Sample viewer

vx.netlux.org/Virus.DOS.Tanya.3000.b

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:21:12.371867264Z 53 PC: 134ec | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:12.374211437Z 37 PC: 13502 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:12.375625592Z 26 PC: 1350c | Set disk transfer address
2018-12-17T22:21:12.37737768Z 78 PC: 13a98 | Find first file
2018-12-17T22:21:12.394310723Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:12.400750777Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:12.741315617Z 61 PC: 1363b | Open file (Filename = 'C:\DOS\EDIT.COM')
2018-12-17T22:21:12.749290123Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:12.750825717Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:12.752295462Z 63 PC: 13981 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T22:21:12.759027847Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:12.760566159Z 62 PC: 13981 | Close file
2018-12-17T22:21:12.766527517Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:12.77686442Z 79 PC: 13aa7 | Find next file
2018-12-17T22:21:12.78082419Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:12.786787248Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:12.796171268Z 61 PC: 1363b | Open file (Filename = 'C:\DOS\FORMAT.COM')
2018-12-17T22:21:12.803520717Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:12.805007548Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:12.80644716Z 63 PC: 13981 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T22:21:12.812538014Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:12.814312435Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:12.815902115Z 63 PC: 13981 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:21:12.819808846Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:12.821195266Z 64 PC: 13981 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:21:12.823979627Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:12.826050734Z 64 PC: 13981 | Write file or device (Write 3000 bytes on handle 5)
2018-12-17T22:21:12.836155019Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:12.837660675Z 64 PC: 13981 | Write file or device (Write 5 bytes on handle 5)
2018-12-17T22:21:12.841207294Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:12.842675626Z 62 PC: 13981 | Close file
2018-12-17T22:21:12.850251372Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:12.860604425Z 79 PC: 13aa7 | Find next file
2018-12-17T22:21:12.864067903Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:12.870213191Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:12.879778945Z 61 PC: 1363b | Open file (Filename = 'C:\DOS\KEYB.COM')
2018-12-17T22:21:12.887370398Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:12.888904864Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:12.890484792Z 63 PC: 13981 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T22:21:12.89676934Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:12.898620311Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:12.900245095Z 63 PC: 13981 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:21:12.903553455Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:12.905149413Z 64 PC: 13981 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:21:12.908210059Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:12.910464391Z 64 PC: 13981 | Write file or device (Write 3000 bytes on handle 5)
2018-12-17T22:21:12.920107352Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:12.921484558Z 64 PC: 13981 | Write file or device (Write 5 bytes on handle 5)
2018-12-17T22:21:12.925601668Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:12.927842172Z 62 PC: 13981 | Close file
2018-12-17T22:21:12.93526109Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:12.945185491Z 79 PC: 13aa7 | Find next file
2018-12-17T22:21:12.949013986Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:12.952693245Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:12.959163373Z 61 PC: 1363b | Open file (Filename = 'C:\DOS\SYS.COM')
2018-12-17T22:21:12.965927691Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:12.967014661Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:12.968740533Z 63 PC: 13981 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T22:21:12.972154983Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:12.973148198Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:12.974725805Z 63 PC: 13981 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:21:12.976430829Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:12.977493548Z 64 PC: 13981 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:21:12.980109475Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:12.981912394Z 64 PC: 13981 | Write file or device (Write 3000 bytes on handle 5)
2018-12-17T22:21:13.007463486Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.00928282Z 64 PC: 13981 | Write file or device (Write 5 bytes on handle 5)
2018-12-17T22:21:13.012522547Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:13.014292933Z 62 PC: 13981 | Close file
2018-12-17T22:21:13.021885827Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:13.032057489Z 79 PC: 13aa7 | Find next file
2018-12-17T22:21:13.038367772Z 78 PC: 13ac1 | Find first file
2018-12-17T22:21:13.045673908Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:13.052888739Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:13.062715767Z 61 PC: 1363b | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:21:13.069746508Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:13.072670744Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.074482757Z 63 PC: 13981 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T22:21:13.080455306Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.083151218Z 63 PC: 13981 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:21:13.085686334Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.087517216Z 64 PC: 13981 | Write file or device (Write 3000 bytes on handle 5)
2018-12-17T22:21:13.098318207Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.099550167Z 64 PC: 13981 | Write file or device (Write 24 bytes on handle 5)
2018-12-17T22:21:13.101560057Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:13.10334419Z 62 PC: 13981 | Close file
2018-12-17T22:21:13.108153059Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:13.114818485Z 79 PC: 13ad0 | Find next file
2018-12-17T22:21:13.117515121Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:13.121719181Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:13.127943363Z 61 PC: 1363b | Open file (Filename = 'C:\DOS\CHKDSK.EXE')
2018-12-17T22:21:13.133302896Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:13.134444758Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.135588988Z 63 PC: 13981 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T22:21:13.139966302Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.141559106Z 63 PC: 13981 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:21:13.143409784Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.145195413Z 64 PC: 13981 | Write file or device (Write 3000 bytes on handle 5)
2018-12-17T22:21:13.151170314Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.153022265Z 64 PC: 13981 | Write file or device (Write 24 bytes on handle 5)
2018-12-17T22:21:13.156794601Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:13.158340167Z 62 PC: 13981 | Close file
2018-12-17T22:21:13.166247977Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:13.176814865Z 79 PC: 13ad0 | Find next file
2018-12-17T22:21:13.180221796Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:13.188069917Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:13.197689154Z 61 PC: 1363b | Open file (Filename = 'C:\DOS\DEBUG.EXE')
2018-12-17T22:21:13.204512593Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:13.205757529Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.207841286Z 63 PC: 13981 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T22:21:13.214679429Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.216959929Z 63 PC: 13981 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:21:13.219872218Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.221660592Z 64 PC: 13981 | Write file or device (Write 3000 bytes on handle 5)
2018-12-17T22:21:13.231351486Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.233568768Z 64 PC: 13981 | Write file or device (Write 24 bytes on handle 5)
2018-12-17T22:21:13.236525471Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:13.238319788Z 62 PC: 13981 | Close file
2018-12-17T22:21:13.246521713Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:13.257048757Z 79 PC: 13ad0 | Find next file
2018-12-17T22:21:13.260588256Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:13.267971096Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:13.277779032Z 61 PC: 1363b | Open file (Filename = 'C:\DOS\EXPAND.EXE')
2018-12-17T22:21:13.284690086Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:13.286592601Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.288065116Z 63 PC: 13981 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T22:21:13.293869364Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.296092606Z 63 PC: 13981 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:21:13.298772933Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.300539599Z 64 PC: 13981 | Write file or device (Write 3000 bytes on handle 5)
2018-12-17T22:21:13.309805119Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.311464821Z 64 PC: 13981 | Write file or device (Write 24 bytes on handle 5)
2018-12-17T22:21:13.314492341Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:13.317165787Z 62 PC: 13981 | Close file
2018-12-17T22:21:13.325510863Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:13.334856717Z 79 PC: 13ad0 | Find next file
2018-12-17T22:21:13.339216695Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:13.34568449Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:13.355079899Z 61 PC: 1363b | Open file (Filename = 'C:\DOS\FDISK.EXE')
2018-12-17T22:21:13.362856743Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:13.364307063Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.366441495Z 63 PC: 13981 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T22:21:13.37248772Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.374150317Z 63 PC: 13981 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:21:13.376459967Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.378559734Z 64 PC: 13981 | Write file or device (Write 3000 bytes on handle 5)
2018-12-17T22:21:13.387060997Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.388666094Z 64 PC: 13981 | Write file or device (Write 24 bytes on handle 5)
2018-12-17T22:21:13.393083768Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:13.394823284Z 62 PC: 13981 | Close file
2018-12-17T22:21:13.402015839Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:13.420075579Z 79 PC: 13ad0 | Find next file
2018-12-17T22:21:13.423234248Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:13.429464574Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:13.439929749Z 61 PC: 1363b | Open file (Filename = 'C:\DOS\MEM.EXE')
2018-12-17T22:21:13.447111193Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:13.448657942Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.452007491Z 63 PC: 13981 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T22:21:13.458090936Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.459553132Z 64 PC: 13981 | Write file or device (Write 3000 bytes on handle 5)
2018-12-17T22:21:13.468569997Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.471217683Z 64 PC: 13981 | Write file or device (Write 24 bytes on handle 5)
2018-12-17T22:21:13.474041511Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:13.476885499Z 62 PC: 13981 | Close file
2018-12-17T22:21:13.484602731Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:13.494923213Z 79 PC: 13ad0 | Find next file
2018-12-17T22:21:13.498219565Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:13.504613633Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:13.514786571Z 61 PC: 1363b | Open file (Filename = 'C:\DOS\NLSFUNC.EXE')
2018-12-17T22:21:13.522636157Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:13.524112562Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.525488067Z 63 PC: 13981 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T22:21:13.531597451Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.533285285Z 64 PC: 13981 | Write file or device (Write 3000 bytes on handle 5)
2018-12-17T22:21:13.54368065Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.545963392Z 64 PC: 13981 | Write file or device (Write 24 bytes on handle 5)
2018-12-17T22:21:13.549681024Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:13.551755024Z 62 PC: 13981 | Close file
2018-12-17T22:21:13.56091211Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:13.571394493Z 79 PC: 13ad0 | Find next file
2018-12-17T22:21:13.574548281Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:13.582167695Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:13.59218934Z 61 PC: 1363b | Open file (Filename = 'C:\DOS\QBASIC.EXE')
2018-12-17T22:21:13.598974631Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:13.601331358Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.602740718Z 63 PC: 13981 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T22:21:13.609137762Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.611441844Z 63 PC: 13981 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:21:13.613634566Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.61507432Z 64 PC: 13981 | Write file or device (Write 3000 bytes on handle 5)
2018-12-17T22:21:13.636800139Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.638419588Z 64 PC: 13981 | Write file or device (Write 24 bytes on handle 5)
2018-12-17T22:21:13.64134201Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:13.643966858Z 62 PC: 13981 | Close file
2018-12-17T22:21:13.65117427Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:13.660839494Z 79 PC: 13ad0 | Find next file
2018-12-17T22:21:13.664977112Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:13.671124305Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:13.68168466Z 61 PC: 1363b | Open file (Filename = 'C:\DOS\REPLACE.EXE')
2018-12-17T22:21:13.689910592Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:13.691597176Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.693302735Z 63 PC: 13981 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T22:21:13.700644486Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.702401127Z 64 PC: 13981 | Write file or device (Write 3000 bytes on handle 5)
2018-12-17T22:21:13.710935147Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.713544124Z 64 PC: 13981 | Write file or device (Write 24 bytes on handle 5)
2018-12-17T22:21:13.716533619Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:13.718235763Z 62 PC: 13981 | Close file
2018-12-17T22:21:13.725918652Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:13.736703106Z 79 PC: 13ad0 | Find next file
2018-12-17T22:21:13.743808272Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:13.760775939Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:13.770704967Z 61 PC: 1363b | Open file (Filename = 'C:\DOS\RESTORE.EXE')
2018-12-17T22:21:13.777852601Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:13.780467566Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.782369184Z 63 PC: 13981 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T22:21:13.788575671Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.790804844Z 64 PC: 13981 | Write file or device (Write 3000 bytes on handle 5)
2018-12-17T22:21:13.79940361Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.80107833Z 64 PC: 13981 | Write file or device (Write 24 bytes on handle 5)
2018-12-17T22:21:13.805052274Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:13.807031276Z 62 PC: 13981 | Close file
2018-12-17T22:21:13.814866889Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:13.825518653Z 79 PC: 13ad0 | Find next file
2018-12-17T22:21:13.829234832Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:13.8355143Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:13.846143679Z 61 PC: 1363b | Open file (Filename = 'C:\DOS\SCANDISK.EXE')
2018-12-17T22:21:13.853596163Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:13.85528367Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.857818084Z 63 PC: 13981 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T22:21:13.863914976Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:13.865422701Z 62 PC: 13981 | Close file
2018-12-17T22:21:13.87223448Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:13.882501926Z 79 PC: 13ad0 | Find next file
2018-12-17T22:21:13.885629335Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:13.892753827Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:13.910320172Z 61 PC: 1363b | Open file (Filename = 'C:\DOS\SETUP.EXE')
2018-12-17T22:21:13.917255747Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:13.919420073Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.920861597Z 63 PC: 13981 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T22:21:13.926605102Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.929215027Z 63 PC: 13981 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:21:13.931499565Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.93313551Z 64 PC: 13981 | Write file or device (Write 3000 bytes on handle 5)
