Sample viewer

vx.netlux.org/Virus.DOS.Leo.1965

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:29:11.614331555Z 42 PC: 12a88 | Get date 0x12a88: cmp dh, 4
0x12a8b: jne 0x12a95
0x12a8d: cmp dl, 0xd
0x12a90: jne 0x12a95
0x12a92: jmp 0x12d23
0x12a95: mov ah, 0x47
0x12a97: mov si, word ptr [bp + 0x74d]
0x12a9b: mov dl, 0
0x12a9d: int 0x21
0x12a9f: mov ah, 0x3b
0x12aa1: mov dx, 0x70d
0x12aa4: add dx, bp
0x12aa6: int 0x21
0x12aa8: mov ah, 0x4e
0x12aaa: mov cx, 0xc
0x12aad: mov si, 0x78d
0x12ab0: add si, bp
0x12ab2: call 0x13153
0x12ab5: mov cx, 0x20
0x12ab8: int 0x21
2018-12-17T22:29:11.617243271Z 71 PC: 12a9f | Get current directory
2018-12-17T22:29:11.620499723Z 59 PC: 12aa8 | Change current directory
2018-12-17T22:29:11.624297581Z 78 PC: 12aba | Find first file
2018-12-17T22:29:11.629957458Z 61 PC: 12ad2 | Open file (Filename = '')
2018-12-17T22:29:11.632925902Z 59 PC: 12b6a | Change current directory
2018-12-17T22:29:11.636998502Z 59 PC: 12b72 | Change current directory
2018-12-17T22:29:11.638933236Z 26 PC: 12b7b | Set disk transfer address
2018-12-17T22:29:11.641305923Z 59 PC: 12b84 | Change current directory
2018-12-17T22:29:11.664867129Z 78 PC: 12b96 | Find first file
2018-12-17T22:29:11.675964877Z 79 PC: 12bad | Find next file
2018-12-17T22:29:11.679758223Z 59 PC: 12bbe | Change current directory
2018-12-17T22:29:11.685566152Z 47 PC: 12bc2 | Get disk transfer address
2018-12-17T22:29:11.686683202Z 26 PC: 12bd3 | Set disk transfer address
2018-12-17T22:29:11.688262422Z 78 PC: 12be5 | Find first file
2018-12-17T22:29:11.694208693Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:11.699486741Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:11.701544165Z 61 PC: 12c31 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:29:11.708063746Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:11.714547801Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:11.716387702Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:11.719479665Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:11.721459452Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:11.72428277Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:11.726143754Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:11.72754204Z 61 PC: 12c31 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:29:11.734198613Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:11.741670944Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:11.742872978Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:11.745197868Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:11.750759285Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:11.753357811Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:11.75480728Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:11.768988908Z 61 PC: 12c31 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:29:11.775401998Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:11.781634424Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:11.784410212Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:11.786845158Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:11.788594581Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:11.792103091Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:11.79351401Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:11.794907061Z 61 PC: 12c31 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:29:11.803092128Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:11.809939663Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:11.811602609Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:11.815102214Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:11.817437377Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:11.820340415Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:11.821954523Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:11.824151314Z 61 PC: 12c31 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:29:11.831524273Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:11.838142757Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:11.840916336Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:11.843661211Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:11.845715666Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:11.849411032Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:11.851210651Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:11.852605192Z 61 PC: 12c31 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:29:11.860056055Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:11.866854158Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:11.868519734Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:11.872013373Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:11.873968093Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:11.876613662Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:11.877906266Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:11.879810939Z 61 PC: 12c31 | Open file (Filename = 'PAH.COM')
2018-12-17T22:29:11.886709929Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:11.893828451Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:11.895569552Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:11.897979159Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:11.899893331Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:11.904193587Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:11.90575189Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:11.907345088Z 61 PC: 12c31 | Open file (Filename = 'TEST.COM')
2018-12-17T22:29:11.914752712Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:11.921495905Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:11.923138459Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:11.926950435Z 66 PC: 12c70 | Move file pointer
2018-12-17T22:29:11.928798571Z 66 PC: 12c87 | Move file pointer
2018-12-17T22:29:11.930848649Z 63 PC: 12c93 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:11.938589296Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:11.94046958Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:11.943267446Z 59 PC: 12c0b | Change current directory
2018-12-17T22:29:11.948642258Z 26 PC: 12c17 | Set disk transfer address
2018-12-17T22:29:11.950006844Z 79 PC: 12bad | Find next file
2018-12-17T22:29:11.952528587Z 59 PC: 12bbe | Change current directory
2018-12-17T22:29:11.959078691Z 47 PC: 12bc2 | Get disk transfer address
2018-12-17T22:29:11.960236516Z 26 PC: 12bd3 | Set disk transfer address
2018-12-17T22:29:11.961463571Z 78 PC: 12be5 | Find first file
2018-12-17T22:29:11.968216817Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:11.96940359Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:11.970429957Z 61 PC: 12c31 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:29:11.978600015Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:11.981266715Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:11.982604716Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:11.985760075Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:11.987602909Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:11.990593524Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:11.993317421Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:11.994598785Z 61 PC: 12c31 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:29:12.001219603Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:12.004765097Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:12.006359894Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.008855305Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:12.011254051Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:12.014102676Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:12.015251386Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:12.016915244Z 61 PC: 12c31 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:29:12.023505614Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:12.026082019Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:12.027908636Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.030282326Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:12.03230914Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:12.03553023Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:12.036595185Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:12.037767378Z 61 PC: 12c31 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:29:12.044862434Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:12.047329409Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:12.048589292Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.051612038Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:12.054174119Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:12.056137461Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:12.057797671Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:12.058837956Z 61 PC: 12c31 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:29:12.063850873Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:12.066270516Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:12.067447072Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.069132642Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:12.073642205Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:12.076579654Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:12.078148917Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:12.080170885Z 61 PC: 12c31 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:29:12.087289318Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:12.089702246Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:12.091865758Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.094548028Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:12.096527025Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:12.100427758Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:12.102155459Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:12.103824793Z 61 PC: 12c31 | Open file (Filename = 'PAH.COM')
2018-12-17T22:29:12.111004182Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:12.113465853Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:12.114707593Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.118270874Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:12.119953092Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:12.122971031Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:12.124978037Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:12.12602045Z 61 PC: 12c31 | Open file (Filename = 'TEST.COM')
2018-12-17T22:29:12.132349799Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:12.136507466Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:12.137999846Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.140594771Z 66 PC: 12c70 | Move file pointer
2018-12-17T22:29:12.142840274Z 66 PC: 12c87 | Move file pointer
2018-12-17T22:29:12.144197776Z 63 PC: 12c93 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.146955195Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:12.149546476Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:12.152072589Z 59 PC: 12c0b | Change current directory
2018-12-17T22:29:12.156174392Z 26 PC: 12c17 | Set disk transfer address
2018-12-17T22:29:12.158173137Z 79 PC: 12bad | Find next file
2018-12-17T22:29:12.160686181Z 59 PC: 12bbe | Change current directory
2018-12-17T22:29:12.166308073Z 47 PC: 12bc2 | Get disk transfer address
2018-12-17T22:29:12.168254414Z 26 PC: 12bd3 | Set disk transfer address
2018-12-17T22:29:12.16957207Z 78 PC: 12be5 | Find first file
2018-12-17T22:29:12.175403404Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:12.177465821Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:12.178440902Z 61 PC: 12c31 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:29:12.184680706Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:12.187738508Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:12.189072873Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.191386375Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:12.19379893Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:12.196291333Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:12.197244866Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:12.198879387Z 61 PC: 12c31 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:29:12.20513966Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:12.20746166Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:12.209841119Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.21296423Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:12.214557487Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:12.21719161Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:12.218369197Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:12.219292149Z 61 PC: 12c31 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:29:12.225666839Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:12.228382672Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:12.229784508Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.23213746Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:12.234234909Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:12.237283228Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:12.240938792Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:12.242122462Z 61 PC: 12c31 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:29:12.248990431Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:12.252824715Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:12.254157867Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.256426335Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:12.258468703Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:12.260925018Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:12.262083422Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:12.263609286Z 61 PC: 12c31 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:29:12.269897612Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:12.272330509Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:12.274761202Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.27707759Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:12.278670973Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:12.28124553Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:12.282253281Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:12.283124809Z 61 PC: 12c31 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:29:12.290753639Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:12.293072159Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:12.29433169Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.302819188Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:12.304281619Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:12.306560969Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:12.307618249Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:12.308461494Z 61 PC: 12c31 | Open file (Filename = 'PAH.COM')
2018-12-17T22:29:12.314997982Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:12.317542098Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:12.318680637Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.322014775Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:12.323957672Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:12.326593329Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:12.328898477Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:12.330344177Z 61 PC: 12c31 | Open file (Filename = 'TEST.COM')
