Sample viewer

vx.netlux.org/Virus.DOS.VCL.Quake.627

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:24:12.971157549Z 47 PC: 12a60 | Get disk transfer address
2018-12-17T22:24:12.972852027Z 26 PC: 12a68 | Set disk transfer address
2018-12-17T22:24:13.029905255Z 37 PC: 12a7d | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:24:13.031069562Z 37 PC: 12a81 | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:24:13.033021971Z 71 PC: 12af2 | Get current directory
2018-12-17T22:24:13.036046457Z 47 PC: 12b2e | Get disk transfer address
2018-12-17T22:24:13.03718308Z 26 PC: 12b3d | Set disk transfer address
2018-12-17T22:24:13.039242396Z 78 PC: 12b45 | Find first file
2018-12-17T22:24:13.045541278Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:13.046774539Z 61 PC: 12b97 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:24:13.053638465Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:13.064098939Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:13.06587719Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:13.067705826Z 67 PC: 12bd0 | Get or set file attributes
2018-12-17T22:24:13.083973729Z 61 PC: 12bd5 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:24:13.091565954Z 64 PC: 12be1 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:24:13.094901435Z 66 PC: 12be9 | Move file pointer
2018-12-17T22:24:13.097285962Z 64 PC: 12bf4 | Write file or device (Write 627 bytes on handle 5)
2018-12-17T22:24:13.106262247Z 87 PC: 12bff | Get or set file date and time
2018-12-17T22:24:13.107784515Z 62 PC: 12c03 | Close file
2018-12-17T22:24:13.11626808Z 67 PC: 12c10 | Get or set file attributes
2018-12-17T22:24:13.126079876Z 26 PC: 12b66 | Set disk transfer address
2018-12-17T22:24:13.127311898Z 47 PC: 12b2e | Get disk transfer address
2018-12-17T22:24:13.129730114Z 26 PC: 12b3d | Set disk transfer address
2018-12-17T22:24:13.131216869Z 78 PC: 12b45 | Find first file
2018-12-17T22:24:13.137560923Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:13.140214049Z 61 PC: 12b97 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:24:13.146732155Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:13.149353693Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:13.151872978Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:13.153960997Z 67 PC: 12bd0 | Get or set file attributes
2018-12-17T22:24:13.166229435Z 61 PC: 12bd5 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:24:13.179890932Z 64 PC: 12be1 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:24:13.1865674Z 66 PC: 12be9 | Move file pointer
2018-12-17T22:24:13.188075658Z 64 PC: 12bf4 | Write file or device (Write 627 bytes on handle 5)
2018-12-17T22:24:13.196708705Z 87 PC: 12bff | Get or set file date and time
2018-12-17T22:24:13.199063486Z 62 PC: 12c03 | Close file
2018-12-17T22:24:13.207416584Z 67 PC: 12c10 | Get or set file attributes
2018-12-17T22:24:13.217284748Z 26 PC: 12b66 | Set disk transfer address
2018-12-17T22:24:13.219645909Z 59 PC: 12b08 | Change current directory
2018-12-17T22:24:13.22364192Z 59 PC: 12b11 | Change current directory
2018-12-17T22:24:13.225287248Z 71 PC: 12af2 | Get current directory
2018-12-17T22:24:13.228793768Z 47 PC: 12b2e | Get disk transfer address
2018-12-17T22:24:13.229921825Z 26 PC: 12b3d | Set disk transfer address
2018-12-17T22:24:13.244310309Z 78 PC: 12b45 | Find first file
2018-12-17T22:24:13.251419516Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:13.252615901Z 61 PC: 12b97 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:24:13.259359126Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:13.266424848Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:13.26779317Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:13.26947074Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:13.272910298Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:13.274938943Z 61 PC: 12b97 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:24:13.281568765Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:13.288673698Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:13.290190866Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:13.292009913Z 67 PC: 12bd0 | Get or set file attributes
2018-12-17T22:24:13.307357854Z 61 PC: 12bd5 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:24:13.314328062Z 64 PC: 12be1 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:24:13.316836144Z 66 PC: 12be9 | Move file pointer
2018-12-17T22:24:13.318944544Z 64 PC: 12bf4 | Write file or device (Write 627 bytes on handle 5)
2018-12-17T22:24:13.326909139Z 87 PC: 12bff | Get or set file date and time
2018-12-17T22:24:13.3284749Z 62 PC: 12c03 | Close file
2018-12-17T22:24:13.336869611Z 67 PC: 12c10 | Get or set file attributes
2018-12-17T22:24:13.346854848Z 26 PC: 12b66 | Set disk transfer address
2018-12-17T22:24:13.347943017Z 47 PC: 12b2e | Get disk transfer address
2018-12-17T22:24:13.349844238Z 26 PC: 12b3d | Set disk transfer address
2018-12-17T22:24:13.351479195Z 78 PC: 12b45 | Find first file
2018-12-17T22:24:13.35750091Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:13.359535803Z 61 PC: 12b97 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:24:13.366077653Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:13.36914636Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:13.374311249Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:13.376851999Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:13.379704724Z 26 PC: 12b66 | Set disk transfer address
2018-12-17T22:24:13.382400606Z 59 PC: 12b08 | Change current directory
2018-12-17T22:24:13.391522451Z 59 PC: 12b11 | Change current directory
2018-12-17T22:24:13.393610695Z 71 PC: 12af2 | Get current directory
2018-12-17T22:24:13.397410513Z 47 PC: 12b2e | Get disk transfer address
2018-12-17T22:24:13.398543727Z 26 PC: 12b3d | Set disk transfer address
2018-12-17T22:24:13.399604751Z 78 PC: 12b45 | Find first file
