Sample viewer

vx.netlux.org/Virus.DOS.Tanya.2000.c

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:15:27.420102696Z 42 PC: 13288 | Get date 0x13288: cmp dx, 0xc01
0x1328c: je 0x13290
0x1328e: jmp 0x1329d
0x13290: mov ah, 9
0x13292: lea dx, word ptr [bx + 0x67c]
0x13296: int 0x21
0x13298: mov ax, 0x4c00
0x1329b: int 0x21
0x1329d: cmp dh, 0xb
0x132a0: jne 0x132ae
0x132a2: cmp al, 3
0x132a4: jne 0x132ae
0x132a6: mov ah, 9
0x132a8: lea dx, word ptr [bx + 0x6e6]
0x132ac: int 0x21
0x132ae: popaw
0x132af: ret
0x132b0: or ax, 0x70a
0x132b3: xchg ax, cx
0x132b4: movsw word ptr es:[di], word ptr [si]
2018-12-17T23:15:27.422946826Z 53 PC: 12d09 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:15:27.424052076Z 37 PC: 12d1f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:15:27.425240487Z 26 PC: 12d29 | Set disk transfer address
2018-12-17T23:15:27.427393058Z 78 PC: 131eb | Find first file
2018-12-17T23:15:27.437355585Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:27.443287378Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:28.619655267Z 61 PC: 12e47 | Open file (Filename = 'C:\DOS\EDIT.COM')
2018-12-17T23:15:28.628236327Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:28.63000603Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:28.63288156Z 63 PC: 130d5 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T23:15:28.640159352Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:28.643402672Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:28.645144495Z 64 PC: 130d5 | Write file or device (Write 2000 bytes on handle 5)
2018-12-17T23:15:28.68248187Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:28.684436782Z 64 PC: 130d5 | Write file or device (Write 5 bytes on handle 5)
2018-12-17T23:15:28.69038559Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:28.692887584Z 62 PC: 130d5 | Close file
2018-12-17T23:15:28.712367258Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:28.72853677Z 79 PC: 131fa | Find next file
2018-12-17T23:15:28.732933224Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:28.743976691Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:28.759207517Z 61 PC: 12e47 | Open file (Filename = 'C:\DOS\FORMAT.COM')
2018-12-17T23:15:28.766700158Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:28.769817173Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:28.787529008Z 63 PC: 130d5 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T23:15:28.793453464Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:28.797411817Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:28.799259549Z 64 PC: 130d5 | Write file or device (Write 2000 bytes on handle 5)
2018-12-17T23:15:28.812405571Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:28.814949224Z 64 PC: 130d5 | Write file or device (Write 5 bytes on handle 5)
2018-12-17T23:15:28.817911837Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:28.819458731Z 62 PC: 130d5 | Close file
2018-12-17T23:15:28.856892814Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:28.876481937Z 79 PC: 131fa | Find next file
2018-12-17T23:15:28.880337955Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:28.890585112Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:28.915726075Z 61 PC: 12e47 | Open file (Filename = 'C:\DOS\KEYB.COM')
2018-12-17T23:15:28.927349355Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:28.92971407Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:28.932888601Z 63 PC: 130d5 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T23:15:28.956003145Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:28.958763062Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:28.960397463Z 64 PC: 130d5 | Write file or device (Write 2000 bytes on handle 5)
2018-12-17T23:15:28.984379934Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:28.986757957Z 64 PC: 130d5 | Write file or device (Write 5 bytes on handle 5)
2018-12-17T23:15:28.989328923Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:28.990736455Z 62 PC: 130d5 | Close file
2018-12-17T23:15:29.046467296Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:29.071900754Z 79 PC: 131fa | Find next file
2018-12-17T23:15:29.092329865Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:29.099268531Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:29.147416421Z 61 PC: 12e47 | Open file (Filename = 'C:\DOS\SYS.COM')
2018-12-17T23:15:29.154377452Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:29.156102776Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:29.158108025Z 63 PC: 130d5 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T23:15:29.172013876Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:29.17609785Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:29.17812233Z 64 PC: 130d5 | Write file or device (Write 2000 bytes on handle 5)
2018-12-17T23:15:29.214179258Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:29.216308336Z 64 PC: 130d5 | Write file or device (Write 5 bytes on handle 5)
2018-12-17T23:15:29.219300874Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:29.220649405Z 62 PC: 130d5 | Close file
2018-12-17T23:15:29.27195406Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:29.311075703Z 79 PC: 131fa | Find next file
2018-12-17T23:15:29.328043602Z 78 PC: 13214 | Find first file
2018-12-17T23:15:29.335460134Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:29.342320652Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:29.390531681Z 61 PC: 12e47 | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T23:15:29.400475446Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:29.402667901Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:29.404847141Z 63 PC: 130d5 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T23:15:29.411191345Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:29.415158458Z 63 PC: 130d5 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:15:29.42018061Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:29.422132488Z 64 PC: 130d5 | Write file or device (Write 2000 bytes on handle 5)
2018-12-17T23:15:29.494724478Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:29.496550814Z 64 PC: 130d5 | Write file or device (Write 24 bytes on handle 5)
2018-12-17T23:15:29.499798948Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:29.502465345Z 62 PC: 130d5 | Close file
2018-12-17T23:15:29.565990838Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:29.628999151Z 79 PC: 13223 | Find next file
2018-12-17T23:15:29.632589571Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:29.636915107Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:29.702991248Z 61 PC: 12e47 | Open file (Filename = 'C:\DOS\CHKDSK.EXE')
2018-12-17T23:15:29.711187514Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:29.712827427Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:29.71414002Z 63 PC: 130d5 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T23:15:29.727036678Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:29.730483519Z 63 PC: 130d5 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:15:29.736024287Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:29.740035937Z 64 PC: 130d5 | Write file or device (Write 2000 bytes on handle 5)
2018-12-17T23:15:29.809652247Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:29.811248067Z 64 PC: 130d5 | Write file or device (Write 24 bytes on handle 5)
2018-12-17T23:15:29.815252759Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:29.817431014Z 62 PC: 130d5 | Close file
2018-12-17T23:15:29.889651103Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:29.957981454Z 79 PC: 13223 | Find next file
2018-12-17T23:15:29.961153471Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:29.967203334Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:30.022598972Z 61 PC: 12e47 | Open file (Filename = 'C:\DOS\DEBUG.EXE')
2018-12-17T23:15:30.029652061Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:30.03122304Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:30.033054171Z 63 PC: 130d5 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T23:15:30.038891147Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:30.040714797Z 63 PC: 130d5 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:15:30.045148526Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:30.047343675Z 64 PC: 130d5 | Write file or device (Write 2000 bytes on handle 5)
2018-12-17T23:15:30.12539805Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:30.128718507Z 64 PC: 130d5 | Write file or device (Write 24 bytes on handle 5)
2018-12-17T23:15:30.132859158Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:30.135426696Z 62 PC: 130d5 | Close file
2018-12-17T23:15:30.209023127Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:30.291647296Z 79 PC: 13223 | Find next file
2018-12-17T23:15:30.295060439Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:30.30120699Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:30.41463009Z 61 PC: 12e47 | Open file (Filename = 'C:\DOS\EXPAND.EXE')
2018-12-17T23:15:30.421782942Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:30.423499761Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:30.425776832Z 63 PC: 130d5 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T23:15:30.43595859Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:30.437634681Z 63 PC: 130d5 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:15:30.454520316Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:30.455932987Z 64 PC: 130d5 | Write file or device (Write 2000 bytes on handle 5)
2018-12-17T23:15:30.556318907Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:30.559027216Z 64 PC: 130d5 | Write file or device (Write 24 bytes on handle 5)
2018-12-17T23:15:30.562094049Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:30.564713078Z 62 PC: 130d5 | Close file
2018-12-17T23:15:30.702851929Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:30.817833201Z 79 PC: 13223 | Find next file
2018-12-17T23:15:30.821429832Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:30.829037297Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:30.966599146Z 61 PC: 12e47 | Open file (Filename = 'C:\DOS\FDISK.EXE')
2018-12-17T23:15:30.973906488Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:30.976924877Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:30.978661572Z 63 PC: 130d5 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T23:15:30.985427177Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:30.988107463Z 63 PC: 130d5 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:15:30.992257404Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:30.994009834Z 64 PC: 130d5 | Write file or device (Write 2000 bytes on handle 5)
2018-12-17T23:15:31.130290137Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:31.132543756Z 64 PC: 130d5 | Write file or device (Write 24 bytes on handle 5)
2018-12-17T23:15:31.136017871Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:31.138806175Z 62 PC: 130d5 | Close file
2018-12-17T23:15:31.298042392Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:31.397423841Z 79 PC: 13223 | Find next file
2018-12-17T23:15:31.401765186Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:31.408390921Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:31.594919025Z 61 PC: 12e47 | Open file (Filename = 'C:\DOS\MEM.EXE')
2018-12-17T23:15:31.601999604Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:31.604615058Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:31.606301434Z 63 PC: 130d5 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T23:15:31.613425048Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:31.616352517Z 64 PC: 130d5 | Write file or device (Write 2000 bytes on handle 5)
2018-12-17T23:15:31.72728158Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:31.729139639Z 64 PC: 130d5 | Write file or device (Write 24 bytes on handle 5)
2018-12-17T23:15:31.733554652Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:31.735441199Z 62 PC: 130d5 | Close file
2018-12-17T23:15:31.846763345Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:31.956614134Z 79 PC: 13223 | Find next file
2018-12-17T23:15:31.96428342Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:31.970736102Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:32.149288595Z 61 PC: 12e47 | Open file (Filename = 'C:\DOS\NLSFUNC.EXE')
2018-12-17T23:15:32.156981868Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:32.15907492Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:32.16246663Z 63 PC: 130d5 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T23:15:32.190037999Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:32.191668045Z 64 PC: 130d5 | Write file or device (Write 2000 bytes on handle 5)
2018-12-17T23:15:32.364792713Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:32.366692906Z 64 PC: 130d5 | Write file or device (Write 24 bytes on handle 5)
2018-12-17T23:15:32.370362761Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:32.373101776Z 62 PC: 130d5 | Close file
2018-12-17T23:15:32.514421256Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:32.631029986Z 79 PC: 13223 | Find next file
2018-12-17T23:15:32.635999891Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:32.643503885Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:32.751279277Z 61 PC: 12e47 | Open file (Filename = 'C:\DOS\QBASIC.EXE')
2018-12-17T23:15:32.759594913Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:32.761559287Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:32.763287687Z 63 PC: 130d5 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T23:15:32.782773028Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:32.784347827Z 63 PC: 130d5 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:15:32.787883979Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:32.790418468Z 64 PC: 130d5 | Write file or device (Write 2000 bytes on handle 5)
2018-12-17T23:15:32.894223738Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:32.895981904Z 64 PC: 130d5 | Write file or device (Write 24 bytes on handle 5)
2018-12-17T23:15:32.904707375Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:32.906302383Z 62 PC: 130d5 | Close file
2018-12-17T23:15:33.078701918Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:33.203077425Z 79 PC: 13223 | Find next file
2018-12-17T23:15:33.206544536Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:33.213219247Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:33.360121937Z 61 PC: 12e47 | Open file (Filename = 'C:\DOS\REPLACE.EXE')
2018-12-17T23:15:33.367145313Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:33.368378771Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:33.370909309Z 63 PC: 130d5 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T23:15:33.38010629Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:33.382058683Z 64 PC: 130d5 | Write file or device (Write 2000 bytes on handle 5)
2018-12-17T23:15:33.484598966Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:33.48738841Z 64 PC: 130d5 | Write file or device (Write 24 bytes on handle 5)
2018-12-17T23:15:33.490637146Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:33.49329442Z 62 PC: 130d5 | Close file
2018-12-17T23:15:33.593094109Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:33.77993442Z 79 PC: 13223 | Find next file
2018-12-17T23:15:33.784425068Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:33.790863788Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:33.914775223Z 61 PC: 12e47 | Open file (Filename = 'C:\DOS\RESTORE.EXE')
2018-12-17T23:15:33.923055321Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:33.925083586Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:33.927632174Z 63 PC: 130d5 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T23:15:33.937420848Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:33.939989203Z 64 PC: 130d5 | Write file or device (Write 2000 bytes on handle 5)
2018-12-17T23:15:34.09037831Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:34.093454502Z 64 PC: 130d5 | Write file or device (Write 24 bytes on handle 5)
2018-12-17T23:15:34.097323853Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:34.099367452Z 62 PC: 130d5 | Close file
2018-12-17T23:15:34.274396182Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:34.375372945Z 79 PC: 13223 | Find next file
2018-12-17T23:15:34.378693929Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:34.386336723Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:34.585412841Z 61 PC: 12e47 | Open file (Filename = 'C:\DOS\SCANDISK.EXE')
2018-12-17T23:15:34.592227327Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:34.594178576Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:34.595850493Z 63 PC: 130d5 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T23:15:34.601435739Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:34.604101848Z 62 PC: 130d5 | Close file
2018-12-17T23:15:34.782749179Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:34.907155023Z 79 PC: 13223 | Find next file
2018-12-17T23:15:34.910966498Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:34.91750464Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:35.053298282Z 61 PC: 12e47 | Open file (Filename = 'C:\DOS\SETUP.EXE')
2018-12-17T23:15:35.061442196Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:35.062896202Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:35.064298089Z 63 PC: 130d5 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T23:15:35.071215174Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:35.072735404Z 63 PC: 130d5 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:15:35.075984817Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:35.081543708Z 64 PC: 130d5 | Write file or device (Write 2000 bytes on handle 5)
2018-12-17T23:15:35.185898039Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:35.188031259Z 64 PC: 130d5 | Write file or device (Write 24 bytes on handle 5)
2018-12-17T23:15:35.192248361Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:35.194169825Z 62 PC: 130d5 | Close file
2018-12-17T23:15:35.388639529Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:35.513504891Z 79 PC: 13223 | Find next file
2018-12-17T23:15:35.516984363Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:35.523407831Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:35.714795643Z 61 PC: 12e47 | Open file (Filename = 'C:\DOS\XCOPY.EXE')
2018-12-17T23:15:35.722659768Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:35.724785566Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:35.727292452Z 63 PC: 130d5 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T23:15:35.737814768Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:35.740354694Z 64 PC: 130d5 | Write file or device (Write 2000 bytes on handle 5)
2018-12-17T23:15:35.919437365Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:35.921199998Z 64 PC: 130d5 | Write file or device (Write 24 bytes on handle 5)
2018-12-17T23:15:35.928672053Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:35.931041141Z 62 PC: 130d5 | Close file
2018-12-17T23:15:35.962215337Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:35.977360864Z 79 PC: 13223 | Find next file
2018-12-17T23:15:35.981382586Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:35.990674675Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:36.00287628Z 61 PC: 12e47 | Open file (Filename = 'C:\DOS\DEFRAG.EXE')
2018-12-17T23:15:36.010736646Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:36.012574827Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:36.015109126Z 63 PC: 130d5 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T23:15:36.024968088Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:36.027216973Z 63 PC: 130d5 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:15:36.033300646Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:36.034878726Z 62 PC: 130d5 | Close file
2018-12-17T23:15:36.049248973Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:36.065293162Z 79 PC: 13223 | Find next file
2018-12-17T23:15:36.071530424Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:36.07759455Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:36.10446427Z 61 PC: 12e47 | Open file (Filename = 'C:\DOS\EMM386.EXE')
2018-12-17T23:15:36.10940578Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:36.111095666Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:36.113271123Z 63 PC: 130d5 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T23:15:36.116943992Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:36.118078135Z 63 PC: 130d5 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:15:36.124206229Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:36.125483262Z 64 PC: 130d5 | Write file or device (Write 2000 bytes on handle 5)
2018-12-17T23:15:36.158026798Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:36.160477592Z 64 PC: 130d5 | Write file or device (Write 24 bytes on handle 5)
2018-12-17T23:15:36.162491872Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:36.163787717Z 62 PC: 130d5 | Close file
2018-12-17T23:15:36.220395362Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:36.25093317Z 79 PC: 13223 | Find next file
2018-12-17T23:15:36.25457251Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:36.261405643Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:36.282152628Z 61 PC: 12e47 | Open file (Filename = 'C:\DOS\MSCDEX.EXE')
2018-12-17T23:15:36.290584916Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:36.292813241Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:36.294583498Z 63 PC: 130d5 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T23:15:36.302922152Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:36.304588323Z 64 PC: 130d5 | Write file or device (Write 2000 bytes on handle 5)
2018-12-17T23:15:36.329885222Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:36.332487756Z 64 PC: 130d5 | Write file or device (Write 24 bytes on handle 5)
2018-12-17T23:15:36.336034623Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:36.337858043Z 62 PC: 130d5 | Close file
2018-12-17T23:15:36.418141965Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:36.476606308Z 79 PC: 13223 | Find next file
2018-12-17T23:15:36.4799604Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:36.486587723Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:36.550662522Z 61 PC: 12e47 | Open file (Filename = 'C:\COMMAND.COM')
2018-12-17T23:15:36.556934814Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:36.558832741Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:36.560110864Z 63 PC: 130d5 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T23:15:36.566292711Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:36.569288382Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:36.570676338Z 64 PC: 130d5 | Write file or device (Write 2000 bytes on handle 5)
2018-12-17T23:15:36.614963338Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:36.616482783Z 64 PC: 130d5 | Write file or device (Write 5 bytes on handle 5)
2018-12-17T23:15:36.618313437Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:36.619866353Z 62 PC: 130d5 | Close file
2018-12-17T23:15:36.697721907Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:36.742424658Z 78 PC: 131eb | Find first file
2018-12-17T23:15:36.752915532Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:36.758855053Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:37.788468258Z 61 PC: 12e47 | Open file (Filename = '.\SLEEP.COM')
2018-12-17T23:15:37.79663574Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:37.798348231Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:37.800022693Z 63 PC: 130d5 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T23:15:37.827437485Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:37.830502879Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:37.831619122Z 64 PC: 130d5 | Write file or device (Write 2000 bytes on handle 5)
2018-12-17T23:15:37.943134883Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:37.944448404Z 64 PC: 130d5 | Write file or device (Write 5 bytes on handle 5)
2018-12-17T23:15:37.949383978Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:37.95078638Z 62 PC: 130d5 | Close file
2018-12-17T23:15:38.056663987Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:38.587171999Z 79 PC: 131fa | Find next file
2018-12-17T23:15:38.590024016Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:38.596177103Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:38.793320366Z 61 PC: 12e47 | Open file (Filename = '.\PRINT.COM')
2018-12-17T23:15:38.800454527Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:38.802216047Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:38.804352007Z 63 PC: 130d5 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T23:15:38.811237963Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:38.814714545Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:38.816919421Z 64 PC: 130d5 | Write file or device (Write 2000 bytes on handle 5)
2018-12-17T23:15:39.361862877Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:39.363745236Z 64 PC: 130d5 | Write file or device (Write 5 bytes on handle 5)
2018-12-17T23:15:39.371520329Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:39.373293046Z 62 PC: 130d5 | Close file
2018-12-17T23:15:39.599428075Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:39.650253072Z 79 PC: 131fa | Find next file
2018-12-17T23:15:39.652811298Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:39.657456019Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:39.723245987Z 61 PC: 12e47 | Open file (Filename = '.\HELLO.COM')
