Sample viewer

vx.netlux.org/Virus.DOS.HLLP.Octawian.5664

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:12:40.496145698Z 53 PC: 13cf2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:12:40.497956787Z 53 PC: 13cf2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:12:40.499754857Z 53 PC: 13cf2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:12:40.501552788Z 53 PC: 13cf2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:12:40.503973356Z 53 PC: 13cf2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:12:40.505570629Z 53 PC: 13cf2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:12:40.507395263Z 53 PC: 13cf2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:12:40.509463211Z 53 PC: 13cf2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:12:40.510823325Z 53 PC: 13cf2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:12:40.512068879Z 53 PC: 13cf2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:12:40.513466576Z 53 PC: 13cf2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:12:40.515033011Z 53 PC: 13cf2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:12:40.516188288Z 53 PC: 13cf2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:12:40.517310637Z 53 PC: 13cf2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:12:40.518901811Z 53 PC: 13cf2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:12:40.519945028Z 53 PC: 13cf2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:12:40.521011363Z 53 PC: 13cf2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:12:40.522547649Z 53 PC: 13cf2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:12:40.523610404Z 53 PC: 13cf2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:12:40.524681577Z 37 PC: 13d07 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:12:40.535840788Z 37 PC: 13d0f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:12:40.537198372Z 37 PC: 13d17 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:12:40.538510337Z 37 PC: 13d1f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:12:40.541274782Z 68 PC: 1403c | I/O control for devices (Set for = '')
2018-12-17T22:12:40.543439952Z 44 PC: 1463c | Get time 0x1463c: mov word ptr [0x13e], cx
0x14640: mov word ptr [0x140], dx
0x14644: retf
0x14645: mov bx, sp
0x14647: push ds
0x14648: les di, ptr ss:[bx + 8]
0x1464c: lds si, ptr ss:[bx + 4]
0x14650: cld
0x14651: xor ax, ax
0x14653: stosw word ptr es:[di], ax
0x14654: mov ax, 0xd7b0
0x14657: stosw word ptr es:[di], ax
0x14658: xor ax, ax
0x1465a: mov cx, 0x16
0x1465d: rep stosd dword ptr es:[di], eax
0x1465f: lodsb al, byte ptr [si]
0x14660: cmp al, 0x4f
0x14662: jbe 0x14666
0x14664: mov al, 0x4f
0x14666: mov cl, al
2018-12-17T22:12:40.545569856Z 44 PC: 13959 | Get time 0x13959: xor ah, ah
0x1395b: mov al, dl
0x1395d: les di, ptr [bp + 6]
0x13960: stosw word ptr es:[di], ax
0x13961: mov al, dh
0x13963: les di, ptr [bp + 0xa]
0x13966: stosw word ptr es:[di], ax
0x13967: mov al, cl
0x13969: les di, ptr [bp + 0xe]
0x1396c: stosw word ptr es:[di], ax
0x1396d: mov al, ch
0x1396f: les di, ptr [bp + 0x12]
0x13972: stosw word ptr es:[di], ax
0x13973: pop bp
0x13974: retf 0x10
0x13977: push bp
0x13978: mov bp, sp
0x1397a: mov ch, byte ptr [bp + 0xc]
0x1397d: mov cl, byte ptr [bp + 0xa]
0x13980: mov dh, byte ptr [bp + 8]
2018-12-17T22:12:40.548205661Z 42 PC: 13923 | Get date 0x13923: xor ah, ah
0x13925: les di, ptr [bp + 6]
0x13928: stosw word ptr es:[di], ax
0x13929: mov al, dl
0x1392b: les di, ptr [bp + 0xa]
0x1392e: stosw word ptr es:[di], ax
0x1392f: mov al, dh
0x13931: les di, ptr [bp + 0xe]
0x13934: stosw word ptr es:[di], ax
0x13935: xchg ax, cx
0x13936: les di, ptr [bp + 0x12]
0x13939: stosw word ptr es:[di], ax
0x1393a: pop bp
0x1393b: retf 0x10
0x1393e: push bp
0x1393f: mov bp, sp
0x13941: mov cx, word ptr [bp + 0xa]
0x13944: mov dh, byte ptr [bp + 8]
0x13947: mov dl, byte ptr [bp + 6]
0x1394a: mov ah, 0x2b
2018-12-17T22:12:40.550401258Z 48 PC: 148fb | Get DOS version
2018-12-17T22:12:40.551973807Z 67 PC: 1399d | Get or set file attributes
2018-12-17T22:12:40.559570394Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:40.575202114Z 61 PC: 146bb | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:12:40.581875655Z 63 PC: 1478e | Read file or device (Read 5664 bytes on handle 5)
2018-12-17T22:12:40.590411037Z 62 PC: 1470b | Close file
2018-12-17T22:12:40.592448806Z 48 PC: 148fb | Get DOS version
2018-12-17T22:12:40.593850823Z 67 PC: 1399d | Get or set file attributes
2018-12-17T22:12:40.600007396Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:40.609819812Z 61 PC: 146bb | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:12:40.617018789Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:40.621399892Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:40.622964617Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:40.624579381Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:40.626880698Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:40.62857638Z 66 PC: 147ed | Move file pointer
2018-12-17T22:12:40.630165998Z 63 PC: 1478e | Read file or device (Read 5664 bytes on handle 5)
2018-12-17T22:12:40.638436561Z 66 PC: 147ed | Move file pointer
2018-12-17T22:12:40.639878509Z 64 PC: 1478e | Write file or device (Write 5664 bytes on handle 5)
2018-12-17T22:12:40.648102416Z 62 PC: 1470b | Close file
