Sample viewer

vx.netlux.org/Virus.DOS.HLLP.7248

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:06:22.731695547Z 53 PC: 141ba | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:06:22.733616151Z 53 PC: 141ba | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:06:22.734736668Z 53 PC: 141ba | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:06:22.735799059Z 53 PC: 141ba | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:06:22.737528218Z 53 PC: 141ba | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:06:22.738602004Z 53 PC: 141ba | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:06:22.739664749Z 53 PC: 141ba | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:06:22.741253842Z 53 PC: 141ba | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:06:22.742369418Z 53 PC: 141ba | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:06:22.743419146Z 53 PC: 141ba | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:06:22.744991999Z 53 PC: 141ba | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:06:22.7463141Z 53 PC: 141ba | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:06:22.748112148Z 53 PC: 141ba | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:06:22.749668655Z 53 PC: 141ba | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:06:22.750861991Z 53 PC: 141ba | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:06:22.752001341Z 53 PC: 141ba | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:06:22.754055742Z 53 PC: 141ba | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:06:22.755250535Z 53 PC: 141ba | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:06:22.756302754Z 53 PC: 141ba | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:06:22.757767884Z 37 PC: 141cf | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:06:22.759033037Z 37 PC: 141d7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:06:22.760116349Z 37 PC: 141df | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:06:22.761415009Z 37 PC: 141e7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:06:22.763455756Z 68 PC: 14f17 | I/O control for devices (Set for = '')
2018-12-17T23:06:22.864457908Z 37 PC: 13be1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:06:22.86619109Z 48 PC: 14a42 | Get DOS version
2018-12-17T23:06:22.867387621Z 67 PC: 13881 | Get or set file attributes
2018-12-17T23:06:22.871077212Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:22.883517431Z 61 PC: 14880 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:06:22.889061765Z 63 PC: 14953 | Read file or device (Read 7248 bytes on handle 5)
2018-12-17T23:06:22.894006785Z 62 PC: 148d0 | Close file
2018-12-17T23:06:22.895834699Z 48 PC: 14a42 | Get DOS version
2018-12-17T23:06:22.89697102Z 67 PC: 13881 | Get or set file attributes
2018-12-17T23:06:22.90065067Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:22.907095315Z 61 PC: 14880 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:06:22.911385725Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:22.913178891Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:22.91490755Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:22.91779205Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:22.919139484Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:22.9205145Z 66 PC: 149b2 | Move file pointer
2018-12-17T23:06:22.922319012Z 63 PC: 14953 | Read file or device (Read 7248 bytes on handle 5)
2018-12-17T23:06:22.926909263Z 66 PC: 149b2 | Move file pointer
2018-12-17T23:06:22.927871718Z 64 PC: 14953 | Write file or device (Write 7248 bytes on handle 5)
2018-12-17T23:06:22.934549469Z 62 PC: 148d0 | Close file
2018-12-17T23:06:22.942913859Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:06:22.944149778Z 37 PC: 13b13 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:06:22.946510649Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:06:22.947700315Z 37 PC: 13b13 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:06:22.948876899Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:06:22.951262095Z 37 PC: 13b13 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:06:22.952413632Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:06:22.953928487Z 37 PC: 13b13 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:06:22.956129952Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:06:22.957596642Z 37 PC: 13b13 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:06:22.959117071Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:06:22.961322123Z 37 PC: 13b13 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:06:22.962514066Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:06:22.963686639Z 37 PC: 13b13 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:06:22.966531785Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:06:22.968091475Z 37 PC: 13b13 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:06:22.969587399Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:06:22.971580216Z 37 PC: 13b13 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:06:22.972764657Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:06:22.973983455Z 37 PC: 13b13 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:06:22.976268739Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:06:22.977588202Z 37 PC: 13b13 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:06:22.978664008Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:06:22.980770188Z 37 PC: 13b13 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:06:22.981846266Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:06:22.983017944Z 37 PC: 13b13 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:06:22.985905777Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:06:22.987355088Z 37 PC: 13b13 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:06:22.988693396Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:06:22.990608024Z 37 PC: 13b13 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:06:22.991755611Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:06:22.99319333Z 37 PC: 13b13 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:06:22.995335363Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:06:22.996764485Z 37 PC: 13b13 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:06:22.998098307Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:06:22.99992052Z 37 PC: 13b13 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:06:23.001353529Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:06:23.002774387Z 37 PC: 13b13 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:06:23.004751067Z 48 PC: 14a42 | Get DOS version
