Sample viewer

vx.netlux.org/Virus.DOS.HLLP.Termite.5000.a

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:34:45.570143405Z 98 PC: 182f6 | Get current PSP
2018-12-17T22:34:45.588423209Z 71 PC: 12c8b | Get current directory
2018-12-17T22:34:45.592948007Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:45.59987395Z 65 PC: 137df | Delete file (Filename = 'anti-vir.dat')
2018-12-17T22:34:45.607346384Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:45.614323398Z 65 PC: 137df | Delete file (Filename = 'chklist.ms')
2018-12-17T22:34:45.621340963Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:45.627945328Z 65 PC: 137df | Delete file (Filename = 'chklist.cps')
2018-12-17T22:34:45.637181327Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:45.644676162Z 65 PC: 137df | Delete file (Filename = 'vs.vsn')
2018-12-17T22:34:45.653160474Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:45.660473925Z 65 PC: 137df | Delete file (Filename = 'ivb.ntz')
2018-12-17T22:34:45.667979237Z 26 PC: 12d4c | Set disk transfer address
2018-12-17T22:34:45.669668008Z 78 PC: 12d5e | Find first file
2018-12-17T22:34:45.678003495Z 67 PC: 14060 | Get or set file attributes
2018-12-17T22:34:45.685021956Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:45.715830098Z 61 PC: 141ac | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:34:45.724006919Z 63 PC: 1424e | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:34:45.73219087Z 62 PC: 14294 | Close file
2018-12-17T22:34:45.734226004Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:45.746808773Z 47 PC: 18135 | Get disk transfer address
2018-12-17T22:34:45.748058959Z 26 PC: 18140 | Set disk transfer address
2018-12-17T22:34:45.749137702Z 78 PC: 1814c | Find first file
2018-12-17T22:34:45.755644233Z 26 PC: 1815e | Set disk transfer address
2018-12-17T22:34:45.759430246Z 26 PC: 13690 | Set disk transfer address
2018-12-17T22:34:45.760744952Z 78 PC: 136a2 | Find first file
2018-12-17T22:34:45.769015008Z 67 PC: 14060 | Get or set file attributes
2018-12-17T22:34:45.786852058Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:45.807560806Z 61 PC: 141ac | Open file (Filename = 'TEST.EXE')
2018-12-17T22:34:45.815945496Z 66 PC: 1841b | Move file pointer
2018-12-17T22:34:45.819306538Z 63 PC: 1424e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:34:45.822485507Z 62 PC: 14294 | Close file
2018-12-17T22:34:45.824749016Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:45.837863139Z 47 PC: 18172 | Get disk transfer address
2018-12-17T22:34:45.839720781Z 26 PC: 1817d | Set disk transfer address
2018-12-17T22:34:45.841087207Z 79 PC: 18181 | Find next file
2018-12-17T22:34:45.844825093Z 26 PC: 18191 | Set disk transfer address
2018-12-17T22:34:45.847433977Z 47 PC: 18135 | Get disk transfer address
2018-12-17T22:34:45.849385983Z 26 PC: 18140 | Set disk transfer address
2018-12-17T22:34:45.850949539Z 78 PC: 1814c | Find first file
2018-12-17T22:34:45.858090942Z 26 PC: 1815e | Set disk transfer address
2018-12-17T22:34:45.861894206Z 26 PC: 13690 | Set disk transfer address
2018-12-17T22:34:45.863551057Z 78 PC: 136a2 | Find first file
2018-12-17T22:34:45.870970466Z 47 PC: 18172 | Get disk transfer address
2018-12-17T22:34:45.872263504Z 26 PC: 1817d | Set disk transfer address
2018-12-17T22:34:45.873480504Z 79 PC: 18181 | Find next file
2018-12-17T22:34:45.877187466Z 26 PC: 18191 | Set disk transfer address
2018-12-17T22:34:45.880601425Z 26 PC: 13690 | Set disk transfer address
2018-12-17T22:34:45.881839035Z 78 PC: 136a2 | Find first file
2018-12-17T22:34:45.88980332Z 47 PC: 18172 | Get disk transfer address
2018-12-17T22:34:45.891390109Z 26 PC: 1817d | Set disk transfer address
2018-12-17T22:34:45.892895077Z 79 PC: 18181 | Find next file
2018-12-17T22:34:45.896879961Z 26 PC: 18191 | Set disk transfer address
2018-12-17T22:34:45.900888582Z 26 PC: 13690 | Set disk transfer address
2018-12-17T22:34:45.902411485Z 78 PC: 136a2 | Find first file
2018-12-17T22:34:45.910806379Z 47 PC: 18172 | Get disk transfer address
2018-12-17T22:34:45.912162435Z 26 PC: 1817d | Set disk transfer address
2018-12-17T22:34:45.913389921Z 79 PC: 18181 | Find next file
2018-12-17T22:34:45.916899296Z 26 PC: 18191 | Set disk transfer address
2018-12-17T22:34:45.920481899Z 26 PC: 13690 | Set disk transfer address
2018-12-17T22:34:45.921805836Z 78 PC: 136a2 | Find first file
2018-12-17T22:34:45.928836444Z 47 PC: 18172 | Get disk transfer address
2018-12-17T22:34:45.931274169Z 26 PC: 1817d | Set disk transfer address
2018-12-17T22:34:45.932543421Z 79 PC: 18181 | Find next file
2018-12-17T22:34:45.935411492Z 26 PC: 18191 | Set disk transfer address
2018-12-17T22:34:45.939715353Z 26 PC: 13690 | Set disk transfer address
2018-12-17T22:34:45.941144241Z 78 PC: 136a2 | Find first file
2018-12-17T22:34:45.948265365Z 47 PC: 18172 | Get disk transfer address
2018-12-17T22:34:45.950409072Z 26 PC: 1817d | Set disk transfer address
2018-12-17T22:34:45.951943086Z 79 PC: 18181 | Find next file
2018-12-17T22:34:45.955055407Z 26 PC: 18191 | Set disk transfer address