2018-12-17T22:12:40.656695516Z 53 PC: 13b49 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:12:40.6578513Z 37 PC: 13b52 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:12:40.65947941Z 53 PC: 13b49 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:12:40.662070798Z 37 PC: 13b52 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:12:40.664062557Z 53 PC: 13b49 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:12:40.665664452Z 37 PC: 13b52 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:12:40.667783763Z 53 PC: 13b49 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:12:40.669080952Z 37 PC: 13b52 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:12:40.670172176Z 53 PC: 13b49 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:12:40.671467883Z 37 PC: 13b52 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:12:40.673071337Z 53 PC: 13b49 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:12:40.674165358Z 37 PC: 13b52 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:12:40.675257473Z 53 PC: 13b49 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:12:40.676726772Z 37 PC: 13b52 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:12:40.678173687Z 53 PC: 13b49 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:12:40.679603927Z 37 PC: 13b52 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:12:40.681767841Z 53 PC: 13b49 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:12:40.683395938Z 37 PC: 13b52 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:12:40.684858388Z 53 PC: 13b49 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:12:40.686811301Z 37 PC: 13b52 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:12:40.688235708Z 53 PC: 13b49 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:12:40.689628977Z 37 PC: 13b52 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:12:40.691628181Z 53 PC: 13b49 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:12:40.692672424Z 37 PC: 13b52 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:12:40.693693416Z 53 PC: 13b49 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:12:40.695386553Z 37 PC: 13b52 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:12:40.696521934Z 53 PC: 13b49 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:12:40.69768564Z 37 PC: 13b52 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:12:40.699753403Z 53 PC: 13b49 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:12:40.701607555Z 37 PC: 13b52 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:12:40.703093005Z 53 PC: 13b49 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:12:40.705533766Z 37 PC: 13b52 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:12:40.706877808Z 53 PC: 13b49 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:12:40.708254863Z 37 PC: 13b52 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:12:40.710664634Z 53 PC: 13b49 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:12:40.712042941Z 37 PC: 13b52 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:12:40.713413415Z 53 PC: 13b49 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:12:40.715713381Z 37 PC: 13b52 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:12:40.717119184Z 48 PC: 148fb | Get DOS version
2018-12-17T22:12:40.71872996Z 41 PC: 13bec | Parse filename
2018-12-17T22:12:40.721237335Z 41 PC: 13bfa | Parse filename
2018-12-17T22:12:40.722915152Z 75 PC: 13c05 | Execute program
2018-12-17T22:12:40.737969122Z 9 PC: 1afca | Display string (String= 'UJWUW! ظD!€t3 ')
2018-12-17T22:12:40.742629054Z 76 PC: 1afd0 | Terminate with return code (Return code = '0')
2018-12-17T22:12:40.745751427Z 53 PC: 13b49 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:12:40.746911201Z 37 PC: 13b52 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:12:40.748678514Z 53 PC: 13b49 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:12:40.750277761Z 37 PC: 13b52 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:12:40.751708788Z 53 PC: 13b49 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:12:40.75382059Z 37 PC: 13b52 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:12:40.755554048Z 53 PC: 13b49 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:12:40.756983955Z 37 PC: 13b52 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:12:40.758605626Z 53 PC: 13b49 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:12:40.76077143Z 37 PC: 13b52 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:12:40.762145616Z 53 PC: 13b49 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:12:40.763544518Z 37 PC: 13b52 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:12:40.765825027Z 53 PC: 13b49 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:12:40.767218825Z 37 PC: 13b52 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:12:40.768473609Z 53 PC: 13b49 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:12:40.770462863Z 37 PC: 13b52 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:12:40.77151972Z 53 PC: 13b49 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:12:40.772596727Z 37 PC: 13b52 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:12:40.774497941Z 53 PC: 13b49 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:12:40.775604766Z 37 PC: 13b52 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:12:40.776701862Z 53 PC: 13b49 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:12:40.778727166Z 37 PC: 13b52 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:12:40.779828311Z 53 PC: 13b49 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:12:40.780951138Z 37 PC: 13b52 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:12:40.782953003Z 53 PC: 13b49 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:12:40.784058043Z 37 PC: 13b52 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:12:40.785142403Z 53 PC: 13b49 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:12:40.787565939Z 37 PC: 13b52 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:12:40.788786726Z 53 PC: 13b49 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:12:40.790069673Z 37 PC: 13b52 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:12:40.792237788Z 53 PC: 13b49 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:12:40.794266542Z 37 PC: 13b52 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:12:40.795492271Z 53 PC: 13b49 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:12:40.797663714Z 37 PC: 13b52 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:12:40.798808036Z 53 PC: 13b49 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:12:40.800084375Z 37 PC: 13b52 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:12:40.80149854Z 53 PC: 13b49 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:12:40.803076613Z 37 PC: 13b52 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:12:40.804357608Z 48 PC: 148fb | Get DOS version