2018-12-17T22:29:12.336932704Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:12.3404265Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:12.341936006Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.344262267Z 66 PC: 12c70 | Move file pointer
2018-12-17T22:29:12.348351506Z 66 PC: 12c87 | Move file pointer
2018-12-17T22:29:12.349721422Z 63 PC: 12c93 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.352465981Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:12.355011027Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:12.357325418Z 59 PC: 12c0b | Change current directory
2018-12-17T22:29:12.361078207Z 26 PC: 12c17 | Set disk transfer address
2018-12-17T22:29:12.363255277Z 79 PC: 12bad | Find next file
2018-12-17T22:29:12.365689635Z 59 PC: 12bbe | Change current directory
2018-12-17T22:29:12.372026697Z 47 PC: 12bc2 | Get disk transfer address
2018-12-17T22:29:12.374012127Z 26 PC: 12bd3 | Set disk transfer address
2018-12-17T22:29:12.37539239Z 78 PC: 12be5 | Find first file
2018-12-17T22:29:12.381240549Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:12.383157945Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:12.384653241Z 61 PC: 12c31 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:29:12.3910675Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:12.394718134Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:12.396167469Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.398667707Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:12.40118307Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:12.404146378Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:12.40538569Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:12.407274103Z 61 PC: 12c31 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:29:12.413642721Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:12.416238696Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:12.418378591Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.421323358Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:12.423196152Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:12.4261821Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:12.427435657Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:12.428626942Z 61 PC: 12c31 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:29:12.435435558Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:12.438081453Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:12.439770731Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.442505981Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:12.444393418Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:12.448920708Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:12.450104241Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:12.451091581Z 61 PC: 12c31 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:29:12.458359507Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:12.460954643Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:12.462282686Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.465742637Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:12.467585851Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:12.470265526Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:12.472647861Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:12.473724894Z 61 PC: 12c31 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:29:12.479920723Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:12.483351604Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:12.484820062Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.487265805Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:12.489803884Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:12.492375845Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:12.493577235Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:12.495718251Z 61 PC: 12c31 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:29:12.50203637Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:12.504585423Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:12.506984298Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.509440503Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:12.511183475Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:12.514840593Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:12.5160329Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:12.517204921Z 61 PC: 12c31 | Open file (Filename = 'PAH.COM')
2018-12-17T22:29:12.52497141Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:12.527536583Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:12.529682575Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.533825702Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:12.535569154Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:12.538114983Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:12.540293026Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:12.541487552Z 61 PC: 12c31 | Open file (Filename = 'TEST.COM')
2018-12-17T22:29:12.547885763Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:12.551984847Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:12.553462005Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.555912534Z 66 PC: 12c70 | Move file pointer
2018-12-17T22:29:12.55892223Z 66 PC: 12c87 | Move file pointer
2018-12-17T22:29:12.560507761Z 63 PC: 12c93 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.56336963Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:12.566735059Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:12.569301102Z 59 PC: 12c0b | Change current directory
2018-12-17T22:29:12.573567733Z 26 PC: 12c17 | Set disk transfer address
2018-12-17T22:29:12.575665919Z 79 PC: 12bad | Find next file
2018-12-17T22:29:12.578282015Z 59 PC: 12bbe | Change current directory
2018-12-17T22:29:12.5850194Z 47 PC: 12bc2 | Get disk transfer address
2018-12-17T22:29:12.586212095Z 26 PC: 12bd3 | Set disk transfer address
2018-12-17T22:29:12.587340105Z 78 PC: 12be5 | Find first file
2018-12-17T22:29:12.593945428Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:12.595242505Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:12.596594849Z 61 PC: 12c31 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:29:12.603818141Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:12.606581562Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:12.608210619Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.616254705Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:12.617942169Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:12.621078925Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:12.622826144Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:12.623886451Z 61 PC: 12c31 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:29:12.630904272Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:12.634519428Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:12.63594155Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.638607938Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:12.640354745Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:12.642872242Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:12.644849469Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:12.645900933Z 61 PC: 12c31 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:29:12.652062142Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:12.65546813Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:12.657133832Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.659777327Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:12.66284547Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:12.665701936Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:12.66699237Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:12.66868507Z 61 PC: 12c31 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:29:12.675180858Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:12.677888308Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:12.680454912Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.683118663Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:12.685870494Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:12.68899326Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:12.690370378Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:12.692496488Z 61 PC: 12c31 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:29:12.699996249Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:12.702903871Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:12.705114635Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.70747475Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:12.709056287Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:12.712562905Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:12.713551757Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:12.714507508Z 61 PC: 12c31 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:29:12.721624462Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:12.724736383Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:12.72604016Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.730112284Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:12.731787768Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:12.734273529Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:12.736421278Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:12.737519998Z 61 PC: 12c31 | Open file (Filename = 'PAH.COM')
2018-12-17T22:29:12.744270273Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:12.747012725Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:12.748507057Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.752275454Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:12.75393338Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:12.756400586Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:12.758122387Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:12.759349969Z 61 PC: 12c31 | Open file (Filename = 'TEST.COM')
2018-12-17T22:29:12.76564001Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:12.768615121Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:12.770160203Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.773756409Z 66 PC: 12c70 | Move file pointer
2018-12-17T22:29:12.776727299Z 66 PC: 12c87 | Move file pointer
2018-12-17T22:29:12.778347768Z 63 PC: 12c93 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.781861524Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:12.783833695Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:12.786173495Z 59 PC: 12c0b | Change current directory
2018-12-17T22:29:12.790710109Z 26 PC: 12c17 | Set disk transfer address
2018-12-17T22:29:12.791710174Z 79 PC: 12bad | Find next file
2018-12-17T22:29:12.794241176Z 59 PC: 12bbe | Change current directory
2018-12-17T22:29:12.800361853Z 47 PC: 12bc2 | Get disk transfer address
2018-12-17T22:29:12.801335977Z 26 PC: 12bd3 | Set disk transfer address
2018-12-17T22:29:12.802153343Z 78 PC: 12be5 | Find first file
2018-12-17T22:29:12.808472412Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:12.80985338Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:12.811359361Z 61 PC: 12c31 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:29:12.818314512Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:12.821079983Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:12.823647162Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.826278266Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:12.828217869Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:12.831499519Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:12.832922488Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:12.83378651Z 61 PC: 12c31 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:29:12.84034013Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:12.843007937Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:12.844704285Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.848162516Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:12.850034266Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:12.853678831Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:12.854743998Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:12.855694068Z 61 PC: 12c31 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:29:12.862465698Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:12.864890298Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:12.868410538Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.871353081Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:12.873010681Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:12.875673959Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:12.877493754Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:12.878478191Z 61 PC: 12c31 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:29:12.885681777Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:12.888155433Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:12.889416949Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.892259784Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:12.893984938Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:12.896454817Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:12.898432452Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:12.899535254Z 61 PC: 12c31 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:29:12.906393123Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:12.910398565Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:12.911616278Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.914097659Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:12.916433503Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:12.919155001Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:12.921230972Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:12.922737039Z 61 PC: 12c31 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:29:12.929734141Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:12.932754056Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:12.933990631Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.936103461Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:12.938615318Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:12.941603647Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:12.942445542Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:12.944453179Z 61 PC: 12c31 | Open file (Filename = 'PAH.COM')
2018-12-17T22:29:12.950670346Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:12.953244101Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:12.955402083Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.957974047Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:12.9611165Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:12.964900141Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:12.966159226Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:12.968028072Z 61 PC: 12c31 | Open file (Filename = 'TEST.COM')
2018-12-17T22:29:12.972641255Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:12.974469751Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:12.9763183Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.977951236Z 66 PC: 12c70 | Move file pointer
2018-12-17T22:29:12.979087333Z 66 PC: 12c87 | Move file pointer
