Sample viewer

vx.netlux.org/Virus.DOS.Weed.5330

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:30:40.64708417Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:40.654587551Z 65 PC: 135cf | Delete file (Filename = 'anti-vir.dat')
2018-12-17T22:30:40.662492177Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:40.670025241Z 65 PC: 135cf | Delete file (Filename = 'chklist.ms')
2018-12-17T22:30:40.677204129Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:40.686506033Z 65 PC: 135cf | Delete file (Filename = 'chklist.cps')
2018-12-17T22:30:40.69341147Z 98 PC: 1a606 | Get current PSP
2018-12-17T22:30:40.695610626Z 26 PC: 12ca0 | Set disk transfer address
2018-12-17T22:30:40.698174506Z 78 PC: 12cb2 | Find first file
2018-12-17T22:30:40.705211787Z 67 PC: 13418 | Get or set file attributes
2018-12-17T22:30:40.711987773Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:40.727702334Z 61 PC: 135fd | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:30:40.736262535Z 63 PC: 1369f | Read file or device (Read 5330 bytes on handle 5)
2018-12-17T22:30:40.745818405Z 62 PC: 136e5 | Close file
2018-12-17T22:30:40.749596428Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:40.76156943Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:40.768504852Z 65 PC: 135cf | Delete file (Filename = 'anti-vir.dat')
2018-12-17T22:30:40.776675219Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:40.781376683Z 65 PC: 135cf | Delete file (Filename = 'chklist.ms')
2018-12-17T22:30:40.78911066Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:40.796360064Z 65 PC: 135cf | Delete file (Filename = 'chklist.cps')
2018-12-17T22:30:40.804480351Z 26 PC: 1306e | Set disk transfer address
2018-12-17T22:30:40.805600885Z 78 PC: 13086 | Find first file
2018-12-17T22:30:40.810516544Z 67 PC: 13418 | Get or set file attributes
2018-12-17T22:30:40.818267701Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:40.829740108Z 61 PC: 138e4 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:30:40.837384223Z 66 PC: 13910 | Move file pointer
2018-12-17T22:30:40.840482556Z 66 PC: 1396d | Move file pointer
2018-12-17T22:30:40.842274184Z 63 PC: 139a2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:30:40.850148636Z 63 PC: 139a2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:30:40.854908364Z 63 PC: 139a2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:30:40.857959863Z 63 PC: 139a2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:30:40.864755407Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:40.886460249Z 62 PC: 13a43 | Close file
2018-12-17T22:30:40.889539164Z 26 PC: 131bd | Set disk transfer address
2018-12-17T22:30:40.892349217Z 79 PC: 131cb | Find next file
2018-12-17T22:30:40.895694692Z 67 PC: 13418 | Get or set file attributes
2018-12-17T22:30:40.899102534Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:40.901473573Z 61 PC: 138e4 | Open file (Filename = '')
2018-12-17T22:30:40.904602273Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:40.912300845Z 65 PC: 135cf | Delete file (Filename = 'anti-vir.dat')
2018-12-17T22:30:40.919273391Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:40.926289298Z 65 PC: 135cf | Delete file (Filename = 'chklist.ms')
2018-12-17T22:30:40.934541121Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:40.947096584Z 65 PC: 135cf | Delete file (Filename = 'chklist.cps')
2018-12-17T22:30:40.954018611Z 26 PC: 1306e | Set disk transfer address
2018-12-17T22:30:40.95598738Z 78 PC: 13086 | Find first file
2018-12-17T22:30:40.962535987Z 67 PC: 13418 | Get or set file attributes
2018-12-17T22:30:40.969252527Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:40.980348738Z 61 PC: 138e4 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:30:40.99299521Z 66 PC: 13910 | Move file pointer