2018-12-17T22:12:40.806785621Z 61 PC: 146bb | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:12:40.813415857Z 64 PC: 1478e | Write file or device (Write 5664 bytes on handle 5)
2018-12-17T22:12:40.821388765Z 62 PC: 1470b | Close file
2018-12-17T22:12:40.829341882Z 61 PC: 146bb | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:12:40.836764673Z 87 PC: 13a0b | Get or set file date and time
2018-12-17T22:12:40.838573745Z 62 PC: 1470b | Close file
2018-12-17T22:12:40.845731804Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:40.856457185Z 26 PC: 13a3b | Set disk transfer address
2018-12-17T22:12:40.857843951Z 78 PC: 13a47 | Find first file
2018-12-17T22:12:40.869126619Z 26 PC: 13a3b | Set disk transfer address
2018-12-17T22:12:40.871409534Z 78 PC: 13a47 | Find first file
2018-12-17T22:12:40.877383534Z 25 PC: 14988 | Get default drive
2018-12-17T22:12:40.879887915Z 71 PC: 1499b | Get current directory
2018-12-17T22:12:40.88399264Z 26 PC: 13a3b | Set disk transfer address
2018-12-17T22:12:40.885085234Z 78 PC: 13a47 | Find first file
2018-12-17T22:12:40.891122954Z 67 PC: 1399d | Get or set file attributes
2018-12-17T22:12:40.898219782Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:40.910554967Z 61 PC: 146bb | Open file (Filename = 'TEST.EXE')
2018-12-17T22:12:40.922168858Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:40.924836923Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:40.926611258Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:40.928095302Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:40.930232322Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:40.932454783Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:40.934650869Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:40.93730784Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:40.938806209Z 63 PC: 1478e | Read file or device (Read 5664 bytes on handle 5)
2018-12-17T22:12:40.955069912Z 62 PC: 1470b | Close file
2018-12-17T22:12:40.957923214Z 61 PC: 146bb | Open file (Filename = 'TEST.EXE')
2018-12-17T22:12:40.964726071Z 87 PC: 13a0b | Get or set file date and time
2018-12-17T22:12:40.966730577Z 62 PC: 1470b | Close file
2018-12-17T22:12:41.064971585Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:41.109967801Z 26 PC: 13a5f | Set disk transfer address
2018-12-17T22:12:41.111762961Z 79 PC: 13a64 | Find next file
2018-12-17T22:12:41.116306695Z 14 PC: 149e1 | Set default drive (Drive = 'C')
2018-12-17T22:12:41.117831409Z 25 PC: 149e5 | Get default drive
2018-12-17T22:12:41.119179118Z 59 PC: 14a4f | Change current directory
2018-12-17T22:12:41.126827623Z 26 PC: 13a3b | Set disk transfer address
2018-12-17T22:12:41.128101653Z 78 PC: 13a47 | Find first file
2018-12-17T22:12:41.136905231Z 67 PC: 1399d | Get or set file attributes
2018-12-17T22:12:41.15306098Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:41.63235909Z 61 PC: 146bb | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:12:41.639286549Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:41.642014489Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:41.643389565Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:41.644881395Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:41.646917228Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:41.648578852Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:41.650560564Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:41.653239326Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:41.654960122Z 63 PC: 1478e | Read file or device (Read 5664 bytes on handle 5)
2018-12-17T22:12:41.663100322Z 66 PC: 147ed | Move file pointer
2018-12-17T22:12:41.664883428Z 64 PC: 1478e | Write file or device (Write 5664 bytes on handle 5)
2018-12-17T22:12:41.672078876Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:41.67474592Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:41.676215683Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:41.677743321Z 66 PC: 147ed | Move file pointer
2018-12-17T22:12:41.680096601Z 64 PC: 1478e | Write file or device (Write 5664 bytes on handle 5)
2018-12-17T22:12:41.690688558Z 62 PC: 1470b | Close file
2018-12-17T22:12:41.6982724Z 61 PC: 146bb | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:12:41.70566385Z 87 PC: 13a0b | Get or set file date and time
2018-12-17T22:12:41.707227543Z 62 PC: 1470b | Close file
2018-12-17T22:12:41.71335096Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:41.72336494Z 14 PC: 149e1 | Set default drive (Drive = 'C')
2018-12-17T22:12:41.7249632Z 25 PC: 149e5 | Get default drive
2018-12-17T22:12:41.727062224Z 59 PC: 14a4f | Change current directory
2018-12-17T22:12:41.733765855Z 26 PC: 13a3b | Set disk transfer address
2018-12-17T22:12:41.73480228Z 78 PC: 13a47 | Find first file
2018-12-17T22:12:41.740832173Z 67 PC: 1399d | Get or set file attributes
2018-12-17T22:12:41.747301574Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:41.756794006Z 61 PC: 146bb | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:12:41.763516052Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:41.7657167Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:41.767590954Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:41.76921045Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:41.771526013Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:41.77344559Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:41.77510652Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:41.777899693Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:41.779510727Z 63 PC: 1478e | Read file or device (Read 5664 bytes on handle 5)
2018-12-17T22:12:41.786514871Z 62 PC: 1470b | Close file
2018-12-17T22:12:41.78884158Z 61 PC: 146bb | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:12:41.795928403Z 87 PC: 13a0b | Get or set file date and time
2018-12-17T22:12:41.797366778Z 62 PC: 1470b | Close file
2018-12-17T22:12:41.804703163Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:41.814015147Z 26 PC: 13a5f | Set disk transfer address
2018-12-17T22:12:41.815270789Z 79 PC: 13a64 | Find next file