2018-12-17T22:29:12.980636134Z 63 PC: 12c93 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:12.982586186Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:12.984399535Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:12.986033449Z 59 PC: 12c0b | Change current directory
2018-12-17T22:29:12.988676973Z 26 PC: 12c17 | Set disk transfer address
2018-12-17T22:29:12.990294774Z 79 PC: 12bad | Find next file
2018-12-17T22:29:12.992330069Z 59 PC: 12bbe | Change current directory
2018-12-17T22:29:12.996430168Z 47 PC: 12bc2 | Get disk transfer address
2018-12-17T22:29:12.998586831Z 26 PC: 12bd3 | Set disk transfer address
2018-12-17T22:29:13.000065462Z 78 PC: 12be5 | Find first file
2018-12-17T22:29:13.004962176Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:13.006385332Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:13.007319075Z 61 PC: 12c31 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:29:13.012188821Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:13.014676644Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:13.016156168Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:13.019295859Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:13.020867141Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:13.023452815Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:13.024371367Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:13.025277136Z 61 PC: 12c31 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:29:13.031824947Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:13.034158901Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:13.035315412Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:13.03785825Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:13.039439112Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:13.041788251Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:13.042879226Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:13.04375004Z 61 PC: 12c31 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:29:13.050096053Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:13.052499559Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:13.05370772Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:13.056254726Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:13.057819703Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:13.060484045Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:13.061706985Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:13.062586234Z 61 PC: 12c31 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:29:13.068996108Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:13.071312372Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:13.073149862Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:13.075661432Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:13.077195563Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:13.079851081Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:13.081080296Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:13.081952388Z 61 PC: 12c31 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:29:13.088338083Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:13.09064153Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:13.091843819Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:13.094671089Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:13.096074091Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:13.098609372Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:13.100410983Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:13.101302268Z 61 PC: 12c31 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:29:13.107784189Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:13.11019848Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:13.11133154Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:13.114015492Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:13.115910793Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:13.11853534Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:13.11992696Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:13.120792489Z 61 PC: 12c31 | Open file (Filename = 'PAH.COM')
2018-12-17T22:29:13.127624721Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:13.129903643Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:13.131031439Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:13.133755228Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:13.135407812Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:13.137819003Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:13.13922121Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:13.140130233Z 61 PC: 12c31 | Open file (Filename = 'TEST.COM')
2018-12-17T22:29:13.147937469Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:13.150574947Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:13.152008532Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:13.155478876Z 66 PC: 12c70 | Move file pointer
2018-12-17T22:29:13.156970367Z 66 PC: 12c87 | Move file pointer
2018-12-17T22:29:13.158462971Z 63 PC: 12c93 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:13.162365231Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:13.164184574Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:13.16646154Z 59 PC: 12c0b | Change current directory
2018-12-17T22:29:13.17020306Z 26 PC: 12c17 | Set disk transfer address
2018-12-17T22:29:13.17109159Z 79 PC: 12bad | Find next file
2018-12-17T22:29:13.174228032Z 59 PC: 12bbe | Change current directory
2018-12-17T22:29:13.179657167Z 47 PC: 12bc2 | Get disk transfer address
2018-12-17T22:29:13.180564084Z 26 PC: 12bd3 | Set disk transfer address
2018-12-17T22:29:13.182068419Z 78 PC: 12be5 | Find first file
2018-12-17T22:29:13.187870682Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:13.189139665Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:13.19055946Z 61 PC: 12c31 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:29:13.196860667Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:13.199804498Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:13.200809772Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:13.202326528Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:13.203863453Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:13.205547548Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:13.206474365Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:13.207363606Z 61 PC: 12c31 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:29:13.211271513Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:13.213143637Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:13.214065127Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:13.215727795Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:13.217392602Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:13.219536275Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:13.221273142Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:13.222140115Z 61 PC: 12c31 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:29:13.226096354Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:13.228346355Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:13.229310835Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:13.231275309Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:13.232386494Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:13.234000968Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:13.235374182Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:13.236113953Z 61 PC: 12c31 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:29:13.240382971Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:13.242775567Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:13.243962034Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:13.246702759Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:13.248259117Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:13.251271648Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:13.252154918Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:13.253072953Z 61 PC: 12c31 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:29:13.259612633Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:13.261925224Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:13.263137281Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:13.265439068Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:13.266967983Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:13.270040023Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:13.270917028Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:13.272213411Z 61 PC: 12c31 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:29:13.278296029Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:13.280556432Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:13.282222283Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:13.284413832Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:13.286220197Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:13.288884098Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:13.289760511Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:13.291363673Z 61 PC: 12c31 | Open file (Filename = 'PAH.COM')
2018-12-17T22:29:13.29814905Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:13.300606901Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:13.301776464Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:13.303925713Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:13.305831748Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:13.308157859Z 47 PC: 12c1d | Get disk transfer address
2018-12-17T22:29:13.309341162Z 47 PC: 12c2c | Get disk transfer address
2018-12-17T22:29:13.31050156Z 61 PC: 12c31 | Open file (Filename = 'TEST.COM')
2018-12-17T22:29:13.316631155Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:29:13.319446178Z 66 PC: 12c4a | Move file pointer
2018-12-17T22:29:13.320754372Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:13.323119172Z 66 PC: 12c70 | Move file pointer
2018-12-17T22:29:13.324537113Z 66 PC: 12c87 | Move file pointer
2018-12-17T22:29:13.32555392Z 63 PC: 12c93 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:29:13.328502667Z 62 PC: 12bf9 | Close file
2018-12-17T22:29:13.329998723Z 79 PC: 12bfd | Find next file
2018-12-17T22:29:13.332299288Z 59 PC: 12c0b | Change current directory
2018-12-17T22:29:13.335984645Z 26 PC: 12c17 | Set disk transfer address
2018-12-17T22:29:13.336852988Z 79 PC: 12bad | Find next file
2018-12-17T22:29:13.339259214Z 59 PC: 12cd9 | Change current directory
2018-12-17T22:29:13.341923843Z 59 PC: 12ce1 | Change current directory
2018-12-17T22:29:13.343340481Z 76 PC: 12a47 | Terminate with return code (Return code = '0')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":5213,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:53:58.903781832Z 42 PC: 12a88 | Get date 0x12a88: cmp dh, 4
0x12a8b: jne 0x12a95
0x12a8d: cmp dl, 0xd
0x12a90: jne 0x12a95
0x12a92: jmp 0x12d23
0x12a95: mov ah, 0x47
0x12a97: mov si, word ptr [bp + 0x74d]
0x12a9b: mov dl, 0
0x12a9d: int 0x21
0x12a9f: mov ah, 0x3b
0x12aa1: mov dx, 0x70d
0x12aa4: add dx, bp
0x12aa6: int 0x21
0x12aa8: mov ah, 0x4e
0x12aaa: mov cx, 0xc
0x12aad: mov si, 0x78d
0x12ab0: add si, bp
0x12ab2: call 0x13153
0x12ab5: mov cx, 0x20
0x12ab8: int 0x21
2018-12-25T11:53:58.907175638Z 71 PC: 12a9f | Get current directory
2018-12-25T11:53:58.910447474Z 59 PC: 12aa8 | Change current directory
2018-12-25T11:53:58.914812988Z 78 PC: 12aba | Find first file
2018-12-25T11:53:58.929076291Z 61 PC: 12ad2 | Open file (Filename = '')
2018-12-25T11:53:58.936001576Z 59 PC: 12b6a | Change current directory
2018-12-25T11:53:58.94052825Z 59 PC: 12b72 | Change current directory
2018-12-25T11:53:58.942477429Z 26 PC: 12b7b | Set disk transfer address
2018-12-25T11:53:58.94470461Z 59 PC: 12b84 | Change current directory
2018-12-25T11:53:58.954591642Z 78 PC: 12b96 | Find first file
2018-12-25T11:53:58.969253435Z 79 PC: 12bad | Find next file
2018-12-25T11:53:58.972643224Z 59 PC: 12bbe | Change current directory
2018-12-25T11:53:58.979052326Z 47 PC: 12bc2 | Get disk transfer address
2018-12-25T11:53:58.980382354Z 26 PC: 12bd3 | Set disk transfer address
2018-12-25T11:53:58.983447371Z 78 PC: 12be5 | Find first file
2018-12-25T11:53:58.990068705Z 47 PC: 12c1d | Get disk transfer address
2018-12-25T11:53:58.99150975Z 47 PC: 12c2c | Get disk transfer address
2018-12-25T11:53:58.993402323Z 61 PC: 12c31 | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:53:59.003852592Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-25T11:53:59.011619307Z 66 PC: 12c4a | Move file pointer
2018-12-25T11:53:59.013565262Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-25T11:53:59.017098499Z 62 PC: 12bf9 | Close file
2018-12-25T11:53:59.01944588Z 79 PC: 12bfd | Find next file
2018-12-25T11:53:59.022489283Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.0253215Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.02660284Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.033837495Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.0426597Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.044413675Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.047377316Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.050370374Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.053376113Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.054641826Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.056467612Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.064165813Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.071428729Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.074238971Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.077031996Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.078952399Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.082153699Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.084612645Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.085900356Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.094348537Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.101891733Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.103255682Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.106577239Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.10924935Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.112213313Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.113433316Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.115198198Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.122588097Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.129552732Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.134389427Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.137105168Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.139451664Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.145287461Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.146704998Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.148172521Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.155687911Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.163469055Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.165348164Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.168790013Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.171512741Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.17441613Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.175653413Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.182532985Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.190754155Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.198132651Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.20080987Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.204568311Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.206649245Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.211170544Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.212409743Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.213540092Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.221429657Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.228748131Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.230592664Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.233806392Z 66 PC: 12c70 | Move file pointer
