Sample viewer

vx.netlux.org/Virus.DOS.HLLP.Krile.5880

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:41:35.651478979Z 74 PC: 13ac2 | Reallocate memory
2018-12-17T22:41:35.717598214Z 74 PC: 18c58 | Reallocate memory
2018-12-17T22:41:35.721295469Z 98 PC: 180a6 | Get current PSP
2018-12-17T22:41:35.723401744Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:35.731715689Z 65 PC: 13898 | Delete file (Filename = 'anti-vir.dat')
2018-12-17T22:41:35.740175228Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:35.746951325Z 65 PC: 13898 | Delete file (Filename = 'chklist.ms')
2018-12-17T22:41:35.754502438Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:35.762222888Z 65 PC: 13898 | Delete file (Filename = 'chklist.cps')
2018-12-17T22:41:35.769357177Z 26 PC: 12bdc | Set disk transfer address
2018-12-17T22:41:35.771012436Z 78 PC: 12bee | Find first file
2018-12-17T22:41:35.778152407Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:41:35.784451518Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:35.80108529Z 61 PC: 13236 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:41:35.808486641Z 63 PC: 132d8 | Read file or device (Read 5880 bytes on handle 5)
2018-12-17T22:41:35.816957831Z 62 PC: 1331e | Close file
2018-12-17T22:41:35.819373418Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:35.832457523Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:35.8404743Z 65 PC: 13898 | Delete file (Filename = 'anti-vir.dat')
2018-12-17T22:41:35.846781496Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:35.852958468Z 65 PC: 13898 | Delete file (Filename = 'chklist.ms')
2018-12-17T22:41:35.860155065Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:35.866303022Z 65 PC: 13898 | Delete file (Filename = 'chklist.cps')
2018-12-17T22:41:35.872464203Z 47 PC: 17ee5 | Get disk transfer address
2018-12-17T22:41:35.874404568Z 26 PC: 17ef0 | Set disk transfer address
2018-12-17T22:41:35.875597418Z 78 PC: 17efc | Find first file
2018-12-17T22:41:35.882270382Z 26 PC: 17f0e | Set disk transfer address
2018-12-17T22:41:35.887921125Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:41:35.889645554Z 78 PC: 136ef | Find first file
2018-12-17T22:41:35.898546411Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:41:35.908198851Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:35.919127477Z 61 PC: 13236 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:41:35.926952634Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:35.9305819Z 63 PC: 132d8 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:41:35.933777563Z 62 PC: 1331e | Close file
2018-12-17T22:41:35.93613483Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:35.94722016Z 47 PC: 17f22 | Get disk transfer address
2018-12-17T22:41:35.949310456Z 26 PC: 17f2d | Set disk transfer address
2018-12-17T22:41:35.950896756Z 79 PC: 17f31 | Find next file
2018-12-17T22:41:35.953931125Z 26 PC: 17f41 | Set disk transfer address
2018-12-17T22:41:35.957590868Z 47 PC: 17ee5 | Get disk transfer address
2018-12-17T22:41:35.959345444Z 26 PC: 17ef0 | Set disk transfer address
2018-12-17T22:41:35.961149713Z 78 PC: 17efc | Find first file
2018-12-17T22:41:35.968858111Z 26 PC: 17f0e | Set disk transfer address
2018-12-17T22:41:35.973266281Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:41:35.974960212Z 78 PC: 136ef | Find first file
2018-12-17T22:41:35.983432835Z 47 PC: 17f22 | Get disk transfer address
2018-12-17T22:41:35.985391854Z 26 PC: 17f2d | Set disk transfer address
2018-12-17T22:41:35.987635558Z 79 PC: 17f31 | Find next file
2018-12-17T22:41:35.991291225Z 26 PC: 17f41 | Set disk transfer address
2018-12-17T22:41:35.995341272Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:41:35.997102269Z 78 PC: 136ef | Find first file
2018-12-17T22:41:36.004147461Z 47 PC: 17f22 | Get disk transfer address
2018-12-17T22:41:36.012119765Z 26 PC: 17f2d | Set disk transfer address
2018-12-17T22:41:36.013760506Z 79 PC: 17f31 | Find next file
2018-12-17T22:41:36.017107914Z 26 PC: 17f41 | Set disk transfer address
2018-12-17T22:41:36.022052491Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:41:36.023799051Z 78 PC: 136ef | Find first file
2018-12-17T22:41:36.030652764Z 47 PC: 17f22 | Get disk transfer address
2018-12-17T22:41:36.033345601Z 26 PC: 17f2d | Set disk transfer address
2018-12-17T22:41:36.035078907Z 79 PC: 17f31 | Find next file
2018-12-17T22:41:36.038325855Z 26 PC: 17f41 | Set disk transfer address
2018-12-17T22:41:36.043369438Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:41:36.045065504Z 78 PC: 136ef | Find first file
2018-12-17T22:41:36.051985932Z 47 PC: 17f22 | Get disk transfer address
2018-12-17T22:41:36.054163211Z 26 PC: 17f2d | Set disk transfer address
2018-12-17T22:41:36.055526762Z 79 PC: 17f31 | Find next file
2018-12-17T22:41:36.058238055Z 26 PC: 17f41 | Set disk transfer address
2018-12-17T22:41:36.062542118Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:41:36.064100185Z 78 PC: 136ef | Find first file
2018-12-17T22:41:36.071420223Z 47 PC: 17f22 | Get disk transfer address
2018-12-17T22:41:36.073449384Z 26 PC: 17f2d | Set disk transfer address
2018-12-17T22:41:36.075131023Z 79 PC: 17f31 | Find next file
2018-12-17T22:41:36.078162156Z 26 PC: 17f41 | Set disk transfer address
2018-12-17T22:41:36.082412198Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:41:36.084749298Z 78 PC: 136ef | Find first file
2018-12-17T22:41:36.091349925Z 47 PC: 17f22 | Get disk transfer address
2018-12-17T22:41:36.093331467Z 26 PC: 17f2d | Set disk transfer address
2018-12-17T22:41:36.095992865Z 79 PC: 17f31 | Find next file
2018-12-17T22:41:36.09881198Z 26 PC: 17f41 | Set disk transfer address