2018-12-17T22:21:13.942640252Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.94491806Z 64 PC: 13981 | Write file or device (Write 24 bytes on handle 5)
2018-12-17T22:21:13.947927215Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:13.950672445Z 62 PC: 13981 | Close file
2018-12-17T22:21:13.957744968Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:13.967567303Z 79 PC: 13ad0 | Find next file
2018-12-17T22:21:13.972139258Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:13.978399751Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:13.988178633Z 61 PC: 1363b | Open file (Filename = 'C:\DOS\XCOPY.EXE')
2018-12-17T22:21:13.996474016Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:13.998167119Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:13.999855398Z 63 PC: 13981 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T22:21:14.007169927Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:14.009006795Z 64 PC: 13981 | Write file or device (Write 3000 bytes on handle 5)
2018-12-17T22:21:14.01839188Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:14.021982488Z 64 PC: 13981 | Write file or device (Write 24 bytes on handle 5)
2018-12-17T22:21:14.025016655Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:14.026867127Z 62 PC: 13981 | Close file
2018-12-17T22:21:14.034611863Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:14.044013427Z 79 PC: 13ad0 | Find next file
2018-12-17T22:21:14.04754524Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:14.054431874Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:14.068553566Z 61 PC: 1363b | Open file (Filename = 'C:\DOS\DEFRAG.EXE')
2018-12-17T22:21:14.076188926Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:14.078754275Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:14.08017297Z 63 PC: 13981 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T22:21:14.086719556Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:14.088906164Z 63 PC: 13981 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:21:14.0911122Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:14.092908915Z 62 PC: 13981 | Close file
2018-12-17T22:21:14.099487334Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:14.109231813Z 79 PC: 13ad0 | Find next file
2018-12-17T22:21:14.115780463Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:14.122948411Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:14.133211103Z 61 PC: 1363b | Open file (Filename = 'C:\DOS\EMM386.EXE')
2018-12-17T22:21:14.14047104Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:14.142233446Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:14.14366405Z 63 PC: 13981 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T22:21:14.151672984Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:14.153242525Z 63 PC: 13981 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:21:14.159876219Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:14.162343316Z 64 PC: 13981 | Write file or device (Write 3000 bytes on handle 5)
2018-12-17T22:21:14.17093744Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:14.172518143Z 64 PC: 13981 | Write file or device (Write 24 bytes on handle 5)
2018-12-17T22:21:14.176655686Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:14.178600522Z 62 PC: 13981 | Close file
2018-12-17T22:21:14.185916354Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:14.197017841Z 79 PC: 13ad0 | Find next file
2018-12-17T22:21:14.200419373Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:14.206691895Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:14.218678705Z 61 PC: 1363b | Open file (Filename = 'C:\DOS\MSCDEX.EXE')
2018-12-17T22:21:14.225537084Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:14.226990966Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:14.228937953Z 63 PC: 13981 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T22:21:14.234738498Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:14.236858115Z 64 PC: 13981 | Write file or device (Write 3000 bytes on handle 5)
2018-12-17T22:21:14.245093655Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:14.246436621Z 64 PC: 13981 | Write file or device (Write 24 bytes on handle 5)
2018-12-17T22:21:14.250381894Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:14.252000872Z 62 PC: 13981 | Close file
2018-12-17T22:21:14.259049579Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:14.269775435Z 79 PC: 13ad0 | Find next file
2018-12-17T22:21:14.273065742Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:14.278627574Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:14.288575153Z 61 PC: 1363b | Open file (Filename = 'C:\COMMAND.COM')
2018-12-17T22:21:14.294748695Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:14.296210517Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:14.298569195Z 63 PC: 13981 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T22:21:14.304431626Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:14.306519996Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:14.308884987Z 63 PC: 13981 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:21:14.3114706Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:14.312947596Z 64 PC: 13981 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:21:14.316918004Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:14.318434846Z 64 PC: 13981 | Write file or device (Write 3000 bytes on handle 5)
2018-12-17T22:21:14.327200663Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:14.32847413Z 64 PC: 13981 | Write file or device (Write 5 bytes on handle 5)
2018-12-17T22:21:14.331167551Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:14.333158847Z 62 PC: 13981 | Close file
2018-12-17T22:21:14.340016145Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:14.348727303Z 78 PC: 13a98 | Find first file
2018-12-17T22:21:14.359212289Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:14.364786471Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:14.380921272Z 61 PC: 1363b | Open file (Filename = '.\SLEEP.COM')
2018-12-17T22:21:14.388345864Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:14.389897581Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:14.391789289Z 63 PC: 13981 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T22:21:14.399575731Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:14.401073621Z 62 PC: 13981 | Close file
2018-12-17T22:21:14.408460324Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:14.421702591Z 79 PC: 13aa7 | Find next file
2018-12-17T22:21:14.424606917Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:14.436546384Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:14.446706144Z 61 PC: 1363b | Open file (Filename = '.\PRINT.COM')
2018-12-17T22:21:14.453342226Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:14.455294666Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:14.456809433Z 63 PC: 13981 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T22:21:14.463060342Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:14.465039703Z 62 PC: 13981 | Close file
2018-12-17T22:21:14.471691014Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:14.481137051Z 79 PC: 13aa7 | Find next file
2018-12-17T22:21:14.484023688Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:14.494367582Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:14.504065157Z 61 PC: 1363b | Open file (Filename = '.\HELLO.COM')
2018-12-17T22:21:14.510313468Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:14.511541828Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:14.513437096Z 63 PC: 13981 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T22:21:14.519552541Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:14.520987664Z 62 PC: 13981 | Close file
2018-12-17T22:21:14.528424641Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:14.537844808Z 79 PC: 13aa7 | Find next file
2018-12-17T22:21:14.540695399Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:14.5517379Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:14.563781155Z 61 PC: 1363b | Open file (Filename = '.\PHANG.COM')
2018-12-17T22:21:14.570607524Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:14.57260243Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:14.574166351Z 63 PC: 13981 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T22:21:14.581132416Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:14.582547015Z 62 PC: 13981 | Close file
2018-12-17T22:21:14.589132113Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:14.599150161Z 79 PC: 13aa7 | Find next file
2018-12-17T22:21:14.6016147Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:14.606973525Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:14.618686869Z 61 PC: 1363b | Open file (Filename = '.\PRINTA~1.COM')
2018-12-17T22:21:14.625598313Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:14.627170393Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:14.629076153Z 63 PC: 13981 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T22:21:14.635071312Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:14.637474532Z 62 PC: 13981 | Close file
2018-12-17T22:21:14.644167233Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:14.653530903Z 79 PC: 13aa7 | Find next file
2018-12-17T22:21:14.657261414Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:14.662708842Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:14.671840814Z 61 PC: 1363b | Open file (Filename = '.\MANDEL.COM')
2018-12-17T22:21:14.683295833Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:14.684656776Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:14.685990643Z 63 PC: 13981 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T22:21:14.69275247Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:14.694182345Z 62 PC: 13981 | Close file
2018-12-17T22:21:14.701072184Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:14.711460031Z 79 PC: 13aa7 | Find next file
2018-12-17T22:21:14.713909997Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:14.719830044Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:14.726209934Z 61 PC: 1363b | Open file (Filename = '.\PAH.COM')
2018-12-17T22:21:14.733171095Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:14.734661577Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:14.735705836Z 63 PC: 13981 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T22:21:14.740010333Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:14.747697344Z 62 PC: 13981 | Close file
2018-12-17T22:21:14.75360362Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:14.76212101Z 79 PC: 13aa7 | Find next file
2018-12-17T22:21:14.764557627Z 78 PC: 13ac1 | Find first file
2018-12-17T22:21:14.769924275Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:14.776151255Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:14.785640415Z 61 PC: 1363b | Open file (Filename = '.\TEST.EXE')
2018-12-17T22:21:14.792044067Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:14.794384561Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:14.796095698Z 63 PC: 13981 | Read file or device (Read 64 bytes on handle 5)
2018-12-17T22:21:14.802264836Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:14.805022436Z 63 PC: 13981 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:21:14.807219886Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:14.808752742Z 64 PC: 13981 | Write file or device (Write 3000 bytes on handle 5)
2018-12-17T22:21:14.817984778Z 66 PC: 13981 | Move file pointer
2018-12-17T22:21:14.819220766Z 64 PC: 13981 | Write file or device (Write 24 bytes on handle 5)
2018-12-17T22:21:14.821698038Z 87 PC: 13981 | Get or set file date and time
2018-12-17T22:21:14.823360061Z 62 PC: 13981 | Close file
2018-12-17T22:21:14.82868383Z 67 PC: 13997 | Get or set file attributes
2018-12-17T22:21:14.836450706Z 79 PC: 13ad0 | Find next file
2018-12-17T22:21:14.838986764Z 42 PC: 13b35 | Get date 0x13b35: cmp dx, 0xc01
0x13b39: je 0x13b3d
0x13b3b: jmp 0x13b4a
0x13b3d: mov ah, 9
0x13b3f: lea dx, word ptr [bx + 0x759]
0x13b43: int 0x21
0x13b45: mov ax, 0x4c00
0x13b48: int 0x21
0x13b4a: cmp dh, 4
0x13b4d: jne 0x13b5b
0x13b4f: cmp al, 3
0x13b51: jne 0x13b5b
0x13b53: mov ah, 9
0x13b55: lea dx, word ptr [bx + 0x7e8]
0x13b59: int 0x21
0x13b5b: popaw
0x13b5c: ret
0x13b5d: or ax, 0x70a
0x13b60: mov fs, di
0x13b62: movsw word ptr es:[di], word ptr [si]
2018-12-17T22:21:14.840898949Z 26 PC: 135a0 | Set disk transfer address
2018-12-17T22:21:14.842209492Z 37 PC: 135b1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:14.843514213Z 9 PC: 1332c | Display string (String= 'Goat file (COM/b9j.). Size=000009C4h/0000002500d bytes. ')
2018-12-17T22:21:14.846981178Z 48 PC: 13335 | Get DOS version
2018-12-17T22:21:14.848633538Z 61 PC: 13402 | Open file (Filename = '')
2018-12-17T22:21:14.852942958Z 93 PC: 133a4 | File sharing functions
2018-12-17T22:21:14.854288662Z 9 PC: 1332c | Display string (String= 'Size change=1790h/06032d. ')
2018-12-17T22:21:14.857288869Z 76 PC: 13389 | Terminate with return code (Return code = '1')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":3689,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:49:57.607190315Z 53 PC: 134ec | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:49:57.609997381Z 37 PC: 13502 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:49:57.611501271Z 26 PC: 1350c | Set disk transfer address
2018-12-25T11:49:57.613280905Z 78 PC: 13a98 | Find first file
2018-12-25T11:49:57.623814223Z 67 PC: 13997 | Get or set file attributes
2018-12-25T11:49:57.630606372Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:57.97857425Z 61 PC: 1363b | Open file (Filename = 'C:\DOS\EDIT.COM')
2018-12-25T11:49:57.98763422Z 87 PC: 13981 | Get or set file date and time
2018-12-25T11:49:57.994244585Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:57.996525178Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.005823189Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.008216927Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:58.020448192Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.032792696Z 79 PC: 13aa7 | Find next file
2018-12-25T11:49:58.041535391Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.052244566Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.063627283Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:58.07108175Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.072932936Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.074938083Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.081072651Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.082970575Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.084717482Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.110715445Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.112197558Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.115207823Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.118072579Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.13165875Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.134784363Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.140074835Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.143133218Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:58.150381531Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.16661845Z 79 PC: 13aa7 | Find next file (See above)
2018-12-25T11:49:58.169600467Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.175522051Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.185994745Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:58.193034442Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.195451366Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.198030299Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.204406139Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.20618797Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.208393639Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.211060372Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.212640909Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.216337777Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.217937415Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.227057099Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.229447233Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.232212022Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.23370694Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:58.244783646Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.566276861Z 79 PC: 13aa7 | Find next file (See above)
2018-12-25T11:49:58.572843379Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.580198082Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.596599779Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:58.603757928Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.605455903Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.611295949Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.616928003Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.618783395Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.62159165Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.62408415Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.625500295Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.629591945Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.631423289Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.644610379Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.647199769Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.650112008Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.651535622Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:58.660111187Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.670995434Z 79 PC: 13aa7 | Find next file (See above)