2018-12-17T23:15:39.730165899Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:39.732179881Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:39.734340387Z 63 PC: 130d5 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T23:15:39.75158779Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:39.755005785Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:39.756643672Z 64 PC: 130d5 | Write file or device (Write 2000 bytes on handle 5)
2018-12-17T23:15:39.830764875Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:39.832693782Z 64 PC: 130d5 | Write file or device (Write 5 bytes on handle 5)
2018-12-17T23:15:39.842217842Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:39.84431877Z 62 PC: 130d5 | Close file
2018-12-17T23:15:39.909847173Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:39.937532591Z 79 PC: 131fa | Find next file
2018-12-17T23:15:39.941813644Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:39.965962952Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:39.982995379Z 61 PC: 12e47 | Open file (Filename = '.\PHANG.COM')
2018-12-17T23:15:39.992260921Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:39.99946972Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:40.001395919Z 63 PC: 130d5 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T23:15:40.022739318Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:40.025990989Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:40.027648626Z 64 PC: 130d5 | Write file or device (Write 2000 bytes on handle 5)
2018-12-17T23:15:40.046368264Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:40.048232815Z 64 PC: 130d5 | Write file or device (Write 5 bytes on handle 5)
2018-12-17T23:15:40.055301011Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:40.058929812Z 62 PC: 130d5 | Close file
2018-12-17T23:15:40.083680336Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:40.168057977Z 79 PC: 131fa | Find next file
2018-12-17T23:15:40.171704495Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:40.178061457Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:40.219431633Z 61 PC: 12e47 | Open file (Filename = '.\PRINTA~1.COM')
2018-12-17T23:15:40.22515945Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:40.226696986Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:40.229430536Z 63 PC: 130d5 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T23:15:40.235549999Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:40.239203151Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:40.241357518Z 64 PC: 130d5 | Write file or device (Write 2000 bytes on handle 5)
2018-12-17T23:15:40.277582088Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:40.278872818Z 64 PC: 130d5 | Write file or device (Write 5 bytes on handle 5)
2018-12-17T23:15:40.285246624Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:40.287153051Z 62 PC: 130d5 | Close file
2018-12-17T23:15:40.346189341Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:40.41981151Z 79 PC: 131fa | Find next file
2018-12-17T23:15:40.422712212Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:40.438569678Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:40.498455863Z 61 PC: 12e47 | Open file (Filename = '.\MANDEL.COM')
2018-12-17T23:15:40.505415934Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:40.508081876Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:40.509582113Z 63 PC: 130d5 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T23:15:40.524527601Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:40.528358474Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:40.52987065Z 64 PC: 130d5 | Write file or device (Write 2000 bytes on handle 5)
2018-12-17T23:15:40.624557751Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:40.627829212Z 64 PC: 130d5 | Write file or device (Write 5 bytes on handle 5)
2018-12-17T23:15:40.635577976Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:40.637725601Z 62 PC: 130d5 | Close file
2018-12-17T23:15:40.719725579Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:40.813073579Z 79 PC: 131fa | Find next file
2018-12-17T23:15:40.816158211Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:40.82325293Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:40.938286027Z 61 PC: 12e47 | Open file (Filename = '.\PAH.COM')
2018-12-17T23:15:40.945495605Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:40.948225305Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:40.949951049Z 63 PC: 130d5 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T23:15:40.964177945Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:40.967745046Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:40.969476327Z 64 PC: 130d5 | Write file or device (Write 2000 bytes on handle 5)
2018-12-17T23:15:41.10914283Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:41.111117772Z 64 PC: 130d5 | Write file or device (Write 5 bytes on handle 5)
2018-12-17T23:15:41.118261525Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:41.128196205Z 62 PC: 130d5 | Close file
2018-12-17T23:15:41.277323728Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:41.417287477Z 79 PC: 131fa | Find next file
2018-12-17T23:15:41.420974976Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:41.427226149Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:41.570892787Z 61 PC: 12e47 | Open file (Filename = '.\TEST.COM')
2018-12-17T23:15:41.578942012Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:41.580735255Z 66 PC: 130d5 | Move file pointer
2018-12-17T23:15:41.582662791Z 63 PC: 130d5 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T23:15:41.593694698Z 87 PC: 130d5 | Get or set file date and time
2018-12-17T23:15:41.602067974Z 62 PC: 130d5 | Close file
2018-12-17T23:15:41.699129169Z 67 PC: 130eb | Get or set file attributes
2018-12-17T23:15:41.910880588Z 79 PC: 131fa | Find next file
2018-12-17T23:15:41.913656503Z 78 PC: 13214 | Find first file
2018-12-17T23:15:41.92064347Z 26 PC: 12dba | Set disk transfer address
2018-12-17T23:15:41.92212781Z 37 PC: 12dcb | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:15:41.923665343Z 9 PC: 12a86 | Display string (String= 'Goat file (COM/i...). Size=000001F4h/0000000500d bytes. ')
2018-12-17T23:15:41.932396669Z 48 PC: 12a8f | Get DOS version
2018-12-17T23:15:41.940353011Z 61 PC: 12b5c | Open file (Filename = '')
2018-12-17T23:15:41.953694461Z 93 PC: 12afe | File sharing functions
2018-12-17T23:15:41.958202194Z 9 PC: 12a86 | Display string (String= 'Size change=07D0h/02000d. ')
2018-12-17T23:15:41.962417614Z 76 PC: 12ae3 | Terminate with return code (Return code = '1')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2120,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:44:58.48657643Z 42 PC: 13288 | Get date 0x13288: cmp dx, 0xc01
0x1328c: je 0x13290
0x1328e: jmp 0x1329d
0x13290: mov ah, 9
0x13292: lea dx, word ptr [bx + 0x67c]
0x13296: int 0x21
0x13298: mov ax, 0x4c00
0x1329b: int 0x21
0x1329d: cmp dh, 0xb
0x132a0: jne 0x132ae
0x132a2: cmp al, 3
0x132a4: jne 0x132ae
0x132a6: mov ah, 9
0x132a8: lea dx, word ptr [bx + 0x6e6]
0x132ac: int 0x21
0x132ae: popaw
0x132af: ret
0x132b0: or ax, 0x70a
0x132b3: xchg ax, cx
0x132b4: movsw word ptr es:[di], word ptr [si]
2018-12-25T11:44:58.48923862Z 53 PC: 12d09 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:44:58.490680616Z 37 PC: 12d1f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:44:58.491822073Z 26 PC: 12d29 | Set disk transfer address
2018-12-25T11:44:58.493435314Z 78 PC: 131eb | Find first file
2018-12-25T11:44:58.512716644Z 67 PC: 130eb | Get or set file attributes
2018-12-25T11:44:58.521436634Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.51827133Z 61 PC: 12e47 | Open file (Filename = 'C:\DOS\EDIT.COM')
2018-12-25T11:44:59.527437288Z 87 PC: 130d5 | Get or set file date and time
2018-12-25T11:44:59.528958448Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.530416673Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:44:59.537747066Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.54099856Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.542407884Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.55367025Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.555277447Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.561656469Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.564940819Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:44:59.573390312Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.584475525Z 79 PC: 131fa | Find next file
2018-12-25T11:44:59.588355802Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.596313774Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.606898189Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:44:59.614737134Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.617042635Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.618943618Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:44:59.626192625Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.630905078Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.6327808Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.642391965Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.645164114Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.648781322Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.650788844Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:44:59.660824471Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.672025395Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:44:59.67544759Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.683211038Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.693963234Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:44:59.702249178Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.704289493Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.706588152Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:44:59.713255365Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.716724573Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.719335014Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.731210236Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.733184732Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.736564284Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.738319927Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:44:59.746676278Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.758417204Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:44:59.765860952Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.773248223Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.78480842Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:44:59.793376499Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.794969723Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.796947256Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:44:59.80316314Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.806512869Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.808309433Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.818624856Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.820089715Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.823129919Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.825603303Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:44:59.833265714Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.844056139Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:44:59.851139854Z 78 PC: 13214 | Find first file
2018-12-25T11:44:59.859529881Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.866703435Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.878911485Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:44:59.886724731Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.888530006Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.890642036Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:44:59.897486691Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.898968557Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:44:59.903441439Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.90552327Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.919886459Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.921837388Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.926298519Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.928314502Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:44:59.93661498Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.948372989Z 79 PC: 13223 | Find next file
2018-12-25T11:44:59.952532221Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.958977252Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.970033235Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:44:59.977584536Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.97911409Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.981549616Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:44:59.988719901Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.990435042Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:44:59.994389103Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.997089503Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.00651269Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.008585733Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.013156732Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.015344665Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.023264176Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.034536932Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:00.037854771Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.044257122Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.051616497Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:00.060359365Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.061728344Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.063352527Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.074556462Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.076197056Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.079798739Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.082334163Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.09165433Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.093115494Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.100364316Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.10451139Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.109293097Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.118616771Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:00.122130325Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.128751824Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.139469446Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:00.14700604Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.14850133Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.15076121Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.157730089Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.159278838Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.163959095Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.166175211Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.175481293Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.177618647Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.181924013Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.18442372Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.191936732Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.201979694Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:00.205413426Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.212034606Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.223002868Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:00.227242435Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.22835161Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.230177996Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.233776838Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.235070796Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.237689272Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.238771794Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.244289859Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.245861816Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.248541211Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.249604967Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.254318688Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.260848088Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:00.264105905Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.270081078Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.279338861Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:00.287294311Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.289286064Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.291093932Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.299093637Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.300782458Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.310511364Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.3120447Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.315796254Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.31802122Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.326106866Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.338156395Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:00.345046391Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.351767489Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.363374371Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:00.371608494Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.374513849Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.377664899Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.386241084Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.38834067Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.39882901Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.400711036Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.404623511Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.407552475Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.415996489Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.426083808Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:00.429181007Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.433980696Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.445903558Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:00.452267418Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.454826629Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.45721055Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.465869968Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.467561085Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.475757132Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.477676686Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.487474405Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.489109543Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.494090341Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.495400185Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.50139205Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.509003727Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:00.519637073Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.52697223Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.538338702Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:00.547395343Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.54932976Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.551276546Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.560772375Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.56276442Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.571954212Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.574435618Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.577587829Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.580081937Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.589772095Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.739550368Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:00.742947297Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.749998438Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.884180678Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:00.892060073Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.89501012Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.896774609Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.905611054Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.907619435Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.947119899Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.948589743Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.952234755Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.953788082Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.014861976Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.073117026Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:01.076593956Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.083522413Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.09745289Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:01.105895889Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.107359629Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.10966903Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.116551161Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.125623592Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.223808139Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.291458575Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:01.295577897Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.304152817Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.315427033Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:01.324551207Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.327450791Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.331496585Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.337818907Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.340443342Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.34506052Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.347071093Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.357586678Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.359955313Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.363520124Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.366541505Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.374570787Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.385766295Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:01.390658377Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.399259757Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.410529762Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:01.419054135Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.422194608Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.424269464Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.432880585Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.436177979Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.445634786Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.447637744Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.452451542Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.454557777Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.463422591Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.475145069Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:01.479023653Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.487119676Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.499600553Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:01.50790801Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.510012652Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.512475132Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.518733314Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.520297053Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.523809563Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.525416439Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.532596916Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.546889327Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:01.553961225Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.561199226Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.66188799Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:01.669627791Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.671119801Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.673462026Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.681700267Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.683394124Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.693088363Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.694958707Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.868282365Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.870528706Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.873620845Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.875227496Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.901602645Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.912649601Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:01.916129511Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.925204708Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.936589879Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:01.944798368Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.948092788Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.949595352Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.957818869Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.959861884Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.970448088Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.972458768Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.975926509Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.97751257Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.985698635Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.99734805Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:02.001012387Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.008126411Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.01776448Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.024536817Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.026964381Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.028622205Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.035002921Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.039812649Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.041848479Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.051740689Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.054313918Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.058824392Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.060937951Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.070511158Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.082050761Z 78 PC: 131eb | Find first file (See above)
