Sample viewer

vx.netlux.org/Virus.DOS.Lamento.2690

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:10:09.872256478Z 42 PC: 13de6 | Get date 0x13de6: cmp dh, 1
0x13de9: jne 0x13df9
0x13deb: cmp dl, 0x15
0x13dee: jne 0x13df9
0x13df0: mov dl, 0x14
0x13df2: mov ah, 0x2b
0x13df4: int 0x21
0x13df6: call 0x13ed4
0x13df9: mov ax, 0xff00
0x13dfc: int 0x21
0x13dfe: cmp ah, 0x10
0x13e01: jne 0x13e06
0x13e03: jmp 0x13ead
0x13e06: push es
0x13e07: mov ax, 0x3521
0x13e0a: int 0x21
0x13e0c: mov word ptr [0x5af], bx
0x13e10: mov word ptr [0x5b1], es
0x13e14: pop es
0x13e15: mov ah, 0x52
2018-12-17T22:10:09.875665366Z 255 PC: 13dfe | UNKNOWN!
2018-12-17T22:10:09.876642264Z 53 PC: 13e0c | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:10:09.877709102Z 82 PC: 13e19 | Get DOS internal pointers (SYSVARS)
2018-12-17T22:10:09.881036843Z 37 PC: 13e92 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:10:09.882525856Z 53 PC: 145d7 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:10:09.884130091Z 37 PC: 145e8 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:10:09.886087456Z 67 PC: 145f1 | Get or set file attributes
2018-12-17T22:10:09.891535071Z 67 PC: 14601 | Get or set file attributes
2018-12-17T22:10:10.88469091Z 61 PC: 1460c | Open file (Filename = 'c:\command.com')
2018-12-17T22:10:10.893990256Z 87 PC: 1461a | Get or set file date and time
2018-12-17T22:10:10.902895743Z 66 PC: 1444b | Move file pointer
2018-12-17T22:10:10.904624572Z 63 PC: 14459 | Read file or device (Read 28 bytes on handle 5)
2018-12-17T22:10:10.90785288Z 66 PC: 14558 | Move file pointer
2018-12-17T22:10:10.91033335Z 66 PC: 14587 | Move file pointer
2018-12-17T22:10:10.912952304Z 63 PC: 14595 | Read file or device (Read 12 bytes on handle 5)
2018-12-17T22:10:10.915508734Z 66 PC: 145a2 | Move file pointer
2018-12-17T22:10:10.918961242Z 64 PC: 145b0 | Write file or device (Write 12 bytes on handle 5)
2018-12-17T22:10:10.925807997Z 66 PC: 145c1 | Move file pointer
2018-12-17T22:10:10.929374269Z 64 PC: 145d0 | Write file or device (Write 11 bytes on handle 5)
2018-12-17T22:10:10.950174937Z 64 PC: 146c7 | Write file or device (Write 2690 bytes on handle 5)
2018-12-17T22:10:10.961260076Z 104 PC: 146d1 | Commit file
2018-12-17T22:10:10.971110157Z 87 PC: 14653 | Get or set file date and time
2018-12-17T22:10:10.977843527Z 62 PC: 1465b | Close file
2018-12-17T22:10:10.990081157Z 67 PC: 14668 | Get or set file attributes
2018-12-17T22:10:11.011008968Z 37 PC: 14677 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:10:11.01296687Z 53 PC: 145d7 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:10:11.014208616Z 37 PC: 145e8 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:10:11.015418105Z 67 PC: 145f1 | Get or set file attributes
2018-12-17T22:10:11.025619755Z 67 PC: 14601 | Get or set file attributes
2018-12-17T22:10:11.039348582Z 9 PC: 12a6a | Display string (Could not find end pointer)
2018-12-17T22:10:11.043155926Z 9 PC: 12a71 | Display string (Could not find end pointer)

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2255,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:45:20.118259756Z 42 PC: 13de6 | Get date 0x13de6: cmp dh, 1
0x13de9: jne 0x13df9
0x13deb: cmp dl, 0x15
0x13dee: jne 0x13df9
0x13df0: mov dl, 0x14
0x13df2: mov ah, 0x2b
0x13df4: int 0x21
0x13df6: call 0x13ed4
0x13df9: mov ax, 0xff00
0x13dfc: int 0x21
0x13dfe: cmp ah, 0x10
0x13e01: jne 0x13e06
0x13e03: jmp 0x13ead
0x13e06: push es
0x13e07: mov ax, 0x3521
0x13e0a: int 0x21
0x13e0c: mov word ptr [0x5af], bx
0x13e10: mov word ptr [0x5b1], es
0x13e14: pop es
0x13e15: mov ah, 0x52
2018-12-25T11:45:20.121213518Z 255 PC: 13dfe | UNKNOWN!
