Sample viewer

vx.netlux.org/Virus.DOS.HLLP.Krile.4608

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:31:32.590222149Z 98 PC: 173d6 | Get current PSP
2018-12-17T22:31:32.60053126Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:32.606454097Z 65 PC: 13788 | Delete file (Filename = 'anti-vir.dat')
2018-12-17T22:31:32.612276424Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:32.619171533Z 65 PC: 13788 | Delete file (Filename = 'chklist.ms')
2018-12-17T22:31:32.624896036Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:32.635208702Z 65 PC: 13788 | Delete file (Filename = 'chklist.cps')
2018-12-17T22:31:32.646217721Z 26 PC: 12bdc | Set disk transfer address
2018-12-17T22:31:32.647450457Z 78 PC: 12bee | Find first file
2018-12-17T22:31:32.653194228Z 67 PC: 130dc | Get or set file attributes
2018-12-17T22:31:32.658731294Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:32.674747968Z 61 PC: 1322a | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:31:32.68124587Z 63 PC: 132cc | Read file or device (Read 4608 bytes on handle 5)
2018-12-17T22:31:32.687992542Z 62 PC: 13312 | Close file
2018-12-17T22:31:32.690304694Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:32.70251401Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:32.713240209Z 65 PC: 13788 | Delete file (Filename = 'anti-vir.dat')
2018-12-17T22:31:32.719206946Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:32.724757853Z 65 PC: 13788 | Delete file (Filename = 'chklist.ms')
2018-12-17T22:31:32.730335369Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:32.736776311Z 65 PC: 13788 | Delete file (Filename = 'chklist.cps')
2018-12-17T22:31:32.747217918Z 47 PC: 17215 | Get disk transfer address
2018-12-17T22:31:32.748201989Z 26 PC: 17220 | Set disk transfer address
2018-12-17T22:31:32.749952091Z 78 PC: 1722c | Find first file
2018-12-17T22:31:32.76034815Z 26 PC: 1723e | Set disk transfer address
2018-12-17T22:31:32.762662815Z 26 PC: 135cd | Set disk transfer address
2018-12-17T22:31:32.764219963Z 78 PC: 135df | Find first file
2018-12-17T22:31:32.77493519Z 67 PC: 130dc | Get or set file attributes
2018-12-17T22:31:32.778751559Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:32.78884835Z 61 PC: 1322a | Open file (Filename = 'TEST.EXE')
2018-12-17T22:31:32.795739422Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:32.797800122Z 63 PC: 132cc | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:31:32.804730414Z 62 PC: 13312 | Close file
2018-12-17T22:31:32.807428716Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:32.817762304Z 47 PC: 17252 | Get disk transfer address
2018-12-17T22:31:32.819102639Z 26 PC: 1725d | Set disk transfer address
2018-12-17T22:31:32.820850654Z 79 PC: 17261 | Find next file
2018-12-17T22:31:32.823419016Z 26 PC: 17271 | Set disk transfer address
2018-12-17T22:31:32.825148237Z 47 PC: 17215 | Get disk transfer address
2018-12-17T22:31:32.82777289Z 26 PC: 17220 | Set disk transfer address
2018-12-17T22:31:32.828806674Z 78 PC: 1722c | Find first file
2018-12-17T22:31:32.840141092Z 26 PC: 1723e | Set disk transfer address
2018-12-17T22:31:32.84308263Z 26 PC: 135cd | Set disk transfer address
2018-12-17T22:31:32.844404117Z 78 PC: 135df | Find first file
2018-12-17T22:31:32.850567042Z 47 PC: 17252 | Get disk transfer address
2018-12-17T22:31:32.852830824Z 26 PC: 1725d | Set disk transfer address
2018-12-17T22:31:32.854485068Z 79 PC: 17261 | Find next file
2018-12-17T22:31:32.857262833Z 26 PC: 17271 | Set disk transfer address
2018-12-17T22:31:32.860150405Z 26 PC: 135cd | Set disk transfer address
2018-12-17T22:31:32.861271453Z 78 PC: 135df | Find first file
2018-12-17T22:31:32.867184864Z 47 PC: 17252 | Get disk transfer address
2018-12-17T22:31:32.868741136Z 26 PC: 1725d | Set disk transfer address
2018-12-17T22:31:32.869727412Z 79 PC: 17261 | Find next file
2018-12-17T22:31:32.872171425Z 26 PC: 17271 | Set disk transfer address
2018-12-17T22:31:32.874518404Z 26 PC: 135cd | Set disk transfer address
2018-12-17T22:31:32.875647239Z 78 PC: 135df | Find first file
2018-12-17T22:31:32.881966259Z 47 PC: 17252 | Get disk transfer address
2018-12-17T22:31:32.884324797Z 26 PC: 1725d | Set disk transfer address
2018-12-17T22:31:32.88535508Z 79 PC: 17261 | Find next file
2018-12-17T22:31:32.887715211Z 26 PC: 17271 | Set disk transfer address
2018-12-17T22:31:32.889934333Z 26 PC: 135cd | Set disk transfer address
2018-12-17T22:31:32.890920582Z 78 PC: 135df | Find first file
2018-12-17T22:31:32.896764128Z 47 PC: 17252 | Get disk transfer address
2018-12-17T22:31:32.898343072Z 26 PC: 1725d | Set disk transfer address
2018-12-17T22:31:32.899356336Z 79 PC: 17261 | Find next file
2018-12-17T22:31:32.901946272Z 26 PC: 17271 | Set disk transfer address
2018-12-17T22:31:32.90422577Z 26 PC: 135cd | Set disk transfer address
2018-12-17T22:31:32.905553811Z 78 PC: 135df | Find first file
2018-12-17T22:31:32.9165643Z 47 PC: 17252 | Get disk transfer address
2018-12-17T22:31:32.917992195Z 26 PC: 1725d | Set disk transfer address
2018-12-17T22:31:32.918932843Z 79 PC: 17261 | Find next file
2018-12-17T22:31:32.921242551Z 26 PC: 17271 | Set disk transfer address
2018-12-17T22:31:32.923627714Z 26 PC: 135cd | Set disk transfer address
2018-12-17T22:31:32.924599564Z 78 PC: 135df | Find first file
2018-12-17T22:31:32.930303269Z 47 PC: 17252 | Get disk transfer address
2018-12-17T22:31:32.931475554Z 26 PC: 1725d | Set disk transfer address
2018-12-17T22:31:32.93265465Z 79 PC: 17261 | Find next file
2018-12-17T22:31:32.934970366Z 26 PC: 17271 | Set disk transfer address
2018-12-17T22:31:32.937078032Z 26 PC: 135cd | Set disk transfer address
2018-12-17T22:31:32.938136684Z 78 PC: 135df | Find first file
2018-12-17T22:31:32.943942472Z 47 PC: 17252 | Get disk transfer address
2018-12-17T22:31:32.94578868Z 26 PC: 1725d | Set disk transfer address
2018-12-17T22:31:32.946856042Z 79 PC: 17261 | Find next file
2018-12-17T22:31:32.949131712Z 26 PC: 17271 | Set disk transfer address
2018-12-17T22:31:32.950751447Z 98 PC: 1740d | Get current PSP
2018-12-17T22:31:32.952957965Z 98 PC: 1740d | Get current PSP