2018-12-25T11:53:59.235643537Z 66 PC: 12c87 | Move file pointer
2018-12-25T11:53:59.23710741Z 63 PC: 12c93 | Read file or device (Read 1 bytes on handle 5)
2018-12-25T11:53:59.244612204Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.247723229Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.250709279Z 59 PC: 12c0b | Change current directory
2018-12-25T11:53:59.256275754Z 26 PC: 12c17 | Set disk transfer address
2018-12-25T11:53:59.259095293Z 79 PC: 12bad | Find next file (See above)
2018-12-25T11:53:59.262252438Z 59 PC: 12bbe | Change current directory (See above)
2018-12-25T11:53:59.268819472Z 47 PC: 12bc2 | Get disk transfer address (See above)
2018-12-25T11:53:59.270948389Z 26 PC: 12bd3 | Set disk transfer address (See above)
2018-12-25T11:53:59.272313839Z 78 PC: 12be5 | Find first file (See above)
2018-12-25T11:53:59.276658836Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.278087157Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.279812819Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.287178179Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.2972136Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.299711693Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.302434444Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.304530796Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.308589515Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.310303318Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.311867748Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.320555444Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.323976258Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.326032076Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.331307997Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.333719323Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.337178724Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.340492454Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.343068457Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.350971236Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.354461546Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.358059618Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.361816316Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.364390001Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.368347536Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.370111439Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.37173555Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.380596022Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.384399065Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.386338884Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.390560564Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.394821847Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.39787925Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.399450545Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.401533395Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.409932724Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.413401601Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.41564388Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.418929529Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.421588087Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.426379461Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.428150976Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.429779603Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.438530094Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.441880933Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.444004181Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.448279109Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.450118349Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.452983579Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.454917873Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.456452509Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.463891896Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.46809314Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.469659619Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.472685048Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.475902097Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.478866834Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.480469566Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.482489606Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.490874819Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.494249164Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.497040503Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.49990144Z 66 PC: 12c70 | Move file pointer (See above)
2018-12-25T11:53:59.501832872Z 66 PC: 12c87 | Move file pointer (See above)
2018-12-25T11:53:59.504406352Z 63 PC: 12c93 | Read file or device (See above)
2018-12-25T11:53:59.507660189Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.509611935Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.512980217Z 59 PC: 12c0b | Change current directory (See above)
2018-12-25T11:53:59.517366489Z 26 PC: 12c17 | Set disk transfer address (See above)
2018-12-25T11:53:59.518564375Z 79 PC: 12bad | Find next file (See above)
2018-12-25T11:53:59.521639245Z 59 PC: 12bbe | Change current directory (See above)
2018-12-25T11:53:59.528088267Z 47 PC: 12bc2 | Get disk transfer address (See above)
2018-12-25T11:53:59.529374598Z 26 PC: 12bd3 | Set disk transfer address (See above)
2018-12-25T11:53:59.533479894Z 78 PC: 12be5 | Find first file (See above)
2018-12-25T11:53:59.540748308Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.54251577Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.544931721Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.552660827Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.55571772Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.557725071Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.562696689Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.564720411Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.567591888Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.568828272Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.569880715Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.576963357Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.579794014Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.581377913Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.584062447Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.586446796Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.58957337Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.590934122Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.593790986Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.601750777Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.605136118Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.608301646Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.611444583Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.613806362Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.618211577Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.619838496Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.621458416Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.630563378Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.634876729Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.636731548Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.640313228Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.642313174Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.645325297Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.647830642Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.649254675Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.657234151Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.661531044Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.663186011Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.667085099Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.67156389Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.674978216Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.676020951Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.677528624Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.685381084Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.688640972Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.690812692Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.693547988Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.695511406Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.698731765Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.700415815Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.701560047Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.709819413Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.713475196Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.714910587Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.717740741Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.720027813Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.722937691Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.724236332Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.725904332Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.73336116Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.736289951Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.737997167Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.740492273Z 66 PC: 12c70 | Move file pointer (See above)
2018-12-25T11:53:59.74216764Z 66 PC: 12c87 | Move file pointer (See above)
2018-12-25T11:53:59.744170031Z 63 PC: 12c93 | Read file or device (See above)
2018-12-25T11:53:59.747385446Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.749526069Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.752766025Z 59 PC: 12c0b | Change current directory (See above)
2018-12-25T11:53:59.757581738Z 26 PC: 12c17 | Set disk transfer address (See above)
2018-12-25T11:53:59.759176058Z 79 PC: 12bad | Find next file (See above)
2018-12-25T11:53:59.762507585Z 59 PC: 12bbe | Change current directory (See above)
2018-12-25T11:53:59.768545481Z 47 PC: 12bc2 | Get disk transfer address (See above)
2018-12-25T11:53:59.769664644Z 26 PC: 12bd3 | Set disk transfer address (See above)
2018-12-25T11:53:59.771540304Z 78 PC: 12be5 | Find first file (See above)
2018-12-25T11:53:59.77861911Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.779846412Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.781855177Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.789353679Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.792175537Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.793572205Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.796163847Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.798149175Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.801172083Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.802111535Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.803459625Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.811194671Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.813912992Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.815482369Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.818648411Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.82054078Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.823609785Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.825011911Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.826142544Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.833589229Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.836250737Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.837581143Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.840468588Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.842506913Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.845266153Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.847653551Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.848877489Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.85578116Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.858921032Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.860507417Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.863035639Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.865295599Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.868037676Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.86913911Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.870857576Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.878218292Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.881315933Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.883650453Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.886335941Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.888558859Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.891722369Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.892800637Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.894139313Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.901555843Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.904176977Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.905618646Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.908593778Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.910353525Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.91323135Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.914772995Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.915819512Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.923559847Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.926714178Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.927976611Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.930999739Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.933024263Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.935851897Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.937452835Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.938880454Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.946240812Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.949963188Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.951358392Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.953878789Z 66 PC: 12c70 | Move file pointer (See above)
2018-12-25T11:53:59.95593542Z 66 PC: 12c87 | Move file pointer (See above)
2018-12-25T11:53:59.957731979Z 63 PC: 12c93 | Read file or device (See above)
