Sample viewer

vx.netlux.org/Virus.DOS.HLLP.Krile.5776

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:09:40.995401293Z 74 PC: 13bda | Reallocate memory
2018-12-17T22:09:41.06388971Z 74 PC: 18ed9 | Reallocate memory
2018-12-17T22:09:41.0669341Z 98 PC: 183d6 | Get current PSP
2018-12-17T22:09:41.068801991Z 71 PC: 12c94 | Get current directory
2018-12-17T22:09:41.072811635Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:41.078719355Z 65 PC: 13b75 | Delete file (Filename = 'anti-vir.dat')
2018-12-17T22:09:41.084572616Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:41.09082983Z 65 PC: 13b75 | Delete file (Filename = 'chklist.ms')
2018-12-17T22:09:41.098073615Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:41.103675483Z 65 PC: 13b75 | Delete file (Filename = 'chklist.cps')
2018-12-17T22:09:41.109924998Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:41.119703117Z 65 PC: 13b75 | Delete file (Filename = 'vs.vsn')
2018-12-17T22:09:41.126480829Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:41.132462936Z 65 PC: 13b75 | Delete file (Filename = 'ivb.ntz')
2018-12-17T22:09:41.13971091Z 26 PC: 12d55 | Set disk transfer address
2018-12-17T22:09:41.140657781Z 78 PC: 12d67 | Find first file
2018-12-17T22:09:41.146915085Z 67 PC: 13409 | Get or set file attributes
2018-12-17T22:09:41.152436091Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:41.167684296Z 61 PC: 13557 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:09:41.174928857Z 63 PC: 135f9 | Read file or device (Read 5776 bytes on handle 5)
2018-12-17T22:09:41.182171441Z 62 PC: 1363f | Close file
2018-12-17T22:09:41.183953908Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:41.194536606Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:41.200402689Z 65 PC: 13b75 | Delete file (Filename = 'anti-vir.dat')
2018-12-17T22:09:41.206796888Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:41.212442196Z 65 PC: 13b75 | Delete file (Filename = 'chklist.ms')
2018-12-17T22:09:41.21873011Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:41.224276528Z 65 PC: 13b75 | Delete file (Filename = 'chklist.cps')
2018-12-17T22:09:41.230464927Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:41.236726428Z 65 PC: 13b75 | Delete file (Filename = 'vs.vsn')
2018-12-17T22:09:41.242619904Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:41.248216378Z 65 PC: 13b75 | Delete file (Filename = 'ivb.ntz')
2018-12-17T22:09:41.254268416Z 47 PC: 18215 | Get disk transfer address
2018-12-17T22:09:41.255490013Z 26 PC: 18220 | Set disk transfer address
2018-12-17T22:09:41.25677926Z 78 PC: 1822c | Find first file
2018-12-17T22:09:41.262261512Z 26 PC: 1823e | Set disk transfer address
2018-12-17T22:09:41.264590148Z 26 PC: 13a18 | Set disk transfer address
2018-12-17T22:09:41.2655896Z 78 PC: 13a2a | Find first file
2018-12-17T22:09:41.272663471Z 67 PC: 13409 | Get or set file attributes
2018-12-17T22:09:41.27848018Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:41.288337607Z 61 PC: 13557 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:09:41.296240992Z 66 PC: 184fb | Move file pointer
2018-12-17T22:09:41.298767948Z 63 PC: 135f9 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:09:41.301660571Z 62 PC: 1363f | Close file
2018-12-17T22:09:41.304498311Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:41.311458709Z 47 PC: 18252 | Get disk transfer address
2018-12-17T22:09:41.312437236Z 26 PC: 1825d | Set disk transfer address
2018-12-17T22:09:41.313505282Z 79 PC: 18261 | Find next file
2018-12-17T22:09:41.315559587Z 26 PC: 18271 | Set disk transfer address
2018-12-17T22:09:41.316837281Z 47 PC: 18215 | Get disk transfer address
2018-12-17T22:09:41.317975628Z 26 PC: 18220 | Set disk transfer address
2018-12-17T22:09:41.319231265Z 78 PC: 1822c | Find first file
2018-12-17T22:09:41.323013802Z 26 PC: 1823e | Set disk transfer address
2018-12-17T22:09:41.324891428Z 26 PC: 13a18 | Set disk transfer address
2018-12-17T22:09:41.326564687Z 78 PC: 13a2a | Find first file
2018-12-17T22:09:41.330496084Z 47 PC: 18252 | Get disk transfer address
2018-12-17T22:09:41.331494745Z 26 PC: 1825d | Set disk transfer address
2018-12-17T22:09:41.332798377Z 79 PC: 18261 | Find next file