2018-12-17T23:06:23.006420156Z 41 PC: 13ac1 | Parse filename
2018-12-17T23:06:23.008072097Z 41 PC: 13acf | Parse filename
2018-12-17T23:06:23.010671361Z 75 PC: 13ada | Execute program
2018-12-17T23:06:23.018520542Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:06:23.019728612Z 37 PC: 13b13 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:06:23.021526626Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:06:23.022801878Z 37 PC: 13b13 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:06:23.023991791Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:06:23.026613312Z 37 PC: 13b13 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:06:23.028056786Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:06:23.029553427Z 37 PC: 13b13 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:06:23.032465449Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:06:23.034121074Z 37 PC: 13b13 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:06:23.035640271Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:06:23.039919817Z 37 PC: 13b13 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:06:23.041214031Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:06:23.042444071Z 37 PC: 13b13 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:06:23.044450536Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:06:23.045652729Z 37 PC: 13b13 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:06:23.047384579Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:06:23.050569434Z 37 PC: 13b13 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:06:23.051890277Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:06:23.053276073Z 37 PC: 13b13 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:06:23.055772554Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:06:23.057688024Z 37 PC: 13b13 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:06:23.058733415Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:06:23.060768312Z 37 PC: 13b13 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:06:23.062235555Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:06:23.063659066Z 37 PC: 13b13 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:06:23.065669656Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:06:23.067123758Z 37 PC: 13b13 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:06:23.068521726Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:06:23.070977755Z 37 PC: 13b13 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:06:23.072361838Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:06:23.073800522Z 37 PC: 13b13 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:06:23.076073879Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:06:23.077509335Z 37 PC: 13b13 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:06:23.07890538Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:06:23.081312684Z 37 PC: 13b13 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:06:23.082498157Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:06:23.083957426Z 37 PC: 13b13 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:06:23.086339768Z 48 PC: 14a42 | Get DOS version
2018-12-17T23:06:23.08808012Z 61 PC: 14880 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:06:23.094658732Z 64 PC: 14953 | Write file or device (Write 7248 bytes on handle 5)
2018-12-17T23:06:23.103763099Z 62 PC: 148d0 | Close file
2018-12-17T23:06:23.111283108Z 61 PC: 14880 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:06:23.117638228Z 87 PC: 138ef | Get or set file date and time
2018-12-17T23:06:23.119544743Z 62 PC: 148d0 | Close file
2018-12-17T23:06:23.126520717Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:23.137034384Z 26 PC: 1391f | Set disk transfer address
2018-12-17T23:06:23.138543552Z 78 PC: 1392b | Find first file
2018-12-17T23:06:23.142951498Z 26 PC: 1391f | Set disk transfer address
2018-12-17T23:06:23.143816224Z 78 PC: 1392b | Find first file
2018-12-17T23:06:23.148192458Z 26 PC: 1391f | Set disk transfer address
2018-12-17T23:06:23.149103063Z 78 PC: 1392b | Find first file
2018-12-17T23:06:23.153182435Z 25 PC: 14acf | Get default drive
2018-12-17T23:06:23.154755313Z 71 PC: 14ae2 | Get current directory
2018-12-17T23:06:23.156948911Z 26 PC: 1391f | Set disk transfer address
2018-12-17T23:06:23.157989883Z 78 PC: 1392b | Find first file
2018-12-17T23:06:23.166320019Z 67 PC: 13881 | Get or set file attributes
2018-12-17T23:06:23.177298376Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:23.195220302Z 61 PC: 14880 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:06:23.2054911Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:23.207505724Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:23.209503949Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:23.212617311Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:23.214719048Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:23.218045867Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:23.220343434Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:23.22224751Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:23.224290555Z 63 PC: 14953 | Read file or device (Read 7248 bytes on handle 5)