2018-12-17T22:24:13.408884162Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:13.410059402Z 61 PC: 12b97 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:24:13.417076278Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:13.424676771Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:13.426615585Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:13.429143606Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:13.433218292Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:13.435458367Z 61 PC: 12b97 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:24:13.443002641Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:13.449968913Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:13.451559243Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:13.453811111Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:13.458013565Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:13.460271474Z 61 PC: 12b97 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:24:13.466998608Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:13.474437732Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:13.476969942Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:13.479549543Z 67 PC: 12bd0 | Get or set file attributes
2018-12-17T22:24:13.49260774Z 61 PC: 12bd5 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:24:13.501777946Z 64 PC: 12be1 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:24:13.504493425Z 66 PC: 12be9 | Move file pointer
2018-12-17T22:24:13.505854015Z 64 PC: 12bf4 | Write file or device (Write 627 bytes on handle 5)
2018-12-17T22:24:13.514510457Z 87 PC: 12bff | Get or set file date and time
2018-12-17T22:24:13.516016151Z 62 PC: 12c03 | Close file
2018-12-17T22:24:13.523876609Z 67 PC: 12c10 | Get or set file attributes
2018-12-17T22:24:13.534745022Z 26 PC: 12b66 | Set disk transfer address
2018-12-17T22:24:13.535816262Z 47 PC: 12b2e | Get disk transfer address
2018-12-17T22:24:13.536858737Z 26 PC: 12b3d | Set disk transfer address
2018-12-17T22:24:13.538954962Z 78 PC: 12b45 | Find first file
2018-12-17T22:24:13.54505843Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:13.546196493Z 61 PC: 12b97 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:24:13.55348128Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:13.559955274Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:13.561609642Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:13.564321738Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:13.566883265Z 26 PC: 12b66 | Set disk transfer address
2018-12-17T22:24:13.567994015Z 59 PC: 12b08 | Change current directory
2018-12-17T22:24:13.572872741Z 59 PC: 12b11 | Change current directory
2018-12-17T22:24:13.574620482Z 71 PC: 12af2 | Get current directory
2018-12-17T22:24:13.577382058Z 47 PC: 12b2e | Get disk transfer address
2018-12-17T22:24:13.579595062Z 26 PC: 12b3d | Set disk transfer address
2018-12-17T22:24:13.580655211Z 78 PC: 12b45 | Find first file
2018-12-17T22:24:13.591774743Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:13.594160753Z 61 PC: 12b97 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:24:13.601618979Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:13.608163789Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:13.610075801Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:13.613024975Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:13.615648743Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:13.616822876Z 61 PC: 12b97 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:24:13.623837963Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:13.629960954Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:13.631280862Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:13.63400106Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:13.636963712Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:13.638454364Z 61 PC: 12b97 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:24:13.645923662Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:13.652432134Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:13.65421671Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:13.656878016Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:13.659526857Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:13.660653031Z 61 PC: 12b97 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:24:13.668002582Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:13.674155732Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:13.675765879Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:13.677712336Z 67 PC: 12bd0 | Get or set file attributes
2018-12-17T22:24:13.68728993Z 61 PC: 12bd5 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:24:13.693522761Z 64 PC: 12be1 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:24:13.696409374Z 66 PC: 12be9 | Move file pointer
2018-12-17T22:24:13.697531499Z 64 PC: 12bf4 | Write file or device (Write 627 bytes on handle 5)
2018-12-17T22:24:13.705428418Z 87 PC: 12bff | Get or set file date and time
2018-12-17T22:24:13.706997508Z 62 PC: 12c03 | Close file
2018-12-17T22:24:13.717542216Z 67 PC: 12c10 | Get or set file attributes
2018-12-17T22:24:13.726995931Z 26 PC: 12b66 | Set disk transfer address
2018-12-17T22:24:13.728288823Z 47 PC: 12b2e | Get disk transfer address
2018-12-17T22:24:13.729231282Z 26 PC: 12b3d | Set disk transfer address
2018-12-17T22:24:13.730119096Z 78 PC: 12b45 | Find first file
2018-12-17T22:24:13.73669677Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:13.737637086Z 61 PC: 12b97 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:24:13.743878156Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:13.75039095Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:13.751571749Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:13.753204504Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:13.756114935Z 26 PC: 12b66 | Set disk transfer address
2018-12-17T22:24:13.757096682Z 59 PC: 12b08 | Change current directory
2018-12-17T22:24:13.761000635Z 59 PC: 12b11 | Change current directory
2018-12-17T22:24:13.763034083Z 71 PC: 12af2 | Get current directory
2018-12-17T22:24:13.765746353Z 47 PC: 12b2e | Get disk transfer address
2018-12-17T22:24:13.766892088Z 26 PC: 12b3d | Set disk transfer address
2018-12-17T22:24:13.768504692Z 78 PC: 12b45 | Find first file