2018-12-17T22:09:41.33459848Z 26 PC: 18271 | Set disk transfer address
2018-12-17T22:09:41.33704691Z 26 PC: 13a18 | Set disk transfer address
2018-12-17T22:09:41.338579963Z 78 PC: 13a2a | Find first file
2018-12-17T22:09:41.342317352Z 47 PC: 18252 | Get disk transfer address
2018-12-17T22:09:41.34317897Z 26 PC: 1825d | Set disk transfer address
2018-12-17T22:09:41.34444324Z 79 PC: 18261 | Find next file
2018-12-17T22:09:41.346151994Z 26 PC: 18271 | Set disk transfer address
2018-12-17T22:09:41.348068599Z 26 PC: 13a18 | Set disk transfer address
2018-12-17T22:09:41.349512865Z 78 PC: 13a2a | Find first file
2018-12-17T22:09:41.353354067Z 47 PC: 18252 | Get disk transfer address
2018-12-17T22:09:41.35412026Z 26 PC: 1825d | Set disk transfer address
2018-12-17T22:09:41.355805109Z 79 PC: 18261 | Find next file
2018-12-17T22:09:41.357511994Z 26 PC: 18271 | Set disk transfer address
2018-12-17T22:09:41.359395523Z 26 PC: 13a18 | Set disk transfer address
2018-12-17T22:09:41.360728465Z 78 PC: 13a2a | Find first file
2018-12-17T22:09:41.364537385Z 47 PC: 18252 | Get disk transfer address
2018-12-17T22:09:41.365494228Z 26 PC: 1825d | Set disk transfer address
2018-12-17T22:09:41.366913697Z 79 PC: 18261 | Find next file
2018-12-17T22:09:41.369364106Z 26 PC: 18271 | Set disk transfer address
2018-12-17T22:09:41.372021594Z 26 PC: 13a18 | Set disk transfer address
2018-12-17T22:09:41.373220615Z 78 PC: 13a2a | Find first file
2018-12-17T22:09:41.378932576Z 47 PC: 18252 | Get disk transfer address
2018-12-17T22:09:41.379763393Z 26 PC: 1825d | Set disk transfer address
2018-12-17T22:09:41.380930005Z 79 PC: 18261 | Find next file
2018-12-17T22:09:41.383228297Z 26 PC: 18271 | Set disk transfer address
2018-12-17T22:09:41.386289265Z 47 PC: 18252 | Get disk transfer address
2018-12-17T22:09:41.387628913Z 26 PC: 1825d | Set disk transfer address
2018-12-17T22:09:41.388949999Z 79 PC: 18261 | Find next file
2018-12-17T22:09:41.391288113Z 26 PC: 18271 | Set disk transfer address
2018-12-17T22:09:41.394547215Z 26 PC: 13a18 | Set disk transfer address
2018-12-17T22:09:41.395706344Z 78 PC: 13a2a | Find first file
2018-12-17T22:09:41.401628205Z 47 PC: 18252 | Get disk transfer address
2018-12-17T22:09:41.404838305Z 26 PC: 1825d | Set disk transfer address
2018-12-17T22:09:41.406073039Z 79 PC: 18261 | Find next file
2018-12-17T22:09:41.408664605Z 26 PC: 18271 | Set disk transfer address
2018-12-17T22:09:41.412105548Z 98 PC: 1840d | Get current PSP
2018-12-17T22:09:41.413799617Z 98 PC: 1840d | Get current PSP
2018-12-17T22:09:41.415960316Z 98 PC: 1840d | Get current PSP
2018-12-17T22:09:41.419497003Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:41.428605839Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:09:41.43540781Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:41.443045288Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:09:41.449956051Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:41.456362818Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:09:41.464522831Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:41.470673593Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:09:41.47528908Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:41.482039459Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:09:41.489861748Z 47 PC: 18215 | Get disk transfer address
2018-12-17T22:09:41.491378816Z 26 PC: 18220 | Set disk transfer address
2018-12-17T22:09:41.493297148Z 78 PC: 1822c | Find first file
2018-12-17T22:09:41.499642245Z 26 PC: 1823e | Set disk transfer address
2018-12-17T22:09:41.50267175Z 26 PC: 13a18 | Set disk transfer address
2018-12-17T22:09:41.504825075Z 78 PC: 13a2a | Find first file
2018-12-17T22:09:41.511475677Z 67 PC: 13409 | Get or set file attributes
2018-12-17T22:09:41.517609629Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:42.203453105Z 61 PC: 13557 | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:09:42.218182273Z 66 PC: 184fb | Move file pointer
2018-12-17T22:09:42.222717161Z 63 PC: 135f9 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:09:42.229718917Z 62 PC: 1363f | Close file