2018-12-17T22:31:32.954594806Z 98 PC: 1740d | Get current PSP
2018-12-17T22:31:32.956382341Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:32.96648861Z 65 PC: 13788 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:31:32.9728733Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:32.979673072Z 65 PC: 13788 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:31:32.986392821Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:32.992267871Z 65 PC: 13788 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:31:32.998442141Z 47 PC: 17215 | Get disk transfer address
2018-12-17T22:31:32.999868515Z 26 PC: 17220 | Set disk transfer address
2018-12-17T22:31:33.000740128Z 78 PC: 1722c | Find first file
2018-12-17T22:31:33.006545912Z 26 PC: 1723e | Set disk transfer address
2018-12-17T22:31:33.00877959Z 26 PC: 135cd | Set disk transfer address
2018-12-17T22:31:33.009658991Z 78 PC: 135df | Find first file
2018-12-17T22:31:33.01556643Z 67 PC: 130dc | Get or set file attributes
2018-12-17T22:31:33.037611242Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:33.637810856Z 61 PC: 1322a | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:31:33.645751597Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:33.648231779Z 63 PC: 132cc | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:31:33.653785909Z 62 PC: 13312 | Close file
2018-12-17T22:31:33.655531444Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:33.665560321Z 26 PC: 12fc7 | Set disk transfer address
2018-12-17T22:31:33.666674602Z 78 PC: 12fd9 | Find first file
2018-12-17T22:31:33.672749344Z 67 PC: 130dc | Get or set file attributes
2018-12-17T22:31:33.679149097Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:33.689120501Z 61 PC: 1322a | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:31:33.696485032Z 87 PC: 13197 | Get or set file date and time
2018-12-17T22:31:33.698615328Z 63 PC: 132cc | Read file or device (Read 4608 bytes on handle 5)
2018-12-17T22:31:33.705147214Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:33.713437449Z 64 PC: 13276 | Write file or device (Write 4608 bytes on handle 5)
2018-12-17T22:31:33.720816845Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:33.727128142Z 64 PC: 13276 | Write file or device (Write 4608 bytes on handle 5)
2018-12-17T22:31:33.737135684Z 87 PC: 131f9 | Get or set file date and time
2018-12-17T22:31:33.739269336Z 62 PC: 13312 | Close file
2018-12-17T22:31:33.745981119Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:33.755447578Z 47 PC: 17252 | Get disk transfer address
2018-12-17T22:31:33.75699416Z 26 PC: 1725d | Set disk transfer address
2018-12-17T22:31:33.75790831Z 79 PC: 17261 | Find next file
2018-12-17T22:31:33.760653639Z 26 PC: 17271 | Set disk transfer address
2018-12-17T22:31:33.763930262Z 26 PC: 135cd | Set disk transfer address
2018-12-17T22:31:33.764923487Z 78 PC: 135df | Find first file
2018-12-17T22:31:33.771280699Z 67 PC: 130dc | Get or set file attributes
2018-12-17T22:31:33.777884126Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:33.787844412Z 61 PC: 1322a | Open file (Filename = 'C:\DOS\CHKDSK.EXE')
2018-12-17T22:31:33.79499164Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:33.797395327Z 63 PC: 132cc | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:31:33.802839971Z 62 PC: 13312 | Close file
2018-12-17T22:31:33.804869529Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:33.815246666Z 26 PC: 12fc7 | Set disk transfer address
2018-12-17T22:31:33.816562052Z 78 PC: 12fd9 | Find first file
2018-12-17T22:31:33.822899771Z 67 PC: 130dc | Get or set file attributes
2018-12-17T22:31:33.830819387Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:33.841078395Z 61 PC: 1322a | Open file (Filename = 'C:\DOS\CHKDSK.EXE')
2018-12-17T22:31:33.847631418Z 87 PC: 13197 | Get or set file date and time
2018-12-17T22:31:33.851069825Z 63 PC: 132cc | Read file or device (Read 4608 bytes on handle 5)
2018-12-17T22:31:33.857725493Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:33.859593367Z 64 PC: 13276 | Write file or device (Write 4608 bytes on handle 5)
2018-12-17T22:31:33.866934446Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:33.873526451Z 64 PC: 13276 | Write file or device (Write 4608 bytes on handle 5)
2018-12-17T22:31:33.901724199Z 87 PC: 131f9 | Get or set file date and time
2018-12-17T22:31:33.905094211Z 62 PC: 13312 | Close file
2018-12-17T22:31:33.912439756Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:33.92194713Z 47 PC: 17252 | Get disk transfer address
2018-12-17T22:31:33.923846148Z 26 PC: 1725d | Set disk transfer address
2018-12-17T22:31:33.924858951Z 79 PC: 17261 | Find next file
2018-12-17T22:31:33.92784037Z 26 PC: 17271 | Set disk transfer address
2018-12-17T22:31:33.930641877Z 26 PC: 135cd | Set disk transfer address
2018-12-17T22:31:33.931663737Z 78 PC: 135df | Find first file
2018-12-17T22:31:33.938438674Z 67 PC: 130dc | Get or set file attributes
2018-12-17T22:31:33.945228719Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:33.955921723Z 61 PC: 1322a | Open file (Filename = 'C:\DOS\DEBUG.EXE')
2018-12-17T22:31:33.963887622Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:33.96647226Z 63 PC: 132cc | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:31:33.972032201Z 62 PC: 13312 | Close file
2018-12-17T22:31:33.974842262Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:33.986700809Z 26 PC: 12fc7 | Set disk transfer address
2018-12-17T22:31:33.987798503Z 78 PC: 12fd9 | Find first file
2018-12-17T22:31:33.993848394Z 67 PC: 130dc | Get or set file attributes
2018-12-17T22:31:34.000091812Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:34.009695894Z 61 PC: 1322a | Open file (Filename = 'C:\DOS\DEBUG.EXE')
2018-12-17T22:31:34.016456498Z 87 PC: 13197 | Get or set file date and time
2018-12-17T22:31:34.018538053Z 63 PC: 132cc | Read file or device (Read 4608 bytes on handle 5)
2018-12-17T22:31:34.02610042Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:34.028040797Z 64 PC: 13276 | Write file or device (Write 4608 bytes on handle 5)
2018-12-17T22:31:34.035702684Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:34.042304166Z 64 PC: 13276 | Write file or device (Write 4608 bytes on handle 5)