2018-12-17T22:12:41.819625876Z 67 PC: 1399d | Get or set file attributes
2018-12-17T22:12:41.825906214Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:41.835327091Z 61 PC: 146bb | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:12:41.842913287Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:41.844344051Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:41.845970215Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:41.848595892Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:41.8505421Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:41.852275945Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:41.854654315Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:41.85655564Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:41.858274663Z 63 PC: 1478e | Read file or device (Read 5664 bytes on handle 5)
2018-12-17T22:12:41.866655586Z 66 PC: 147ed | Move file pointer
2018-12-17T22:12:41.868302507Z 64 PC: 1478e | Write file or device (Write 5664 bytes on handle 5)
2018-12-17T22:12:41.875610591Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:41.877585151Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:41.879006245Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:41.880479142Z 66 PC: 147ed | Move file pointer
2018-12-17T22:12:41.882801087Z 64 PC: 1478e | Write file or device (Write 5664 bytes on handle 5)
2018-12-17T22:12:41.894975508Z 62 PC: 1470b | Close file
2018-12-17T22:12:41.902619462Z 61 PC: 146bb | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:12:41.90959338Z 87 PC: 13a0b | Get or set file date and time
2018-12-17T22:12:41.911184223Z 62 PC: 1470b | Close file
2018-12-17T22:12:41.916827672Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:41.926759377Z 14 PC: 149e1 | Set default drive (Drive = 'C')
2018-12-17T22:12:41.928135128Z 25 PC: 149e5 | Get default drive
2018-12-17T22:12:41.929334074Z 59 PC: 14a4f | Change current directory
2018-12-17T22:12:41.936395312Z 26 PC: 13a3b | Set disk transfer address
2018-12-17T22:12:41.93741122Z 78 PC: 13a47 | Find first file
2018-12-17T22:12:41.943229297Z 67 PC: 1399d | Get or set file attributes
2018-12-17T22:12:41.94875247Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:41.958057456Z 61 PC: 146bb | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:12:41.96445838Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:41.966071587Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:41.967357302Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:41.968880069Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:41.971090146Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:41.972424953Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:41.975161517Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:41.976945546Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:41.97855103Z 63 PC: 1478e | Read file or device (Read 5664 bytes on handle 5)
2018-12-17T22:12:41.987006551Z 62 PC: 1470b | Close file
2018-12-17T22:12:41.988692513Z 61 PC: 146bb | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:12:41.994964191Z 87 PC: 13a0b | Get or set file date and time
2018-12-17T22:12:41.997055289Z 62 PC: 1470b | Close file
2018-12-17T22:12:42.00340846Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:42.012359694Z 26 PC: 13a5f | Set disk transfer address
2018-12-17T22:12:42.01436914Z 79 PC: 13a64 | Find next file
2018-12-17T22:12:42.017826191Z 67 PC: 1399d | Get or set file attributes
2018-12-17T22:12:42.023511237Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:42.035263697Z 61 PC: 146bb | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:12:42.041965197Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:42.044272057Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:42.046819701Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:42.048659069Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:42.050506184Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:42.052388323Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:42.054170663Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:42.057854054Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:42.059671282Z 63 PC: 1478e | Read file or device (Read 5664 bytes on handle 5)
2018-12-17T22:12:42.066975334Z 62 PC: 1470b | Close file
2018-12-17T22:12:42.069026253Z 61 PC: 146bb | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:12:42.073737805Z 87 PC: 13a0b | Get or set file date and time
2018-12-17T22:12:42.075355136Z 62 PC: 1470b | Close file
2018-12-17T22:12:42.082178843Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:42.091801616Z 26 PC: 13a5f | Set disk transfer address
2018-12-17T22:12:42.092763821Z 79 PC: 13a64 | Find next file
2018-12-17T22:12:42.096542499Z 67 PC: 1399d | Get or set file attributes
2018-12-17T22:12:42.102272698Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:42.111550655Z 61 PC: 146bb | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:12:42.118685159Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:42.119999067Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:42.121659563Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:42.123737896Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:42.125461452Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:42.127601315Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:42.129038281Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:42.130460773Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:42.133298178Z 63 PC: 1478e | Read file or device (Read 5664 bytes on handle 5)
2018-12-17T22:12:42.141252896Z 66 PC: 147ed | Move file pointer
2018-12-17T22:12:42.142649903Z 64 PC: 1478e | Write file or device (Write 5664 bytes on handle 5)
2018-12-17T22:12:42.160630907Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:42.162174825Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:42.16404669Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:42.166203321Z 66 PC: 147ed | Move file pointer
2018-12-17T22:12:42.167606083Z 64 PC: 1478e | Write file or device (Write 5664 bytes on handle 5)
2018-12-17T22:12:42.177028414Z 62 PC: 1470b | Close file