2018-12-17T22:09:42.232339627Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:42.244288363Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:42.252470248Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:09:42.25907395Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:42.265770027Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:09:42.272970537Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:42.28229498Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:09:42.289985108Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:42.296569375Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:09:42.304192996Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:42.310681807Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:09:42.316921959Z 86 PC: 13ed2 | Rename file
2018-12-17T22:09:42.330271553Z 26 PC: 132f1 | Set disk transfer address
2018-12-17T22:09:42.331666677Z 78 PC: 13303 | Find first file
2018-12-17T22:09:42.338067084Z 67 PC: 13409 | Get or set file attributes
2018-12-17T22:09:42.344650481Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:42.358117752Z 61 PC: 13557 | Open file (Filename = 'C:\DOS\ATTRIB.���')
2018-12-17T22:09:42.365958178Z 87 PC: 134c4 | Get or set file date and time
2018-12-17T22:09:42.368588646Z 63 PC: 135f9 | Read file or device (Read 5776 bytes on handle 5)
2018-12-17T22:09:42.375798523Z 66 PC: 184fb | Move file pointer
2018-12-17T22:09:42.377856457Z 64 PC: 135a3 | Write file or device (Write 5776 bytes on handle 5)
2018-12-17T22:09:42.386213641Z 66 PC: 184fb | Move file pointer
2018-12-17T22:09:42.404439647Z 64 PC: 135a3 | Write file or device (Write 5776 bytes on handle 5)
2018-12-17T22:09:42.41349076Z 87 PC: 13526 | Get or set file date and time
2018-12-17T22:09:42.416236677Z 62 PC: 1363f | Close file
2018-12-17T22:09:42.423235385Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:42.433402309Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:42.442465206Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:09:42.449217587Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:42.455523793Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:09:42.462854922Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:42.469317299Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:09:42.477137877Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:42.483864268Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:09:42.490562838Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:42.496592689Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:09:42.503748827Z 86 PC: 13eee | Rename file
2018-12-17T22:09:42.670216639Z 47 PC: 18252 | Get disk transfer address
2018-12-17T22:09:42.671359728Z 26 PC: 1825d | Set disk transfer address
2018-12-17T22:09:42.673064415Z 79 PC: 18261 | Find next file
2018-12-17T22:09:42.675300987Z 26 PC: 18271 | Set disk transfer address
2018-12-17T22:09:42.677249576Z 26 PC: 13a18 | Set disk transfer address
2018-12-17T22:09:42.679032233Z 78 PC: 13a2a | Find first file
2018-12-17T22:09:42.685556969Z 67 PC: 13409 | Get or set file attributes
2018-12-17T22:09:42.691544054Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:42.789075596Z 61 PC: 13557 | Open file (Filename = 'C:\DOS\CHKDSK.EXE')
2018-12-17T22:09:42.79667924Z 66 PC: 184fb | Move file pointer
2018-12-17T22:09:42.798847517Z 63 PC: 135f9 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:09:42.805805924Z 62 PC: 1363f | Close file
2018-12-17T22:09:42.80796447Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:42.818628189Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:42.825714031Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:09:42.833241893Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:42.839442247Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:09:42.847191788Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:42.853420532Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:09:42.859927819Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:42.867176578Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:09:42.874104175Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:42.880294367Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:09:42.888012763Z 86 PC: 13ed2 | Rename file