2018-12-17T22:31:34.050993083Z 87 PC: 131f9 | Get or set file date and time
2018-12-17T22:31:34.053418938Z 62 PC: 13312 | Close file
2018-12-17T22:31:34.060230158Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:34.069796821Z 47 PC: 17252 | Get disk transfer address
2018-12-17T22:31:34.072008538Z 26 PC: 1725d | Set disk transfer address
2018-12-17T22:31:34.073594817Z 79 PC: 17261 | Find next file
2018-12-17T22:31:34.077067129Z 26 PC: 17271 | Set disk transfer address
2018-12-17T22:31:34.080387665Z 26 PC: 135cd | Set disk transfer address
2018-12-17T22:31:34.081737138Z 78 PC: 135df | Find first file
2018-12-17T22:31:34.088182533Z 67 PC: 130dc | Get or set file attributes
2018-12-17T22:31:34.095922931Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:34.105964054Z 61 PC: 1322a | Open file (Filename = 'C:\DOS\EXPAND.EXE')
2018-12-17T22:31:34.113500154Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:34.11664481Z 63 PC: 132cc | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:31:34.123819782Z 62 PC: 13312 | Close file
2018-12-17T22:31:34.126512834Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:34.137772716Z 26 PC: 12fc7 | Set disk transfer address
2018-12-17T22:31:34.138939526Z 78 PC: 12fd9 | Find first file
2018-12-17T22:31:34.145945238Z 67 PC: 130dc | Get or set file attributes
2018-12-17T22:31:34.15298865Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:34.165279946Z 61 PC: 1322a | Open file (Filename = 'C:\DOS\EXPAND.EXE')
2018-12-17T22:31:34.173694818Z 87 PC: 13197 | Get or set file date and time
2018-12-17T22:31:34.176407251Z 63 PC: 132cc | Read file or device (Read 4608 bytes on handle 5)
2018-12-17T22:31:34.185939899Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:34.188281081Z 64 PC: 13276 | Write file or device (Write 4608 bytes on handle 5)
2018-12-17T22:31:34.1968546Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:34.203781644Z 64 PC: 13276 | Write file or device (Write 4608 bytes on handle 5)
2018-12-17T22:31:34.212254839Z 87 PC: 131f9 | Get or set file date and time
2018-12-17T22:31:34.214953877Z 62 PC: 13312 | Close file
2018-12-17T22:31:34.221745838Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:34.232208282Z 47 PC: 17252 | Get disk transfer address
2018-12-17T22:31:34.233933638Z 26 PC: 1725d | Set disk transfer address
2018-12-17T22:31:34.235040849Z 79 PC: 17261 | Find next file
2018-12-17T22:31:34.238035946Z 26 PC: 17271 | Set disk transfer address
2018-12-17T22:31:34.240746087Z 26 PC: 135cd | Set disk transfer address
2018-12-17T22:31:34.241840856Z 78 PC: 135df | Find first file
2018-12-17T22:31:34.248166942Z 67 PC: 130dc | Get or set file attributes
2018-12-17T22:31:34.254688345Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:34.264440981Z 61 PC: 1322a | Open file (Filename = 'C:\DOS\FDISK.EXE')
2018-12-17T22:31:34.271961086Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:34.274778081Z 63 PC: 132cc | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:31:34.280611577Z 62 PC: 13312 | Close file
2018-12-17T22:31:34.282719665Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:34.598684126Z 26 PC: 12fc7 | Set disk transfer address
2018-12-17T22:31:34.60082567Z 78 PC: 12fd9 | Find first file
2018-12-17T22:31:34.607248706Z 67 PC: 130dc | Get or set file attributes
2018-12-17T22:31:34.614150148Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:34.623876425Z 61 PC: 1322a | Open file (Filename = 'C:\DOS\FDISK.EXE')
2018-12-17T22:31:34.630955227Z 87 PC: 13197 | Get or set file date and time
2018-12-17T22:31:34.633297723Z 63 PC: 132cc | Read file or device (Read 4608 bytes on handle 5)
2018-12-17T22:31:34.639764549Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:34.64190756Z 64 PC: 13276 | Write file or device (Write 4608 bytes on handle 5)
2018-12-17T22:31:34.65037075Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:34.657251207Z 64 PC: 13276 | Write file or device (Write 4608 bytes on handle 5)
2018-12-17T22:31:34.666889356Z 87 PC: 131f9 | Get or set file date and time
2018-12-17T22:31:34.668863393Z 62 PC: 13312 | Close file
2018-12-17T22:31:34.675513657Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:34.685178579Z 47 PC: 17252 | Get disk transfer address
2018-12-17T22:31:34.686973414Z 26 PC: 1725d | Set disk transfer address
2018-12-17T22:31:34.687931108Z 79 PC: 17261 | Find next file
2018-12-17T22:31:34.690630198Z 26 PC: 17271 | Set disk transfer address
2018-12-17T22:31:34.693033812Z 26 PC: 135cd | Set disk transfer address
2018-12-17T22:31:34.69409976Z 78 PC: 135df | Find first file
2018-12-17T22:31:34.69851227Z 67 PC: 130dc | Get or set file attributes
2018-12-17T22:31:34.702845793Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:34.710695703Z 61 PC: 1322a | Open file (Filename = 'C:\DOS\MEM.EXE')
2018-12-17T22:31:34.717545401Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:34.719589372Z 63 PC: 132cc | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:31:34.72504715Z 62 PC: 13312 | Close file
2018-12-17T22:31:34.728184218Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:34.737680952Z 26 PC: 12fc7 | Set disk transfer address
2018-12-17T22:31:34.738925049Z 78 PC: 12fd9 | Find first file
2018-12-17T22:31:34.745908383Z 67 PC: 130dc | Get or set file attributes
2018-12-17T22:31:34.752035567Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:34.762124863Z 61 PC: 1322a | Open file (Filename = 'C:\DOS\MEM.EXE')
2018-12-17T22:31:34.770133651Z 87 PC: 13197 | Get or set file date and time
2018-12-17T22:31:34.77162111Z 63 PC: 132cc | Read file or device (Read 4608 bytes on handle 5)
2018-12-17T22:31:34.778094109Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:34.780593861Z 64 PC: 13276 | Write file or device (Write 4608 bytes on handle 5)
2018-12-17T22:31:34.787897072Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:34.796071867Z 64 PC: 13276 | Write file or device (Write 4608 bytes on handle 5)
2018-12-17T22:31:34.806023435Z 87 PC: 131f9 | Get or set file date and time
2018-12-17T22:31:34.807686269Z 62 PC: 13312 | Close file
