Sample viewer

vx.netlux.org/Virus.DOS.HLLP.Krile.5696

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:44:04.296539026Z 74 PC: 13b8a | Reallocate memory
2018-12-17T22:44:04.309756694Z 74 PC: 18be9 | Reallocate memory
2018-12-17T22:44:04.312247621Z 98 PC: 180e6 | Get current PSP
2018-12-17T22:44:04.31386747Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:04.320089848Z 65 PC: 139f7 | Delete file (Filename = 'anti-vir.dat')
2018-12-17T22:44:04.326313547Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:04.332160892Z 65 PC: 139f7 | Delete file (Filename = 'chklist.ms')
2018-12-17T22:44:04.346995929Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:04.352886683Z 65 PC: 139f7 | Delete file (Filename = 'chklist.cps')
2018-12-17T22:44:04.358876462Z 26 PC: 12bf4 | Set disk transfer address
2018-12-17T22:44:04.360687415Z 78 PC: 12c06 | Find first file
2018-12-17T22:44:04.367010526Z 67 PC: 13257 | Get or set file attributes
2018-12-17T22:44:04.372506237Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:04.389359033Z 61 PC: 133a5 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:44:04.3961266Z 63 PC: 13447 | Read file or device (Read 5696 bytes on handle 5)
2018-12-17T22:44:04.403229097Z 62 PC: 1348d | Close file
2018-12-17T22:44:04.404861767Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:04.414764196Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:04.42024708Z 65 PC: 139f7 | Delete file (Filename = 'anti-vir.dat')
2018-12-17T22:44:04.425818994Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:04.436800115Z 65 PC: 139f7 | Delete file (Filename = 'chklist.ms')
2018-12-17T22:44:04.442437323Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:04.448050165Z 65 PC: 139f7 | Delete file (Filename = 'chklist.cps')
2018-12-17T22:44:04.454540158Z 47 PC: 17f25 | Get disk transfer address
2018-12-17T22:44:04.455617737Z 26 PC: 17f30 | Set disk transfer address
2018-12-17T22:44:04.45662315Z 78 PC: 17f3c | Find first file
2018-12-17T22:44:04.463362361Z 26 PC: 17f4e | Set disk transfer address
2018-12-17T22:44:04.467047831Z 26 PC: 138de | Set disk transfer address
2018-12-17T22:44:04.468072745Z 78 PC: 138f0 | Find first file
2018-12-17T22:44:04.479328686Z 67 PC: 13257 | Get or set file attributes
2018-12-17T22:44:04.489584815Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:04.499579627Z 61 PC: 133a5 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:44:04.509307349Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:04.510686082Z 63 PC: 13447 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:44:04.523108603Z 62 PC: 1348d | Close file
2018-12-17T22:44:04.525509527Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:04.536295225Z 47 PC: 17f62 | Get disk transfer address
2018-12-17T22:44:04.537720438Z 26 PC: 17f6d | Set disk transfer address
2018-12-17T22:44:04.539305304Z 79 PC: 17f71 | Find next file
2018-12-17T22:44:04.541823684Z 26 PC: 17f81 | Set disk transfer address
2018-12-17T22:44:04.543606204Z 47 PC: 17f25 | Get disk transfer address
2018-12-17T22:44:04.545804295Z 26 PC: 17f30 | Set disk transfer address
2018-12-17T22:44:04.546959353Z 78 PC: 17f3c | Find first file
2018-12-17T22:44:04.552756087Z 26 PC: 17f4e | Set disk transfer address
2018-12-17T22:44:04.556986337Z 26 PC: 138de | Set disk transfer address
2018-12-17T22:44:04.561850784Z 78 PC: 138f0 | Find first file
2018-12-17T22:44:04.568735518Z 47 PC: 17f62 | Get disk transfer address
2018-12-17T22:44:04.570207872Z 26 PC: 17f6d | Set disk transfer address
2018-12-17T22:44:04.572343506Z 79 PC: 17f71 | Find next file
2018-12-17T22:44:04.57574911Z 26 PC: 17f81 | Set disk transfer address
2018-12-17T22:44:04.579866534Z 26 PC: 138de | Set disk transfer address
2018-12-17T22:44:04.589489586Z 78 PC: 138f0 | Find first file
2018-12-17T22:44:04.595520797Z 47 PC: 17f62 | Get disk transfer address
2018-12-17T22:44:04.597013292Z 26 PC: 17f6d | Set disk transfer address
2018-12-17T22:44:04.599624951Z 79 PC: 17f71 | Find next file
2018-12-17T22:44:04.602455753Z 26 PC: 17f81 | Set disk transfer address
2018-12-17T22:44:04.606432972Z 26 PC: 138de | Set disk transfer address
2018-12-17T22:44:04.608357454Z 78 PC: 138f0 | Find first file
2018-12-17T22:44:04.612640903Z 47 PC: 17f62 | Get disk transfer address
2018-12-17T22:44:04.613694964Z 26 PC: 17f6d | Set disk transfer address
2018-12-17T22:44:04.615355693Z 79 PC: 17f71 | Find next file
2018-12-17T22:44:04.617350478Z 26 PC: 17f81 | Set disk transfer address
2018-12-17T22:44:04.619830861Z 26 PC: 138de | Set disk transfer address
2018-12-17T22:44:04.62141788Z 78 PC: 138f0 | Find first file
2018-12-17T22:44:04.625335287Z 47 PC: 17f62 | Get disk transfer address
2018-12-17T22:44:04.626333667Z 26 PC: 17f6d | Set disk transfer address
2018-12-17T22:44:04.627831597Z 79 PC: 17f71 | Find next file
2018-12-17T22:44:04.62961408Z 26 PC: 17f81 | Set disk transfer address
2018-12-17T22:44:04.631996994Z 26 PC: 138de | Set disk transfer address
2018-12-17T22:44:04.633234959Z 78 PC: 138f0 | Find first file
2018-12-17T22:44:04.637407743Z 47 PC: 17f62 | Get disk transfer address
2018-12-17T22:44:04.638280343Z 26 PC: 17f6d | Set disk transfer address
2018-12-17T22:44:04.639671353Z 79 PC: 17f71 | Find next file