2018-12-17T23:06:23.229980822Z 62 PC: 148d0 | Close file
2018-12-17T23:06:23.231323102Z 61 PC: 14880 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:06:23.236772113Z 87 PC: 138ef | Get or set file date and time
2018-12-17T23:06:23.238508994Z 62 PC: 148d0 | Close file
2018-12-17T23:06:23.24336379Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:23.250428153Z 26 PC: 13943 | Set disk transfer address
2018-12-17T23:06:23.251362545Z 79 PC: 13948 | Find next file
2018-12-17T23:06:23.253519011Z 14 PC: 14b28 | Set default drive (Drive = 'C')
2018-12-17T23:06:23.255367374Z 25 PC: 14b2c | Get default drive
2018-12-17T23:06:23.256403832Z 59 PC: 14b96 | Change current directory
2018-12-17T23:06:23.262176002Z 26 PC: 1391f | Set disk transfer address
2018-12-17T23:06:23.263781944Z 78 PC: 1392b | Find first file
2018-12-17T23:06:23.273236691Z 67 PC: 13881 | Get or set file attributes
2018-12-17T23:06:23.277054491Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:23.616582433Z 61 PC: 14880 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T23:06:23.62404507Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:23.625704854Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:23.628147873Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:23.630194986Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:23.631553026Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:23.634095026Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:23.635526354Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:23.637198029Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:23.639298532Z 63 PC: 14953 | Read file or device (Read 7248 bytes on handle 5)
2018-12-17T23:06:23.647038246Z 66 PC: 149b2 | Move file pointer
2018-12-17T23:06:23.648526167Z 64 PC: 14953 | Write file or device (Write 7248 bytes on handle 5)
2018-12-17T23:06:23.657811489Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:23.659288217Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:23.660634401Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:23.663146437Z 66 PC: 149b2 | Move file pointer
2018-12-17T23:06:23.664600602Z 64 PC: 14953 | Write file or device (Write 7248 bytes on handle 5)
2018-12-17T23:06:23.675828548Z 62 PC: 148d0 | Close file
2018-12-17T23:06:23.685852277Z 61 PC: 14880 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T23:06:23.692830556Z 87 PC: 138ef | Get or set file date and time
2018-12-17T23:06:23.69488325Z 62 PC: 148d0 | Close file
2018-12-17T23:06:23.702216508Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:23.712422027Z 14 PC: 14b28 | Set default drive (Drive = 'C')
2018-12-17T23:06:23.713908158Z 25 PC: 14b2c | Get default drive
2018-12-17T23:06:23.715691344Z 59 PC: 14b96 | Change current directory
2018-12-17T23:06:23.722115619Z 26 PC: 1391f | Set disk transfer address
2018-12-17T23:06:23.723711891Z 78 PC: 1392b | Find first file
2018-12-17T23:06:23.73139135Z 67 PC: 13881 | Get or set file attributes
2018-12-17T23:06:23.737924007Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:23.748537983Z 61 PC: 14880 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T23:06:23.758993079Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:23.760755094Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:23.762908026Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:23.765504797Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:23.766874349Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:23.768255225Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:23.770728984Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:23.772549993Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:23.774423196Z 63 PC: 14953 | Read file or device (Read 7248 bytes on handle 5)
2018-12-17T23:06:23.78283535Z 62 PC: 148d0 | Close file
2018-12-17T23:06:23.784810099Z 61 PC: 14880 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T23:06:23.791749333Z 87 PC: 138ef | Get or set file date and time
2018-12-17T23:06:23.794424301Z 62 PC: 148d0 | Close file
2018-12-17T23:06:23.79852552Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:23.805900984Z 26 PC: 13943 | Set disk transfer address
2018-12-17T23:06:23.807279332Z 79 PC: 13948 | Find next file
2018-12-17T23:06:23.809710129Z 67 PC: 13881 | Get or set file attributes
2018-12-17T23:06:23.813536462Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:23.820052934Z 61 PC: 14880 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T23:06:23.824941663Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:23.826487242Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:23.82874569Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:23.830156332Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:23.831872938Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:23.833999345Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:23.835493106Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:23.837691135Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:23.84027381Z 63 PC: 14953 | Read file or device (Read 7248 bytes on handle 5)
2018-12-17T23:06:23.848503008Z 66 PC: 149b2 | Move file pointer
2018-12-17T23:06:23.850465759Z 64 PC: 14953 | Write file or device (Write 7248 bytes on handle 5)
2018-12-17T23:06:23.858975739Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:23.8602676Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:23.861483907Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:23.863861715Z 66 PC: 149b2 | Move file pointer
2018-12-17T23:06:23.865762516Z 64 PC: 14953 | Write file or device (Write 7248 bytes on handle 5)
2018-12-17T23:06:23.878914662Z 62 PC: 148d0 | Close file
2018-12-17T23:06:23.886773214Z 61 PC: 14880 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T23:06:23.894173271Z 87 PC: 138ef | Get or set file date and time
2018-12-17T23:06:23.896479191Z 62 PC: 148d0 | Close file