2018-12-17T22:31:34.814586913Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:34.82514415Z 47 PC: 17252 | Get disk transfer address
2018-12-17T22:31:34.826461268Z 26 PC: 1725d | Set disk transfer address
2018-12-17T22:31:34.827679066Z 79 PC: 17261 | Find next file
2018-12-17T22:31:34.832833523Z 26 PC: 17271 | Set disk transfer address
2018-12-17T22:31:34.835100274Z 26 PC: 135cd | Set disk transfer address
2018-12-17T22:31:34.836332087Z 78 PC: 135df | Find first file
2018-12-17T22:31:34.845185694Z 67 PC: 130dc | Get or set file attributes
2018-12-17T22:31:34.851797098Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:34.862360264Z 61 PC: 1322a | Open file (Filename = 'C:\DOS\NLSFUNC.EXE')
2018-12-17T22:31:34.870154972Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:34.871782465Z 63 PC: 132cc | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:31:34.877023406Z 62 PC: 13312 | Close file
2018-12-17T22:31:34.879122616Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:34.889040863Z 26 PC: 12fc7 | Set disk transfer address
2018-12-17T22:31:34.889964189Z 78 PC: 12fd9 | Find first file
2018-12-17T22:31:34.903764973Z 67 PC: 130dc | Get or set file attributes
2018-12-17T22:31:34.910242534Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:34.920343818Z 61 PC: 1322a | Open file (Filename = 'C:\DOS\NLSFUNC.EXE')
2018-12-17T22:31:34.928276466Z 87 PC: 13197 | Get or set file date and time
2018-12-17T22:31:34.929580399Z 63 PC: 132cc | Read file or device (Read 4608 bytes on handle 5)
2018-12-17T22:31:34.93651541Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:34.938709952Z 64 PC: 13276 | Write file or device (Write 4608 bytes on handle 5)
2018-12-17T22:31:34.945706598Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:34.952946709Z 64 PC: 13276 | Write file or device (Write 4608 bytes on handle 5)
2018-12-17T22:31:34.961698034Z 87 PC: 131f9 | Get or set file date and time
2018-12-17T22:31:34.96349159Z 62 PC: 13312 | Close file
2018-12-17T22:31:34.970909291Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:34.980463957Z 47 PC: 17252 | Get disk transfer address
2018-12-17T22:31:34.981508212Z 26 PC: 1725d | Set disk transfer address
2018-12-17T22:31:34.983364583Z 79 PC: 17261 | Find next file
2018-12-17T22:31:34.986270933Z 26 PC: 17271 | Set disk transfer address
2018-12-17T22:31:34.988981617Z 26 PC: 135cd | Set disk transfer address
2018-12-17T22:31:34.991029303Z 78 PC: 135df | Find first file
2018-12-17T22:31:34.997371674Z 67 PC: 130dc | Get or set file attributes
2018-12-17T22:31:35.003171062Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:35.013623313Z 61 PC: 1322a | Open file (Filename = 'C:\DOS\QBASIC.EXE')
2018-12-17T22:31:35.02061037Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:35.022206309Z 63 PC: 132cc | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:31:35.02580116Z 62 PC: 13312 | Close file
2018-12-17T22:31:35.027082264Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:35.033582678Z 26 PC: 12fc7 | Set disk transfer address
2018-12-17T22:31:35.034746299Z 78 PC: 12fd9 | Find first file
2018-12-17T22:31:35.038865333Z 67 PC: 130dc | Get or set file attributes
2018-12-17T22:31:35.04363425Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:35.049944467Z 61 PC: 1322a | Open file (Filename = 'C:\DOS\QBASIC.EXE')
2018-12-17T22:31:35.054956775Z 87 PC: 13197 | Get or set file date and time
2018-12-17T22:31:35.056983126Z 63 PC: 132cc | Read file or device (Read 4608 bytes on handle 5)
2018-12-17T22:31:35.061850362Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:35.064095348Z 64 PC: 13276 | Write file or device (Write 4608 bytes on handle 5)
2018-12-17T22:31:35.071615717Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:35.078274586Z 64 PC: 13276 | Write file or device (Write 4608 bytes on handle 5)
2018-12-17T22:31:35.087231762Z 87 PC: 131f9 | Get or set file date and time
2018-12-17T22:31:35.089283882Z 62 PC: 13312 | Close file
2018-12-17T22:31:35.096626404Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:35.106797116Z 47 PC: 17252 | Get disk transfer address
2018-12-17T22:31:35.108275016Z 26 PC: 1725d | Set disk transfer address
2018-12-17T22:31:35.109545038Z 79 PC: 17261 | Find next file
2018-12-17T22:31:35.113326352Z 26 PC: 17271 | Set disk transfer address
2018-12-17T22:31:35.116416419Z 26 PC: 135cd | Set disk transfer address
2018-12-17T22:31:35.117684947Z 78 PC: 135df | Find first file
2018-12-17T22:31:35.125556971Z 67 PC: 130dc | Get or set file attributes
2018-12-17T22:31:35.13171758Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:35.141527271Z 61 PC: 1322a | Open file (Filename = 'C:\DOS\REPLACE.EXE')
2018-12-17T22:31:35.14888185Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:35.150774787Z 63 PC: 132cc | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:31:35.157490386Z 62 PC: 13312 | Close file
2018-12-17T22:31:35.159424265Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:35.169421309Z 26 PC: 12fc7 | Set disk transfer address
2018-12-17T22:31:35.171901196Z 78 PC: 12fd9 | Find first file
2018-12-17T22:31:35.17833688Z 67 PC: 130dc | Get or set file attributes
2018-12-17T22:31:35.184382435Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:35.195849808Z 61 PC: 1322a | Open file (Filename = 'C:\DOS\REPLACE.EXE')
2018-12-17T22:31:35.203954201Z 87 PC: 13197 | Get or set file date and time
2018-12-17T22:31:35.205897875Z 63 PC: 132cc | Read file or device (Read 4608 bytes on handle 5)
2018-12-17T22:31:35.213733537Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:35.216051636Z 64 PC: 13276 | Write file or device (Write 4608 bytes on handle 5)
2018-12-17T22:31:35.223274229Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:35.23121749Z 64 PC: 13276 | Write file or device (Write 4608 bytes on handle 5)
2018-12-17T22:31:35.239923124Z 87 PC: 131f9 | Get or set file date and time
2018-12-17T22:31:35.241718848Z 62 PC: 13312 | Close file
2018-12-17T22:31:35.249385295Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:35.25972942Z 47 PC: 17252 | Get disk transfer address
2018-12-17T22:31:35.262286544Z 26 PC: 1725d | Set disk transfer address