2018-12-25T11:49:58.677378207Z 78 PC: 13ac1 | Find first file
2018-12-25T11:49:58.685194973Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.691477055Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.701333286Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:58.710348885Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.712521686Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.714287421Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.721277206Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.723392269Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.725867788Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.72784946Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.737228439Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.7390388Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.742195101Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.744982406Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:58.752085506Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.761837924Z 79 PC: 13ad0 | Find next file
2018-12-25T11:49:58.766184061Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.772411364Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.782901585Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:58.79057656Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.792235417Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.793977552Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.800500115Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.802936146Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.805355616Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.807893704Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.816665539Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.818377535Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.822163805Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.824259157Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:58.831284938Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.841647294Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:58.845342423Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.852287667Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.86211901Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:58.869903146Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.871626344Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.873318315Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.880002591Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.881692558Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.88410673Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.887250891Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.895805144Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.897493484Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.901517456Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.903325693Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:58.910318298Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.921491423Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:58.925150122Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.935271018Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.945779175Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:58.953093435Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.954813696Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.957161578Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.965407205Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.966819203Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.969851276Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.971330905Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.9804104Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.983099348Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.987060128Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.988840412Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:58.995778052Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.006975481Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.010265771Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.016387052Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.026875358Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.034113619Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.035599247Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.037590041Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.043932826Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.045319242Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.050260898Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.052668607Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.062019373Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.064988676Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.075946679Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.07777067Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.085787645Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.095178606Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.098268793Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.105028202Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.116150298Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.123612932Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.126037984Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.128061674Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.134118853Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.136965546Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.145764997Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.147430048Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.151273288Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.153412759Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.160397034Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.170096749Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.174351318Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.181307061Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.190871634Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.206401423Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.214112513Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.21581575Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.223524531Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.225247056Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.233698035Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.23648318Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.239539094Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.241330274Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.249316798Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.260183773Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.26354682Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.270777975Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.280781169Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.287686297Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.290494416Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.292216171Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.298323386Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.301181234Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.304041107Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.305791283Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.315430522Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.317123271Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.320132351Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.323650793Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.3348103Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.344978063Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.349165159Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.355084733Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.365264114Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.373311088Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.374686269Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.376082559Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.383086786Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.384990691Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.393923964Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.396379743Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.3993698Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.401077486Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.408438812Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.418062991Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.421819671Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.429167753Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.438912805Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.445994032Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.448907088Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.450580705Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.457470054Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.460410164Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.469043129Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.470768043Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.4750428Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.476826935Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.483949823Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.49486471Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.498166103Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.504972258Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.515916801Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.523775785Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.525490997Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.527832042Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.534154093Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.535653535Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.54248212Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.55206404Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.55562707Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.56288679Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.572679166Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.580001862Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.586644649Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.589997642Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.596779728Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.614802336Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.616802904Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.618330277Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.636386883Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.637763555Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.641656232Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.643261951Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.655267562Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.672450385Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.67576264Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.681720728Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.692237465Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.69953001Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.701003717Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.702982863Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.708827099Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.710108924Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.719715651Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.721035887Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.723726002Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.725707865Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.732627107Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.742325403Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.746327152Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.752474899Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.762089005Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.76946808Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.770822134Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.772169731Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.778549738Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.780598422Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.783380555Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.784847393Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.790801146Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.802407704Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.808731631Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.815794506Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.827270137Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.840428926Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.841771386Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.84516449Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.851430994Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.852845016Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.86030966Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.862345348Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.870886528Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.873451885Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.876898478Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.878654553Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.886563697Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.896075875Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.89900875Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.905842803Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.915219648Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.922778179Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.925377015Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.926739224Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.932576746Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.934450693Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.942785271Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.94433732Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.947634987Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.949184848Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.957070793Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.966797Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.970159235Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.976580281Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.985976439Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.992303808Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.994767704Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.996469414Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.002312927Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.005079314Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.006889371Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.009610764Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.012175606Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:50:00.015470658Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.017156138Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:50:00.026750539Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.02859309Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:50:00.031625399Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.034009598Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:50:00.041076566Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.050068176Z 78 PC: 13a98 | Find first file (See above)
2018-12-25T11:50:00.060393517Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.066388627Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.082596539Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:50:00.090281541Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.091620557Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.09322523Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.099601396Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.101045255Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:50:00.108677428Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.118512566Z 79 PC: 13aa7 | Find next file (See above)
2018-12-25T11:50:00.120251409Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.12784946Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.13441254Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:50:00.139374344Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.140981908Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.142164727Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.147180681Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.148729789Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:50:00.156239022Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.167843566Z 79 PC: 13aa7 | Find next file (See above)
