Sample viewer

vx.netlux.org/Trojan.DOS.HPI

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:30:46.973243836Z 48 PC: 12e4b | Get DOS version
2018-12-17T22:30:46.974723944Z 98 PC: 1308d | Get current PSP
2018-12-17T22:30:46.976443937Z 74 PC: 12e6d | Reallocate memory
2018-12-17T22:30:46.978031604Z 73 PC: 12e80 | Release memory
2018-12-17T22:30:46.979506976Z 61 PC: 12e8f | Open file (Filename = '')
2018-12-17T22:30:46.988060162Z 66 PC: 12ea8 | Move file pointer
2018-12-17T22:30:46.989509534Z 63 PC: 12eb6 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:30:46.996940635Z 66 PC: 12ec3 | Move file pointer
2018-12-17T22:30:46.999174599Z 66 PC: 12ee3 | Move file pointer
2018-12-17T22:30:47.000781224Z 63 PC: 12ef1 | Read file or device (Read 6 bytes on handle 5)
2018-12-17T22:30:47.007639448Z 63 PC: 12f25 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:30:47.01147566Z 63 PC: 12f44 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:30:47.014560743Z 66 PC: 12f62 | Move file pointer
2018-12-17T22:30:47.016267742Z 63 PC: 12f7b | Read file or device (Read 26 bytes on handle 5)
2018-12-17T22:30:47.020431239Z 63 PC: 12f7b | Read file or device (Read 26 bytes on handle 5)
2018-12-17T22:30:47.022917753Z 63 PC: 12f7b | Read file or device (Read 26 bytes on handle 5)
2018-12-17T22:30:47.025917716Z 63 PC: 12f7b | Read file or device (Read 26 bytes on handle 5)
2018-12-17T22:30:47.037564948Z 63 PC: 12f7b | Read file or device (Read 26 bytes on handle 5)
2018-12-17T22:30:47.039922247Z 62 PC: 12f95 | Close file
2018-12-17T22:30:47.041566546Z 53 PC: 12f9a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:30:47.047524872Z 37 PC: 12fb1 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:30:47.04950334Z 61 PC: 14b67 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:30:47.056660484Z 66 PC: 14b8a | Move file pointer
2018-12-17T22:30:47.058143384Z 60 PC: 14b99 | Create or truncate file
2018-12-17T22:30:47.074667514Z 63 PC: 14bef | Read file or device (Read 896 bytes on handle 5)
2018-12-17T22:30:47.082745315Z 64 PC: 14bff | Write file or device (Write 896 bytes on handle 6)
2018-12-17T22:30:47.090892325Z 62 PC: 14c11 | Close file
2018-12-17T22:30:47.093096446Z 62 PC: 14c23 | Close file
2018-12-17T22:30:47.105364225Z 75 PC: 14df0 | Execute program
2018-12-17T22:30:47.122821723Z 61 PC: 14b67 | Open file (Filename = '[<�{')
2018-12-17T22:30:47.129307621Z 66 PC: 14b8a | Move file pointer
2018-12-17T22:30:47.13122067Z 60 PC: 14b99 | Create or truncate file
2018-12-17T22:30:47.142877718Z 63 PC: 14bef | Read file or device (Read 457 bytes on handle 5)
2018-12-17T22:30:47.149653204Z 64 PC: 14bff | Write file or device (Write 457 bytes on handle 6)
2018-12-17T22:30:47.153714583Z 62 PC: 14c11 | Close file
2018-12-17T22:30:47.155498169Z 62 PC: 14c23 | Close file
2018-12-17T22:30:47.163586154Z 75 PC: 14df0 | Execute program
2018-12-17T22:30:47.176210502Z 71 PC: 164ed | Get current directory
2018-12-17T22:30:47.179063083Z 59 PC: 164f4 | Change current directory
2018-12-17T22:30:47.182924997Z 47 PC: 16509 | Get disk transfer address
2018-12-17T22:30:47.184436542Z 26 PC: 16517 | Set disk transfer address
2018-12-17T22:30:47.185848439Z 47 PC: 14cfc | Get disk transfer address
2018-12-17T22:30:47.187354079Z 47 PC: 14d69 | Get disk transfer address
2018-12-17T22:30:47.189047141Z 47 PC: 14d69 | Get disk transfer address
2018-12-17T22:30:47.19057398Z 47 PC: 14d69 | Get disk transfer address
2018-12-17T22:30:47.192243174Z 47 PC: 14d69 | Get disk transfer address
2018-12-17T22:30:47.193678227Z 78 PC: 14da6 | Find first file
2018-12-17T22:30:47.204528629Z 79 PC: 16548 | Find next file
2018-12-17T22:30:47.207990954Z 79 PC: 16548 | Find next file
2018-12-17T22:30:47.210413924Z 79 PC: 16548 | Find next file
2018-12-17T22:30:47.212799366Z 79 PC: 16548 | Find next file
2018-12-17T22:30:47.216357238Z 79 PC: 16548 | Find next file
2018-12-17T22:30:47.218840132Z 79 PC: 16548 | Find next file
2018-12-17T22:30:47.221238049Z 79 PC: 16548 | Find next file
2018-12-17T22:30:47.224932248Z 79 PC: 16548 | Find next file
2018-12-17T22:30:47.227519731Z 79 PC: 16548 | Find next file
2018-12-17T22:30:47.22994224Z 79 PC: 16548 | Find next file
2018-12-17T22:30:47.236674228Z 79 PC: 16548 | Find next file
2018-12-17T22:30:47.238831876Z 47 PC: 16579 | Get disk transfer address
2018-12-17T22:30:47.239806798Z 26 PC: 16588 | Set disk transfer address
2018-12-17T22:30:47.241626888Z 47 PC: 14cfc | Get disk transfer address
2018-12-17T22:30:47.243401419Z 78 PC: 16590 | Find first file
2018-12-17T22:30:47.249557997Z 47 PC: 165a8 | Get disk transfer address
2018-12-17T22:30:47.252042648Z 79 PC: 16590 | Find next file
2018-12-17T22:30:47.254608543Z 47 PC: 165a8 | Get disk transfer address
2018-12-17T22:30:47.255864009Z 79 PC: 16590 | Find next file
2018-12-17T22:30:47.259085795Z 47 PC: 165a8 | Get disk transfer address
2018-12-17T22:30:47.26023671Z 79 PC: 16590 | Find next file
2018-12-17T22:30:47.262642354Z 47 PC: 165a8 | Get disk transfer address
2018-12-17T22:30:47.264309861Z 79 PC: 16590 | Find next file
2018-12-17T22:30:47.267023537Z 47 PC: 165a8 | Get disk transfer address
2018-12-17T22:30:47.26900403Z 79 PC: 16590 | Find next file
2018-12-17T22:30:47.272156311Z 47 PC: 165a8 | Get disk transfer address
2018-12-17T22:30:47.274154003Z 61 PC: 165cb | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:30:47.282388547Z 63 PC: 165d6 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:30:47.289063267Z 62 PC: 165da | Close file
2018-12-17T22:30:47.291150948Z 67 PC: 165f8 | Get or set file attributes
2018-12-17T22:30:47.304710231Z 61 PC: 165fd | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:30:47.312476681Z 64 PC: 1669c | Write file or device (Write 457 bytes on handle 5)
2018-12-17T22:30:47.315542978Z 87 PC: 1660e | Get or set file date and time
2018-12-17T22:30:47.318171966Z 62 PC: 16612 | Close file
2018-12-17T22:30:47.325327637Z 67 PC: 1661f | Get or set file attributes
2018-12-17T22:30:47.33514844Z 26 PC: 165a2 | Set disk transfer address
2018-12-17T22:30:47.33665455Z 26 PC: 1655f | Set disk transfer address
2018-12-17T22:30:47.337760374Z 59 PC: 164fe | Change current directory
2018-12-17T22:30:47.340259161Z 71 PC: 164ed | Get current directory
2018-12-17T22:30:47.34758014Z 59 PC: 164f4 | Change current directory
2018-12-17T22:30:47.352039723Z 47 PC: 16509 | Get disk transfer address
2018-12-17T22:30:47.353681657Z 26 PC: 16517 | Set disk transfer address
2018-12-17T22:30:47.355034527Z 47 PC: 14cfc | Get disk transfer address
2018-12-17T22:30:47.356474802Z 47 PC: 14d69 | Get disk transfer address
2018-12-17T22:30:47.359106701Z 47 PC: 14d69 | Get disk transfer address
2018-12-17T22:30:47.360617662Z 47 PC: 14d69 | Get disk transfer address
2018-12-17T22:30:47.362502633Z 47 PC: 14d69 | Get disk transfer address
