: 134be | Close file
2018-12-17T23:05:37.817646613Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:37.828267363Z 47 PC: 1b332 | Get disk transfer address
2018-12-17T23:05:37.830503308Z 26 PC: 1b33d | Set disk transfer address
2018-12-17T23:05:37.831909151Z 79 PC: 1b341 | Find next file
2018-12-17T23:05:37.835453857Z 26 PC: 1b351 | Set disk transfer address
2018-12-17T23:05:37.839468155Z 48 PC: 1b3fa | Get DOS version
2018-12-17T23:05:37.841001428Z 61 PC: 1b419 | Open file (Filename = 'C:\DOS\CHKDSK.EXE')
2018-12-17T23:05:37.848893177Z 62 PC: 1b2af | Close file
2018-12-17T23:05:37.852463971Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:37.859433857Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:37.870273229Z 61 PC: 13619 | Open file (Filename = 'C:\DOS\CHKDSK.EXE')
2018-12-17T23:05:37.87952225Z 66 PC: 13649 | Move file pointer
2018-12-17T23:05:37.881501332Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:37.887899973Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:37.891742298Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:37.894638224Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:37.897586357Z 62 PC: 136f6 | Close file
2018-12-17T23:05:37.900918192Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:37.912416373Z 26 PC: 1312c | Set disk transfer address
2018-12-17T23:05:37.913833537Z 78 PC: 1313e | Find first file
2018-12-17T23:05:37.922255614Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:37.929106886Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:37.939793832Z 61 PC: 133d6 | Open file (Filename = 'C:\DOS\CHKDSK.EXE')
2018-12-17T23:05:37.947773947Z 87 PC: 13302 | Get or set file date and time
2018-12-17T23:05:37.950882131Z 63 PC: 13478 | Read file or device (Read 5590 bytes on handle 5)
2018-12-17T23:05:37.958939702Z 66 PC: 1b58b | Move file pointer
2018-12-17T23:05:37.961328083Z 64 PC: 13422 | Write file or device (Write 5590 bytes on handle 5)
2018-12-17T23:05:37.970955897Z 66 PC: 1b58b | Move file pointer
2018-12-17T23:05:37.974363164Z 64 PC: 13422 | Write file or device (Write 5590 bytes on handle 5)
2018-12-17T23:05:37.989247702Z 87 PC: 13364 | Get or set file date and time
2018-12-17T23:05:37.992593183Z 62 PC: 134be | Close file
2018-12-17T23:05:38.000976125Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:38.012145487Z 47 PC: 1b332 | Get disk transfer address
2018-12-17T23:05:38.014483163Z 26 PC: 1b33d | Set disk transfer address
2018-12-17T23:05:38.016074405Z 79 PC: 1b341 | Find next file
2018-12-17T23:05:38.019825368Z 26 PC: 1b351 | Set disk transfer address
2018-12-17T23:05:38.02313436Z 48 PC: 1b3fa | Get DOS version
2018-12-17T23:05:38.024659578Z 61 PC: 1b419 | Open file (Filename = 'C:\DOS\DEBUG.EXE')
2018-12-17T23:05:38.033035207Z 62 PC: 1b2af | Close file
2018-12-17T23:05:38.036717331Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:38.044001598Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:38.055730222Z 61 PC: 13619 | Open file (Filename = 'C:\DOS\DEBUG.EXE')
2018-12-17T23:05:38.064540037Z 66 PC: 13649 | Move file pointer
2018-12-17T23:05:38.066377743Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:38.07310911Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:38.077415337Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:38.08110767Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:38.084352862Z 62 PC: 136f6 | Close file
2018-12-17T23:05:38.088389592Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:38.099944169Z 26 PC: 1312c | Set disk transfer address
2018-12-17T23:05:38.101825727Z 78 PC: 1313e | Find first file
2018-12-17T23:05:38.110197809Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:38.120152698Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:38.132498832Z 61 PC: 133d6 | Open file (Filename = 'C:\DOS\DEBUG.EXE')
2018-12-17T23:05:38.141519585Z 87 PC: 13302 | Get or set file date and time
2018-12-17T23:05:38.143548309Z 63 PC: 13478 | Read file or device (Read 5590 bytes on handle 5)
2018-12-17T23:05:38.152050797Z 66 PC: 1b58b | Move file pointer
2018-12-17T23:05:38.155263137Z 64 PC: 13422 | Write file or device (Write 5590 bytes on handle 5)
2018-12-17T23:05:38.163783668Z 66 PC: 1b58b | Move file pointer
2018-12-17T23:05:38.168094775Z 64 PC: 13422 | Write file or device (Write 5590 bytes on handle 5)
2018-12-17T23:05:38.179251884Z 87 PC: 13364 | Get or set file date and time
2018-12-17T23:05:38.181299764Z 62 PC: 134be | Close file
2018-12-17T23:05:38.190039678Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:38.201482755Z 47 PC: 1b332 | Get disk transfer address