2018-12-25T11:53:59.960836653Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.963277817Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.965890858Z 59 PC: 12c0b | Change current directory (See above)
2018-12-25T11:53:59.970406914Z 26 PC: 12c17 | Set disk transfer address (See above)
2018-12-25T11:53:59.971905604Z 79 PC: 12bad | Find next file (See above)
2018-12-25T11:53:59.974982454Z 59 PC: 12bbe | Change current directory (See above)
2018-12-25T11:53:59.982136635Z 47 PC: 12bc2 | Get disk transfer address (See above)
2018-12-25T11:53:59.983520099Z 26 PC: 12bd3 | Set disk transfer address (See above)
2018-12-25T11:53:59.984699331Z 78 PC: 12be5 | Find first file (See above)
2018-12-25T11:53:59.992899535Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.994127459Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.995040629Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.003480395Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.006687926Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.008536964Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.012649187Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.014758844Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.017482296Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.019315323Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.020464316Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.027385756Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.030430127Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.031859116Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.034259921Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.037100311Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.039065391Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.040095263Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.043604554Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.047992782Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.049808757Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.051464044Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.053140052Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.054464353Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.057038963Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.057996657Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.059077093Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.06415834Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.06628601Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.067827185Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.07015601Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.071560953Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.073843025Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.074897079Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.075691794Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.080448895Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.08272684Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.083833269Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.086185407Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.087574207Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.089302936Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.090963639Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.091870062Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.096561238Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.099670676Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.101552061Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.105803307Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.108071751Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.110909546Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.112602726Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.113751669Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.120878759Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.12421446Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.125749277Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.12876437Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.132803668Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.135783093Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.136965949Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.138659581Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.145636812Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.149218282Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.152111418Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.154704818Z 66 PC: 12c70 | Move file pointer (See above)
2018-12-25T11:54:00.156062511Z 66 PC: 12c87 | Move file pointer (See above)
2018-12-25T11:54:00.157894887Z 63 PC: 12c93 | Read file or device (See above)
2018-12-25T11:54:00.160937973Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.162992448Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.166069846Z 59 PC: 12c0b | Change current directory (See above)
2018-12-25T11:54:00.170291443Z 26 PC: 12c17 | Set disk transfer address (See above)
2018-12-25T11:54:00.171809465Z 79 PC: 12bad | Find next file (See above)
2018-12-25T11:54:00.17374585Z 59 PC: 12bbe | Change current directory (See above)
2018-12-25T11:54:00.177807266Z 47 PC: 12bc2 | Get disk transfer address (See above)
2018-12-25T11:54:00.181590359Z 26 PC: 12bd3 | Set disk transfer address (See above)
2018-12-25T11:54:00.182911859Z 78 PC: 12be5 | Find first file (See above)
2018-12-25T11:54:00.187339212Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.189054183Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.190097148Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.194344288Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.196932246Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.198072758Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.201063385Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.203423212Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.205413712Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.206450739Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.208031499Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.212400031Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.214378498Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.216234228Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.21820259Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.220769757Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.224324327Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.226724628Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.228604651Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.236779745Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.240015699Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.242582972Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.245384645Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.247351693Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.251296036Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.252461046Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.253686066Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.26105546Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.26414945Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.266073189Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.269512494Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.271710251Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.275470344Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.276866797Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.27824303Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.286717755Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.289629781Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.291030076Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.29428655Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.296306781Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.299238281Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.301994045Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.303316779Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.31097254Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.314259272Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.316218106Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.320435321Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.322544856Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.325323961Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.326872338Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.327922833Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.334949081Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.338059725Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.339544101Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.342228211Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.344453791Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.34733451Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.348685077Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.349981034Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.357450869Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.36068872Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.362217497Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.364964685Z 66 PC: 12c70 | Move file pointer (See above)
2018-12-25T11:54:00.366598629Z 66 PC: 12c87 | Move file pointer (See above)
2018-12-25T11:54:00.368123381Z 63 PC: 12c93 | Read file or device (See above)
2018-12-25T11:54:00.371017862Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.373866226Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.376352324Z 59 PC: 12c0b | Change current directory (See above)
2018-12-25T11:54:00.381076388Z 26 PC: 12c17 | Set disk transfer address (See above)
2018-12-25T11:54:00.382176168Z 79 PC: 12bad | Find next file (See above)
2018-12-25T11:54:00.384601092Z 59 PC: 12bbe | Change current directory (See above)
2018-12-25T11:54:00.391160568Z 47 PC: 12bc2 | Get disk transfer address (See above)
2018-12-25T11:54:00.392446844Z 26 PC: 12bd3 | Set disk transfer address (See above)
2018-12-25T11:54:00.393600874Z 78 PC: 12be5 | Find first file (See above)
2018-12-25T11:54:00.400599225Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.401593528Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.402588413Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.407525482Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.409292074Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.410479917Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.412448091Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.413854617Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.416404993Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.417309694Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.418191904Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.423014624Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.425881487Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.42721641Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.430566903Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.432384862Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.435039888Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.436493056Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.437544631Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.44540737Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.448027274Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.449263002Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.452198964Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.454034817Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.456794443Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.458761508Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.469504312Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.476722636Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.48012538Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.482003307Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.485319053Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.488550736Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.491819352Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.494549409Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.496171462Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.503796948Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.507952576Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.510242485Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.513385748Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.517461752Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.521115676Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.522750103Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.525316559Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.533358944Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.536625871Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.539702311Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.54280841Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.545780562Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.550586057Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.552011228Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.553311734Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.561894645Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.564785364Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.56647074Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.56971196Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.571801206Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.575388331Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.576982511Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.578169854Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.586456802Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.590505551Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.593461586Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.597663819Z 66 PC: 12c70 | Move file pointer (See above)
2018-12-25T11:54:00.599631716Z 66 PC: 12c87 | Move file pointer (See above)
2018-12-25T11:54:00.601867686Z 63 PC: 12c93 | Read file or device (See above)
2018-12-25T11:54:00.606456289Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.608529556Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.612165927Z 59 PC: 12c0b | Change current directory (See above)
2018-12-25T11:54:00.61662073Z 26 PC: 12c17 | Set disk transfer address (See above)
2018-12-25T11:54:00.618081297Z 79 PC: 12bad | Find next file (See above)
2018-12-25T11:54:00.621495982Z 59 PC: 12bbe | Change current directory (See above)
2018-12-25T11:54:00.627883345Z 47 PC: 12bc2 | Get disk transfer address (See above)
2018-12-25T11:54:00.629121099Z 26 PC: 12bd3 | Set disk transfer address (See above)
2018-12-25T11:54:00.63108037Z 78 PC: 12be5 | Find first file (See above)