2018-12-17T22:24:13.774311577Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:13.775468829Z 61 PC: 12b97 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:24:13.782353293Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:13.784857261Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:13.786703575Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:13.788749815Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:13.791588115Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:13.793075117Z 61 PC: 12b97 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:24:13.805353517Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:13.811554418Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:13.813150313Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:13.814412615Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:13.81618812Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:13.817333446Z 61 PC: 12b97 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:24:13.821795442Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:13.826456742Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:13.828441419Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:13.83018539Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:13.83261451Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:13.834251351Z 61 PC: 12b97 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:24:13.841843335Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:13.848103426Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:13.850498156Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:13.852224941Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:13.854749694Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:13.856496442Z 61 PC: 12b97 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:24:13.863325124Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:13.871083182Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:13.872975588Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:13.874653426Z 67 PC: 12bd0 | Get or set file attributes
2018-12-17T22:24:13.884692662Z 61 PC: 12bd5 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:24:13.891766006Z 64 PC: 12be1 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:24:13.894543454Z 66 PC: 12be9 | Move file pointer
2018-12-17T22:24:13.895920009Z 64 PC: 12bf4 | Write file or device (Write 627 bytes on handle 5)
2018-12-17T22:24:13.905289071Z 87 PC: 12bff | Get or set file date and time
2018-12-17T22:24:13.906912887Z 62 PC: 12c03 | Close file
2018-12-17T22:24:13.914646873Z 67 PC: 12c10 | Get or set file attributes
2018-12-17T22:24:13.925914442Z 26 PC: 12b66 | Set disk transfer address
2018-12-17T22:24:13.92715182Z 47 PC: 12b2e | Get disk transfer address
2018-12-17T22:24:13.928482949Z 26 PC: 12b3d | Set disk transfer address
2018-12-17T22:24:13.930303601Z 78 PC: 12b45 | Find first file
2018-12-17T22:24:13.937464959Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:13.939162216Z 61 PC: 12b97 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:24:13.945426322Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:13.951547994Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:13.953535856Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:13.955318476Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:13.957655588Z 26 PC: 12b66 | Set disk transfer address
2018-12-17T22:24:13.959748937Z 59 PC: 12b08 | Change current directory
2018-12-17T22:24:13.964028805Z 59 PC: 12b11 | Change current directory
2018-12-17T22:24:13.965503783Z 71 PC: 12af2 | Get current directory
2018-12-17T22:24:13.969267335Z 47 PC: 12b2e | Get disk transfer address
2018-12-17T22:24:13.970311555Z 26 PC: 12b3d | Set disk transfer address
2018-12-17T22:24:13.971491545Z 78 PC: 12b45 | Find first file
2018-12-17T22:24:13.978329127Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:13.979237891Z 61 PC: 12b97 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:24:13.98535624Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:13.992513273Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:13.994033776Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:14.001759221Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:14.005350349Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:14.006531157Z 61 PC: 12b97 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:24:14.018934103Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:14.025430336Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:14.027013604Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:14.028619927Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:14.0319376Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:14.032874974Z 61 PC: 12b97 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:24:14.039051261Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:14.046064Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:14.049540625Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:14.051491974Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:14.05545963Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:14.056682616Z 61 PC: 12b97 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:24:14.064344062Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:14.071783586Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:14.073001959Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:14.074873279Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:14.077733371Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:14.079641179Z 61 PC: 12b97 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:24:14.086333639Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:14.09349161Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:14.095093469Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:14.097700696Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:14.100843507Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:14.102116852Z 61 PC: 12b97 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:24:14.118171343Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:14.124625486Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:14.126313698Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:14.129008194Z 67 PC: 12bd0 | Get or set file attributes