2018-12-17T22:44:04.641510948Z 26 PC: 17f81 | Set disk transfer address
2018-12-17T22:44:04.644055593Z 47 PC: 17f62 | Get disk transfer address
2018-12-17T22:44:04.645521302Z 26 PC: 17f6d | Set disk transfer address
2018-12-17T22:44:04.646459834Z 79 PC: 17f71 | Find next file
2018-12-17T22:44:04.648334051Z 26 PC: 17f81 | Set disk transfer address
2018-12-17T22:44:04.65130554Z 26 PC: 138de | Set disk transfer address
2018-12-17T22:44:04.652298326Z 78 PC: 138f0 | Find first file
2018-12-17T22:44:04.656410463Z 47 PC: 17f62 | Get disk transfer address
2018-12-17T22:44:04.657806071Z 26 PC: 17f6d | Set disk transfer address
2018-12-17T22:44:04.658698915Z 79 PC: 17f71 | Find next file
2018-12-17T22:44:04.660335422Z 26 PC: 17f81 | Set disk transfer address
2018-12-17T22:44:04.661957178Z 98 PC: 1811d | Get current PSP
2018-12-17T22:44:04.663124478Z 98 PC: 1811d | Get current PSP
2018-12-17T22:44:04.66435282Z 98 PC: 1811d | Get current PSP
2018-12-17T22:44:04.66699608Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:04.676606403Z 65 PC: 139f7 | Delete file (Filename = 'C:\DOS\anti-vir.dat')
2018-12-17T22:44:04.682979655Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:04.689358275Z 65 PC: 139f7 | Delete file (Filename = 'C:\DOS\chklist.ms')
2018-12-17T22:44:04.696376835Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:04.702569883Z 65 PC: 139f7 | Delete file (Filename = 'C:\DOS\chklist.cps')
2018-12-17T22:44:04.7093001Z 47 PC: 17f25 | Get disk transfer address
2018-12-17T22:44:04.710735619Z 26 PC: 17f30 | Set disk transfer address
2018-12-17T22:44:04.711926661Z 78 PC: 17f3c | Find first file
2018-12-17T22:44:04.718692407Z 26 PC: 17f4e | Set disk transfer address
2018-12-17T22:44:04.722034889Z 26 PC: 138de | Set disk transfer address
2018-12-17T22:44:04.723900608Z 78 PC: 138f0 | Find first file
2018-12-17T22:44:04.730408009Z 67 PC: 13257 | Get or set file attributes
2018-12-17T22:44:04.737417819Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:05.169688302Z 61 PC: 133a5 | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:44:05.17713308Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:05.180617143Z 63 PC: 13447 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:44:05.187023295Z 62 PC: 1348d | Close file
2018-12-17T22:44:05.189178527Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:05.200130796Z 86 PC: 13d41 | Rename file
2018-12-17T22:44:05.212037252Z 26 PC: 1313f | Set disk transfer address
2018-12-17T22:44:05.213144269Z 78 PC: 13151 | Find first file
2018-12-17T22:44:05.219960524Z 67 PC: 13257 | Get or set file attributes
2018-12-17T22:44:05.226013188Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:05.23581541Z 61 PC: 133a5 | Open file (Filename = 'C:\DOS\ATTRIB.���')
2018-12-17T22:44:05.243882718Z 87 PC: 13312 | Get or set file date and time
2018-12-17T22:44:05.245782681Z 63 PC: 13447 | Read file or device (Read 5696 bytes on handle 5)
2018-12-17T22:44:05.253505558Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:05.255863124Z 64 PC: 133f1 | Write file or device (Write 5696 bytes on handle 5)
2018-12-17T22:44:05.263674692Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:05.26788408Z 64 PC: 133f1 | Write file or device (Write 5696 bytes on handle 5)
2018-12-17T22:44:05.279826152Z 87 PC: 13374 | Get or set file date and time
2018-12-17T22:44:05.281449303Z 62 PC: 1348d | Close file
2018-12-17T22:44:05.288638012Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:05.299288618Z 86 PC: 13d5a | Rename file
2018-12-17T22:44:05.310408096Z 47 PC: 17f62 | Get disk transfer address
2018-12-17T22:44:05.311639021Z 26 PC: 17f6d | Set disk transfer address
2018-12-17T22:44:05.313670607Z 79 PC: 17f71 | Find next file
2018-12-17T22:44:05.318028768Z 26 PC: 17f81 | Set disk transfer address
2018-12-17T22:44:05.321876939Z 26 PC: 138de | Set disk transfer address
2018-12-17T22:44:05.325548452Z 78 PC: 138f0 | Find first file
2018-12-17T22:44:05.332633579Z 67 PC: 13257 | Get or set file attributes
2018-12-17T22:44:05.339111183Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:05.714622487Z 61 PC: 133a5 | Open file (Filename = 'C:\DOS\CHKDSK.EXE')
2018-12-17T22:44:05.722355888Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:05.724773802Z 63 PC: 13447 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:44:05.731729238Z 62 PC: 1348d | Close file
2018-12-17T22:44:05.734509507Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:05.745413391Z 86 PC: 13d41 | Rename file
2018-12-17T22:44:05.75354734Z 26 PC: 1313f | Set disk transfer address
2018-12-17T22:44:05.754533403Z 78 PC: 13151 | Find first file
2018-12-17T22:44:05.758544136Z 67 PC: 13257 | Get or set file attributes
2018-12-17T22:44:05.762972711Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:05.769148966Z 61 PC: 133a5 | Open file (Filename = 'C:\DOS\CHKDSK.���')
2018-12-17T22:44:05.773401279Z 87 PC: 13312 | Get or set file date and time
2018-12-17T22:44:05.775760751Z 63 PC: 13447 | Read file or device (Read 5696 bytes on handle 5)
2018-12-17T22:44:05.780736076Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:05.782232983Z 64 PC: 133f1 | Write file or device (Write 5696 bytes on handle 5)
2018-12-17T22:44:05.788338004Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:05.791295463Z 64 PC: 133f1 | Write file or device (Write 5696 bytes on handle 5)