2018-12-17T22:34:45.959656026Z 47 PC: 18172 | Get disk transfer address
2018-12-17T22:34:45.961214814Z 26 PC: 1817d | Set disk transfer address
2018-12-17T22:34:45.962441038Z 79 PC: 18181 | Find next file
2018-12-17T22:34:45.965236142Z 26 PC: 18191 | Set disk transfer address
2018-12-17T22:34:45.969436025Z 26 PC: 13690 | Set disk transfer address
2018-12-17T22:34:45.971023488Z 78 PC: 136a2 | Find first file
2018-12-17T22:34:45.978134526Z 47 PC: 18172 | Get disk transfer address
2018-12-17T22:34:45.980143822Z 26 PC: 1817d | Set disk transfer address
2018-12-17T22:34:45.982548272Z 79 PC: 18181 | Find next file
2018-12-17T22:34:45.985619863Z 26 PC: 18191 | Set disk transfer address
2018-12-17T22:34:45.988624176Z 98 PC: 1832d | Get current PSP
2018-12-17T22:34:45.991729801Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:46.002298629Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:34:46.010097332Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:46.0145774Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:34:46.019057058Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:46.023491574Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:34:46.028117514Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:46.032728703Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:34:46.037125862Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:46.041407925Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:34:46.050688646Z 47 PC: 18135 | Get disk transfer address
2018-12-17T22:34:46.05307202Z 26 PC: 18140 | Set disk transfer address
2018-12-17T22:34:46.055660005Z 78 PC: 1814c | Find first file
2018-12-17T22:34:46.062286066Z 26 PC: 1815e | Set disk transfer address
2018-12-17T22:34:46.0645495Z 26 PC: 13690 | Set disk transfer address
2018-12-17T22:34:46.066370293Z 78 PC: 136a2 | Find first file
2018-12-17T22:34:46.070627993Z 67 PC: 14060 | Get or set file attributes
2018-12-17T22:34:46.077322667Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:46.502481389Z 61 PC: 141ac | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:34:46.510981286Z 66 PC: 1841b | Move file pointer
2018-12-17T22:34:46.513591615Z 63 PC: 1424e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:34:46.520577917Z 62 PC: 14294 | Close file
2018-12-17T22:34:46.52315462Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:46.535883667Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:46.543799459Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:34:46.551691318Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:46.559009667Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:34:46.567006525Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:46.575003533Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:34:46.582785115Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:46.590976198Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:34:46.598958513Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:46.606033096Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:34:46.613222221Z 86 PC: 13a5a | Rename file
2018-12-17T22:34:46.626286349Z 26 PC: 131de | Set disk transfer address
2018-12-17T22:34:46.627593512Z 78 PC: 131f0 | Find first file
2018-12-17T22:34:46.634835521Z 67 PC: 14060 | Get or set file attributes
2018-12-17T22:34:46.642225913Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:46.65378495Z 61 PC: 141ac | Open file (Filename = 'C:\DOS\ATTRIB.���')
2018-12-17T22:34:46.661555192Z 87 PC: 140dc | Get or set file date and time
2018-12-17T22:34:46.663943381Z 63 PC: 1424e | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:34:46.67243989Z 66 PC: 1841b | Move file pointer
2018-12-17T22:34:46.674581161Z 64 PC: 141f8 | Write file or device (Write 5000 bytes on handle 5)
2018-12-17T22:34:46.683746199Z 66 PC: 1841b | Move file pointer
2018-12-17T22:34:46.702034298Z 64 PC: 141f8 | Write file or device (Write 5000 bytes on handle 5)
2018-12-17T22:34:46.71464109Z 87 PC: 1413e | Get or set file date and time
2018-12-17T22:34:46.730242926Z 62 PC: 14294 | Close file
2018-12-17T22:34:46.735328523Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:46.742039363Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:46.746745815Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:34:46.754253139Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:46.761377944Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:34:46.769796766Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:46.77695232Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:34:46.785246961Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:46.792788346Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:34:46.800371527Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:46.807397578Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:34:46.815146228Z 86 PC: 13a76 | Rename file
2018-12-17T22:34:46.827557751Z 47 PC: 18172 | Get disk transfer address
2018-12-17T22:34:46.828931538Z 26 PC: 1817d | Set disk transfer address
2018-12-17T22:34:46.830741891Z 79 PC: 18181 | Find next file