2018-12-17T22:31:35.2633983Z 79 PC: 17261 | Find next file
2018-12-17T22:31:35.266698433Z 26 PC: 17271 | Set disk transfer address
2018-12-17T22:31:35.269850331Z 26 PC: 135cd | Set disk transfer address
2018-12-17T22:31:35.270893097Z 78 PC: 135df | Find first file
2018-12-17T22:31:35.27720308Z 67 PC: 130dc | Get or set file attributes
2018-12-17T22:31:35.284268189Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:35.294149718Z 61 PC: 1322a | Open file (Filename = 'C:\DOS\RESTORE.EXE')
2018-12-17T22:31:35.301336846Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:35.304300082Z 63 PC: 132cc | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:31:35.310158385Z 62 PC: 13312 | Close file
2018-12-17T22:31:35.312429773Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:35.322968164Z 26 PC: 12fc7 | Set disk transfer address
2018-12-17T22:31:35.323987808Z 78 PC: 12fd9 | Find first file
2018-12-17T22:31:35.330934005Z 67 PC: 130dc | Get or set file attributes
2018-12-17T22:31:35.337679677Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:35.348052955Z 61 PC: 1322a | Open file (Filename = 'C:\DOS\RESTORE.EXE')
2018-12-17T22:31:35.355182454Z 87 PC: 13197 | Get or set file date and time
2018-12-17T22:31:35.357325569Z 63 PC: 132cc | Read file or device (Read 4608 bytes on handle 5)
2018-12-17T22:31:35.363975488Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:35.366501611Z 64 PC: 13276 | Write file or device (Write 4608 bytes on handle 5)
2018-12-17T22:31:35.373463662Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:35.380374007Z 64 PC: 13276 | Write file or device (Write 4608 bytes on handle 5)
2018-12-17T22:31:35.39149194Z 87 PC: 131f9 | Get or set file date and time
2018-12-17T22:31:35.39341643Z 62 PC: 13312 | Close file
2018-12-17T22:31:35.40017113Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:35.411717318Z 47 PC: 17252 | Get disk transfer address
2018-12-17T22:31:35.413186035Z 26 PC: 1725d | Set disk transfer address
2018-12-17T22:31:35.414604829Z 79 PC: 17261 | Find next file
2018-12-17T22:31:35.418952916Z 26 PC: 17271 | Set disk transfer address
2018-12-17T22:31:35.421185006Z 26 PC: 135cd | Set disk transfer address
2018-12-17T22:31:35.422074523Z 78 PC: 135df | Find first file
2018-12-17T22:31:35.428122207Z 67 PC: 130dc | Get or set file attributes
2018-12-17T22:31:35.434728941Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:35.445099996Z 61 PC: 1322a | Open file (Filename = 'C:\DOS\SCANDISK.EXE')
2018-12-17T22:31:35.453332385Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:35.454933649Z 63 PC: 132cc | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:31:35.462037761Z 62 PC: 13312 | Close file
2018-12-17T22:31:35.463627158Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:35.4736711Z 26 PC: 12fc7 | Set disk transfer address
2018-12-17T22:31:35.475454656Z 78 PC: 12fd9 | Find first file
2018-12-17T22:31:35.481555266Z 67 PC: 130dc | Get or set file attributes
2018-12-17T22:31:35.487344701Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:35.497088442Z 61 PC: 1322a | Open file (Filename = 'C:\DOS\SCANDISK.EXE')
2018-12-17T22:31:35.503906246Z 87 PC: 13197 | Get or set file date and time
2018-12-17T22:31:35.506145911Z 63 PC: 132cc | Read file or device (Read 4608 bytes on handle 5)
2018-12-17T22:31:35.513178861Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:35.51521073Z 64 PC: 13276 | Write file or device (Write 4608 bytes on handle 5)
2018-12-17T22:31:35.523619887Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:35.530827254Z 64 PC: 13276 | Write file or device (Write 4608 bytes on handle 5)
2018-12-17T22:31:35.539368995Z 87 PC: 131f9 | Get or set file date and time
2018-12-17T22:31:35.541507052Z 62 PC: 13312 | Close file
2018-12-17T22:31:35.548278495Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:35.554418321Z 47 PC: 17252 | Get disk transfer address
2018-12-17T22:31:35.555743139Z 26 PC: 1725d | Set disk transfer address
2018-12-17T22:31:35.556619011Z 79 PC: 17261 | Find next file
2018-12-17T22:31:35.558943508Z 26 PC: 17271 | Set disk transfer address
2018-12-17T22:31:35.560486497Z 26 PC: 135cd | Set disk transfer address
2018-12-17T22:31:35.561541851Z 78 PC: 135df | Find first file
2018-12-17T22:31:35.566119824Z 67 PC: 130dc | Get or set file attributes
2018-12-17T22:31:35.571402643Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:35.577588689Z 61 PC: 1322a | Open file (Filename = 'C:\DOS\SETUP.EXE')
2018-12-17T22:31:35.582690222Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:35.584327859Z 63 PC: 132cc | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:31:35.59023077Z 62 PC: 13312 | Close file
2018-12-17T22:31:35.592280861Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:35.601740313Z 26 PC: 12fc7 | Set disk transfer address
2018-12-17T22:31:35.603326545Z 78 PC: 12fd9 | Find first file
2018-12-17T22:31:35.607655982Z 67 PC: 130dc | Get or set file attributes
2018-12-17T22:31:35.611485992Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:35.619455608Z 61 PC: 1322a | Open file (Filename = 'C:\DOS\SETUP.EXE')
2018-12-17T22:31:35.626589261Z 87 PC: 13197 | Get or set file date and time
2018-12-17T22:31:35.628358234Z 63 PC: 132cc | Read file or device (Read 4608 bytes on handle 5)
2018-12-17T22:31:35.63625039Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:35.638171862Z 64 PC: 13276 | Write file or device (Write 4608 bytes on handle 5)
2018-12-17T22:31:35.645320776Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:35.654035527Z 64 PC: 13276 | Write file or device (Write 4608 bytes on handle 5)
2018-12-17T22:31:35.662854787Z 87 PC: 131f9 | Get or set file date and time
2018-12-17T22:31:35.664366584Z 62 PC: 13312 | Close file
2018-12-17T22:31:35.67195854Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:35.68221072Z 47 PC: 17252 | Get disk transfer address
2018-12-17T22:31:35.683553866Z 26 PC: 1725d | Set disk transfer address
2018-12-17T22:31:35.685712723Z 79 PC: 17261 | Find next file
2018-12-17T22:31:35.688692262Z 26 PC: 17271 | Set disk transfer address
2018-12-17T22:31:35.691321961Z 26 PC: 135cd | Set disk transfer address