2018-12-17T22:44:05.799251845Z 87 PC: 13374 | Get or set file date and time
2018-12-17T22:44:05.80108057Z 62 PC: 1348d | Close file
2018-12-17T22:44:05.80632443Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:05.813083566Z 86 PC: 13d5a | Rename file
2018-12-17T22:44:05.820748393Z 47 PC: 17f62 | Get disk transfer address
2018-12-17T22:44:05.821715777Z 26 PC: 17f6d | Set disk transfer address
2018-12-17T22:44:05.822648769Z 79 PC: 17f71 | Find next file
2018-12-17T22:44:05.825738476Z 26 PC: 17f81 | Set disk transfer address
2018-12-17T22:44:05.828052318Z 26 PC: 138de | Set disk transfer address
2018-12-17T22:44:05.828947086Z 78 PC: 138f0 | Find first file
2018-12-17T22:44:05.833481023Z 67 PC: 13257 | Get or set file attributes
2018-12-17T22:44:05.839517583Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:05.850034412Z 61 PC: 133a5 | Open file (Filename = 'C:\DOS\DEBUG.EXE')
2018-12-17T22:44:05.858127062Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:05.859954012Z 63 PC: 13447 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:44:05.86526919Z 62 PC: 1348d | Close file
2018-12-17T22:44:05.867789416Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:05.877936067Z 86 PC: 13d41 | Rename file
2018-12-17T22:44:05.888978201Z 26 PC: 1313f | Set disk transfer address
2018-12-17T22:44:05.891038728Z 78 PC: 13151 | Find first file
2018-12-17T22:44:05.897200864Z 67 PC: 13257 | Get or set file attributes
2018-12-17T22:44:05.90319689Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:05.913920393Z 61 PC: 133a5 | Open file (Filename = 'C:\DOS\DEBUG.���')
2018-12-17T22:44:05.920662122Z 87 PC: 13312 | Get or set file date and time
2018-12-17T22:44:05.921985849Z 63 PC: 13447 | Read file or device (Read 5696 bytes on handle 5)
2018-12-17T22:44:05.929445171Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:05.931183048Z 64 PC: 133f1 | Write file or device (Write 5696 bytes on handle 5)
2018-12-17T22:44:05.938814689Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:05.943437545Z 64 PC: 133f1 | Write file or device (Write 5696 bytes on handle 5)
2018-12-17T22:44:05.952888413Z 87 PC: 13374 | Get or set file date and time
2018-12-17T22:44:05.954854962Z 62 PC: 1348d | Close file
2018-12-17T22:44:05.96295318Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:05.97373778Z 86 PC: 13d5a | Rename file
2018-12-17T22:44:05.984575191Z 47 PC: 17f62 | Get disk transfer address
2018-12-17T22:44:05.986148802Z 26 PC: 17f6d | Set disk transfer address
2018-12-17T22:44:05.987170075Z 79 PC: 17f71 | Find next file
2018-12-17T22:44:05.990151106Z 26 PC: 17f81 | Set disk transfer address
2018-12-17T22:44:05.99363991Z 26 PC: 138de | Set disk transfer address
2018-12-17T22:44:05.994590736Z 78 PC: 138f0 | Find first file
2018-12-17T22:44:06.001285565Z 67 PC: 13257 | Get or set file attributes
2018-12-17T22:44:06.007789844Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:06.01740229Z 61 PC: 133a5 | Open file (Filename = 'C:\DOS\EXPAND.EXE')
2018-12-17T22:44:06.024550819Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:06.027477474Z 63 PC: 13447 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:44:06.033015567Z 62 PC: 1348d | Close file
2018-12-17T22:44:06.034861452Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:06.046654189Z 86 PC: 13d41 | Rename file
2018-12-17T22:44:06.073899084Z 26 PC: 1313f | Set disk transfer address
2018-12-17T22:44:06.075352422Z 78 PC: 13151 | Find first file
2018-12-17T22:44:06.082157285Z 67 PC: 13257 | Get or set file attributes
2018-12-17T22:44:06.088073234Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:06.097505567Z 61 PC: 133a5 | Open file (Filename = 'C:\DOS\EXPAND.���')
2018-12-17T22:44:06.105511017Z 87 PC: 13312 | Get or set file date and time
2018-12-17T22:44:06.106973789Z 63 PC: 13447 | Read file or device (Read 5696 bytes on handle 5)
2018-12-17T22:44:06.114537334Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:06.116566996Z 64 PC: 133f1 | Write file or device (Write 5696 bytes on handle 5)
2018-12-17T22:44:06.124193257Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:06.12901786Z 64 PC: 133f1 | Write file or device (Write 5696 bytes on handle 5)
2018-12-17T22:44:06.138012666Z 87 PC: 13374 | Get or set file date and time
2018-12-17T22:44:06.139579293Z 62 PC: 1348d | Close file
2018-12-17T22:44:06.147395711Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:06.156889684Z 86 PC: 13d5a | Rename file
2018-12-17T22:44:06.168494483Z 47 PC: 17f62 | Get disk transfer address
2018-12-17T22:44:06.170609734Z 26 PC: 17f6d | Set disk transfer address
2018-12-17T22:44:06.171934513Z 79 PC: 17f71 | Find next file
2018-12-17T22:44:06.175145448Z 26 PC: 17f81 | Set disk transfer address
2018-12-17T22:44:06.179265773Z 26 PC: 138de | Set disk transfer address
2018-12-17T22:44:06.180841719Z 78 PC: 138f0 | Find first file
2018-12-17T22:44:06.187341256Z 67 PC: 13257 | Get or set file attributes
2018-12-17T22:44:06.197028115Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:06.206908096Z 61 PC: 133a5 | Open file (Filename = 'C:\DOS\FDISK.EXE')
2018-12-17T22:44:06.213418903Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:06.215296233Z 63 PC: 13447 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:44:06.220629908Z 62 PC: 1348d | Close file