2018-12-25T11:45:20.122596477Z 53 PC: 13e0c | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:45:20.124203349Z 82 PC: 13e19 | Get DOS internal pointers (SYSVARS)
2018-12-25T11:45:20.125459934Z 37 PC: 13e92 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:45:20.126926159Z 53 PC: 145d7 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:45:20.129230086Z 37 PC: 145e8 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:45:20.130303197Z 67 PC: 145f1 | Get or set file attributes
2018-12-25T11:45:20.135942599Z 67 PC: 14601 | Get or set file attributes
2018-12-25T11:45:21.431887801Z 61 PC: 1460c | Open file (Filename = 'c:\command.com')
2018-12-25T11:45:21.438415441Z 87 PC: 1461a | Get or set file date and time
2018-12-25T11:45:21.440957931Z 66 PC: 1444b | Move file pointer
2018-12-25T11:45:21.442524941Z 63 PC: 14459 | Read file or device (Read 28 bytes on handle 5)
2018-12-25T11:45:21.444986354Z 66 PC: 14558 | Move file pointer
2018-12-25T11:45:21.44686395Z 66 PC: 14587 | Move file pointer
2018-12-25T11:45:21.448300044Z 63 PC: 14595 | Read file or device (Read 12 bytes on handle 5)
2018-12-25T11:45:21.450828231Z 66 PC: 145a2 | Move file pointer
2018-12-25T11:45:21.452440224Z 64 PC: 145b0 | Write file or device (Write 12 bytes on handle 5)
2018-12-25T11:45:21.45538689Z 66 PC: 145c1 | Move file pointer
2018-12-25T11:45:21.456692304Z 64 PC: 145d0 | Write file or device (Write 11 bytes on handle 5)
2018-12-25T11:45:21.461978572Z 64 PC: 146c7 | Write file or device (Write 2690 bytes on handle 5)
2018-12-25T11:45:21.749840781Z 104 PC: 146d1 | Commit file
2018-12-25T11:45:21.75753614Z 87 PC: 14653 | Get or set file date and time
2018-12-25T11:45:21.759419907Z 62 PC: 1465b | Close file
2018-12-25T11:45:21.765894657Z 67 PC: 14668 | Get or set file attributes
2018-12-25T11:45:21.775810235Z 37 PC: 14677 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:45:21.777075993Z 53 PC: 145d7 | Get interrupt vector (See above)
2018-12-25T11:45:21.78006231Z 37 PC: 145e8 | Set interrupt vector (See above)
2018-12-25T11:45:21.781481535Z 67 PC: 145f1 | Get or set file attributes (See above)
2018-12-25T11:45:21.79077889Z 67 PC: 14601 | Get or set file attributes (See above)
2018-12-25T11:45:21.803853778Z 9 PC: 12a6a | Display string (Could not find end pointer)
2018-12-25T11:45:21.806360561Z 9 PC: 12a71 | Display string (Could not find end pointer)

{"DateBased":true,"Day":21,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2255,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:45:20.14291539Z 42 PC: 13de6 | Get date 0x13de6: cmp dh, 1
0x13de9: jne 0x13df9
0x13deb: cmp dl, 0x15
0x13dee: jne 0x13df9
0x13df0: mov dl, 0x14
0x13df2: mov ah, 0x2b
0x13df4: int 0x21
0x13df6: call 0x13ed4
0x13df9: mov ax, 0xff00
0x13dfc: int 0x21
0x13dfe: cmp ah, 0x10
0x13e01: jne 0x13e06
0x13e03: jmp 0x13ead
0x13e06: push es
0x13e07: mov ax, 0x3521
0x13e0a: int 0x21
0x13e0c: mov word ptr [0x5af], bx
0x13e10: mov word ptr [0x5b1], es
0x13e14: pop es
0x13e15: mov ah, 0x52
2018-12-25T11:45:20.145610196Z 43 PC: 13df6 | Set date
2018-12-25T11:45:20.148744274Z 14 PC: 13ede | Set default drive (Drive = 'C')
2018-12-25T11:45:20.149862317Z 26 PC: 13ee5 | Set disk transfer address
2018-12-25T11:45:20.158419458Z 59 PC: 13ef5 | Change current directory
2018-12-25T11:45:20.16400914Z 78 PC: 13f9f | Find first file
2018-12-25T11:45:20.172892498Z 86 PC: 13fcd | Rename file
2018-12-25T11:45:21.429731421Z 79 PC: 13fb5 | Find next file
2018-12-25T11:45:21.433862437Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:21.749592866Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:21.762835183Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:21.774431898Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:21.777475893Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:21.792097868Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:21.796307612Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:21.808410383Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:21.812324073Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:21.823361664Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:21.826259322Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:21.839731984Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:21.841910522Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:21.849358567Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:21.853425201Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:21.865112124Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:21.867959673Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:21.878897729Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:21.881065505Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:21.888345056Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:21.891013813Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:21.898588999Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:21.900810142Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:21.908490684Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:21.913375957Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:21.924977232Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:21.927838153Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:21.939024449Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:21.941815471Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:21.95242189Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:21.95536313Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:21.965926965Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:21.968688075Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:21.980168487Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:21.982945882Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:21.993480933Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:21.996367786Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.006969542Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.009718754Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.020486095Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.023240837Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.033830331Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.037752678Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.048355635Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.051128667Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.061874354Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.064636044Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.075230709Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.078192589Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.088580493Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.091302172Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.10251741Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.105260151Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.115695849Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.118851196Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.129590895Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.13238239Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.142950279Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.145837709Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.157511804Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.160747731Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.171635717Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.174429216Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.186422321Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.189316602Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.20022566Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.203603423Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.214354149Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.216974543Z 59 PC: 13ef5 | Change current directory (See above)
2018-12-25T11:45:22.223254286Z 59 PC: 13ef5 | Change current directory (See above)
2018-12-25T11:45:22.228184199Z 59 PC: 13ef5 | Change current directory (See above)
2018-12-25T11:45:22.233083308Z 59 PC: 13ef5 | Change current directory (See above)
2018-12-25T11:45:22.238689394Z 59 PC: 13f11 | Change current directory
2018-12-25T11:45:22.247460633Z 78 PC: 13f9f | Find first file (See above)
2018-12-25T11:45:22.255884273Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.269385708Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.272655676Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.28441827Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.287721318Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.298654201Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.301325848Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.312604575Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.315481211Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.34053881Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.343908507Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.354892034Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.357717562Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.369292544Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.372167092Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.383293103Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.386691094Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.396082722Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.398093321Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.406686237Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.409616303Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.420521193Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.42382457Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.434899278Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.437763567Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.449296759Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.452233613Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.46314223Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.467898616Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.478885511Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.481788849Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.493082003Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.495125353Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.502195008Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.504886651Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.511964542Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.513859852Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.52118863Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.523191499Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.530484808Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.532834793Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.539830212Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.541764758Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.549254006Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.55127854Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.558270434Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.56170805Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.572769736Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.575657471Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.587019506Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.589935464Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.601472465Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.604770158Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.615566395Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.61836893Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.625647451Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.628521467Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.639344404Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.641986349Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.652283027Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.65461723Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.662145747Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.664077166Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.671406068Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.673583142Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.684381936Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.687136312Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.698402541Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.701532377Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.712778325Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.717667286Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.7288735Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.731930008Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.743682044Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.74664431Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.757266568Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.760792058Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.772040912Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.775284068Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.788534711Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.791489993Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.799940588Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.802422002Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.813405094Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.816213168Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.82767188Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.830583345Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.843210729Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.846570997Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.857474498Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.861003483Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.872878653Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.87572433Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.886904933Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.889887999Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.901566664Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.904897878Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.916217743Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.919474736Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.931105712Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.933968717Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.944929188Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.948719639Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.960231165Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.964148453Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.975671377Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.978605943Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.990160821Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.993874012Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.005353583Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.008279888Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.020508271Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.023463151Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.035483936Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.039211767Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.050079636Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.052910235Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.064789102Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.067732977Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.078737054Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.082325844Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.094156858Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.097066582Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.108447261Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.111400677Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.122330659Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.125765569Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.136803748Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.139800143Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.152025511Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.155074109Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.166195313Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.169806463Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.178453786Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.180543101Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.192398353Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.195406007Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.206774889Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.210071043Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.221781145Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.225294834Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.237444442Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.240879766Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.252947551Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.256196856Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.266762918Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.270463723Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.282200047Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.285182272Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.297038303Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.299966936Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.310938054Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.314310826Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.32512274Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.328050707Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.340011694Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.342866909Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.353471919Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.356861464Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.373631367Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.376423308Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.387130632Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.389904253Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.401236603Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.403604919Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.410761612Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.412852399Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.419829375Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.422705784Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.433720797Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.436744703Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.447496392Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.450778665Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.462197882Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.464913566Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.475893827Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.478689515Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.489242369Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.492485207Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.503055649Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.505714486Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.516456534Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.519912255Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.53040689Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.533744721Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.544256011Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.547044165Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.557586137Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.56042773Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.57111466Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.5739392Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.585168969Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.588654777Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.599191586Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.601889245Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.612737814Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.615547437Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.626070327Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.629235099Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.640536308Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.64303987Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.653982283Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.656868314Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.667669162Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.670863595Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.682216459Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.686534626Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.697400312Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.700213889Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.709189526Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.712159417Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.722892853Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.726047515Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.736631916Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.739449065Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.750448228Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.753242047Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.765820334Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.769878384Z 59 PC: 13f1d | Change current directory
2018-12-25T11:45:23.775611062Z 78 PC: 13f9f | Find first file (See above)
2018-12-25T11:45:23.783983759Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.796378802Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.799662182Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.811354525Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.814260448Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.827009223Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.830323501Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.841756186Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.844605634Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.856308885Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.859137582Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.871400056Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.874972393Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.88607585Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.890290552Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.901310112Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.9044763Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.916119961Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.918999061Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.930067481Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.933307301Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.944513388Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.946715803Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.954883114Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.958493631Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.970636313Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.973693116Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.984837053Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.988627747Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.999767075Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.002542736Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.015454427Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.018556594Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.029687621Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.034072766Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.045278893Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.048495209Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.060652454Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.063839128Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.07525419Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.08009196Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.09126566Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.094841064Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.10631068Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.109588539Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.121882253Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.125507747Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.136926829Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.1407247Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.1523403Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.155190843Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.166257533Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.169074662Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.180593121Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.183563737Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.19457462Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.198169702Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.209834598Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.212727959Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.224844333Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.227829779Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.238614346Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.242517367Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.253468554Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.256283356Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.268509942Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.271496751Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.283552719Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.286586586Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.297340731Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.300733445Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.311511157Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.314217581Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.32685149Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.329707351Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.340443075Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.343639617Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.354739634Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.357768486Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.368991562Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.371789041Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