Sample viewer

vx.netlux.org/Virus.DOS.HLLP.Creed.5413

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:43:45.514101681Z 98 PC: 16026 | Get current PSP
2018-12-17T22:43:45.517496608Z 71 PC: 12c97 | Get current directory
2018-12-17T22:43:45.522022798Z 98 PC: 16258 | Get current PSP
2018-12-17T22:43:45.523518498Z 74 PC: 16279 | Reallocate memory
2018-12-17T22:43:45.525835189Z 72 PC: 16218 | Allocate memory
2018-12-17T22:43:45.529483962Z 72 PC: 16218 | Allocate memory
2018-12-17T22:43:45.532579736Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:45.539359129Z 65 PC: 13c19 | Delete file (Filename = 'anti-vir.dat')
2018-12-17T22:43:45.546876368Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:45.553088034Z 65 PC: 13c19 | Delete file (Filename = 'chklist.ms')
2018-12-17T22:43:45.565293889Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:45.573495783Z 65 PC: 13c19 | Delete file (Filename = 'chklist.cps')
2018-12-17T22:43:45.580528431Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:45.586017501Z 65 PC: 13c19 | Delete file (Filename = 'vs.vsn')
2018-12-17T22:43:45.593569215Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:45.599588951Z 65 PC: 13c19 | Delete file (Filename = 'ivb.ntz')
2018-12-17T22:43:45.605804324Z 26 PC: 14538 | Set disk transfer address
2018-12-17T22:43:45.607545213Z 78 PC: 1454a | Find first file
2018-12-17T22:43:45.61417187Z 67 PC: 134c6 | Get or set file attributes
2018-12-17T22:43:45.620179062Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:45.637364409Z 61 PC: 13614 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:43:45.646067916Z 63 PC: 136b6 | Read file or device (Read 5413 bytes on handle 5)
2018-12-17T22:43:45.654655544Z 62 PC: 136fc | Close file
2018-12-17T22:43:45.656885302Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:45.669871012Z 47 PC: 15e55 | Get disk transfer address
2018-12-17T22:43:45.671459936Z 26 PC: 15e60 | Set disk transfer address
2018-12-17T22:43:45.672992474Z 78 PC: 15e6c | Find first file
2018-12-17T22:43:45.680704669Z 26 PC: 15e7e | Set disk transfer address
2018-12-17T22:43:45.684946606Z 26 PC: 13abc | Set disk transfer address
2018-12-17T22:43:45.686512297Z 78 PC: 13ace | Find first file
2018-12-17T22:43:45.694517332Z 67 PC: 134c6 | Get or set file attributes
2018-12-17T22:43:45.700981873Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:45.7146481Z 61 PC: 13614 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:43:45.7232415Z 66 PC: 1614b | Move file pointer
2018-12-17T22:43:45.725369877Z 63 PC: 136b6 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:43:45.730452804Z 62 PC: 136fc | Close file
2018-12-17T22:43:45.733747252Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:45.745046463Z 47 PC: 15e92 | Get disk transfer address
2018-12-17T22:43:45.746755904Z 26 PC: 15e9d | Set disk transfer address
2018-12-17T22:43:45.748382138Z 79 PC: 15ea1 | Find next file
2018-12-17T22:43:45.752111453Z 26 PC: 15eb1 | Set disk transfer address
2018-12-17T22:43:45.754507312Z 47 PC: 15e55 | Get disk transfer address
2018-12-17T22:43:45.756067393Z 26 PC: 15e60 | Set disk transfer address
2018-12-17T22:43:45.758401637Z 78 PC: 15e6c | Find first file
2018-12-17T22:43:45.765051867Z 26 PC: 15e7e | Set disk transfer address
2018-12-17T22:43:45.768999091Z 26 PC: 13abc | Set disk transfer address
2018-12-17T22:43:45.770689064Z 78 PC: 13ace | Find first file
2018-12-17T22:43:45.778006568Z 47 PC: 15e92 | Get disk transfer address
2018-12-17T22:43:45.779657859Z 26 PC: 15e9d | Set disk transfer address
2018-12-17T22:43:45.781962147Z 79 PC: 15ea1 | Find next file
2018-12-17T22:43:45.784938167Z 26 PC: 15eb1 | Set disk transfer address
2018-12-17T22:43:45.789032206Z 26 PC: 13abc | Set disk transfer address
2018-12-17T22:43:45.79145694Z 78 PC: 13ace | Find first file
2018-12-17T22:43:45.797922493Z 47 PC: 15e92 | Get disk transfer address
2018-12-17T22:43:45.799266818Z 26 PC: 15e9d | Set disk transfer address