2018-12-17T23:06:23.90281834Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:23.913530688Z 14 PC: 14b28 | Set default drive (Drive = 'C')
2018-12-17T23:06:23.915348737Z 25 PC: 14b2c | Get default drive
2018-12-17T23:06:23.916527108Z 59 PC: 14b96 | Change current directory
2018-12-17T23:06:23.922338159Z 26 PC: 1391f | Set disk transfer address
2018-12-17T23:06:23.924102011Z 78 PC: 1392b | Find first file
2018-12-17T23:06:23.93032168Z 67 PC: 13881 | Get or set file attributes
2018-12-17T23:06:23.936254559Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:23.94654745Z 61 PC: 14880 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T23:06:23.953081279Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:23.954392411Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:23.956307316Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:23.957763707Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:23.959071476Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:23.960557197Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:23.962726411Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:23.964296408Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:23.965848538Z 63 PC: 14953 | Read file or device (Read 7248 bytes on handle 5)
2018-12-17T23:06:23.97346265Z 62 PC: 148d0 | Close file
2018-12-17T23:06:23.975274775Z 61 PC: 14880 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T23:06:23.981799874Z 87 PC: 138ef | Get or set file date and time
2018-12-17T23:06:23.983201088Z 62 PC: 148d0 | Close file
2018-12-17T23:06:23.989070599Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:23.998365525Z 26 PC: 13943 | Set disk transfer address
2018-12-17T23:06:23.999404482Z 79 PC: 13948 | Find next file
2018-12-17T23:06:24.002921585Z 67 PC: 13881 | Get or set file attributes
2018-12-17T23:06:24.008661114Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:24.017932345Z 61 PC: 14880 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T23:06:24.027171881Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:24.030073702Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:24.031408896Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:24.033644623Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:24.034884264Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:24.036370077Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:24.038603931Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:24.040434168Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:24.042049321Z 63 PC: 14953 | Read file or device (Read 7248 bytes on handle 5)
2018-12-17T23:06:24.05079784Z 62 PC: 148d0 | Close file
2018-12-17T23:06:24.052532228Z 61 PC: 14880 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T23:06:24.059180729Z 87 PC: 138ef | Get or set file date and time
2018-12-17T23:06:24.061527569Z 62 PC: 148d0 | Close file
2018-12-17T23:06:24.06756012Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:24.077440368Z 26 PC: 13943 | Set disk transfer address
2018-12-17T23:06:24.079553374Z 79 PC: 13948 | Find next file
2018-12-17T23:06:24.082809294Z 67 PC: 13881 | Get or set file attributes
2018-12-17T23:06:24.090263741Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:24.099621035Z 61 PC: 14880 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T23:06:24.106913006Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:24.113924575Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:24.11526849Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:24.116639561Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:24.119368832Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:24.120633712Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:24.122486421Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:24.125050036Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:24.126469637Z 63 PC: 14953 | Read file or device (Read 7248 bytes on handle 5)
2018-12-17T23:06:24.133983059Z 66 PC: 149b2 | Move file pointer
2018-12-17T23:06:24.135542552Z 64 PC: 14953 | Write file or device (Write 7248 bytes on handle 5)
2018-12-17T23:06:24.143326559Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:24.145123236Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:24.146468297Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:24.147879388Z 66 PC: 149b2 | Move file pointer
2018-12-17T23:06:24.150016021Z 64 PC: 14953 | Write file or device (Write 7248 bytes on handle 5)
2018-12-17T23:06:24.160283685Z 62 PC: 148d0 | Close file
2018-12-17T23:06:24.168213301Z 61 PC: 14880 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T23:06:24.176395915Z 87 PC: 138ef | Get or set file date and time
2018-12-17T23:06:24.177872456Z 62 PC: 148d0 | Close file
2018-12-17T23:06:24.183552829Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:24.194283851Z 14 PC: 14b28 | Set default drive (Drive = 'C')
2018-12-17T23:06:24.195356914Z 25 PC: 14b2c | Get default drive
2018-12-17T23:06:24.196301986Z 59 PC: 14b96 | Change current directory
2018-12-17T23:06:24.202547691Z 26 PC: 1391f | Set disk transfer address
2018-12-17T23:06:24.20430779Z 78 PC: 1392b | Find first file
2018-12-17T23:06:24.211189791Z 67 PC: 13881 | Get or set file attributes
2018-12-17T23:06:24.216803355Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:24.223104084Z 61 PC: 14880 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T23:06:24.227786583Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:24.229034928Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:24.230829544Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:24.232941483Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:24.234491528Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:24.23599937Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:24.238310175Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:24.239822856Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:24.241368574Z 63 PC: 14953 | Read file or device (Read 7248 bytes on handle 5)