2018-12-17T23:05:38.203595308Z 26 PC: 1b33d | Set disk transfer address
2018-12-17T23:05:38.205231354Z 79 PC: 1b341 | Find next file
2018-12-17T23:05:38.213606923Z 26 PC: 1b351 | Set disk transfer address
2018-12-17T23:05:38.216348358Z 48 PC: 1b3fa | Get DOS version
2018-12-17T23:05:38.21839726Z 61 PC: 1b419 | Open file (Filename = 'C:\DOS\EXPAND.EXE')
2018-12-17T23:05:38.22830502Z 62 PC: 1b2af | Close file
2018-12-17T23:05:38.23100104Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:38.237979131Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:38.250280732Z 61 PC: 13619 | Open file (Filename = 'C:\DOS\EXPAND.EXE')
2018-12-17T23:05:38.273000793Z 66 PC: 13649 | Move file pointer
2018-12-17T23:05:38.274669451Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:38.282143735Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:38.285279121Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:38.288244106Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:38.292246732Z 62 PC: 136f6 | Close file
2018-12-17T23:05:38.294358503Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:38.305075475Z 26 PC: 1312c | Set disk transfer address
2018-12-17T23:05:38.307448056Z 78 PC: 1313e | Find first file
2018-12-17T23:05:38.315341839Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:38.322143689Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:38.333360741Z 61 PC: 133d6 | Open file (Filename = 'C:\DOS\EXPAND.EXE')
2018-12-17T23:05:38.340025974Z 87 PC: 13302 | Get or set file date and time
2018-12-17T23:05:38.341681897Z 63 PC: 13478 | Read file or device (Read 5590 bytes on handle 5)
2018-12-17T23:05:38.348172872Z 66 PC: 1b58b | Move file pointer
2018-12-17T23:05:38.35013424Z 64 PC: 13422 | Write file or device (Write 5590 bytes on handle 5)
2018-12-17T23:05:38.356530988Z 66 PC: 1b58b | Move file pointer
2018-12-17T23:05:38.359306447Z 64 PC: 13422 | Write file or device (Write 5590 bytes on handle 5)
2018-12-17T23:05:38.366584683Z 87 PC: 13364 | Get or set file date and time
2018-12-17T23:05:38.36864668Z 62 PC: 134be | Close file
2018-12-17T23:05:38.376641593Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:38.389199776Z 47 PC: 1b332 | Get disk transfer address
2018-12-17T23:05:38.390930421Z 26 PC: 1b33d | Set disk transfer address
2018-12-17T23:05:38.391957943Z 79 PC: 1b341 | Find next file
2018-12-17T23:05:38.39503034Z 26 PC: 1b351 | Set disk transfer address
2018-12-17T23:05:38.397163732Z 48 PC: 1b3fa | Get DOS version
2018-12-17T23:05:38.398281053Z 61 PC: 1b419 | Open file (Filename = 'C:\DOS\FDISK.EXE')
2018-12-17T23:05:38.404495759Z 62 PC: 1b2af | Close file
2018-12-17T23:05:38.407085027Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:38.411878801Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:38.421953074Z 61 PC: 13619 | Open file (Filename = 'C:\DOS\FDISK.EXE')
2018-12-17T23:05:38.430711222Z 66 PC: 13649 | Move file pointer
2018-12-17T23:05:38.432482934Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:38.438746191Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:38.442365837Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:38.445126528Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:38.448611541Z 62 PC: 136f6 | Close file
2018-12-17T23:05:38.451378795Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:38.463310991Z 26 PC: 1312c | Set disk transfer address
2018-12-17T23:05:38.464652413Z 78 PC: 1313e | Find first file
2018-12-17T23:05:38.47313331Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:38.480082356Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:38.490912421Z 61 PC: 133d6 | Open file (Filename = 'C:\DOS\FDISK.EXE')
2018-12-17T23:05:38.49977754Z 87 PC: 13302 | Get or set file date and time
2018-12-17T23:05:38.50174008Z 63 PC: 13478 | Read file or device (Read 5590 bytes on handle 5)
2018-12-17T23:05:38.510006644Z 66 PC: 1b58b | Move file pointer
2018-12-17T23:05:38.514246687Z 64 PC: 13422 | Write file or device (Write 5590 bytes on handle 5)
2018-12-17T23:05:38.522952046Z 66 PC: 1b58b | Move file pointer
2018-12-17T23:05:38.526328385Z 64 PC: 13422 | Write file or device (Write 5590 bytes on handle 5)
2018-12-17T23:05:38.537136087Z 87 PC: 13364 | Get or set file date and time
2018-12-17T23:05:38.539620959Z 62 PC: 134be | Close file
2018-12-17T23:05:38.54785925Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:38.559937421Z 47 PC: 1b332 | Get disk transfer address
2018-12-17T23:05:38.561446058Z 26 PC: 1b33d | Set disk transfer address