2018-12-17T22:44:06.222081404Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:06.229111941Z 86 PC: 13d41 | Rename file
2018-12-17T22:44:06.236417854Z 26 PC: 1313f | Set disk transfer address
2018-12-17T22:44:06.237404727Z 78 PC: 13151 | Find first file
2018-12-17T22:44:06.242024004Z 67 PC: 13257 | Get or set file attributes
2018-12-17T22:44:06.245988917Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:06.252742152Z 61 PC: 133a5 | Open file (Filename = 'C:\DOS\FDISK.���')
2018-12-17T22:44:06.261189761Z 87 PC: 13312 | Get or set file date and time
2018-12-17T22:44:06.263820844Z 63 PC: 13447 | Read file or device (Read 5696 bytes on handle 5)
2018-12-17T22:44:06.27156912Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:06.275458843Z 64 PC: 133f1 | Write file or device (Write 5696 bytes on handle 5)
2018-12-17T22:44:06.289942837Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:06.294329842Z 64 PC: 133f1 | Write file or device (Write 5696 bytes on handle 5)
2018-12-17T22:44:06.30414546Z 87 PC: 13374 | Get or set file date and time
2018-12-17T22:44:06.30567887Z 62 PC: 1348d | Close file
2018-12-17T22:44:06.313551239Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:06.324201393Z 86 PC: 13d5a | Rename file
2018-12-17T22:44:06.335689753Z 47 PC: 17f62 | Get disk transfer address
2018-12-17T22:44:06.33736081Z 26 PC: 17f6d | Set disk transfer address
2018-12-17T22:44:06.340172731Z 79 PC: 17f71 | Find next file
2018-12-17T22:44:06.343594998Z 26 PC: 17f81 | Set disk transfer address
2018-12-17T22:44:06.346918834Z 26 PC: 138de | Set disk transfer address
2018-12-17T22:44:06.348493062Z 78 PC: 138f0 | Find first file
2018-12-17T22:44:06.354778457Z 67 PC: 13257 | Get or set file attributes
2018-12-17T22:44:06.360746049Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:06.370836633Z 61 PC: 133a5 | Open file (Filename = 'C:\DOS\MEM.EXE')
2018-12-17T22:44:06.378322142Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:06.380023014Z 63 PC: 13447 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:44:06.386081923Z 62 PC: 1348d | Close file
2018-12-17T22:44:06.387767314Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:06.397486834Z 86 PC: 13d41 | Rename file
2018-12-17T22:44:06.408895947Z 26 PC: 1313f | Set disk transfer address
2018-12-17T22:44:06.409926586Z 78 PC: 13151 | Find first file
2018-12-17T22:44:06.416074731Z 67 PC: 13257 | Get or set file attributes
2018-12-17T22:44:06.422453498Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:06.43177682Z 61 PC: 133a5 | Open file (Filename = 'C:\DOS\MEM.���')
2018-12-17T22:44:06.439395458Z 87 PC: 13312 | Get or set file date and time
2018-12-17T22:44:06.440999351Z 63 PC: 13447 | Read file or device (Read 5696 bytes on handle 5)
2018-12-17T22:44:06.448320001Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:06.450101467Z 64 PC: 133f1 | Write file or device (Write 5696 bytes on handle 5)
2018-12-17T22:44:06.45757238Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:06.460146632Z 64 PC: 133f1 | Write file or device (Write 5696 bytes on handle 5)
2018-12-17T22:44:06.466016024Z 87 PC: 13374 | Get or set file date and time
2018-12-17T22:44:06.467859719Z 62 PC: 1348d | Close file
2018-12-17T22:44:06.474875365Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:06.484194037Z 86 PC: 13d5a | Rename file
2018-12-17T22:44:06.495230386Z 47 PC: 17f62 | Get disk transfer address
2018-12-17T22:44:06.496523593Z 26 PC: 17f6d | Set disk transfer address
2018-12-17T22:44:06.497774367Z 79 PC: 17f71 | Find next file
2018-12-17T22:44:06.502260812Z 26 PC: 17f81 | Set disk transfer address
2018-12-17T22:44:06.506329073Z 26 PC: 138de | Set disk transfer address
2018-12-17T22:44:06.508502962Z 78 PC: 138f0 | Find first file
2018-12-17T22:44:06.514883696Z 67 PC: 13257 | Get or set file attributes
2018-12-17T22:44:06.520969174Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:06.531563474Z 61 PC: 133a5 | Open file (Filename = 'C:\DOS\NLSFUNC.EXE')
2018-12-17T22:44:06.538507202Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:06.540438307Z 63 PC: 13447 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:44:06.547344137Z 62 PC: 1348d | Close file
2018-12-17T22:44:06.549284699Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:06.559174374Z 86 PC: 13d41 | Rename file
2018-12-17T22:44:06.571456393Z 26 PC: 1313f | Set disk transfer address
2018-12-17T22:44:06.573519785Z 78 PC: 13151 | Find first file
2018-12-17T22:44:06.579990336Z 67 PC: 13257 | Get or set file attributes
2018-12-17T22:44:06.587730621Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:06.597380562Z 61 PC: 133a5 | Open file (Filename = 'C:\DOS\NLSFUNC.���')
2018-12-17T22:44:06.604605849Z 87 PC: 13312 | Get or set file date and time
2018-12-17T22:44:06.607494186Z 63 PC: 13447 | Read file or device (Read 5696 bytes on handle 5)
2018-12-17T22:44:06.614812919Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:06.616969103Z 64 PC: 133f1 | Write file or device (Write 5696 bytes on handle 5)
2018-12-17T22:44:06.625189757Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:06.629560577Z 64 PC: 133f1 | Write file or device (Write 5696 bytes on handle 5)
