Sample viewer

vx.netlux.org/Virus.DOS.HLLP.Kornik.5712

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:06:48.520334163Z 53 PC: 1389a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:06:48.52269925Z 53 PC: 1389a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:06:48.524459101Z 53 PC: 1389a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:06:48.525999744Z 53 PC: 1389a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:06:48.527725423Z 53 PC: 1389a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:06:48.529881698Z 53 PC: 1389a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:06:48.531368985Z 53 PC: 1389a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:06:48.532813487Z 53 PC: 1389a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:06:48.545726492Z 53 PC: 1389a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:06:48.546894739Z 53 PC: 1389a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:06:48.548494971Z 53 PC: 1389a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:06:48.550630644Z 53 PC: 1389a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:06:48.552653036Z 53 PC: 1389a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:06:48.554121568Z 53 PC: 1389a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:06:48.556720773Z 53 PC: 1389a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:06:48.570257104Z 53 PC: 1389a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:06:48.571452564Z 53 PC: 1389a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:06:48.575639514Z 53 PC: 1389a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:06:48.576777778Z 53 PC: 1389a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:06:48.577911587Z 37 PC: 138af | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:06:48.579572314Z 37 PC: 138b7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:06:48.580682321Z 37 PC: 138bf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:06:48.582540534Z 37 PC: 138c7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:06:48.58543329Z 68 PC: 14597 | I/O control for devices (Set for = '')
2018-12-17T22:06:48.586900651Z 44 PC: 146ce | Get time 0x146ce: mov word ptr [0x13e], cx
0x146d2: mov word ptr [0x140], dx
0x146d6: retf
0x146d7: call 0x1471e
0x146da: jb 0x146eb
0x146dc: mov cx, word ptr es:[di + 4]
0x146e0: cmp cx, 1
0x146e3: je 0x146eb
0x146e5: xor bx, bx
0x146e7: push cs
0x146e8: call 0x2425f
0x146eb: retf 4
0x146ee: call 0x1471e
0x146f1: jb 0x14706
0x146f3: mov ax, cx
0x146f5: mov dx, bx
0x146f7: mov cx, word ptr es:[di + 4]
0x146fb: cmp cx, 1
0x146fe: je 0x14706
0x14700: xor bx, bx
2018-12-17T22:06:48.589090031Z 44 PC: 1349d | Get time 0x1349d: xor ah, ah
0x1349f: mov al, dl
0x134a1: les di, ptr [bp + 6]
0x134a4: stosw word ptr es:[di], ax
0x134a5: mov al, dh
0x134a7: les di, ptr [bp + 0xa]
0x134aa: stosw word ptr es:[di], ax
0x134ab: mov al, cl
0x134ad: les di, ptr [bp + 0xe]
0x134b0: stosw word ptr es:[di], ax
0x134b1: mov al, ch
0x134b3: les di, ptr [bp + 0x12]
0x134b6: stosw word ptr es:[di], ax
0x134b7: pop bp
0x134b8: retf 0x10
0x134bb: push bp
0x134bc: mov bp, sp
0x134be: mov ch, byte ptr [bp + 0xc]
0x134c1: mov cl, byte ptr [bp + 0xa]
0x134c4: mov dh, byte ptr [bp + 8]
2018-12-17T22:06:48.592033255Z 42 PC: 13467 | Get date 0x13467: xor ah, ah
0x13469: les di, ptr [bp + 6]
0x1346c: stosw word ptr es:[di], ax
0x1346d: mov al, dl
0x1346f: les di, ptr [bp + 0xa]
0x13472: stosw word ptr es:[di], ax
0x13473: mov al, dh
0x13475: les di, ptr [bp + 0xe]
0x13478: stosw word ptr es:[di], ax
0x13479: xchg ax, cx
0x1347a: les di, ptr [bp + 0x12]
0x1347d: stosw word ptr es:[di], ax
0x1347e: pop bp
0x1347f: retf 0x10
0x13482: push bp
0x13483: mov bp, sp
0x13485: mov cx, word ptr [bp + 0xa]
0x13488: mov dh, byte ptr [bp + 8]
0x1348b: mov dl, byte ptr [bp + 6]
0x1348e: mov ah, 0x2b
2018-12-17T22:06:48.594615893Z 48 PC: 140c7 | Get DOS version
2018-12-17T22:06:48.596000939Z 67 PC: 134e1 | Get or set file attributes
2018-12-17T22:06:48.603372826Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:48.89144461Z 61 PC: 13f05 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:06:48.898352446Z 63 PC: 13fd8 | Read file or device (Read 5712 bytes on handle 5)
2018-12-17T22:06:48.908745697Z 62 PC: 13f55 | Close file
2018-12-17T22:06:48.91082868Z 48 PC: 140c7 | Get DOS version
2018-12-17T22:06:48.912821454Z 67 PC: 134e1 | Get or set file attributes
2018-12-17T22:06:48.919168864Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:48.932207857Z 61 PC: 13f05 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:06:48.939324516Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:48.941350011Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:48.944271477Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:48.946008203Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:48.950904043Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:48.953006866Z 66 PC: 14037 | Move file pointer
2018-12-17T22:06:48.954680861Z 63 PC: 13fd8 | Read file or device (Read 5712 bytes on handle 5)
2018-12-17T22:06:48.962149826Z 66 PC: 14037 | Move file pointer
2018-12-17T22:06:48.964931377Z 64 PC: 13fd8 | Write file or device (Write 5712 bytes on handle 5)
2018-12-17T22:06:48.973654879Z 62 PC: 13f55 | Close file