2018-12-17T22:41:36.102505618Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:41:36.105348928Z 78 PC: 136ef | Find first file
2018-12-17T22:41:36.111976416Z 47 PC: 17f22 | Get disk transfer address
2018-12-17T22:41:36.113348022Z 26 PC: 17f2d | Set disk transfer address
2018-12-17T22:41:36.116064945Z 79 PC: 17f31 | Find next file
2018-12-17T22:41:36.121747127Z 26 PC: 17f41 | Set disk transfer address
2018-12-17T22:41:36.123764467Z 98 PC: 180dd | Get current PSP
2018-12-17T22:41:36.126623677Z 98 PC: 180dd | Get current PSP
2018-12-17T22:41:36.128997615Z 98 PC: 180dd | Get current PSP
2018-12-17T22:41:36.131334995Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:36.144457442Z 65 PC: 13898 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:41:36.15164962Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:36.158594935Z 65 PC: 13898 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:41:36.166762365Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:36.175096388Z 65 PC: 13898 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:41:36.187164935Z 47 PC: 17ee5 | Get disk transfer address
2018-12-17T22:41:36.19032456Z 26 PC: 17ef0 | Set disk transfer address
2018-12-17T22:41:36.192102389Z 78 PC: 17efc | Find first file
2018-12-17T22:41:36.199617113Z 26 PC: 17f0e | Set disk transfer address
2018-12-17T22:41:36.202768812Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:41:36.204416487Z 78 PC: 136ef | Find first file
2018-12-17T22:41:36.215060218Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:41:36.221922096Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:36.560766965Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:41:36.56873449Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:36.57117822Z 63 PC: 132d8 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:41:36.578357353Z 62 PC: 1331e | Close file
2018-12-17T22:41:36.581250618Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:36.593448227Z 86 PC: 13be2 | Rename file
2018-12-17T22:41:36.609365183Z 26 PC: 12fd0 | Set disk transfer address
2018-12-17T22:41:36.611161687Z 78 PC: 12fe2 | Find first file
2018-12-17T22:41:36.618262493Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:41:36.626367957Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:36.639943454Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\ATTRIB.���')
2018-12-17T22:41:36.647860173Z 87 PC: 131a3 | Get or set file date and time
2018-12-17T22:41:36.650174931Z 63 PC: 132d8 | Read file or device (Read 5880 bytes on handle 5)
2018-12-17T22:41:36.658997021Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:36.661383583Z 64 PC: 13282 | Write file or device (Write 5880 bytes on handle 5)
2018-12-17T22:41:36.670251689Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:36.675791545Z 64 PC: 13282 | Write file or device (Write 5880 bytes on handle 5)
2018-12-17T22:41:36.68800308Z 87 PC: 13205 | Get or set file date and time
2018-12-17T22:41:36.689768856Z 62 PC: 1331e | Close file
2018-12-17T22:41:36.698564116Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:36.709419524Z 86 PC: 13bfb | Rename file
2018-12-17T22:41:36.721099161Z 47 PC: 17f22 | Get disk transfer address
2018-12-17T22:41:36.72307934Z 26 PC: 17f2d | Set disk transfer address
2018-12-17T22:41:36.724675899Z 79 PC: 17f31 | Find next file
2018-12-17T22:41:36.727960047Z 26 PC: 17f41 | Set disk transfer address
2018-12-17T22:41:36.731731641Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:41:36.733108758Z 78 PC: 136ef | Find first file
2018-12-17T22:41:36.74073933Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:41:36.748171449Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:36.759383006Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\CHKDSK.EXE')
2018-12-17T22:41:36.76678024Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:36.768771901Z 63 PC: 132d8 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:41:36.776483254Z 62 PC: 1331e | Close file
2018-12-17T22:41:36.778756574Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:36.789745503Z 86 PC: 13be2 | Rename file
2018-12-17T22:41:36.802815842Z 26 PC: 12fd0 | Set disk transfer address
2018-12-17T22:41:36.804270384Z 78 PC: 12fe2 | Find first file
2018-12-17T22:41:36.811374396Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:41:36.819817915Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:36.830625904Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\CHKDSK.���')
2018-12-17T22:41:36.838475387Z 87 PC: 131a3 | Get or set file date and time
2018-12-17T22:41:36.841246662Z 63 PC: 132d8 | Read file or device (Read 5880 bytes on handle 5)
2018-12-17T22:41:36.849622825Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:36.851846712Z 64 PC: 13282 | Write file or device (Write 5880 bytes on handle 5)
2018-12-17T22:41:36.861053063Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:36.864736982Z 64 PC: 13282 | Write file or device (Write 5880 bytes on handle 5)
2018-12-17T22:41:36.880148107Z 87 PC: 13205 | Get or set file date and time
2018-12-17T22:41:36.882894746Z 62 PC: 1331e | Close file
2018-12-17T22:41:36.89256593Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:36.904238023Z 86 PC: 13bfb | Rename file
2018-12-17T22:41:36.917708113Z 47 PC: 17f22 | Get disk transfer address
2018-12-17T22:41:36.919408626Z 26 PC: 17f2d | Set disk transfer address
2018-12-17T22:41:36.920929402Z 79 PC: 17f31 | Find next file
2018-12-17T22:41:36.924507343Z 26 PC: 17f41 | Set disk transfer address
2018-12-17T22:41:36.928481507Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:41:36.930011371Z 78 PC: 136ef | Find first file
2018-12-17T22:41:36.937717985Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:41:36.945035569Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:36.955408552Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\DEBUG.EXE')