2018-12-25T11:50:00.170934616Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.181026144Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.191792915Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:50:00.199452928Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.201222013Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.203637831Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.20963782Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.2114496Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:50:00.220401087Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.236175186Z 79 PC: 13aa7 | Find next file (See above)
2018-12-25T11:50:00.238825185Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.245572407Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.252979254Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:50:00.262883481Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.264529654Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.265691726Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.270179499Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.27205811Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:50:00.2775752Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.284856252Z 79 PC: 13aa7 | Find next file (See above)
2018-12-25T11:50:00.286758195Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.290362528Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.298446711Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:50:00.307730631Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.308825567Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.310476113Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.314590479Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.316071241Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:50:00.322836853Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.329965496Z 79 PC: 13aa7 | Find next file (See above)
2018-12-25T11:50:00.33246469Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.336909168Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.343334236Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:50:00.349261019Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.350552452Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.352000159Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.358179412Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.359705801Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:50:00.36432523Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.375567948Z 79 PC: 13aa7 | Find next file (See above)
2018-12-25T11:50:00.377748712Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.388656728Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.396497874Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:50:00.40203573Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.403440331Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.405043843Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.409309236Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.411255851Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:50:00.416514572Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.440730737Z 79 PC: 13aa7 | Find next file (See above)
2018-12-25T11:50:00.444559776Z 78 PC: 13ac1 | Find first file (See above)
2018-12-25T11:50:00.45087198Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.462821704Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.474266495Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:50:00.482346923Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.484197187Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.487229454Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.493873226Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.495546889Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.498604969Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.499957385Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:50:00.509110988Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.511971062Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:50:00.514975794Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.516792731Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:50:00.525599643Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.535651695Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:50:00.539191186Z 42 PC: 13b35 | Get date 0x13b35: cmp dx, 0xc01
0x13b39: je 0x13b3d
0x13b3b: jmp 0x13b4a
0x13b3d: mov ah, 9
0x13b3f: lea dx, word ptr [bx + 0x759]
0x13b43: int 0x21
0x13b45: mov ax, 0x4c00
0x13b48: int 0x21
0x13b4a: cmp dh, 4
0x13b4d: jne 0x13b5b
0x13b4f: cmp al, 3
0x13b51: jne 0x13b5b
0x13b53: mov ah, 9
0x13b55: lea dx, word ptr [bx + 0x7e8]
0x13b59: int 0x21
0x13b5b: popaw
0x13b5c: ret
0x13b5d: or ax, 0x70a
0x13b60: mov fs, di
0x13b62: movsw word ptr es:[di], word ptr [si]
2018-12-25T11:50:00.541851387Z 26 PC: 135a0 | Set disk transfer address
2018-12-25T11:50:00.54315477Z 37 PC: 135b1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:50:00.545524261Z 9 PC: 1332c | Display string (String= 'Goat file (COM/b9j.). Size=000009C4h/0000002500d bytes. ')
2018-12-25T11:50:00.551142348Z 48 PC: 13335 | Get DOS version
2018-12-25T11:50:00.552606789Z 61 PC: 13402 | Open file (Filename = '')
2018-12-25T11:50:00.55798863Z 93 PC: 133a4 | File sharing functions
2018-12-25T11:50:00.559941294Z 9 PC: 1332c | Display string (See above)
2018-12-25T11:50:00.564114205Z 76 PC: 13389 | Terminate with return code (Return code = '1')

{"DateBased":true,"Day":1,"Month":4,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":3689,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:49:57.791784484Z 53 PC: 134ec | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:49:57.793700644Z 37 PC: 13502 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:49:57.795176492Z 26 PC: 1350c | Set disk transfer address
2018-12-25T11:49:57.79730323Z 78 PC: 13a98 | Find first file
2018-12-25T11:49:57.808606732Z 67 PC: 13997 | Get or set file attributes
2018-12-25T11:49:57.816142988Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.156725631Z 61 PC: 1363b | Open file (Filename = 'C:\DOS\EDIT.COM')
2018-12-25T11:49:58.165237403Z 87 PC: 13981 | Get or set file date and time
2018-12-25T11:49:58.16791645Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.169916967Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.176526232Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.179711176Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:58.184369676Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.420284331Z 79 PC: 13aa7 | Find next file
2018-12-25T11:49:58.424800842Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.432544039Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.532049794Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:58.540988855Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.543015288Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.544986217Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.553859687Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.55692147Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.559667318Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.563185167Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.565895511Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.569644237Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.571595758Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.584257442Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.586062825Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.589961762Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.597080123Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:58.605389256Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.617833583Z 79 PC: 13aa7 | Find next file (See above)
2018-12-25T11:49:58.622917354Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.63098616Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.644014034Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:58.652692975Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.655201454Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.65684548Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.663857388Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.666032822Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.667515135Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.670227073Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.672228252Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.675473261Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.677414421Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.692676031Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.694501645Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.697824617Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.70054733Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:58.708828894Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.720039028Z 79 PC: 13aa7 | Find next file (See above)
2018-12-25T11:49:58.727711492Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.735515345Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.746670352Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:58.751847094Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.753559448Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.754654295Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.760821907Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.763169806Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.764982772Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.767632305Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.769471506Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.772863386Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.774597971Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.788594325Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.790115611Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.793110779Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.795129935Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:58.803558855Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.814278938Z 79 PC: 13aa7 | Find next file (See above)
2018-12-25T11:49:58.822696969Z 78 PC: 13ac1 | Find first file
2018-12-25T11:49:58.830595149Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.837615398Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.849815404Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:58.858815123Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.860654489Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.862539353Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.870739257Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.872417239Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.874845941Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.877677646Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.887926618Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.890502621Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.894727083Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.896383086Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:58.904098507Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.915624728Z 79 PC: 13ad0 | Find next file
2018-12-25T11:49:58.919177655Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.925879474Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.937208421Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:58.945075725Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.946565108Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.948402714Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.956694622Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.958229934Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.960733235Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.962761254Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.972257926Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.97414091Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.977780337Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.97970754Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:58.987353582Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.998716987Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.002146133Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.009133109Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.022253099Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.030389758Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.032389954Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.035053015Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.041635315Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.043394273Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.048780358Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.050460708Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.06005816Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.061840843Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.065494462Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.067144638Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.074912206Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.087607677Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.091533896Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.098750629Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.1109473Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.119035096Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.120603818Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.122518036Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.129009264Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.130490397Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.133765382Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.135428758Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.145485955Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.14765404Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.151647821Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.153248925Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.162154079Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.17308571Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.176531043Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.184105721Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.195140759Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.202898904Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.204728838Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.207547393Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.214060637Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.216283963Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.219168219Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.220935995Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.230665159Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.23358338Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.236814209Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.238774918Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.246833329Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.257856386Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.261298016Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.269053364Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.280783587Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.288499043Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.290993137Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.292824845Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.3000601Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.304384248Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.310312899Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.311431357Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.314295122Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.315751753Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.320547503Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.328302291Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.331036297Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.335403132Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.343073072Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.348184982Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.349661016Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.351447064Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.356639673Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.358002715Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.364528888Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.366338037Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.369450869Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.371517466Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.379226889Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.390330815Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.395442161Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.40264674Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.414600065Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.423107411Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.424667279Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.426141519Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.433406856Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.435664903Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.438293408Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.440474053Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.451212364Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.455373102Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