2018-12-25T11:45:02.094159197Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.102199362Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.119196329Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.127498191Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.129758264Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.131391637Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.138562625Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.142987639Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.144713702Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.155157628Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.157740297Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.165307378Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.167571769Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.177184573Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.188327711Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:02.191946373Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.200408944Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.211424622Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.219419535Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.222005243Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.224013175Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.231783234Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.235287157Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.236885403Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.247682894Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.249858712Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.257616892Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.261987533Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.271634659Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.284087561Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:02.288561162Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.294910809Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.318702717Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.32829704Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.330168169Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.331610267Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.343142368Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.346723875Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.348690248Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.35922208Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.361724712Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.369320785Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.372010705Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.381039431Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.392449283Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:02.396179539Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.402650438Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.41370019Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.422105655Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.423543135Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.425008738Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.433483572Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.437351396Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.439601367Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.450147472Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.452065947Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.461010081Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.462954521Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.471591569Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.483487374Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:02.486859231Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.493829625Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.50582098Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.519624949Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.521576717Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.524418194Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.532379669Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.536058186Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.539614264Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.549609196Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.551502305Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.560403003Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.562419889Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.57147752Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.584490019Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:02.587598634Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.594090582Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.605654567Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.613574488Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.61515683Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.616868358Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.624413585Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.627675065Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.62944328Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.639139535Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.645121415Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.653841074Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.65554399Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.664815465Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.676878951Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:02.679805275Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.687061969Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.698032488Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.711616748Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.714194856Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.715858376Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.723425264Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.728133398Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.73050209Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.740366619Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.743266532Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.751157981Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.75318412Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.763660492Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.775421778Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:02.779710882Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.78735003Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.80286997Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.810811935Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.813450776Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.815411169Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.823008352Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.825369005Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.833111515Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.845290779Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:02.848838429Z 78 PC: 13214 | Find first file (See above)
2018-12-25T11:45:02.85545038Z 26 PC: 12dba | Set disk transfer address
2018-12-25T11:45:02.857977241Z 37 PC: 12dcb | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:45:02.860120298Z 9 PC: 12a86 | Display string (String= 'Goat file (COM/i...). Size=000001F4h/0000000500d bytes. ')
2018-12-25T11:45:02.864267449Z 48 PC: 12a8f | Get DOS version
2018-12-25T11:45:02.865860682Z 61 PC: 12b5c | Open file (Filename = '')
2018-12-25T11:45:02.870395771Z 93 PC: 12afe | File sharing functions
2018-12-25T11:45:02.871813065Z 9 PC: 12a86 | Display string (See above)
2018-12-25T11:45:02.875078955Z 76 PC: 12ae3 | Terminate with return code (Return code = '1')

{"DateBased":true,"Day":1,"Month":11,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2120,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:44:58.569954828Z 42 PC: 13288 | Get date 0x13288: cmp dx, 0xc01
0x1328c: je 0x13290
0x1328e: jmp 0x1329d
0x13290: mov ah, 9
0x13292: lea dx, word ptr [bx + 0x67c]
0x13296: int 0x21
0x13298: mov ax, 0x4c00
0x1329b: int 0x21
0x1329d: cmp dh, 0xb
0x132a0: jne 0x132ae
0x132a2: cmp al, 3
0x132a4: jne 0x132ae
0x132a6: mov ah, 9
0x132a8: lea dx, word ptr [bx + 0x6e6]
0x132ac: int 0x21
0x132ae: popaw
0x132af: ret
0x132b0: or ax, 0x70a
0x132b3: xchg ax, cx
0x132b4: movsw word ptr es:[di], word ptr [si]
2018-12-25T11:44:58.572690584Z 53 PC: 12d09 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:44:58.573908932Z 37 PC: 12d1f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:44:58.575381774Z 26 PC: 12d29 | Set disk transfer address
2018-12-25T11:44:58.57747923Z 78 PC: 131eb | Find first file
2018-12-25T11:44:58.588554741Z 67 PC: 130eb | Get or set file attributes
2018-12-25T11:44:58.59526652Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.518083189Z 61 PC: 12e47 | Open file (Filename = 'C:\DOS\EDIT.COM')
2018-12-25T11:44:59.526032564Z 87 PC: 130d5 | Get or set file date and time
2018-12-25T11:44:59.527546351Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.529061103Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:44:59.535625154Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.538966326Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.540492192Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.555203821Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.557164115Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.564389396Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.56661615Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:44:59.574854767Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.587148584Z 79 PC: 131fa | Find next file
2018-12-25T11:44:59.592176321Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.599421913Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.610690551Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:44:59.629358891Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.632653626Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.634315859Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:44:59.641487118Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.645994968Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.648174278Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.658533388Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.665158492Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.668420524Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.67031334Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:44:59.679120605Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.691042914Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:44:59.694407742Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.701592649Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.714068251Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:44:59.722074426Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.724066618Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.725659724Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:44:59.734689307Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.738453369Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.740187214Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.750576851Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.752655363Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.756796356Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.758775123Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:44:59.766738963Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.778871444Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:44:59.786049282Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.793141775Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.804539151Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:44:59.812372422Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.813960601Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.816716367Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:44:59.822948769Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.826616131Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.829532164Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.839775556Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.84142556Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.845254119Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.846888311Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:44:59.854713558Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.86536222Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:44:59.872174946Z 78 PC: 13214 | Find first file
2018-12-25T11:44:59.879254645Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.885936514Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.896767123Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:44:59.905613234Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.907695701Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.910903029Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:44:59.917090509Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.918556537Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:44:59.922966233Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.924573181Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.937916674Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.940542659Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.943615951Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.945192135Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:44:59.953526874Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.960803308Z 79 PC: 13223 | Find next file
2018-12-25T11:44:59.96296575Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.967407345Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.974219637Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:44:59.978691829Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.979797878Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.981538105Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:44:59.985634044Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.987619493Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:44:59.991811392Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.993321252Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.000846601Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.003043951Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.006206431Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.00772905Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.01686587Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.027844959Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:00.031947956Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.040585667Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.057401258Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:00.065251725Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.0674392Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.070157976Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.076495361Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.078400119Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.083431399Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.085363622Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.094864212Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.09816918Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.102623207Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.104574396Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.112946109Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.12366208Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:00.127384836Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.134688946Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.145392376Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:00.153096433Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.15546103Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.157043997Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.163281759Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.165157651Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.170233607Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.171879141Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.18139842Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.184999764Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.188491038Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.190488226Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.198873927Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.2097447Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:00.213411588Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.220854179Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.231301281Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:00.239569745Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.241776713Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.243764784Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.250171871Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.252183024Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.256161404Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.26128836Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.271903986Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.273736506Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.27717338Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.279697972Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.287743008Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.299400264Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:00.303594438Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.310371325Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.320881991Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:00.32917848Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.331209435Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.333145389Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.341964941Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.344697689Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.354145195Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.356028636Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.35985443Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.361538132Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.370269793Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.38197187Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:00.389183635Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.396330464Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.408065017Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:00.415962888Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.417928347Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.420934609Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.430519267Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.432481537Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.442833496Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.444597971Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.448032511Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.450120854Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.457966028Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.473611704Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:00.478231124Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.485451938Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.497333627Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:00.506167719Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.507839875Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.50960384Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.516900699Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.518740097Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.522648038Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.525108034Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.535118813Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.53687174Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.54113206Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.542958889Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.551276584Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.564848079Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:00.569359805Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.576901551Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.588646691Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:00.597904047Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.599958655Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.602044892Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.611700756Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.613728148Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.76061487Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.769254071Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.772562307Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.774987088Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.884525809Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.946170893Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:00.950145107Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.957955159Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.978138781Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:00.985858881Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.98784211Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.989153041Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.998126427Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.999890705Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.097073093Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.098988978Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.104017155Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.106096717Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.290937346Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.303051373Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:01.305557759Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.309796291Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.31676871Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:01.324652689Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.326119681Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.32966395Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.335840117Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.337611275Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.345160772Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.355670905Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:01.358891788Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.366261735Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.377476263Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:01.382653767Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.385059642Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.386614575Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.393907244Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.396409164Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.402699301Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.404110933Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.414360287Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.416087682Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.419699113Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.422619519Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.430990793Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.442547841Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:01.446135702Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.453552605Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.465543834Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:01.473858345Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.4760699Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.477481067Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.485782645Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.487896294Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.497188255Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.499274416Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.504171892Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.506097569Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.5147401Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.526966097Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:01.530357122Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.53728915Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.549236546Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:01.556962589Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.558646096Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.561137954Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.567699627Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.569307686Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.572584145Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.574399332Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.767071747Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.868179436Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:01.875315431Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.882185173Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.902194611Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:01.908543721Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.909844828Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.911328388Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.915767459Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.917303589Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.922855341Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.924103272Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.930262071Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.931496343Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.933578591Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.935382989Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.941410395Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.949229172Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:01.952278703Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.957163381Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.96436057Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:01.969514689Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.971094811Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.973183388Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.982554477Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.984061875Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.993677625Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.995665023Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.998871423Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.000517923Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.01040967Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.023026701Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:02.02681176Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.033059835Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.043173484Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.050556217Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.053207725Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.055359794Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.062720837Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.06667576Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.069161881Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.080222395Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.082554029Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.086261628Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.08909952Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.097358738Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.107908999Z 78 PC: 131eb | Find first file (See above)
2018-12-25T11:45:02.119614808Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.126349016Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.152698853Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.161403067Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.163759963Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.165841735Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.174538229Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.178117001Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.180026082Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.191281778Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.193411732Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.20125838Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.20492282Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.214855902Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.226371926Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:02.230512695Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.237218772Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.248822877Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.257278055Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.259265289Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.261218891Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.270482588Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.274283814Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.276276722Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.287692619Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.289653014Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.297614902Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.300589702Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.312401406Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.325355955Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:02.329023192Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.335664038Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.347383353Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.355401153Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.357096816Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.358654498Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.366353866Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.3700948Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.372941641Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.383285892Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.38525869Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.393902024Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.396892281Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.406426053Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.418570069Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:02.422226922Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.428954877Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.441023038Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.445886994Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.447659456Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.449389981Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.456845403Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.460036785Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.465959074Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.475874786Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.477312649Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.486031372Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.487883215Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.496383089Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.508244028Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:02.511526521Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.518061219Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.530089932Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.538708274Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.540684607Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.543592946Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.551292759Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.555489031Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.55759196Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.567044224Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.568498606Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.576608184Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.577936096Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.583817627Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.595730047Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:02.599630936Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.607679546Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.620950903Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.62900992Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.631120627Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.635895176Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.643792397Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.647818022Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.652205007Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.662181754Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.664466868Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.672591076Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.674703878Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.684687394Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.696196893Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:02.699445375Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.706976542Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.71869963Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.732593873Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.735445084Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.737349918Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.74554456Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.750740341Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.752770877Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.764255832Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.767051469Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.7748539Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.778211717Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.788870071Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.803286864Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:02.809652183Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.818060737Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.829537532Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.84090079Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.844642894Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.848438804Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.867368104Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.870006835Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.878333645Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.890773699Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:02.894290791Z 78 PC: 13214 | Find first file (See above)
2018-12-25T11:45:02.901408457Z 26 PC: 12dba | Set disk transfer address
2018-12-25T11:45:02.904014989Z 37 PC: 12dcb | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:45:02.90581119Z 9 PC: 12a86 | Display string (String= 'Goat file (COM/i...). Size=000001F4h/0000000500d bytes. ')
2018-12-25T11:45:02.91231128Z 48 PC: 12a8f | Get DOS version
2018-12-25T11:45:02.915347502Z 61 PC: 12b5c | Open file (Filename = '')
2018-12-25T11:45:02.922714903Z 93 PC: 12afe | File sharing functions
2018-12-25T11:45:02.924662423Z 9 PC: 12a86 | Display string (See above)
2018-12-25T11:45:02.929585824Z 76 PC: 12ae3 | Terminate with return code (Return code = '1')

{"DateBased":true,"Day":5,"Month":11,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2120,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:44:58.622547238Z 42 PC: 13288 | Get date 0x13288: cmp dx, 0xc01
0x1328c: je 0x13290
0x1328e: jmp 0x1329d
0x13290: mov ah, 9
0x13292: lea dx, word ptr [bx + 0x67c]
0x13296: int 0x21
0x13298: mov ax, 0x4c00
0x1329b: int 0x21
0x1329d: cmp dh, 0xb
0x132a0: jne 0x132ae
0x132a2: cmp al, 3
0x132a4: jne 0x132ae
0x132a6: mov ah, 9
0x132a8: lea dx, word ptr [bx + 0x6e6]
0x132ac: int 0x21
0x132ae: popaw
0x132af: ret
0x132b0: or ax, 0x70a
0x132b3: xchg ax, cx
0x132b4: movsw word ptr es:[di], word ptr [si]
2018-12-25T11:44:58.625564554Z 9 PC: 132ae | Display string (String= ' �������, �: ᪮� � ���� �㤥� ���� ஦�����. ')
2018-12-25T11:44:58.632371673Z 53 PC: 12d09 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:44:58.633851907Z 37 PC: 12d1f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:44:58.635526227Z 26 PC: 12d29 | Set disk transfer address
2018-12-25T11:44:58.637192932Z 78 PC: 131eb | Find first file
2018-12-25T11:44:58.646005054Z 67 PC: 130eb | Get or set file attributes
2018-12-25T11:44:58.652230834Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.587343091Z 61 PC: 12e47 | Open file (Filename = 'C:\DOS\EDIT.COM')
2018-12-25T11:44:59.593151106Z 87 PC: 130d5 | Get or set file date and time
2018-12-25T11:44:59.594660059Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.59759797Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:44:59.603918333Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.606983687Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.609528889Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.619033545Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.620309669Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.626345931Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.627815446Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:44:59.635201702Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.64508837Z 79 PC: 131fa | Find next file
2018-12-25T11:44:59.648136421Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.655251166Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.665492775Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:44:59.672103921Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.673324342Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.675306049Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:44:59.689512328Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.692392081Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.693549988Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.704277498Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.705241731Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.708265959Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.710769215Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:44:59.72714854Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.736729464Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:44:59.740628036Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.746770739Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.756422726Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:44:59.76542041Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.766864151Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.768146714Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:44:59.773762148Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.776368327Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.777647304Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.786546051Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.787784919Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.79019054Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.792087801Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:44:59.798400529Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.807061936Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:44:59.812409824Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.817833639Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.826320295Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:44:59.832333945Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.834192027Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.835510585Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:44:59.840347184Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.8446224Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.846016162Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.853658023Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.855810915Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.858569243Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.86014944Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:44:59.867222051Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.876009496Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:44:59.881515625Z 78 PC: 13214 | Find first file
2018-12-25T11:44:59.888252545Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.893819186Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.902720512Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:44:59.910683218Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.912253288Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.913772953Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:44:59.919797642Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.921238795Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:44:59.924404699Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.926323939Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.936671519Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.937851245Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.940845876Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.942223023Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:44:59.948459551Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.957747267Z 79 PC: 13223 | Find next file
2018-12-25T11:44:59.960529681Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.965763347Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.974409965Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:44:59.981449578Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.982640297Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.98374753Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:44:59.988740776Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.989801536Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:44:59.992553822Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.9939053Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.001225166Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.002471629Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.005164692Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.006419574Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.012703399Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.021956448Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:00.024610734Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.02978401Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.039413539Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:00.046806688Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.048136095Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.049430687Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.054699814Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.055957371Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.059041562Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.060134243Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.067981552Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.069201848Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.071635786Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.073409812Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.080156418Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.086208607Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:00.089019133Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.095393516Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.295244469Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:00.301962199Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.304352185Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.305613839Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.310926774Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.312658967Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.315744015Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.316981915Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.430065635Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.431407245Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.43452721Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.436824841Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.443737948Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.453919364Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:00.45814633Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.465486618Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.474229255Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:00.482625266Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.48461465Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.486368801Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.493634499Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.49514595Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.498413992Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.501393543Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.511431712Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.513162873Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.517274349Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.519137642Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.526278762Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.53716428Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:00.540907752Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.547178332Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.557014106Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:00.56504605Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.566777458Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.56824618Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.576256875Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.577614576Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.58388616Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.585292244Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.587448665Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.588621708Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.593613501Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.599629586Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:00.604290153Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.608340226Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.616274901Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:00.6231323Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.624842568Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.626477679Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.633856074Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.63633667Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.644475271Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.645760467Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.648592547Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.649994611Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.657529025Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.668317921Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:00.671341542Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.677684146Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.687783216Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:00.694611719Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.696253689Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.698562135Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.704195153Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.705848229Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.710165301Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.711717272Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.720643124Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.722802372Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.725511556Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.727152459Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.735490325Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.745218788Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:00.747669832Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.751931405Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.758215435Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:00.762951471Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.764506672Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.7655286Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.769963071Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.77142519Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.776860657Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.778571475Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.780584314Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.781680509Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.787160348Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.795072771Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:00.797193985Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.802759231Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.809890239Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:00.81712301Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.819543773Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.821500238Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.828768919Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.831187574Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.154538063Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.156102837Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.162042584Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.166125317Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.185548309Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.196665537Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:01.20132988Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.207662006Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.218637909Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:01.226112963Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.227828066Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.230212051Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.236065559Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.237837993Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.244233562Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.254512481Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:01.257640192Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.264491501Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.275582567Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:01.282542334Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.284452378Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.285864941Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.291307994Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.293234698Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.296389012Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.297844728Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.306299176Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.307743122Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.310766356Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.313453002Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.320526658Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.330752414Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:01.334465178Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.340723369Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.351361487Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:01.358396609Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.360348642Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.362295481Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.369301298Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.370382823Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.378691763Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.38018134Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.38350774Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.386357407Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.393818232Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.403430716Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:01.407096601Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.413219512Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.422850133Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:01.431765268Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.433433109Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.435131157Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.44152869Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.443053388Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.446461594Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.449312328Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.455263108Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.465048388Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:01.471999395Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.478449528Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.487997433Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:01.49658012Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.49822201Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.499858185Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.506588448Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.508205613Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.517135373Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.519587153Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.527735109Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.529446248Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.533366363Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.535122677Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.542095251Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.837439969Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:01.840670332Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.846701054Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.856734915Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:01.863637501Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.865034808Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.8665151Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.873589157Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.876010298Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.884500661Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.885979589Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.889335702Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.891071394Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.898018887Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.908140006Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:01.911139985Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.916815379Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.926395451Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:01.933775864Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.935482939Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.937925551Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.943687788Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.946850198Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.94902781Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.957333498Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.959208438Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.96287406Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.964189192Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.970094479Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.977681042Z 78 PC: 131eb | Find first file (See above)
2018-12-25T11:45:01.985412704Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.99030438Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.005704097Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.012326579Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.014034397Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.015321856Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.021489012Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.024799668Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.026030493Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.035082216Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.036702307Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.043233144Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.044826401Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.053244502Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.063154237Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:02.066062538Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.072448121Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.081980142Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.089450939Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.090792293Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.092357902Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.099940825Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.102611906Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.103813443Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.112517276Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.113799395Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.120061619Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.12151193Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.128848223Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.139480297Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:02.142229004Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.163067477Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.174049284Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.181209016Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.182792416Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.184926848Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.191977962Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.195435289Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.197540989Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.206279777Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.207943601Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.215690781Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.217358262Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.225330151Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.236060079Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:02.238925784Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.244897886Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.254863379Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.266696715Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.268973594Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.270804327Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.277281312Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.281202642Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.283077448Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.291665664Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.294430111Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.301141216Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.302923411Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.311419939Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.319087189Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:02.321840642Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.328144606Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.337445946Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.344754797Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.345936223Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.34703452Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.352203286Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.354006424Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.355117069Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.361169255Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.362244351Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.36750505Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.369057577Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.374063608Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.380838424Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:02.382743494Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.386380551Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.396962876Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.402949021Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.404205807Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.406383646Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.412344677Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.415558357Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.417807468Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.425844859Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.427186058Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.433411482Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.434886692Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.442386525Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.451458543Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:02.453949483Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.458260173Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.4643331Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.468417753Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.470329585Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.471471006Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.475408365Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.477825933Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.479136951Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.485199858Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.487575636Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.493897209Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.495624069Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.502659874Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.512668595Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:02.516173602Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.521745244Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.828154304Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.835891102Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.837572148Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.839214596Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.848255598Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.84986281Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.857677343Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.867708086Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:02.870144686Z 78 PC: 13214 | Find first file (See above)
2018-12-25T11:45:02.876926476Z 26 PC: 12dba | Set disk transfer address
2018-12-25T11:45:02.878620501Z 37 PC: 12dcb | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:45:02.880151177Z 9 PC: 12a86 | Display string (String= 'Goat file (COM/i...). Size=000001F4h/0000000500d bytes. ')
2018-12-25T11:45:02.886463151Z 48 PC: 12a8f | Get DOS version
2018-12-25T11:45:02.887852468Z 61 PC: 12b5c | Open file (Filename = '')
2018-12-25T11:45:02.895467119Z 93 PC: 12afe | File sharing functions
2018-12-25T11:45:02.89863718Z 9 PC: 12a86 | Display string (See above)
2018-12-25T11:45:02.902850133Z 76 PC: 12ae3 | Terminate with return code (Return code = '1')

{"DateBased":true,"Day":1,"Month":12,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2120,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:44:58.816952056Z 42 PC: 13288 | Get date 0x13288: cmp dx, 0xc01
0x1328c: je 0x13290
0x1328e: jmp 0x1329d
0x13290: mov ah, 9
0x13292: lea dx, word ptr [bx + 0x67c]
0x13296: int 0x21
0x13298: mov ax, 0x4c00
0x1329b: int 0x21
0x1329d: cmp dh, 0xb
0x132a0: jne 0x132ae
0x132a2: cmp al, 3
0x132a4: jne 0x132ae
0x132a6: mov ah, 9
0x132a8: lea dx, word ptr [bx + 0x6e6]
0x132ac: int 0x21
0x132ae: popaw
0x132af: ret
0x132b0: or ax, 0x70a
0x132b3: xchg ax, cx
0x132b4: movsw word ptr es:[di], word ptr [si]
2018-12-25T11:44:58.820033944Z 9 PC: 13298 | Display string (String= ' ��� ��������� ����� ������ ����. ����ࠢ��� �� � ��� ஦����� ! ����, � �祭� �� ⥡� !!! ')
2018-12-25T11:44:58.83213809Z 76 PC: 1329d | Terminate with return code (Return code = '0')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2120,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:44:58.850209041Z 42 PC: 13288 | Get date 0x13288: cmp dx, 0xc01
0x1328c: je 0x13290
0x1328e: jmp 0x1329d
0x13290: mov ah, 9
0x13292: lea dx, word ptr [bx + 0x67c]
0x13296: int 0x21
0x13298: mov ax, 0x4c00
0x1329b: int 0x21
0x1329d: cmp dh, 0xb
0x132a0: jne 0x132ae
0x132a2: cmp al, 3
0x132a4: jne 0x132ae
0x132a6: mov ah, 9
0x132a8: lea dx, word ptr [bx + 0x6e6]
0x132ac: int 0x21
0x132ae: popaw
0x132af: ret
0x132b0: or ax, 0x70a
0x132b3: xchg ax, cx
0x132b4: movsw word ptr es:[di], word ptr [si]
2018-12-25T11:44:58.852543924Z 53 PC: 12d09 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:44:58.853823003Z 37 PC: 12d1f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:44:58.861045197Z 26 PC: 12d29 | Set disk transfer address
2018-12-25T11:44:58.863183708Z 78 PC: 131eb | Find first file
2018-12-25T11:44:58.871928023Z 67 PC: 130eb | Get or set file attributes
2018-12-25T11:44:58.878431895Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.586976721Z 61 PC: 12e47 | Open file (Filename = 'C:\DOS\EDIT.COM')
2018-12-25T11:44:59.594719987Z 87 PC: 130d5 | Get or set file date and time
2018-12-25T11:44:59.597121922Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.598880292Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:44:59.604518006Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.607900416Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.609417161Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.619017361Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.620404821Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.626322701Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.627766483Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:44:59.635001266Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.645011564Z 79 PC: 131fa | Find next file
2018-12-25T11:44:59.64798075Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.653749292Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.664356433Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:44:59.67051712Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.671789241Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.673622517Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:44:59.679275282Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.682335225Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.685197013Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.693536563Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.694999406Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.698165265Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.700121639Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:44:59.707279362Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.717686269Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:44:59.721470487Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.728542363Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.740339018Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:44:59.747379833Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.748984022Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.750825394Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:44:59.757152427Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.759892774Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.7612009Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.770361861Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.771960688Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.774973127Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.777272784Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:44:59.784061422Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.794052366Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:44:59.800409014Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.806127098Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.815311352Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:44:59.822483667Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.823973243Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.825308079Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:44:59.831121907Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.834280825Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.835581401Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.844562883Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.845907806Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.848501818Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.850368366Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:44:59.857048312Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.867373873Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:44:59.873910322Z 78 PC: 13214 | Find first file
2018-12-25T11:44:59.880189061Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.886227682Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.896562814Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:44:59.903372456Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.904638868Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.906877132Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:44:59.912210559Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.91345226Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:44:59.916745141Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.918775472Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.931406539Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.932936059Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.935848298Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.937148556Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:44:59.951293011Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.961424205Z 79 PC: 13223 | Find next file
2018-12-25T11:44:59.964871462Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.969319163Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.976888495Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:44:59.983619402Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.984946344Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.987999956Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:44:59.993740138Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.99537502Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.00008705Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.001642508Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.009678191Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.011751857Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.014046975Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.015543954Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.025771765Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.035802551Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:00.038847644Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.044997583Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.055557083Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:00.062401319Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.064388928Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.065862914Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.071468239Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.073557555Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.076769589Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.078135916Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.087241421Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.088572849Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.091662468Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.094082333Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.101285998Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.428743945Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:00.432362174Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.437617685Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.448035921Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:00.454721545Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.456626682Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.45801975Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.463445627Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.465537253Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.468707853Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.470108683Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.479438024Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.480813052Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.483604039Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.485803982Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.492837691Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.502383996Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:00.505876233Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.512234259Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.52211399Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:00.529751617Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.531096868Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.532421244Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.538715014Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.540339461Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.543947899Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.546345522Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.555617611Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.557492547Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.561390821Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.563679896Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.570797213Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