2018-12-17T22:41:36.962789565Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:36.966100273Z 63 PC: 132d8 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:41:36.972138193Z 62 PC: 1331e | Close file
2018-12-17T22:41:36.974304833Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:36.985915911Z 86 PC: 13be2 | Rename file
2018-12-17T22:41:36.998483976Z 26 PC: 12fd0 | Set disk transfer address
2018-12-17T22:41:36.999911808Z 78 PC: 12fe2 | Find first file
2018-12-17T22:41:37.008051195Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:41:37.014636764Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:37.025106067Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\DEBUG.���')
2018-12-17T22:41:37.033572499Z 87 PC: 131a3 | Get or set file date and time
2018-12-17T22:41:37.039278727Z 63 PC: 132d8 | Read file or device (Read 5880 bytes on handle 5)
2018-12-17T22:41:37.049156389Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:37.052504547Z 64 PC: 13282 | Write file or device (Write 5880 bytes on handle 5)
2018-12-17T22:41:37.065058676Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:37.068396055Z 64 PC: 13282 | Write file or device (Write 5880 bytes on handle 5)
2018-12-17T22:41:37.07925493Z 87 PC: 13205 | Get or set file date and time
2018-12-17T22:41:37.081522469Z 62 PC: 1331e | Close file
2018-12-17T22:41:37.089244302Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:37.100689458Z 86 PC: 13bfb | Rename file
2018-12-17T22:41:37.113239871Z 47 PC: 17f22 | Get disk transfer address
2018-12-17T22:41:37.114569688Z 26 PC: 17f2d | Set disk transfer address
2018-12-17T22:41:37.116791451Z 79 PC: 17f31 | Find next file
2018-12-17T22:41:37.12124185Z 26 PC: 17f41 | Set disk transfer address
2018-12-17T22:41:37.124464533Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:41:37.125720983Z 78 PC: 136ef | Find first file
2018-12-17T22:41:37.135800253Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:41:37.142892214Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:37.153424456Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\EXPAND.EXE')
2018-12-17T22:41:37.161990935Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:37.16417647Z 63 PC: 132d8 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:41:37.169237616Z 62 PC: 1331e | Close file
2018-12-17T22:41:37.171718565Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:37.179660071Z 86 PC: 13be2 | Rename file
2018-12-17T22:41:37.188330396Z 26 PC: 12fd0 | Set disk transfer address
2018-12-17T22:41:37.190167496Z 78 PC: 12fe2 | Find first file
2018-12-17T22:41:37.196778844Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:41:37.203603622Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:37.214781987Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\EXPAND.���')
2018-12-17T22:41:37.222504301Z 87 PC: 131a3 | Get or set file date and time
2018-12-17T22:41:37.224557027Z 63 PC: 132d8 | Read file or device (Read 5880 bytes on handle 5)
2018-12-17T22:41:37.233377273Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:37.235761241Z 64 PC: 13282 | Write file or device (Write 5880 bytes on handle 5)
2018-12-17T22:41:37.244222102Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:37.248715331Z 64 PC: 13282 | Write file or device (Write 5880 bytes on handle 5)
2018-12-17T22:41:37.258999246Z 87 PC: 13205 | Get or set file date and time
2018-12-17T22:41:37.261739042Z 62 PC: 1331e | Close file
2018-12-17T22:41:37.270700373Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:37.281438772Z 86 PC: 13bfb | Rename file
2018-12-17T22:41:37.293857227Z 47 PC: 17f22 | Get disk transfer address
2018-12-17T22:41:37.296287721Z 26 PC: 17f2d | Set disk transfer address
2018-12-17T22:41:37.297697128Z 79 PC: 17f31 | Find next file
2018-12-17T22:41:37.301081726Z 26 PC: 17f41 | Set disk transfer address
2018-12-17T22:41:37.304867896Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:41:37.30733998Z 78 PC: 136ef | Find first file
2018-12-17T22:41:37.314197549Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:41:37.321002451Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:37.332268761Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\FDISK.EXE')
2018-12-17T22:41:37.339835232Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:37.342911941Z 63 PC: 132d8 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:41:37.349110704Z 62 PC: 1331e | Close file
2018-12-17T22:41:37.351606131Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:37.363988657Z 86 PC: 13be2 | Rename file
2018-12-17T22:41:37.378443707Z 26 PC: 12fd0 | Set disk transfer address
2018-12-17T22:41:37.379641096Z 78 PC: 12fe2 | Find first file
2018-12-17T22:41:37.386637967Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:41:37.394708405Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:37.406257267Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\FDISK.���')
2018-12-17T22:41:37.414115736Z 87 PC: 131a3 | Get or set file date and time
2018-12-17T22:41:37.417893892Z 63 PC: 132d8 | Read file or device (Read 5880 bytes on handle 5)
2018-12-17T22:41:37.426419254Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:37.42845056Z 64 PC: 13282 | Write file or device (Write 5880 bytes on handle 5)
2018-12-17T22:41:37.438119891Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:37.441357482Z 64 PC: 13282 | Write file or device (Write 5880 bytes on handle 5)
2018-12-17T22:41:37.45112136Z 87 PC: 13205 | Get or set file date and time
2018-12-17T22:41:37.453423423Z 62 PC: 1331e | Close file
2018-12-17T22:41:37.462052652Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:37.473787862Z 86 PC: 13bfb | Rename file