2018-12-17T22:09:42.899575697Z 26 PC: 132f1 | Set disk transfer address
2018-12-17T22:09:42.90099975Z 78 PC: 13303 | Find first file
2018-12-17T22:09:42.908121542Z 67 PC: 13409 | Get or set file attributes
2018-12-17T22:09:42.914409866Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:42.924497521Z 61 PC: 13557 | Open file (Filename = 'C:\DOS\CHKDSK.���')
2018-12-17T22:09:42.933327958Z 87 PC: 134c4 | Get or set file date and time
2018-12-17T22:09:42.934898008Z 63 PC: 135f9 | Read file or device (Read 5776 bytes on handle 5)
2018-12-17T22:09:42.942257512Z 66 PC: 184fb | Move file pointer
2018-12-17T22:09:42.945358917Z 64 PC: 135a3 | Write file or device (Write 5776 bytes on handle 5)
2018-12-17T22:09:42.953237073Z 66 PC: 184fb | Move file pointer
2018-12-17T22:09:42.971703887Z 64 PC: 135a3 | Write file or device (Write 5776 bytes on handle 5)
2018-12-17T22:09:42.985419579Z 87 PC: 13526 | Get or set file date and time
2018-12-17T22:09:42.986993679Z 62 PC: 1363f | Close file
2018-12-17T22:09:42.994693902Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.005305524Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.011370479Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:09:43.017965792Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.025604937Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:09:43.032104116Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.038383773Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:09:43.045459869Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.051570357Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:09:43.058869638Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.066274996Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:09:43.073223604Z 86 PC: 13eee | Rename file
2018-12-17T22:09:43.08603746Z 47 PC: 18252 | Get disk transfer address
2018-12-17T22:09:43.087262319Z 26 PC: 1825d | Set disk transfer address
2018-12-17T22:09:43.088360673Z 79 PC: 18261 | Find next file
2018-12-17T22:09:43.091852036Z 26 PC: 18271 | Set disk transfer address
2018-12-17T22:09:43.094840406Z 47 PC: 18215 | Get disk transfer address
2018-12-17T22:09:43.095851719Z 26 PC: 18220 | Set disk transfer address
2018-12-17T22:09:43.09758135Z 78 PC: 1822c | Find first file
2018-12-17T22:09:43.103792511Z 26 PC: 1823e | Set disk transfer address
2018-12-17T22:09:43.106626392Z 26 PC: 13a18 | Set disk transfer address
2018-12-17T22:09:43.108101908Z 78 PC: 13a2a | Find first file
2018-12-17T22:09:43.11453457Z 47 PC: 18252 | Get disk transfer address
2018-12-17T22:09:43.11584966Z 26 PC: 1825d | Set disk transfer address
2018-12-17T22:09:43.118288816Z 79 PC: 18261 | Find next file
2018-12-17T22:09:43.12142403Z 26 PC: 18271 | Set disk transfer address
2018-12-17T22:09:43.125204045Z 26 PC: 13a18 | Set disk transfer address
2018-12-17T22:09:43.134175791Z 78 PC: 13a2a | Find first file
2018-12-17T22:09:43.141135886Z 67 PC: 13409 | Get or set file attributes
2018-12-17T22:09:43.147901799Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.157939172Z 61 PC: 13557 | Open file (Filename = 'C:\DOS\FORMAT.COM')
2018-12-17T22:09:43.165640876Z 66 PC: 184fb | Move file pointer
2018-12-17T22:09:43.167738658Z 63 PC: 135f9 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:09:43.17435737Z 62 PC: 1363f | Close file
2018-12-17T22:09:43.17625249Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.183034595Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.190521196Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:09:43.197192631Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.203893323Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:09:43.210542333Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.21668921Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:09:43.223373068Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.230783978Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:09:43.237776023Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.244107686Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:09:43.250553171Z 86 PC: 13ed2 | Rename file
2018-12-17T22:09:43.261173307Z 26 PC: 132f1 | Set disk transfer address
2018-12-17T22:09:43.262698889Z 78 PC: 13303 | Find first file