2018-12-17T22:30:40.994625493Z 62 PC: 13a43 | Close file
2018-12-17T22:30:40.996695109Z 26 PC: 131bd | Set disk transfer address
2018-12-17T22:30:40.998578641Z 79 PC: 131cb | Find next file
2018-12-17T22:30:41.00148722Z 67 PC: 13418 | Get or set file attributes
2018-12-17T22:30:41.013522578Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:41.024782661Z 61 PC: 138e4 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:30:41.032596871Z 66 PC: 13910 | Move file pointer
2018-12-17T22:30:41.034668343Z 62 PC: 13a43 | Close file
2018-12-17T22:30:41.037846269Z 26 PC: 131bd | Set disk transfer address
2018-12-17T22:30:41.03900769Z 79 PC: 131cb | Find next file
2018-12-17T22:30:41.042278578Z 67 PC: 13418 | Get or set file attributes
2018-12-17T22:30:41.049662602Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:41.061123461Z 61 PC: 138e4 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:30:41.074648873Z 66 PC: 13910 | Move file pointer
2018-12-17T22:30:41.077304161Z 62 PC: 13a43 | Close file
2018-12-17T22:30:41.079671061Z 26 PC: 131bd | Set disk transfer address
2018-12-17T22:30:41.08118642Z 79 PC: 131cb | Find next file
2018-12-17T22:30:41.084638565Z 67 PC: 13418 | Get or set file attributes
2018-12-17T22:30:41.091411941Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:41.102663183Z 61 PC: 138e4 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:30:41.110493803Z 66 PC: 13910 | Move file pointer
2018-12-17T22:30:41.11315837Z 62 PC: 13a43 | Close file
2018-12-17T22:30:41.115657963Z 26 PC: 131bd | Set disk transfer address
2018-12-17T22:30:41.117171101Z 79 PC: 131cb | Find next file
2018-12-17T22:30:41.125268665Z 67 PC: 13418 | Get or set file attributes
2018-12-17T22:30:41.131809343Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:41.146355381Z 61 PC: 138e4 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:30:41.154982354Z 66 PC: 13910 | Move file pointer
2018-12-17T22:30:41.15710288Z 62 PC: 13a43 | Close file
2018-12-17T22:30:41.159654717Z 26 PC: 131bd | Set disk transfer address
2018-12-17T22:30:41.162219672Z 79 PC: 131cb | Find next file
2018-12-17T22:30:41.166105684Z 67 PC: 13418 | Get or set file attributes
2018-12-17T22:30:41.172970314Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:41.185335215Z 61 PC: 138e4 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:30:41.193093013Z 66 PC: 13910 | Move file pointer
2018-12-17T22:30:41.195150523Z 62 PC: 13a43 | Close file
2018-12-17T22:30:41.197631458Z 26 PC: 131bd | Set disk transfer address
2018-12-17T22:30:41.20003011Z 79 PC: 131cb | Find next file
2018-12-17T22:30:41.203201723Z 67 PC: 13418 | Get or set file attributes
2018-12-17T22:30:41.210494034Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:41.223101777Z 61 PC: 138e4 | Open file (Filename = 'PAH.COM')
2018-12-17T22:30:41.230415334Z 66 PC: 13910 | Move file pointer
2018-12-17T22:30:41.232111496Z 62 PC: 13a43 | Close file
2018-12-17T22:30:41.235112902Z 26 PC: 131bd | Set disk transfer address
2018-12-17T22:30:41.236801823Z 79 PC: 131cb | Find next file
2018-12-17T22:30:41.239706476Z 67 PC: 13418 | Get or set file attributes
2018-12-17T22:30:41.243117764Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:41.245490192Z 61 PC: 138e4 | Open file (Filename = '')
2018-12-17T22:30:41.248123453Z 98 PC: 1a63d | Get current PSP
2018-12-17T22:30:41.250752779Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:41.261348436Z 65 PC: 135cf | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:30:41.269039951Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:41.277339412Z 65 PC: 135cf | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:30:41.285137564Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:41.292115315Z 65 PC: 135cf | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:30:41.299287845Z 26 PC: 1306e | Set disk transfer address