2018-12-17T22:41:37.487566732Z 47 PC: 17f22 | Get disk transfer address
2018-12-17T22:41:37.489506065Z 26 PC: 17f2d | Set disk transfer address
2018-12-17T22:41:37.491054873Z 79 PC: 17f31 | Find next file
2018-12-17T22:41:37.49589795Z 26 PC: 17f41 | Set disk transfer address
2018-12-17T22:41:37.498659887Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:41:37.49992862Z 78 PC: 136ef | Find first file
2018-12-17T22:41:37.507804652Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:41:37.514789482Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:37.525704182Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\MEM.EXE')
2018-12-17T22:41:37.535166123Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:37.537380422Z 63 PC: 132d8 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:41:37.543306983Z 62 PC: 1331e | Close file
2018-12-17T22:41:37.545762726Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:37.5568876Z 86 PC: 13be2 | Rename file
2018-12-17T22:41:37.569594917Z 26 PC: 12fd0 | Set disk transfer address
2018-12-17T22:41:37.571863067Z 78 PC: 12fe2 | Find first file
2018-12-17T22:41:37.579100982Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:41:37.585527572Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:37.596509378Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\MEM.���')
2018-12-17T22:41:37.604164446Z 87 PC: 131a3 | Get or set file date and time
2018-12-17T22:41:37.606157379Z 63 PC: 132d8 | Read file or device (Read 5880 bytes on handle 5)
2018-12-17T22:41:37.614284944Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:37.617058383Z 64 PC: 13282 | Write file or device (Write 5880 bytes on handle 5)
2018-12-17T22:41:37.62636363Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:37.629380377Z 64 PC: 13282 | Write file or device (Write 5880 bytes on handle 5)
2018-12-17T22:41:37.639345864Z 87 PC: 13205 | Get or set file date and time
2018-12-17T22:41:37.641209413Z 62 PC: 1331e | Close file
2018-12-17T22:41:37.649166759Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:37.660740707Z 86 PC: 13bfb | Rename file
2018-12-17T22:41:37.672452945Z 47 PC: 17f22 | Get disk transfer address
2018-12-17T22:41:37.673799014Z 26 PC: 17f2d | Set disk transfer address
2018-12-17T22:41:37.675717276Z 79 PC: 17f31 | Find next file
2018-12-17T22:41:37.678992277Z 26 PC: 17f41 | Set disk transfer address
2018-12-17T22:41:37.681585117Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:41:37.6835404Z 78 PC: 136ef | Find first file
2018-12-17T22:41:37.69074428Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:41:37.697610867Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:37.713416824Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\NLSFUNC.EXE')
2018-12-17T22:41:37.72162986Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:37.725050474Z 63 PC: 132d8 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:41:37.732647673Z 62 PC: 1331e | Close file
2018-12-17T22:41:37.734906856Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:37.747244168Z 86 PC: 13be2 | Rename file
2018-12-17T22:41:37.760000697Z 26 PC: 12fd0 | Set disk transfer address
2018-12-17T22:41:37.761694098Z 78 PC: 12fe2 | Find first file
2018-12-17T22:41:37.770145661Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:41:37.777514943Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:37.788480178Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\NLSFUNC.���')
2018-12-17T22:41:37.797736593Z 87 PC: 131a3 | Get or set file date and time
2018-12-17T22:41:37.799836106Z 63 PC: 132d8 | Read file or device (Read 5880 bytes on handle 5)
2018-12-17T22:41:37.80857532Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:37.811433098Z 64 PC: 13282 | Write file or device (Write 5880 bytes on handle 5)
2018-12-17T22:41:37.820145552Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:37.82329652Z 64 PC: 13282 | Write file or device (Write 5880 bytes on handle 5)
2018-12-17T22:41:37.83467448Z 87 PC: 13205 | Get or set file date and time
2018-12-17T22:41:37.836603263Z 62 PC: 1331e | Close file
2018-12-17T22:41:37.845065566Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:37.857239852Z 86 PC: 13bfb | Rename file
2018-12-17T22:41:37.870626515Z 47 PC: 17f22 | Get disk transfer address
2018-12-17T22:41:37.871787085Z 26 PC: 17f2d | Set disk transfer address
2018-12-17T22:41:37.873933496Z 79 PC: 17f31 | Find next file
2018-12-17T22:41:37.877296272Z 26 PC: 17f41 | Set disk transfer address
2018-12-17T22:41:37.88008521Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:41:37.882267349Z 78 PC: 136ef | Find first file
2018-12-17T22:41:37.889751636Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:41:37.896511593Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:37.909140682Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\QBASIC.EXE')
2018-12-17T22:41:37.917138073Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:37.919407385Z 63 PC: 132d8 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:41:37.926836599Z 62 PC: 1331e | Close file
2018-12-17T22:41:37.929258147Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:37.941697601Z 86 PC: 13be2 | Rename file
2018-12-17T22:41:37.955533568Z 26 PC: 12fd0 | Set disk transfer address
2018-12-17T22:41:37.957313601Z 78 PC: 12fe2 | Find first file
2018-12-17T22:41:37.96479385Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:41:37.97321138Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:37.984310717Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\QBASIC.���')
2018-12-17T22:41:37.992214211Z 87 PC: 131a3 | Get or set file date and time
2018-12-17T22:41:37.995271323Z 63 PC: 132d8 | Read file or device (Read 5880 bytes on handle 5)