2018-12-17T22:24:14.139268649Z 61 PC: 12bd5 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:24:14.147589286Z 64 PC: 12be1 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:24:14.15126216Z 66 PC: 12be9 | Move file pointer
2018-12-17T22:24:14.152827509Z 64 PC: 12bf4 | Write file or device (Write 627 bytes on handle 5)
2018-12-17T22:24:14.161810041Z 87 PC: 12bff | Get or set file date and time
2018-12-17T22:24:14.169242597Z 62 PC: 12c03 | Close file
2018-12-17T22:24:14.176909292Z 67 PC: 12c10 | Get or set file attributes
2018-12-17T22:24:14.186581076Z 26 PC: 12b66 | Set disk transfer address
2018-12-17T22:24:14.189418901Z 47 PC: 12b2e | Get disk transfer address
2018-12-17T22:24:14.190721747Z 26 PC: 12b3d | Set disk transfer address
2018-12-17T22:24:14.191875758Z 78 PC: 12b45 | Find first file
2018-12-17T22:24:14.199257633Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:14.200916928Z 61 PC: 12b97 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:24:14.208644232Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:14.215497616Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:14.217262412Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:14.22028825Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:14.222779829Z 26 PC: 12b66 | Set disk transfer address
2018-12-17T22:24:14.224349721Z 59 PC: 12b08 | Change current directory
2018-12-17T22:24:14.234995646Z 59 PC: 12b11 | Change current directory
2018-12-17T22:24:14.236955819Z 71 PC: 12af2 | Get current directory
2018-12-17T22:24:14.239781368Z 47 PC: 12b2e | Get disk transfer address
2018-12-17T22:24:14.24170309Z 26 PC: 12b3d | Set disk transfer address
2018-12-17T22:24:14.243130471Z 78 PC: 12b45 | Find first file
2018-12-17T22:24:14.252323089Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:14.255239956Z 61 PC: 12b97 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:24:14.262343272Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:14.268957279Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:14.271517085Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:14.273877547Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:14.276745814Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:14.278329539Z 61 PC: 12b97 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:24:14.28505889Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:14.291157092Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:14.293008235Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:14.29479195Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:14.297440795Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:14.299091452Z 61 PC: 12b97 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:24:14.310580146Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:14.315000668Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:14.316368943Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:14.3181344Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:14.321275363Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:14.322094857Z 61 PC: 12b97 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:24:14.326056959Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:14.332991629Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:14.334405251Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:14.336303761Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:14.340008141Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:14.341047942Z 61 PC: 12b97 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:24:14.347601066Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:14.354400104Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:14.355451838Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:14.357322576Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:14.359094912Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:14.360039808Z 61 PC: 12b97 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:24:14.364608714Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:14.368597611Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:14.369683895Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:14.371967631Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:14.373731115Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:14.374565095Z 61 PC: 12b97 | Open file (Filename = 'PAH.COM')
2018-12-17T22:24:14.379137646Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:14.383178996Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:14.384294453Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:14.386274515Z 67 PC: 12bd0 | Get or set file attributes
2018-12-17T22:24:14.392665427Z 61 PC: 12bd5 | Open file (Filename = 'PAH.COM')
2018-12-17T22:24:14.396990334Z 64 PC: 12be1 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:24:14.399324039Z 66 PC: 12be9 | Move file pointer
2018-12-17T22:24:14.400424358Z 64 PC: 12bf4 | Write file or device (Write 627 bytes on handle 5)
2018-12-17T22:24:14.406168995Z 87 PC: 12bff | Get or set file date and time
2018-12-17T22:24:14.407379369Z 62 PC: 12c03 | Close file
2018-12-17T22:24:14.412204612Z 67 PC: 12c10 | Get or set file attributes
2018-12-17T22:24:14.418750888Z 26 PC: 12b66 | Set disk transfer address
2018-12-17T22:24:14.419749601Z 47 PC: 12b2e | Get disk transfer address
2018-12-17T22:24:14.420585944Z 26 PC: 12b3d | Set disk transfer address
2018-12-17T22:24:14.421977111Z 78 PC: 12b45 | Find first file
2018-12-17T22:24:14.428431821Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:14.429275919Z 61 PC: 12b97 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:24:14.436793383Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:14.44093349Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:14.44211239Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:14.443758463Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:14.445378703Z 26 PC: 12b66 | Set disk transfer address
2018-12-17T22:24:14.446807611Z 59 PC: 12b08 | Change current directory
2018-12-17T22:24:14.449396291Z 59 PC: 12b11 | Change current directory