2018-12-17T22:12:42.184547225Z 61 PC: 146bb | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:12:42.190938928Z 87 PC: 13a0b | Get or set file date and time
2018-12-17T22:12:42.192853991Z 62 PC: 1470b | Close file
2018-12-17T22:12:42.198892159Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:42.209393896Z 14 PC: 149e1 | Set default drive (Drive = 'C')
2018-12-17T22:12:42.211382494Z 25 PC: 149e5 | Get default drive
2018-12-17T22:12:42.212319713Z 59 PC: 14a4f | Change current directory
2018-12-17T22:12:42.218151795Z 26 PC: 13a3b | Set disk transfer address
2018-12-17T22:12:42.220734613Z 78 PC: 13a47 | Find first file
2018-12-17T22:12:42.2268251Z 67 PC: 1399d | Get or set file attributes
2018-12-17T22:12:42.23282984Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:42.242219339Z 61 PC: 146bb | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:12:42.24856492Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:42.25033837Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:42.251499624Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:42.252613098Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:42.254317224Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:42.25558157Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:42.256772626Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:42.258836799Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:42.260173734Z 63 PC: 1478e | Read file or device (Read 5664 bytes on handle 5)
2018-12-17T22:12:42.267475367Z 62 PC: 1470b | Close file
2018-12-17T22:12:42.269535747Z 61 PC: 146bb | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:12:42.276845643Z 87 PC: 13a0b | Get or set file date and time
2018-12-17T22:12:42.280119615Z 62 PC: 1470b | Close file
2018-12-17T22:12:42.285906585Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:42.29490351Z 26 PC: 13a5f | Set disk transfer address
2018-12-17T22:12:42.296590171Z 79 PC: 13a64 | Find next file
2018-12-17T22:12:42.299828163Z 67 PC: 1399d | Get or set file attributes
2018-12-17T22:12:42.305445005Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:42.315274507Z 61 PC: 146bb | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:12:42.321812259Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:42.323163036Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:42.325034123Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:42.326634997Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:42.328364646Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:42.330340108Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:42.331919984Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:42.343660911Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:42.345076064Z 63 PC: 1478e | Read file or device (Read 5664 bytes on handle 5)
2018-12-17T22:12:42.353560273Z 62 PC: 1470b | Close file
2018-12-17T22:12:42.355941479Z 61 PC: 146bb | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:12:42.362917833Z 87 PC: 13a0b | Get or set file date and time
2018-12-17T22:12:42.364675405Z 62 PC: 1470b | Close file
2018-12-17T22:12:42.370977899Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:42.380117863Z 26 PC: 13a5f | Set disk transfer address
2018-12-17T22:12:42.381497202Z 79 PC: 13a64 | Find next file
2018-12-17T22:12:42.384848804Z 67 PC: 1399d | Get or set file attributes
2018-12-17T22:12:42.39049489Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:42.400529726Z 61 PC: 146bb | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:12:42.407018201Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:42.408307953Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:42.410773254Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:42.412236971Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:42.413641339Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:42.416903951Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:42.418454262Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:42.420219036Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:42.422836829Z 63 PC: 1478e | Read file or device (Read 5664 bytes on handle 5)
2018-12-17T22:12:42.430356864Z 62 PC: 1470b | Close file
2018-12-17T22:12:42.432593591Z 61 PC: 146bb | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:12:42.439880972Z 87 PC: 13a0b | Get or set file date and time
2018-12-17T22:12:42.441385548Z 62 PC: 1470b | Close file
2018-12-17T22:12:42.448306535Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:42.457296736Z 26 PC: 13a5f | Set disk transfer address
2018-12-17T22:12:42.458062264Z 79 PC: 13a64 | Find next file
2018-12-17T22:12:42.462226378Z 67 PC: 1399d | Get or set file attributes
2018-12-17T22:12:42.468213393Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:42.477491786Z 61 PC: 146bb | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:12:42.490487539Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:42.492148801Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:42.493774146Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:42.496249476Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:42.497551875Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:42.49885748Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:42.501717143Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:42.503619859Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:42.50550435Z 63 PC: 1478e | Read file or device (Read 5664 bytes on handle 5)
2018-12-17T22:12:42.513965754Z 66 PC: 147ed | Move file pointer
2018-12-17T22:12:42.515703226Z 64 PC: 1478e | Write file or device (Write 5664 bytes on handle 5)
2018-12-17T22:12:42.524436383Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:42.525773294Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:42.52704206Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:42.529030656Z 66 PC: 147ed | Move file pointer
2018-12-17T22:12:42.530834217Z 64 PC: 1478e | Write file or device (Write 5664 bytes on handle 5)
2018-12-17T22:12:42.53991994Z 62 PC: 1470b | Close file
2018-12-17T22:12:42.549021526Z 61 PC: 146bb | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:12:42.555600712Z 87 PC: 13a0b | Get or set file date and time