.461025641Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.465372127Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.471344779Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.478348949Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.48332538Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.490126649Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.500913705Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.506583074Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.507802763Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.509611606Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.513958818Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.515219151Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.521462986Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.523116771Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.525276341Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.527206373Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.533239228Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.54112486Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.543597294Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.548370761Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.561884388Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.570208609Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.57231581Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.574026664Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.580842381Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.583009576Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.590952133Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.592554801Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.596107387Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.597714359Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.605458228Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.616673302Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.620171022Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.627478991Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.635900762Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.640923376Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.642390129Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.644095247Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.648520397Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.649768595Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.655421271Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.662672663Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.665349671Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.670969177Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.677981717Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.68409441Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.686286071Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.687591446Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.692015783Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.693975472Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.695787811Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.69734342Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.704162992Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.705467842Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.708845214Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.71188052Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.720174843Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.731194896Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.736039707Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.743690175Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.755780356Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.764959615Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.766807657Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.768708008Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.776648479Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.778857564Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.788555199Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.791268012Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.795059478Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.79703916Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.805256531Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.818091431Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.821526051Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.828672756Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.840400895Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.848284588Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.850383004Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.853244109Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.860009835Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.86195167Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.865912503Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.868035484Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.875089061Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.888346255Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.895646428Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.90291155Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.915195978Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.923434345Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.925454469Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.928529456Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.935377752Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.937364879Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.947041862Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.948992909Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.958821226Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.961931108Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.965533561Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.967636997Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.976905473Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.988000827Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.991841836Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.000164723Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.012185047Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:50:00.023649418Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.025557631Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.027408261Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.034485983Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.036772429Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:50:00.046598593Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.048733487Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:50:00.05320297Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.055210048Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:50:00.063450824Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.075464851Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:50:00.080074637Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.086511679Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.09741927Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:50:00.104600426Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.106721497Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.109536199Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.116104052Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.118095423Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.120302946Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.123109116Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.124880739Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:50:00.128658707Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.13043867Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:50:00.14025684Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.142359324Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:50:00.146307742Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.14813292Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:50:00.156485726Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.166844814Z 78 PC: 13a98 | Find first file (See above)
2018-12-25T11:50:00.177323986Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.18425672Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.20271619Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:50:00.210637035Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.213015646Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.214620044Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.222416011Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.224405041Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:50:00.232246718Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.244171454Z 79 PC: 13aa7 | Find next file (See above)
2018-12-25T11:50:00.247206808Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.254013767Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.266327307Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:50:00.279419575Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.281844567Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.284772672Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.292145863Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.293654296Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:50:00.302365229Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.313931165Z 79 PC: 13aa7 | Find next file (See above)
2018-12-25T11:50:00.316916031Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.324272421Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.335769842Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:50:00.350096757Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.352232546Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.353724523Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.360963458Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.363256719Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:50:00.370933315Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.38213474Z 79 PC: 13aa7 | Find next file (See above)
2018-12-25T11:50:00.38580956Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.392492242Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.553895784Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:50:00.569414566Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.571315819Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.572947461Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.582731587Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.584876379Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:50:00.600741803Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.615622387Z 79 PC: 13aa7 | Find next file (See above)
2018-12-25T11:50:00.617635881Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.621917465Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.637539774Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:50:00.643543169Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.644858745Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.646505025Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.650977312Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.653095365Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:50:00.674960854Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.715648757Z 79 PC: 13aa7 | Find next file (See above)
2018-12-25T11:50:00.718671994Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.724606074Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.740447529Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:50:00.747422122Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.748698344Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.74978219Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.755024948Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.756789242Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:50:00.778745888Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.807712798Z 79 PC: 13aa7 | Find next file (See above)
2018-12-25T11:50:00.810619596Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.816855505Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.844056347Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:50:00.852163722Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.853876605Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.85579857Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.862784648Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.86481209Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:50:00.885779635Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.901973454Z 79 PC: 13aa7 | Find next file (See above)
2018-12-25T11:50:00.905094468Z 78 PC: 13ac1 | Find first file (See above)
2018-12-25T11:50:00.911858891Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.918279997Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.957428462Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:50:00.965324189Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.967362227Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.969841872Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.977821131Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.979766759Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.98296631Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.984705439Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:50:01.004593026Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:01.006475907Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:50:01.009597545Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:01.011816475Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:50:01.04575481Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:01.071411176Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:50:01.076834606Z 42 PC: 13b35 | Get date 0x13b35: cmp dx, 0xc01
0x13b39: je 0x13b3d
0x13b3b: jmp 0x13b4a
0x13b3d: mov ah, 9
0x13b3f: lea dx, word ptr [bx + 0x759]
0x13b43: int 0x21
0x13b45: mov ax, 0x4c00
0x13b48: int 0x21
0x13b4a: cmp dh, 4
0x13b4d: jne 0x13b5b
0x13b4f: cmp al, 3
0x13b51: jne 0x13b5b
0x13b53: mov ah, 9
0x13b55: lea dx, word ptr [bx + 0x7e8]
0x13b59: int 0x21
0x13b5b: popaw
0x13b5c: ret
0x13b5d: or ax, 0x70a
0x13b60: mov fs, di
0x13b62: movsw word ptr es:[di], word ptr [si]
2018-12-25T11:50:01.079369713Z 26 PC: 135a0 | Set disk transfer address
2018-12-25T11:50:01.080460593Z 37 PC: 135b1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:50:01.082746603Z 9 PC: 1332c | Display string (String= 'Goat file (COM/b9j.). Size=000009C4h/0000002500d bytes. ')
2018-12-25T11:50:01.090613266Z 48 PC: 13335 | Get DOS version
2018-12-25T11:50:01.092502468Z 61 PC: 13402 | Open file (Filename = '')
2018-12-25T11:50:01.100213291Z 93 PC: 133a4 | File sharing functions
2018-12-25T11:50:01.102251178Z 9 PC: 1332c | Display string (See above)
2018-12-25T11:50:01.109061911Z 76 PC: 13389 | Terminate with return code (Return code = '1')

{"DateBased":true,"Day":2,"Month":4,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":3689,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:49:58.142620287Z 53 PC: 134ec | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:49:58.144483774Z 37 PC: 13502 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:49:58.14584956Z 26 PC: 1350c | Set disk transfer address
2018-12-25T11:49:58.14763433Z 78 PC: 13a98 | Find first file
2018-12-25T11:49:58.158046478Z 67 PC: 13997 | Get or set file attributes
2018-12-25T11:49:58.175349994Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.525392508Z 61 PC: 1363b | Open file (Filename = 'C:\DOS\EDIT.COM')
2018-12-25T11:49:58.533485628Z 87 PC: 13981 | Get or set file date and time
2018-12-25T11:49:58.536200031Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.538135912Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.545584258Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.548728589Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:58.555768427Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.567361746Z 79 PC: 13aa7 | Find next file
2018-12-25T11:49:58.572274647Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.579793044Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.590848873Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:58.600185188Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.602145086Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.604107931Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.61153624Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.614116135Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.616058397Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.619268971Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.621477083Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.624943107Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.62690321Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.638737649Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.640225468Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.64322058Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.645844587Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:58.654025254Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.686650629Z 79 PC: 13aa7 | Find next file (See above)