2018-12-17T22:43:45.800543155Z 79 PC: 15ea1 | Find next file
2018-12-17T22:43:45.803925418Z 26 PC: 15eb1 | Set disk transfer address
2018-12-17T22:43:45.808037641Z 26 PC: 13abc | Set disk transfer address
2018-12-17T22:43:45.809499246Z 78 PC: 13ace | Find first file
2018-12-17T22:43:45.817123837Z 47 PC: 15e92 | Get disk transfer address
2018-12-17T22:43:45.818608956Z 26 PC: 15e9d | Set disk transfer address
2018-12-17T22:43:45.820390522Z 79 PC: 15ea1 | Find next file
2018-12-17T22:43:45.825444995Z 26 PC: 15eb1 | Set disk transfer address
2018-12-17T22:43:45.830013746Z 26 PC: 13abc | Set disk transfer address
2018-12-17T22:43:45.831519504Z 78 PC: 13ace | Find first file
2018-12-17T22:43:45.839684188Z 47 PC: 15e92 | Get disk transfer address
2018-12-17T22:43:45.841242816Z 26 PC: 15e9d | Set disk transfer address
2018-12-17T22:43:45.842755256Z 79 PC: 15ea1 | Find next file
2018-12-17T22:43:45.846761351Z 26 PC: 15eb1 | Set disk transfer address
2018-12-17T22:43:45.851171143Z 26 PC: 13abc | Set disk transfer address
2018-12-17T22:43:45.852654439Z 78 PC: 13ace | Find first file
2018-12-17T22:43:45.86062512Z 47 PC: 15e92 | Get disk transfer address
2018-12-17T22:43:45.862325684Z 26 PC: 15e9d | Set disk transfer address
2018-12-17T22:43:45.863819579Z 79 PC: 15ea1 | Find next file
2018-12-17T22:43:45.867326726Z 26 PC: 15eb1 | Set disk transfer address
2018-12-17T22:43:45.871664663Z 47 PC: 15e92 | Get disk transfer address
2018-12-17T22:43:45.873158148Z 26 PC: 15e9d | Set disk transfer address
2018-12-17T22:43:45.874598624Z 79 PC: 15ea1 | Find next file
2018-12-17T22:43:45.877902038Z 26 PC: 15eb1 | Set disk transfer address
2018-12-17T22:43:45.88200799Z 26 PC: 13abc | Set disk transfer address
2018-12-17T22:43:45.883440801Z 78 PC: 13ace | Find first file
2018-12-17T22:43:45.891080429Z 47 PC: 15e92 | Get disk transfer address
2018-12-17T22:43:45.892403073Z 26 PC: 15e9d | Set disk transfer address
2018-12-17T22:43:45.89384946Z 79 PC: 15ea1 | Find next file
2018-12-17T22:43:45.897012821Z 26 PC: 15eb1 | Set disk transfer address
2018-12-17T22:43:45.899187806Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:45.906126689Z 65 PC: 13c19 | Delete file (Filename = 'anti-vir.dat')
2018-12-17T22:43:45.913749115Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:45.919908734Z 65 PC: 13c19 | Delete file (Filename = 'chklist.ms')
2018-12-17T22:43:45.926580444Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:45.934074549Z 65 PC: 13c19 | Delete file (Filename = 'chklist.cps')
2018-12-17T22:43:45.94077267Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:45.947070117Z 65 PC: 13c19 | Delete file (Filename = 'vs.vsn')
2018-12-17T22:43:45.954043765Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:45.961323006Z 65 PC: 13c19 | Delete file (Filename = 'ivb.ntz')
2018-12-17T22:43:45.967987764Z 47 PC: 15e55 | Get disk transfer address
2018-12-17T22:43:45.969455371Z 26 PC: 15e60 | Set disk transfer address
2018-12-17T22:43:45.971927223Z 78 PC: 15e6c | Find first file
2018-12-17T22:43:45.978393698Z 26 PC: 15e7e | Set disk transfer address
2018-12-17T22:43:45.982480223Z 26 PC: 13abc | Set disk transfer address
2018-12-17T22:43:45.98543934Z 78 PC: 13ace | Find first file
2018-12-17T22:43:45.992055277Z 67 PC: 134c6 | Get or set file attributes
2018-12-17T22:43:45.999084098Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:46.01069232Z 61 PC: 13614 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:43:46.01830592Z 66 PC: 1614b | Move file pointer
2018-12-17T22:43:46.020534926Z 63 PC: 136b6 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:43:46.024559525Z 62 PC: 136fc | Close file
2018-12-17T22:43:46.026882047Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:46.038232605Z 47 PC: 15e92 | Get disk transfer address
2018-12-17T22:43:46.040565457Z 26 PC: 15e9d | Set disk transfer address
2018-12-17T22:43:46.042229722Z 79 PC: 15ea1 | Find next file
2018-12-17T22:43:46.045109882Z 26 PC: 15eb1 | Set disk transfer address