2018-12-17T22:06:48.981692846Z 53 PC: 13817 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:06:48.984024365Z 37 PC: 13820 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:06:48.985806279Z 53 PC: 13817 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:06:48.987389223Z 37 PC: 13820 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:06:48.989113235Z 53 PC: 13817 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:06:48.990921293Z 37 PC: 13820 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:06:48.992128161Z 53 PC: 13817 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:06:48.993612805Z 37 PC: 13820 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:06:48.99609399Z 53 PC: 13817 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:06:48.997577509Z 37 PC: 13820 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:06:48.99904602Z 53 PC: 13817 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:06:49.001550553Z 37 PC: 13820 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:06:49.003001323Z 53 PC: 13817 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:06:49.004988799Z 37 PC: 13820 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:06:49.00751148Z 53 PC: 13817 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:06:49.00898615Z 37 PC: 13820 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:06:49.010415056Z 53 PC: 13817 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:06:49.013334253Z 37 PC: 13820 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:06:49.014661723Z 53 PC: 13817 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:06:49.016405846Z 37 PC: 13820 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:06:49.01859628Z 53 PC: 13817 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:06:49.019738743Z 37 PC: 13820 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:06:49.020822027Z 53 PC: 13817 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:06:49.022775517Z 37 PC: 13820 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:06:49.023848903Z 53 PC: 13817 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:06:49.025312479Z 37 PC: 13820 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:06:49.027064032Z 53 PC: 13817 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:06:49.02837803Z 37 PC: 13820 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:06:49.029459653Z 53 PC: 13817 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:06:49.030740357Z 37 PC: 13820 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:06:49.032387322Z 53 PC: 13817 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:06:49.033615389Z 37 PC: 13820 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:06:49.034664042Z 53 PC: 13817 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:06:49.036663368Z 37 PC: 13820 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:06:49.037716297Z 53 PC: 13817 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:06:49.03879797Z 37 PC: 13820 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:06:49.041245251Z 53 PC: 13817 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:06:49.042750444Z 37 PC: 13820 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:06:49.044125074Z 48 PC: 140c7 | Get DOS version
2018-12-17T22:06:49.046533394Z 41 PC: 13766 | Parse filename
2018-12-17T22:06:49.048085289Z 41 PC: 13774 | Parse filename
2018-12-17T22:06:49.049921567Z 75 PC: 1377f | Execute program
2018-12-17T22:06:49.066544726Z 53 PC: 13817 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:06:49.068360919Z 37 PC: 13820 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:06:49.069932454Z 53 PC: 13817 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:06:49.072528646Z 37 PC: 13820 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:06:49.074213671Z 53 PC: 13817 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:06:49.07589743Z 37 PC: 13820 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:06:49.078231606Z 53 PC: 13817 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:06:49.080051536Z 37 PC: 13820 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:06:49.081527743Z 53 PC: 13817 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:06:49.084646488Z 37 PC: 13820 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:06:49.08587357Z 53 PC: 13817 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:06:49.088007964Z 37 PC: 13820 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:06:49.089648364Z 53 PC: 13817 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:06:49.090761098Z 37 PC: 13820 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:06:49.091807145Z 53 PC: 13817 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:06:49.093420592Z 37 PC: 13820 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:06:49.094536449Z 53 PC: 13817 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:06:49.095871819Z 37 PC: 13820 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:06:49.097375415Z 53 PC: 13817 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:06:49.098926331Z 37 PC: 13820 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:06:49.100519007Z 53 PC: 13817 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:06:49.102480975Z 37 PC: 13820 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:06:49.103958889Z 53 PC: 13817 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:06:49.105442487Z 37 PC: 13820 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:06:49.107368116Z 53 PC: 13817 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:06:49.108682419Z 37 PC: 13820 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:06:49.110130328Z 53 PC: 13817 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:06:49.112384224Z 37 PC: 13820 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:06:49.114210174Z 53 PC: 13817 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:06:49.116370065Z 37 PC: 13820 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:06:49.118251234Z 53 PC: 13817 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:06:49.119388359Z 37 PC: 13820 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:06:49.120465594Z 53 PC: 13817 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:06:49.121778617Z 37 PC: 13820 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:06:49.123417116Z 53 PC: 13817 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:06:49.124539421Z 37 PC: 13820 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:06:49.125605Z 53 PC: 13817 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:06:49.127815384Z 37 PC: 13820 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:06:49.129306741Z 48 PC: 140c7 | Get DOS version
2018-12-17T22:06:49.13108201Z 61 PC: 13f05 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:06:49.138570049Z 64 PC: 13fd8 | Write file or device (Write 5712 bytes on handle 5)