.582153612Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:00.585410817Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.592076203Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.602446256Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:00.609552162Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.611024364Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.613378798Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.621469582Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.623021255Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.632497437Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.634060567Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.637009217Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.639389552Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.647679815Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.657166622Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:00.663958886Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.670163206Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.679978556Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:00.687562716Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.689225882Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.690955393Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.699080342Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.701086821Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.710263766Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.712197367Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.715010124Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.716420369Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.723936808Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.733785498Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:00.736771736Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.743488076Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.753097781Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:00.759966623Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.762278986Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.764176974Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.769712821Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.772003068Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.77636291Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.777926434Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.786395991Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.788746087Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.791668417Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.7933077Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.801332025Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.81081099Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:00.813781615Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.820307924Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.091672932Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:01.096424282Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.098250762Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.099386627Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.104341818Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.105970103Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.154672844Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.157064628Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.160376036Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.162187575Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.173586668Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.184725979Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:01.188395569Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.194541556Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.204442073Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:01.212115941Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.214005554Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.215935479Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.223142882Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.225758409Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.234150568Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.235711492Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.239521187Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.241396937Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.248497742Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.259055297Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:01.262404175Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.268677895Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.279785428Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:01.286557344Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.287842058Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.2895833Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.293462866Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.294768091Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.301091834Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.310559962Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:01.313613261Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.320124367Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.329333172Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:01.33644219Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.33821742Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.33948828Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.345427151Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.347059407Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.350039469Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.351381425Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.359782331Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.360914439Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.364207234Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.365599072Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.372234969Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.382723254Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:01.38585428Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.391834306Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.402141073Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:01.409595928Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.410876256Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.412764339Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.420186318Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.421771856Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.43169277Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.433474944Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.436586869Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.439560327Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.446633152Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.456369036Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:01.460939156Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.467195074Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.477680701Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:01.485524547Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.487483603Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.489138414Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.495876119Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.497560883Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.500875693Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.503479739Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.510245012Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.521686709Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:01.528572374Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.535213672Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.610383912Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:01.618190119Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.619659431Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.62142332Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.627435775Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.628783185Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.63839821Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.640098756Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.796347447Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.797907074Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.801686985Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.803178899Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.838246246Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.848719872Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:01.851695157Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.858023122Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.867401008Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:01.87405567Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.876232051Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.877581957Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.884739534Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.886911322Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.895765027Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.897405834Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.900722014Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.902597784Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.909696865Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.920722845Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:01.923883866Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.929104056Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.938660151Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:01.94491704Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.948906347Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.950376323Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.955815463Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.959084063Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.960348432Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.968574842Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.970190111Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.972794872Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.9741671Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.981725179Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.990447851Z 78 PC: 131eb | Find first file (See above)
2018-12-25T11:45:01.998036669Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.002700931Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.016477758Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.02188006Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.023422357Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.024474267Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.030567585Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.033172791Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.034245198Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.042146807Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.043984152Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.049340219Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.051075829Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.057088837Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.064831348Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:02.06731105Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.071735503Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.079577272Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.085513923Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.087501255Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.090093425Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.09551628Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.097946094Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.100481221Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.10922876Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.110841803Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.118680953Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.119855612Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.131510759Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.138548422Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:02.140462404Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.144220319Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.158782593Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.165857188Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.167333601Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.168642565Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.174675573Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.177929146Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.179171226Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.187731487Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.189814754Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.199445712Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.20073201Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.208470928Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.218564855Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:02.221497791Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.228022856Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.237376362Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.249298331Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.250795326Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.252038343Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.258923323Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.260717476Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.261999068Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.271361467Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.272848747Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.278994955Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.281023447Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.288614116Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.298338639Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:02.301502935Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.307726496Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.317935712Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.324793359Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.326203067Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.327763955Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.334124687Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.337181633Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.339285704Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.34756595Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.348847496Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.355896307Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.357258008Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.365842475Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.376624645Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:02.379509849Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.386157391Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.396052073Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.402651636Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.404700266Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.40576037Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.410127853Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.413345902Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.41456593Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.42331658Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.425742108Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.431996786Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.433448384Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.442468233Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.452008569Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:02.454816711Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.461348563Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.470885175Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.478457475Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.479957605Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.481234258Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.48954444Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.493016531Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.494618669Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.504061678Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.506195583Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.512523399Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.514634326Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.522134307Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.680425209Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:02.682307524Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.685752723Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.843083857Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.855419133Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.857166022Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.859805676Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.870070181Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.872082454Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.878981347Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.888678797Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:02.891322363Z 78 PC: 13214 | Find first file (See above)
2018-12-25T11:45:02.898453229Z 26 PC: 12dba | Set disk transfer address
2018-12-25T11:45:02.899804308Z 37 PC: 12dcb | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:45:02.901267352Z 9 PC: 12a86 | Display string (String= 'Goat file (COM/i...). Size=000001F4h/0000000500d bytes. ')
2018-12-25T11:45:02.908371935Z 48 PC: 12a8f | Get DOS version
2018-12-25T11:45:02.90976498Z 61 PC: 12b5c | Open file (Filename = '')
2018-12-25T11:45:02.916706808Z 93 PC: 12afe | File sharing functions
2018-12-25T11:45:02.919620958Z 9 PC: 12a86 | Display string (See above)
2018-12-25T11:45:02.923777868Z 76 PC: 12ae3 | Terminate with return code (Return code = '1')

{"DateBased":true,"Day":1,"Month":11,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2120,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:44:58.951231273Z 42 PC: 13288 | Get date 0x13288: cmp dx, 0xc01
0x1328c: je 0x13290
0x1328e: jmp 0x1329d
0x13290: mov ah, 9
0x13292: lea dx, word ptr [bx + 0x67c]
0x13296: int 0x21
0x13298: mov ax, 0x4c00
0x1329b: int 0x21
0x1329d: cmp dh, 0xb
0x132a0: jne 0x132ae
0x132a2: cmp al, 3
0x132a4: jne 0x132ae
0x132a6: mov ah, 9
0x132a8: lea dx, word ptr [bx + 0x6e6]
0x132ac: int 0x21
0x132ae: popaw
0x132af: ret
0x132b0: or ax, 0x70a
0x132b3: xchg ax, cx
0x132b4: movsw word ptr es:[di], word ptr [si]
2018-12-25T11:44:58.95386185Z 53 PC: 12d09 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:44:58.955003377Z 37 PC: 12d1f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:44:58.955910282Z 26 PC: 12d29 | Set disk transfer address
2018-12-25T11:44:58.957416307Z 78 PC: 131eb | Find first file
2018-12-25T11:44:58.967317568Z 67 PC: 130eb | Get or set file attributes
2018-12-25T11:44:58.97387238Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.518279558Z 61 PC: 12e47 | Open file (Filename = 'C:\DOS\EDIT.COM')
2018-12-25T11:44:59.526504245Z 87 PC: 130d5 | Get or set file date and time
2018-12-25T11:44:59.528082233Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.530082038Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:44:59.53901835Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.542783046Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.544682546Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.559644928Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.561480053Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.568199902Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.570206845Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:44:59.578088303Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.589027395Z 79 PC: 131fa | Find next file
2018-12-25T11:44:59.592736109Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.603479958Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.614209369Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:44:59.622299189Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.624820697Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.626307798Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:44:59.63261201Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.636551614Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.638279531Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.648368883Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.651433728Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.654643991Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.656184217Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:44:59.670118446Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.681957443Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:44:59.685426542Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.692606458Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.703377177Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:44:59.711003858Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.713166404Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.715033704Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:44:59.721373735Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.724958156Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.727120113Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.73802338Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.739591257Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.743102262Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.74484491Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:44:59.752485868Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.763818887Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:44:59.770626312Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.77732101Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.788343289Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:44:59.796083431Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.79753791Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.809255373Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:44:59.815493463Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.818818975Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.820605773Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.830517335Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.832196525Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.835842403Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.837517139Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:44:59.84535083Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.85759951Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:44:59.864390688Z 78 PC: 13214 | Find first file
2018-12-25T11:44:59.871402732Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.878831341Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.889548877Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:44:59.897172346Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.898752973Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.901185152Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:44:59.907327438Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.908894516Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:44:59.913229431Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.915055297Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.928032829Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.930927192Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:44:59.934044758Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.93563545Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:44:59.945192055Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.956104028Z 79 PC: 13223 | Find next file