2018-12-17T22:43:46.047522183Z 47 PC: 15e55 | Get disk transfer address
2018-12-17T22:43:46.049894789Z 26 PC: 15e60 | Set disk transfer address
2018-12-17T22:43:46.051344411Z 78 PC: 15e6c | Find first file
2018-12-17T22:43:46.057898691Z 26 PC: 15e7e | Set disk transfer address
2018-12-17T22:43:46.063039817Z 26 PC: 13abc | Set disk transfer address
2018-12-17T22:43:46.064507744Z 78 PC: 13ace | Find first file
2018-12-17T22:43:46.072719027Z 47 PC: 15e92 | Get disk transfer address
2018-12-17T22:43:46.075097173Z 26 PC: 15e9d | Set disk transfer address
2018-12-17T22:43:46.076966654Z 79 PC: 15ea1 | Find next file
2018-12-17T22:43:46.079999089Z 26 PC: 15eb1 | Set disk transfer address
2018-12-17T22:43:46.084850141Z 26 PC: 13abc | Set disk transfer address
2018-12-17T22:43:46.086647466Z 78 PC: 13ace | Find first file
2018-12-17T22:43:46.093439183Z 47 PC: 15e92 | Get disk transfer address
2018-12-17T22:43:46.095162169Z 26 PC: 15e9d | Set disk transfer address
2018-12-17T22:43:46.097448102Z 79 PC: 15ea1 | Find next file
2018-12-17T22:43:46.100421776Z 26 PC: 15eb1 | Set disk transfer address
2018-12-17T22:43:46.104563826Z 26 PC: 13abc | Set disk transfer address
2018-12-17T22:43:46.106848046Z 78 PC: 13ace | Find first file
2018-12-17T22:43:46.113569471Z 47 PC: 15e92 | Get disk transfer address
2018-12-17T22:43:46.115044912Z 26 PC: 15e9d | Set disk transfer address
2018-12-17T22:43:46.117518447Z 79 PC: 15ea1 | Find next file
2018-12-17T22:43:46.120663144Z 26 PC: 15eb1 | Set disk transfer address
2018-12-17T22:43:46.124863212Z 26 PC: 13abc | Set disk transfer address
2018-12-17T22:43:46.127094773Z 78 PC: 13ace | Find first file
2018-12-17T22:43:46.134213343Z 47 PC: 15e92 | Get disk transfer address
2018-12-17T22:43:46.135485723Z 26 PC: 15e9d | Set disk transfer address
2018-12-17T22:43:46.13740135Z 79 PC: 15ea1 | Find next file
2018-12-17T22:43:46.155398041Z 26 PC: 15eb1 | Set disk transfer address
2018-12-17T22:43:46.159804147Z 26 PC: 13abc | Set disk transfer address
2018-12-17T22:43:46.162483569Z 78 PC: 13ace | Find first file
2018-12-17T22:43:46.169448289Z 47 PC: 15e92 | Get disk transfer address
2018-12-17T22:43:46.171068763Z 26 PC: 15e9d | Set disk transfer address
2018-12-17T22:43:46.173677974Z 79 PC: 15ea1 | Find next file
2018-12-17T22:43:46.177023026Z 26 PC: 15eb1 | Set disk transfer address
2018-12-17T22:43:46.181490467Z 47 PC: 15e92 | Get disk transfer address
2018-12-17T22:43:46.183117313Z 26 PC: 15e9d | Set disk transfer address
2018-12-17T22:43:46.185629401Z 79 PC: 15ea1 | Find next file
2018-12-17T22:43:46.188718613Z 26 PC: 15eb1 | Set disk transfer address
2018-12-17T22:43:46.192978013Z 26 PC: 13abc | Set disk transfer address
2018-12-17T22:43:46.195462599Z 78 PC: 13ace | Find first file
2018-12-17T22:43:46.202417001Z 47 PC: 15e92 | Get disk transfer address
2018-12-17T22:43:46.204032996Z 26 PC: 15e9d | Set disk transfer address
2018-12-17T22:43:46.206722246Z 79 PC: 15ea1 | Find next file
2018-12-17T22:43:46.209731609Z 26 PC: 15eb1 | Set disk transfer address
2018-12-17T22:43:46.211770718Z 98 PC: 1605d | Get current PSP
2018-12-17T22:43:46.216447882Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:46.227811105Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:43:46.235333633Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:46.243471097Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:43:46.251676438Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:46.258872073Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:43:46.267946766Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:46.27555741Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:43:46.284184113Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:46.292060936Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:43:46.299995068Z 47 PC: 15e55 | Get disk transfer address
2018-12-17T22:43:46.301769561Z 26 PC: 15e60 | Set disk transfer address
2018-12-17T22:43:46.304610978Z 78 PC: 15e6c | Find first file