2018-12-17T22:41:38.004680475Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:38.006985705Z 64 PC: 13282 | Write file or device (Write 5880 bytes on handle 5)
2018-12-17T22:41:38.016291463Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:38.019929817Z 64 PC: 13282 | Write file or device (Write 5880 bytes on handle 5)
2018-12-17T22:41:38.029852634Z 87 PC: 13205 | Get or set file date and time
2018-12-17T22:41:38.032754133Z 62 PC: 1331e | Close file
2018-12-17T22:41:38.041174027Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:38.05235639Z 86 PC: 13bfb | Rename file
2018-12-17T22:41:38.066958596Z 47 PC: 17f22 | Get disk transfer address
2018-12-17T22:41:38.068445168Z 26 PC: 17f2d | Set disk transfer address
2018-12-17T22:41:38.069853664Z 79 PC: 17f31 | Find next file
2018-12-17T22:41:38.07474447Z 26 PC: 17f41 | Set disk transfer address
2018-12-17T22:41:38.077809907Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:41:38.079466278Z 78 PC: 136ef | Find first file
2018-12-17T22:41:38.09014791Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:41:38.097433294Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:38.109488937Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\REPLACE.EXE')
2018-12-17T22:41:38.118246565Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:38.121085237Z 63 PC: 132d8 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:41:38.127411088Z 62 PC: 1331e | Close file
2018-12-17T22:41:38.131045434Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:38.142903877Z 86 PC: 13be2 | Rename file
2018-12-17T22:41:38.154743364Z 26 PC: 12fd0 | Set disk transfer address
2018-12-17T22:41:38.157218593Z 78 PC: 12fe2 | Find first file
2018-12-17T22:41:38.164512732Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:41:38.171386002Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:38.18303984Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\REPLACE.���')
2018-12-17T22:41:38.190997827Z 87 PC: 131a3 | Get or set file date and time
2018-12-17T22:41:38.193189383Z 63 PC: 132d8 | Read file or device (Read 5880 bytes on handle 5)
2018-12-17T22:41:38.203137878Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:38.205338943Z 64 PC: 13282 | Write file or device (Write 5880 bytes on handle 5)
2018-12-17T22:41:38.213958762Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:38.218274768Z 64 PC: 13282 | Write file or device (Write 5880 bytes on handle 5)
2018-12-17T22:41:38.228311349Z 87 PC: 13205 | Get or set file date and time
2018-12-17T22:41:38.230352563Z 62 PC: 1331e | Close file
2018-12-17T22:41:38.239686684Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:38.25037043Z 86 PC: 13bfb | Rename file
2018-12-17T22:41:38.262348358Z 47 PC: 17f22 | Get disk transfer address
2018-12-17T22:41:38.264357651Z 26 PC: 17f2d | Set disk transfer address
2018-12-17T22:41:38.266629118Z 79 PC: 17f31 | Find next file
2018-12-17T22:41:38.270399509Z 26 PC: 17f41 | Set disk transfer address
2018-12-17T22:41:38.274601221Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:41:38.276562054Z 78 PC: 136ef | Find first file
2018-12-17T22:41:38.283573252Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:41:38.291492576Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:38.302131969Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\RESTORE.EXE')
2018-12-17T22:41:38.309784932Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:38.313442062Z 63 PC: 132d8 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:41:38.319528073Z 62 PC: 1331e | Close file
2018-12-17T22:41:38.321634579Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:38.334517155Z 86 PC: 13be2 | Rename file
2018-12-17T22:41:38.34721283Z 26 PC: 12fd0 | Set disk transfer address
2018-12-17T22:41:38.349045963Z 78 PC: 12fe2 | Find first file
2018-12-17T22:41:38.357560385Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:41:38.364641544Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:38.375504858Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\RESTORE.���')
2018-12-17T22:41:38.384405425Z 87 PC: 131a3 | Get or set file date and time
2018-12-17T22:41:38.386370235Z 63 PC: 132d8 | Read file or device (Read 5880 bytes on handle 5)
2018-12-17T22:41:38.397150954Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:38.40081159Z 64 PC: 13282 | Write file or device (Write 5880 bytes on handle 5)
2018-12-17T22:41:38.410351978Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:38.413563179Z 64 PC: 13282 | Write file or device (Write 5880 bytes on handle 5)
2018-12-17T22:41:38.42476586Z 87 PC: 13205 | Get or set file date and time
2018-12-17T22:41:38.427121996Z 62 PC: 1331e | Close file
2018-12-17T22:41:38.435229623Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:38.447096562Z 86 PC: 13bfb | Rename file
2018-12-17T22:41:38.458953011Z 47 PC: 17f22 | Get disk transfer address
2018-12-17T22:41:38.461666417Z 26 PC: 17f2d | Set disk transfer address
2018-12-17T22:41:38.463391908Z 79 PC: 17f31 | Find next file
2018-12-17T22:41:38.467054807Z 26 PC: 17f41 | Set disk transfer address
2018-12-17T22:41:38.471025345Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:41:38.474102434Z 78 PC: 136ef | Find first file
2018-12-17T22:41:38.483496208Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:41:38.493055121Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:38.506989312Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\SCANDISK.EXE')
2018-12-17T22:41:38.517358347Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:38.52142713Z 63 PC: 132d8 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:41:38.527673441Z 62 PC: 1331e | Close file