.38338249Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.386277711Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.49286692Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.496184864Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.63576643Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.638812342Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.76372512Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.766752313Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.292806593Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.296788395Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.324128825Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.328085124Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.35064434Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.353593968Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.36874969Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.37090201Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.385851997Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.390375214Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.405763665Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.408638587Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.424286781Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.427306506Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.442099643Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.446320746Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.457754832Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.460960706Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.478729271Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.482571575Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.519201623Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.522195128Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.550924517Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.55478365Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.581133265Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.584135834Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.622828503Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.626039441Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.663855345Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.668309782Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.718788982Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.72202724Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.740319656Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.754538925Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.766628111Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.770389612Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.781396152Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.785836436Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.797798804Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.801194444Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.813533314Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.816875237Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.828667136Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.832949918Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.844118765Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.847338408Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.861347601Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.864570074Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.875996239Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.880231838Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.891391259Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.895518997Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.907202906Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.91086623Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.923535203Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.926696134Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.937956821Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.941898224Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.953940809Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.957535082Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.970273578Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.973385458Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.986978724Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.990027378Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:26.001418495Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:26.005624033Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:26.016656833Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:26.019752855Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:26.031809432Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:26.03478827Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:26.046671446Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:26.050734878Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:26.062049754Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:26.065452481Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:26.078034745Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:26.081357889Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:26.092823151Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:26.096409342Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:26.108091643Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:26.111860796Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:26.123285696Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:26.126302816Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:26.138062418Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:26.141098477Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:26.152589169Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:26.156634236Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:26.167708255Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:26.171629603Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:26.183431305Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:26.186811225Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:26.199359259Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:26.202896572Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:26.214275066Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:26.218564134Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:26.230057954Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:26.233355263Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:26.246444163Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:26.249542982Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:26.260937138Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:26.264526949Z 59 PC: 13f11 | Change current directory (See above)
2018-12-25T11:45:26.269989473Z 59 PC: 13f11 | Change current directory (See above)
2018-12-25T11:45:26.275903549Z 59 PC: 13f11 | Change current directory (See above)
2018-12-25T11:45:26.281677496Z 59 PC: 13f11 | Change current directory (See above)
2018-12-25T11:45:26.286945829Z 59 PC: 13f11 | Change current directory (See above)
2018-12-25T11:45:26.292697627Z 60 PC: 13f33 | Create or truncate file
2018-12-25T11:45:26.305142476Z 62 PC: 13f39 | Close file
2018-12-25T11:45:26.307593181Z 60 PC: 13f43 | Create or truncate file
2018-12-25T11:45:26.319570595Z 62 PC: 13f49 | Close file
2018-12-25T11:45:26.328495312Z 9 PC: 13f55 | Display string (String= ' ... ha sido una cortesĦa de Woi')
2018-12-25T11:45:26.33334439Z 9 PC: 13f6d | Display string (String= '')
2018-12-25T11:45:26.367648181Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:26.402598928Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:26.442275754Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:26.492457576Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:26.528715897Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:26.565440022Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:26.600633168Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:26.635611097Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:26.669916729Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:26.70413341Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:26.739234489Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:26.773491039Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:26.809732847Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:26.844860177Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:26.879031702Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:26.914444274Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:26.949222972Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:26.985371916Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.020507957Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.055883656Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.091870202Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.127779807Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.162135803Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.199417824Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.234624326Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.269537847Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.306636412Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.341832557Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.378020198Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.414155023Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.466446925Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.50114944Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.537014247Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.571342305Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.609658109Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.644625395Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.680681689Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.717052034Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.752752048Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.787368638Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.825418535Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.862380096Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.897941113Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.935738505Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.972825328Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.008963972Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.046119227Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.082268974Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.122657868Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.158409226Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.194767564Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.234489019Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.270333085Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.306929459Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.342517747Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.377389206Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.41417307Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.449852048Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.485652045Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.520368187Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.556396125Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.593318375Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.628806937Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.666071347Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.701985891Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.73803057Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.774857088Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.810642053Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.847767709Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.883724493Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.920008641Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.957569512Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.999988784Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:29.037277215Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:29.074308016Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:29.11022128Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:29.147700539Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:29.183875177Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:29.222623081Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:29.260048455Z 9 PC: 13f82 | Display string (String= ' ')
2018-12-25T11:45:29.262435462Z 9 PC: 13f89 | Display string (String= ' ')
2018-12-25T11:45:29.267400039Z 76 PC: 13f8e | Terminate with return code (Return code = '0')

{"DateBased":true,"Day":1,"Month":2,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2255,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:45:20.256298888Z 42 PC: 13de6 | Get date 0x13de6: cmp dh, 1
0x13de9: jne 0x13df9
0x13deb: cmp dl, 0x15
0x13dee: jne 0x13df9
0x13df0: mov dl, 0x14
0x13df2: mov ah, 0x2b
0x13df4: int 0x21
0x13df6: call 0x13ed4
0x13df9: mov ax, 0xff00
0x13dfc: int 0x21
0x13dfe: cmp ah, 0x10
0x13e01: jne 0x13e06
0x13e03: jmp 0x13ead
0x13e06: push es
0x13e07: mov ax, 0x3521
0x13e0a: int 0x21
0x13e0c: mov word ptr [0x5af], bx
0x13e10: mov word ptr [0x5b1], es
0x13e14: pop es
0x13e15: mov ah, 0x52
2018-12-25T11:45:20.258968516Z 255 PC: 13dfe | UNKNOWN!