2018-12-17T22:43:46.311896952Z 26 PC: 15e7e | Set disk transfer address
2018-12-17T22:43:46.316287979Z 26 PC: 13abc | Set disk transfer address
2018-12-17T22:43:46.321809429Z 78 PC: 13ace | Find first file
2018-12-17T22:43:46.340976638Z 67 PC: 134c6 | Get or set file attributes
2018-12-17T22:43:46.365061844Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:46.721073954Z 61 PC: 13614 | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:43:46.730875683Z 66 PC: 1614b | Move file pointer
2018-12-17T22:43:46.733395145Z 63 PC: 136b6 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:43:46.740045184Z 62 PC: 136fc | Close file
2018-12-17T22:43:46.743602886Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:46.763679373Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:46.770984283Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:43:46.779620894Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:46.786655797Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:43:46.794640243Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:46.802450271Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:43:46.810239641Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:46.818084876Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:43:46.826358284Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:46.833699011Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:43:46.840789809Z 86 PC: 13f05 | Rename file
2018-12-17T22:43:46.853687182Z 26 PC: 133ea | Set disk transfer address
2018-12-17T22:43:46.855446928Z 78 PC: 133fc | Find first file
2018-12-17T22:43:46.862525282Z 67 PC: 134c6 | Get or set file attributes
2018-12-17T22:43:46.870116991Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:46.881768293Z 61 PC: 13614 | Open file (Filename = 'C:\DOS\ATTRIB.���')
2018-12-17T22:43:46.889482001Z 87 PC: 13581 | Get or set file date and time
2018-12-17T22:43:46.891590452Z 63 PC: 136b6 | Read file or device (Read 5413 bytes on handle 5)
2018-12-17T22:43:46.901132032Z 66 PC: 1614b | Move file pointer
2018-12-17T22:43:46.903437833Z 64 PC: 13660 | Write file or device (Write 5413 bytes on handle 5)
2018-12-17T22:43:46.912073302Z 66 PC: 1614b | Move file pointer
2018-12-17T22:43:46.917714687Z 64 PC: 13660 | Write file or device (Write 5413 bytes on handle 5)
2018-12-17T22:43:46.929924679Z 87 PC: 135e3 | Get or set file date and time
2018-12-17T22:43:46.931925036Z 62 PC: 136fc | Close file
2018-12-17T22:43:46.941511491Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:46.953035556Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:46.960187308Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:43:46.968762403Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:46.975914185Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:43:46.983500884Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:46.991414076Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:43:47.00014256Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:47.007251021Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:43:47.015632072Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:47.023071875Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:43:47.030328735Z 86 PC: 13f21 | Rename file
2018-12-17T22:43:47.04331248Z 47 PC: 15e92 | Get disk transfer address
2018-12-17T22:43:47.045146134Z 26 PC: 15e9d | Set disk transfer address
2018-12-17T22:43:47.046637104Z 79 PC: 15ea1 | Find next file
2018-12-17T22:43:47.050971916Z 26 PC: 15eb1 | Set disk transfer address
2018-12-17T22:43:47.053515112Z 47 PC: 15e55 | Get disk transfer address
2018-12-17T22:43:47.055040828Z 26 PC: 15e60 | Set disk transfer address
2018-12-17T22:43:47.056717096Z 78 PC: 15e6c | Find first file
2018-12-17T22:43:47.064644605Z 26 PC: 15e7e | Set disk transfer address
2018-12-17T22:43:47.069681596Z 26 PC: 13abc | Set disk transfer address
2018-12-17T22:43:47.071171955Z 78 PC: 13ace | Find first file
2018-12-17T22:43:47.079463127Z 47 PC: 15e92 | Get disk transfer address