2018-12-17T22:12:42.557042821Z 62 PC: 1470b | Close file
2018-12-17T22:12:42.564600336Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:42.574640744Z 14 PC: 149e1 | Set default drive (Drive = 'C')
2018-12-17T22:12:42.576122408Z 25 PC: 149e5 | Get default drive
2018-12-17T22:12:42.578058745Z 59 PC: 14a4f | Change current directory
2018-12-17T22:12:42.583760739Z 26 PC: 13a3b | Set disk transfer address
2018-12-17T22:12:42.586415605Z 78 PC: 13a47 | Find first file
2018-12-17T22:12:42.592560664Z 67 PC: 1399d | Get or set file attributes
2018-12-17T22:12:42.598299029Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:42.609911026Z 61 PC: 146bb | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:12:42.616698552Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:42.618351142Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:42.620877825Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:42.622757358Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:42.62406861Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:42.626356021Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:42.627941927Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:42.629951548Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:42.632548787Z 63 PC: 1478e | Read file or device (Read 5664 bytes on handle 5)
2018-12-17T22:12:42.640624136Z 62 PC: 1470b | Close file
2018-12-17T22:12:42.642417275Z 61 PC: 146bb | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:12:42.649476205Z 87 PC: 13a0b | Get or set file date and time
2018-12-17T22:12:42.651037218Z 62 PC: 1470b | Close file
2018-12-17T22:12:42.656999748Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:42.667136743Z 26 PC: 13a5f | Set disk transfer address
2018-12-17T22:12:42.668222319Z 79 PC: 13a64 | Find next file
2018-12-17T22:12:42.672275443Z 67 PC: 1399d | Get or set file attributes
2018-12-17T22:12:42.678314676Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:42.688204688Z 61 PC: 146bb | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:12:42.695471364Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:42.697394887Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:42.698825393Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:42.701217285Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:42.702393308Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:42.704304478Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:42.705741299Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:42.707334011Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:42.710052098Z 63 PC: 1478e | Read file or device (Read 5664 bytes on handle 5)
2018-12-17T22:12:42.717839237Z 62 PC: 1470b | Close file
2018-12-17T22:12:42.719590835Z 61 PC: 146bb | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:12:42.726734626Z 87 PC: 13a0b | Get or set file date and time
2018-12-17T22:12:42.728371266Z 62 PC: 1470b | Close file
2018-12-17T22:12:42.734511931Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:42.744241491Z 26 PC: 13a5f | Set disk transfer address
2018-12-17T22:12:42.745454455Z 79 PC: 13a64 | Find next file
2018-12-17T22:12:42.749464092Z 67 PC: 1399d | Get or set file attributes
2018-12-17T22:12:42.755234412Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:42.764591937Z 61 PC: 146bb | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:12:42.773401076Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:42.775626836Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:42.777592181Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:42.780187668Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:42.782231921Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:42.783901078Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:42.786259771Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:42.788023331Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:42.789793976Z 63 PC: 1478e | Read file or device (Read 5664 bytes on handle 5)
2018-12-17T22:12:42.797846563Z 62 PC: 1470b | Close file
2018-12-17T22:12:42.800123375Z 61 PC: 146bb | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:12:42.807609821Z 87 PC: 13a0b | Get or set file date and time
2018-12-17T22:12:42.809928797Z 62 PC: 1470b | Close file
2018-12-17T22:12:42.816466648Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:42.826654311Z 26 PC: 13a5f | Set disk transfer address
2018-12-17T22:12:42.827993236Z 79 PC: 13a64 | Find next file
2018-12-17T22:12:42.831289699Z 67 PC: 1399d | Get or set file attributes
2018-12-17T22:12:42.837764341Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:42.847586519Z 61 PC: 146bb | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:12:42.854006876Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:42.856490779Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:42.858615014Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:42.860037554Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:42.862267424Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:42.863683062Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:42.865650012Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:42.867528242Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:42.868951547Z 63 PC: 1478e | Read file or device (Read 5664 bytes on handle 5)
2018-12-17T22:12:42.877117714Z 62 PC: 1470b | Close file
2018-12-17T22:12:42.878833544Z 61 PC: 146bb | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:12:42.88520427Z 87 PC: 13a0b | Get or set file date and time
2018-12-17T22:12:42.898191683Z 62 PC: 1470b | Close file
2018-12-17T22:12:42.903918885Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:42.913807474Z 26 PC: 13a5f | Set disk transfer address
2018-12-17T22:12:42.916334979Z 79 PC: 13a64 | Find next file
2018-12-17T22:12:42.921323228Z 67 PC: 1399d | Get or set file attributes
2018-12-17T22:12:42.930217936Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:42.939860446Z 61 PC: 146bb | Open file (Filename = 'FDISK.EXE')