2018-12-17T23:05:38.562923366Z 79 PC: 1b341 | Find next file
2018-12-17T23:05:38.568098717Z 26 PC: 1b351 | Set disk transfer address
2018-12-17T23:05:38.570194468Z 47 PC: 1b2f5 | Get disk transfer address
2018-12-17T23:05:38.571687195Z 26 PC: 1b300 | Set disk transfer address
2018-12-17T23:05:38.574176435Z 78 PC: 1b30c | Find first file
2018-12-17T23:05:38.582098722Z 26 PC: 1b31e | Set disk transfer address
2018-12-17T23:05:38.584255407Z 48 PC: 1b3fa | Get DOS version
2018-12-17T23:05:38.586227786Z 61 PC: 1b419 | Open file (Filename = 'C:\DOS\EDIT.COM')
2018-12-17T23:05:38.59409558Z 62 PC: 1b2af | Close file
2018-12-17T23:05:38.596481266Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:38.603101384Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:38.613309789Z 61 PC: 13619 | Open file (Filename = 'C:\DOS\EDIT.COM')
2018-12-17T23:05:38.618990471Z 66 PC: 13649 | Move file pointer
2018-12-17T23:05:38.620534895Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:38.62503124Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:38.627189528Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:38.629824723Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:38.6319983Z 62 PC: 136f6 | Close file
2018-12-17T23:05:38.633809065Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:38.643520516Z 26 PC: 1312c | Set disk transfer address
2018-12-17T23:05:38.64511281Z 78 PC: 1313e | Find first file
2018-12-17T23:05:38.650691179Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:38.655820694Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:38.666174011Z 61 PC: 133d6 | Open file (Filename = 'C:\DOS\EDIT.COM')
2018-12-17T23:05:38.674891935Z 87 PC: 13302 | Get or set file date and time
2018-12-17T23:05:38.677425017Z 63 PC: 13478 | Read file or device (Read 5590 bytes on handle 5)
2018-12-17T23:05:38.680092403Z 66 PC: 1b58b | Move file pointer
2018-12-17T23:05:38.682828758Z 64 PC: 13422 | Write file or device (Write 5590 bytes on handle 5)
2018-12-17T23:05:38.691104079Z 66 PC: 1b58b | Move file pointer
2018-12-17T23:05:38.693586516Z 64 PC: 13422 | Write file or device (Write 5590 bytes on handle 5)
2018-12-17T23:05:38.705067214Z 87 PC: 13364 | Get or set file date and time
2018-12-17T23:05:38.707893699Z 62 PC: 134be | Close file
2018-12-17T23:05:38.716149984Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:38.7263164Z 47 PC: 1b332 | Get disk transfer address
2018-12-17T23:05:38.727953067Z 26 PC: 1b33d | Set disk transfer address
2018-12-17T23:05:38.730768381Z 79 PC: 1b341 | Find next file
2018-12-17T23:05:38.735180387Z 26 PC: 1b351 | Set disk transfer address
2018-12-17T23:05:38.737466646Z 48 PC: 1b3fa | Get DOS version
2018-12-17T23:05:38.74020245Z 61 PC: 1b419 | Open file (Filename = 'C:\DOS\FORMAT.COM')
2018-12-17T23:05:38.748359418Z 62 PC: 1b2af | Close file
2018-12-17T23:05:38.750648783Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:38.757731631Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:38.768613593Z 61 PC: 13619 | Open file (Filename = 'C:\DOS\FORMAT.COM')
2018-12-17T23:05:38.776086885Z 66 PC: 13649 | Move file pointer
2018-12-17T23:05:38.778981588Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:38.786254323Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:38.790116415Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:38.794454452Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:38.797746973Z 62 PC: 136f6 | Close file
2018-12-17T23:05:38.800073428Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:38.810965899Z 26 PC: 1312c | Set disk transfer address
2018-12-17T23:05:38.812081567Z 78 PC: 1313e | Find first file
2018-12-17T23:05:38.817566561Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:38.825891074Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:38.835091193Z 61 PC: 133d6 | Open file (Filename = 'C:\DOS\FORMAT.COM')
2018-12-17T23:05:38.84258311Z 87 PC: 13302 | Get or set file date and time
2018-12-17T23:05:38.84468871Z 63 PC: 13478 | Read file or device (Read 5590 bytes on handle 5)
2018-12-17T23:05:38.852393848Z 66 PC: 1b58b | Move file pointer
2018-12-17T23:05:38.855029714Z 64 PC: 13422 | Write file or device (Write 5590 bytes on handle 5)
2018-12-17T23:05:38.86461597Z 66 PC: 1b58b | Move file pointer
2018-12-17T23:05:38.867570185Z 64 PC: 13422 | Write file or device (Write 5590 bytes on handle 5)
2018-12-17T23:05:38.87984228Z 87 PC: 13364 | Get or set file date and time
2018-12-17T23:05:38.881681579Z 62 PC: 134be | Close file