2018-12-17T22:30:47.365350198Z 78 PC: 14da6 | Find first file
2018-12-17T22:30:47.374432976Z 79 PC: 16548 | Find next file
2018-12-17T22:30:47.376993006Z 79 PC: 16548 | Find next file
2018-12-17T22:30:47.380653269Z 79 PC: 16548 | Find next file
2018-12-17T22:30:47.383124245Z 79 PC: 16548 | Find next file
2018-12-17T22:30:47.38603046Z 79 PC: 16548 | Find next file
2018-12-17T22:30:47.389397958Z 79 PC: 16548 | Find next file
2018-12-17T22:30:47.392753986Z 79 PC: 16548 | Find next file
2018-12-17T22:30:47.397129332Z 79 PC: 16548 | Find next file
2018-12-17T22:30:47.404509211Z 79 PC: 16548 | Find next file
2018-12-17T22:30:47.407017606Z 79 PC: 16548 | Find next file
2018-12-17T22:30:47.414776826Z 79 PC: 16548 | Find next file
2018-12-17T22:30:47.417373457Z 47 PC: 16579 | Get disk transfer address
2018-12-17T22:30:47.418858279Z 26 PC: 16588 | Set disk transfer address
2018-12-17T22:30:47.421529674Z 47 PC: 14cfc | Get disk transfer address
2018-12-17T22:30:47.423689291Z 78 PC: 16590 | Find first file
2018-12-17T22:30:47.430676451Z 47 PC: 165a8 | Get disk transfer address
2018-12-17T22:30:47.43299949Z 79 PC: 16590 | Find next file
2018-12-17T22:30:47.436568398Z 47 PC: 165a8 | Get disk transfer address
2018-12-17T22:30:47.438024101Z 79 PC: 16590 | Find next file
2018-12-17T22:30:47.442070104Z 47 PC: 165a8 | Get disk transfer address
2018-12-17T22:30:47.443277894Z 79 PC: 16590 | Find next file
2018-12-17T22:30:47.445933368Z 47 PC: 165a8 | Get disk transfer address
2018-12-17T22:30:47.447839523Z 79 PC: 16590 | Find next file
2018-12-17T22:30:47.45059218Z 47 PC: 165a8 | Get disk transfer address
2018-12-17T22:30:47.452581882Z 79 PC: 16590 | Find next file
2018-12-17T22:30:47.455288201Z 47 PC: 165a8 | Get disk transfer address
2018-12-17T22:30:47.456980179Z 61 PC: 165cb | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:30:47.464826404Z 63 PC: 165d6 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:30:47.471256153Z 62 PC: 165da | Close file
2018-12-17T22:30:47.473877842Z 79 PC: 16590 | Find next file
2018-12-17T22:30:47.477160698Z 47 PC: 165a8 | Get disk transfer address
2018-12-17T22:30:47.47865784Z 79 PC: 16590 | Find next file
2018-12-17T22:30:47.481498875Z 26 PC: 165a2 | Set disk transfer address
2018-12-17T22:30:47.483298602Z 47 PC: 16579 | Get disk transfer address
2018-12-17T22:30:47.484394285Z 26 PC: 16588 | Set disk transfer address
2018-12-17T22:30:47.486525014Z 47 PC: 14cfc | Get disk transfer address
2018-12-17T22:30:47.487937426Z 47 PC: 165a8 | Get disk transfer address
2018-12-17T22:30:47.489633854Z 61 PC: 14b67 | Open file (Filename = '��E�')
2018-12-17T22:30:47.496769267Z 66 PC: 14b8a | Move file pointer
2018-12-17T22:30:47.498070647Z 60 PC: 14b99 | Create or truncate file
2018-12-17T22:30:47.689470395Z 63 PC: 14bef | Read file or device (Read 896 bytes on handle 5)
2018-12-17T22:30:47.698823491Z 64 PC: 14bff | Write file or device (Write 896 bytes on handle 6)
2018-12-17T22:30:47.747046466Z 62 PC: 14c11 | Close file
2018-12-17T22:30:47.749123261Z 62 PC: 14c23 | Close file
2018-12-17T22:30:47.964211408Z 61 PC: 14c34 | Open file (Filename = ':t!�>ԧ')
2018-12-17T22:30:47.970918882Z 63 PC: 165d6 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:30:47.977405303Z 62 PC: 14c97 | Close file
2018-12-17T22:30:47.979983856Z 65 PC: 14ca7 | Delete file (Filename = ':t!�>ԧ')
2018-12-17T22:30:47.994987335Z 67 PC: 165f8 | Get or set file attributes
2018-12-17T22:30:48.001608272Z 61 PC: 14b67 | Open file (Filename = '��E�')
2018-12-17T22:30:48.006359474Z 66 PC: 14b8a | Move file pointer
2018-12-17T22:30:48.007671395Z 60 PC: 14b99 | Create or truncate file
2018-12-17T22:30:48.032991489Z 63 PC: 14bef | Read file or device (Read 896 bytes on handle 5)
2018-12-17T22:30:48.0406898Z 64 PC: 14bff | Write file or device (Write 896 bytes on handle 6)
2018-12-17T22:30:48.06005282Z 62 PC: 14c11 | Close file
2018-12-17T22:30:48.062191831Z 62 PC: 14c23 | Close file
2018-12-17T22:30:48.076764173Z 61 PC: 14c34 | Open file (Filename = ':t!�>ԧ')
2018-12-17T22:30:48.083810914Z 64 PC: 1669c | Write file or device (Write 457 bytes on handle 5)
2018-12-17T22:30:48.090671822Z 87 PC: 1660e | Get or set file date and time
2018-12-17T22:30:48.092403147Z 62 PC: 14c97 | Close file
2018-12-17T22:30:48.1091033Z 65 PC: 14ca7 | Delete file (Filename = ':t!�>ԧ')
2018-12-17T22:30:48.124633361Z 67 PC: 1661f | Get or set file attributes
2018-12-17T22:30:48.130907831Z 26 PC: 165a2 | Set disk transfer address
2018-12-17T22:30:48.132278657Z 26 PC: 1655f | Set disk transfer address
2018-12-17T22:30:48.133249377Z 59 PC: 164fe | Change current directory
2018-12-17T22:30:48.135025895Z 76 PC: 164de | Terminate with return code (Return code = '0')
2018-12-17T22:30:48.138266024Z 65 PC: 14ca7 | Delete file (Filename = 'X.�.I�
2018-12-17T22:30:48.154868848Z 77 PC: 14ffd | Get program return code
2018-12-17T22:30:48.156629756Z 61 PC: 14b67 | Open file (Filename = '[<�{')
2018-12-17T22:30:48.16314122Z 66 PC: 14b8a | Move file pointer
2018-12-17T22:30:48.164323992Z 60 PC: 14b99 | Create or truncate file
2018-12-17T22:30:48.189375508Z 63 PC: 14bef | Read file or device (Read 862 bytes on handle 5)
2018-12-17T22:30:48.197006219Z 64 PC: 14bff | Write file or device (Write 862 bytes on handle 6)
2018-12-17T22:30:48.212222314Z 62 PC: 14c11 | Close file
2018-12-17T22:30:48.21452371Z 62 PC: 14c23 | Close file
2018-12-17T22:30:48.233098032Z 75 PC: 14df0 | Execute program
2018-12-17T22:30:48.2480436Z 47 PC: 164e4 | Get disk transfer address
2018-12-17T22:30:48.249422127Z 26 PC: 164ec | Set disk transfer address
2018-12-17T22:30:48.284957679Z 37 PC: 16501 | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:30:48.286410483Z 37 PC: 16505 | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:30:48.288434438Z 71 PC: 16579 | Get current directory
2018-12-17T22:30:48.29120379Z 59 PC: 16581 | Change current directory
2018-12-17T22:30:48.295679775Z 47 PC: 16596 | Get disk transfer address
2018-12-17T22:30:48.296841377Z 26 PC: 165a4 | Set disk transfer address
2018-12-17T22:30:48.298173581Z 47 PC: 14cfc | Get disk transfer address
2018-12-17T22:30:48.301477074Z 47 PC: 14d69 | Get disk transfer address
2018-12-17T22:30:48.303089121Z 47 PC: 14d69 | Get disk transfer address
2018-12-17T22:30:48.304408476Z 47 PC: 14d69 | Get disk transfer address
2018-12-17T22:30:48.305871808Z 47 PC: 14d69 | Get disk transfer address
2018-12-17T22:30:48.307096223Z 78 PC: 14da6 | Find first file
2018-12-17T22:30:48.313075179Z 79 PC: 165d7 | Find next file
2018-12-17T22:30:48.315669851Z 79 PC: 165d7 | Find next file
2018-12-17T22:30:48.318198958Z 79 PC: 165d7 | Find next file
2018-12-17T22:30:48.321731634Z 79 PC: 165d7 | Find next file
2018-12-17T22:30:48.324247691Z 79 PC: 165d7 | Find next file