2018-12-17T22:43:47.080974836Z 26 PC: 15e9d | Set disk transfer address
2018-12-17T22:43:47.082444927Z 79 PC: 15ea1 | Find next file
2018-12-17T22:43:47.087277413Z 26 PC: 15eb1 | Set disk transfer address
2018-12-17T22:43:47.091526574Z 26 PC: 13abc | Set disk transfer address
2018-12-17T22:43:47.093008237Z 78 PC: 13ace | Find first file
2018-12-17T22:43:47.101113871Z 67 PC: 134c6 | Get or set file attributes
2018-12-17T22:43:47.108114659Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:47.118813914Z 61 PC: 13614 | Open file (Filename = 'C:\DOS\FORMAT.COM')
2018-12-17T22:43:47.127124032Z 66 PC: 1614b | Move file pointer
2018-12-17T22:43:47.129277787Z 63 PC: 136b6 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:43:47.136218022Z 62 PC: 136fc | Close file
2018-12-17T22:43:47.13925196Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:47.150932638Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:47.157947283Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:43:47.166004747Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:47.172860152Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:43:47.180219524Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:47.187702959Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:43:47.195958645Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:47.202999539Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:43:47.210838051Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:47.217503259Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:43:47.224460897Z 86 PC: 13f05 | Rename file
2018-12-17T22:43:47.237249786Z 26 PC: 133ea | Set disk transfer address
2018-12-17T22:43:47.238627584Z 78 PC: 133fc | Find first file
2018-12-17T22:43:47.245950377Z 67 PC: 134c6 | Get or set file attributes
2018-12-17T22:43:47.253112098Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:47.265323002Z 61 PC: 13614 | Open file (Filename = 'C:\DOS\FORMAT.���')
2018-12-17T22:43:47.272924579Z 87 PC: 13581 | Get or set file date and time
2018-12-17T22:43:47.275570619Z 63 PC: 136b6 | Read file or device (Read 5413 bytes on handle 5)
2018-12-17T22:43:47.283803412Z 66 PC: 1614b | Move file pointer
2018-12-17T22:43:47.285950604Z 64 PC: 13660 | Write file or device (Write 5413 bytes on handle 5)
2018-12-17T22:43:47.295509257Z 66 PC: 1614b | Move file pointer
2018-12-17T22:43:47.29975958Z 64 PC: 13660 | Write file or device (Write 5413 bytes on handle 5)
2018-12-17T22:43:47.312707268Z 87 PC: 135e3 | Get or set file date and time
2018-12-17T22:43:47.314989514Z 62 PC: 136fc | Close file
2018-12-17T22:43:47.32298417Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:47.334344827Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:47.341614871Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:43:47.348589641Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:47.355354997Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:43:47.363797974Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:47.370659472Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:43:47.37809638Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:47.385996937Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:43:47.394238567Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:47.401205762Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:43:47.408843487Z 86 PC: 13f21 | Rename file
2018-12-17T22:43:47.420523214Z 47 PC: 15e92 | Get disk transfer address
2018-12-17T22:43:47.421883989Z 26 PC: 15e9d | Set disk transfer address
2018-12-17T22:43:47.423943518Z 79 PC: 15ea1 | Find next file
2018-12-17T22:43:47.427309279Z 26 PC: 15eb1 | Set disk transfer address
2018-12-17T22:43:47.431305545Z 26 PC: 13abc | Set disk transfer address
2018-12-17T22:43:47.433371565Z 78 PC: 13ace | Find first file
2018-12-17T22:43:47.440126181Z 67 PC: 134c6 | Get or set file attributes
2018-12-17T22:43:47.446351404Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:47.457783345Z 61 PC: 13614 | Open file (Filename = 'C:\DOS\KEYB.COM')