2018-12-17T23:05:38.888709183Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:38.898999422Z 47 PC: 1b332 | Get disk transfer address
2018-12-17T23:05:38.90007235Z 26 PC: 1b33d | Set disk transfer address
2018-12-17T23:05:38.901228985Z 79 PC: 1b341 | Find next file
2018-12-17T23:05:38.903929122Z 26 PC: 1b351 | Set disk transfer address
2018-12-17T23:05:38.905856275Z 48 PC: 1b3fa | Get DOS version
2018-12-17T23:05:38.907771416Z 61 PC: 1b419 | Open file (Filename = 'C:\DOS\KEYB.COM')
2018-12-17T23:05:38.916590299Z 62 PC: 1b2af | Close file
2018-12-17T23:05:38.918943243Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:38.926161616Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:38.936543738Z 61 PC: 13619 | Open file (Filename = 'C:\DOS\KEYB.COM')
2018-12-17T23:05:38.944864955Z 66 PC: 13649 | Move file pointer
2018-12-17T23:05:38.947226064Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:38.953129234Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:38.956064063Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:38.958953486Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:38.961509362Z 62 PC: 136f6 | Close file
2018-12-17T23:05:38.963864701Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:38.974241783Z 26 PC: 1312c | Set disk transfer address
2018-12-17T23:05:38.975256301Z 78 PC: 1313e | Find first file
2018-12-17T23:05:38.983622432Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:38.989961041Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:39.00022999Z 61 PC: 133d6 | Open file (Filename = 'C:\DOS\KEYB.COM')
2018-12-17T23:05:39.008282752Z 87 PC: 13302 | Get or set file date and time
2018-12-17T23:05:39.010126378Z 63 PC: 13478 | Read file or device (Read 5590 bytes on handle 5)
2018-12-17T23:05:39.018077078Z 66 PC: 1b58b | Move file pointer
2018-12-17T23:05:39.020071077Z 64 PC: 13422 | Write file or device (Write 5590 bytes on handle 5)
2018-12-17T23:05:39.028150059Z 66 PC: 1b58b | Move file pointer
2018-12-17T23:05:39.03153823Z 64 PC: 13422 | Write file or device (Write 5590 bytes on handle 5)
2018-12-17T23:05:39.041007425Z 87 PC: 13364 | Get or set file date and time
2018-12-17T23:05:39.043458834Z 62 PC: 134be | Close file
2018-12-17T23:05:39.051914293Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:39.062326031Z 47 PC: 1b332 | Get disk transfer address
2018-12-17T23:05:39.063396273Z 26 PC: 1b33d | Set disk transfer address
2018-12-17T23:05:39.066130394Z 79 PC: 1b341 | Find next file
2018-12-17T23:05:39.072640054Z 26 PC: 1b351 | Set disk transfer address
2018-12-17T23:05:39.074410974Z 48 PC: 1b3fa | Get DOS version
2018-12-17T23:05:39.075655044Z 61 PC: 1b419 | Open file (Filename = 'C:\DOS\SYS.COM')
2018-12-17T23:05:39.08146579Z 62 PC: 1b2af | Close file
2018-12-17T23:05:39.084115082Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:39.090388648Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:39.100850439Z 61 PC: 13619 | Open file (Filename = 'C:\DOS\SYS.COM')
2018-12-17T23:05:39.110198407Z 66 PC: 13649 | Move file pointer
2018-12-17T23:05:39.111997009Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:39.118325278Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:39.122053528Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:39.124917183Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:39.127717358Z 62 PC: 136f6 | Close file
2018-12-17T23:05:39.130401756Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:39.140966321Z 26 PC: 1312c | Set disk transfer address
2018-12-17T23:05:39.142652722Z 78 PC: 1313e | Find first file
2018-12-17T23:05:39.14989532Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:39.156705706Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:39.168043444Z 61 PC: 133d6 | Open file (Filename = 'C:\DOS\SYS.COM')
2018-12-17T23:05:39.176599032Z 87 PC: 13302 | Get or set file date and time
2018-12-17T23:05:39.178240077Z 63 PC: 13478 | Read file or device (Read 5590 bytes on handle 5)
2018-12-17T23:05:39.185988568Z 66 PC: 1b58b | Move file pointer
2018-12-17T23:05:39.187546236Z 64 PC: 13422 | Write file or device (Write 5590 bytes on handle 5)
2018-12-17T23:05:39.193769799Z 66 PC: 1b58b | Move file pointer
2018-12-17T23:05:39.197371371Z 64 PC: 13422 | Write file or device (Write 5590 bytes on handle 5)
2018-12-17T23:05:39.206613559Z 87 PC: 13364 | Get or set file date and time
2018-12-17T23:05:39.208126434Z 62 PC: 134be | Close file
2018-12-17T23:05:39.214840979Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:39.225244922Z 47 PC: 1b332 | Get disk transfer address