2018-12-25T11:44:59.959544404Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.966451746Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:44:59.97744339Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:44:59.984959298Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:44:59.986234482Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.988514176Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:44:59.994724033Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:44:59.996537107Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.00489723Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.00752664Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.01665351Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.019024845Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.022455468Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.024136407Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.032484105Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.042792966Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:00.046110323Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.052902537Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.063407346Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:00.072786275Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.075140903Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.077548221Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.084081344Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.086136603Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.090471791Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.092133174Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.101878993Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.104529129Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.107793837Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.109593888Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.118373265Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.129635221Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:00.133196909Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.141904408Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.1538626Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:00.164039713Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.166564225Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.168567225Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.174864708Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.176743858Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.181330099Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.185029806Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.194902709Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.197492721Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.201182264Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.203834907Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.213460336Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.224778318Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:00.228303914Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.23630664Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.247893232Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:00.255905136Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.258240889Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.260150906Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.266641077Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.268870076Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.273452089Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.275409642Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.285847683Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.287921798Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.291519315Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.29391259Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.301878853Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.31352887Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:00.31824804Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.325457004Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.337354551Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:00.345868327Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.347704293Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.349592354Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.359160615Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.364987315Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.374641122Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.377626111Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.381165782Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.382890685Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.392310729Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.404776812Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:00.412002235Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.420328896Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.431281917Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:00.441416847Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.444278157Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.446317615Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.454631504Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.457088584Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.467577157Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.469564757Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.474425526Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.476813854Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.484813705Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.497220879Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:00.501445719Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.508637506Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.519977712Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:00.529402531Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.532261911Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.534254322Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.542000178Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.543997652Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.548921236Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.552044175Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.561956082Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.563936237Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.568613309Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.570679137Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.579265697Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.591349291Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:00.595493526Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.603599433Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.761604231Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:00.769824369Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.771769019Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.773951957Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.782238393Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.783888786Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.947422807Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.948864562Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.950885206Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.952874699Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.119104549Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.223725027Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:01.228060824Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.232200451Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.290782323Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:01.29972106Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.30211622Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.304105351Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.31308021Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.315072512Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.3246692Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.32670267Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.330838899Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.332957344Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.342570324Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.355169138Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:01.359616214Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.367626755Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.380245972Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:01.388589349Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.390716148Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.394030935Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.400889318Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.40307347Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.414131163Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.425557748Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:01.429906693Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.43917033Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.451398256Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:01.460147002Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.463529303Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.465672539Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.473073619Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.477060058Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.482097641Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.484123984Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.495091069Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.49748708Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.501111878Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.503409289Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.512326939Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.524086682Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:01.527573069Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.535077321Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.546646689Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:01.554470665Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.557492294Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.559161882Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.568446245Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.572009936Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.767182631Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.77152532Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.776544917Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.779058171Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.898750735Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.911877541Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:01.915185412Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.922525089Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.934682353Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:01.942817753Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.944323692Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.946698751Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.953047807Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.954535277Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.958442156Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.960906202Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.969768908Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.981002467Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:01.98791137Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.994588024Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.005731299Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.013634288Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.01515347Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.017678425Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.023697326Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.025156625Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.0354932Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.037288367Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.046488076Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.048928223Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.052088697Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.054282995Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.06342525Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.074693452Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:02.078643172Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.087111722Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.099854531Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.120350914Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.122680277Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.124319241Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.133330102Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.136073033Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.146110768Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.148130665Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.152322179Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.154067045Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.163243636Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.174683939Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:02.178117464Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.184532363Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.194655561Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.202045211Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.205320786Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.208478755Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.215152913Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.220020633Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.222415502Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.230540852Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.235783478Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.242099855Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.243778798Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.252971115Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.263122541Z 78 PC: 131eb | Find first file (See above)
2018-12-25T11:45:02.27295488Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.280807553Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.298292625Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.31462705Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.318151928Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.320153889Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.329016193Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.334591063Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.336529203Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.34956503Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.351964127Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.359238984Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.361063965Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.372460965Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.384449532Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:02.388216338Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.395748611Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.406919649Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.415824153Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.417703314Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.419304378Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.428089691Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.431582889Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.433257257Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.444002798Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.445619321Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.453474222Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.455784547Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.464826387Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.476528271Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:02.485587969Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.492905053Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.504834616Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.513266969Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.515273502Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.517279179Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.526103244Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.529985936Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.532005279Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.543103166Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.5451052Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.552903637Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.555670858Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.564639567Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.57643183Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:02.580808685Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.588118858Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.599286688Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.608190791Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.609880649Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.611697321Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.619967758Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.623654171Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.62605007Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.637829376Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.639561134Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.649274632Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.651205266Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.660147419Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.673132908Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:02.676527788Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.683464683Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.696886686Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.705762133Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.707502841Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.710480859Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.71853823Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.723316332Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.727117095Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.73710329Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.73953198Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.748534992Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.750472378Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.759833127Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.774000782Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:02.777247916Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.784306685Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.803252284Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.81196171Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.81418675Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.817127152Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.82551538Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.829745613Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.833513283Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.843847679Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.846004796Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.855728847Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.857784929Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.867468266Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.880187926Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:02.88358154Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.890646176Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.903979524Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.912564884Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.914762361Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.91767457Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.925417744Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.929457911Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.932435347Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.942756015Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.944922708Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.954705968Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.956797778Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.967318964Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.979798453Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:02.98317987Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.991097878Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:03.003680076Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:03.011611562Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:03.014456349Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:03.017162475Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:03.024839127Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:03.027789571Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:03.045306241Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:03.059296674Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:03.063386798Z 78 PC: 13214 | Find first file (See above)
2018-12-25T11:45:03.070972431Z 26 PC: 12dba | Set disk transfer address
2018-12-25T11:45:03.072640588Z 37 PC: 12dcb | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:45:03.075465248Z 9 PC: 12a86 | Display string (String= 'Goat file (COM/i...). Size=000001F4h/0000000500d bytes. ')
2018-12-25T11:45:03.082751519Z 48 PC: 12a8f | Get DOS version
2018-12-25T11:45:03.084486208Z 61 PC: 12b5c | Open file (Filename = '')
2018-12-25T11:45:03.093085711Z 93 PC: 12afe | File sharing functions
2018-12-25T11:45:03.095932841Z 9 PC: 12a86 | Display string (See above)
2018-12-25T11:45:03.102110738Z 76 PC: 12ae3 | Terminate with return code (Return code = '1')

{"DateBased":true,"Day":5,"Month":11,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2120,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:45:00.060108947Z 42 PC: 13288 | Get date 0x13288: cmp dx, 0xc01
0x1328c: je 0x13290
0x1328e: jmp 0x1329d
0x13290: mov ah, 9
0x13292: lea dx, word ptr [bx + 0x67c]
0x13296: int 0x21
0x13298: mov ax, 0x4c00
0x1329b: int 0x21
0x1329d: cmp dh, 0xb
0x132a0: jne 0x132ae
0x132a2: cmp al, 3
0x132a4: jne 0x132ae
0x132a6: mov ah, 9
0x132a8: lea dx, word ptr [bx + 0x6e6]
0x132ac: int 0x21
0x132ae: popaw
0x132af: ret
0x132b0: or ax, 0x70a
0x132b3: xchg ax, cx
0x132b4: movsw word ptr es:[di], word ptr [si]
2018-12-25T11:45:00.063045178Z 9 PC: 132ae | Display string (String= ' �������, �: ᪮� � ���� �㤥� ���� ஦�����. ')
2018-12-25T11:45:00.070512935Z 53 PC: 12d09 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:45:00.071914882Z 37 PC: 12d1f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:45:00.073883911Z 26 PC: 12d29 | Set disk transfer address
2018-12-25T11:45:00.075467413Z 78 PC: 131eb | Find first file
2018-12-25T11:45:00.08427747Z 67 PC: 130eb | Get or set file attributes
2018-12-25T11:45:00.090974118Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.4297667Z 61 PC: 12e47 | Open file (Filename = 'C:\DOS\EDIT.COM')
2018-12-25T11:45:00.437705064Z 87 PC: 130d5 | Get or set file date and time
2018-12-25T11:45:00.44136589Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.442890448Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.448489191Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.451963256Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.453338168Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.468491424Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.474464444Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.480537527Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.481936927Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.488892031Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.499073244Z 79 PC: 131fa | Find next file
2018-12-25T11:45:00.503167927Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.509462912Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.52017806Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:00.530828452Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.53256232Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.535292985Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.541309717Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.544211282Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.546481093Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.554822193Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.556420936Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.559579135Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.563111038Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.57118453Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.581049568Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:00.584549744Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.590719404Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.600779271Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:00.608350634Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.610135933Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.611944066Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.618707197Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.621790022Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.623920238Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.633005862Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.63462228Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.638565515Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.641073947Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.648133166Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.658270581Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:00.665114708Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.671278982Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.681486414Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:00.689571701Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.691579352Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.693259467Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.69965185Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.703446115Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.7050507Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.714096822Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.716094525Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.719095663Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.72099869Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.728744936Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.738837761Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:00.744877977Z 78 PC: 13214 | Find first file