2018-12-17T22:06:49.146665513Z 62 PC: 13f55 | Close file
2018-12-17T22:06:49.15431539Z 61 PC: 13f05 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:06:49.161366957Z 87 PC: 1354f | Get or set file date and time
2018-12-17T22:06:49.162774601Z 62 PC: 13f55 | Close file
2018-12-17T22:06:49.169502942Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:49.179486101Z 26 PC: 1357f | Set disk transfer address
2018-12-17T22:06:49.180467457Z 78 PC: 1358b | Find first file
2018-12-17T22:06:49.191415712Z 26 PC: 1357f | Set disk transfer address
2018-12-17T22:06:49.193705858Z 78 PC: 1358b | Find first file
2018-12-17T22:06:49.199473122Z 25 PC: 14154 | Get default drive
2018-12-17T22:06:49.200554153Z 71 PC: 14167 | Get current directory
2018-12-17T22:06:49.204236878Z 26 PC: 1357f | Set disk transfer address
2018-12-17T22:06:49.205554598Z 78 PC: 1358b | Find first file
2018-12-17T22:06:49.2117667Z 67 PC: 134e1 | Get or set file attributes
2018-12-17T22:06:49.218160821Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:49.230251867Z 61 PC: 13f05 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:06:49.241733936Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:49.244326573Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:49.245732967Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:49.247495891Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:49.249946618Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:49.252005756Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:49.254479322Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:49.257206944Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:49.259371931Z 63 PC: 13fd8 | Read file or device (Read 5712 bytes on handle 5)
2018-12-17T22:06:49.268114319Z 62 PC: 13f55 | Close file
2018-12-17T22:06:49.271396726Z 61 PC: 13f05 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:06:49.279708278Z 87 PC: 1354f | Get or set file date and time
2018-12-17T22:06:49.281822161Z 62 PC: 13f55 | Close file
2018-12-17T22:06:49.29036708Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:49.3003842Z 26 PC: 135a3 | Set disk transfer address
2018-12-17T22:06:49.3017462Z 79 PC: 135a8 | Find next file
2018-12-17T22:06:49.305814438Z 14 PC: 141ad | Set default drive (Drive = 'C')
2018-12-17T22:06:49.307633563Z 25 PC: 141b1 | Get default drive
2018-12-17T22:06:49.308956445Z 59 PC: 1421b | Change current directory
2018-12-17T22:06:49.315144732Z 26 PC: 1357f | Set disk transfer address
2018-12-17T22:06:49.317345525Z 78 PC: 1358b | Find first file
2018-12-17T22:06:49.327094345Z 67 PC: 134e1 | Get or set file attributes
2018-12-17T22:06:49.333150036Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:49.676688758Z 61 PC: 13f05 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:06:49.683656007Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:49.685386917Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:49.688339633Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:49.690169776Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:49.691630389Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:49.694329445Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:49.696085048Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:49.698023535Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:49.700818113Z 63 PC: 13fd8 | Read file or device (Read 5712 bytes on handle 5)
2018-12-17T22:06:49.708187125Z 66 PC: 14037 | Move file pointer
2018-12-17T22:06:49.709916901Z 64 PC: 13fd8 | Write file or device (Write 5712 bytes on handle 5)
2018-12-17T22:06:49.718345086Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:49.720298175Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:49.72194341Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:49.724407121Z 66 PC: 14037 | Move file pointer
2018-12-17T22:06:49.726433803Z 64 PC: 13fd8 | Write file or device (Write 5712 bytes on handle 5)
2018-12-17T22:06:49.738152864Z 62 PC: 13f55 | Close file
2018-12-17T22:06:49.746734302Z 61 PC: 13f05 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:06:49.753292173Z 87 PC: 1354f | Get or set file date and time
2018-12-17T22:06:49.754784101Z 62 PC: 13f55 | Close file
2018-12-17T22:06:49.761909541Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:49.771641289Z 14 PC: 141ad | Set default drive (Drive = 'C')
2018-12-17T22:06:49.772921508Z 25 PC: 141b1 | Get default drive
2018-12-17T22:06:49.774835167Z 59 PC: 1421b | Change current directory
2018-12-17T22:06:49.781020332Z 26 PC: 1357f | Set disk transfer address
2018-12-17T22:06:49.782488941Z 78 PC: 1358b | Find first file
2018-12-17T22:06:49.789312667Z 67 PC: 134e1 | Get or set file attributes
2018-12-17T22:06:49.795688073Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:49.805370017Z 61 PC: 13f05 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:06:49.812143256Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:49.813482608Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:49.814576491Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:49.816302318Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:49.817658096Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:49.818985103Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:49.820708564Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:49.822378331Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:49.823977026Z 63 PC: 13fd8 | Read file or device (Read 5712 bytes on handle 5)
2018-12-17T22:06:49.831846051Z 62 PC: 13f55 | Close file
2018-12-17T22:06:49.833492715Z 61 PC: 13f05 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:06:49.839888528Z 87 PC: 1354f | Get or set file date and time
2018-12-17T22:06:49.841611259Z 62 PC: 13f55 | Close file
2018-12-17T22:06:49.847175923Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:49.856325507Z 26 PC: 135a3 | Set disk transfer address
2018-12-17T22:06:49.857493226Z 79 PC: 135a8 | Find next file
2018-12-17T22:06:49.861505143Z 67 PC: 134e1 | Get or set file attributes