2018-12-17T22:31:35.69272431Z 78 PC: 135df | Find first file
2018-12-17T22:31:35.699161854Z 67 PC: 130dc | Get or set file attributes
2018-12-17T22:31:35.70635293Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:35.716393315Z 61 PC: 1322a | Open file (Filename = 'C:\DOS\XCOPY.EXE')
2018-12-17T22:31:35.723887634Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:35.726046345Z 63 PC: 132cc | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:31:35.731374033Z 62 PC: 13312 | Close file
2018-12-17T22:31:35.733047857Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:35.743845717Z 26 PC: 12fc7 | Set disk transfer address
2018-12-17T22:31:35.744830892Z 78 PC: 12fd9 | Find first file
2018-12-17T22:31:35.752126042Z 67 PC: 130dc | Get or set file attributes
2018-12-17T22:31:35.758544664Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:35.76871041Z 61 PC: 1322a | Open file (Filename = 'C:\DOS\XCOPY.EXE')
2018-12-17T22:31:35.777026301Z 87 PC: 13197 | Get or set file date and time
2018-12-17T22:31:35.779032571Z 63 PC: 132cc | Read file or device (Read 4608 bytes on handle 5)
2018-12-17T22:31:35.786552738Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:35.789172715Z 64 PC: 13276 | Write file or device (Write 4608 bytes on handle 5)
2018-12-17T22:31:35.796797774Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:35.803433376Z 64 PC: 13276 | Write file or device (Write 4608 bytes on handle 5)
2018-12-17T22:31:35.816800027Z 87 PC: 131f9 | Get or set file date and time
2018-12-17T22:31:35.818261627Z 62 PC: 13312 | Close file
2018-12-17T22:31:35.825465051Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:35.836675098Z 47 PC: 17252 | Get disk transfer address
2018-12-17T22:31:35.837751101Z 26 PC: 1725d | Set disk transfer address
2018-12-17T22:31:35.838777045Z 79 PC: 17261 | Find next file
2018-12-17T22:31:35.842786744Z 26 PC: 17271 | Set disk transfer address
2018-12-17T22:31:35.845061506Z 26 PC: 135cd | Set disk transfer address
2018-12-17T22:31:35.846122096Z 78 PC: 135df | Find first file
2018-12-17T22:31:35.854319719Z 67 PC: 130dc | Get or set file attributes
2018-12-17T22:31:35.860599555Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:35.870673032Z 61 PC: 1322a | Open file (Filename = 'C:\DOS\DEFRAG.EXE')
2018-12-17T22:31:35.8790073Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:35.880954623Z 63 PC: 132cc | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:31:35.887433782Z 62 PC: 13312 | Close file
2018-12-17T22:31:35.889272286Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:35.89903152Z 26 PC: 12fc7 | Set disk transfer address
2018-12-17T22:31:35.900840391Z 78 PC: 12fd9 | Find first file
2018-12-17T22:31:35.907182585Z 67 PC: 130dc | Get or set file attributes
2018-12-17T22:31:35.913100068Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:35.923871912Z 61 PC: 1322a | Open file (Filename = 'C:\DOS\DEFRAG.EXE')
2018-12-17T22:31:35.930971847Z 87 PC: 13197 | Get or set file date and time
2018-12-17T22:31:35.932729338Z 63 PC: 132cc | Read file or device (Read 4608 bytes on handle 5)
2018-12-17T22:31:35.939868796Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:35.941809758Z 64 PC: 13276 | Write file or device (Write 4608 bytes on handle 5)
2018-12-17T22:31:35.950618413Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:35.957621091Z 64 PC: 13276 | Write file or device (Write 4608 bytes on handle 5)
2018-12-17T22:31:35.966942809Z 87 PC: 131f9 | Get or set file date and time
2018-12-17T22:31:35.969530186Z 62 PC: 13312 | Close file
2018-12-17T22:31:35.977171525Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:35.987710303Z 47 PC: 17252 | Get disk transfer address
2018-12-17T22:31:35.989754534Z 26 PC: 1725d | Set disk transfer address
2018-12-17T22:31:35.990856459Z 79 PC: 17261 | Find next file
2018-12-17T22:31:35.996877535Z 26 PC: 17271 | Set disk transfer address
2018-12-17T22:31:35.999812326Z 26 PC: 135cd | Set disk transfer address
2018-12-17T22:31:36.000937063Z 78 PC: 135df | Find first file
2018-12-17T22:31:36.008270391Z 67 PC: 130dc | Get or set file attributes
2018-12-17T22:31:36.0143245Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:36.023815289Z 61 PC: 1322a | Open file (Filename = 'C:\DOS\EMM386.EXE')
2018-12-17T22:31:36.032633538Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:36.034439237Z 63 PC: 132cc | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:31:36.03980745Z 62 PC: 13312 | Close file
2018-12-17T22:31:36.042522959Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:36.052053983Z 26 PC: 12fc7 | Set disk transfer address
2018-12-17T22:31:36.053082357Z 78 PC: 12fd9 | Find first file
2018-12-17T22:31:36.060999774Z 67 PC: 130dc | Get or set file attributes
2018-12-17T22:31:36.067112619Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:36.076765523Z 61 PC: 1322a | Open file (Filename = 'C:\DOS\EMM386.EXE')
2018-12-17T22:31:36.085061846Z 87 PC: 13197 | Get or set file date and time
2018-12-17T22:31:36.086664084Z 63 PC: 132cc | Read file or device (Read 4608 bytes on handle 5)
2018-12-17T22:31:36.093209239Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:36.096734938Z 64 PC: 13276 | Write file or device (Write 4608 bytes on handle 5)
2018-12-17T22:31:36.104044943Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:36.110882216Z 64 PC: 13276 | Write file or device (Write 4608 bytes on handle 5)
2018-12-17T22:31:36.12191347Z 87 PC: 131f9 | Get or set file date and time
2018-12-17T22:31:36.123658701Z 62 PC: 13312 | Close file
2018-12-17T22:31:36.133209372Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:36.143028881Z 47 PC: 17252 | Get disk transfer address
2018-12-17T22:31:36.144059305Z 26 PC: 1725d | Set disk transfer address
2018-12-17T22:31:36.145593546Z 79 PC: 17261 | Find next file
2018-12-17T22:31:36.148493743Z 26 PC: 17271 | Set disk transfer address
2018-12-17T22:31:36.150487715Z 26 PC: 135cd | Set disk transfer address
2018-12-17T22:31:36.152159349Z 78 PC: 135df | Find first file
2018-12-17T22:31:36.158648687Z 67 PC: 130dc | Get or set file attributes