2018-12-17T23:05:39.227675843Z 26 PC: 1b33d | Set disk transfer address
2018-12-17T23:05:39.229007868Z 79 PC: 1b341 | Find next file
2018-12-17T23:05:39.23544917Z 26 PC: 1b351 | Set disk transfer address
2018-12-17T23:05:39.237345516Z 98 PC: 1b5cd | Get current PSP
2018-12-17T23:05:39.239275555Z 26 PC: 12dc6 | Set disk transfer address
2018-12-17T23:05:39.240756379Z 78 PC: 12dd8 | Find first file
2018-12-17T23:05:39.252281109Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:39.258644665Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:39.269252551Z 61 PC: 133d6 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:05:39.2778357Z 87 PC: 13302 | Get or set file date and time
2018-12-17T23:05:39.279949304Z 66 PC: 1b58b | Move file pointer
2018-12-17T23:05:39.282268074Z 63 PC: 13478 | Read file or device (Read 5590 bytes on handle 5)
2018-12-17T23:05:39.292557693Z 66 PC: 1b58b | Move file pointer
2018-12-17T23:05:39.295895419Z 64 PC: 13422 | Write file or device (Write 5590 bytes on handle 5)
2018-12-17T23:05:39.30543135Z 87 PC: 13364 | Get or set file date and time
2018-12-17T23:05:39.309445838Z 62 PC: 134be | Close file
2018-12-17T23:05:39.318148121Z 61 PC: 1374c | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:05:39.325516967Z 66 PC: 1377f | Move file pointer
2018-12-17T23:05:39.328154206Z 64 PC: 137b8 | Write file or device (Write 0 bytes on handle 5)
2018-12-17T23:05:39.335972797Z 62 PC: 137db | Close file
2018-12-17T23:05:39.344007125Z 61 PC: 133d6 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:05:39.352440562Z 87 PC: 13364 | Get or set file date and time
2018-12-17T23:05:39.354291623Z 62 PC: 134be | Close file
2018-12-17T23:05:39.363531016Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:44.577751622Z 75 PC: 12f95 | Execute program
2018-12-17T23:05:44.829927248Z 76 PC: 22301 | Terminate with return code (Return code = '0')
2018-12-17T23:05:44.834362938Z 77 PC: 12fab | Get program return code
2018-12-17T23:05:44.837125232Z 26 PC: 1312c | Set disk transfer address
2018-12-17T23:05:44.838326331Z 78 PC: 1313e | Find first file
2018-12-17T23:05:44.846721275Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:44.855906877Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:45.316749969Z 61 PC: 133d6 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:05:45.325376099Z 87 PC: 13302 | Get or set file date and time
2018-12-17T23:05:45.327122703Z 63 PC: 13478 | Read file or device (Read 5590 bytes on handle 5)
2018-12-17T23:05:45.337653063Z 66 PC: 1b58b | Move file pointer
2018-12-17T23:05:45.340099013Z 64 PC: 13422 | Write file or device (Write 5590 bytes on handle 5)
2018-12-17T23:05:45.385661634Z 66 PC: 1b58b | Move file pointer
2018-12-17T23:05:45.39324354Z 64 PC: 13422 | Write file or device (Write 5590 bytes on handle 5)
2018-12-17T23:05:45.409218547Z 87 PC: 13364 | Get or set file date and time
2018-12-17T23:05:45.411547697Z 62 PC: 134be | Close file
2018-12-17T23:05:45.42240433Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:45.434441434Z 47 PC: 1b2f5 | Get disk transfer address
2018-12-17T23:05:45.43612021Z 26 PC: 1b300 | Set disk transfer address
2018-12-17T23:05:45.438986841Z 78 PC: 1b30c | Find first file
2018-12-17T23:05:45.445952258Z 26 PC: 1b31e | Set disk transfer address
2018-12-17T23:05:45.448764516Z 48 PC: 1b3fa | Get DOS version
2018-12-17T23:05:45.45171879Z 61 PC: 1b419 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:05:45.459767224Z 62 PC: 1b2af | Close file
2018-12-17T23:05:45.46263152Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:45.475868509Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:45.486764757Z 61 PC: 13619 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:05:45.494417376Z 66 PC: 13649 | Move file pointer
2018-12-17T23:05:45.49687098Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:45.511121265Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:45.515916301Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:45.51922382Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:45.523492426Z 62 PC: 136f6 | Close file
2018-12-17T23:05:45.528120608Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:45.542739506Z 47 PC: 1b332 | Get disk transfer address
2018-12-17T23:05:45.544253262Z 26 PC: 1b33d | Set disk transfer address
2018-12-17T23:05:45.546979268Z 79 PC: 1b341 | Find next file
2018-12-17T23:05:45.549943853Z 26 PC: 1b351 | Set disk transfer address
2018-12-17T23:05:45.552807006Z 47 PC: 1b2f5 | Get disk transfer address