2018-12-17T22:30:48.327135659Z 79 PC: 165d7 | Find next file
2018-12-17T22:30:48.333556852Z 79 PC: 165d7 | Find next file
2018-12-17T22:30:48.336077475Z 79 PC: 165d7 | Find next file
2018-12-17T22:30:48.338828149Z 79 PC: 165d7 | Find next file
2018-12-17T22:30:48.342115Z 79 PC: 165d7 | Find next file
2018-12-17T22:30:48.344668737Z 47 PC: 16600 | Get disk transfer address
2018-12-17T22:30:48.347436671Z 26 PC: 1660f | Set disk transfer address
2018-12-17T22:30:48.349121705Z 47 PC: 14cfc | Get disk transfer address
2018-12-17T22:30:48.350730544Z 78 PC: 16617 | Find first file
2018-12-17T22:30:48.357709931Z 47 PC: 16634 | Get disk transfer address
2018-12-17T22:30:48.359330754Z 61 PC: 1664d | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:30:48.365749175Z 63 PC: 16659 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:30:48.373890871Z 66 PC: 16661 | Move file pointer
2018-12-17T22:30:48.375399174Z 62 PC: 16666 | Close file
2018-12-17T22:30:48.378138628Z 67 PC: 16686 | Get or set file attributes
2018-12-17T22:30:48.414919353Z 61 PC: 1668b | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:30:48.422341598Z 64 PC: 16697 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:30:48.426745115Z 66 PC: 1669f | Move file pointer
2018-12-17T22:30:48.428711516Z 64 PC: 16791 | Write file or device (Write 698 bytes on handle 5)
2018-12-17T22:30:48.444789543Z 87 PC: 166af | Get or set file date and time
2018-12-17T22:30:48.44806147Z 62 PC: 166b3 | Close file
2018-12-17T22:30:48.456860654Z 67 PC: 166c0 | Get or set file attributes
2018-12-17T22:30:48.467260678Z 26 PC: 16629 | Set disk transfer address
2018-12-17T22:30:48.469605374Z 26 PC: 165e7 | Set disk transfer address
2018-12-17T22:30:48.470980485Z 59 PC: 1658b | Change current directory
2018-12-17T22:30:48.473857744Z 71 PC: 16579 | Get current directory
2018-12-17T22:30:48.476945554Z 59 PC: 16581 | Change current directory
2018-12-17T22:30:48.481162012Z 47 PC: 16596 | Get disk transfer address
2018-12-17T22:30:48.483784304Z 26 PC: 165a4 | Set disk transfer address
2018-12-17T22:30:48.48554118Z 47 PC: 14cfc | Get disk transfer address
2018-12-17T22:30:48.48723163Z 47 PC: 14d69 | Get disk transfer address
2018-12-17T22:30:48.48946043Z 47 PC: 14d69 | Get disk transfer address
2018-12-17T22:30:48.491183982Z 47 PC: 14d69 | Get disk transfer address
2018-12-17T22:30:48.49373582Z 47 PC: 14d69 | Get disk transfer address
2018-12-17T22:30:48.495061181Z 78 PC: 14da6 | Find first file
2018-12-17T22:30:48.500030408Z 79 PC: 165d7 | Find next file
2018-12-17T22:30:48.503265399Z 79 PC: 165d7 | Find next file
2018-12-17T22:30:48.506198022Z 79 PC: 165d7 | Find next file
2018-12-17T22:30:48.509321422Z 79 PC: 165d7 | Find next file
2018-12-17T22:30:48.514979629Z 79 PC: 165d7 | Find next file
2018-12-17T22:30:48.517382177Z 79 PC: 165d7 | Find next file
2018-12-17T22:30:48.520759306Z 79 PC: 165d7 | Find next file
2018-12-17T22:30:48.523652635Z 79 PC: 165d7 | Find next file
2018-12-17T22:30:48.526563612Z 79 PC: 165d7 | Find next file
2018-12-17T22:30:48.53041946Z 79 PC: 165d7 | Find next file
2018-12-17T22:30:48.533248308Z 47 PC: 16600 | Get disk transfer address
2018-12-17T22:30:48.534610568Z 26 PC: 1660f | Set disk transfer address
2018-12-17T22:30:48.537051628Z 47 PC: 14cfc | Get disk transfer address
2018-12-17T22:30:48.538670487Z 78 PC: 16617 | Find first file
2018-12-17T22:30:48.545077761Z 47 PC: 16634 | Get disk transfer address
2018-12-17T22:30:48.547045539Z 61 PC: 1664d | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:30:48.554175646Z 63 PC: 16659 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:30:48.561246706Z 66 PC: 16661 | Move file pointer
2018-12-17T22:30:48.562631883Z 62 PC: 16666 | Close file
2018-12-17T22:30:48.564622756Z 79 PC: 16617 | Find next file
2018-12-17T22:30:48.567420601Z 47 PC: 16634 | Get disk transfer address
2018-12-17T22:30:48.568867865Z 61 PC: 1664d | Open file (Filename = 'PRINT.COM')
2018-12-17T22:30:48.576152731Z 63 PC: 16659 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:30:48.582319187Z 66 PC: 16661 | Move file pointer
2018-12-17T22:30:48.583678549Z 62 PC: 16666 | Close file
2018-12-17T22:30:48.585614697Z 67 PC: 16686 | Get or set file attributes
2018-12-17T22:30:48.595634469Z 61 PC: 1668b | Open file (Filename = 'PRINT.COM')
2018-12-17T22:30:48.600966272Z 64 PC: 16697 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:30:48.602905243Z 66 PC: 1669f | Move file pointer
2018-12-17T22:30:48.60438669Z 64 PC: 16791 | Write file or device (Write 698 bytes on handle 5)
2018-12-17T22:30:48.612730322Z 87 PC: 166af | Get or set file date and time
2018-12-17T22:30:48.615176332Z 62 PC: 166b3 | Close file
2018-12-17T22:30:48.623283712Z 67 PC: 166c0 | Get or set file attributes
2018-12-17T22:30:48.634457786Z 26 PC: 16629 | Set disk transfer address
2018-12-17T22:30:48.635630012Z 26 PC: 165e7 | Set disk transfer address
2018-12-17T22:30:48.637557897Z 59 PC: 1658b | Change current directory
2018-12-17T22:30:48.639351122Z 71 PC: 16579 | Get current directory
2018-12-17T22:30:48.642165557Z 59 PC: 16581 | Change current directory
2018-12-17T22:30:48.647413439Z 47 PC: 16596 | Get disk transfer address
2018-12-17T22:30:48.653277836Z 26 PC: 165a4 | Set disk transfer address
2018-12-17T22:30:48.654619551Z 47 PC: 14cfc | Get disk transfer address
2018-12-17T22:30:48.656302214Z 47 PC: 14d69 | Get disk transfer address
2018-12-17T22:30:48.660014358Z 47 PC: 14d69 | Get disk transfer address
2018-12-17T22:30:48.662958923Z 47 PC: 14d69 | Get disk transfer address
2018-12-17T22:30:48.664405587Z 47 PC: 14d69 | Get disk transfer address
2018-12-17T22:30:48.665777024Z 78 PC: 14da6 | Find first file
2018-12-17T22:30:48.67249599Z 79 PC: 165d7 | Find next file
2018-12-17T22:30:48.675685838Z 79 PC: 165d7 | Find next file
2018-12-17T22:30:48.678492639Z 79 PC: 165d7 | Find next file
2018-12-17T22:30:48.681159342Z 79 PC: 165d7 | Find next file
2018-12-17T22:30:48.683603043Z 79 PC: 165d7 | Find next file
2018-12-17T22:30:48.686678337Z 79 PC: 165d7 | Find next file
2018-12-17T22:30:48.689939579Z 79 PC: 165d7 | Find next file
2018-12-17T22:30:48.692406241Z 79 PC: 165d7 | Find next file
2018-12-17T22:30:48.695232645Z 79 PC: 165d7 | Find next file
2018-12-17T22:30:48.697675165Z 79 PC: 165d7 | Find next file
2018-12-17T22:30:48.700499913Z 47 PC: 16600 | Get disk transfer address
2018-12-17T22:30:48.701653684Z 26 PC: 1660f | Set disk transfer address
2018-12-17T22:30:48.702894907Z 47 PC: 14cfc | Get disk transfer address
2018-12-17T22:30:48.705171173Z 78 PC: 16617 | Find first file
2018-12-17T22:30:48.71153099Z 47 PC: 16634 | Get disk transfer address
2018-12-17T22:30:48.712859785Z 61 PC: 1664d | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:30:48.720039486Z 63 PC: 16659 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:30:48.722414455Z 66 PC: 16661 | Move file pointer