2018-12-17T22:06:49.867645729Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:49.876751991Z 61 PC: 13f05 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:06:49.883204941Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:49.885008393Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:49.886277835Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:49.887624814Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:49.889434481Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:49.89073434Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:49.892092227Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:49.894253722Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:49.895628078Z 63 PC: 13fd8 | Read file or device (Read 5712 bytes on handle 5)
2018-12-17T22:06:49.902546648Z 66 PC: 14037 | Move file pointer
2018-12-17T22:06:49.904531506Z 64 PC: 13fd8 | Write file or device (Write 5712 bytes on handle 5)
2018-12-17T22:06:49.911982656Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:49.913275974Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:49.915610715Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:49.917206379Z 66 PC: 14037 | Move file pointer
2018-12-17T22:06:49.929329459Z 64 PC: 13fd8 | Write file or device (Write 5712 bytes on handle 5)
2018-12-17T22:06:49.94285415Z 62 PC: 13f55 | Close file
2018-12-17T22:06:49.948729755Z 61 PC: 13f05 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:06:49.952817598Z 87 PC: 1354f | Get or set file date and time
2018-12-17T22:06:49.954540267Z 62 PC: 13f55 | Close file
2018-12-17T22:06:49.959577569Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:49.966391358Z 14 PC: 141ad | Set default drive (Drive = 'C')
2018-12-17T22:06:49.968322434Z 25 PC: 141b1 | Get default drive
2018-12-17T22:06:49.969217191Z 59 PC: 1421b | Change current directory
2018-12-17T22:06:49.974220631Z 26 PC: 1357f | Set disk transfer address
2018-12-17T22:06:49.975709103Z 78 PC: 1358b | Find first file
2018-12-17T22:06:49.979630264Z 67 PC: 134e1 | Get or set file attributes
2018-12-17T22:06:49.983468331Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:49.989832631Z 61 PC: 13f05 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:06:49.997454848Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:50.000349723Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:50.002157138Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:50.003979315Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:50.006603818Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:50.008668783Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:50.010592945Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:50.013358678Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:50.015506959Z 63 PC: 13fd8 | Read file or device (Read 5712 bytes on handle 5)
2018-12-17T22:06:50.022836897Z 62 PC: 13f55 | Close file
2018-12-17T22:06:50.025609574Z 61 PC: 13f05 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:06:50.034145276Z 87 PC: 1354f | Get or set file date and time
2018-12-17T22:06:50.038143108Z 62 PC: 13f55 | Close file
2018-12-17T22:06:50.044915192Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:50.054608637Z 26 PC: 135a3 | Set disk transfer address
2018-12-17T22:06:50.055992134Z 79 PC: 135a8 | Find next file
2018-12-17T22:06:50.060460383Z 67 PC: 134e1 | Get or set file attributes
2018-12-17T22:06:50.067487416Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:50.078931222Z 61 PC: 13f05 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:06:50.090596322Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:50.092216653Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:50.093870095Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:50.09614504Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:50.097923935Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:50.099548796Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:50.102087141Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:50.103859087Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:50.105306213Z 63 PC: 13fd8 | Read file or device (Read 5712 bytes on handle 5)
2018-12-17T22:06:50.113256807Z 62 PC: 13f55 | Close file
2018-12-17T22:06:50.115332193Z 61 PC: 13f05 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:06:50.122270016Z 87 PC: 1354f | Get or set file date and time
2018-12-17T22:06:50.124675357Z 62 PC: 13f55 | Close file
2018-12-17T22:06:50.130595632Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:50.143023903Z 26 PC: 135a3 | Set disk transfer address
2018-12-17T22:06:50.145355198Z 79 PC: 135a8 | Find next file
2018-12-17T22:06:50.148806521Z 67 PC: 134e1 | Get or set file attributes
2018-12-17T22:06:50.154588169Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:50.165197894Z 61 PC: 13f05 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:06:50.17211677Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:50.173879286Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:50.175799662Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:50.178054106Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:50.179509751Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:50.181322442Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:50.183252976Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:50.185012187Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:50.186946153Z 63 PC: 13fd8 | Read file or device (Read 5712 bytes on handle 5)
2018-12-17T22:06:50.194367416Z 66 PC: 14037 | Move file pointer
2018-12-17T22:06:50.197499951Z 64 PC: 13fd8 | Write file or device (Write 5712 bytes on handle 5)
2018-12-17T22:06:50.206507424Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:50.208099983Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:50.209927632Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:50.212317424Z 66 PC: 14037 | Move file pointer
2018-12-17T22:06:50.214218909Z 64 PC: 13fd8 | Write file or device (Write 5712 bytes on handle 5)
2018-12-17T22:06:50.225274883Z 62 PC: 13f55 | Close file
2018-12-17T22:06:50.232616214Z 61 PC: 13f05 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:06:50.238642423Z 87 PC: 1354f | Get or set file date and time