2018-12-17T23:05:45.55795756Z 26 PC: 1b300 | Set disk transfer address
2018-12-17T23:05:45.560099147Z 78 PC: 1b30c | Find first file
2018-12-17T23:05:45.569979215Z 26 PC: 1b31e | Set disk transfer address
2018-12-17T23:05:45.574364761Z 48 PC: 1b3fa | Get DOS version
2018-12-17T23:05:45.57716156Z 61 PC: 1b419 | Open file (Filename = 'SLEEP.COM')
2018-12-17T23:05:45.590434247Z 62 PC: 1b2af | Close file
2018-12-17T23:05:45.594540728Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:45.601490816Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:45.614648947Z 61 PC: 13619 | Open file (Filename = 'SLEEP.COM')
2018-12-17T23:05:45.622536198Z 66 PC: 13649 | Move file pointer
2018-12-17T23:05:45.624713261Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:45.63457817Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:45.641481571Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:45.646303828Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:45.652379442Z 62 PC: 136f6 | Close file
2018-12-17T23:05:45.655307377Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:45.673114891Z 47 PC: 1b332 | Get disk transfer address
2018-12-17T23:05:45.675309487Z 26 PC: 1b33d | Set disk transfer address
2018-12-17T23:05:45.676913954Z 79 PC: 1b341 | Find next file
2018-12-17T23:05:45.682793769Z 26 PC: 1b351 | Set disk transfer address
2018-12-17T23:05:45.684932842Z 48 PC: 1b3fa | Get DOS version
2018-12-17T23:05:45.686801445Z 61 PC: 1b419 | Open file (Filename = 'PRINT.COM')
2018-12-17T23:05:45.696820684Z 62 PC: 1b2af | Close file
2018-12-17T23:05:45.700605401Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:45.708466231Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:45.720252573Z 61 PC: 13619 | Open file (Filename = 'PRINT.COM')
2018-12-17T23:05:45.727683446Z 66 PC: 13649 | Move file pointer
2018-12-17T23:05:45.730521091Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:45.738659544Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:45.742071148Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:45.74643818Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:45.750382116Z 62 PC: 136f6 | Close file
2018-12-17T23:05:45.753854645Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:45.775336307Z 26 PC: 1312c | Set disk transfer address
2018-12-17T23:05:45.777395359Z 78 PC: 1313e | Find first file
2018-12-17T23:05:45.788470373Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:45.795482358Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:45.806367464Z 61 PC: 133d6 | Open file (Filename = 'PRINT.COM')
2018-12-17T23:05:45.8162091Z 87 PC: 13302 | Get or set file date and time
2018-12-17T23:05:45.818253474Z 63 PC: 13478 | Read file or device (Read 5590 bytes on handle 5)
2018-12-17T23:05:45.827416162Z 66 PC: 1b58b | Move file pointer
2018-12-17T23:05:45.830774617Z 64 PC: 13422 | Write file or device (Write 5590 bytes on handle 5)
2018-12-17T23:05:45.840179862Z 66 PC: 1b58b | Move file pointer
2018-12-17T23:05:45.844461743Z 64 PC: 13422 | Write file or device (Write 5590 bytes on handle 5)
2018-12-17T23:05:45.85543712Z 87 PC: 13364 | Get or set file date and time
2018-12-17T23:05:45.857524666Z 62 PC: 134be | Close file
2018-12-17T23:05:45.870736959Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:45.884868109Z 47 PC: 1b332 | Get disk transfer address
2018-12-17T23:05:45.886721865Z 26 PC: 1b33d | Set disk transfer address
2018-12-17T23:05:45.889152425Z 79 PC: 1b341 | Find next file
2018-12-17T23:05:45.892433965Z 26 PC: 1b351 | Set disk transfer address
2018-12-17T23:05:45.895366629Z 48 PC: 1b3fa | Get DOS version
2018-12-17T23:05:45.897465055Z 61 PC: 1b419 | Open file (Filename = 'HELLO.COM')
2018-12-17T23:05:45.905266815Z 62 PC: 1b2af | Close file
2018-12-17T23:05:45.908706773Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:45.915240218Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:45.926369955Z 61 PC: 13619 | Open file (Filename = 'HELLO.COM')
2018-12-17T23:05:45.934180541Z 66 PC: 13649 | Move file pointer
2018-12-17T23:05:45.936593258Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:45.944778358Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:45.948590756Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:45.951675246Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:45.955536837Z 62 PC: 136f6 | Close file
2018-12-17T23:05:45.957602742Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:45.96992966Z 47 PC: 1b332 | Get disk transfer address
2018-12-17T23:05:45.97175394Z 26 PC: 1b33d | Set disk transfer address