2018-12-17T22:12:42.946451613Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:42.949651325Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:42.951250878Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:42.952770679Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:42.955262334Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:42.956836618Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:42.960080389Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:42.962011954Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:42.963800021Z 63 PC: 1478e | Read file or device (Read 5664 bytes on handle 5)
2018-12-17T22:12:42.972293654Z 66 PC: 147ed | Move file pointer
2018-12-17T22:12:42.97409162Z 64 PC: 1478e | Write file or device (Write 5664 bytes on handle 5)
2018-12-17T22:12:42.982035532Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:42.984936913Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:42.986452017Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:42.989512841Z 66 PC: 147ed | Move file pointer
2018-12-17T22:12:42.992074672Z 64 PC: 1478e | Write file or device (Write 5664 bytes on handle 5)
2018-12-17T22:12:43.001642397Z 62 PC: 1470b | Close file
2018-12-17T22:12:43.010639445Z 61 PC: 146bb | Open file (Filename = 'FDISK.EXE')
2018-12-17T22:12:43.018130137Z 87 PC: 13a0b | Get or set file date and time
2018-12-17T22:12:43.019863483Z 62 PC: 1470b | Close file
2018-12-17T22:12:43.027404029Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:43.036933292Z 14 PC: 149e1 | Set default drive (Drive = 'C')
2018-12-17T22:12:43.038704443Z 25 PC: 149e5 | Get default drive
2018-12-17T22:12:43.040481123Z 59 PC: 14a4f | Change current directory
2018-12-17T22:12:43.044173551Z 26 PC: 13a3b | Set disk transfer address
2018-12-17T22:12:43.045791795Z 78 PC: 13a47 | Find first file
2018-12-17T22:12:43.049883274Z 67 PC: 1399d | Get or set file attributes
2018-12-17T22:12:43.05345173Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:43.060996825Z 61 PC: 146bb | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:12:43.068747608Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:43.07034301Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:43.07195798Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:43.07304615Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:43.074504531Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:43.075743124Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:43.076849783Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:43.078596253Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:43.079719918Z 63 PC: 1478e | Read file or device (Read 5664 bytes on handle 5)
2018-12-17T22:12:43.084489994Z 62 PC: 1470b | Close file
2018-12-17T22:12:43.086288134Z 61 PC: 146bb | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:12:43.090374586Z 87 PC: 13a0b | Get or set file date and time
2018-12-17T22:12:43.092269238Z 62 PC: 1470b | Close file
2018-12-17T22:12:43.098451991Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:43.107681476Z 26 PC: 13a5f | Set disk transfer address
2018-12-17T22:12:43.109356895Z 79 PC: 13a64 | Find next file
2018-12-17T22:12:43.112969671Z 67 PC: 1399d | Get or set file attributes
2018-12-17T22:12:43.118988755Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:43.12653216Z 61 PC: 146bb | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:12:43.134010739Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:43.136481869Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:43.138515632Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:43.140265418Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:43.142791249Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:43.144768617Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:43.146504498Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:43.149527681Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:43.151309899Z 63 PC: 1478e | Read file or device (Read 5664 bytes on handle 5)
2018-12-17T22:12:43.159061936Z 62 PC: 1470b | Close file
2018-12-17T22:12:43.161379751Z 61 PC: 146bb | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:12:43.168235058Z 87 PC: 13a0b | Get or set file date and time
2018-12-17T22:12:43.1710774Z 62 PC: 1470b | Close file
2018-12-17T22:12:43.182110872Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:43.191544537Z 26 PC: 13a5f | Set disk transfer address
2018-12-17T22:12:43.193622714Z 79 PC: 13a64 | Find next file
2018-12-17T22:12:43.197391182Z 67 PC: 1399d | Get or set file attributes
2018-12-17T22:12:43.203752175Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:43.214417169Z 61 PC: 146bb | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:12:43.22142204Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:43.224176009Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:43.226405493Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:43.22825384Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:43.231767687Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:43.233502627Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:43.236116382Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:43.238441793Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:43.240242627Z 63 PC: 1478e | Read file or device (Read 5664 bytes on handle 5)
2018-12-17T22:12:43.24855313Z 62 PC: 1470b | Close file
2018-12-17T22:12:43.250975818Z 61 PC: 146bb | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:12:43.257662699Z 87 PC: 13a0b | Get or set file date and time
2018-12-17T22:12:43.259584315Z 62 PC: 1470b | Close file
2018-12-17T22:12:43.265804488Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:43.276275895Z 26 PC: 13a5f | Set disk transfer address
2018-12-17T22:12:43.277998906Z 79 PC: 13a64 | Find next file
2018-12-17T22:12:43.282438321Z 67 PC: 1399d | Get or set file attributes