2018-12-17T22:30:41.301722056Z 78 PC: 13086 | Find first file
2018-12-17T22:30:41.309485939Z 67 PC: 13418 | Get or set file attributes
2018-12-17T22:30:41.316380281Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:41.655017291Z 61 PC: 138e4 | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:30:41.664052195Z 66 PC: 13910 | Move file pointer
2018-12-17T22:30:41.666109587Z 66 PC: 1396d | Move file pointer
2018-12-17T22:30:41.66883587Z 63 PC: 139a2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:30:41.675515251Z 63 PC: 139a2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:30:41.678486648Z 63 PC: 139a2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:30:41.682112646Z 63 PC: 139a2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:30:41.685607954Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:41.696408214Z 62 PC: 13a43 | Close file
2018-12-17T22:30:41.698825894Z 26 PC: 1330a | Set disk transfer address
2018-12-17T22:30:41.701405576Z 78 PC: 1331c | Find first file
2018-12-17T22:30:41.70862156Z 67 PC: 13418 | Get or set file attributes
2018-12-17T22:30:41.715594117Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:41.727325793Z 61 PC: 135fd | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:30:41.736156929Z 87 PC: 134d9 | Get or set file date and time
2018-12-17T22:30:41.738224656Z 63 PC: 1369f | Read file or device (Read 5330 bytes on handle 5)
2018-12-17T22:30:41.747425026Z 66 PC: 1a72b | Move file pointer
2018-12-17T22:30:41.750239875Z 64 PC: 13649 | Write file or device (Write 5330 bytes on handle 5)
2018-12-17T22:30:41.758696465Z 66 PC: 1a72b | Move file pointer
2018-12-17T22:30:41.780133732Z 64 PC: 13649 | Write file or device (Write 5330 bytes on handle 5)
2018-12-17T22:30:41.793752985Z 87 PC: 1353b | Get or set file date and time
2018-12-17T22:30:41.795953733Z 62 PC: 136e5 | Close file
2018-12-17T22:30:41.804427139Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:41.817294233Z 26 PC: 131bd | Set disk transfer address
2018-12-17T22:30:41.819236816Z 79 PC: 131cb | Find next file
2018-12-17T22:30:41.824018641Z 67 PC: 13418 | Get or set file attributes
2018-12-17T22:30:41.833183739Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:41.840852678Z 61 PC: 138e4 | Open file (Filename = 'C:\DOS\')
2018-12-17T22:30:41.848897916Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:41.85840328Z 65 PC: 135cf | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:30:41.866458348Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:41.874017653Z 65 PC: 135cf | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:30:41.882936848Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:41.890514803Z 65 PC: 135cf | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:30:41.897954507Z 26 PC: 1306e | Set disk transfer address
2018-12-17T22:30:41.900616876Z 78 PC: 13086 | Find first file
2018-12-17T22:30:41.908140237Z 67 PC: 13418 | Get or set file attributes
2018-12-17T22:30:41.915156691Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:41.927686581Z 61 PC: 138e4 | Open file (Filename = 'C:\DOS\EDIT.COM')
2018-12-17T22:30:41.935665277Z 66 PC: 13910 | Move file pointer
2018-12-17T22:30:41.937605924Z 62 PC: 13a43 | Close file
2018-12-17T22:30:41.940883667Z 26 PC: 131bd | Set disk transfer address
2018-12-17T22:30:41.942896942Z 79 PC: 131cb | Find next file
2018-12-17T22:30:41.946863699Z 67 PC: 13418 | Get or set file attributes
2018-12-17T22:30:41.954649036Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:41.965798712Z 61 PC: 138e4 | Open file (Filename = 'C:\DOS\FORMAT.COM')
2018-12-17T22:30:41.973668947Z 66 PC: 13910 | Move file pointer
2018-12-17T22:30:41.976409782Z 66 PC: 1396d | Move file pointer