2018-12-17T23:06:24.250800907Z 62 PC: 148d0 | Close file
2018-12-17T23:06:24.25235963Z 61 PC: 14880 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T23:06:24.259083317Z 87 PC: 138ef | Get or set file date and time
2018-12-17T23:06:24.260675875Z 62 PC: 148d0 | Close file
2018-12-17T23:06:24.266461937Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:24.276526129Z 26 PC: 13943 | Set disk transfer address
2018-12-17T23:06:24.27755655Z 79 PC: 13948 | Find next file
2018-12-17T23:06:24.280955278Z 67 PC: 13881 | Get or set file attributes
2018-12-17T23:06:24.287284609Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:24.296417015Z 61 PC: 14880 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T23:06:24.302832456Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:24.304586536Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:24.305873404Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:24.307399945Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:24.309688652Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:24.311008939Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:24.312884743Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:24.314430338Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:24.315772963Z 63 PC: 14953 | Read file or device (Read 7248 bytes on handle 5)
2018-12-17T23:06:24.323738097Z 62 PC: 148d0 | Close file
2018-12-17T23:06:24.325387633Z 61 PC: 14880 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T23:06:24.33179606Z 87 PC: 138ef | Get or set file date and time
2018-12-17T23:06:24.334107392Z 62 PC: 148d0 | Close file
2018-12-17T23:06:24.340064896Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:24.349569815Z 26 PC: 13943 | Set disk transfer address
2018-12-17T23:06:24.351560124Z 79 PC: 13948 | Find next file
2018-12-17T23:06:24.354846571Z 67 PC: 13881 | Get or set file attributes
2018-12-17T23:06:24.360681499Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:24.370620567Z 61 PC: 14880 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T23:06:24.378014267Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:24.380623473Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:24.381856744Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:24.382938314Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:24.384633323Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:24.385818613Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:24.387018757Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:24.388891284Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:24.39021146Z 63 PC: 14953 | Read file or device (Read 7248 bytes on handle 5)
2018-12-17T23:06:24.395207809Z 62 PC: 148d0 | Close file
2018-12-17T23:06:24.397201038Z 61 PC: 14880 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T23:06:24.401399149Z 87 PC: 138ef | Get or set file date and time
2018-12-17T23:06:24.403073454Z 62 PC: 148d0 | Close file
2018-12-17T23:06:24.409272715Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:24.418513183Z 26 PC: 13943 | Set disk transfer address
2018-12-17T23:06:24.420352303Z 79 PC: 13948 | Find next file
2018-12-17T23:06:24.423819095Z 67 PC: 13881 | Get or set file attributes
2018-12-17T23:06:24.429481794Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:24.439317737Z 61 PC: 14880 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T23:06:24.446603256Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:24.447858844Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:24.449577134Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:24.4509264Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:24.45248087Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:24.454413827Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:24.45620366Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:24.459416918Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:24.461169259Z 63 PC: 14953 | Read file or device (Read 7248 bytes on handle 5)
2018-12-17T23:06:24.466435222Z 66 PC: 149b2 | Move file pointer
2018-12-17T23:06:24.46905764Z 64 PC: 14953 | Write file or device (Write 7248 bytes on handle 5)
2018-12-17T23:06:24.474376919Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:24.475655791Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:24.478047401Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:24.479352841Z 66 PC: 149b2 | Move file pointer
2018-12-17T23:06:24.480685858Z 64 PC: 14953 | Write file or device (Write 7248 bytes on handle 5)
2018-12-17T23:06:24.488020426Z 62 PC: 148d0 | Close file
2018-12-17T23:06:24.493178069Z 61 PC: 14880 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T23:06:24.4977636Z 87 PC: 138ef | Get or set file date and time
2018-12-17T23:06:24.500726813Z 62 PC: 148d0 | Close file
2018-12-17T23:06:24.506737274Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:24.516503117Z 14 PC: 14b28 | Set default drive (Drive = 'C')
2018-12-17T23:06:24.517901387Z 25 PC: 14b2c | Get default drive
2018-12-17T23:06:24.519140882Z 59 PC: 14b96 | Change current directory
2018-12-17T23:06:24.526810066Z 26 PC: 1391f | Set disk transfer address
2018-12-17T23:06:24.527834933Z 78 PC: 1392b | Find first file
2018-12-17T23:06:24.533830007Z 67 PC: 13881 | Get or set file attributes
2018-12-17T23:06:24.540805755Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:24.54725845Z 61 PC: 14880 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T23:06:24.565823512Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:24.568174928Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:24.569795862Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:24.571526701Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:24.573877104Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:24.575506871Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:24.577841659Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:24.579791221Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:24.581513232Z 63 PC: 14953 | Read file or device (Read 7248 bytes on handle 5)