2018-12-25T11:49:58.69246715Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.6994473Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.710513283Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:58.71853199Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.720995907Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.722635761Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.729298987Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.738233513Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.739823061Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.742633927Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.745018794Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.749076856Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.752248447Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.762866832Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.764964216Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.768673777Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.77153298Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:58.77986224Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.791014339Z 79 PC: 13aa7 | Find next file (See above)
2018-12-25T11:49:58.799131333Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.806517866Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.81754135Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:58.822664507Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.824188374Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.825475208Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.829607579Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.831225483Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.832468833Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.834589153Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.838635598Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.842327646Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.844169489Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.856454855Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.857629169Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.859656068Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.861442797Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:58.86682439Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.873322662Z 79 PC: 13aa7 | Find next file (See above)
2018-12-25T11:49:58.878249124Z 78 PC: 13ac1 | Find first file
2018-12-25T11:49:58.882341392Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.886695738Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.893456457Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:58.901039973Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.902634344Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.904843611Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.91108543Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.912584969Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.915878565Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.917454095Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.926767647Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.928442424Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.931955233Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.933579736Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:58.941306299Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.95286075Z 79 PC: 13ad0 | Find next file
2018-12-25T11:49:58.956477816Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.96318221Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.974326067Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:58.98187584Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.983287435Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.98510646Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.991181846Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.992437906Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.995137744Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.996674158Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.006025155Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.008435822Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.011541952Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.013085462Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.02256426Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.033984127Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.037897838Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.045534119Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.056439248Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.06420046Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.066437813Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.068057955Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.074349326Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.076879165Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.080282034Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.081894485Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.09175399Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.094563515Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.098101811Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.10016662Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.108910872Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.11965985Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.131670467Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.139583786Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.15127329Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.159206763Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.161743652Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.163440974Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.169560102Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.171963944Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.17448405Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.176222566Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.187106632Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.189207033Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.19266762Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.194855764Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.204780084Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.216465658Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.220254277Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.227832537Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.238553256Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.246370841Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.248663968Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.250451709Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.257015451Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.259573015Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.261893954Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.263381586Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.272956895Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.274595233Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.277816093Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.283915335Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.291676698Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.302550242Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.307296454Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.314098308Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.325232877Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.334047991Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.336055955Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.33781421Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.345609176Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.347491756Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.357973012Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.360358744Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.363731225Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.365791423Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.374347559Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.385103341Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.388963236Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.397308817Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.409830226Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.419362237Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.422029047Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.424487199Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.431899149Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.434420429Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.444620843Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.450956976Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.455586067Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.460250989Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.467985577Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.480726625Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.484691399Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.491934974Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.503226706Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.511710613Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.513973003Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.515696033Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.522892826Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.524677758Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.52723345Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.530153672Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.540077014Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.542334899Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.54685109Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.548960052Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.557895403Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.570152227Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.5742791Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.582042117Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.594125719Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.602412239Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.604535397Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.607435575Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.615115244Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.617960719Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.628433625Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.630551132Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.634083766Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.636421563Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.645073902Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.656155555Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.660427845Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.668524705Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.679565777Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.688572156Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.692209637Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.69418159Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.70132119Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.704200136Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.714058575Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.715929195Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.720035408Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.72209203Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.727871388Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.735614624Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.738771965Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.744724022Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.757036959Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.763851705Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.765679122Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.767578571Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.773226558Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.774991685Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.782450979Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.791771177Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.79560978Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.80315607Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.815085555Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.823233649Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.825458004Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.826691248Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.831403807Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.834252652Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.837129238Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.839112595Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.849740193Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.851853744Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.855407684Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.858289537Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.866617242Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.877519393Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.881824533Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.889912977Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.900971867Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.909324737Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.912064523Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.914018396Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.921103562Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.923487177Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.933251755Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.935195818Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.939592197Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.941652157Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.950499494Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.962154305Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.965982664Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.9732195Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.98515934Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.993304829Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.99529651Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.997932388Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.004624209Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.006593425Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.009590683Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.011344142Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:50:00.018889834Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.030223855Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:50:00.037533304Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.044810614Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.056790275Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:50:00.064837289Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.066731026Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.069708435Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.076223792Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.078935274Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.09152779Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.093483879Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:50:00.103241452Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.106431418Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:50:00.109720731Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.111542609Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:50:00.120427889Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.13196646Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:50:00.135795135Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.143100279Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.1548268Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:50:00.163016214Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.164668631Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.166256293Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.1734998Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.175188727Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:50:00.185235463Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.187527981Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:50:00.190692638Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.192286238Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:50:00.202941599Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.215115478Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:50:00.21863583Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.225769937Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.23570022Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:50:00.243045002Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.245714456Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.247813268Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.254943601Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.257722041Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.259418086Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.262541748Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.265269543Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:50:00.268873218Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.271051225Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:50:00.283073044Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.284851799Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:50:00.288359213Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.290400094Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:50:00.298567052Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.309657389Z 78 PC: 13a98 | Find first file (See above)