2018-12-17T22:24:14.450619014Z 71 PC: 12af2 | Get current directory
2018-12-17T22:24:14.453086199Z 47 PC: 12b2e | Get disk transfer address
2018-12-17T22:24:14.453910941Z 26 PC: 12b3d | Set disk transfer address
2018-12-17T22:24:14.454772941Z 78 PC: 12b45 | Find first file
2018-12-17T22:24:14.459162286Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:14.460114031Z 61 PC: 12b97 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:24:14.464283024Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:14.468734964Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:14.469909756Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:14.471729216Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:14.47359886Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:14.475147683Z 61 PC: 12b97 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:24:14.487656966Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:14.493909034Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:14.495210387Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:14.497360254Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:14.49995859Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:14.501015132Z 61 PC: 12b97 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:24:14.513091892Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:14.519903751Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:14.525429044Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:14.52714002Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:14.529794233Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:14.531486952Z 61 PC: 12b97 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:24:14.537797275Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:14.544269127Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:14.54617805Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:14.547858557Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:14.550375346Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:14.552337738Z 61 PC: 12b97 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:24:14.558608372Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:14.565715895Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:14.567919059Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:14.570147707Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:14.57389729Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:14.575330439Z 61 PC: 12b97 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:24:14.582631247Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:14.590114865Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:14.59163577Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:14.593621155Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:14.597198043Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:14.598630047Z 61 PC: 12b97 | Open file (Filename = 'PAH.COM')
2018-12-17T22:24:14.605170689Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:14.612836942Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:14.614337929Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:14.615576679Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:14.617806447Z 26 PC: 12b66 | Set disk transfer address
2018-12-17T22:24:14.618707913Z 47 PC: 12b2e | Get disk transfer address
2018-12-17T22:24:14.620723585Z 26 PC: 12b3d | Set disk transfer address
2018-12-17T22:24:14.622144118Z 78 PC: 12b45 | Find first file
2018-12-17T22:24:14.625803513Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:14.627433171Z 61 PC: 12b97 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:24:14.631705361Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:14.635894413Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:14.637712987Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:14.639138Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:14.64096025Z 26 PC: 12b66 | Set disk transfer address
2018-12-17T22:24:14.642926085Z 59 PC: 12b08 | Change current directory
2018-12-17T22:24:14.645689223Z 59 PC: 12b11 | Change current directory
2018-12-17T22:24:14.647245047Z 71 PC: 12af2 | Get current directory
2018-12-17T22:24:14.653020431Z 47 PC: 12b2e | Get disk transfer address
2018-12-17T22:24:14.654053804Z 26 PC: 12b3d | Set disk transfer address
2018-12-17T22:24:14.655257788Z 78 PC: 12b45 | Find first file
2018-12-17T22:24:14.662702189Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:14.663635904Z 61 PC: 12b97 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:24:14.668645901Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:14.673170731Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:14.674757706Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:14.677532974Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:14.679569822Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:14.680686775Z 61 PC: 12b97 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:24:14.687708605Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:14.693917846Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:14.695735745Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:14.699024429Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:14.701752365Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:14.703006445Z 61 PC: 12b97 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:24:14.709610938Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:14.715574462Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:14.717280345Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:14.721273514Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:14.723967299Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:14.725561599Z 61 PC: 12b97 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:24:14.731702936Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:14.738233803Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:14.740697603Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:14.742536682Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:14.745155884Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:14.747588721Z 61 PC: 12b97 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:24:14.757395102Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:14.76410332Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:14.766738459Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:14.76890344Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:14.772644061Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:14.77449699Z 61 PC: 12b97 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:24:14.781026697Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:14.788020269Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:14.78959589Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:14.791813327Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:14.795827733Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:14.796971537Z 61 PC: 12b97 | Open file (Filename = 'PAH.COM')