2018-12-17T23:05:45.973248571Z 79 PC: 1b341 | Find next file
2018-12-17T23:05:45.977595905Z 26 PC: 1b351 | Set disk transfer address
2018-12-17T23:05:45.980458548Z 48 PC: 1b3fa | Get DOS version
2018-12-17T23:05:45.982123007Z 61 PC: 1b419 | Open file (Filename = 'PHANG.COM')
2018-12-17T23:05:45.991370665Z 62 PC: 1b2af | Close file
2018-12-17T23:05:45.994118693Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:46.00088783Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:46.02626109Z 61 PC: 13619 | Open file (Filename = 'PHANG.COM')
2018-12-17T23:05:46.046369549Z 66 PC: 13649 | Move file pointer
2018-12-17T23:05:46.049054738Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:46.056490961Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:46.059548981Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:46.064019386Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:46.06692542Z 62 PC: 136f6 | Close file
2018-12-17T23:05:46.070141708Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:46.082830527Z 26 PC: 1312c | Set disk transfer address
2018-12-17T23:05:46.084493293Z 78 PC: 1313e | Find first file
2018-12-17T23:05:46.092901573Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:46.100596422Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:46.112379587Z 61 PC: 133d6 | Open file (Filename = 'PHANG.COM')
2018-12-17T23:05:46.122003914Z 87 PC: 13302 | Get or set file date and time
2018-12-17T23:05:46.124209551Z 63 PC: 13478 | Read file or device (Read 5590 bytes on handle 5)
2018-12-17T23:05:46.133889572Z 66 PC: 1b58b | Move file pointer
2018-12-17T23:05:46.137586644Z 64 PC: 13422 | Write file or device (Write 5590 bytes on handle 5)
2018-12-17T23:05:46.147803926Z 66 PC: 1b58b | Move file pointer
2018-12-17T23:05:46.151512889Z 64 PC: 13422 | Write file or device (Write 5590 bytes on handle 5)
2018-12-17T23:05:46.16117141Z 87 PC: 13364 | Get or set file date and time
2018-12-17T23:05:46.163689455Z 62 PC: 134be | Close file
2018-12-17T23:05:46.173522153Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:46.185399496Z 47 PC: 1b332 | Get disk transfer address
2018-12-17T23:05:46.187766657Z 26 PC: 1b33d | Set disk transfer address
2018-12-17T23:05:46.189643166Z 79 PC: 1b341 | Find next file
2018-12-17T23:05:46.192742463Z 26 PC: 1b351 | Set disk transfer address
2018-12-17T23:05:46.19612327Z 48 PC: 1b3fa | Get DOS version
2018-12-17T23:05:46.19752207Z 61 PC: 1b419 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T23:05:46.205373613Z 62 PC: 1b2af | Close file
2018-12-17T23:05:46.208421884Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:46.216012457Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:46.230213219Z 61 PC: 13619 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T23:05:46.238436391Z 66 PC: 13649 | Move file pointer
2018-12-17T23:05:46.240707531Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:46.250355151Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:46.253996478Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:46.258120773Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:46.261991741Z 62 PC: 136f6 | Close file
2018-12-17T23:05:46.264087622Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:46.292770745Z 26 PC: 1312c | Set disk transfer address
2018-12-17T23:05:46.294069637Z 78 PC: 1313e | Find first file
2018-12-17T23:05:46.305497465Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:46.316878955Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:46.342059903Z 61 PC: 133d6 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T23:05:46.358232943Z 87 PC: 13302 | Get or set file date and time
2018-12-17T23:05:46.360536624Z 63 PC: 13478 | Read file or device (Read 5590 bytes on handle 5)
2018-12-17T23:05:46.376658158Z 66 PC: 1b58b | Move file pointer
2018-12-17T23:05:46.380640135Z 64 PC: 13422 | Write file or device (Write 5590 bytes on handle 5)
2018-12-17T23:05:46.397749976Z 66 PC: 1b58b | Move file pointer
2018-12-17T23:05:46.401756049Z 64 PC: 13422 | Write file or device (Write 5590 bytes on handle 5)
2018-12-17T23:05:46.412139903Z 87 PC: 13364 | Get or set file date and time
2018-12-17T23:05:46.414838087Z 62 PC: 134be | Close file
2018-12-17T23:05:46.427757779Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:46.442513264Z 47 PC: 1b332 | Get disk transfer address
2018-12-17T23:05:46.445238088Z 26 PC: 1b33d | Set disk transfer address
2018-12-17T23:05:46.447399502Z 79 PC: 1b341 | Find next file
2018-12-17T23:05:46.45080785Z 26 PC: 1b351 | Set disk transfer address