2018-12-25T11:54:00.637716276Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.639064289Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.641501666Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.648682107Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.65172092Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.654164029Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.656792675Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.658799728Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.661840784Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.663087019Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.666446003Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.673875117Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.676749976Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.679497443Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.68243588Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.684530428Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.688372949Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.689629899Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.691485989Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.70462152Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.715089689Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.71783826Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.720652673Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.722669308Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.726503342Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.727999368Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.730425684Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.738717159Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.741722783Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.744401749Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.747598094Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.749751057Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.753961366Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.75543779Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.757107545Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.765312273Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.768332369Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.770932668Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.774158145Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.776314943Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.780289595Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.782066633Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.783519286Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.791432967Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.794068632Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.796211786Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.798185449Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.799674773Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.802307151Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.803381Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.804565115Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.809607338Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.811439364Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.813311072Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.815506999Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.81843804Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.821048538Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.822117106Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.822978633Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.827896438Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.829742094Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.831669155Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.833688985Z 66 PC: 12c70 | Move file pointer (See above)
2018-12-25T11:54:00.8350528Z 66 PC: 12c87 | Move file pointer (See above)
2018-12-25T11:54:00.837110909Z 63 PC: 12c93 | Read file or device (See above)
2018-12-25T11:54:00.839344909Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.841562426Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.843650643Z 59 PC: 12c0b | Change current directory (See above)
2018-12-25T11:54:00.846485931Z 26 PC: 12c17 | Set disk transfer address (See above)
2018-12-25T11:54:00.848234185Z 79 PC: 12bad | Find next file (See above)
2018-12-25T11:54:00.850796177Z 59 PC: 12cd9 | Change current directory
2018-12-25T11:54:00.854806486Z 59 PC: 12ce1 | Change current directory
2018-12-25T11:54:00.856918048Z 76 PC: 12a47 | Terminate with return code (Return code = '0')

{"DateBased":true,"Day":1,"Month":4,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":5213,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:53:59.110475166Z 42 PC: 12a88 | Get date 0x12a88: cmp dh, 4
0x12a8b: jne 0x12a95
0x12a8d: cmp dl, 0xd
0x12a90: jne 0x12a95
0x12a92: jmp 0x12d23
0x12a95: mov ah, 0x47
0x12a97: mov si, word ptr [bp + 0x74d]
0x12a9b: mov dl, 0
0x12a9d: int 0x21
0x12a9f: mov ah, 0x3b
0x12aa1: mov dx, 0x70d
0x12aa4: add dx, bp
0x12aa6: int 0x21
0x12aa8: mov ah, 0x4e
0x12aaa: mov cx, 0xc
0x12aad: mov si, 0x78d
0x12ab0: add si, bp
0x12ab2: call 0x13153
0x12ab5: mov cx, 0x20
0x12ab8: int 0x21
2018-12-25T11:53:59.113299783Z 71 PC: 12a9f | Get current directory
2018-12-25T11:53:59.116425117Z 59 PC: 12aa8 | Change current directory
2018-12-25T11:53:59.120936092Z 78 PC: 12aba | Find first file
2018-12-25T11:53:59.127545323Z 61 PC: 12ad2 | Open file (Filename = '')
2018-12-25T11:53:59.130131995Z 59 PC: 12b6a | Change current directory
2018-12-25T11:53:59.134454496Z 59 PC: 12b72 | Change current directory
2018-12-25T11:53:59.136140089Z 26 PC: 12b7b | Set disk transfer address
2018-12-25T11:53:59.138043237Z 59 PC: 12b84 | Change current directory
2018-12-25T11:53:59.147718942Z 78 PC: 12b96 | Find first file
2018-12-25T11:53:59.157165195Z 79 PC: 12bad | Find next file
2018-12-25T11:53:59.160176714Z 59 PC: 12bbe | Change current directory
2018-12-25T11:53:59.166148027Z 47 PC: 12bc2 | Get disk transfer address
2018-12-25T11:53:59.16743971Z 26 PC: 12bd3 | Set disk transfer address
2018-12-25T11:53:59.169619257Z 78 PC: 12be5 | Find first file
2018-12-25T11:53:59.175668618Z 47 PC: 12c1d | Get disk transfer address
2018-12-25T11:53:59.176726225Z 47 PC: 12c2c | Get disk transfer address
2018-12-25T11:53:59.178100372Z 61 PC: 12c31 | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:53:59.183383382Z 63 PC: 12c41 | Read file or device (Read 3 bytes on handle 5)
2018-12-25T11:53:59.190557181Z 66 PC: 12c4a | Move file pointer
2018-12-25T11:53:59.192910605Z 63 PC: 12c56 | Read file or device (Read 1 bytes on handle 5)
2018-12-25T11:53:59.197573076Z 62 PC: 12bf9 | Close file
2018-12-25T11:53:59.199786824Z 79 PC: 12bfd | Find next file
2018-12-25T11:53:59.202841976Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.207073528Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.207927409Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.212683713Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.220487546Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.22166146Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.224166967Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.226778996Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.229769489Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.231395342Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.233333996Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.237816857Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.243164137Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.245383327Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.248226362Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.250256859Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.253751331Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.25756382Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.259107255Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.266428146Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.274080584Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.276032314Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.278877849Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.281696802Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.284802556Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.285960886Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.288230518Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.295575301Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.303587412Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.306438333Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.309996039Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.311709046Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.315858715Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.318550901Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.319842413Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.327539212Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.335482887Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.33711122Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.340004683Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.343587643Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.346601515Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.347882029Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.349967414Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.35575705Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.390305124Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.395198958Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.398429442Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.400621783Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.408370286Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.410612277Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.412329691Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.420180648Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.428817165Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.430344619Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.433005954Z 66 PC: 12c70 | Move file pointer
2018-12-25T11:53:59.435135815Z 66 PC: 12c87 | Move file pointer
2018-12-25T11:53:59.436926666Z 63 PC: 12c93 | Read file or device (Read 1 bytes on handle 5)
2018-12-25T11:53:59.445253546Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.448063043Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.450987235Z 59 PC: 12c0b | Change current directory
2018-12-25T11:53:59.455311616Z 26 PC: 12c17 | Set disk transfer address
2018-12-25T11:53:59.456937495Z 79 PC: 12bad | Find next file (See above)
2018-12-25T11:53:59.459693093Z 59 PC: 12bbe | Change current directory (See above)
2018-12-25T11:53:59.466327257Z 47 PC: 12bc2 | Get disk transfer address (See above)
2018-12-25T11:53:59.467879717Z 26 PC: 12bd3 | Set disk transfer address (See above)
2018-12-25T11:53:59.469520439Z 78 PC: 12be5 | Find first file (See above)
2018-12-25T11:53:59.473433237Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.474702431Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.475914878Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.480366164Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.482898527Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.484249991Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.486054985Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.487783349Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.490043067Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.491028254Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.492059988Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.500717775Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.504991606Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.50618171Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.509128278Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.510573809Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.512564518Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.514203189Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.515262926Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.519519114Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.524207322Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.525576483Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.527349627Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.529258517Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.531141088Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.532126134Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.533686683Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.538027485Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.542881399Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.545686313Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.548822101Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.55098104Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.554218948Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.5567882Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.558299472Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.565896306Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.574286121Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.576107623Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.579103574Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.582985392Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.586565675Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.588175585Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.5905204Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.597866379Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.60906826Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.611672166Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.614995693Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.617309339Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.620489896Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.622925024Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.624093759Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.628447176Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.633119958Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.634233477Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.636054585Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.638247537Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.640207325Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.641159823Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.642664078Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.647358656Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.652548859Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.654354819Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.656250181Z 66 PC: 12c70 | Move file pointer (See above)
2018-12-25T11:53:59.657411172Z 66 PC: 12c87 | Move file pointer (See above)
2018-12-25T11:53:59.659031245Z 63 PC: 12c93 | Read file or device (See above)
2018-12-25T11:53:59.663529766Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.664886628Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.66718312Z 59 PC: 12c0b | Change current directory (See above)
2018-12-25T11:53:59.670878887Z 26 PC: 12c17 | Set disk transfer address (See above)
2018-12-25T11:53:59.672508777Z 79 PC: 12bad | Find next file (See above)
2018-12-25T11:53:59.675536057Z 59 PC: 12bbe | Change current directory (See above)