2018-12-17T22:44:06.63907052Z 87 PC: 13374 | Get or set file date and time
2018-12-17T22:44:06.641843803Z 62 PC: 1348d | Close file
2018-12-17T22:44:06.648877175Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:06.658605349Z 86 PC: 13d5a | Rename file
2018-12-17T22:44:06.670417211Z 47 PC: 17f62 | Get disk transfer address
2018-12-17T22:44:06.671524431Z 26 PC: 17f6d | Set disk transfer address
2018-12-17T22:44:06.672590856Z 79 PC: 17f71 | Find next file
2018-12-17T22:44:06.67694841Z 26 PC: 17f81 | Set disk transfer address
2018-12-17T22:44:06.680430873Z 26 PC: 138de | Set disk transfer address
2018-12-17T22:44:06.681754875Z 78 PC: 138f0 | Find first file
2018-12-17T22:44:06.689390189Z 67 PC: 13257 | Get or set file attributes
2018-12-17T22:44:06.695382119Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:06.70621885Z 61 PC: 133a5 | Open file (Filename = 'C:\DOS\QBASIC.EXE')
2018-12-17T22:44:06.713728318Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:06.715449199Z 63 PC: 13447 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:44:06.72156448Z 62 PC: 1348d | Close file
2018-12-17T22:44:06.723681082Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:06.734085437Z 86 PC: 13d41 | Rename file
2018-12-17T22:44:06.745882919Z 26 PC: 1313f | Set disk transfer address
2018-12-17T22:44:06.747252632Z 78 PC: 13151 | Find first file
2018-12-17T22:44:06.753796074Z 67 PC: 13257 | Get or set file attributes
2018-12-17T22:44:06.760599351Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:06.771292428Z 61 PC: 133a5 | Open file (Filename = 'C:\DOS\QBASIC.���')
2018-12-17T22:44:06.778511562Z 87 PC: 13312 | Get or set file date and time
2018-12-17T22:44:06.780974921Z 63 PC: 13447 | Read file or device (Read 5696 bytes on handle 5)
2018-12-17T22:44:06.788723362Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:06.790919998Z 64 PC: 133f1 | Write file or device (Write 5696 bytes on handle 5)
2018-12-17T22:44:06.799568729Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:06.804885402Z 64 PC: 133f1 | Write file or device (Write 5696 bytes on handle 5)
2018-12-17T22:44:06.81589483Z 87 PC: 13374 | Get or set file date and time
2018-12-17T22:44:06.817730419Z 62 PC: 1348d | Close file
2018-12-17T22:44:06.824883058Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:06.835902341Z 86 PC: 13d5a | Rename file
2018-12-17T22:44:06.846943967Z 47 PC: 17f62 | Get disk transfer address
2018-12-17T22:44:06.848297322Z 26 PC: 17f6d | Set disk transfer address
2018-12-17T22:44:06.8503986Z 79 PC: 17f71 | Find next file
2018-12-17T22:44:06.853940392Z 26 PC: 17f81 | Set disk transfer address
2018-12-17T22:44:06.857281925Z 26 PC: 138de | Set disk transfer address
2018-12-17T22:44:06.859312948Z 78 PC: 138f0 | Find first file
2018-12-17T22:44:06.865694751Z 67 PC: 13257 | Get or set file attributes
2018-12-17T22:44:06.871753097Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:06.882504848Z 61 PC: 133a5 | Open file (Filename = 'C:\DOS\REPLACE.EXE')
2018-12-17T22:44:06.889552434Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:06.891405652Z 63 PC: 13447 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:44:06.897999833Z 62 PC: 1348d | Close file
2018-12-17T22:44:06.899833805Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:06.9105555Z 86 PC: 13d41 | Rename file
2018-12-17T22:44:06.922476546Z 26 PC: 1313f | Set disk transfer address
2018-12-17T22:44:06.92366434Z 78 PC: 13151 | Find first file
2018-12-17T22:44:06.930064767Z 67 PC: 13257 | Get or set file attributes
2018-12-17T22:44:06.93765863Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:06.94727707Z 61 PC: 133a5 | Open file (Filename = 'C:\DOS\REPLACE.���')
2018-12-17T22:44:06.954297197Z 87 PC: 13312 | Get or set file date and time
2018-12-17T22:44:06.956931241Z 63 PC: 13447 | Read file or device (Read 5696 bytes on handle 5)
2018-12-17T22:44:06.964165203Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:06.966046928Z 64 PC: 133f1 | Write file or device (Write 5696 bytes on handle 5)
2018-12-17T22:44:06.975091823Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:06.979303907Z 64 PC: 133f1 | Write file or device (Write 5696 bytes on handle 5)
2018-12-17T22:44:06.990302341Z 87 PC: 13374 | Get or set file date and time
2018-12-17T22:44:06.992236765Z 62 PC: 1348d | Close file
2018-12-17T22:44:06.999822285Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:07.011113548Z 86 PC: 13d5a | Rename file
2018-12-17T22:44:07.022057738Z 47 PC: 17f62 | Get disk transfer address
2018-12-17T22:44:07.023070981Z 26 PC: 17f6d | Set disk transfer address
2018-12-17T22:44:07.025191427Z 79 PC: 17f71 | Find next file
2018-12-17T22:44:07.028088369Z 26 PC: 17f81 | Set disk transfer address
2018-12-17T22:44:07.031163315Z 26 PC: 138de | Set disk transfer address
2018-12-17T22:44:07.033367582Z 78 PC: 138f0 | Find first file
2018-12-17T22:44:07.04035299Z 67 PC: 13257 | Get or set file attributes
2018-12-17T22:44:07.046304196Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:07.057279626Z 61 PC: 133a5 | Open file (Filename = 'C:\DOS\RESTORE.EXE')
2018-12-17T22:44:07.064192679Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:07.065957159Z 63 PC: 13447 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:44:07.072435353Z 62 PC: 1348d | Close file