2018-12-17T23:06:24.591244197Z 62 PC: 148d0 | Close file
2018-12-17T23:06:24.593256536Z 61 PC: 14880 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T23:06:24.60003421Z 87 PC: 138ef | Get or set file date and time
2018-12-17T23:06:24.602360809Z 62 PC: 148d0 | Close file
2018-12-17T23:06:24.608116665Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:24.617876105Z 26 PC: 13943 | Set disk transfer address
2018-12-17T23:06:24.619292935Z 79 PC: 13948 | Find next file
2018-12-17T23:06:24.622550589Z 67 PC: 13881 | Get or set file attributes
2018-12-17T23:06:24.629010426Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:24.638180151Z 61 PC: 14880 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T23:06:24.644596256Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:24.64642095Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:24.647733101Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:24.648990147Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:24.651088317Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:24.65231715Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:24.653639673Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:24.656079315Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:24.657995652Z 63 PC: 14953 | Read file or device (Read 7248 bytes on handle 5)
2018-12-17T23:06:24.665685183Z 62 PC: 148d0 | Close file
2018-12-17T23:06:24.667339209Z 61 PC: 14880 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T23:06:24.673786721Z 87 PC: 138ef | Get or set file date and time
2018-12-17T23:06:24.675888684Z 62 PC: 148d0 | Close file
2018-12-17T23:06:24.682161872Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:24.691435667Z 26 PC: 13943 | Set disk transfer address
2018-12-17T23:06:24.693081507Z 79 PC: 13948 | Find next file
2018-12-17T23:06:24.696609341Z 67 PC: 13881 | Get or set file attributes
2018-12-17T23:06:24.702655248Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:24.713392432Z 61 PC: 14880 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T23:06:24.720197223Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:24.723578624Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:24.72516338Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:24.726817576Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:24.730097837Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:24.731746623Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:24.733542121Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:24.736285375Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:24.738037966Z 63 PC: 14953 | Read file or device (Read 7248 bytes on handle 5)
2018-12-17T23:06:24.746053004Z 62 PC: 148d0 | Close file
2018-12-17T23:06:24.748787146Z 61 PC: 14880 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T23:06:24.755397068Z 87 PC: 138ef | Get or set file date and time
2018-12-17T23:06:24.757473216Z 62 PC: 148d0 | Close file
2018-12-17T23:06:24.765263166Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:24.775329909Z 26 PC: 13943 | Set disk transfer address
2018-12-17T23:06:24.777243336Z 79 PC: 13948 | Find next file
2018-12-17T23:06:24.780496603Z 67 PC: 13881 | Get or set file attributes
2018-12-17T23:06:24.786007905Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:24.795750668Z 61 PC: 14880 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T23:06:24.802319585Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:24.804882276Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:24.806342512Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:24.80790214Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:24.80993782Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:24.811202133Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:24.812584336Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:24.814635372Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:24.815995293Z 63 PC: 14953 | Read file or device (Read 7248 bytes on handle 5)
2018-12-17T23:06:24.823818709Z 62 PC: 148d0 | Close file
2018-12-17T23:06:24.825637927Z 61 PC: 14880 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T23:06:24.832330841Z 87 PC: 138ef | Get or set file date and time
2018-12-17T23:06:24.834776851Z 62 PC: 148d0 | Close file
2018-12-17T23:06:24.840706101Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:24.849863968Z 26 PC: 13943 | Set disk transfer address
2018-12-17T23:06:24.851783925Z 79 PC: 13948 | Find next file
2018-12-17T23:06:24.855414934Z 67 PC: 13881 | Get or set file attributes
2018-12-17T23:06:24.863237347Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:24.872519533Z 61 PC: 14880 | Open file (Filename = 'FDISK.EXE')
2018-12-17T23:06:24.879248239Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:24.882010278Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:24.883414432Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:24.884990702Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:24.887780234Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:24.889177721Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:24.890825839Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:24.893287094Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:24.894728804Z 63 PC: 14953 | Read file or device (Read 7248 bytes on handle 5)
2018-12-17T23:06:24.903285034Z 66 PC: 149b2 | Move file pointer
2018-12-17T23:06:24.904772166Z 64 PC: 14953 | Write file or device (Write 7248 bytes on handle 5)
2018-12-17T23:06:24.912468012Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:24.914471897Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:24.915757413Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:24.917076538Z 66 PC: 149b2 | Move file pointer