2018-12-25T11:50:00.320359259Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.32718544Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.345389214Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:50:00.353544871Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.356368037Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.359218338Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.367041075Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.368760715Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:50:00.378139631Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.498929109Z 79 PC: 13aa7 | Find next file (See above)
2018-12-25T11:50:00.50295735Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.511335324Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.570065379Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:50:00.578445084Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.582571197Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.584327734Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.591715201Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.594686645Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:50:00.611265405Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.63231353Z 79 PC: 13aa7 | Find next file (See above)
2018-12-25T11:50:00.635776172Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.642589564Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.669930371Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:50:00.679206555Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.681074396Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.683558461Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.708703272Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.710382071Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:50:00.725453142Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.886540786Z 79 PC: 13aa7 | Find next file (See above)
2018-12-25T11:50:00.890478074Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.897599908Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.911848636Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:50:00.916147237Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.917319576Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.918603591Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.923025349Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.924894414Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:50:00.947821775Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.967878374Z 79 PC: 13aa7 | Find next file (See above)
2018-12-25T11:50:00.972159436Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.978626092Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.998776887Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:50:01.006606434Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:01.008089079Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:01.009479301Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:01.016870409Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:01.018112097Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:50:01.046016225Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:01.073112992Z 79 PC: 13aa7 | Find next file (See above)
2018-12-25T11:50:01.076315226Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:01.084134197Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:01.096624357Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:50:01.104518508Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:01.106541766Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:01.10895582Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:01.116244067Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:01.124563979Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:50:01.135250682Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:01.148386954Z 79 PC: 13aa7 | Find next file (See above)
2018-12-25T11:50:01.152313527Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:01.159492158Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:01.170585288Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:50:01.179149867Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:01.181558958Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:01.184080687Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:01.192750996Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:01.195070313Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:50:01.203421908Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:01.226808281Z 79 PC: 13aa7 | Find next file (See above)
2018-12-25T11:50:01.229605682Z 78 PC: 13ac1 | Find first file (See above)
2018-12-25T11:50:01.237498491Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:01.247512128Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:01.261213256Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:50:01.268873548Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:01.272094154Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:01.273864428Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:01.282702383Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:01.285708205Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:01.288599195Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:01.290668678Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:50:01.302242142Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:01.303868967Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:50:01.30733431Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:01.311053392Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:50:01.320815672Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:01.336138402Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:50:01.341151229Z 42 PC: 13b35 | Get date 0x13b35: cmp dx, 0xc01
0x13b39: je 0x13b3d
0x13b3b: jmp 0x13b4a
0x13b3d: mov ah, 9
0x13b3f: lea dx, word ptr [bx + 0x759]
0x13b43: int 0x21
0x13b45: mov ax, 0x4c00
0x13b48: int 0x21
0x13b4a: cmp dh, 4
0x13b4d: jne 0x13b5b
0x13b4f: cmp al, 3
0x13b51: jne 0x13b5b
0x13b53: mov ah, 9
0x13b55: lea dx, word ptr [bx + 0x7e8]
0x13b59: int 0x21
0x13b5b: popaw
0x13b5c: ret
0x13b5d: or ax, 0x70a
0x13b60: mov fs, di
0x13b62: movsw word ptr es:[di], word ptr [si]
2018-12-25T11:50:01.344105804Z 9 PC: 13b5b | Display string (Could not find end pointer)
2018-12-25T11:50:01.374898466Z 26 PC: 135a0 | Set disk transfer address
2018-12-25T11:50:01.377073484Z 37 PC: 135b1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:50:01.379214214Z 9 PC: 1332c | Display string (String= 'Goat file (COM/b9j.). Size=000009C4h/0000002500d bytes. ')
2018-12-25T11:50:01.387053409Z 48 PC: 13335 | Get DOS version
2018-12-25T11:50:01.39357876Z 61 PC: 13402 | Open file (Filename = '')
2018-12-25T11:50:01.401424461Z 93 PC: 133a4 | File sharing functions
2018-12-25T11:50:01.404600784Z 9 PC: 1332c | Display string (See above)
2018-12-25T11:50:01.410728552Z 76 PC: 13389 | Terminate with return code (Return code = '1')

{"DateBased":true,"Day":1,"Month":12,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":3689,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:49:58.213251459Z 53 PC: 134ec | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:49:58.215375839Z 37 PC: 13502 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:49:58.216562565Z 26 PC: 1350c | Set disk transfer address
2018-12-25T11:49:58.218118188Z 78 PC: 13a98 | Find first file
2018-12-25T11:49:58.2272389Z 67 PC: 13997 | Get or set file attributes
2018-12-25T11:49:58.234154025Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.566440002Z 61 PC: 1363b | Open file (Filename = 'C:\DOS\EDIT.COM')
2018-12-25T11:49:58.573615925Z 87 PC: 13981 | Get or set file date and time
2018-12-25T11:49:58.576048632Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.577723806Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.586180147Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.589439452Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:58.596969629Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.608081782Z 79 PC: 13aa7 | Find next file
2018-12-25T11:49:58.61308068Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.634767271Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.644743743Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:58.653045725Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.655214292Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.656975724Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.663138534Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.669184335Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.671160694Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.673539854Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.675921956Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.679373445Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.681319924Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.692978261Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.694832128Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.698147878Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.700845098Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:58.708497349Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.718024318Z 79 PC: 13aa7 | Find next file (See above)
2018-12-25T11:49:58.721842203Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.728854437Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.738618325Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:58.746445121Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.748498356Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.750147953Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.766177411Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.768455658Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.770097918Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.773213447Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.775140398Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.778152567Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.779839417Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.790902928Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.79253976Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.795648576Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.797797148Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:58.804815215Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.814185491Z 79 PC: 13aa7 | Find next file (See above)
2018-12-25T11:49:58.820639297Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.826765446Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.836765929Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:58.844320465Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.845985922Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.847636076Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.855264605Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.857096658Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.858758171Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.861934832Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.863567371Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.866634327Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.869190665Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.880881886Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.882534659Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.886036799Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.88779051Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:58.894990802Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.905446361Z 79 PC: 13aa7 | Find next file (See above)
2018-12-25T11:49:58.911542731Z 78 PC: 13ac1 | Find first file
2018-12-25T11:49:58.918367161Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.925789385Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:58.935269075Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:58.946684459Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.948902661Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.950534713Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.956017421Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.958336613Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:58.961271148Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.963124976Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.973419731Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:58.977971691Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:58.981255251Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:58.984084923Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:58.992632745Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.002248527Z 79 PC: 13ad0 | Find next file
2018-12-25T11:49:59.005550924Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.012333054Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.022030429Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.029412855Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.032042003Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.033790793Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.039615976Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.042313042Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.045664102Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.047414567Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.057624444Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.059098543Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.062120002Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.065055544Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.072382476Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.081871218Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.085642362Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.091935461Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.101813363Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.109503138Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.111287687Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.113062999Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.119773203Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.121498057Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.123960667Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.127968058Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.136530547Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.138115386Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.142410268Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.144115244Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.151059203Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.161345851Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.164611774Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.170825663Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.181104481Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.193373735Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.194907419Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.197078689Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.20282522Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.204436589Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.207425033Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.209833217Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.218205019Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.220241591Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.223250894Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.225330538Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.232724525Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.242403431Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.245597132Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.252333606Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.26272153Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.269689098Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.271785092Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.273670201Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.279322435Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.28136817Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.283610117Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.285169253Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.295253864Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.296621974Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.299575214Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.301765295Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.309489149Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