2018-12-17T22:44:07.074346034Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:07.084444243Z 86 PC: 13d41 | Rename file
2018-12-17T22:44:07.096386656Z 26 PC: 1313f | Set disk transfer address
2018-12-17T22:44:07.09773954Z 78 PC: 13151 | Find first file
2018-12-17T22:44:07.104986844Z 67 PC: 13257 | Get or set file attributes
2018-12-17T22:44:07.111872639Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:07.122041997Z 61 PC: 133a5 | Open file (Filename = 'C:\DOS\RESTORE.���')
2018-12-17T22:44:07.129620605Z 87 PC: 13312 | Get or set file date and time
2018-12-17T22:44:07.131218169Z 63 PC: 13447 | Read file or device (Read 5696 bytes on handle 5)
2018-12-17T22:44:07.13849704Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:07.14145101Z 64 PC: 133f1 | Write file or device (Write 5696 bytes on handle 5)
2018-12-17T22:44:07.149121229Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:07.151721054Z 64 PC: 133f1 | Write file or device (Write 5696 bytes on handle 5)
2018-12-17T22:44:07.161617029Z 87 PC: 13374 | Get or set file date and time
2018-12-17T22:44:07.16311897Z 62 PC: 1348d | Close file
2018-12-17T22:44:07.171600544Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:07.181737683Z 86 PC: 13d5a | Rename file
2018-12-17T22:44:07.192627506Z 47 PC: 17f62 | Get disk transfer address
2018-12-17T22:44:07.193732051Z 26 PC: 17f6d | Set disk transfer address
2018-12-17T22:44:07.195179375Z 79 PC: 17f71 | Find next file
2018-12-17T22:44:07.198128537Z 26 PC: 17f81 | Set disk transfer address
2018-12-17T22:44:07.201166214Z 26 PC: 138de | Set disk transfer address
2018-12-17T22:44:07.206306972Z 78 PC: 138f0 | Find first file
2018-12-17T22:44:07.212888041Z 67 PC: 13257 | Get or set file attributes
2018-12-17T22:44:07.219384704Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:07.228936312Z 61 PC: 133a5 | Open file (Filename = 'C:\DOS\SCANDISK.EXE')
2018-12-17T22:44:07.236495284Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:07.239001483Z 63 PC: 13447 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:44:07.244771016Z 62 PC: 1348d | Close file
2018-12-17T22:44:07.246559887Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:07.257163749Z 86 PC: 13d41 | Rename file
2018-12-17T22:44:07.267718421Z 26 PC: 1313f | Set disk transfer address
2018-12-17T22:44:07.268765427Z 78 PC: 13151 | Find first file
2018-12-17T22:44:07.289880878Z 67 PC: 13257 | Get or set file attributes
2018-12-17T22:44:07.296667014Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:07.306370355Z 61 PC: 133a5 | Open file (Filename = 'C:\DOS\SCANDISK.���')
2018-12-17T22:44:07.314466708Z 87 PC: 13312 | Get or set file date and time
2018-12-17T22:44:07.315904769Z 63 PC: 13447 | Read file or device (Read 5696 bytes on handle 5)
2018-12-17T22:44:07.322996447Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:07.325081286Z 64 PC: 133f1 | Write file or device (Write 5696 bytes on handle 5)
2018-12-17T22:44:07.332498554Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:07.336763387Z 64 PC: 133f1 | Write file or device (Write 5696 bytes on handle 5)
2018-12-17T22:44:07.345768177Z 87 PC: 13374 | Get or set file date and time
2018-12-17T22:44:07.347286429Z 62 PC: 1348d | Close file
2018-12-17T22:44:07.355420007Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:07.365762587Z 86 PC: 13d5a | Rename file
2018-12-17T22:44:07.376582751Z 47 PC: 17f62 | Get disk transfer address
2018-12-17T22:44:07.378480602Z 26 PC: 17f6d | Set disk transfer address
2018-12-17T22:44:07.379522468Z 79 PC: 17f71 | Find next file
2018-12-17T22:44:07.382486088Z 26 PC: 17f81 | Set disk transfer address
2018-12-17T22:44:07.386605329Z 26 PC: 138de | Set disk transfer address
2018-12-17T22:44:07.387748387Z 78 PC: 138f0 | Find first file
2018-12-17T22:44:07.395154704Z 67 PC: 13257 | Get or set file attributes
2018-12-17T22:44:07.402294807Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:07.412331524Z 61 PC: 133a5 | Open file (Filename = 'C:\DOS\SETUP.EXE')
2018-12-17T22:44:07.419131493Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:07.420838632Z 63 PC: 13447 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:44:07.427009772Z 62 PC: 1348d | Close file
2018-12-17T22:44:07.429388631Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:07.439444685Z 86 PC: 13d41 | Rename file
2018-12-17T22:44:07.450280849Z 26 PC: 1313f | Set disk transfer address
2018-12-17T22:44:07.451848384Z 78 PC: 13151 | Find first file
2018-12-17T22:44:07.458059772Z 67 PC: 13257 | Get or set file attributes
2018-12-17T22:44:07.464269004Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:07.474976783Z 61 PC: 133a5 | Open file (Filename = 'C:\DOS\SETUP.���')
2018-12-17T22:44:07.482096318Z 87 PC: 13312 | Get or set file date and time
2018-12-17T22:44:07.483951327Z 63 PC: 13447 | Read file or device (Read 5696 bytes on handle 5)
2018-12-17T22:44:07.493004373Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:07.495024581Z 64 PC: 133f1 | Write file or device (Write 5696 bytes on handle 5)
2018-12-17T22:44:07.503598135Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:07.507874054Z 64 PC: 133f1 | Write file or device (Write 5696 bytes on handle 5)
2018-12-17T22:44:07.516806453Z 87 PC: 13374 | Get or set file date and time