2018-12-17T22:31:36.165142139Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:36.174782615Z 61 PC: 1322a | Open file (Filename = 'C:\DOS\MSCDEX.EXE')
2018-12-17T22:31:36.181634838Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:36.183861009Z 63 PC: 132cc | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:31:36.189832149Z 62 PC: 13312 | Close file
2018-12-17T22:31:36.191496065Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:36.20169513Z 26 PC: 12fc7 | Set disk transfer address
2018-12-17T22:31:36.203722645Z 78 PC: 12fd9 | Find first file
2018-12-17T22:31:36.211622638Z 67 PC: 130dc | Get or set file attributes
2018-12-17T22:31:36.217816493Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:36.227448679Z 61 PC: 1322a | Open file (Filename = 'C:\DOS\MSCDEX.EXE')
2018-12-17T22:31:36.235149825Z 87 PC: 13197 | Get or set file date and time
2018-12-17T22:31:36.237964253Z 63 PC: 132cc | Read file or device (Read 4608 bytes on handle 5)
2018-12-17T22:31:36.244767076Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:36.247139224Z 64 PC: 13276 | Write file or device (Write 4608 bytes on handle 5)
2018-12-17T22:31:36.254858775Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:36.262050354Z 64 PC: 13276 | Write file or device (Write 4608 bytes on handle 5)
2018-12-17T22:31:36.270934121Z 87 PC: 131f9 | Get or set file date and time
2018-12-17T22:31:36.272732742Z 62 PC: 13312 | Close file
2018-12-17T22:31:36.280163089Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:36.290349575Z 47 PC: 17252 | Get disk transfer address
2018-12-17T22:31:36.29191246Z 26 PC: 1725d | Set disk transfer address
2018-12-17T22:31:36.29406472Z 79 PC: 17261 | Find next file
2018-12-17T22:31:36.296904175Z 26 PC: 17271 | Set disk transfer address
2018-12-17T22:31:36.29964339Z 47 PC: 17215 | Get disk transfer address
2018-12-17T22:31:36.300793074Z 26 PC: 17220 | Set disk transfer address
2018-12-17T22:31:36.301885281Z 78 PC: 1722c | Find first file
2018-12-17T22:31:36.308427079Z 26 PC: 1723e | Set disk transfer address
2018-12-17T22:31:36.310429534Z 26 PC: 135cd | Set disk transfer address
2018-12-17T22:31:36.311605694Z 78 PC: 135df | Find first file
2018-12-17T22:31:36.317916475Z 47 PC: 17252 | Get disk transfer address
2018-12-17T22:31:36.318885149Z 26 PC: 1725d | Set disk transfer address
2018-12-17T22:31:36.320629877Z 79 PC: 17261 | Find next file
2018-12-17T22:31:36.324270149Z 26 PC: 17271 | Set disk transfer address
2018-12-17T22:31:36.326313477Z 26 PC: 135cd | Set disk transfer address
2018-12-17T22:31:36.328303735Z 78 PC: 135df | Find first file
2018-12-17T22:31:36.334458993Z 67 PC: 130dc | Get or set file attributes
2018-12-17T22:31:36.340309313Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:36.350097525Z 61 PC: 1322a | Open file (Filename = 'C:\DOS\FORMAT.COM')
2018-12-17T22:31:36.357684547Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:36.359848735Z 63 PC: 132cc | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:31:36.365927017Z 62 PC: 13312 | Close file
2018-12-17T22:31:36.368673479Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:36.378814723Z 26 PC: 12fc7 | Set disk transfer address
2018-12-17T22:31:36.381233966Z 78 PC: 12fd9 | Find first file
2018-12-17T22:31:36.387338528Z 67 PC: 130dc | Get or set file attributes
2018-12-17T22:31:36.393957609Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:36.40357094Z 61 PC: 1322a | Open file (Filename = 'C:\DOS\FORMAT.COM')
2018-12-17T22:31:36.410362093Z 87 PC: 13197 | Get or set file date and time
2018-12-17T22:31:36.413294347Z 63 PC: 132cc | Read file or device (Read 4608 bytes on handle 5)
2018-12-17T22:31:36.418356034Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:36.42007624Z 64 PC: 13276 | Write file or device (Write 4608 bytes on handle 5)
2018-12-17T22:31:36.426989054Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:36.433582859Z 64 PC: 13276 | Write file or device (Write 4608 bytes on handle 5)
2018-12-17T22:31:36.442745784Z 87 PC: 131f9 | Get or set file date and time
2018-12-17T22:31:36.444130059Z 62 PC: 13312 | Close file
2018-12-17T22:31:36.4514605Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:36.462299516Z 47 PC: 17252 | Get disk transfer address
2018-12-17T22:31:36.463351027Z 26 PC: 1725d | Set disk transfer address
2018-12-17T22:31:36.464930454Z 79 PC: 17261 | Find next file
2018-12-17T22:31:36.468113151Z 26 PC: 17271 | Set disk transfer address
2018-12-17T22:31:36.470432148Z 26 PC: 135cd | Set disk transfer address
2018-12-17T22:31:36.472665339Z 78 PC: 135df | Find first file
2018-12-17T22:31:36.479112866Z 67 PC: 130dc | Get or set file attributes
2018-12-17T22:31:36.485470665Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:36.496366787Z 61 PC: 1322a | Open file (Filename = 'C:\DOS\KEYB.COM')
2018-12-17T22:31:36.503381426Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:36.506160564Z 63 PC: 132cc | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:31:36.512086495Z 62 PC: 13312 | Close file
2018-12-17T22:31:36.514191357Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:36.525573972Z 26 PC: 12fc7 | Set disk transfer address
2018-12-17T22:31:36.526654046Z 78 PC: 12fd9 | Find first file
2018-12-17T22:31:36.535458707Z 67 PC: 130dc | Get or set file attributes
2018-12-17T22:31:36.54265766Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:36.552933021Z 61 PC: 1322a | Open file (Filename = 'C:\DOS\KEYB.COM')
2018-12-17T22:31:36.560206713Z 87 PC: 13197 | Get or set file date and time
2018-12-17T22:31:36.561353333Z 63 PC: 132cc | Read file or device (Read 4608 bytes on handle 5)
2018-12-17T22:31:36.566484237Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:36.568735714Z 64 PC: 13276 | Write file or device (Write 4608 bytes on handle 5)
2018-12-17T22:31:36.575765854Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:36.582742253Z 64 PC: 13276 | Write file or device (Write 4608 bytes on handle 5)
2018-12-17T22:31:36.592030291Z 87 PC: 131f9 | Get or set file date and time
2018-12-17T22:31:36.594097559Z 62 PC: 13312 | Close file
2018-12-17T22:31:36.598900843Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:36.608357265Z 47 PC: 17252 | Get disk transfer address