2018-12-17T22:06:50.240913411Z 62 PC: 13f55 | Close file
2018-12-17T22:06:50.244895396Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:50.251475618Z 14 PC: 141ad | Set default drive (Drive = 'C')
2018-12-17T22:06:50.253459547Z 25 PC: 141b1 | Get default drive
2018-12-17T22:06:50.254358327Z 59 PC: 1421b | Change current directory
2018-12-17T22:06:50.258084799Z 26 PC: 1357f | Set disk transfer address
2018-12-17T22:06:50.259361667Z 78 PC: 1358b | Find first file
2018-12-17T22:06:50.263602242Z 67 PC: 134e1 | Get or set file attributes
2018-12-17T22:06:50.268071203Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:50.274459225Z 61 PC: 13f05 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:06:50.279530258Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:50.28132233Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:50.282482948Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:50.283582632Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:50.285303194Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:50.286548062Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:50.287917876Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:50.290037367Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:50.291663504Z 63 PC: 13fd8 | Read file or device (Read 5712 bytes on handle 5)
2018-12-17T22:06:50.300001518Z 62 PC: 13f55 | Close file
2018-12-17T22:06:50.301862719Z 61 PC: 13f05 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:06:50.308615848Z 87 PC: 1354f | Get or set file date and time
2018-12-17T22:06:50.310834091Z 62 PC: 13f55 | Close file
2018-12-17T22:06:50.316767916Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:50.326009079Z 26 PC: 135a3 | Set disk transfer address
2018-12-17T22:06:50.327558288Z 79 PC: 135a8 | Find next file
2018-12-17T22:06:50.329925775Z 67 PC: 134e1 | Get or set file attributes
2018-12-17T22:06:50.333683305Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:50.340482699Z 61 PC: 13f05 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:06:50.345182301Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:50.347637534Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:50.349270581Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:50.350624461Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:50.351781062Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:50.353348364Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:50.354470855Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:50.356287855Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:50.357735314Z 63 PC: 13fd8 | Read file or device (Read 5712 bytes on handle 5)
2018-12-17T22:06:50.36241978Z 62 PC: 13f55 | Close file
2018-12-17T22:06:50.364448592Z 61 PC: 13f05 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:06:50.371322269Z 87 PC: 1354f | Get or set file date and time
2018-12-17T22:06:50.373159666Z 62 PC: 13f55 | Close file
2018-12-17T22:06:50.379834884Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:50.389492671Z 26 PC: 135a3 | Set disk transfer address
2018-12-17T22:06:50.391988983Z 79 PC: 135a8 | Find next file
2018-12-17T22:06:50.395812333Z 67 PC: 134e1 | Get or set file attributes
2018-12-17T22:06:50.401620476Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:50.414266402Z 61 PC: 13f05 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:06:50.421742302Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:50.423483468Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:50.425818932Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:50.427302548Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:50.428881806Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:50.430905696Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:50.432512392Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:50.434400627Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:50.436958959Z 63 PC: 13fd8 | Read file or device (Read 5712 bytes on handle 5)
2018-12-17T22:06:50.444083491Z 62 PC: 13f55 | Close file
2018-12-17T22:06:50.44605935Z 61 PC: 13f05 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:06:50.452552902Z 87 PC: 1354f | Get or set file date and time
2018-12-17T22:06:50.454565016Z 62 PC: 13f55 | Close file
2018-12-17T22:06:50.460780382Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:50.466908855Z 26 PC: 135a3 | Set disk transfer address
2018-12-17T22:06:50.467869744Z 79 PC: 135a8 | Find next file
2018-12-17T22:06:50.47063042Z 67 PC: 134e1 | Get or set file attributes
2018-12-17T22:06:50.474329891Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:50.480069712Z 61 PC: 13f05 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:06:50.485604545Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:50.486732368Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:50.48887207Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:50.490158998Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:50.491060868Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:50.492661106Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:50.493656815Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:50.494696051Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:50.496491787Z 63 PC: 13fd8 | Read file or device (Read 5712 bytes on handle 5)
2018-12-17T22:06:50.503659695Z 66 PC: 14037 | Move file pointer
2018-12-17T22:06:50.50489754Z 64 PC: 13fd8 | Write file or device (Write 5712 bytes on handle 5)
2018-12-17T22:06:50.513229406Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:50.514666101Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:50.516455287Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:50.518968955Z 66 PC: 14037 | Move file pointer
2018-12-17T22:06:50.52036309Z 64 PC: 13fd8 | Write file or device (Write 5712 bytes on handle 5)
2018-12-17T22:06:50.529327616Z 62 PC: 13f55 | Close file
2018-12-17T22:06:50.538090964Z 61 PC: 13f05 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:06:50.544446237Z 87 PC: 1354f | Get or set file date and time