2018-12-17T22:44:07.519168648Z 62 PC: 1348d | Close file
2018-12-17T22:44:07.52634086Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:07.534666812Z 86 PC: 13d5a | Rename file
2018-12-17T22:44:07.546816566Z 47 PC: 17f62 | Get disk transfer address
2018-12-17T22:44:07.548253308Z 26 PC: 17f6d | Set disk transfer address
2018-12-17T22:44:07.549618138Z 79 PC: 17f71 | Find next file
2018-12-17T22:44:07.553314668Z 26 PC: 17f81 | Set disk transfer address
2018-12-17T22:44:07.556447102Z 26 PC: 138de | Set disk transfer address
2018-12-17T22:44:07.559073226Z 78 PC: 138f0 | Find first file
2018-12-17T22:44:07.565470929Z 67 PC: 13257 | Get or set file attributes
2018-12-17T22:44:07.571693893Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:07.583009146Z 61 PC: 133a5 | Open file (Filename = 'C:\DOS\XCOPY.EXE')
2018-12-17T22:44:07.590028551Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:07.591831146Z 63 PC: 13447 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:44:07.598109659Z 62 PC: 1348d | Close file
2018-12-17T22:44:07.600300377Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:07.610911373Z 86 PC: 13d41 | Rename file
2018-12-17T22:44:07.624230539Z 26 PC: 1313f | Set disk transfer address
2018-12-17T22:44:07.625732994Z 78 PC: 13151 | Find first file
2018-12-17T22:44:07.633076485Z 67 PC: 13257 | Get or set file attributes
2018-12-17T22:44:07.63941926Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:07.649777621Z 61 PC: 133a5 | Open file (Filename = 'C:\DOS\XCOPY.���')
2018-12-17T22:44:07.658046825Z 87 PC: 13312 | Get or set file date and time
2018-12-17T22:44:07.659676434Z 63 PC: 13447 | Read file or device (Read 5696 bytes on handle 5)
2018-12-17T22:44:07.666788914Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:07.66966529Z 64 PC: 133f1 | Write file or device (Write 5696 bytes on handle 5)
2018-12-17T22:44:07.677629634Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:07.681641146Z 64 PC: 133f1 | Write file or device (Write 5696 bytes on handle 5)
2018-12-17T22:44:07.691659686Z 87 PC: 13374 | Get or set file date and time
2018-12-17T22:44:07.693418981Z 62 PC: 1348d | Close file
2018-12-17T22:44:07.701338035Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:07.71105006Z 86 PC: 13d5a | Rename file
2018-12-17T22:44:07.721995938Z 47 PC: 17f62 | Get disk transfer address
2018-12-17T22:44:07.723728456Z 26 PC: 17f6d | Set disk transfer address
2018-12-17T22:44:07.724664385Z 79 PC: 17f71 | Find next file
2018-12-17T22:44:07.727499477Z 26 PC: 17f81 | Set disk transfer address
2018-12-17T22:44:07.731207187Z 26 PC: 138de | Set disk transfer address
2018-12-17T22:44:07.732142266Z 78 PC: 138f0 | Find first file
2018-12-17T22:44:07.738864266Z 67 PC: 13257 | Get or set file attributes
2018-12-17T22:44:07.745043943Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:07.755603174Z 61 PC: 133a5 | Open file (Filename = 'C:\DOS\DEFRAG.EXE')
2018-12-17T22:44:07.764731107Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:07.766743061Z 63 PC: 13447 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:44:07.772315111Z 62 PC: 1348d | Close file
2018-12-17T22:44:07.775334724Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:07.78514241Z 86 PC: 13d41 | Rename file
2018-12-17T22:44:07.795786909Z 26 PC: 1313f | Set disk transfer address
2018-12-17T22:44:07.79812358Z 78 PC: 13151 | Find first file
2018-12-17T22:44:07.804204366Z 67 PC: 13257 | Get or set file attributes
2018-12-17T22:44:07.810410321Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:07.821266687Z 61 PC: 133a5 | Open file (Filename = 'C:\DOS\DEFRAG.���')
2018-12-17T22:44:07.828139732Z 87 PC: 13312 | Get or set file date and time
2018-12-17T22:44:07.829849767Z 63 PC: 13447 | Read file or device (Read 5696 bytes on handle 5)
2018-12-17T22:44:07.837651373Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:07.839378253Z 64 PC: 133f1 | Write file or device (Write 5696 bytes on handle 5)
2018-12-17T22:44:07.847795157Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:07.85225137Z 64 PC: 133f1 | Write file or device (Write 5696 bytes on handle 5)
2018-12-17T22:44:07.862044762Z 87 PC: 13374 | Get or set file date and time
2018-12-17T22:44:07.864390633Z 62 PC: 1348d | Close file
2018-12-17T22:44:07.871516085Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:07.882448258Z 86 PC: 13d5a | Rename file
2018-12-17T22:44:07.894561971Z 47 PC: 17f62 | Get disk transfer address
2018-12-17T22:44:07.895815233Z 26 PC: 17f6d | Set disk transfer address
2018-12-17T22:44:07.897227715Z 79 PC: 17f71 | Find next file
2018-12-17T22:44:07.901257694Z 26 PC: 17f81 | Set disk transfer address
2018-12-17T22:44:07.906427201Z 47 PC: 17f62 | Get disk transfer address
2018-12-17T22:44:07.90881244Z 26 PC: 17f6d | Set disk transfer address
2018-12-17T22:44:07.910153221Z 79 PC: 17f71 | Find next file
2018-12-17T22:44:07.913478341Z 26 PC: 17f81 | Set disk transfer address
2018-12-17T22:44:07.918367749Z 47 PC: 17f62 | Get disk transfer address
2018-12-17T22:44:07.919711515Z 26 PC: 17f6d | Set disk transfer address
2018-12-17T22:44:07.921009226Z 79 PC: 17f71 | Find next file
2018-12-17T22:44:07.925260895Z 26 PC: 17f81 | Set disk transfer address