2018-12-17T22:31:36.611615027Z 26 PC: 1725d | Set disk transfer address
2018-12-17T22:31:36.612639825Z 79 PC: 17261 | Find next file
2018-12-17T22:31:36.616300222Z 26 PC: 17271 | Set disk transfer address
2018-12-17T22:31:36.618079644Z 26 PC: 12d00 | Set disk transfer address
2018-12-17T22:31:36.619115414Z 78 PC: 12d12 | Find first file
2018-12-17T22:31:36.631106294Z 67 PC: 130dc | Get or set file attributes
2018-12-17T22:31:36.636865779Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:36.6469923Z 61 PC: 1322a | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:31:36.655542428Z 87 PC: 13197 | Get or set file date and time
2018-12-17T22:31:36.657632035Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:36.660528995Z 63 PC: 132cc | Read file or device (Read 4608 bytes on handle 5)
2018-12-17T22:31:36.667811101Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:36.674570232Z 64 PC: 13276 | Write file or device (Write 4608 bytes on handle 5)
2018-12-17T22:31:36.682571772Z 87 PC: 131f9 | Get or set file date and time
2018-12-17T22:31:36.684162825Z 62 PC: 13312 | Close file
2018-12-17T22:31:36.692202464Z 61 PC: 1322a | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:31:36.69937461Z 66 PC: 174fb | Move file pointer
2018-12-17T22:31:36.701735071Z 64 PC: 13276 | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:31:36.710208296Z 87 PC: 131f9 | Get or set file date and time
2018-12-17T22:31:36.711870895Z 62 PC: 13312 | Close file
2018-12-17T22:31:36.719096526Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:36.729634936Z 75 PC: 12e30 | Execute program
2018-12-17T22:31:36.738853041Z 26 PC: 135cd | Set disk transfer address
2018-12-17T22:31:36.740670215Z 78 PC: 135df | Find first file
2018-12-17T22:31:36.746872301Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:36.752418993Z 65 PC: 13788 | Delete file (Filename = 'anti-vir.dat')
2018-12-17T22:31:36.759537801Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:36.770651156Z 65 PC: 13788 | Delete file (Filename = 'chklist.ms')
2018-12-17T22:31:36.782053801Z 67 PC: 13113 | Get or set file attributes
2018-12-17T22:31:36.789072004Z 65 PC: 13788 | Delete file (Filename = 'chklist.cps')
2018-12-17T22:31:36.794963564Z 47 PC: 17215 | Get disk transfer address
2018-12-17T22:31:36.796985478Z 26 PC: 17220 | Set disk transfer address
2018-12-17T22:31:36.798058995Z 78 PC: 1722c | Find first file
2018-12-17T22:31:36.804318458Z 26 PC: 1723e | Set disk transfer address
2018-12-17T22:31:36.806724916Z 26 PC: 135cd | Set disk transfer address
2018-12-17T22:31:36.807782042Z 78 PC: 135df | Find first file
2018-12-17T22:31:36.816198664Z 47 PC: 17252 | Get disk transfer address
2018-12-17T22:31:36.817342117Z 26 PC: 1725d | Set disk transfer address
2018-12-17T22:31:36.818336813Z 79 PC: 17261 | Find next file
2018-12-17T22:31:36.824523983Z 26 PC: 17271 | Set disk transfer address
2018-12-17T22:31:36.826444459Z 47 PC: 17215 | Get disk transfer address
2018-12-17T22:31:36.828490385Z 26 PC: 17220 | Set disk transfer address
2018-12-17T22:31:36.831220652Z 78 PC: 1722c | Find first file
2018-12-17T22:31:36.839041985Z 26 PC: 1723e | Set disk transfer address
2018-12-17T22:31:36.842633339Z 26 PC: 135cd | Set disk transfer address
2018-12-17T22:31:36.843899524Z 78 PC: 135df | Find first file
2018-12-17T22:31:36.851002408Z 47 PC: 17252 | Get disk transfer address
2018-12-17T22:31:36.852148663Z 26 PC: 1725d | Set disk transfer address
2018-12-17T22:31:36.853255324Z 79 PC: 17261 | Find next file
2018-12-17T22:31:36.856795114Z 26 PC: 17271 | Set disk transfer address
2018-12-17T22:31:36.860776922Z 26 PC: 135cd | Set disk transfer address
2018-12-17T22:31:36.863802014Z 78 PC: 135df | Find first file
2018-12-17T22:31:36.869915824Z 47 PC: 17252 | Get disk transfer address
2018-12-17T22:31:36.871140158Z 26 PC: 1725d | Set disk transfer address
2018-12-17T22:31:36.873382493Z 79 PC: 17261 | Find next file
2018-12-17T22:31:36.876263875Z 26 PC: 17271 | Set disk transfer address
2018-12-17T22:31:36.879811984Z 26 PC: 135cd | Set disk transfer address
2018-12-17T22:31:36.881373989Z 78 PC: 135df | Find first file
2018-12-17T22:31:36.887677316Z 47 PC: 17252 | Get disk transfer address
2018-12-17T22:31:36.890267232Z 26 PC: 1725d | Set disk transfer address
2018-12-17T22:31:36.891605512Z 79 PC: 17261 | Find next file
2018-12-17T22:31:36.89570718Z 26 PC: 17271 | Set disk transfer address
2018-12-17T22:31:36.898324864Z 26 PC: 135cd | Set disk transfer address
2018-12-17T22:31:36.899549832Z 78 PC: 135df | Find first file
2018-12-17T22:31:36.905929402Z 47 PC: 17252 | Get disk transfer address
2018-12-17T22:31:36.906961201Z 26 PC: 1725d | Set disk transfer address
2018-12-17T22:31:36.90833531Z 79 PC: 17261 | Find next file
2018-12-17T22:31:36.910845738Z 26 PC: 17271 | Set disk transfer address
2018-12-17T22:31:36.912888169Z 26 PC: 135cd | Set disk transfer address
2018-12-17T22:31:36.915282279Z 78 PC: 135df | Find first file
2018-12-17T22:31:36.921175172Z 47 PC: 17252 | Get disk transfer address
2018-12-17T22:31:36.922746733Z 26 PC: 1725d | Set disk transfer address
2018-12-17T22:31:36.924602861Z 79 PC: 17261 | Find next file
2018-12-17T22:31:36.927046965Z 26 PC: 17271 | Set disk transfer address
2018-12-17T22:31:36.931131012Z 26 PC: 135cd | Set disk transfer address
2018-12-17T22:31:36.933192218Z 78 PC: 135df | Find first file
2018-12-17T22:31:36.937913267Z 47 PC: 17252 | Get disk transfer address
2018-12-17T22:31:36.941055963Z 26 PC: 1725d | Set disk transfer address
2018-12-17T22:31:36.942223597Z 79 PC: 17261 | Find next file
2018-12-17T22:31:36.94516507Z 26 PC: 17271 | Set disk transfer address
2018-12-17T22:31:36.947255574Z 26 PC: 135cd | Set disk transfer address
2018-12-17T22:31:36.948345312Z 78 PC: 135df | Find first file
2018-12-17T22:31:36.953206785Z 47 PC: 17252 | Get disk transfer address
2018-12-17T22:31:36.954889709Z 26 PC: 1725d | Set disk transfer address
2018-12-17T22:31:36.960257042Z 79 PC: 17261 | Find next file
2018-12-17T22:31:36.963161709Z 26 PC: 17271 | Set disk transfer address
2018-12-17T22:31:36.965282438Z 76 PC: 12eb7 | Terminate with return code (Return code = '0')