2018-12-17T23:06:24.918489594Z 64 PC: 14953 | Write file or device (Write 7248 bytes on handle 5)
2018-12-17T23:06:24.927577987Z 62 PC: 148d0 | Close file
2018-12-17T23:06:24.936108138Z 61 PC: 14880 | Open file (Filename = 'FDISK.EXE')
2018-12-17T23:06:24.942888473Z 87 PC: 138ef | Get or set file date and time
2018-12-17T23:06:24.944341571Z 62 PC: 148d0 | Close file
2018-12-17T23:06:24.950477607Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:24.959928929Z 14 PC: 14b28 | Set default drive (Drive = 'C')
2018-12-17T23:06:24.961518519Z 25 PC: 14b2c | Get default drive
2018-12-17T23:06:24.962524505Z 59 PC: 14b96 | Change current directory
2018-12-17T23:06:24.968079976Z 26 PC: 1391f | Set disk transfer address
2018-12-17T23:06:24.969603983Z 78 PC: 1392b | Find first file
2018-12-17T23:06:24.975474816Z 67 PC: 13881 | Get or set file attributes
2018-12-17T23:06:24.993685961Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:25.004909196Z 61 PC: 14880 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T23:06:25.011761575Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:25.014203831Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:25.016042751Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:25.017846Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:25.020062175Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:25.021656556Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:25.023493747Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:25.026161711Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:25.027898005Z 63 PC: 14953 | Read file or device (Read 7248 bytes on handle 5)
2018-12-17T23:06:25.037697221Z 62 PC: 148d0 | Close file
2018-12-17T23:06:25.039623947Z 61 PC: 14880 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T23:06:25.046121307Z 87 PC: 138ef | Get or set file date and time
2018-12-17T23:06:25.04807137Z 62 PC: 148d0 | Close file
2018-12-17T23:06:25.054414999Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:25.064215889Z 26 PC: 13943 | Set disk transfer address
2018-12-17T23:06:25.065419186Z 79 PC: 13948 | Find next file
2018-12-17T23:06:25.069462709Z 67 PC: 13881 | Get or set file attributes
2018-12-17T23:06:25.076169169Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:25.085798429Z 61 PC: 14880 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T23:06:25.093731802Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:25.096458949Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:25.097842476Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:25.09925195Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:25.100848967Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:25.102339282Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:25.104815232Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:25.106615927Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:25.108155344Z 63 PC: 14953 | Read file or device (Read 7248 bytes on handle 5)
2018-12-17T23:06:25.119100807Z 62 PC: 148d0 | Close file
2018-12-17T23:06:25.12108185Z 61 PC: 14880 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T23:06:25.128135551Z 87 PC: 138ef | Get or set file date and time
2018-12-17T23:06:25.130409694Z 62 PC: 148d0 | Close file
2018-12-17T23:06:25.136550475Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:25.146735496Z 26 PC: 13943 | Set disk transfer address
2018-12-17T23:06:25.147673914Z 79 PC: 13948 | Find next file
2018-12-17T23:06:25.149766528Z 67 PC: 13881 | Get or set file attributes
2018-12-17T23:06:25.153628138Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:25.159395465Z 61 PC: 14880 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T23:06:25.163539831Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:25.164568521Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:25.16547162Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:25.166891754Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:25.167815182Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:25.168652498Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:25.170122312Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:25.171303562Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:25.172760995Z 63 PC: 14953 | Read file or device (Read 7248 bytes on handle 5)
2018-12-17T23:06:25.177397466Z 62 PC: 148d0 | Close file
2018-12-17T23:06:25.178615452Z 61 PC: 14880 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T23:06:25.183079904Z 87 PC: 138ef | Get or set file date and time
2018-12-17T23:06:25.184065666Z 62 PC: 148d0 | Close file
2018-12-17T23:06:25.18860222Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:25.194621431Z 26 PC: 13943 | Set disk transfer address
2018-12-17T23:06:25.195429209Z 79 PC: 13948 | Find next file
2018-12-17T23:06:25.197936822Z 67 PC: 13881 | Get or set file attributes
2018-12-17T23:06:25.201601854Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:25.386342212Z 61 PC: 14880 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T23:06:25.393912455Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:25.395581458Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:25.397142964Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:25.398502162Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:25.400367654Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:25.401622686Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:25.403100085Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:25.409647471Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:25.410993299Z 63 PC: 14953 | Read file or device (Read 7248 bytes on handle 5)
2018-12-17T23:06:25.419175932Z 62 PC: 148d0 | Close file
2018-12-17T23:06:25.421152558Z 61 PC: 14880 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T23:06:25.427869201Z 87 PC: 138ef | Get or set file date and time