2018-12-17T22:41:38.53018566Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:38.542709442Z 86 PC: 13be2 | Rename file
2018-12-17T22:41:38.555692306Z 26 PC: 12fd0 | Set disk transfer address
2018-12-17T22:41:38.557281902Z 78 PC: 12fe2 | Find first file
2018-12-17T22:41:38.565556944Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:41:38.572621012Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:38.583092008Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\SCANDISK.���')
2018-12-17T22:41:38.591006243Z 87 PC: 131a3 | Get or set file date and time
2018-12-17T22:41:38.593896632Z 63 PC: 132d8 | Read file or device (Read 5880 bytes on handle 5)
2018-12-17T22:41:38.601970476Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:38.603775186Z 64 PC: 13282 | Write file or device (Write 5880 bytes on handle 5)
2018-12-17T22:41:38.610694351Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:38.612776121Z 64 PC: 13282 | Write file or device (Write 5880 bytes on handle 5)
2018-12-17T22:41:38.620427913Z 87 PC: 13205 | Get or set file date and time
2018-12-17T22:41:38.62189067Z 62 PC: 1331e | Close file
2018-12-17T22:41:38.627659565Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:38.636172384Z 86 PC: 13bfb | Rename file
2018-12-17T22:41:38.644916427Z 47 PC: 17f22 | Get disk transfer address
2018-12-17T22:41:38.646172827Z 26 PC: 17f2d | Set disk transfer address
2018-12-17T22:41:38.647859334Z 79 PC: 17f31 | Find next file
2018-12-17T22:41:38.65098244Z 26 PC: 17f41 | Set disk transfer address
2018-12-17T22:41:38.65407048Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:41:38.656557511Z 78 PC: 136ef | Find first file
2018-12-17T22:41:38.663852473Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:41:38.6708202Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:38.682818675Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\SETUP.EXE')
2018-12-17T22:41:38.688558576Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:38.690147651Z 63 PC: 132d8 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:41:38.695182667Z 62 PC: 1331e | Close file
2018-12-17T22:41:38.696886337Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:38.705695222Z 86 PC: 13be2 | Rename file
2018-12-17T22:41:38.714552788Z 26 PC: 12fd0 | Set disk transfer address
2018-12-17T22:41:38.715765316Z 78 PC: 12fe2 | Find first file
2018-12-17T22:41:38.721745027Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:41:38.72656532Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:38.734386159Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\SETUP.���')
2018-12-17T22:41:38.741812898Z 87 PC: 131a3 | Get or set file date and time
2018-12-17T22:41:38.743244668Z 63 PC: 132d8 | Read file or device (Read 5880 bytes on handle 5)
2018-12-17T22:41:38.748947919Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:38.751315466Z 64 PC: 13282 | Write file or device (Write 5880 bytes on handle 5)
2018-12-17T22:41:38.757281261Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:38.759608923Z 64 PC: 13282 | Write file or device (Write 5880 bytes on handle 5)
2018-12-17T22:41:38.767002018Z 87 PC: 13205 | Get or set file date and time
2018-12-17T22:41:38.768806588Z 62 PC: 1331e | Close file
2018-12-17T22:41:38.775351771Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:38.783021877Z 86 PC: 13bfb | Rename file
2018-12-17T22:41:38.791588316Z 47 PC: 17f22 | Get disk transfer address
2018-12-17T22:41:38.793642985Z 26 PC: 17f2d | Set disk transfer address
2018-12-17T22:41:38.794762799Z 79 PC: 17f31 | Find next file
2018-12-17T22:41:38.797370877Z 26 PC: 17f41 | Set disk transfer address
2018-12-17T22:41:38.800624277Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:41:38.801784356Z 78 PC: 136ef | Find first file
2018-12-17T22:41:38.806729344Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:41:38.812208976Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:38.822226691Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\XCOPY.EXE')
2018-12-17T22:41:38.829848146Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:38.83188932Z 63 PC: 132d8 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:41:38.837789692Z 62 PC: 1331e | Close file
2018-12-17T22:41:38.840232149Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:38.850956702Z 86 PC: 13be2 | Rename file
2018-12-17T22:41:38.862752517Z 26 PC: 12fd0 | Set disk transfer address
2018-12-17T22:41:38.864875565Z 78 PC: 12fe2 | Find first file
2018-12-17T22:41:38.87188535Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:41:38.87942429Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:38.890203295Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\XCOPY.���')
2018-12-17T22:41:38.897764256Z 87 PC: 131a3 | Get or set file date and time
2018-12-17T22:41:38.899435014Z 63 PC: 132d8 | Read file or device (Read 5880 bytes on handle 5)
2018-12-17T22:41:38.90801034Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:38.910057876Z 64 PC: 13282 | Write file or device (Write 5880 bytes on handle 5)
2018-12-17T22:41:38.918403481Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:38.922702035Z 64 PC: 13282 | Write file or device (Write 5880 bytes on handle 5)
2018-12-17T22:41:38.932846738Z 87 PC: 13205 | Get or set file date and time
2018-12-17T22:41:38.935907837Z 62 PC: 1331e | Close file
2018-12-17T22:41:38.945158342Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:38.955796362Z 86 PC: 13bfb | Rename file
2018-12-17T22:41:38.969808059Z 47 PC: 17f22 | Get disk transfer address
2018-12-17T22:41:38.971204491Z 26 PC: 17f2d | Set disk transfer address
2018-12-17T22:41:38.972492601Z 79 PC: 17f31 | Find next file
2018-12-17T22:41:38.976987834Z 26 PC: 17f41 | Set disk transfer address