2018-12-17T22:34:46.834115051Z 26 PC: 18191 | Set disk transfer address
2018-12-17T22:34:46.836281299Z 26 PC: 13690 | Set disk transfer address
2018-12-17T22:34:46.837753031Z 78 PC: 136a2 | Find first file
2018-12-17T22:34:46.842264272Z 67 PC: 14060 | Get or set file attributes
2018-12-17T22:34:46.849931049Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:46.861333857Z 61 PC: 141ac | Open file (Filename = 'C:\DOS\CHKDSK.EXE')
2018-12-17T22:34:46.869199193Z 66 PC: 1841b | Move file pointer
2018-12-17T22:34:46.871211734Z 63 PC: 1424e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:34:46.878172948Z 62 PC: 14294 | Close file
2018-12-17T22:34:46.880269717Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:46.892144628Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:46.900301827Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:34:46.908238772Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:46.916580168Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:34:46.925290493Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:46.933029175Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:34:46.940921942Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:46.949410036Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:34:46.95716899Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:46.964586647Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:34:46.973291932Z 86 PC: 13a5a | Rename file
2018-12-17T22:34:46.987008946Z 26 PC: 131de | Set disk transfer address
2018-12-17T22:34:46.988552965Z 78 PC: 131f0 | Find first file
2018-12-17T22:34:46.996484984Z 67 PC: 14060 | Get or set file attributes
2018-12-17T22:34:47.004547992Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:47.016026029Z 61 PC: 141ac | Open file (Filename = 'C:\DOS\CHKDSK.���')
2018-12-17T22:34:47.024511899Z 87 PC: 140dc | Get or set file date and time
2018-12-17T22:34:47.027530597Z 63 PC: 1424e | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:34:47.035840035Z 66 PC: 1841b | Move file pointer
2018-12-17T22:34:47.040067225Z 64 PC: 141f8 | Write file or device (Write 5000 bytes on handle 5)
2018-12-17T22:34:47.056022717Z 66 PC: 1841b | Move file pointer
2018-12-17T22:34:47.074522288Z 64 PC: 141f8 | Write file or device (Write 5000 bytes on handle 5)
2018-12-17T22:34:47.08981759Z 87 PC: 1413e | Get or set file date and time
2018-12-17T22:34:47.092336487Z 62 PC: 14294 | Close file
2018-12-17T22:34:47.1016459Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:47.113316432Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:47.121826172Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:34:47.129792091Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:47.138322815Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:34:47.147631254Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:47.15584795Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:34:47.164923459Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:47.173143116Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:34:47.180925414Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:47.188254881Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:34:47.195867053Z 86 PC: 13a76 | Rename file
2018-12-17T22:34:47.412402607Z 47 PC: 18172 | Get disk transfer address
2018-12-17T22:34:47.414566246Z 26 PC: 1817d | Set disk transfer address
2018-12-17T22:34:47.417435444Z 79 PC: 18181 | Find next file
2018-12-17T22:34:47.421783793Z 26 PC: 18191 | Set disk transfer address
2018-12-17T22:34:47.425804967Z 26 PC: 13690 | Set disk transfer address
2018-12-17T22:34:47.428294388Z 78 PC: 136a2 | Find first file
2018-12-17T22:34:47.43677201Z 67 PC: 14060 | Get or set file attributes
2018-12-17T22:34:47.443533289Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:47.556140056Z 61 PC: 141ac | Open file (Filename = 'C:\DOS\DEBUG.EXE')
2018-12-17T22:34:47.565900934Z 66 PC: 1841b | Move file pointer
2018-12-17T22:34:47.568517105Z 63 PC: 1424e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:34:47.57638744Z 62 PC: 14294 | Close file
2018-12-17T22:34:47.579167826Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:47.59110663Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:47.60031019Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:34:47.608676784Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:47.616175719Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:34:47.62497724Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:47.632851398Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:34:47.640792262Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:47.648485011Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:34:47.657350864Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:47.665703102Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:34:47.673270894Z 86 PC: 13a5a | Rename file
2018-12-17T22:34:47.686667301Z 26 PC: 131de | Set disk transfer address
2018-12-17T22:34:47.687921688Z 78 PC: 131f0 | Find first file