2018-12-17T22:06:50.547349288Z 62 PC: 13f55 | Close file
2018-12-17T22:06:50.553184716Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:50.563333982Z 14 PC: 141ad | Set default drive (Drive = 'C')
2018-12-17T22:06:50.564782248Z 25 PC: 141b1 | Get default drive
2018-12-17T22:06:50.565756579Z 59 PC: 1421b | Change current directory
2018-12-17T22:06:50.571233101Z 26 PC: 1357f | Set disk transfer address
2018-12-17T22:06:50.573132547Z 78 PC: 1358b | Find first file
2018-12-17T22:06:50.578960373Z 67 PC: 134e1 | Get or set file attributes
2018-12-17T22:06:50.584463667Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:50.594068192Z 61 PC: 13f05 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:06:50.600835105Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:50.602178783Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:50.603528158Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:50.604813076Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:50.606411265Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:50.607599954Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:50.608867294Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:50.611316628Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:50.612629655Z 63 PC: 13fd8 | Read file or device (Read 5712 bytes on handle 5)
2018-12-17T22:06:50.619830034Z 62 PC: 13f55 | Close file
2018-12-17T22:06:50.621872437Z 61 PC: 13f05 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:06:50.629672486Z 87 PC: 1354f | Get or set file date and time
2018-12-17T22:06:50.631141327Z 62 PC: 13f55 | Close file
2018-12-17T22:06:50.63750103Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:50.646893423Z 26 PC: 135a3 | Set disk transfer address
2018-12-17T22:06:50.648663581Z 79 PC: 135a8 | Find next file
2018-12-17T22:06:50.651793416Z 67 PC: 134e1 | Get or set file attributes
2018-12-17T22:06:50.657369078Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:50.666997448Z 61 PC: 13f05 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:06:50.67337274Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:50.674606235Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:50.678718392Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:50.68001265Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:50.681216747Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:50.68261791Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:50.683954566Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:50.686145383Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:50.687557064Z 63 PC: 13fd8 | Read file or device (Read 5712 bytes on handle 5)
2018-12-17T22:06:50.697576085Z 62 PC: 13f55 | Close file
2018-12-17T22:06:50.699790657Z 61 PC: 13f05 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:06:50.706174636Z 87 PC: 1354f | Get or set file date and time
2018-12-17T22:06:50.707590054Z 62 PC: 13f55 | Close file
2018-12-17T22:06:50.714086447Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:50.723006135Z 26 PC: 135a3 | Set disk transfer address
2018-12-17T22:06:50.724063244Z 79 PC: 135a8 | Find next file
2018-12-17T22:06:50.727849662Z 67 PC: 134e1 | Get or set file attributes
2018-12-17T22:06:50.733284282Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:50.74254769Z 61 PC: 13f05 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:06:50.748930058Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:50.75074149Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:50.752626334Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:50.75402775Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:50.755259841Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:50.756892153Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:50.758220973Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:50.760909041Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:50.762328971Z 63 PC: 13fd8 | Read file or device (Read 5712 bytes on handle 5)
2018-12-17T22:06:50.769193517Z 62 PC: 13f55 | Close file
2018-12-17T22:06:50.771195231Z 61 PC: 13f05 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:06:50.777412474Z 87 PC: 1354f | Get or set file date and time
2018-12-17T22:06:50.778704395Z 62 PC: 13f55 | Close file
2018-12-17T22:06:50.784985885Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:50.793793941Z 26 PC: 135a3 | Set disk transfer address
2018-12-17T22:06:50.797560387Z 79 PC: 135a8 | Find next file
2018-12-17T22:06:50.801206357Z 67 PC: 134e1 | Get or set file attributes
2018-12-17T22:06:50.807144612Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:50.817448338Z 61 PC: 13f05 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:06:50.82386502Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:50.825071301Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:50.826908809Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:50.828976187Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:50.830820372Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:50.832104311Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:50.833510442Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:50.836050387Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:50.837474855Z 63 PC: 13fd8 | Read file or device (Read 5712 bytes on handle 5)
2018-12-17T22:06:50.844633929Z 62 PC: 13f55 | Close file
2018-12-17T22:06:50.846667882Z 61 PC: 13f05 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:06:50.853003957Z 87 PC: 1354f | Get or set file date and time
2018-12-17T22:06:50.854459447Z 62 PC: 13f55 | Close file
2018-12-17T22:06:50.860526031Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:50.869719522Z 26 PC: 135a3 | Set disk transfer address
2018-12-17T22:06:50.871249778Z 79 PC: 135a8 | Find next file
2018-12-17T22:06:50.874378956Z 67 PC: 134e1 | Get or set file attributes
2018-12-17T22:06:50.880012944Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:50.8900222Z 61 PC: 13f05 | Open file (Filename = 'FDISK.EXE')