2018-12-17T22:41:38.979895225Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:41:38.981597612Z 78 PC: 136ef | Find first file
2018-12-17T22:41:38.989665976Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:41:38.996451681Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:39.006835544Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\DEFRAG.EXE')
2018-12-17T22:41:39.016641101Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:39.018792562Z 63 PC: 132d8 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:41:39.024768706Z 62 PC: 1331e | Close file
2018-12-17T22:41:39.027924483Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:39.038807303Z 86 PC: 13be2 | Rename file
2018-12-17T22:41:39.051796209Z 26 PC: 12fd0 | Set disk transfer address
2018-12-17T22:41:39.053130445Z 78 PC: 12fe2 | Find first file
2018-12-17T22:41:39.060018011Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:41:39.067972101Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:39.079138403Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\DEFRAG.���')
2018-12-17T22:41:39.086667274Z 87 PC: 131a3 | Get or set file date and time
2018-12-17T22:41:39.09062113Z 63 PC: 132d8 | Read file or device (Read 5880 bytes on handle 5)
2018-12-17T22:41:39.098471495Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:39.100393014Z 64 PC: 13282 | Write file or device (Write 5880 bytes on handle 5)
2018-12-17T22:41:39.108913156Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:39.112040169Z 64 PC: 13282 | Write file or device (Write 5880 bytes on handle 5)
2018-12-17T22:41:39.122044189Z 87 PC: 13205 | Get or set file date and time
2018-12-17T22:41:39.124528395Z 62 PC: 1331e | Close file
2018-12-17T22:41:39.131995991Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:39.143153627Z 86 PC: 13bfb | Rename file
2018-12-17T22:41:39.156067942Z 47 PC: 17f22 | Get disk transfer address
2018-12-17T22:41:39.15729685Z 26 PC: 17f2d | Set disk transfer address
2018-12-17T22:41:39.159677211Z 79 PC: 17f31 | Find next file
2018-12-17T22:41:39.163261263Z 26 PC: 17f41 | Set disk transfer address
2018-12-17T22:41:39.165963027Z 47 PC: 17f22 | Get disk transfer address
2018-12-17T22:41:39.168305707Z 26 PC: 17f2d | Set disk transfer address
2018-12-17T22:41:39.169773013Z 79 PC: 17f31 | Find next file
2018-12-17T22:41:39.173190712Z 26 PC: 17f41 | Set disk transfer address
2018-12-17T22:41:39.177737492Z 47 PC: 17f22 | Get disk transfer address
2018-12-17T22:41:39.178857175Z 26 PC: 17f2d | Set disk transfer address
2018-12-17T22:41:39.180013507Z 79 PC: 17f31 | Find next file
2018-12-17T22:41:39.185692082Z 26 PC: 17f41 | Set disk transfer address
2018-12-17T22:41:39.188705292Z 47 PC: 17ee5 | Get disk transfer address
2018-12-17T22:41:39.190382963Z 26 PC: 17ef0 | Set disk transfer address
2018-12-17T22:41:39.193609543Z 78 PC: 17efc | Find first file
2018-12-17T22:41:39.201090934Z 26 PC: 17f0e | Set disk transfer address
2018-12-17T22:41:39.204107049Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:41:39.20865444Z 78 PC: 136ef | Find first file
2018-12-17T22:41:39.215860725Z 47 PC: 17f22 | Get disk transfer address
2018-12-17T22:41:39.217551912Z 26 PC: 17f2d | Set disk transfer address
2018-12-17T22:41:39.21963836Z 79 PC: 17f31 | Find next file
2018-12-17T22:41:39.223160415Z 26 PC: 17f41 | Set disk transfer address
2018-12-17T22:41:39.228590324Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:41:39.247017714Z 78 PC: 136ef | Find first file
2018-12-17T22:41:39.254017461Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:41:39.261976971Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:39.27740609Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\FORMAT.COM')
2018-12-17T22:41:39.285496996Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:39.290534868Z 63 PC: 132d8 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:41:39.297848054Z 62 PC: 1331e | Close file
2018-12-17T22:41:39.300190233Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:39.312165244Z 86 PC: 13be2 | Rename file
2018-12-17T22:41:39.324716218Z 26 PC: 12fd0 | Set disk transfer address
2018-12-17T22:41:39.327634519Z 78 PC: 12fe2 | Find first file
2018-12-17T22:41:39.334852846Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:41:39.341518305Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:39.352550797Z 61 PC: 13236 | Open file (Filename = 'C:\DOS\FORMAT.���')
2018-12-17T22:41:39.361104071Z 87 PC: 131a3 | Get or set file date and time
2018-12-17T22:41:39.363157428Z 63 PC: 132d8 | Read file or device (Read 5880 bytes on handle 5)
2018-12-17T22:41:39.372194261Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:39.374266453Z 64 PC: 13282 | Write file or device (Write 5880 bytes on handle 5)
2018-12-17T22:41:39.383919794Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:39.389288597Z 64 PC: 13282 | Write file or device (Write 5880 bytes on handle 5)
2018-12-17T22:41:39.399259936Z 87 PC: 13205 | Get or set file date and time
2018-12-17T22:41:39.401342798Z 62 PC: 1331e | Close file
2018-12-17T22:41:39.410392485Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:39.421942418Z 86 PC: 13bfb | Rename file
2018-12-17T22:41:39.434830745Z 47 PC: 17f22 | Get disk transfer address
2018-12-17T22:41:39.437190206Z 26 PC: 17f2d | Set disk transfer address
2018-12-17T22:41:39.439515453Z 79 PC: 17f31 | Find next file
2018-12-17T22:41:39.444683149Z 26 PC: 17f41 | Set disk transfer address
2018-12-17T22:41:39.449110916Z 86 PC: 13be2 | Rename file
2018-12-17T22:41:39.465123571Z 26 PC: 12d03 | Set disk transfer address
2018-12-17T22:41:39.467234686Z 78 PC: 12d15 | Find first file
2018-12-17T22:41:39.474213043Z 67 PC: 130e8 | Get or set file attributes