2018-12-17T22:34:47.694929397Z 67 PC: 14060 | Get or set file attributes
2018-12-17T22:34:47.702349994Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:47.713155719Z 61 PC: 141ac | Open file (Filename = 'C:\DOS\DEBUG.���')
2018-12-17T22:34:47.721135459Z 87 PC: 140dc | Get or set file date and time
2018-12-17T22:34:47.724966861Z 63 PC: 1424e | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:34:47.733753426Z 66 PC: 1841b | Move file pointer
2018-12-17T22:34:47.736500132Z 64 PC: 141f8 | Write file or device (Write 5000 bytes on handle 5)
2018-12-17T22:34:47.746592576Z 66 PC: 1841b | Move file pointer
2018-12-17T22:34:47.764866965Z 64 PC: 141f8 | Write file or device (Write 5000 bytes on handle 5)
2018-12-17T22:34:47.775165376Z 87 PC: 1413e | Get or set file date and time
2018-12-17T22:34:47.777399731Z 62 PC: 14294 | Close file
2018-12-17T22:34:47.786984969Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:47.798365811Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:47.805778116Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:34:47.81199213Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:47.81671911Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:34:47.82149716Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:47.825701664Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:34:47.830024673Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:47.834683174Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:34:47.841666617Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:47.846612097Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:34:47.85185867Z 86 PC: 13a76 | Rename file
2018-12-17T22:34:47.859160796Z 47 PC: 18172 | Get disk transfer address
2018-12-17T22:34:47.860215168Z 26 PC: 1817d | Set disk transfer address
2018-12-17T22:34:47.86125073Z 79 PC: 18181 | Find next file
2018-12-17T22:34:47.863419635Z 26 PC: 18191 | Set disk transfer address
2018-12-17T22:34:47.865639219Z 47 PC: 18172 | Get disk transfer address
2018-12-17T22:34:47.866576493Z 26 PC: 1817d | Set disk transfer address
2018-12-17T22:34:47.867427847Z 79 PC: 18181 | Find next file
2018-12-17T22:34:47.869735061Z 26 PC: 18191 | Set disk transfer address
2018-12-17T22:34:47.871890408Z 26 PC: 13690 | Set disk transfer address
2018-12-17T22:34:47.872718585Z 78 PC: 136a2 | Find first file
2018-12-17T22:34:47.876822655Z 67 PC: 14060 | Get or set file attributes
2018-12-17T22:34:47.880836155Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:47.887569398Z 61 PC: 141ac | Open file (Filename = 'C:\DOS\FDISK.EXE')
2018-12-17T22:34:47.892181684Z 66 PC: 1841b | Move file pointer
2018-12-17T22:34:47.893635654Z 63 PC: 1424e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:34:47.897327513Z 62 PC: 14294 | Close file
2018-12-17T22:34:47.898715184Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:47.9059138Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:47.910513547Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:34:47.915395162Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:47.920037509Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:34:47.927969098Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:47.936184134Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:34:47.945913107Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:47.954092045Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:34:47.962403617Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:47.97042774Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:34:47.979194593Z 86 PC: 13a5a | Rename file
2018-12-17T22:34:47.993133141Z 26 PC: 131de | Set disk transfer address
2018-12-17T22:34:47.99509894Z 78 PC: 131f0 | Find first file
2018-12-17T22:34:48.002540414Z 67 PC: 14060 | Get or set file attributes
2018-12-17T22:34:48.009963584Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:48.021281461Z 61 PC: 141ac | Open file (Filename = 'C:\DOS\FDISK.���')
2018-12-17T22:34:48.029133111Z 87 PC: 140dc | Get or set file date and time
2018-12-17T22:34:48.031227013Z 63 PC: 1424e | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:34:48.040649683Z 66 PC: 1841b | Move file pointer
2018-12-17T22:34:48.042764291Z 64 PC: 141f8 | Write file or device (Write 5000 bytes on handle 5)
2018-12-17T22:34:48.051750201Z 66 PC: 1841b | Move file pointer
2018-12-17T22:34:48.070964196Z 64 PC: 141f8 | Write file or device (Write 5000 bytes on handle 5)
2018-12-17T22:34:48.081302285Z 87 PC: 1413e | Get or set file date and time
2018-12-17T22:34:48.084471159Z 62 PC: 14294 | Close file
2018-12-17T22:34:48.092588968Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:48.105431176Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:48.113940918Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:34:48.12199776Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:48.129106782Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:34:48.137178428Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:48.144238024Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:34:48.152239341Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:48.161056281Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:34:48.168717725Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:48.175898298Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:34:48.183940418Z 86 PC: 13a76 | Rename file