2018-12-25T11:53:59.681765968Z 47 PC: 12bc2 | Get disk transfer address (See above)
2018-12-25T11:53:59.683269372Z 26 PC: 12bd3 | Set disk transfer address (See above)
2018-12-25T11:53:59.684816771Z 78 PC: 12be5 | Find first file (See above)
2018-12-25T11:53:59.68923127Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.690836454Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.693497562Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.701133411Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.708510829Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.711092294Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.713967957Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.716157968Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.719804811Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.721173781Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.722323601Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.731160618Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.734652234Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.736493332Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.740109344Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.741465092Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.743358641Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.745280613Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.746289256Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.753367079Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.757116007Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.758471843Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.76051221Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.762252424Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.764574231Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.765457665Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.766375135Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.77089863Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.772603749Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.774286451Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.777373757Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.779234518Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.782249616Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.783865708Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.785020847Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.792227109Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.795286147Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.796765229Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.800672716Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.802849437Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.805887712Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.807072473Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.808758156Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.816335685Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.819077252Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.820845849Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.823479638Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.825728439Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.830842589Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.832615966Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.834353179Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.843584689Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.846810969Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.848650164Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.852047421Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.855690037Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.858378066Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.866560428Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.868112368Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.875455192Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.878794989Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.880316233Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.883820985Z 66 PC: 12c70 | Move file pointer (See above)
2018-12-25T11:53:59.886317432Z 66 PC: 12c87 | Move file pointer (See above)
2018-12-25T11:53:59.887878086Z 63 PC: 12c93 | Read file or device (See above)
2018-12-25T11:53:59.891308467Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.89426779Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.897022126Z 59 PC: 12c0b | Change current directory (See above)
2018-12-25T11:53:59.901651541Z 26 PC: 12c17 | Set disk transfer address (See above)
2018-12-25T11:53:59.904013584Z 79 PC: 12bad | Find next file (See above)
2018-12-25T11:53:59.906699598Z 59 PC: 12bbe | Change current directory (See above)
2018-12-25T11:53:59.912844602Z 47 PC: 12bc2 | Get disk transfer address (See above)
2018-12-25T11:53:59.914372104Z 26 PC: 12bd3 | Set disk transfer address (See above)
2018-12-25T11:53:59.915650442Z 78 PC: 12be5 | Find first file (See above)
2018-12-25T11:53:59.922210046Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.924522402Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.925905677Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.933189388Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.936805248Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.93832723Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.9408973Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.943234808Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.946116463Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.947200513Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.949018831Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.956675633Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.959325157Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.961473865Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.964090692Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.966155728Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:53:59.969567638Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:53:59.971217164Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:53:59.972649839Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:53:59.980567709Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:53:59.983816585Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:53:59.98579829Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:53:59.996193569Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:53:59.99791493Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.00054052Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.002511242Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.004119461Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.01179662Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.015649069Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.017051355Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.019794613Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.024552618Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.02734972Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.029095054Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.030362679Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.038724279Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.042184987Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.044572573Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.047167534Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.053640186Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.05657122Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.057686963Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.059243898Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.066275709Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.069025273Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.070954296Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.073659894Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.076039006Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.079968845Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.081539264Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.083077449Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.090716376Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.093854759Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.095783242Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.099273922Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.101879275Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.105773636Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.108295906Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.109343745Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.117047971Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.120460516Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.121887286Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.124683487Z 66 PC: 12c70 | Move file pointer (See above)
2018-12-25T11:54:00.126532361Z 66 PC: 12c87 | Move file pointer (See above)
2018-12-25T11:54:00.128053859Z 63 PC: 12c93 | Read file or device (See above)
2018-12-25T11:54:00.131285914Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.133205179Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.135936397Z 59 PC: 12c0b | Change current directory (See above)
2018-12-25T11:54:00.14073842Z 26 PC: 12c17 | Set disk transfer address (See above)
2018-12-25T11:54:00.141843622Z 79 PC: 12bad | Find next file (See above)
2018-12-25T11:54:00.144552345Z 59 PC: 12bbe | Change current directory (See above)
2018-12-25T11:54:00.152046816Z 47 PC: 12bc2 | Get disk transfer address (See above)
2018-12-25T11:54:00.153407787Z 26 PC: 12bd3 | Set disk transfer address (See above)
2018-12-25T11:54:00.154812539Z 78 PC: 12be5 | Find first file (See above)
2018-12-25T11:54:00.16202877Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.163564452Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.164840093Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.172660821Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.175548353Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.177473376Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.181201107Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.183170712Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.186158461Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.188887379Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.190570041Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.198715182Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.202566041Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.204448182Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.207500332Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.210686142Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.213998354Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.215593472Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.218298501Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.225616015Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.228570712Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.230443504Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.233180177Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.235494427Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.239739674Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.241308694Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.243107496Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.25130308Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.254294833Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.256361738Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.259214074Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.261578349Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.26533947Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.266982665Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.26938904Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.277919258Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.280893425Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.282255638Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.286911417Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.289332135Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.293097542Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.295497707Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.296962925Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.304999399Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.308540793Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.309908178Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.313016974Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.315517577Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.318411501Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.320530951Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.321849171Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.329319934Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.332604867Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.334026448Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.33665174Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.339117958Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.342904448Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.344520126Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.346411473Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.353583287Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.356309152Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.358291685Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.361005039Z 66 PC: 12c70 | Move file pointer (See above)
2018-12-25T11:54:00.362474442Z 66 PC: 12c87 | Move file pointer (See above)
2018-12-25T11:54:00.36429891Z 63 PC: 12c93 | Read file or device (See above)
2018-12-25T11:54:00.367501201Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.36994705Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.372578136Z 59 PC: 12c0b | Change current directory (See above)
2018-12-25T11:54:00.376926816Z 26 PC: 12c17 | Set disk transfer address (See above)
2018-12-25T11:54:00.379375149Z 79 PC: 12bad | Find next file (See above)
2018-12-25T11:54:00.382210437Z 59 PC: 12bbe | Change current directory (See above)
2018-12-25T11:54:00.388557681Z 47 PC: 12bc2 | Get disk transfer address (See above)
2018-12-25T11:54:00.390454758Z 26 PC: 12bd3 | Set disk transfer address (See above)
2018-12-25T11:54:00.392101313Z 78 PC: 12be5 | Find first file (See above)