.319324482Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.323874777Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.330114612Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.33991456Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.347664118Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.349339243Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.351029773Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.358427357Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.359985083Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.368347858Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.370714597Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.374532861Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.376264427Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.384379264Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.395172435Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.398393623Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.405030116Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.414958923Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.422222669Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.424896801Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.426701338Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.433015794Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.435422123Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.448389021Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.450167395Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.453589109Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.455242977Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.463397916Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.473385319Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.476686625Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.483323169Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.492960152Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.500130196Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.502772965Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.505026445Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.510910203Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.513487981Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.516365502Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.518181632Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.528224876Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.530316287Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.533439936Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.535996317Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.543377053Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.553168696Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.557272088Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.563904523Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.573731372Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.581619156Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.583712816Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.58544676Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.593133212Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.595208835Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.603720907Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.606168317Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.609607809Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.61143144Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.619262097Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.629438769Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.632770994Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.639496796Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.649209708Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.656178146Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.659259431Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.661150756Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.669585123Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.671893143Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.68037937Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.681956597Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.685826192Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.687568855Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.694463981Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.705438681Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.708854185Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.715062217Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.726298208Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.733546702Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.73519006Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.737282324Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.74295014Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.744648611Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.751079898Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.760830029Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.764132072Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.771138316Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.781463958Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.789283868Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.791530431Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.7931472Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.798941671Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.802175101Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.804513576Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.805983126Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.815475112Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.816976899Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.820004417Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.822266608Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.82948096Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.839361386Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.843095077Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.849351289Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.860023711Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.867325411Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.868934166Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.871167837Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.877191876Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.878713799Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.887699097Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.889108013Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:49:59.891789176Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.893889877Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.900604987Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.910050192Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.913873899Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.919925659Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.930253794Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:49:59.937844318Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.939314703Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.940736924Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.947227978Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:49:59.94862477Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:49:59.950522912Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:49:59.952900425Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:49:59.958815679Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.968287359Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:49:59.975439935Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.982111208Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:49:59.992351855Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:50:00.000027371Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.001489693Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.002896098Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.009216108Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.010538052Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.016925276Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.019338371Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:50:00.027734458Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.029317935Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:50:00.033121101Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.034864922Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:50:00.041746174Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.052122989Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:50:00.056296933Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.062530389Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.073024223Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:50:00.080392565Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.08175978Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.083862393Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.089797579Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.091232691Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:50:00.100696558Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.102082816Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:50:00.104975598Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.107545383Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:50:00.114644614Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.125599763Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:50:00.1296946Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.136327802Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.14565846Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:50:00.152172538Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.153977462Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.156174248Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.160514042Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.161731666Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.163333811Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.165027858Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.166091287Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:50:00.168556875Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.169653527Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:50:00.17523447Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.176834485Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:50:00.178759909Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.180127201Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:50:00.185212141Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.196012158Z 78 PC: 13a98 | Find first file (See above)
2018-12-25T11:50:00.202805637Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.206799044Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.219276143Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:50:00.224305504Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.225331039Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.22658501Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.231503565Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.232565274Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:50:00.236881916Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.249970462Z 79 PC: 13aa7 | Find next file (See above)
2018-12-25T11:50:00.252532156Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.263189204Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.276475162Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:50:00.283151627Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.284626136Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.286342532Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.292806219Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.295236058Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:50:00.302494348Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.3124694Z 79 PC: 13aa7 | Find next file (See above)
2018-12-25T11:50:00.316082531Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.322099821Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.334842088Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:50:00.342929739Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.344623383Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.346314224Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.353737213Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.355475064Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:50:00.3627298Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.373284161Z 79 PC: 13aa7 | Find next file (See above)
2018-12-25T11:50:00.375968775Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.382745749Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.394795328Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:50:00.40204466Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.404436006Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.406037989Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.412327348Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.414280381Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:50:00.421325868Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.431112015Z 79 PC: 13aa7 | Find next file (See above)
2018-12-25T11:50:00.43439285Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.439976853Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.449685312Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:50:00.462051557Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.463643762Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.465909906Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.472436665Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.473912329Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:50:00.481915515Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.491909963Z 79 PC: 13aa7 | Find next file (See above)
2018-12-25T11:50:00.494776956Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.501317995Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.511298886Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:50:00.526934769Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.529421756Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.531020301Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.538158263Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.540355327Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:50:00.547351755Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.558617486Z 79 PC: 13aa7 | Find next file (See above)
2018-12-25T11:50:00.561636166Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.567564616Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.578765457Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:50:00.588385826Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.589466605Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.591130518Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.595251646Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.596365958Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:50:00.60161323Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.624030525Z 79 PC: 13aa7 | Find next file (See above)
2018-12-25T11:50:00.627318216Z 78 PC: 13ac1 | Find first file (See above)
2018-12-25T11:50:00.634431234Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.64161435Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.655194346Z 61 PC: 1363b | Open file (See above)
2018-12-25T11:50:00.662413873Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.663791039Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.666294491Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.673078305Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.674667141Z 63 PC: 13981 | Read file or device (See above)
2018-12-25T11:50:00.678373107Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.679962456Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:50:00.689677806Z 66 PC: 13981 | Move file pointer (See above)
2018-12-25T11:50:00.692008862Z 64 PC: 13981 | Write file or device (See above)
2018-12-25T11:50:00.69429331Z 87 PC: 13981 | Get or set file date and time (See above)
2018-12-25T11:50:00.695702135Z 62 PC: 13981 | Close file (See above)
2018-12-25T11:50:00.708355269Z 67 PC: 13997 | Get or set file attributes (See above)
2018-12-25T11:50:00.716277356Z 79 PC: 13ad0 | Find next file (See above)
2018-12-25T11:50:00.718912177Z 42 PC: 13b35 | Get date 0x13b35: cmp dx, 0xc01
0x13b39: je 0x13b3d
0x13b3b: jmp 0x13b4a
0x13b3d: mov ah, 9
0x13b3f: lea dx, word ptr [bx + 0x759]
0x13b43: int 0x21
0x13b45: mov ax, 0x4c00
0x13b48: int 0x21
0x13b4a: cmp dh, 4
0x13b4d: jne 0x13b5b
0x13b4f: cmp al, 3
0x13b51: jne 0x13b5b
0x13b53: mov ah, 9
0x13b55: lea dx, word ptr [bx + 0x7e8]
0x13b59: int 0x21
0x13b5b: popaw
0x13b5c: ret
0x13b5d: or ax, 0x70a
0x13b60: mov fs, di
0x13b62: movsw word ptr es:[di], word ptr [si]
2018-12-25T11:50:00.720711043Z 9 PC: 13b45 | Display string (String= ' Очередной вариант сего безобидного вируса снова посвящён Тане. Таня, поздравляю тебя с днём рождения ! Таня, я очень люблю тебя !!! ')
2018-12-25T11:50:00.730570005Z 76 PC: 13b4a | Terminate with return code (Return code = '0')