2018-12-17T22:34:48.196436363Z 47 PC: 18172 | Get disk transfer address
2018-12-17T22:34:48.197683702Z 26 PC: 1817d | Set disk transfer address
2018-12-17T22:34:48.199080602Z 79 PC: 18181 | Find next file
2018-12-17T22:34:48.202360924Z 26 PC: 18191 | Set disk transfer address
2018-12-17T22:34:48.206723779Z 26 PC: 13690 | Set disk transfer address
2018-12-17T22:34:48.207909182Z 78 PC: 136a2 | Find first file
2018-12-17T22:34:48.214774535Z 67 PC: 14060 | Get or set file attributes
2018-12-17T22:34:48.221567744Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:48.233543744Z 61 PC: 141ac | Open file (Filename = 'C:\DOS\MEM.EXE')
2018-12-17T22:34:48.241058766Z 66 PC: 1841b | Move file pointer
2018-12-17T22:34:48.24416867Z 63 PC: 1424e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:34:48.250483941Z 62 PC: 14294 | Close file
2018-12-17T22:34:48.252828189Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:48.26496747Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:48.272776291Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:34:48.281188792Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:48.290914975Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:34:48.298638515Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:48.305834615Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:34:48.314305687Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:48.321690671Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:34:48.326482741Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:48.334372821Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:34:48.338842269Z 86 PC: 13a5a | Rename file
2018-12-17T22:34:48.346372633Z 26 PC: 131de | Set disk transfer address
2018-12-17T22:34:48.348136985Z 78 PC: 131f0 | Find first file
2018-12-17T22:34:48.357099983Z 67 PC: 14060 | Get or set file attributes
2018-12-17T22:34:48.364692036Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:48.376804445Z 61 PC: 141ac | Open file (Filename = 'C:\DOS\MEM.���')
2018-12-17T22:34:48.382609049Z 87 PC: 140dc | Get or set file date and time
2018-12-17T22:34:48.385163846Z 63 PC: 1424e | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:34:48.394775395Z 66 PC: 1841b | Move file pointer
2018-12-17T22:34:48.402405718Z 64 PC: 141f8 | Write file or device (Write 5000 bytes on handle 5)
2018-12-17T22:34:48.411161051Z 66 PC: 1841b | Move file pointer
2018-12-17T22:34:48.431522467Z 64 PC: 141f8 | Write file or device (Write 5000 bytes on handle 5)
2018-12-17T22:34:48.444459061Z 87 PC: 1413e | Get or set file date and time
2018-12-17T22:34:48.446809955Z 62 PC: 14294 | Close file
2018-12-17T22:34:48.453202842Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:48.468954355Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:48.473288167Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:34:48.478861598Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:48.483498499Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:34:48.48965492Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:48.495132104Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:34:48.499794398Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:48.504173533Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:34:48.50960375Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:48.513921458Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:34:48.518536084Z 86 PC: 13a76 | Rename file
2018-12-17T22:34:48.526941371Z 47 PC: 18172 | Get disk transfer address
2018-12-17T22:34:48.528078115Z 26 PC: 1817d | Set disk transfer address
2018-12-17T22:34:48.529266915Z 79 PC: 18181 | Find next file
2018-12-17T22:34:48.532412125Z 26 PC: 18191 | Set disk transfer address
2018-12-17T22:34:48.53488628Z 47 PC: 18135 | Get disk transfer address
2018-12-17T22:34:48.536523521Z 26 PC: 18140 | Set disk transfer address
2018-12-17T22:34:48.539111184Z 78 PC: 1814c | Find first file
2018-12-17T22:34:48.546125299Z 26 PC: 1815e | Set disk transfer address
2018-12-17T22:34:48.549813687Z 26 PC: 13690 | Set disk transfer address
2018-12-17T22:34:48.552165487Z 78 PC: 136a2 | Find first file
2018-12-17T22:34:48.559976948Z 47 PC: 18172 | Get disk transfer address
2018-12-17T22:34:48.561668538Z 26 PC: 1817d | Set disk transfer address
2018-12-17T22:34:48.563100219Z 79 PC: 18181 | Find next file
2018-12-17T22:34:48.565220161Z 26 PC: 18191 | Set disk transfer address
2018-12-17T22:34:48.567438244Z 26 PC: 13690 | Set disk transfer address
2018-12-17T22:34:48.568969929Z 78 PC: 136a2 | Find first file
2018-12-17T22:34:48.57337362Z 67 PC: 14060 | Get or set file attributes
2018-12-17T22:34:48.578419335Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:48.585949417Z 61 PC: 141ac | Open file (Filename = 'C:\DOS\FORMAT.COM')