2018-12-17T22:43:47.465346069Z 66 PC: 1614b | Move file pointer
2018-12-17T22:43:47.468086946Z 63 PC: 136b6 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:43:47.474559953Z 62 PC: 136fc | Close file
2018-12-17T22:43:47.47676252Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:47.489441423Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:47.496582375Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:43:47.503821642Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:47.510797133Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:43:47.518567036Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:47.523793642Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:43:47.529561455Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:47.534930129Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:43:47.540443093Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:47.548957755Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:43:47.554275022Z 86 PC: 13f05 | Rename file
2018-12-17T22:43:47.566428528Z 26 PC: 133ea | Set disk transfer address
2018-12-17T22:43:47.569194773Z 78 PC: 133fc | Find first file
2018-12-17T22:43:47.576437516Z 67 PC: 134c6 | Get or set file attributes
2018-12-17T22:43:47.582954306Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:47.595276228Z 61 PC: 13614 | Open file (Filename = 'C:\DOS\KEYB.���')
2018-12-17T22:43:47.602914455Z 87 PC: 13581 | Get or set file date and time
2018-12-17T22:43:47.604718372Z 63 PC: 136b6 | Read file or device (Read 5413 bytes on handle 5)
2018-12-17T22:43:47.613263802Z 66 PC: 1614b | Move file pointer
2018-12-17T22:43:47.615122653Z 64 PC: 13660 | Write file or device (Write 5413 bytes on handle 5)
2018-12-17T22:43:47.623207007Z 66 PC: 1614b | Move file pointer
2018-12-17T22:43:47.628363041Z 64 PC: 13660 | Write file or device (Write 5413 bytes on handle 5)
2018-12-17T22:43:47.637779727Z 87 PC: 135e3 | Get or set file date and time
2018-12-17T22:43:47.639361828Z 62 PC: 136fc | Close file
2018-12-17T22:43:47.647508299Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:47.659148491Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:47.665911212Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:43:47.674385749Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:47.681443876Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:43:47.689138347Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:47.697335503Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:43:47.704709672Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:47.711666539Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:43:47.720465665Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:47.72713433Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:43:47.733836327Z 86 PC: 13f21 | Rename file
2018-12-17T22:43:47.746322689Z 47 PC: 15e92 | Get disk transfer address
2018-12-17T22:43:47.747783903Z 26 PC: 15e9d | Set disk transfer address
2018-12-17T22:43:47.749245438Z 79 PC: 15ea1 | Find next file
2018-12-17T22:43:47.753735781Z 26 PC: 15eb1 | Set disk transfer address
2018-12-17T22:43:47.757662487Z 26 PC: 13abc | Set disk transfer address
2018-12-17T22:43:47.759015378Z 78 PC: 13ace | Find first file
2018-12-17T22:43:47.7670032Z 67 PC: 134c6 | Get or set file attributes
2018-12-17T22:43:47.77370078Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:47.784815725Z 61 PC: 13614 | Open file (Filename = 'C:\DOS\SYS.COM')
2018-12-17T22:43:47.792918724Z 66 PC: 1614b | Move file pointer
2018-12-17T22:43:47.794895346Z 63 PC: 136b6 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:43:47.800661686Z 62 PC: 136fc | Close file