2018-12-17T22:09:43.268830579Z 67 PC: 13409 | Get or set file attributes
2018-12-17T22:09:43.274646029Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.285287638Z 61 PC: 13557 | Open file (Filename = 'C:\DOS\FORMAT.���')
2018-12-17T22:09:43.2934954Z 87 PC: 134c4 | Get or set file date and time
2018-12-17T22:09:43.295117928Z 63 PC: 135f9 | Read file or device (Read 5776 bytes on handle 5)
2018-12-17T22:09:43.303404292Z 66 PC: 184fb | Move file pointer
2018-12-17T22:09:43.305272858Z 64 PC: 135a3 | Write file or device (Write 5776 bytes on handle 5)
2018-12-17T22:09:43.312791703Z 66 PC: 184fb | Move file pointer
2018-12-17T22:09:43.332207473Z 64 PC: 135a3 | Write file or device (Write 5776 bytes on handle 5)
2018-12-17T22:09:43.341706488Z 87 PC: 13526 | Get or set file date and time
2018-12-17T22:09:43.34329269Z 62 PC: 1363f | Close file
2018-12-17T22:09:43.352146041Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.366378275Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.37263384Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:09:43.380182443Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.387186246Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:09:43.394111973Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.401699775Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:09:43.40904833Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.415229735Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:09:43.423100722Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.429758551Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:09:43.436449718Z 86 PC: 13eee | Rename file
2018-12-17T22:09:43.448409387Z 47 PC: 18252 | Get disk transfer address
2018-12-17T22:09:43.449670588Z 26 PC: 1825d | Set disk transfer address
2018-12-17T22:09:43.45146499Z 79 PC: 18261 | Find next file
2018-12-17T22:09:43.455337307Z 26 PC: 18271 | Set disk transfer address
2018-12-17T22:09:43.45828176Z 26 PC: 13a18 | Set disk transfer address
2018-12-17T22:09:43.459424356Z 78 PC: 13a2a | Find first file
2018-12-17T22:09:43.466709424Z 67 PC: 13409 | Get or set file attributes
2018-12-17T22:09:43.472605627Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.48275752Z 61 PC: 13557 | Open file (Filename = 'C:\DOS\KEYB.COM')
2018-12-17T22:09:43.490137101Z 66 PC: 184fb | Move file pointer
2018-12-17T22:09:43.491798198Z 63 PC: 135f9 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:09:43.497333005Z 62 PC: 1363f | Close file
2018-12-17T22:09:43.499002713Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.509118357Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.515534756Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:09:43.522255368Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.528352753Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:09:43.535322177Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.541408232Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:09:43.548646585Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.555300162Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:09:43.561828755Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.567975159Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:09:43.574613318Z 86 PC: 13ed2 | Rename file
2018-12-17T22:09:43.58560477Z 26 PC: 132f1 | Set disk transfer address
2018-12-17T22:09:43.587338084Z 78 PC: 13303 | Find first file
2018-12-17T22:09:43.593883507Z 67 PC: 13409 | Get or set file attributes
2018-12-17T22:09:43.599886104Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.610699002Z 61 PC: 13557 | Open file (Filename = 'C:\DOS\KEYB.���')
2018-12-17T22:09:43.615402076Z 87 PC: 134c4 | Get or set file date and time
2018-12-17T22:09:43.616528006Z 63 PC: 135f9 | Read file or device (Read 5776 bytes on handle 5)
2018-12-17T22:09:43.621688485Z 66 PC: 184fb | Move file pointer
2018-12-17T22:09:43.623152363Z 64 PC: 135a3 | Write file or device (Write 5776 bytes on handle 5)
2018-12-17T22:09:43.628293343Z 66 PC: 184fb | Move file pointer
2018-12-17T22:09:43.645594893Z 64 PC: 135a3 | Write file or device (Write 5776 bytes on handle 5)
2018-12-17T22:09:43.653907495Z 87 PC: 13526 | Get or set file date and time