2018-12-17T22:34:48.593614448Z 66 PC: 1841b | Move file pointer
2018-12-17T22:34:48.59673209Z 63 PC: 1424e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:34:48.60333161Z 62 PC: 14294 | Close file
2018-12-17T22:34:48.606008596Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:48.618204408Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:48.625133794Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:34:48.633644945Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:48.641385355Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:34:48.649536425Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:48.657862149Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:34:48.666935418Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:48.674767942Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:34:48.683091443Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:48.692303764Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:34:48.700337389Z 86 PC: 13a5a | Rename file
2018-12-17T22:34:48.715393442Z 26 PC: 131de | Set disk transfer address
2018-12-17T22:34:48.716823972Z 78 PC: 131f0 | Find first file
2018-12-17T22:34:48.724213039Z 67 PC: 14060 | Get or set file attributes
2018-12-17T22:34:48.731480357Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:48.743738402Z 61 PC: 141ac | Open file (Filename = 'C:\DOS\FORMAT.���')
2018-12-17T22:34:48.752377758Z 87 PC: 140dc | Get or set file date and time
2018-12-17T22:34:48.756585403Z 63 PC: 1424e | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:34:48.765679283Z 66 PC: 1841b | Move file pointer
2018-12-17T22:34:48.768487043Z 64 PC: 141f8 | Write file or device (Write 5000 bytes on handle 5)
2018-12-17T22:34:48.778427065Z 66 PC: 1841b | Move file pointer
2018-12-17T22:34:48.797081681Z 64 PC: 141f8 | Write file or device (Write 5000 bytes on handle 5)
2018-12-17T22:34:48.807733178Z 87 PC: 1413e | Get or set file date and time
2018-12-17T22:34:48.811307734Z 62 PC: 14294 | Close file
2018-12-17T22:34:48.821236656Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:48.849232952Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:48.857710689Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:34:48.865302494Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:48.873089965Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:34:48.882859353Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:48.890718028Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:34:48.898765796Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:48.906900185Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:34:48.914905011Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:48.922286212Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:34:48.930955985Z 86 PC: 13a76 | Rename file
2018-12-17T22:34:48.945530982Z 47 PC: 18172 | Get disk transfer address
2018-12-17T22:34:48.947260224Z 26 PC: 1817d | Set disk transfer address
2018-12-17T22:34:48.949860832Z 79 PC: 18181 | Find next file
2018-12-17T22:34:48.953999341Z 26 PC: 18191 | Set disk transfer address
2018-12-17T22:34:48.957809203Z 26 PC: 13690 | Set disk transfer address
2018-12-17T22:34:48.960357224Z 78 PC: 136a2 | Find first file
2018-12-17T22:34:48.968266302Z 67 PC: 14060 | Get or set file attributes
2018-12-17T22:34:48.975520149Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:48.987869556Z 61 PC: 141ac | Open file (Filename = 'C:\DOS\KEYB.COM')
2018-12-17T22:34:48.996050658Z 66 PC: 1841b | Move file pointer
2018-12-17T22:34:48.998024113Z 63 PC: 1424e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:34:49.016710751Z 62 PC: 14294 | Close file
2018-12-17T22:34:49.01943798Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:49.03157463Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:49.039721415Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:34:49.04751229Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:49.054760427Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:34:49.06419245Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:49.09433747Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:34:49.102208297Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:49.110510936Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:34:49.118340006Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:49.125924334Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:34:49.134588347Z 86 PC: 13a5a | Rename file
2018-12-17T22:34:49.147345575Z 26 PC: 131de | Set disk transfer address
2018-12-17T22:34:49.149875893Z 78 PC: 131f0 | Find first file
2018-12-17T22:34:49.157515145Z 67 PC: 14060 | Get or set file attributes
2018-12-17T22:34:49.165110796Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:49.177054327Z 61 PC: 141ac | Open file (Filename = 'C:\DOS\KEYB.���')
2018-12-17T22:34:49.185537664Z 87 PC: 140dc | Get or set file date and time
2018-12-17T22:34:49.187568864Z 63 PC: 1424e | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:34:49.197482612Z 66 PC: 1841b | Move file pointer