2018-12-17T22:30:48.724475611Z 62 PC: 16666 | Close file
2018-12-17T22:30:48.726470869Z 79 PC: 16617 | Find next file
2018-12-17T22:30:48.729007092Z 47 PC: 16634 | Get disk transfer address
2018-12-17T22:30:48.731033485Z 61 PC: 1664d | Open file (Filename = 'PRINT.COM')
2018-12-17T22:30:48.737445067Z 63 PC: 16659 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:30:48.74364682Z 66 PC: 16661 | Move file pointer
2018-12-17T22:30:48.745527021Z 62 PC: 16666 | Close file
2018-12-17T22:30:48.747604072Z 79 PC: 16617 | Find next file
2018-12-17T22:30:48.750783937Z 47 PC: 16634 | Get disk transfer address
2018-12-17T22:30:48.752608777Z 61 PC: 1664d | Open file (Filename = 'HELLO.COM')
2018-12-17T22:30:48.759849907Z 63 PC: 16659 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:30:48.766490857Z 66 PC: 16661 | Move file pointer
2018-12-17T22:30:48.767787381Z 62 PC: 16666 | Close file
2018-12-17T22:30:48.769678032Z 67 PC: 16686 | Get or set file attributes
2018-12-17T22:30:48.780006532Z 61 PC: 1668b | Open file (Filename = 'HELLO.COM')
2018-12-17T22:30:48.78664766Z 64 PC: 16697 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:30:48.790121294Z 66 PC: 1669f | Move file pointer
2018-12-17T22:30:48.792062499Z 64 PC: 16791 | Write file or device (Write 698 bytes on handle 5)
2018-12-17T22:30:48.800100234Z 87 PC: 166af | Get or set file date and time
2018-12-17T22:30:48.801622432Z 62 PC: 166b3 | Close file
2018-12-17T22:30:48.809264969Z 67 PC: 166c0 | Get or set file attributes
2018-12-17T22:30:48.81941034Z 26 PC: 16629 | Set disk transfer address
2018-12-17T22:30:48.82116061Z 26 PC: 165e7 | Set disk transfer address
2018-12-17T22:30:48.822601587Z 59 PC: 1658b | Change current directory
2018-12-17T22:30:48.825360716Z 42 PC: 166d6 | Get date 0x166d6: cwde
0x166d7: ret
0x166d8: sub ch, byte ptr [0x5845]
0x166dc: inc bp
0x166dd: add byte ptr [bp + di + 0x48], bl
0x166e0: push ax
0x166e1: imul bx, word ptr [di], 0x6f59
0x166e6: jne 0x1675a
0x166e8: and byte ptr [bp + di + 0x79], dh
0x166eb: jae 0x16761
0x166ed: insw word ptr es:[di], dx
0x166ef: and byte ptr [bx + si + 0x61], ch
0x166f2: jae 0x16714
0x166f4: bound sp, dword ptr [di + 0x65]
0x166f7: outsb dx, byte ptr [si]
0x166f8: and byte ptr [bx + di + 0x6e], ch
0x166fb: arpl word ptr gs:[si + 0x65], si
0x16700: and byte ptr fs:[bp + di + 0x6f], ah
0x16704: jne 0x16778
0x16706: je 0x1676d
2018-12-17T22:30:48.829835791Z 26 PC: 16554 | Set disk transfer address
2018-12-17T22:30:48.833285677Z 65 PC: 14ca7 | Delete file (Filename = '������_��@')
2018-12-17T22:30:48.844349868Z 77 PC: 1505a | Get program return code
2018-12-17T22:30:48.846158635Z 61 PC: 14b67 | Open file (Filename = '[<�{')
2018-12-17T22:30:48.852934814Z 66 PC: 14b8a | Move file pointer
2018-12-17T22:30:48.854141647Z 60 PC: 14b99 | Create or truncate file
2018-12-17T22:30:48.865395105Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:48.873045466Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:48.88067035Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:48.88914481Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:48.897079965Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:48.904680438Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:48.911868848Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:48.916481764Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:48.921787514Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:48.926418307Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:48.932801738Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:48.938603208Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:48.946609471Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:48.955671578Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:48.962791653Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:48.971314998Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:48.979527571Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:48.987143256Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:48.996090448Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.003649513Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.011614218Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.020162122Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.028073719Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.036308564Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.044447394Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.052142918Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.06171317Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.069026724Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.078188222Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.085606737Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.093315653Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.101673094Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.109949757Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.118187351Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.12587118Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.133079937Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.142464689Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.150033676Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.16296747Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.171153874Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.178782155Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.186943587Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.194672823Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.202311796Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.209910276Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.216965557Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.22500563Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.232252685Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.239749753Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.246921567Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.254470397Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.26251954Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.270103761Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.277098269Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.28506337Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.2921742Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.30029939Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.307651606Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.315216945Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.322980353Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.330754288Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.338793708Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.343893596Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.348532843Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.354326424Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.361639939Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.369848991Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.376978675Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.385011153Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.392568792Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.400099938Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.408137352Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.415886367Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.423338763Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.431750269Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.438497467Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.447401976Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.455134801Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.463043564Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.471099433Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.479794266Z 63 PC: 14bef | Read file or device (Read 479 bytes on handle 5)
2018-12-17T22:30:49.486561649Z 64 PC: 14bff | Write file or device (Write 479 bytes on handle 6)
2018-12-17T22:30:49.490481814Z 62 PC: 14c11 | Close file
2018-12-17T22:30:49.49214335Z 62 PC: 14c23 | Close file
2018-12-17T22:30:49.500608157Z 75 PC: 14df0 | Execute program
2018-12-17T22:30:49.54246123Z 48 PC: 164cc | Get DOS version
2018-12-17T22:30:49.543752448Z 53 PC: 16631 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:30:49.545363247Z 53 PC: 1663e | Get interrupt vector (Interrupt = '4' AKA 'Auxiliary output')
2018-12-17T22:30:49.546453459Z 53 PC: 1664b | Get interrupt vector (Interrupt = '5' AKA 'Printer output')
2018-12-17T22:30:49.548296919Z 53 PC: 16658 | Get interrupt vector (Interrupt = '6' AKA 'Direct console I/O')
2018-12-17T22:30:49.550008786Z 37 PC: 1666c | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:30:49.551722334Z 74 PC: 16559 | Reallocate memory
2018-12-17T22:30:49.554621434Z 68 PC: 16fd3 | I/O control for devices (Set for = '')
2018-12-17T22:30:49.556681471Z 74 PC: 18c25 | Reallocate memory
2018-12-17T22:30:49.559366735Z 68 PC: 16fd3 | I/O control for devices (Set for = 'Borland C++ - Copyright 1991 Borland Intl.')
2018-12-17T22:30:49.562197304Z 53 PC: 1b901 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:30:49.563382327Z 53 PC: 1b901 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:30:49.56488045Z 53 PC: 1b901 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:30:49.565917855Z 53 PC: 1b901 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:30:49.567648718Z 53 PC: 1b901 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:30:49.568807553Z 53 PC: 1b901 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:30:49.569880703Z 53 PC: 1b901 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:30:49.571371146Z 53 PC: 1b901 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:30:49.57239866Z 53 PC: 1b901 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:30:49.574177403Z 53 PC: 1b901 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:30:49.575270659Z 53 PC: 1b901 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:30:49.5763528Z 53 PC: 1b911 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:30:49.578609506Z 53 PC: 1b91e | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:30:49.580467949Z 37 PC: 1ba21 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:30:49.582354484Z 37 PC: 1ba21 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:30:49.583727808Z 37 PC: 1ba21 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:30:49.585163283Z 37 PC: 1ba21 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:30:49.58630371Z 37 PC: 1ba21 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:30:49.58723755Z 37 PC: 1ba21 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:30:49.588687131Z 37 PC: 1ba21 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:30:49.590257613Z 37 PC: 1ba21 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:30:49.591292786Z 37 PC: 1ba21 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:30:49.592833573Z 37 PC: 1ba21 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:30:49.593995353Z 37 PC: 1ba2c | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:30:49.59562193Z 37 PC: 1ba36 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:30:49.597185049Z 25 PC: 16a1e | Get default drive
2018-12-17T22:30:49.598776234Z 25 PC: 16a1e | Get default drive
2018-12-17T22:30:49.600337117Z 71 PC: 16ca7 | Get current directory
2018-12-17T22:30:49.605036704Z 67 PC: 18cea | Get or set file attributes
2018-12-17T22:30:49.611622488Z 61 PC: 14b67 | Open file (Filename = '�Q��Q��Q��Q�Q'�Q7�QE�QV�Qg�Qy�Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q0')
2018-12-17T22:30:49.617886354Z 66 PC: 14b8a | Move file pointer
2018-12-17T22:30:49.619026277Z 60 PC: 14b99 | Create or truncate file
2018-12-17T22:30:49.631817845Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.639459503Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.648997743Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.656915613Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.664549139Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.672532337Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.680707188Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.688765514Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.696470779Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.703732021Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.713189798Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.720898639Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.729269954Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.737749051Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.745726488Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.753920064Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.761613076Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.768817501Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.776974195Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.784175013Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.792520603Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.79972847Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.807463966Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.814547253Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.822201317Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.829787889Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.83778141Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