2018-12-17T22:09:43.655658418Z 62 PC: 1363f | Close file
2018-12-17T22:09:43.663325007Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.674537261Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.680761757Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:09:43.686257173Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.690340908Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:09:43.694410597Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.699081278Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:09:43.704083225Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.708791562Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:09:43.715469993Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.721730396Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:09:43.728304755Z 86 PC: 13eee | Rename file
2018-12-17T22:09:43.736100878Z 47 PC: 18252 | Get disk transfer address
2018-12-17T22:09:43.736876703Z 26 PC: 1825d | Set disk transfer address
2018-12-17T22:09:43.738153621Z 79 PC: 18261 | Find next file
2018-12-17T22:09:43.740346801Z 26 PC: 18271 | Set disk transfer address
2018-12-17T22:09:43.742319847Z 26 PC: 13a18 | Set disk transfer address
2018-12-17T22:09:43.74344556Z 78 PC: 13a2a | Find first file
2018-12-17T22:09:43.747243517Z 67 PC: 13409 | Get or set file attributes
2018-12-17T22:09:43.751462649Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.758025968Z 61 PC: 13557 | Open file (Filename = 'C:\DOS\SYS.COM')
2018-12-17T22:09:43.76334072Z 66 PC: 184fb | Move file pointer
2018-12-17T22:09:43.765336401Z 63 PC: 135f9 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:09:43.768905778Z 62 PC: 1363f | Close file
2018-12-17T22:09:43.770898469Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.781490882Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.787375048Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:09:43.793840533Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.800875474Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:09:43.80742638Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.813727432Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:09:43.820419635Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.826940006Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:09:43.833418092Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.839499381Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:09:43.845513924Z 86 PC: 13ed2 | Rename file
2018-12-17T22:09:43.856828457Z 26 PC: 132f1 | Set disk transfer address
2018-12-17T22:09:43.85814796Z 78 PC: 13303 | Find first file
2018-12-17T22:09:43.865244883Z 67 PC: 13409 | Get or set file attributes
2018-12-17T22:09:43.871793605Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.881183445Z 61 PC: 13557 | Open file (Filename = 'C:\DOS\SYS.���')
2018-12-17T22:09:43.88789543Z 87 PC: 134c4 | Get or set file date and time
2018-12-17T22:09:43.889390388Z 63 PC: 135f9 | Read file or device (Read 5776 bytes on handle 5)
2018-12-17T22:09:43.896352251Z 66 PC: 184fb | Move file pointer
2018-12-17T22:09:43.903567607Z 64 PC: 135a3 | Write file or device (Write 5776 bytes on handle 5)
2018-12-17T22:09:43.911842846Z 66 PC: 184fb | Move file pointer
2018-12-17T22:09:43.930091223Z 64 PC: 135a3 | Write file or device (Write 5776 bytes on handle 5)
2018-12-17T22:09:43.939992913Z 87 PC: 13526 | Get or set file date and time
2018-12-17T22:09:43.941599222Z 62 PC: 1363f | Close file
2018-12-17T22:09:43.948812154Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.968426726Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.974737658Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:09:43.981618589Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:43.988624839Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:09:43.996453797Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:44.004196857Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:09:44.011013809Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:44.017146332Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:09:44.02521094Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:44.031422942Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:09:44.037662997Z 86 PC: 13eee | Rename file