2018-12-17T22:34:49.200240189Z 64 PC: 141f8 | Write file or device (Write 5000 bytes on handle 5)
2018-12-17T22:34:49.208734028Z 66 PC: 1841b | Move file pointer
2018-12-17T22:34:49.227928327Z 64 PC: 141f8 | Write file or device (Write 5000 bytes on handle 5)
2018-12-17T22:34:49.238326554Z 87 PC: 1413e | Get or set file date and time
2018-12-17T22:34:49.240370521Z 62 PC: 14294 | Close file
2018-12-17T22:34:49.249701816Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:49.262311445Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:49.266725639Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:34:49.27180298Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:49.276369645Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:34:49.281043963Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:49.286623695Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:34:49.291279152Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:49.295740764Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:34:49.301416769Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:49.306106779Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:34:49.31130499Z 86 PC: 13a76 | Rename file
2018-12-17T22:34:49.320721298Z 47 PC: 18172 | Get disk transfer address
2018-12-17T22:34:49.322061368Z 26 PC: 1817d | Set disk transfer address
2018-12-17T22:34:49.324091309Z 79 PC: 18181 | Find next file
2018-12-17T22:34:49.327501474Z 26 PC: 18191 | Set disk transfer address
2018-12-17T22:34:49.330298848Z 26 PC: 13690 | Set disk transfer address
2018-12-17T22:34:49.332698023Z 78 PC: 136a2 | Find first file
2018-12-17T22:34:49.33821399Z 67 PC: 14060 | Get or set file attributes
2018-12-17T22:34:49.343232071Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:49.355512576Z 61 PC: 141ac | Open file (Filename = 'C:\DOS\SYS.COM')
2018-12-17T22:34:49.363425804Z 66 PC: 1841b | Move file pointer
2018-12-17T22:34:49.365409898Z 63 PC: 1424e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:34:49.371689005Z 62 PC: 14294 | Close file
2018-12-17T22:34:49.373641952Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:49.385729731Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:49.393666681Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:34:49.401072601Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:49.409125382Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:34:49.416672586Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:49.423586505Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:34:49.432325061Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:49.439369868Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:34:49.44679878Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:49.455336401Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:34:49.462440042Z 86 PC: 13a5a | Rename file
2018-12-17T22:34:49.474547066Z 26 PC: 131de | Set disk transfer address
2018-12-17T22:34:49.476269003Z 78 PC: 131f0 | Find first file
2018-12-17T22:34:49.483339359Z 67 PC: 14060 | Get or set file attributes
2018-12-17T22:34:49.490364887Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:49.50183207Z 61 PC: 141ac | Open file (Filename = 'C:\DOS\SYS.���')
2018-12-17T22:34:49.509767158Z 87 PC: 140dc | Get or set file date and time
2018-12-17T22:34:49.512394586Z 63 PC: 1424e | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:34:49.521810576Z 66 PC: 1841b | Move file pointer
2018-12-17T22:34:49.523912056Z 64 PC: 141f8 | Write file or device (Write 5000 bytes on handle 5)
2018-12-17T22:34:49.533143403Z 66 PC: 1841b | Move file pointer
2018-12-17T22:34:49.551412417Z 64 PC: 141f8 | Write file or device (Write 5000 bytes on handle 5)
2018-12-17T22:34:49.561738227Z 87 PC: 1413e | Get or set file date and time
2018-12-17T22:34:49.56436526Z 62 PC: 14294 | Close file
2018-12-17T22:34:49.572597472Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:49.584801403Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:49.592405943Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:34:49.600037523Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:49.607174554Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:34:49.614798032Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:49.621712125Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:34:49.629906026Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:49.636853758Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:34:49.645216108Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:49.652676445Z 65 PC: 137df | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:34:49.659719406Z 86 PC: 13a76 | Rename file
2018-12-17T22:34:49.672178263Z 47 PC: 18172 | Get disk transfer address
2018-12-17T22:34:49.674147116Z 26 PC: 1817d | Set disk transfer address
2018-12-17T22:34:49.675359466Z 79 PC: 18181 | Find next file
2018-12-17T22:34:49.67908785Z 26 PC: 18191 | Set disk transfer address
2018-12-17T22:34:49.682067797Z 98 PC: 1832d | Get current PSP
2018-12-17T22:34:49.684958968Z 98 PC: 1832d | Get current PSP
2018-12-17T22:34:49.686902682Z 98 PC: 1832d | Get current PSP