.845218627Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.852832322Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.860097251Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.868262042Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.872883947Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.880656503Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.894887453Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.900168409Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.907672327Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.915342788Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.922864373Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.930501382Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.937897821Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.945596685Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.952689548Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.963497285Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.970667977Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.978442986Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:49.985765146Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:49.993472102Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.000943253Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.009039828Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.017337344Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.026221855Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.031253206Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.037388134Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.045043129Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.053233829Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.06039572Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.068617988Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.076055456Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.084122138Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.091689548Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.099426664Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.10810126Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.115777624Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.123272866Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.131282942Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.138699248Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.147618987Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.154826139Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.163329919Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.170617677Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.178631457Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.18704541Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.194552078Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.202453462Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.210153137Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.218079338Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.225754705Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.232916359Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.241907372Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.249449274Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.257536774Z 63 PC: 14bef | Read file or device (Read 479 bytes on handle 5)
2018-12-17T22:30:50.261292451Z 64 PC: 14bff | Write file or device (Write 479 bytes on handle 6)
2018-12-17T22:30:50.26492105Z 62 PC: 14c11 | Close file
2018-12-17T22:30:50.267868387Z 62 PC: 14c23 | Close file
2018-12-17T22:30:50.27613127Z 61 PC: 14c34 | Open file (Filename = 'o many open files')
2018-12-17T22:30:50.28385656Z 68 PC: 1861a | I/O control for devices (Set for = '')
2018-12-17T22:30:50.286133443Z 68 PC: 16fd3 | I/O control for devices (Set for = '')
2018-12-17T22:30:50.288549662Z 74 PC: 18c25 | Reallocate memory
2018-12-17T22:30:50.291541932Z 63 PC: 17231 | Read file or device (Read 512 bytes on handle 5)
2018-12-17T22:30:50.299110402Z 74 PC: 18c25 | Reallocate memory
2018-12-17T22:30:50.301576371Z 62 PC: 14c97 | Close file
2018-12-17T22:30:50.303333615Z 65 PC: 14ca7 | Delete file (Filename = 'o many open files')
2018-12-17T22:30:50.315718577Z 64 PC: 1adac | Write file or device (Write 72 bytes on handle 2)
2018-12-17T22:30:50.325013024Z 67 PC: 18cea | Get or set file attributes
2018-12-17T22:30:50.331332141Z 61 PC: 14b67 | Open file (Filename = '�Q��Q��Q��Q�Q'�Q7�QE�QV�Qg�Qy�Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q0')
2018-12-17T22:30:50.340535181Z 66 PC: 14b8a | Move file pointer
2018-12-17T22:30:50.341848244Z 60 PC: 14b99 | Create or truncate file
2018-12-17T22:30:50.353498009Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.361287715Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.369401869Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.377794082Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.385378237Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.392742723Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.401163769Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.409024927Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.417822032Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.425079069Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.433437851Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.44150486Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.449385061Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.456991342Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.464641693Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.473003823Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.480952586Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.488607271Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.496198615Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.504178821Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.512083536Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.520468215Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.5286963Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.536621007Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.545192763Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.552453018Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.561816402Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.581098035Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.589236378Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.597968716Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.609261255Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.616925279Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.624363674Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.632255016Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.6401068Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.651826129Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.663334047Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.671250606Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.68040271Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.688081687Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.696306028Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.703306904Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.713389825Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.71834909Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.723865215Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.729034992Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.734278882Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.740080517Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.747768843Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.755287082Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.762865311Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.770406235Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.778607282Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.785952645Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.794891677Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.802433904Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.811155939Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.818747352Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.827208073Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.835040772Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.843020405Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.850278715Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.858969619Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.867661174Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.875394822Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.883549783Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.89119327Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.898740178Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.906716976Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.914245793Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.923849053Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.931029677Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.939646303Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.947241067Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.957077905Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.965572582Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.9735695Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.981870743Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:50.991701346Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:50.999690655Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:51.00749699Z 63 PC: 14bef | Read file or device (Read 479 bytes on handle 5)
2018-12-17T22:30:51.011540901Z 64 PC: 14bff | Write file or device (Write 479 bytes on handle 6)
2018-12-17T22:30:51.015268603Z 62 PC: 14c11 | Close file
2018-12-17T22:30:51.017477091Z 62 PC: 14c23 | Close file
2018-12-17T22:30:51.027063261Z 61 PC: 14c34 | Open file (Filename = 'o many open files')
2018-12-17T22:30:51.03405496Z 68 PC: 1861a | I/O control for devices (Set for = '')
2018-12-17T22:30:51.036944009Z 68 PC: 16fd3 | I/O control for devices (Set for = '')
2018-12-17T22:30:51.040035618Z 63 PC: 17231 | Read file or device (Read 16384 bytes on handle 5)
2018-12-17T22:30:51.049486485Z 63 PC: 17231 | Read file or device (Read 16384 bytes on handle 5)
2018-12-17T22:30:51.055727277Z 63 PC: 17231 | Read file or device (Read 16384 bytes on handle 5)
2018-12-17T22:30:51.061178085Z 63 PC: 17231 | Read file or device (Read 16384 bytes on handle 5)
2018-12-17T22:30:51.066831007Z 63 PC: 17231 | Read file or device (Read 16384 bytes on handle 5)
2018-12-17T22:30:51.071803556Z 63 PC: 17231 | Read file or device (Read 16384 bytes on handle 5)
2018-12-17T22:30:51.077819288Z 63 PC: 17231 | Read file or device (Read 16384 bytes on handle 5)
2018-12-17T22:30:51.082915953Z 63 PC: 17231 | Read file or device (Read 16384 bytes on handle 5)
2018-12-17T22:30:51.088611435Z 63 PC: 17231 | Read file or device (Read 16384 bytes on handle 5)
2018-12-17T22:30:51.093881524Z 63 PC: 17231 | Read file or device (Read 16384 bytes on handle 5)
2018-12-17T22:30:51.099718492Z 63 PC: 17231 | Read file or device (Read 16384 bytes on handle 5)
2018-12-17T22:30:51.102266738Z 63 PC: 17231 | Read file or device (Read 16384 bytes on handle 5)
2018-12-17T22:30:51.104106399Z 62 PC: 14c97 | Close file
2018-12-17T22:30:51.106061687Z 65 PC: 14ca7 | Delete file (Filename = 'o many open files')
2018-12-17T22:30:51.114176451Z 67 PC: 18cea | Get or set file attributes
2018-12-17T22:30:51.121604603Z 61 PC: 14b67 | Open file (Filename = '�Q��Q��Q��Q�Q'�Q7�QE�QV�Qg�Qy�Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q��Q0')
2018-12-17T22:30:51.128590266Z 66 PC: 14b8a | Move file pointer
2018-12-17T22:30:51.130367299Z 60 PC: 14b99 | Create or truncate file
2018-12-17T22:30:51.141738408Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:51.147015468Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:51.153829695Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:51.159063448Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:51.165310079Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:51.171032683Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:51.179798269Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:51.184753116Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:51.190058649Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:51.198480485Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:51.206810709Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:51.215268237Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:51.223063826Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:51.230954345Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:51.238765501Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:51.2470078Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:51.255180828Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:51.262569398Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:51.27091783Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:51.27832846Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:51.287074061Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:51.294690262Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:51.302457146Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:51.308499888Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:51.31378901Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:51.319898316Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:51.328113638Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:51.337061337Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:51.344706097Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:51.353306721Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:51.360948583Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:51.369617483Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:51.377818493Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:51.386042853Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:51.394414422Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:51.402026038Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:51.40810019Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:51.415910789Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:51.424183532Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:51.432562425Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:51.440343481Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:51.448999773Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:51.456611108Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:51.464875784Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:51.472593204Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:51.480757784Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:51.488387226Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:51.496566799Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:51.504456203Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:51.512045619Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:51.520382241Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:51.528082925Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:51.536283406Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:51.544200321Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:51.554083424Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:51.562005792Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:51.570293365Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:51.57857959Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:51.586786282Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:51.59503154Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:51.603343263Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:51.612580974Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:51.620120147Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:51.629064675Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:51.636829005Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:51.646111194Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:51.654251607Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:51.663056805Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:51.671547354Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:51.680061054Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:51.689431436Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:51.697656115Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:51.706953036Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:51.71491974Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:51.724168721Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:51.733982825Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:51.7456103Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:51.75430182Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:51.762535152Z 63 PC: 14bc0 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:30:51.771453284Z 64 PC: 14bd2 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:30:51.779683296Z 63 PC: 14bef | Read file or device (Read 479 bytes on handle 5)
2018-12-17T22:30:51.784230571Z 64 PC: 14bff | Write file or device (Write 479 bytes on handle 6)
2018-12-17T22:30:51.788376678Z 62 PC: 14c11 | Close file
2018-12-17T22:30:51.791535044Z 62 PC: 14c23 | Close file
2018-12-17T22:30:51.801449993Z 61 PC: 14c34 | Open file (Filename = 'o many open files')
2018-12-17T22:30:51.809892066Z 68 PC: 1861a | I/O control for devices (Set for = '')
2018-12-17T22:30:51.812857257Z 68 PC: 16fd3 | I/O control for devices (Set for = 'G# �������~nVJ>-* �������scE ���Q< �������x��Cn]S@/����{%�j1���d�')
2018-12-17T22:30:51.815368161Z 66 PC: 170b4 | Move file pointer
2018-12-17T22:30:51.818026086Z 66 PC: 170b4 | Move file pointer
2018-12-17T22:30:51.81986938Z 66 PC: 170b4 | Move file pointer
2018-12-17T22:30:51.822434534Z 63 PC: 17231 | Read file or device (Read 512 bytes on handle 5)
2018-12-17T22:30:51.826355762Z 62 PC: 14c97 | Close file
2018-12-17T22:30:51.8289074Z 65 PC: 14ca7 | Delete file (Filename = 'o many open files')
2018-12-17T22:30:51.841717601Z 37 PC: 2d898 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:30:51.843506258Z 44 PC: 169fc | Get time 0x169fc: les bx, ptr [bp + 6]
0x169ff: mov byte ptr es:[bx], ch
0x16a02: mov byte ptr es:[bx + 1], cl
0x16a06: mov byte ptr es:[bx + 2], dh
0x16a0a: mov byte ptr es:[bx + 3], dl
0x16a0e: pop ds
0x16a0f: pop bp
0x16a10: retf
0x16a11: push bp
0x16a12: mov bp, sp
0x16a14: push ds
0x16a15: mov ax, 0x51f9
0x16a18: mov ds, ax
0x16a1a: mov ah, 0x19
0x16a1c: int 0x21
0x16a1e: mov ah, 0
0x16a20: inc ax
0x16a21: les bx, ptr [bp + 6]
0x16a24: mov word ptr es:[bx], ax
0x16a27: pop ds
2018-12-17T22:30:51.846215899Z 42 PC: 169da | Get date 0x169da: les bx, ptr [bp + 6]
0x169dd: mov byte ptr es:[bx + 4], al
0x169e1: mov byte ptr es:[bx], dl
0x169e4: mov byte ptr es:[bx + 1], dh
0x169e8: mov word ptr es:[bx + 2], cx
0x169ec: pop ds
0x169ed: pop bp
0x169ee: retf
0x169ef: push bp
0x169f0: mov bp, sp
0x169f2: push ds
0x169f3: mov ax, 0x51f9
0x169f6: mov ds, ax
0x169f8: mov ah, 0x2c
0x169fa: int 0x21
0x169fc: les bx, ptr [bp + 6]
0x169ff: mov byte ptr es:[bx], ch
0x16a02: mov byte ptr es:[bx + 1], cl
0x16a06: mov byte ptr es:[bx + 2], dh
0x16a0a: mov byte ptr es:[bx + 3], dl
2018-12-17T22:30:51.849702507Z 64 PC: 1adac | Write file or device (Write 57 bytes on handle 1)
2018-12-17T22:30:51.857029071Z 64 PC: 1adac | Write file or device (Write 81 bytes on handle 1)
2018-12-17T22:30:51.863627079Z 64 PC: 1adac | Write file or device (Write 33 bytes on handle 1)
2018-12-17T22:30:51.870064065Z 64 PC: 1adac | Write file or device (Write 32 bytes on handle 1)
2018-12-17T22:30:51.878198582Z 64 PC: 1adac | Write file or device (Write 82 bytes on handle 1)
2018-12-17T22:30:51.88654372Z 64 PC: 1adac | Write file or device (Write 19 bytes on handle 1)
2018-12-17T22:30:51.893145731Z 64 PC: 1adac | Write file or device (Write 23 bytes on handle 1)
2018-12-17T22:30:51.89811937Z 7 PC: 18434 | Direct console input without echo