2018-12-17T22:24:14.803484589Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:14.811071418Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:14.812870147Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:14.81498719Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:14.819312042Z 26 PC: 12b66 | Set disk transfer address
2018-12-17T22:24:14.820665155Z 47 PC: 12b2e | Get disk transfer address
2018-12-17T22:24:14.822256619Z 26 PC: 12b3d | Set disk transfer address
2018-12-17T22:24:14.823884439Z 78 PC: 12b45 | Find first file
2018-12-17T22:24:14.829918203Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:14.832060476Z 61 PC: 12b97 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:24:14.838196596Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:14.843032243Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:14.845445461Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:14.847641779Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:14.850236493Z 26 PC: 12b66 | Set disk transfer address
2018-12-17T22:24:14.85227452Z 59 PC: 12b08 | Change current directory
2018-12-17T22:24:14.856576472Z 59 PC: 12b11 | Change current directory
2018-12-17T22:24:14.858812251Z 71 PC: 12af2 | Get current directory
2018-12-17T22:24:14.862171254Z 47 PC: 12b2e | Get disk transfer address
2018-12-17T22:24:14.86341161Z 26 PC: 12b3d | Set disk transfer address
2018-12-17T22:24:14.865647581Z 78 PC: 12b45 | Find first file
2018-12-17T22:24:14.871384806Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:14.872505798Z 61 PC: 12b97 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:24:14.880102523Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:14.882621089Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:14.884044228Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:14.886988694Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:14.889710924Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:14.890872226Z 61 PC: 12b97 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:24:14.903529787Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:14.909885608Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:14.912181326Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:14.914104452Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:14.916825284Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:14.919505532Z 61 PC: 12b97 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:24:14.926016513Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:14.932643193Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:14.934985666Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:14.93691862Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:14.939722915Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:14.941723871Z 61 PC: 12b97 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:24:14.948121786Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:14.95429795Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:14.956696157Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:14.958918378Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:14.961706759Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:14.963996791Z 61 PC: 12b97 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:24:14.971095942Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:14.979248165Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:14.980677048Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:14.982474649Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:14.986316759Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:14.987446534Z 61 PC: 12b97 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:24:15.002428277Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:15.009428657Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:15.010781089Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:15.012331677Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:15.01496947Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:15.016108884Z 61 PC: 12b97 | Open file (Filename = 'PAH.COM')
2018-12-17T22:24:15.023482045Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:15.029575765Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:15.030910838Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:15.033998622Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:15.036375654Z 26 PC: 12b66 | Set disk transfer address
2018-12-17T22:24:15.037303106Z 47 PC: 12b2e | Get disk transfer address
2018-12-17T22:24:15.04061251Z 26 PC: 12b3d | Set disk transfer address
2018-12-17T22:24:15.042460624Z 78 PC: 12b45 | Find first file
2018-12-17T22:24:15.048750675Z 47 PC: 12b71 | Get disk transfer address
2018-12-17T22:24:15.050718429Z 61 PC: 12b97 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:24:15.056772068Z 63 PC: 12ba3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:24:15.063762562Z 66 PC: 12bab | Move file pointer
2018-12-17T22:24:15.065151177Z 62 PC: 12bb0 | Close file
2018-12-17T22:24:15.066876158Z 79 PC: 12b45 | Find next file
2018-12-17T22:24:15.069846955Z 26 PC: 12b66 | Set disk transfer address
2018-12-17T22:24:15.070959799Z 59 PC: 12b08 | Change current directory
2018-12-17T22:24:15.075002004Z 59 PC: 12b11 | Change current directory
2018-12-17T22:24:15.077183213Z 26 PC: 12acd | Set disk transfer address