2018-12-17T22:43:47.803250699Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:47.814253364Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:47.820818564Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:43:47.828427415Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:47.83496297Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:43:47.841951476Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:47.849465638Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:43:47.856496303Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:47.863269524Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:43:47.870926485Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:47.877514338Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:43:47.88477275Z 86 PC: 13f05 | Rename file
2018-12-17T22:43:47.896569707Z 26 PC: 133ea | Set disk transfer address
2018-12-17T22:43:47.897744664Z 78 PC: 133fc | Find first file
2018-12-17T22:43:47.904969493Z 67 PC: 134c6 | Get or set file attributes
2018-12-17T22:43:47.912303358Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:47.940895979Z 61 PC: 13614 | Open file (Filename = 'C:\DOS\SYS.���')
2018-12-17T22:43:47.948897928Z 87 PC: 13581 | Get or set file date and time
2018-12-17T22:43:47.950510948Z 63 PC: 136b6 | Read file or device (Read 5413 bytes on handle 5)
2018-12-17T22:43:47.958208345Z 66 PC: 1614b | Move file pointer
2018-12-17T22:43:47.960730031Z 64 PC: 13660 | Write file or device (Write 5413 bytes on handle 5)
2018-12-17T22:43:48.010722825Z 66 PC: 1614b | Move file pointer
2018-12-17T22:43:48.014478689Z 64 PC: 13660 | Write file or device (Write 5413 bytes on handle 5)
2018-12-17T22:43:48.116316327Z 87 PC: 135e3 | Get or set file date and time
2018-12-17T22:43:48.118577865Z 62 PC: 136fc | Close file
2018-12-17T22:43:48.231825462Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:48.242734942Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:48.24928818Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:43:48.256110583Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:48.262496828Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:43:48.269247537Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:48.275921051Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:43:48.285476277Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:48.291272243Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\vs.vsn')
2018-12-17T22:43:48.30075866Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:48.307384304Z 65 PC: 13c19 | Delete file (Filename = 'C:\DOS\ivb.ntz')
2018-12-17T22:43:48.313935558Z 86 PC: 13f21 | Rename file
2018-12-17T22:43:48.32573997Z 47 PC: 15e92 | Get disk transfer address
2018-12-17T22:43:48.327177439Z 26 PC: 15e9d | Set disk transfer address
2018-12-17T22:43:48.328585824Z 79 PC: 15ea1 | Find next file
2018-12-17T22:43:48.332848901Z 26 PC: 15eb1 | Set disk transfer address
2018-12-17T22:43:48.334575504Z 98 PC: 1605d | Get current PSP
2018-12-17T22:43:48.336353844Z 98 PC: 1605d | Get current PSP
2018-12-17T22:43:48.338447857Z 98 PC: 1605d | Get current PSP
2018-12-17T22:43:48.340386357Z 98 PC: 1605d | Get current PSP
2018-12-17T22:43:48.342106348Z 98 PC: 1605d | Get current PSP
2018-12-17T22:43:48.34538717Z 98 PC: 1605d | Get current PSP
2018-12-17T22:43:48.347146885Z 98 PC: 1605d | Get current PSP
2018-12-17T22:43:48.348915467Z 98 PC: 1605d | Get current PSP
2018-12-17T22:43:48.351538964Z 98 PC: 1605d | Get current PSP
2018-12-17T22:43:48.353228126Z 98 PC: 1605d | Get current PSP
2018-12-17T22:43:48.354785942Z 98 PC: 1605d | Get current PSP
2018-12-17T22:43:48.357068099Z 98 PC: 1605d | Get current PSP
2018-12-17T22:43:48.358702939Z 98 PC: 1605d | Get current PSP
2018-12-17T22:43:48.360390328Z 98 PC: 1605d | Get current PSP
2018-12-17T22:43:48.362724232Z 98 PC: 1605d | Get current PSP
2018-12-17T22:43:48.364444052Z 98 PC: 1605d | Get current PSP
2018-12-17T22:43:48.366290209Z 98 PC: 1605d | Get current PSP
2018-12-17T22:43:48.369890902Z 98 PC: 1605d | Get current PSP
2018-12-17T22:43:48.371573762Z 98 PC: 1605d | Get current PSP
2018-12-17T22:43:48.373290997Z 98 PC: 1605d | Get current PSP
2018-12-17T22:43:48.376804417Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:48.386023241Z 65 PC: 13c19 | Delete file (Filename = 'anti-vir.dat')