2018-12-17T23:05:46.454309444Z 48 PC: 1b3fa | Get DOS version
2018-12-17T23:05:46.456382502Z 61 PC: 1b419 | Open file (Filename = 'MANDEL.COM')
2018-12-17T23:05:46.465446245Z 62 PC: 1b2af | Close file
2018-12-17T23:05:46.46884729Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:46.475487034Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:46.488076697Z 61 PC: 13619 | Open file (Filename = 'MANDEL.COM')
2018-12-17T23:05:46.495722653Z 66 PC: 13649 | Move file pointer
2018-12-17T23:05:46.49733258Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:46.505581471Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:46.508472096Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:46.51249496Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:46.515360238Z 62 PC: 136f6 | Close file
2018-12-17T23:05:46.517450578Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:46.531307212Z 26 PC: 1312c | Set disk transfer address
2018-12-17T23:05:46.532750416Z 78 PC: 1313e | Find first file
2018-12-17T23:05:46.539264625Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:46.548872029Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:46.560144194Z 61 PC: 133d6 | Open file (Filename = 'MANDEL.COM')
2018-12-17T23:05:46.570498243Z 87 PC: 13302 | Get or set file date and time
2018-12-17T23:05:46.573311132Z 63 PC: 13478 | Read file or device (Read 5590 bytes on handle 5)
2018-12-17T23:05:46.578402896Z 66 PC: 1b58b | Move file pointer
2018-12-17T23:05:46.582437352Z 64 PC: 13422 | Write file or device (Write 5590 bytes on handle 5)
2018-12-17T23:05:46.595654815Z 66 PC: 1b58b | Move file pointer
2018-12-17T23:05:46.601001368Z 64 PC: 13422 | Write file or device (Write 5590 bytes on handle 5)
2018-12-17T23:05:46.615509928Z 87 PC: 13364 | Get or set file date and time
2018-12-17T23:05:46.618444967Z 62 PC: 134be | Close file
2018-12-17T23:05:46.63499722Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:46.650374063Z 47 PC: 1b332 | Get disk transfer address
2018-12-17T23:05:46.653252676Z 26 PC: 1b33d | Set disk transfer address
2018-12-17T23:05:46.655463583Z 79 PC: 1b341 | Find next file
2018-12-17T23:05:46.658910193Z 26 PC: 1b351 | Set disk transfer address
2018-12-17T23:05:46.6627752Z 48 PC: 1b3fa | Get DOS version
2018-12-17T23:05:46.664648974Z 61 PC: 1b419 | Open file (Filename = 'PAH.COM')
2018-12-17T23:05:46.672744676Z 62 PC: 1b2af | Close file
2018-12-17T23:05:46.676635121Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:46.683323457Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:46.695790198Z 61 PC: 13619 | Open file (Filename = 'PAH.COM')
2018-12-17T23:05:46.703971712Z 66 PC: 13649 | Move file pointer
2018-12-17T23:05:46.706105003Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:46.714955304Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:46.717640362Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:46.721213592Z 63 PC: 1367e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:05:46.724505161Z 62 PC: 136f6 | Close file
2018-12-17T23:05:46.727076946Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:46.739779962Z 26 PC: 1312c | Set disk transfer address
2018-12-17T23:05:46.741481992Z 78 PC: 1313e | Find first file
2018-12-17T23:05:46.746962487Z 67 PC: 13241 | Get or set file attributes
2018-12-17T23:05:46.754243307Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:46.768408061Z 61 PC: 133d6 | Open file (Filename = 'PAH.COM')
2018-12-17T23:05:46.777012149Z 87 PC: 13302 | Get or set file date and time
2018-12-17T23:05:46.779510266Z 63 PC: 13478 | Read file or device (Read 5590 bytes on handle 5)
2018-12-17T23:05:46.787193613Z 66 PC: 1b58b | Move file pointer
2018-12-17T23:05:46.790264096Z 64 PC: 13422 | Write file or device (Write 5590 bytes on handle 5)
2018-12-17T23:05:46.800549706Z 66 PC: 1b58b | Move file pointer
2018-12-17T23:05:46.804968174Z 64 PC: 13422 | Write file or device (Write 5590 bytes on handle 5)
2018-12-17T23:05:46.81494297Z 87 PC: 13364 | Get or set file date and time
2018-12-17T23:05:46.817307846Z 62 PC: 134be | Close file
2018-12-17T23:05:46.826722168Z 67 PC: 13278 | Get or set file attributes
2018-12-17T23:05:46.83840216Z 47 PC: 1b332 | Get disk transfer address
2018-12-17T23:05:46.840920656Z 26 PC: 1b33d | Set disk transfer address
2018-12-17T23:05:46.842856816Z 79 PC: 1b341 | Find next file
2018-12-17T23:05:46.846228055Z 26 PC: 1b351 | Set disk transfer address
2018-12-17T23:05:46.850200304Z 76 PC: 13006 | Terminate with return code (Return code = '0')