2018-12-17T22:41:39.480831383Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:39.492342984Z 61 PC: 13236 | Open file (Filename = 'A:\TEST.���')
2018-12-17T22:41:39.500522357Z 87 PC: 131a3 | Get or set file date and time
2018-12-17T22:41:39.50369728Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:39.506123197Z 63 PC: 132d8 | Read file or device (Read 5880 bytes on handle 5)
2018-12-17T22:41:39.515392887Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:39.518333289Z 64 PC: 13282 | Write file or device (Write 5880 bytes on handle 5)
2018-12-17T22:41:39.526531096Z 87 PC: 13205 | Get or set file date and time
2018-12-17T22:41:39.528777866Z 62 PC: 1331e | Close file
2018-12-17T22:41:39.536571344Z 61 PC: 13236 | Open file (Filename = 'A:\TEST.���')
2018-12-17T22:41:39.54398581Z 66 PC: 181cb | Move file pointer
2018-12-17T22:41:39.547162286Z 64 PC: 13282 | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:41:39.555561451Z 87 PC: 13205 | Get or set file date and time
2018-12-17T22:41:39.557830904Z 62 PC: 1331e | Close file
2018-12-17T22:41:39.566465962Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:39.57731563Z 86 PC: 13bfb | Rename file
2018-12-17T22:41:39.590124337Z 75 PC: 12e36 | Execute program
2018-12-17T22:41:39.601708154Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:41:39.603189987Z 78 PC: 136ef | Find first file
2018-12-17T22:41:39.616014955Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:39.627813525Z 65 PC: 13898 | Delete file (Filename = 'anti-vir.dat')
2018-12-17T22:41:39.634448016Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:39.641707611Z 65 PC: 13898 | Delete file (Filename = 'chklist.ms')
2018-12-17T22:41:39.648190166Z 67 PC: 1311f | Get or set file attributes
2018-12-17T22:41:39.654810331Z 65 PC: 13898 | Delete file (Filename = 'chklist.cps')
2018-12-17T22:41:39.666482343Z 47 PC: 17ee5 | Get disk transfer address
2018-12-17T22:41:39.667946603Z 26 PC: 17ef0 | Set disk transfer address
2018-12-17T22:41:39.670203963Z 78 PC: 17efc | Find first file
2018-12-17T22:41:39.682257342Z 26 PC: 17f0e | Set disk transfer address
2018-12-17T22:41:39.685363445Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:41:39.687379462Z 78 PC: 136ef | Find first file
2018-12-17T22:41:39.694498162Z 47 PC: 17f22 | Get disk transfer address
2018-12-17T22:41:39.696506775Z 26 PC: 17f2d | Set disk transfer address
2018-12-17T22:41:39.697948914Z 79 PC: 17f31 | Find next file
2018-12-17T22:41:39.700594282Z 26 PC: 17f41 | Set disk transfer address
2018-12-17T22:41:39.703443644Z 47 PC: 17ee5 | Get disk transfer address
2018-12-17T22:41:39.704733466Z 26 PC: 17ef0 | Set disk transfer address
2018-12-17T22:41:39.705938119Z 78 PC: 17efc | Find first file
2018-12-17T22:41:39.712935972Z 26 PC: 17f0e | Set disk transfer address
2018-12-17T22:41:39.716202047Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:41:39.718748269Z 78 PC: 136ef | Find first file
2018-12-17T22:41:39.725696299Z 47 PC: 17f22 | Get disk transfer address
2018-12-17T22:41:39.727341028Z 26 PC: 17f2d | Set disk transfer address
2018-12-17T22:41:39.729716709Z 79 PC: 17f31 | Find next file
2018-12-17T22:41:39.732598021Z 26 PC: 17f41 | Set disk transfer address
2018-12-17T22:41:39.735470617Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:41:39.737582884Z 78 PC: 136ef | Find first file
2018-12-17T22:41:39.743898446Z 47 PC: 17f22 | Get disk transfer address
2018-12-17T22:41:39.745326569Z 26 PC: 17f2d | Set disk transfer address
2018-12-17T22:41:39.747042591Z 79 PC: 17f31 | Find next file
2018-12-17T22:41:39.749662602Z 26 PC: 17f41 | Set disk transfer address
2018-12-17T22:41:39.753213672Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:41:39.754783691Z 78 PC: 136ef | Find first file
2018-12-17T22:41:39.762809234Z 47 PC: 17f22 | Get disk transfer address
2018-12-17T22:41:39.764966636Z 26 PC: 17f2d | Set disk transfer address
2018-12-17T22:41:39.766451114Z 79 PC: 17f31 | Find next file
2018-12-17T22:41:39.770406804Z 26 PC: 17f41 | Set disk transfer address
2018-12-17T22:41:39.774052542Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:41:39.775640233Z 78 PC: 136ef | Find first file
2018-12-17T22:41:39.782792998Z 47 PC: 17f22 | Get disk transfer address
2018-12-17T22:41:39.784162029Z 26 PC: 17f2d | Set disk transfer address
2018-12-17T22:41:39.785459165Z 79 PC: 17f31 | Find next file
2018-12-17T22:41:39.789131453Z 26 PC: 17f41 | Set disk transfer address
2018-12-17T22:41:39.792089749Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:41:39.793420328Z 78 PC: 136ef | Find first file
2018-12-17T22:41:39.800455522Z 47 PC: 17f22 | Get disk transfer address
2018-12-17T22:41:39.801809505Z 26 PC: 17f2d | Set disk transfer address
2018-12-17T22:41:39.803640043Z 79 PC: 17f31 | Find next file
2018-12-17T22:41:39.806797944Z 26 PC: 17f41 | Set disk transfer address
2018-12-17T22:41:39.809818678Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:41:39.81218927Z 78 PC: 136ef | Find first file
2018-12-17T22:41:39.818858887Z 47 PC: 17f22 | Get disk transfer address
2018-12-17T22:41:39.821107249Z 26 PC: 17f2d | Set disk transfer address
2018-12-17T22:41:39.822654505Z 79 PC: 17f31 | Find next file
2018-12-17T22:41:39.825970193Z 26 PC: 17f41 | Set disk transfer address
2018-12-17T22:41:39.829795618Z 26 PC: 136dd | Set disk transfer address
2018-12-17T22:41:39.831214423Z 78 PC: 136ef | Find first file
2018-12-17T22:41:39.838481893Z 47 PC: 17f22 | Get disk transfer address
2018-12-17T22:41:39.841494931Z 26 PC: 17f2d | Set disk transfer address
2018-12-17T22:41:39.842801185Z 79 PC: 17f31 | Find next file
2018-12-17T22:41:39.845500685Z 26 PC: 17f41 | Set disk transfer address
2018-12-17T22:41:39.849818745Z 76 PC: 12ebd | Terminate with return code (Return code = '0')