2018-12-17T22:12:43.289651619Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:43.299221197Z 61 PC: 146bb | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:12:43.306473076Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:43.309200049Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:43.310934161Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:43.313686147Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:43.315703265Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:43.317430428Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:43.320346658Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:43.322346158Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:43.325034781Z 63 PC: 1478e | Read file or device (Read 5664 bytes on handle 5)
2018-12-17T22:12:43.333121163Z 62 PC: 1470b | Close file
2018-12-17T22:12:43.335320436Z 61 PC: 146bb | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:12:43.343270018Z 87 PC: 13a0b | Get or set file date and time
2018-12-17T22:12:43.345549169Z 62 PC: 1470b | Close file
2018-12-17T22:12:43.352454099Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:43.363221369Z 26 PC: 13a5f | Set disk transfer address
2018-12-17T22:12:43.364651411Z 79 PC: 13a64 | Find next file
2018-12-17T22:12:43.369279052Z 67 PC: 1399d | Get or set file attributes
2018-12-17T22:12:43.375689372Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:43.385032698Z 61 PC: 146bb | Open file (Filename = 'FDISK.EXE')
2018-12-17T22:12:43.392369329Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:43.394118328Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:43.395886143Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:43.397644714Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:43.399305719Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:43.402385116Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:43.404190644Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:43.406387701Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:43.408885348Z 63 PC: 1478e | Read file or device (Read 5664 bytes on handle 5)
2018-12-17T22:12:43.417055818Z 62 PC: 1470b | Close file
2018-12-17T22:12:43.420426352Z 61 PC: 146bb | Open file (Filename = 'FDISK.EXE')
2018-12-17T22:12:43.428202554Z 87 PC: 13a0b | Get or set file date and time
2018-12-17T22:12:43.429889432Z 62 PC: 1470b | Close file
2018-12-17T22:12:43.440530183Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:43.451186135Z 26 PC: 13a5f | Set disk transfer address
2018-12-17T22:12:43.453305042Z 79 PC: 13a64 | Find next file
2018-12-17T22:12:43.457542303Z 67 PC: 1399d | Get or set file attributes
2018-12-17T22:12:43.463587583Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:43.474413247Z 61 PC: 146bb | Open file (Filename = 'MEM.EXE')
2018-12-17T22:12:43.481533346Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:43.483466764Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:43.486237762Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:43.48799596Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:43.490888191Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:43.492580599Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:43.495078413Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:43.498022777Z 87 PC: 139de | Get or set file date and time
2018-12-17T22:12:43.49981232Z 63 PC: 1478e | Read file or device (Read 5664 bytes on handle 5)
2018-12-17T22:12:43.510515557Z 66 PC: 147ed | Move file pointer
2018-12-17T22:12:43.512048298Z 64 PC: 1478e | Write file or device (Write 5664 bytes on handle 5)
2018-12-17T22:12:43.519389592Z 66 PC: 14857 | Move file pointer
2018-12-17T22:12:43.521334722Z 66 PC: 14865 | Move file pointer
2018-12-17T22:12:43.522664637Z 66 PC: 14873 | Move file pointer
2018-12-17T22:12:43.524880071Z 66 PC: 147ed | Move file pointer
2018-12-17T22:12:43.526290432Z 64 PC: 1478e | Write file or device (Write 5664 bytes on handle 5)
2018-12-17T22:12:43.544004787Z 62 PC: 1470b | Close file
2018-12-17T22:12:43.552447634Z 61 PC: 146bb | Open file (Filename = 'MEM.EXE')
2018-12-17T22:12:43.558896158Z 87 PC: 13a0b | Get or set file date and time
2018-12-17T22:12:43.560378559Z 62 PC: 1470b | Close file
2018-12-17T22:12:43.567122819Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:43.576380589Z 48 PC: 148fb | Get DOS version
2018-12-17T22:12:43.578420587Z 67 PC: 139c4 | Get or set file attributes
2018-12-17T22:12:43.58894027Z 14 PC: 149e1 | Set default drive (Drive = 'A')
2018-12-17T22:12:43.59044336Z 25 PC: 149e5 | Get default drive
2018-12-17T22:12:43.592969351Z 59 PC: 14a4f | Change current directory
2018-12-17T22:12:43.597397183Z 64 PC: 1413f | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:12:43.60036391Z 37 PC: 13e06 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:12:43.601555424Z 37 PC: 13e06 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:12:43.602632836Z 37 PC: 13e06 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:12:43.604814444Z 37 PC: 13e06 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:12:43.605898703Z 37 PC: 13e06 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:12:43.607159058Z 37 PC: 13e06 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:12:43.608899651Z 37 PC: 13e06 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:12:43.611296302Z 37 PC: 13e06 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:12:43.613287616Z 37 PC: 13e06 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:12:43.615038637Z 37 PC: 13e06 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:12:43.616408601Z 37 PC: 13e06 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:12:43.618794816Z 37 PC: 13e06 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:12:43.619899506Z 37 PC: 13e06 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:12:43.622214766Z 37 PC: 13e06 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:12:43.624359817Z 37 PC: 13e06 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:12:43.625725615Z 37 PC: 13e06 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:12:43.628028445Z 37 PC: 13e06 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:12:43.629702135Z 37 PC: 13e06 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:12:43.631070444Z 37 PC: 13e06 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:12:43.633741487Z 76 PC: 13e45 | Terminate with return code (Return code = '0')