2018-12-17T22:43:48.392285162Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:48.399171055Z 65 PC: 13c19 | Delete file (Filename = 'chklist.ms')
2018-12-17T22:43:48.405621841Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:48.411809682Z 65 PC: 13c19 | Delete file (Filename = 'chklist.cps')
2018-12-17T22:43:48.423411101Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:48.434616487Z 65 PC: 13c19 | Delete file (Filename = 'vs.vsn')
2018-12-17T22:43:48.441001799Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:48.446721873Z 65 PC: 13c19 | Delete file (Filename = 'ivb.ntz')
2018-12-17T22:43:48.452803145Z 86 PC: 13f05 | Rename file
2018-12-17T22:43:48.68749798Z 26 PC: 12e2a | Set disk transfer address
2018-12-17T22:43:48.689285026Z 78 PC: 12e3c | Find first file
2018-12-17T22:43:48.700631406Z 67 PC: 134c6 | Get or set file attributes
2018-12-17T22:43:48.718319107Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:48.812167079Z 61 PC: 13614 | Open file (Filename = 'A:\TEST.���')
2018-12-17T22:43:48.819736976Z 87 PC: 13581 | Get or set file date and time
2018-12-17T22:43:48.822280905Z 66 PC: 1614b | Move file pointer
2018-12-17T22:43:48.824415213Z 63 PC: 136b6 | Read file or device (Read 5413 bytes on handle 5)
2018-12-17T22:43:48.8328154Z 66 PC: 1614b | Move file pointer
2018-12-17T22:43:48.837832873Z 64 PC: 13660 | Write file or device (Write 5413 bytes on handle 5)
2018-12-17T22:43:48.846107014Z 87 PC: 135e3 | Get or set file date and time
2018-12-17T22:43:48.847749859Z 62 PC: 136fc | Close file
2018-12-17T22:43:48.857698734Z 61 PC: 13614 | Open file (Filename = 'A:\TEST.���')
2018-12-17T22:43:48.86633257Z 66 PC: 1614b | Move file pointer
2018-12-17T22:43:48.869511321Z 64 PC: 13660 | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:43:48.880362461Z 87 PC: 135e3 | Get or set file date and time
2018-12-17T22:43:48.882027438Z 62 PC: 136fc | Close file
2018-12-17T22:43:48.889651908Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:48.901596041Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:48.908156112Z 65 PC: 13c19 | Delete file (Filename = 'anti-vir.dat')
2018-12-17T22:43:48.915426186Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:48.928528394Z 65 PC: 13c19 | Delete file (Filename = 'chklist.ms')
2018-12-17T22:43:48.935210174Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:48.941403286Z 65 PC: 13c19 | Delete file (Filename = 'chklist.cps')
2018-12-17T22:43:48.946265066Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:48.950518195Z 65 PC: 13c19 | Delete file (Filename = 'vs.vsn')
2018-12-17T22:43:48.959697054Z 67 PC: 134fd | Get or set file attributes
2018-12-17T22:43:48.969081209Z 65 PC: 13c19 | Delete file (Filename = 'ivb.ntz')
2018-12-17T22:43:48.978362191Z 86 PC: 13f21 | Rename file
2018-12-17T22:43:48.992582879Z 73 PC: 1622c | Release memory
2018-12-17T22:43:48.99411711Z 73 PC: 1622c | Release memory
2018-12-17T22:43:48.995617228Z 75 PC: 130f2 | Execute program
2018-12-17T22:43:49.018705642Z 80 PC: 1f939 | Set current PSP
2018-12-17T22:43:49.019940261Z 48 PC: 1f93e | Get DOS version
2018-12-17T22:43:49.021871338Z 99 PC: 26120 | Get DBCS lead byte table pointer
2018-12-17T22:43:49.026034247Z 101 PC: 1f9c4 | Get extended country info
2018-12-17T22:43:49.027711557Z 99 PC: 1f9ca | Get DBCS lead byte table pointer
2018-12-17T22:43:49.029365553Z 74 PC: 1fa2c | Reallocate memory
2018-12-17T22:43:49.03234022Z 25 PC: 1fa63 | Get default drive
2018-12-17T22:43:49.033877929Z 37 PC: 1f523 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T22:43:49.035524832Z 37 PC: 1f52a | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:43:49.037700107Z 37 PC: 1f531 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:43:49.04256849Z 74 PC: 1e6cc | Reallocate memory
2018-12-17T22:43:49.045117628Z 72 PC: 1e70d | Allocate memory
2018-12-17T22:43:49.047061669Z 72 PC: 1e745 | Allocate memory
2018-12-17T22:43:49.049322425Z 72 PC: 1e74d | Allocate memory