2018-12-17T22:09:44.049715206Z 47 PC: 18252 | Get disk transfer address
2018-12-17T22:09:44.050888076Z 26 PC: 1825d | Set disk transfer address
2018-12-17T22:09:44.051923678Z 79 PC: 18261 | Find next file
2018-12-17T22:09:44.056470071Z 26 PC: 18271 | Set disk transfer address
2018-12-17T22:09:44.0588189Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:44.065459992Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:09:44.072586776Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:44.078711232Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:09:44.085480674Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:44.09285485Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:09:44.099896645Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:44.106471599Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:09:44.115138054Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:44.122525494Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:09:44.129660823Z 86 PC: 13ed2 | Rename file
2018-12-17T22:09:44.141585734Z 26 PC: 12e7c | Set disk transfer address
2018-12-17T22:09:44.142814289Z 78 PC: 12e8e | Find first file
2018-12-17T22:09:44.149677572Z 67 PC: 13409 | Get or set file attributes
2018-12-17T22:09:44.155465683Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:44.166160503Z 61 PC: 13557 | Open file (Filename = 'A:\TEST.���')
2018-12-17T22:09:44.173777411Z 87 PC: 134c4 | Get or set file date and time
2018-12-17T22:09:44.175534826Z 66 PC: 184fb | Move file pointer
2018-12-17T22:09:44.177464984Z 63 PC: 135f9 | Read file or device (Read 5776 bytes on handle 5)
2018-12-17T22:09:44.186747439Z 66 PC: 184fb | Move file pointer
2018-12-17T22:09:44.205009654Z 64 PC: 135a3 | Write file or device (Write 5776 bytes on handle 5)
2018-12-17T22:09:44.212743309Z 87 PC: 13526 | Get or set file date and time
2018-12-17T22:09:44.215001737Z 62 PC: 1363f | Close file
2018-12-17T22:09:44.222151482Z 61 PC: 13557 | Open file (Filename = 'A:\TEST.���')
2018-12-17T22:09:44.228796573Z 66 PC: 184fb | Move file pointer
2018-12-17T22:09:44.231063937Z 64 PC: 135a3 | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:09:44.238325247Z 87 PC: 13526 | Get or set file date and time
2018-12-17T22:09:44.240809302Z 62 PC: 1363f | Close file
2018-12-17T22:09:44.248545426Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:44.258601097Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:44.265966213Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:09:44.272777725Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:44.279210578Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:09:44.287296532Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:44.294083309Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:09:44.300866018Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:44.307721204Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:09:44.315208868Z 67 PC: 13440 | Get or set file attributes
2018-12-17T22:09:44.321391057Z 65 PC: 13b75 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:09:44.328306975Z 86 PC: 13eee | Rename file
2018-12-17T22:09:44.336096768Z 75 PC: 13126 | Execute program
2018-12-17T22:09:44.351401442Z 80 PC: 1b6c9 | Set current PSP
2018-12-17T22:09:44.352183102Z 48 PC: 1b6ce | Get DOS version
2018-12-17T22:09:44.353439174Z 99 PC: 21eb0 | Get DBCS lead byte table pointer
2018-12-17T22:09:44.355963109Z 101 PC: 1b754 | Get extended country info
2018-12-17T22:09:44.362200637Z 99 PC: 1b75a | Get DBCS lead byte table pointer
2018-12-17T22:09:44.363218383Z 74 PC: 1b7bc | Reallocate memory
2018-12-17T22:09:44.364791888Z 25 PC: 1b7f3 | Get default drive
2018-12-17T22:09:44.36591988Z 37 PC: 1b2b3 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T22:09:44.366893519Z 37 PC: 1b2ba | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:09:44.368345015Z 37 PC: 1b2c1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:09:44.372337833Z 74 PC: 1a45c | Reallocate memory
2018-12-17T22:09:44.373915118Z 72 PC: 1a49d | Allocate memory
2018-12-17T22:09:44.375881658Z 72 PC: 1a4d5 | Allocate memory
2018-12-17T22:09:44.377806267Z 72 PC: 1a4dd | Allocate memory