2018-12-17T23:06:25.42931195Z 62 PC: 148d0 | Close file
2018-12-17T23:06:25.534562446Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:25.544599647Z 26 PC: 13943 | Set disk transfer address
2018-12-17T23:06:25.546128352Z 79 PC: 13948 | Find next file
2018-12-17T23:06:25.550289501Z 67 PC: 13881 | Get or set file attributes
2018-12-17T23:06:25.557183548Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:25.567942806Z 61 PC: 14880 | Open file (Filename = 'FDISK.EXE')
2018-12-17T23:06:25.575686324Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:25.587014389Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:25.588817367Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:25.591622534Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:25.593275005Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:25.595187645Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:25.596806853Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:25.598494737Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:25.600350573Z 63 PC: 14953 | Read file or device (Read 7248 bytes on handle 5)
2018-12-17T23:06:25.607872618Z 62 PC: 148d0 | Close file
2018-12-17T23:06:25.610394389Z 61 PC: 14880 | Open file (Filename = 'FDISK.EXE')
2018-12-17T23:06:25.616860127Z 87 PC: 138ef | Get or set file date and time
2018-12-17T23:06:25.618364524Z 62 PC: 148d0 | Close file
2018-12-17T23:06:25.624871919Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:25.63476937Z 26 PC: 13943 | Set disk transfer address
2018-12-17T23:06:25.636681175Z 79 PC: 13948 | Find next file
2018-12-17T23:06:25.639974203Z 67 PC: 13881 | Get or set file attributes
2018-12-17T23:06:25.645584158Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:25.656176562Z 61 PC: 14880 | Open file (Filename = 'MEM.EXE')
2018-12-17T23:06:25.662809577Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:25.673248771Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:25.674660321Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:25.675974648Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:25.678100859Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:25.679351903Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:25.680654219Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:25.682472129Z 87 PC: 138c2 | Get or set file date and time
2018-12-17T23:06:25.683957506Z 63 PC: 14953 | Read file or device (Read 7248 bytes on handle 5)
2018-12-17T23:06:25.692457628Z 66 PC: 149b2 | Move file pointer
2018-12-17T23:06:25.693925488Z 64 PC: 14953 | Write file or device (Write 7248 bytes on handle 5)
2018-12-17T23:06:25.701481158Z 66 PC: 15016 | Move file pointer
2018-12-17T23:06:25.703392054Z 66 PC: 15024 | Move file pointer
2018-12-17T23:06:25.704678514Z 66 PC: 15032 | Move file pointer
2018-12-17T23:06:25.706351572Z 66 PC: 149b2 | Move file pointer
2018-12-17T23:06:25.707908328Z 64 PC: 14953 | Write file or device (Write 7248 bytes on handle 5)
2018-12-17T23:06:25.717596685Z 62 PC: 148d0 | Close file
2018-12-17T23:06:25.726629615Z 61 PC: 14880 | Open file (Filename = 'MEM.EXE')
2018-12-17T23:06:25.733627578Z 87 PC: 138ef | Get or set file date and time
2018-12-17T23:06:25.735619704Z 62 PC: 148d0 | Close file
2018-12-17T23:06:25.740402568Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:25.746581505Z 48 PC: 14a42 | Get DOS version
2018-12-17T23:06:25.748587005Z 67 PC: 138a8 | Get or set file attributes
2018-12-17T23:06:25.755452119Z 14 PC: 14b28 | Set default drive (Drive = 'A')
2018-12-17T23:06:25.75689015Z 25 PC: 14b2c | Get default drive
2018-12-17T23:06:25.757758471Z 59 PC: 14b96 | Change current directory
2018-12-17T23:06:25.760379717Z 42 PC: 13807 | Get date 0x13807: xor ah, ah
0x13809: les di, ptr [bp + 6]
0x1380c: stosw word ptr es:[di], ax
0x1380d: mov al, dl
0x1380f: les di, ptr [bp + 0xa]
0x13812: stosw word ptr es:[di], ax
0x13813: mov al, dh
0x13815: les di, ptr [bp + 0xe]
0x13818: stosw word ptr es:[di], ax
0x13819: xchg ax, cx
0x1381a: les di, ptr [bp + 0x12]
0x1381d: stosw word ptr es:[di], ax
0x1381e: pop bp
0x1381f: retf 0x10
0x13822: push bp
0x13823: mov bp, sp
0x13825: mov cx, word ptr [bp + 0xa]
0x13828: mov dh, byte ptr [bp + 8]
0x1382b: mov dl, byte ptr [bp + 6]
0x1382e: mov ah, 0x2b
2018-12-17T23:06:25.762622903Z 37 PC: 14311 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:06:25.763460036Z 37 PC: 14311 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:06:25.764723212Z 37 PC: 14311 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:06:25.76584712Z 37 PC: 14311 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:06:25.766794044Z 37 PC: 14311 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:06:25.767994564Z 37 PC: 14311 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:06:25.768921014Z 37 PC: 14311 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:06:25.770124788Z 37 PC: 14311 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:06:25.770910557Z 37 PC: 14311 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:06:25.77199667Z 37 PC: 14311 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:06:25.772786278Z 37 PC: 14311 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:06:25.77365815Z 37 PC: 14311 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:06:25.774946283Z 37 PC: 14311 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:06:25.77605084Z 37 PC: 14311 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:06:25.77710048Z 37 PC: 14311 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:06:25.778199442Z 37 PC: 14311 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:06:25.77934902Z 37 PC: 14311 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:06:25.780712814Z 37 PC: 14311 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:06:25.781721838Z 37 PC: 14311 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:06:25.783395726Z 76 PC: 14350 | Terminate with return code (Return code = '0')