2018-12-25T11:54:00.398816079Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.400560299Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.402207839Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.409606917Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.414103464Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.415484756Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.418470305Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.420436428Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.423314797Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.425594201Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.427075343Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.434365551Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.437796697Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.439318191Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.442063231Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.444479055Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.447436Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.448608339Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.449962828Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.457048147Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.460684928Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.464022407Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.466629013Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.473125983Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.476850023Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.478469193Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.481398958Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.489732794Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.494027657Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.49740409Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.500563107Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.502949361Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.507753707Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.509536548Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.511195114Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.520298244Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.523681326Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.525859967Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.530054974Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.532444179Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.536611395Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.538656836Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.54028684Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.549010344Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.552185331Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.554298369Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.558954407Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.561556868Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.56478682Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.567220564Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.568624522Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.577108152Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.581561848Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.583203622Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.586713878Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.592231493Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.595646418Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.597612954Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.599103458Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.606486981Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.61010146Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.61170477Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.614623802Z 66 PC: 12c70 | Move file pointer (See above)
2018-12-25T11:54:00.617363557Z 66 PC: 12c87 | Move file pointer (See above)
2018-12-25T11:54:00.619092507Z 63 PC: 12c93 | Read file or device (See above)
2018-12-25T11:54:00.622861792Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.626526718Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.629814947Z 59 PC: 12c0b | Change current directory (See above)
2018-12-25T11:54:00.634723792Z 26 PC: 12c17 | Set disk transfer address (See above)
2018-12-25T11:54:00.637811273Z 79 PC: 12bad | Find next file (See above)
2018-12-25T11:54:00.641391806Z 59 PC: 12bbe | Change current directory (See above)
2018-12-25T11:54:00.649584983Z 47 PC: 12bc2 | Get disk transfer address (See above)
2018-12-25T11:54:00.652661187Z 26 PC: 12bd3 | Set disk transfer address (See above)
2018-12-25T11:54:00.654398278Z 78 PC: 12be5 | Find first file (See above)
2018-12-25T11:54:00.663233925Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.6653576Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.667062653Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.67601596Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.679821282Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.685277387Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.689643064Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.692695311Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.696058867Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.699043679Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.700742074Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.708581506Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.713349866Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.715370595Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.718568772Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.722252503Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.725709167Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.728450724Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.731264885Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.739077061Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.743510958Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.745606798Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.74853521Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.751651954Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.754718085Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.756084791Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.758719567Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.766465974Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.769424328Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.771983695Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.774750921Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.776729185Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.780774795Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.782002515Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.783224294Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.791498217Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.794455475Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.796632805Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.800716557Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.803085646Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.808139552Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.810079806Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.81121412Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.818953137Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.822192099Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.823788922Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.827722439Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.829737028Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.8326555Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.835386734Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.83669409Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.844185994Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.848824908Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.850419591Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.853188535Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.856334624Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.85940877Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.861161903Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.863568181Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.871182936Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.874914035Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.877129349Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.879878042Z 66 PC: 12c70 | Move file pointer (See above)
2018-12-25T11:54:00.882116464Z 66 PC: 12c87 | Move file pointer (See above)
2018-12-25T11:54:00.884137407Z 63 PC: 12c93 | Read file or device (See above)
2018-12-25T11:54:00.888263027Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.891431619Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.894200352Z 59 PC: 12c0b | Change current directory (See above)
2018-12-25T11:54:00.898882Z 26 PC: 12c17 | Set disk transfer address (See above)
2018-12-25T11:54:00.901033018Z 79 PC: 12bad | Find next file (See above)
2018-12-25T11:54:00.903868036Z 59 PC: 12bbe | Change current directory (See above)
2018-12-25T11:54:00.912241943Z 47 PC: 12bc2 | Get disk transfer address (See above)
2018-12-25T11:54:00.913911333Z 26 PC: 12bd3 | Set disk transfer address (See above)
2018-12-25T11:54:00.915586818Z 78 PC: 12be5 | Find first file (See above)
2018-12-25T11:54:00.923607359Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.925300544Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.926957466Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.936284079Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.939254257Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.940491226Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.943205779Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.944624269Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.946876981Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.948463448Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.949459845Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.954383018Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.95642016Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.957626934Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.960392941Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.96183352Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.964949931Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.966126589Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.967495809Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.972685754Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.974639524Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.975968479Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.97879408Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.980923725Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:00.984037732Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:00.985193851Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:00.986214705Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:00.992051487Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:00.993948108Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:00.995105404Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:00.997644699Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:00.999042264Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:01.001189901Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:01.002589311Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:01.003568701Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:01.009029218Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:01.011109418Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:01.012290902Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:01.014911509Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:01.016367798Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:01.018538685Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:01.019968602Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:01.021002661Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:01.025719605Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:01.027820933Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:01.029015395Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:01.031551552Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:01.033035406Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:01.035190028Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:01.037269678Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:01.038319574Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:01.044315436Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:01.046304384Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:01.047451499Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:01.050096343Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:01.052281975Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:01.054477603Z 47 PC: 12c1d | Get disk transfer address (See above)
2018-12-25T11:54:01.056115348Z 47 PC: 12c2c | Get disk transfer address (See above)
2018-12-25T11:54:01.057202345Z 61 PC: 12c31 | Open file (See above)
2018-12-25T11:54:01.062167916Z 63 PC: 12c41 | Read file or device (See above)
2018-12-25T11:54:01.06459591Z 66 PC: 12c4a | Move file pointer (See above)
2018-12-25T11:54:01.066120474Z 63 PC: 12c56 | Read file or device (See above)
2018-12-25T11:54:01.068646928Z 66 PC: 12c70 | Move file pointer (See above)
2018-12-25T11:54:01.070626419Z 66 PC: 12c87 | Move file pointer (See above)
2018-12-25T11:54:01.072374728Z 63 PC: 12c93 | Read file or device (See above)
2018-12-25T11:54:01.074982959Z 62 PC: 12bf9 | Close file (See above)
2018-12-25T11:54:01.076551629Z 79 PC: 12bfd | Find next file (See above)
2018-12-25T11:54:01.078998433Z 59 PC: 12c0b | Change current directory (See above)
2018-12-25T11:54:01.081787864Z 26 PC: 12c17 | Set disk transfer address (See above)
2018-12-25T11:54:01.082786117Z 79 PC: 12bad | Find next file (See above)
2018-12-25T11:54:01.085247689Z 59 PC: 12cd9 | Change current directory
2018-12-25T11:54:01.088132011Z 59 PC: 12ce1 | Change current directory
2018-12-25T11:54:01.089622258Z 76 PC: 12a47 | Terminate with return code (Return code = '0')

{"DateBased":true,"Day":13,"Month":4,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":5213,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:53:59.345659537Z 42 PC: 12a88 | Get date 0x12a88: cmp dh, 4
0x12a8b: jne 0x12a95
0x12a8d: cmp dl, 0xd
0x12a90: jne 0x12a95
0x12a92: jmp 0x12d23
0x12a95: mov ah, 0x47
0x12a97: mov si, word ptr [bp + 0x74d]
0x12a9b: mov dl, 0
0x12a9d: int 0x21
0x12a9f: mov ah, 0x3b
0x12aa1: mov dx, 0x70d
0x12aa4: add dx, bp
0x12aa6: int 0x21
0x12aa8: mov ah, 0x4e
0x12aaa: mov cx, 0xc
0x12aad: mov si, 0x78d
0x12ab0: add si, bp
0x12ab2: call 0x13153
0x12ab5: mov cx, 0x20
0x12ab8: int 0x21
2018-12-25T11:53:59.34939897Z 44 PC: 12d3b | Get time 0x12d3b: cmp cl, 0xd
0x12d3e: jae 0x12d43
0x12d40: jmp 0x12ea7
0x12d43: cmp cl, 0x14
0x12d46: jbe 0x12d4b
0x12d48: jmp 0x12ea7
0x12d4b: mov ah, 0x1a
0x12d4d: mov dx, 0x3aa
0x12d50: add dx, bp
0x12d52: int 0x21
0x12d54: mov ah, 0x47
0x12d56: mov si, word ptr [bp + 0x36a]
0x12d5a: mov dl, 0
0x12d5c: int 0x21
0x12d5e: mov ah, 0x3b
0x12d60: mov dx, 0x32a
0x12d63: add dx, bp
0x12d65: int 0x21
0x12d67: mov ah, 0x4e
0x12d69: mov cx, 4
2018-12-25T11:53:59.353012973Z 44 PC: 12eab | Get time 0x12eab: cmp dh, 0x38
0x12eae: jae 0x12eb3
0x12eb0: jmp 0x12ec0
0x12eb2: nop
0x12eb3: mov al, 0x36
0x12eb5: out 0x43, al
0x12eb7: mov ax, 0x900
0x12eba: out 0x40, al
0x12ebc: mov al, ah
0x12ebe: out 0x40, al
0x12ec0: pop es
0x12ec1: pop ds
0x12ec2: popaw
0x12ec3: popf
0x12ec4: push 0x100
0x12ec7: ret
0x12ec8: push si
0x12ec9: xor byte ptr [si], 0xdb
0x12ecc: inc si
0x12ecd: loop 0x12ec9
2018-12-25T11:53:59.355654181Z 76 PC: 12a47 | Terminate with return code (Return code = '0')