2018-12-17T22:30:41.97862413Z 63 PC: 139a2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:30:41.98497256Z 63 PC: 139a2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:30:41.989177319Z 63 PC: 139a2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:30:41.993250684Z 63 PC: 139a2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:30:41.99652161Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:42.010102624Z 62 PC: 13a43 | Close file
2018-12-17T22:30:42.013403215Z 26 PC: 1330a | Set disk transfer address
2018-12-17T22:30:42.015026246Z 78 PC: 1331c | Find first file
2018-12-17T22:30:42.022290866Z 67 PC: 13418 | Get or set file attributes
2018-12-17T22:30:42.03022357Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:42.041501521Z 61 PC: 135fd | Open file (Filename = 'C:\DOS\FORMAT.COM')
2018-12-17T22:30:42.049493528Z 87 PC: 134d9 | Get or set file date and time
2018-12-17T22:30:42.052549677Z 63 PC: 1369f | Read file or device (Read 5330 bytes on handle 5)
2018-12-17T22:30:42.061360345Z 66 PC: 1a72b | Move file pointer
2018-12-17T22:30:42.063989807Z 64 PC: 13649 | Write file or device (Write 5330 bytes on handle 5)
2018-12-17T22:30:42.072774211Z 66 PC: 1a72b | Move file pointer
2018-12-17T22:30:42.093117956Z 64 PC: 13649 | Write file or device (Write 5330 bytes on handle 5)
2018-12-17T22:30:42.106525849Z 87 PC: 1353b | Get or set file date and time
2018-12-17T22:30:42.108858855Z 62 PC: 136e5 | Close file
2018-12-17T22:30:42.117808478Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:42.128681527Z 26 PC: 131bd | Set disk transfer address
2018-12-17T22:30:42.130793717Z 79 PC: 131cb | Find next file
2018-12-17T22:30:42.134421031Z 67 PC: 13418 | Get or set file attributes
2018-12-17T22:30:42.141362178Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:42.148834379Z 61 PC: 138e4 | Open file (Filename = 'C:\DOS\')
2018-12-17T22:30:42.156341431Z 98 PC: 1a63d | Get current PSP
2018-12-17T22:30:42.158301971Z 26 PC: 13c61 | Set disk transfer address
2018-12-17T22:30:42.160248115Z 78 PC: 13c73 | Find first file
2018-12-17T22:30:42.169728859Z 67 PC: 13418 | Get or set file attributes
2018-12-17T22:30:42.176301299Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:42.188629026Z 61 PC: 135fd | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:30:42.196256407Z 87 PC: 134d9 | Get or set file date and time
2018-12-17T22:30:42.202354952Z 66 PC: 1a72b | Move file pointer
2018-12-17T22:30:42.205158182Z 63 PC: 1369f | Read file or device (Read 5330 bytes on handle 5)
2018-12-17T22:30:42.214129446Z 66 PC: 1a72b | Move file pointer
2018-12-17T22:30:42.234701106Z 64 PC: 13649 | Write file or device (Write 5330 bytes on handle 5)
2018-12-17T22:30:42.245601606Z 87 PC: 1353b | Get or set file date and time
2018-12-17T22:30:42.247378838Z 62 PC: 136e5 | Close file
2018-12-17T22:30:42.255639899Z 61 PC: 13a67 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:30:42.264491727Z 66 PC: 13a9a | Move file pointer
2018-12-17T22:30:42.266200315Z 64 PC: 13ad3 | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:30:42.274502732Z 62 PC: 13af6 | Close file
2018-12-17T22:30:42.283238257Z 61 PC: 135fd | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:30:42.291101118Z 87 PC: 1353b | Get or set file date and time
2018-12-17T22:30:42.292972662Z 62 PC: 136e5 | Close file
2018-12-17T22:30:42.304485674Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:42.316040212Z 75 PC: 12fb8 | Execute program
2018-12-17T22:30:42.333140929Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:42.341137531Z 65 PC: 135cf | Delete file (Filename = 'anti-vir.dat')
2018-12-17T22:30:42.347587297Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:42.353944636Z 65 PC: 135cf | Delete file (Filename = 'chklist.ms')