2018-12-17T22:06:50.897182786Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:50.898383397Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:50.900243171Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:50.9015689Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:50.903419703Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:50.904768991Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:50.906234114Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:50.908421062Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:50.909949706Z 63 PC: 13fd8 | Read file or device (Read 5712 bytes on handle 5)
2018-12-17T22:06:50.917038712Z 66 PC: 14037 | Move file pointer
2018-12-17T22:06:50.918491102Z 64 PC: 13fd8 | Write file or device (Write 5712 bytes on handle 5)
2018-12-17T22:06:50.925784805Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:50.927767003Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:50.929292968Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:50.930638994Z 66 PC: 14037 | Move file pointer
2018-12-17T22:06:50.933005469Z 64 PC: 13fd8 | Write file or device (Write 5712 bytes on handle 5)
2018-12-17T22:06:50.942429766Z 62 PC: 13f55 | Close file
2018-12-17T22:06:50.949750541Z 61 PC: 13f05 | Open file (Filename = 'FDISK.EXE')
2018-12-17T22:06:50.956472437Z 87 PC: 1354f | Get or set file date and time
2018-12-17T22:06:50.958294835Z 62 PC: 13f55 | Close file
2018-12-17T22:06:50.964837132Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:50.974427415Z 14 PC: 141ad | Set default drive (Drive = 'C')
2018-12-17T22:06:50.975870818Z 25 PC: 141b1 | Get default drive
2018-12-17T22:06:50.977872443Z 59 PC: 1421b | Change current directory
2018-12-17T22:06:50.983414855Z 26 PC: 1357f | Set disk transfer address
2018-12-17T22:06:50.984296545Z 78 PC: 1358b | Find first file
2018-12-17T22:06:50.99064704Z 67 PC: 134e1 | Get or set file attributes
2018-12-17T22:06:50.996243114Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:51.005805147Z 61 PC: 13f05 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:06:51.021627007Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:51.02282304Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:51.025279127Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:51.026564444Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:51.027747477Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:51.029704229Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:51.030983455Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:51.033606791Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:51.034971194Z 63 PC: 13fd8 | Read file or device (Read 5712 bytes on handle 5)
2018-12-17T22:06:51.042139566Z 62 PC: 13f55 | Close file
2018-12-17T22:06:51.044597286Z 61 PC: 13f05 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:06:51.051069492Z 87 PC: 1354f | Get or set file date and time
2018-12-17T22:06:51.05246956Z 62 PC: 13f55 | Close file
2018-12-17T22:06:51.058478588Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:51.067657045Z 26 PC: 135a3 | Set disk transfer address
2018-12-17T22:06:51.069401141Z 79 PC: 135a8 | Find next file
2018-12-17T22:06:51.073207624Z 67 PC: 134e1 | Get or set file attributes
2018-12-17T22:06:51.076712608Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:51.083015399Z 61 PC: 13f05 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:06:51.087143879Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:51.08837607Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:51.089928327Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:51.091275599Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:51.093165634Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:51.094565604Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:51.095516233Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:51.097535453Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:51.098545209Z 63 PC: 13fd8 | Read file or device (Read 5712 bytes on handle 5)
2018-12-17T22:06:51.103076068Z 62 PC: 13f55 | Close file
2018-12-17T22:06:51.105237735Z 61 PC: 13f05 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:06:51.109202016Z 87 PC: 1354f | Get or set file date and time
2018-12-17T22:06:51.11038187Z 62 PC: 13f55 | Close file
2018-12-17T22:06:51.114413135Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:51.120759246Z 26 PC: 135a3 | Set disk transfer address
2018-12-17T22:06:51.122496123Z 79 PC: 135a8 | Find next file
2018-12-17T22:06:51.125773092Z 67 PC: 134e1 | Get or set file attributes
2018-12-17T22:06:51.131327713Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:51.140924734Z 61 PC: 13f05 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:06:51.147497643Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:51.148888079Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:51.150449794Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:51.151995192Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:51.15378948Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:51.15525913Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:51.157793656Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:51.159644777Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:51.161042831Z 63 PC: 13fd8 | Read file or device (Read 5712 bytes on handle 5)
2018-12-17T22:06:51.169609747Z 62 PC: 13f55 | Close file
2018-12-17T22:06:51.171183886Z 61 PC: 13f05 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:06:51.177605802Z 87 PC: 1354f | Get or set file date and time
2018-12-17T22:06:51.179656941Z 62 PC: 13f55 | Close file
2018-12-17T22:06:51.18538527Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:51.195104544Z 26 PC: 135a3 | Set disk transfer address
2018-12-17T22:06:51.196031572Z 79 PC: 135a8 | Find next file
2018-12-17T22:06:51.199231769Z 67 PC: 134e1 | Get or set file attributes