2018-12-17T22:34:49.689713123Z 98 PC: 1832d | Get current PSP
2018-12-17T22:34:49.692179831Z 98 PC: 1832d | Get current PSP
2018-12-17T22:34:49.694885682Z 98 PC: 1832d | Get current PSP
2018-12-17T22:34:49.698486824Z 98 PC: 1832d | Get current PSP
2018-12-17T22:34:49.701038324Z 98 PC: 1832d | Get current PSP
2018-12-17T22:34:49.704351208Z 98 PC: 1832d | Get current PSP
2018-12-17T22:34:49.706822198Z 98 PC: 1832d | Get current PSP
2018-12-17T22:34:49.709280276Z 98 PC: 1832d | Get current PSP
2018-12-17T22:34:49.71286052Z 98 PC: 1832d | Get current PSP
2018-12-17T22:34:49.71561965Z 98 PC: 1832d | Get current PSP
2018-12-17T22:34:49.717550109Z 98 PC: 1832d | Get current PSP
2018-12-17T22:34:49.722247912Z 98 PC: 1832d | Get current PSP
2018-12-17T22:34:49.724829928Z 98 PC: 1832d | Get current PSP
2018-12-17T22:34:49.726856338Z 98 PC: 1832d | Get current PSP
2018-12-17T22:34:49.729425104Z 98 PC: 1832d | Get current PSP
2018-12-17T22:34:49.731202931Z 98 PC: 1832d | Get current PSP
2018-12-17T22:34:49.733097355Z 98 PC: 1832d | Get current PSP
2018-12-17T22:34:49.736290656Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:49.74883376Z 65 PC: 137df | Delete file (Filename = 'anti-vir.dat')
2018-12-17T22:34:49.757260887Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:49.764780772Z 65 PC: 137df | Delete file (Filename = 'chklist.ms')
2018-12-17T22:34:49.772233824Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:49.780593909Z 65 PC: 137df | Delete file (Filename = 'chklist.cps')
2018-12-17T22:34:49.795262473Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:49.802430785Z 65 PC: 137df | Delete file (Filename = 'vs.vsn')
2018-12-17T22:34:49.811607964Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:49.819151636Z 65 PC: 137df | Delete file (Filename = 'ivb.ntz')
2018-12-17T22:34:49.826293336Z 86 PC: 13a5a | Rename file
2018-12-17T22:34:49.843646149Z 26 PC: 12e43 | Set disk transfer address
2018-12-17T22:34:49.845607598Z 78 PC: 12e55 | Find first file
2018-12-17T22:34:49.858926307Z 67 PC: 14060 | Get or set file attributes
2018-12-17T22:34:49.867126795Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:49.878733913Z 61 PC: 141ac | Open file (Filename = 'A:\TEST.���')
2018-12-17T22:34:49.886979535Z 87 PC: 140dc | Get or set file date and time
2018-12-17T22:34:49.891200127Z 66 PC: 1841b | Move file pointer
2018-12-17T22:34:49.893975354Z 63 PC: 1424e | Read file or device (Read 5000 bytes on handle 5)
2018-12-17T22:34:49.904966245Z 66 PC: 1841b | Move file pointer
2018-12-17T22:34:49.92446621Z 64 PC: 141f8 | Write file or device (Write 5000 bytes on handle 5)
2018-12-17T22:34:50.273176115Z 87 PC: 1413e | Get or set file date and time
2018-12-17T22:34:50.276431865Z 62 PC: 14294 | Close file
2018-12-17T22:34:50.40226653Z 61 PC: 141ac | Open file (Filename = 'A:\TEST.���')
2018-12-17T22:34:50.41016144Z 66 PC: 1841b | Move file pointer
2018-12-17T22:34:50.412883364Z 64 PC: 141f8 | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:34:50.708258871Z 87 PC: 1413e | Get or set file date and time
2018-12-17T22:34:50.711283112Z 62 PC: 14294 | Close file
2018-12-17T22:34:50.719277659Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:50.734130502Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:50.741790123Z 65 PC: 137df | Delete file (Filename = 'anti-vir.dat')
2018-12-17T22:34:50.749903972Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:50.75533482Z 65 PC: 137df | Delete file (Filename = 'chklist.ms')
2018-12-17T22:34:50.775432208Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:50.803872787Z 65 PC: 137df | Delete file (Filename = 'chklist.cps')
2018-12-17T22:34:50.81085077Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:50.818581291Z 65 PC: 137df | Delete file (Filename = 'vs.vsn')
2018-12-17T22:34:50.826148526Z 67 PC: 14097 | Get or set file attributes
2018-12-17T22:34:50.833732785Z 65 PC: 137df | Delete file (Filename = 'ivb.ntz')
2018-12-17T22:34:50.846961827Z 86 PC: 13a76 | Rename file
2018-12-17T22:34:50.859461451Z 75 PC: 130ed | Execute program
2018-12-17T22:34:50.882802541Z 80 PC: 1b2c9 | Set current PSP
2018-12-17T22:34:50.884368978Z 48 PC: 1b2ce | Get DOS version
2018-12-17T22:34:50.886375229Z 99 PC: 21ab0 | Get DBCS lead byte table pointer
2018-12-17T22:34:50.890381056Z 101 PC: 1b354 | Get extended country info
2018-12-17T22:34:50.892035564Z 99 PC: 1b35a | Get DBCS lead byte table pointer
2018-12-17T22:34:50.893694728Z 74 PC: 1b3bc | Reallocate memory
2018-12-17T22:34:50.896354977Z 25 PC: 1b3f3 | Get default drive
2018-12-17T22:34:50.897910523Z 37 PC: 1aeb3 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T22:34:50.900312806Z 37 PC: 1aeba | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:34:50.902184318Z 37 PC: 1aec1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:34:50.907244971Z 74 PC: 1a05c | Reallocate memory
2018-12-17T22:34:50.90991977Z 72 PC: 1a09d | Allocate memory
2018-12-17T22:34:50.912228975Z 72 PC: 1a0d5 | Allocate memory
2018-12-17T22:34:50.916136794Z 72 PC: 1a0dd | Allocate memory