2018-12-17T22:44:07.927271416Z 47 PC: 17f25 | Get disk transfer address
2018-12-17T22:44:07.928815544Z 26 PC: 17f30 | Set disk transfer address
2018-12-17T22:44:07.930266817Z 78 PC: 17f3c | Find first file
2018-12-17T22:44:07.937228147Z 26 PC: 17f4e | Set disk transfer address
2018-12-17T22:44:07.941537922Z 26 PC: 138de | Set disk transfer address
2018-12-17T22:44:07.942730801Z 78 PC: 138f0 | Find first file
2018-12-17T22:44:07.94928634Z 47 PC: 17f62 | Get disk transfer address
2018-12-17T22:44:07.951339177Z 26 PC: 17f6d | Set disk transfer address
2018-12-17T22:44:07.95260667Z 79 PC: 17f71 | Find next file
2018-12-17T22:44:07.95604585Z 26 PC: 17f81 | Set disk transfer address
2018-12-17T22:44:07.960392911Z 26 PC: 138de | Set disk transfer address
2018-12-17T22:44:07.961602633Z 78 PC: 138f0 | Find first file
2018-12-17T22:44:07.969088739Z 67 PC: 13257 | Get or set file attributes
2018-12-17T22:44:07.975096695Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:07.993302904Z 61 PC: 133a5 | Open file (Filename = 'C:\DOS\FORMAT.COM')
2018-12-17T22:44:08.001414619Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:08.003731582Z 63 PC: 13447 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:44:08.010454008Z 62 PC: 1348d | Close file
2018-12-17T22:44:08.013068406Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:08.024656016Z 86 PC: 13d41 | Rename file
2018-12-17T22:44:08.037184253Z 26 PC: 1313f | Set disk transfer address
2018-12-17T22:44:08.038567995Z 78 PC: 13151 | Find first file
2018-12-17T22:44:08.045184135Z 67 PC: 13257 | Get or set file attributes
2018-12-17T22:44:08.052927376Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:08.062630863Z 61 PC: 133a5 | Open file (Filename = 'C:\DOS\FORMAT.���')
2018-12-17T22:44:08.069400264Z 87 PC: 13312 | Get or set file date and time
2018-12-17T22:44:08.071638954Z 63 PC: 13447 | Read file or device (Read 5696 bytes on handle 5)
2018-12-17T22:44:08.078743952Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:08.081302123Z 64 PC: 133f1 | Write file or device (Write 5696 bytes on handle 5)
2018-12-17T22:44:08.091403245Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:08.096338872Z 64 PC: 133f1 | Write file or device (Write 5696 bytes on handle 5)
2018-12-17T22:44:08.106789992Z 87 PC: 13374 | Get or set file date and time
2018-12-17T22:44:08.108275179Z 62 PC: 1348d | Close file
2018-12-17T22:44:08.115424416Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:08.401761593Z 86 PC: 13d5a | Rename file
2018-12-17T22:44:08.442940606Z 47 PC: 17f62 | Get disk transfer address
2018-12-17T22:44:08.444884555Z 26 PC: 17f6d | Set disk transfer address
2018-12-17T22:44:08.44602733Z 79 PC: 17f71 | Find next file
2018-12-17T22:44:08.449031373Z 26 PC: 17f81 | Set disk transfer address
2018-12-17T22:44:08.451880394Z 86 PC: 13d41 | Rename file
2018-12-17T22:44:08.464753007Z 26 PC: 12d1b | Set disk transfer address
2018-12-17T22:44:08.465754686Z 78 PC: 12d2d | Find first file
2018-12-17T22:44:08.472166178Z 67 PC: 13257 | Get or set file attributes
2018-12-17T22:44:08.477622557Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:08.487600493Z 61 PC: 133a5 | Open file (Filename = 'A:\TEST.���')
2018-12-17T22:44:08.494284993Z 87 PC: 13312 | Get or set file date and time
2018-12-17T22:44:08.495792908Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:08.499212684Z 63 PC: 13447 | Read file or device (Read 5696 bytes on handle 5)
2018-12-17T22:44:08.506627882Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:08.511128656Z 64 PC: 133f1 | Write file or device (Write 5696 bytes on handle 5)
2018-12-17T22:44:08.518814129Z 87 PC: 13374 | Get or set file date and time
2018-12-17T22:44:08.52059616Z 62 PC: 1348d | Close file
2018-12-17T22:44:08.529254813Z 61 PC: 133a5 | Open file (Filename = 'A:\TEST.���')
2018-12-17T22:44:08.536919472Z 66 PC: 1820b | Move file pointer
2018-12-17T22:44:08.538924065Z 64 PC: 133f1 | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:44:08.544511453Z 87 PC: 13374 | Get or set file date and time
2018-12-17T22:44:08.546060074Z 62 PC: 1348d | Close file
2018-12-17T22:44:08.5536178Z 67 PC: 1328e | Get or set file attributes
2018-12-17T22:44:08.564522799Z 86 PC: 13d5a | Rename file
2018-12-17T22:44:08.577650784Z 75 PC: 12f9d | Execute program
2018-12-17T22:44:08.599723932Z 80 PC: 1b6c9 | Set current PSP
2018-12-17T22:44:08.60047611Z 48 PC: 1b6ce | Get DOS version
2018-12-17T22:44:08.602771965Z 99 PC: 21eb0 | Get DBCS lead byte table pointer
2018-12-17T22:44:08.605270373Z 101 PC: 1b754 | Get extended country info
2018-12-17T22:44:08.607571305Z 99 PC: 1b75a | Get DBCS lead byte table pointer
2018-12-17T22:44:08.608796745Z 74 PC: 1b7bc | Reallocate memory
2018-12-17T22:44:08.610149547Z 25 PC: 1b7f3 | Get default drive
2018-12-17T22:44:08.611638261Z 37 PC: 1b2b3 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T22:44:08.612750291Z 37 PC: 1b2ba | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:44:08.613857495Z 37 PC: 1b2c1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:44:08.622497226Z 74 PC: 1a45c | Reallocate memory
2018-12-17T22:44:08.624337799Z 72 PC: 1a49d | Allocate memory
2018-12-17T22:44:08.627489431Z 72 PC: 1a4d5 | Allocate memory
2018-12-17T22:44:08.629484705Z 72 PC: 1a4dd | Allocate memory