2018-12-25T11:45:00.752094206Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.758200475Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:00.768440786Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:00.776164523Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.777594202Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.779001979Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.785245648Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.786510818Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:00.789872366Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.792209147Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.803628839Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:00.805144035Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:00.808801689Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:00.81076062Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:00.818436058Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.154743648Z 79 PC: 13223 | Find next file
2018-12-25T11:45:01.15769848Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.164265089Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.174756941Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:01.181435399Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.182786566Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.184687471Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.190128871Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.191449963Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.194661375Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.196420778Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.205271392Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.206544399Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.20945529Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.210780223Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.218214502Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.230293002Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:01.233256879Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.239019147Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.249131638Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:01.256248473Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.257602249Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.260072552Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.265489136Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.266890881Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.271123545Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.272943921Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.281614332Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.283896908Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.286703849Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.288096929Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.296156717Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.305777151Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:01.308853017Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.315563719Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.325039729Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:01.331707176Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.333531318Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.33501445Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.340802469Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.34259308Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.345866646Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.347326654Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.362042968Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.363637244Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.366775968Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.369870914Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.37691085Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.386385416Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:01.390178847Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.396696934Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.406190827Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:01.413961291Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.415291353Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.416583037Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.422775864Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.424465912Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.427699381Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.429475362Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.438851434Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.440329269Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.443328767Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.445525401Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.452336132Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.462047561Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:01.466228642Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.472412015Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.482160335Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:01.490492652Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.49215773Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.493815771Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.501306017Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.502708914Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.510697412Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.512183067Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.514886529Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.516231744Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.523770507Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.533284811Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:01.539403428Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.546472011Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.837899902Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:01.845135844Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.848163735Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.849929053Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.85730925Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.859516335Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.869119404Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.870526467Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.874615992Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.876894162Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.883747702Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.893656827Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:01.897000335Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.903981757Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.914968846Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:01.922089644Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.923608038Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.92570534Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.931873361Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.933512962Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:01.937601252Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.939380354Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.948063105Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:01.950541722Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:01.953265862Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:01.954690776Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:01.962470334Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.972980437Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:01.976503729Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.982733332Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:01.992196823Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:01.999695874Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.001095259Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.002446039Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.009820757Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.011133013Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.019150349Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.02116582Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.023826757Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.02513494Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.032315047Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.042887624Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:02.046010898Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.052373535Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.062196773Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.069135729Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.071296244Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.072359654Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.076478053Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.077870648Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.083053498Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.083938327Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.086045077Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.087046691Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.091713371Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.09790491Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:02.100330747Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.106550884Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.115845674Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.122499314Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.124238514Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.125519512Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.130824626Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.134476451Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.140607712Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.150092319Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:02.153637569Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.159770194Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.170084729Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.177689665Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.178945641Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.180172711Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.185976141Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.187223603Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.190224273Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.192155598Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.204396247Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.205894441Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.20947247Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.211077725Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.218156158Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.228496989Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:02.232404703Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.238927034Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.248432309Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.255224505Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.25719632Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.258556059Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.265409275Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.267573555Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.275760243Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.277311498Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.281242973Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.283271591Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.290271831Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.301398782Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:02.304679086Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.310808368Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.321774699Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.328815126Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.330440766Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.332753525Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.338383697Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.339722065Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.34340483Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.345318237Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.351492823Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.363148676Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:02.369415679Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.375524449Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.385521598Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.394525043Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.396028663Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.398096764Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.401488652Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.402726635Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.408903362Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.410029774Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.416659836Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.418531092Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.420566555Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.422407375Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.429391089Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.439922475Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:02.443667781Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.44988924Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.460064162Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.467968396Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.469351171Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.470742861Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.479088979Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.481037699Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.497180764Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.499940803Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.503469401Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.505432881Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.513554843Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.523360458Z 79 PC: 13223 | Find next file (See above)
2018-12-25T11:45:02.526584016Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.53226561Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.842038401Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.84836286Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.850257265Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.851724886Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.858148015Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.861673151Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.863056695Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.872691154Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.874188273Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.87721791Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.879760349Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.887103858Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.894503213Z 78 PC: 131eb | Find first file (See above)
2018-12-25T11:45:02.901040156Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.905201792Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.926994217Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:02.934311896Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.935946206Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.937621092Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:02.945111723Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.948225585Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.950191804Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.959260453Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:02.960717164Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:02.967890047Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:02.968979811Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:02.973779425Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.984355892Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:02.986954551Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:02.99274806Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:03.002647334Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:03.025300319Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:03.026676941Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:03.032511591Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:03.038833285Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:03.041932489Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:03.044055332Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:03.052685653Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:03.055187448Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:03.06222243Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:03.063934313Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:03.072234764Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:03.082763471Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:03.085427889Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:03.089826763Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:03.105571867Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:03.112515615Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:03.114728092Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:03.116184648Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:03.121213508Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:03.123840133Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:03.125302156Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:03.131066783Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:03.134654746Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:03.142370353Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:03.144871773Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:03.153602767Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:03.164256442Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:03.167790601Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:03.173954221Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:03.184278535Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:03.192783678Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:03.194825888Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:03.196903468Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:03.204413839Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:03.208313342Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:03.209959968Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:03.220278147Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:03.222287036Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:03.233474992Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:03.236571704Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:03.244668416Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:03.255727906Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:03.260153722Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:03.266130048Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:03.277352297Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:03.284113477Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:03.285500787Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:03.287818986Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:03.294596543Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:03.297671805Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:03.299889865Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:03.308999278Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:03.310696695Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:03.318209088Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:03.319997797Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:03.327892174Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:03.338996952Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:03.341807531Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:03.348389986Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:03.359022914Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:03.365766768Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:03.367520999Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:03.370651183Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:03.377027775Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:03.380687527Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:03.382705167Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:03.391808832Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:03.394444977Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:03.401851417Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:03.403782547Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:03.412552368Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:03.424421944Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:03.427501023Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:03.434593223Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:03.444898196Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:03.451960282Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:03.454071688Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:03.455531641Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:03.46208035Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:03.465080834Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:03.466435097Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:03.47533222Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:03.47712975Z 64 PC: 130d5 | Write file or device (See above)
2018-12-25T11:45:03.484419896Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:03.486472228Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:03.494406012Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:03.503928063Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:03.507490196Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:03.513135751Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:03.522981661Z 61 PC: 12e47 | Open file (See above)
2018-12-25T11:45:03.535453277Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:03.5370517Z 66 PC: 130d5 | Move file pointer (See above)
2018-12-25T11:45:03.53882251Z 63 PC: 130d5 | Read file or device (See above)
2018-12-25T11:45:03.545906936Z 87 PC: 130d5 | Get or set file date and time (See above)
2018-12-25T11:45:03.547688001Z 62 PC: 130d5 | Close file (See above)
2018-12-25T11:45:03.556158397Z 67 PC: 130eb | Get or set file attributes (See above)
2018-12-25T11:45:03.566603904Z 79 PC: 131fa | Find next file (See above)
2018-12-25T11:45:03.56919093Z 78 PC: 13214 | Find first file (See above)
2018-12-25T11:45:03.576184083Z 26 PC: 12dba | Set disk transfer address
2018-12-25T11:45:03.577663155Z 37 PC: 12dcb | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:45:03.578936707Z 9 PC: 12a86 | Display string (String= 'Goat file (COM/i...). Size=000001F4h/0000000500d bytes. ')
2018-12-25T11:45:03.585180951Z 48 PC: 12a8f | Get DOS version
2018-12-25T11:45:03.586668634Z 61 PC: 12b5c | Open file (Filename = '')
2018-12-25T11:45:03.59329648Z 93 PC: 12afe | File sharing functions
2018-12-25T11:45:03.595901177Z 9 PC: 12a86 | Display string (See above)
2018-12-25T11:45:03.599733538Z 76 PC: 12ae3 | Terminate with return code (Return code = '1')

{"DateBased":true,"Day":1,"Month":12,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2120,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:45:00.067750375Z 42 PC: 13288 | Get date 0x13288: cmp dx, 0xc01
0x1328c: je 0x13290
0x1328e: jmp 0x1329d
0x13290: mov ah, 9
0x13292: lea dx, word ptr [bx + 0x67c]
0x13296: int 0x21
0x13298: mov ax, 0x4c00
0x1329b: int 0x21
0x1329d: cmp dh, 0xb
0x132a0: jne 0x132ae
0x132a2: cmp al, 3
0x132a4: jne 0x132ae
0x132a6: mov ah, 9
0x132a8: lea dx, word ptr [bx + 0x6e6]
0x132ac: int 0x21
0x132ae: popaw
0x132af: ret
0x132b0: or ax, 0x70a
0x132b3: xchg ax, cx
0x132b4: movsw word ptr es:[di], word ptr [si]
2018-12-25T11:45:00.070632183Z 9 PC: 13298 | Display string (String= ' ��� ��������� ����� ������ ����. ����ࠢ��� �� � ��� ஦����� ! ����, � �祭� �� ⥡� !!! ')
2018-12-25T11:45:00.079125668Z 76 PC: 1329d | Terminate with return code (Return code = '0')