2018-12-17T22:06:51.20548669Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:51.214892544Z 61 PC: 13f05 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:06:51.222532677Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:51.224095648Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:51.22571477Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:51.227850244Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:51.229793818Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:51.231551357Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:51.232930923Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:51.234474144Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:51.236163996Z 63 PC: 13fd8 | Read file or device (Read 5712 bytes on handle 5)
2018-12-17T22:06:51.24365729Z 62 PC: 13f55 | Close file
2018-12-17T22:06:51.246765687Z 61 PC: 13f05 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:06:51.253331038Z 87 PC: 1354f | Get or set file date and time
2018-12-17T22:06:51.254831094Z 62 PC: 13f55 | Close file
2018-12-17T22:06:51.262102777Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:51.271554033Z 26 PC: 135a3 | Set disk transfer address
2018-12-17T22:06:51.27361622Z 79 PC: 135a8 | Find next file
2018-12-17T22:06:51.283053874Z 67 PC: 134e1 | Get or set file attributes
2018-12-17T22:06:51.289205197Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:51.299789377Z 61 PC: 13f05 | Open file (Filename = 'FDISK.EXE')
2018-12-17T22:06:51.306292199Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:51.308299796Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:51.309948334Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:51.31147641Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:51.313665403Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:51.3150359Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:51.316628365Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:51.31819945Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:51.319647957Z 63 PC: 13fd8 | Read file or device (Read 5712 bytes on handle 5)
2018-12-17T22:06:51.328028827Z 62 PC: 13f55 | Close file
2018-12-17T22:06:51.329744064Z 61 PC: 13f05 | Open file (Filename = 'FDISK.EXE')
2018-12-17T22:06:51.336787534Z 87 PC: 1354f | Get or set file date and time
2018-12-17T22:06:51.338496495Z 62 PC: 13f55 | Close file
2018-12-17T22:06:51.345310929Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:51.357413433Z 26 PC: 135a3 | Set disk transfer address
2018-12-17T22:06:51.359175658Z 79 PC: 135a8 | Find next file
2018-12-17T22:06:51.363143898Z 67 PC: 134e1 | Get or set file attributes
2018-12-17T22:06:51.37092171Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:51.379970066Z 61 PC: 13f05 | Open file (Filename = 'MEM.EXE')
2018-12-17T22:06:51.387556858Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:51.38963548Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:51.391282418Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:51.394034712Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:51.395721603Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:51.39754157Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:51.399605572Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:51.401553857Z 87 PC: 13522 | Get or set file date and time
2018-12-17T22:06:51.40420081Z 63 PC: 13fd8 | Read file or device (Read 5712 bytes on handle 5)
2018-12-17T22:06:51.411926283Z 66 PC: 14037 | Move file pointer
2018-12-17T22:06:51.413304626Z 64 PC: 13fd8 | Write file or device (Write 5712 bytes on handle 5)
2018-12-17T22:06:51.42164371Z 66 PC: 14738 | Move file pointer
2018-12-17T22:06:51.423111961Z 66 PC: 14746 | Move file pointer
2018-12-17T22:06:51.426695561Z 66 PC: 14754 | Move file pointer
2018-12-17T22:06:51.428066277Z 66 PC: 14037 | Move file pointer
2018-12-17T22:06:51.429483024Z 64 PC: 13fd8 | Write file or device (Write 5712 bytes on handle 5)
2018-12-17T22:06:51.440529926Z 62 PC: 13f55 | Close file
2018-12-17T22:06:51.446250462Z 61 PC: 13f05 | Open file (Filename = 'MEM.EXE')
2018-12-17T22:06:51.45330906Z 87 PC: 1354f | Get or set file date and time
2018-12-17T22:06:51.455012792Z 62 PC: 13f55 | Close file
2018-12-17T22:06:51.461224795Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:51.471233039Z 48 PC: 140c7 | Get DOS version
2018-12-17T22:06:51.473288474Z 67 PC: 13508 | Get or set file attributes
2018-12-17T22:06:51.484365043Z 14 PC: 141ad | Set default drive (Drive = 'A')
2018-12-17T22:06:51.485871946Z 25 PC: 141b1 | Get default drive
2018-12-17T22:06:51.487442749Z 59 PC: 1421b | Change current directory
2018-12-17T22:06:51.492186142Z 64 PC: 13c5d | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:06:51.493837419Z 37 PC: 139f1 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:06:51.49483182Z 37 PC: 139f1 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:06:51.496680096Z 37 PC: 139f1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:06:51.497678844Z 37 PC: 139f1 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:06:51.499876222Z 37 PC: 139f1 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:06:51.501045111Z 37 PC: 139f1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:06:51.502179504Z 37 PC: 139f1 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:06:51.50391968Z 37 PC: 139f1 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:06:51.505029348Z 37 PC: 139f1 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:06:51.506433433Z 37 PC: 139f1 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:06:51.507709462Z 37 PC: 139f1 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:06:51.508943059Z 37 PC: 139f1 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:06:51.511404641Z 37 PC: 139f1 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:06:51.512769821Z 37 PC: 139f1 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:06:51.514656215Z 37 PC: 139f1 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:06:51.515717908Z 37 PC: 139f1 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:06:51.516718485Z 37 PC: 139f1 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:06:51.518186453Z 37 PC: 139f1 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:06:51.519416831Z 37 PC: 139f1 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:06:51.521131513Z 76 PC: 13a30 | Terminate with return code (Return code = '0')