2018-12-17T22:30:42.367944828Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:42.374518088Z 65 PC: 135cf | Delete file (Filename = 'chklist.cps')
2018-12-17T22:30:42.380991921Z 26 PC: 1330a | Set disk transfer address
2018-12-17T22:30:42.383037128Z 78 PC: 1331c | Find first file
2018-12-17T22:30:42.38951222Z 67 PC: 13418 | Get or set file attributes
2018-12-17T22:30:42.395646896Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:42.406961231Z 61 PC: 135fd | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:30:42.414216728Z 87 PC: 134d9 | Get or set file date and time
2018-12-17T22:30:42.415911057Z 63 PC: 1369f | Read file or device (Read 5330 bytes on handle 5)
2018-12-17T22:30:42.424380311Z 66 PC: 1a72b | Move file pointer
2018-12-17T22:30:42.427266398Z 64 PC: 13649 | Write file or device (Write 5330 bytes on handle 5)
2018-12-17T22:30:42.436422373Z 66 PC: 1a72b | Move file pointer
2018-12-17T22:30:42.457133587Z 64 PC: 13649 | Write file or device (Write 5330 bytes on handle 5)
2018-12-17T22:30:42.466783251Z 87 PC: 1353b | Get or set file date and time
2018-12-17T22:30:42.46871645Z 62 PC: 136e5 | Close file
2018-12-17T22:30:42.47746594Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:42.488157641Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:42.495024246Z 65 PC: 135cf | Delete file (Filename = 'anti-vir.dat')
2018-12-17T22:30:42.502329454Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:42.509193842Z 65 PC: 135cf | Delete file (Filename = 'chklist.ms')
2018-12-17T22:30:42.515980101Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:42.523372749Z 65 PC: 135cf | Delete file (Filename = 'chklist.cps')
2018-12-17T22:30:42.530391309Z 26 PC: 1306e | Set disk transfer address
2018-12-17T22:30:42.53203509Z 78 PC: 13086 | Find first file
2018-12-17T22:30:42.539771057Z 67 PC: 13418 | Get or set file attributes
2018-12-17T22:30:42.5466698Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:42.55662836Z 61 PC: 138e4 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:30:42.561589766Z 66 PC: 13910 | Move file pointer
2018-12-17T22:30:42.563397845Z 66 PC: 1396d | Move file pointer
2018-12-17T22:30:42.564636138Z 63 PC: 139a2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:30:42.569115693Z 63 PC: 139a2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:30:42.571863159Z 63 PC: 139a2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:30:42.573898606Z 63 PC: 139a2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:30:42.57624425Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:42.584467057Z 62 PC: 13a43 | Close file
2018-12-17T22:30:42.58657872Z 26 PC: 131bd | Set disk transfer address
2018-12-17T22:30:42.588615586Z 79 PC: 131cb | Find next file
2018-12-17T22:30:42.592190717Z 67 PC: 13418 | Get or set file attributes
2018-12-17T22:30:42.594313663Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:42.596922156Z 61 PC: 138e4 | Open file (Filename = '')
2018-12-17T22:30:42.600660715Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:42.606484603Z 65 PC: 135cf | Delete file (Filename = 'anti-vir.dat')
2018-12-17T22:30:42.612073745Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:42.620953783Z 65 PC: 135cf | Delete file (Filename = 'chklist.ms')
2018-12-17T22:30:42.62936148Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:42.635879643Z 65 PC: 135cf | Delete file (Filename = 'chklist.cps')
2018-12-17T22:30:42.643499826Z 26 PC: 1306e | Set disk transfer address
2018-12-17T22:30:42.645363Z 78 PC: 13086 | Find first file
2018-12-17T22:30:42.65263084Z 67 PC: 13418 | Get or set file attributes
2018-12-17T22:30:42.660507156Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:42.669265877Z 61 PC: 138e4 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:30:42.67696509Z 66 PC: 13910 | Move file pointer