2018-12-25T11:45:20.259705611Z 53 PC: 13e0c | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:45:20.260797425Z 82 PC: 13e19 | Get DOS internal pointers (SYSVARS)
2018-12-25T11:45:20.263163028Z 37 PC: 13e92 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:45:20.270622506Z 53 PC: 145d7 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:45:20.271742969Z 37 PC: 145e8 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:45:20.272969088Z 67 PC: 145f1 | Get or set file attributes
2018-12-25T11:45:20.278217285Z 67 PC: 14601 | Get or set file attributes
2018-12-25T11:45:21.432006962Z 61 PC: 1460c | Open file (Filename = 'c:\command.com')
2018-12-25T11:45:21.438768552Z 87 PC: 1461a | Get or set file date and time
2018-12-25T11:45:21.440893296Z 66 PC: 1444b | Move file pointer
2018-12-25T11:45:21.442149575Z 63 PC: 14459 | Read file or device (Read 28 bytes on handle 5)
2018-12-25T11:45:21.444687522Z 66 PC: 14558 | Move file pointer
2018-12-25T11:45:21.446218888Z 66 PC: 14587 | Move file pointer
2018-12-25T11:45:21.447543356Z 63 PC: 14595 | Read file or device (Read 12 bytes on handle 5)
2018-12-25T11:45:21.449901691Z 66 PC: 145a2 | Move file pointer
2018-12-25T11:45:21.451581516Z 64 PC: 145b0 | Write file or device (Write 12 bytes on handle 5)
2018-12-25T11:45:21.454077282Z 66 PC: 145c1 | Move file pointer
2018-12-25T11:45:21.455449077Z 64 PC: 145d0 | Write file or device (Write 11 bytes on handle 5)
2018-12-25T11:45:21.461270316Z 64 PC: 146c7 | Write file or device (Write 2690 bytes on handle 5)
2018-12-25T11:45:21.708832671Z 104 PC: 146d1 | Commit file
2018-12-25T11:45:21.750097654Z 87 PC: 14653 | Get or set file date and time
2018-12-25T11:45:21.75461722Z 62 PC: 1465b | Close file
2018-12-25T11:45:21.761222411Z 67 PC: 14668 | Get or set file attributes
2018-12-25T11:45:21.767661586Z 37 PC: 14677 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:45:21.769355265Z 53 PC: 145d7 | Get interrupt vector (See above)
2018-12-25T11:45:21.770710652Z 37 PC: 145e8 | Set interrupt vector (See above)
2018-12-25T11:45:21.771749773Z 67 PC: 145f1 | Get or set file attributes (See above)
2018-12-25T11:45:21.778897786Z 67 PC: 14601 | Get or set file attributes (See above)
2018-12-25T11:45:21.786873855Z 9 PC: 12a6a | Display string (Could not find end pointer)
2018-12-25T11:45:21.789315622Z 9 PC: 12a71 | Display string (Could not find end pointer)

{"DateBased":true,"Day":1,"Month":2,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2255,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:45:20.895695336Z 42 PC: 13de6 | Get date 0x13de6: cmp dh, 1
0x13de9: jne 0x13df9
0x13deb: cmp dl, 0x15
0x13dee: jne 0x13df9
0x13df0: mov dl, 0x14
0x13df2: mov ah, 0x2b
0x13df4: int 0x21
0x13df6: call 0x13ed4
0x13df9: mov ax, 0xff00
0x13dfc: int 0x21
0x13dfe: cmp ah, 0x10
0x13e01: jne 0x13e06
0x13e03: jmp 0x13ead
0x13e06: push es
0x13e07: mov ax, 0x3521
0x13e0a: int 0x21
0x13e0c: mov word ptr [0x5af], bx
0x13e10: mov word ptr [0x5b1], es
0x13e14: pop es
0x13e15: mov ah, 0x52
2018-12-25T11:45:20.898152007Z 255 PC: 13dfe | UNKNOWN!
2018-12-25T11:45:20.898857495Z 53 PC: 13e0c | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:45:20.899889109Z 82 PC: 13e19 | Get DOS internal pointers (SYSVARS)
2018-12-25T11:45:20.901441641Z 37 PC: 13e92 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:45:20.902623741Z 53 PC: 145d7 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:45:20.903787825Z 37 PC: 145e8 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:45:20.905181538Z 67 PC: 145f1 | Get or set file attributes
2018-12-25T11:45:20.910301031Z 67 PC: 14601 | Get or set file attributes
2018-12-25T11:45:21.750961113Z 61 PC: 1460c | Open file (Filename = 'c:\command.com')
2018-12-25T11:45:21.762481392Z 87 PC: 1461a | Get or set file date and time
2018-12-25T11:45:21.764276748Z 66 PC: 1444b | Move file pointer
2018-12-25T11:45:21.766438243Z 63 PC: 14459 | Read file or device (Read 28 bytes on handle 5)
2018-12-25T11:45:21.770439763Z 66 PC: 14558 | Move file pointer
2018-12-25T11:45:21.772099893Z 66 PC: 14587 | Move file pointer
2018-12-25T11:45:21.773420704Z 63 PC: 14595 | Read file or device (Read 12 bytes on handle 5)
2018-12-25T11:45:21.776231474Z 66 PC: 145a2 | Move file pointer
2018-12-25T11:45:21.777674022Z 64 PC: 145b0 | Write file or device (Write 12 bytes on handle 5)
2018-12-25T11:45:21.780905595Z 66 PC: 145c1 | Move file pointer
2018-12-25T11:45:21.782814152Z 64 PC: 145d0 | Write file or device (Write 11 bytes on handle 5)
2018-12-25T11:45:21.788376294Z 64 PC: 146c7 | Write file or device (Write 2690 bytes on handle 5)
2018-12-25T11:45:21.800317032Z 104 PC: 146d1 | Commit file
2018-12-25T11:45:21.811282936Z 87 PC: 14653 | Get or set file date and time
2018-12-25T11:45:21.813217279Z 62 PC: 1465b | Close file
2018-12-25T11:45:21.819359047Z 67 PC: 14668 | Get or set file attributes
2018-12-25T11:45:21.82917054Z 37 PC: 14677 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:45:21.830529204Z 53 PC: 145d7 | Get interrupt vector (See above)
2018-12-25T11:45:21.831680006Z 37 PC: 145e8 | Set interrupt vector (See above)
2018-12-25T11:45:21.834308271Z 67 PC: 145f1 | Get or set file attributes (See above)
2018-12-25T11:45:21.840459066Z 67 PC: 14601 | Get or set file attributes (See above)
2018-12-25T11:45:21.848414501Z 9 PC: 12a6a | Display string (Could not find end pointer)
2018-12-25T11:45:21.851133997Z 9 PC: 12a71 | Display string (Could not find end pointer)

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2255,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:45:21.229654502Z 42 PC: 13de6 | Get date 0x13de6: cmp dh, 1
0x13de9: jne 0x13df9
0x13deb: cmp dl, 0x15
0x13dee: jne 0x13df9
0x13df0: mov dl, 0x14
0x13df2: mov ah, 0x2b
0x13df4: int 0x21
0x13df6: call 0x13ed4
0x13df9: mov ax, 0xff00
0x13dfc: int 0x21
0x13dfe: cmp ah, 0x10
0x13e01: jne 0x13e06
0x13e03: jmp 0x13ead
0x13e06: push es
0x13e07: mov ax, 0x3521
0x13e0a: int 0x21
0x13e0c: mov word ptr [0x5af], bx
0x13e10: mov word ptr [0x5b1], es
0x13e14: pop es
0x13e15: mov ah, 0x52
2018-12-25T11:45:21.232013264Z 255 PC: 13dfe | UNKNOWN!