2018-12-17T22:30:42.678896561Z 62 PC: 13a43 | Close file
2018-12-17T22:30:42.680850002Z 26 PC: 131bd | Set disk transfer address
2018-12-17T22:30:42.682262225Z 79 PC: 131cb | Find next file
2018-12-17T22:30:42.685640056Z 67 PC: 13418 | Get or set file attributes
2018-12-17T22:30:42.692931693Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:42.699614426Z 61 PC: 138e4 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:30:42.70543105Z 66 PC: 13910 | Move file pointer
2018-12-17T22:30:42.706739368Z 62 PC: 13a43 | Close file
2018-12-17T22:30:42.708385367Z 26 PC: 131bd | Set disk transfer address
2018-12-17T22:30:42.710430156Z 79 PC: 131cb | Find next file
2018-12-17T22:30:42.712479638Z 67 PC: 13418 | Get or set file attributes
2018-12-17T22:30:42.716686304Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:42.725574242Z 61 PC: 138e4 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:30:42.735145146Z 66 PC: 13910 | Move file pointer
2018-12-17T22:30:42.73644534Z 62 PC: 13a43 | Close file
2018-12-17T22:30:42.738598334Z 26 PC: 131bd | Set disk transfer address
2018-12-17T22:30:42.739870674Z 79 PC: 131cb | Find next file
2018-12-17T22:30:42.742148813Z 67 PC: 13418 | Get or set file attributes
2018-12-17T22:30:42.750504979Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:42.759538006Z 61 PC: 138e4 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:30:42.766230837Z 66 PC: 13910 | Move file pointer
2018-12-17T22:30:42.769403486Z 62 PC: 13a43 | Close file
2018-12-17T22:30:42.771939612Z 26 PC: 131bd | Set disk transfer address
2018-12-17T22:30:42.773472901Z 79 PC: 131cb | Find next file
2018-12-17T22:30:42.777266654Z 67 PC: 13418 | Get or set file attributes
2018-12-17T22:30:42.784252549Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:42.796281646Z 61 PC: 138e4 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:30:42.804040291Z 66 PC: 13910 | Move file pointer
2018-12-17T22:30:42.805818376Z 62 PC: 13a43 | Close file
2018-12-17T22:30:42.809194181Z 26 PC: 131bd | Set disk transfer address
2018-12-17T22:30:42.8107186Z 79 PC: 131cb | Find next file
2018-12-17T22:30:42.814012501Z 67 PC: 13418 | Get or set file attributes
2018-12-17T22:30:42.827637806Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:42.83925021Z 61 PC: 138e4 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:30:42.847239503Z 66 PC: 13910 | Move file pointer
2018-12-17T22:30:42.85023576Z 62 PC: 13a43 | Close file
2018-12-17T22:30:42.853052628Z 26 PC: 131bd | Set disk transfer address
2018-12-17T22:30:42.854678724Z 79 PC: 131cb | Find next file
2018-12-17T22:30:42.858975685Z 67 PC: 13418 | Get or set file attributes
2018-12-17T22:30:42.866098555Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:42.877395633Z 61 PC: 138e4 | Open file (Filename = 'PAH.COM')
2018-12-17T22:30:42.892003048Z 66 PC: 13910 | Move file pointer
2018-12-17T22:30:42.894406051Z 62 PC: 13a43 | Close file
2018-12-17T22:30:42.896895677Z 26 PC: 131bd | Set disk transfer address
2018-12-17T22:30:42.899506752Z 79 PC: 131cb | Find next file
2018-12-17T22:30:42.902667632Z 67 PC: 13418 | Get or set file attributes
2018-12-17T22:30:42.904815278Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:42.907553598Z 61 PC: 138e4 | Open file (Filename = '')
2018-12-17T22:30:42.910546589Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:42.917118184Z 65 PC: 135cf | Delete file (Filename = 'anti-vir.dat')
2018-12-17T22:30:42.92604032Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:42.932840807Z 65 PC: 135cf | Delete file (Filename = 'chklist.ms')
2018-12-17T22:30:42.939907326Z 67 PC: 13455 | Get or set file attributes
2018-12-17T22:30:42.952675411Z 65 PC: 135cf | Delete file (Filename = 'chklist.cps')
2018-12-17T22:30:42.960493842Z 76 PC: 13035 | Terminate with return code (Return code = '0')