2018-12-25T11:45:21.232987824Z 53 PC: 13e0c | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:45:21.233881134Z 82 PC: 13e19 | Get DOS internal pointers (SYSVARS)
2018-12-25T11:45:21.235243117Z 37 PC: 13e92 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:45:21.236344938Z 53 PC: 145d7 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:45:21.237364133Z 37 PC: 145e8 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:45:21.248442781Z 67 PC: 145f1 | Get or set file attributes
2018-12-25T11:45:21.253485932Z 67 PC: 14601 | Get or set file attributes
2018-12-25T11:45:21.757152295Z 61 PC: 1460c | Open file (Filename = 'c:\command.com')
2018-12-25T11:45:21.764341178Z 87 PC: 1461a | Get or set file date and time
2018-12-25T11:45:21.766215504Z 66 PC: 1444b | Move file pointer
2018-12-25T11:45:21.767932355Z 63 PC: 14459 | Read file or device (Read 28 bytes on handle 5)
2018-12-25T11:45:21.771242245Z 66 PC: 14558 | Move file pointer
2018-12-25T11:45:21.77428668Z 66 PC: 14587 | Move file pointer
2018-12-25T11:45:21.777909139Z 63 PC: 14595 | Read file or device (Read 12 bytes on handle 5)
2018-12-25T11:45:21.780967817Z 66 PC: 145a2 | Move file pointer
2018-12-25T11:45:21.783475662Z 64 PC: 145b0 | Write file or device (Write 12 bytes on handle 5)
2018-12-25T11:45:21.787214795Z 66 PC: 145c1 | Move file pointer
2018-12-25T11:45:21.788726437Z 64 PC: 145d0 | Write file or device (Write 11 bytes on handle 5)
2018-12-25T11:45:21.795110461Z 64 PC: 146c7 | Write file or device (Write 2690 bytes on handle 5)
2018-12-25T11:45:21.802198802Z 104 PC: 146d1 | Commit file
2018-12-25T11:45:21.807245924Z 87 PC: 14653 | Get or set file date and time
2018-12-25T11:45:21.809135055Z 62 PC: 1465b | Close file
2018-12-25T11:45:21.813323689Z 67 PC: 14668 | Get or set file attributes
2018-12-25T11:45:21.822533763Z 37 PC: 14677 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:45:21.825146732Z 53 PC: 145d7 | Get interrupt vector (See above)
2018-12-25T11:45:21.82719977Z 37 PC: 145e8 | Set interrupt vector (See above)
2018-12-25T11:45:21.82841977Z 67 PC: 145f1 | Get or set file attributes (See above)
2018-12-25T11:45:21.849455202Z 67 PC: 14601 | Get or set file attributes (See above)
2018-12-25T11:45:21.863090745Z 9 PC: 12a6a | Display string (Could not find end pointer)
2018-12-25T11:45:21.866875943Z 9 PC: 12a71 | Display string (Could not find end pointer)

{"DateBased":true,"Day":21,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2255,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:45:21.818019602Z 42 PC: 13de6 | Get date 0x13de6: cmp dh, 1
0x13de9: jne 0x13df9
0x13deb: cmp dl, 0x15
0x13dee: jne 0x13df9
0x13df0: mov dl, 0x14
0x13df2: mov ah, 0x2b
0x13df4: int 0x21
0x13df6: call 0x13ed4
0x13df9: mov ax, 0xff00
0x13dfc: int 0x21
0x13dfe: cmp ah, 0x10
0x13e01: jne 0x13e06
0x13e03: jmp 0x13ead
0x13e06: push es
0x13e07: mov ax, 0x3521
0x13e0a: int 0x21
0x13e0c: mov word ptr [0x5af], bx
0x13e10: mov word ptr [0x5b1], es
0x13e14: pop es
0x13e15: mov ah, 0x52
2018-12-25T11:45:21.820703983Z 43 PC: 13df6 | Set date
2018-12-25T11:45:21.824268382Z 14 PC: 13ede | Set default drive (Drive = 'C')
2018-12-25T11:45:21.825415968Z 26 PC: 13ee5 | Set disk transfer address
2018-12-25T11:45:21.826564756Z 59 PC: 13ef5 | Change current directory
2018-12-25T11:45:21.833105624Z 78 PC: 13f9f | Find first file
2018-12-25T11:45:21.842422111Z 86 PC: 13fcd | Rename file
2018-12-25T11:45:22.203766846Z 79 PC: 13fb5 | Find next file
2018-12-25T11:45:22.208134414Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.22164444Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.225066461Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.246062844Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.249674442Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.262164066Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.26674981Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.279246539Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.282686084Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.302726425Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.307293705Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.32064187Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.324309421Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.337042608Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.34077771Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.353865231Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.358161631Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.370606098Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.374142278Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.386613899Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.389940405Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.402637188Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.407099718Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.420177164Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.423364579Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.436504113Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.439964669Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.452288534Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.456938041Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.469113061Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.472538934Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.487601406Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.491377308Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.503459343Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.506698547Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.519127477Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.522325379Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.534279953Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.538394334Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.551646349Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.555376278Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.568882315Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.572476366Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.585444389Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.590342949Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.606595667Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.610148051Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.623930409Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.628070932Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.640544153Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.644373445Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.658528144Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.662664409Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.677214089Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.682741903Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.696291935Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.700208704Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.71377826Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.717972142Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.732191467Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.736887654Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.750046446Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.75372796Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.767041407Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.771144253Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.784350708Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.788218216Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.80376343Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.807117368Z 59 PC: 13ef5 | Change current directory (See above)
2018-12-25T11:45:22.822616733Z 59 PC: 13ef5 | Change current directory (See above)
2018-12-25T11:45:22.829612712Z 59 PC: 13ef5 | Change current directory (See above)
2018-12-25T11:45:22.835910498Z 59 PC: 13ef5 | Change current directory (See above)
2018-12-25T11:45:22.842205046Z 59 PC: 13f11 | Change current directory
2018-12-25T11:45:22.85747962Z 78 PC: 13f9f | Find first file (See above)
2018-12-25T11:45:22.868151917Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.883544733Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.888805887Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.902095967Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.905865582Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.918767688Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.923677159Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.938029707Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.941896081Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.956072406Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.960615626Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.974013843Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.978454987Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:22.992156504Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:22.995926947Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.010352612Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.014558348Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.027466665Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.031248031Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.04432066Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.048207043Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.062016967Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.066868213Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.079831614Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.083820483Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.097563147Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.100943684Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.114113513Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.1179742Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.130521052Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.147310978Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.160872793Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.164470718Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.177956531Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.181925063Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.19456469Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.197916971Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.211687971Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.21511022Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.227722058Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.231716635Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.245448857Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.249075117Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.263605487Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.267478605Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.280179289Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.284606164Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.298080063Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.301686666Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.315920402Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.320080367Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.338688762Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.342782032Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.357052981Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.361190116Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.373604595Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.376954605Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.389329611Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.392588433Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.405220525Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.40848909Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.421784149Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.425636237Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.438068229Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.441182048Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.454538803Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.45796607Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.469909947Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.473906982Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.486880653Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.490268767Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.503137316Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.506411393Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.518982572Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.522760602Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.535277247Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.538525245Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.552462954Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.555905263Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.568530931Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.572232509Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.584645801Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.588236473Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.601208743Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.605405601Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.618098866Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.622275817Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.635247483Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.638651038Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.651686774Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.655626323Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.668964758Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.672825335Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.685966466Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.689085613Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.701968527Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.70530577Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.718587892Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.722423727Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.735702712Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.739174755Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.752479563Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.755810159Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.768416637Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.773697323Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.787057978Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.790374983Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.803797671Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.807185266Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.829510878Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.833888717Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.84913422Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.852849156Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.867377401Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.871070796Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.884807689Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.88951566Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.902103209Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.904425467Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.914623747Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.918123821Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.939190391Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.948577645Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.961268858Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.965000467Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.978647182Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.983281738Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:23.995740781Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:23.999217017Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.011524018Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.015087056Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.027325399Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.035725203Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.048760578Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.052404616Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.065562138Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.06902406Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.081460723Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.086105023Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.099405771Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.103176608Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.116516858Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.120278985Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.132749867Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.137506957Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.150020365Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.153486305Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.175293433Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.178925629Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.191752919Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.1961876Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.208947006Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.212806652Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.226819146Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.230544092Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.243716499Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.248011859Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.260523388Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.264056102Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.276617054Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.280070478Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.293347151Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.297565699Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.310536818Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.314357889Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.32769709Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.331076492Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.344273498Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.347948857Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.360652383Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.362571419Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.37735736Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.380917835Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.39330049Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.39689061Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.411310994Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.415100517Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.428566185Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.432319374Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.445100001Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.450001455Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.462722428Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.466254094Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.480222491Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.482426345Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.489749502Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.492649487Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.502483136Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.505250318Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.517072848Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.520315099Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.528045093Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.530901389Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.539555457Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.542284282Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.551104828Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.554955377Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.568225352Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.572382367Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.584962874Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.588340922Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.602122085Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.605394925Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.617605189Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.621473773Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.634192699Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.63798049Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.650496847Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.653700002Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.666578144Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.67028702Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.682567975Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.685689137Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.698236421Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.701689642Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.714058075Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.720690828Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.732110601Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.736107464Z 59 PC: 13f1d | Change current directory
2018-12-25T11:45:24.74319223Z 78 PC: 13f9f | Find first file (See above)
2018-12-25T11:45:24.753151561Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.765999154Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.769168906Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.779586602Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.784417226Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.795316861Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.79829258Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.809688696Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.812609696Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.823565323Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.827517468Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.837682787Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.840467812Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.854840329Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.858282856Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.871340205Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.875343841Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.888138733Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.891445113Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.904702134Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.908019075Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.92144159Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.925903563Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.938387852Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.941895356Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.95501249Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.958811023Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.971578021Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.977095514Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:24.990293824Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:24.993979498Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.00760501Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.01128185Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.022116447Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.024858813Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.032206902Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.034737761Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.0430533Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.045356534Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.053316999Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.05666413Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.069010206Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.073103393Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.085576207Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.088978052Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.102823059Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.106856141Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.119281991Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.123101905Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.136433826Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.139873432Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.153078004Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.15641032Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.16999492Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.17389131Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.186280968Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.190083305Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.203099634Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.206541768Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.221221977Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.224969506Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.237290468Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.241245152Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.253865193Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.257349748Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.271380334Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.275127615Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.288841574Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.293991358Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.307244475Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.311048683Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.325049621Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.328605104Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.34155666Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.347258411Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.360354928Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.36417693Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.378260163Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.382570044Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.395452429Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.400810194Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.414844235Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.418550968Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.432269647Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.435918089Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.449000443Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.45469475Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.467849331Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.471584267Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.486666504Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.490765804Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.503612228Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.512721376Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.53074173Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.535278335Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.549549855Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.553412418Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.566385253Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.571052335Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.583814115Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.587814562Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.601912941Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.605607202Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.619362Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.623467156Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.63630789Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.640905727Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.654314732Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.657873612Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.672367824Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.675903455Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.68865865Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.693323525Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.706350135Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.709786693Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.724529311Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.727902267Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.741094228Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.745930093Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.758768531Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.762435091Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.7761689Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.77999619Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.79393548Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.798900379Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.811463876Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.815225422Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.829027552Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.832954612Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.847155636Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.852398524Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.865216232Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.869851695Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.882994641Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.8867721Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.900945581Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.905059738Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.918712256Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.923775958Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.93689177Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.940670958Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.954297894Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.958400934Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.971277359Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.975967321Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:25.992909058Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:25.996742167Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:26.011052635Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:26.014871238Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:26.02773203Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:26.032667484Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:26.046365809Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:26.050201017Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:26.064076383Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:26.067850986Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:26.081085668Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:26.085046737Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:26.098208362Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:26.102849769Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:26.116850941Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:26.120641304Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:26.134346259Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:26.138468341Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:26.151235345Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:26.155920829Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:26.170134569Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:26.173934786Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:26.187827602Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:26.191601151Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:26.204371235Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:26.209765928Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:26.222477994Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:26.226254877Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:26.241039911Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:26.24480024Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:26.257831283Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:26.263131665Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:26.275995335Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:26.280662223Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:26.29464264Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:26.298418946Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:26.311971735Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:26.315591269Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:26.32837333Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:26.333166036Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:26.34629238Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:26.355357566Z 86 PC: 13fcd | Rename file (See above)
2018-12-25T11:45:26.379816025Z 79 PC: 13fb5 | Find next file (See above)
2018-12-25T11:45:26.383737545Z 59 PC: 13f11 | Change current directory (See above)
2018-12-25T11:45:26.390037333Z 59 PC: 13f11 | Change current directory (See above)
2018-12-25T11:45:26.397569378Z 59 PC: 13f11 | Change current directory (See above)
2018-12-25T11:45:26.404042814Z 59 PC: 13f11 | Change current directory (See above)
2018-12-25T11:45:26.410490175Z 59 PC: 13f11 | Change current directory (See above)
2018-12-25T11:45:26.418157296Z 60 PC: 13f33 | Create or truncate file
2018-12-25T11:45:26.432461059Z 62 PC: 13f39 | Close file
2018-12-25T11:45:26.434962411Z 60 PC: 13f43 | Create or truncate file
2018-12-25T11:45:26.449081923Z 62 PC: 13f49 | Close file
2018-12-25T11:45:26.459456302Z 9 PC: 13f55 | Display string (String= ' ... ha sido una cortesĦa de Woi')
2018-12-25T11:45:26.464655455Z 9 PC: 13f6d | Display string (String= '')
2018-12-25T11:45:26.498709023Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:26.533443369Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:26.569395042Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:26.604650952Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:26.649770999Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:26.694035496Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:26.728573743Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:26.763858434Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:26.799905154Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:26.836248035Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:26.872709475Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:26.909483234Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:26.946056582Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:26.981609821Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.021663961Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.055549687Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.090986025Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.126819204Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.161460641Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.197720483Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.234320124Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.269825164Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.305320522Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.340096618Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.376293516Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.412461645Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.449529378Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.484695898Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.524720257Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.561672346Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.597781391Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.634214815Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.670868316Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.706379394Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.744051522Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.778764028Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.816521437Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.85281119Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.889066512Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.9281977Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.962899102Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:27.999965665Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.036908463Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.073125454Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.10958511Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.149345074Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.185808684Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.222876764Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.260958101Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.296121725Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.333928885Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.369966926Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.404236406Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.440615605Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.476437675Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.5111785Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.549860782Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.586138596Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.623106942Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.6600227Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.695271174Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.73216469Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.768561681Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.805646799Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.843275034Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.882971645Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.919082895Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.957010631Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:28.992993337Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:29.03097122Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:29.068430055Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:29.108223115Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:29.144147319Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:29.180543861Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:29.216563538Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:29.251344057Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:29.28798976Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:29.324397956Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:29.361200974Z 9 PC: 13f6d | Display string (See above)
2018-12-25T11:45:29.399323219Z 9 PC: 13f82 | Display string (String= ' ')
2018-12-25T11:45:29.402774044Z 9 PC: 13f89 | Display string (String= ' ')
2018-12-25T11:45:29.405072323Z 76 PC: 13f8e | Terminate with return code (Return code = '0')