Sample viewer

vx.netlux.org/Virus.DOS.Wit.646

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T21:59:06.100828251Z 26 PC: 12aa0 | Set disk transfer address
2018-12-17T21:59:06.102259734Z 71 PC: 12ab2 | Get current directory
2018-12-17T21:59:06.105392714Z 42 PC: 12ab8 | Get date 0x12ab8: cmp dh, 4
0x12abb: jne 0x12ad6
0x12abd: cmp dl, 0xf
0x12ac0: jne 0x12ad6
0x12ac2: mov ax, 0x1010
0x12ac5: out 0x70, ax
0x12ac7: mov dx, 0x349
0x12aca: mov ah, 9
0x12acc: int 0x21
0x12ace: mov ah, 8
0x12ad0: int 0x21
0x12ad2: mov al, 0xfe
0x12ad4: out 0x64, al
0x12ad6: mov ah, byte ptr [0x378]
0x12ada: mov cl, 7
0x12adc: mov dx, 0x33d
0x12adf: int 0x21
0x12ae1: jae 0x12ae6
0x12ae3: jmp 0x12c22
0x12ae6: mov dx, word ptr [0x36c]
2018-12-17T21:59:06.107348918Z 78 PC: 12ae1 | Find first file
2018-12-17T21:59:06.113255042Z 67 PC: 12afd | Get or set file attributes
2018-12-17T21:59:06.130759849Z 61 PC: 12b11 | Open file (Filename = 'SLEEP.COM')
2018-12-17T21:59:06.137079847Z 63 PC: 12b2e | Read file or device (Read 691 bytes on handle 5)
2018-12-17T21:59:06.14328094Z 66 PC: 12b4d | Move file pointer
2018-12-17T21:59:06.144965691Z 66 PC: 12b6f | Move file pointer
2018-12-17T21:59:06.146382937Z 64 PC: 12b8a | Write file or device (Write 407 bytes on handle 5)
2018-12-17T21:59:06.15405046Z 64 PC: 12b9a | Write file or device (Write 3 bytes on handle 5)
2018-12-17T21:59:06.157334672Z 66 PC: 12bca | Move file pointer
2018-12-17T21:59:06.158507657Z 64 PC: 12bdc | Write file or device (Write 691 bytes on handle 5)
2018-12-17T21:59:06.16623113Z 87 PC: 12bed | Get or set file date and time
2018-12-17T21:59:06.168052412Z 62 PC: 12bf3 | Close file
2018-12-17T21:59:06.175880463Z 67 PC: 12c05 | Get or set file attributes
2018-12-17T21:59:06.187369381Z 79 PC: 12ae1 | Find next file
2018-12-17T21:59:06.190375871Z 67 PC: 12afd | Get or set file attributes
2018-12-17T21:59:06.199912034Z 61 PC: 12b11 | Open file (Filename = 'PRINT.COM')
2018-12-17T21:59:06.206391889Z 63 PC: 12b2e | Read file or device (Read 691 bytes on handle 5)
2018-12-17T21:59:06.213307036Z 66 PC: 12b4d | Move file pointer
2018-12-17T21:59:06.214789294Z 66 PC: 12b6f | Move file pointer
2018-12-17T21:59:06.216038079Z 64 PC: 12b8a | Write file or device (Write 27 bytes on handle 5)
2018-12-17T21:59:06.219941434Z 64 PC: 12b9a | Write file or device (Write 3 bytes on handle 5)
2018-12-17T21:59:06.222751187Z 66 PC: 12bca | Move file pointer
2018-12-17T21:59:06.224019474Z 64 PC: 12bdc | Write file or device (Write 691 bytes on handle 5)
2018-12-17T21:59:06.232187207Z 87 PC: 12bed | Get or set file date and time
2018-12-17T21:59:06.233605015Z 62 PC: 12bf3 | Close file
2018-12-17T21:59:06.24130529Z 67 PC: 12c05 | Get or set file attributes
2018-12-17T21:59:06.252242303Z 79 PC: 12ae1 | Find next file
2018-12-17T21:59:06.254861108Z 67 PC: 12afd | Get or set file attributes
2018-12-17T21:59:06.264712757Z 61 PC: 12b11 | Open file (Filename = 'HELLO.COM')
2018-12-17T21:59:06.271730019Z 63 PC: 12b2e | Read file or device (Read 691 bytes on handle 5)
2018-12-17T21:59:06.277965495Z 66 PC: 12b4d | Move file pointer
2018-12-17T21:59:06.279217667Z 66 PC: 12b6f | Move file pointer
2018-12-17T21:59:06.280997684Z 64 PC: 12b8a | Write file or device (Write 92 bytes on handle 5)
2018-12-17T21:59:06.284553704Z 64 PC: 12b9a | Write file or device (Write 3 bytes on handle 5)
2018-12-17T21:59:06.287287036Z 66 PC: 12bca | Move file pointer
2018-12-17T21:59:06.288956148Z 64 PC: 12bdc | Write file or device (Write 691 bytes on handle 5)
2018-12-17T21:59:06.296034295Z 87 PC: 12bed | Get or set file date and time
2018-12-17T21:59:06.297339529Z 62 PC: 12bf3 | Close file
2018-12-17T21:59:06.305492314Z 67 PC: 12c05 | Get or set file attributes
2018-12-17T21:59:06.316580668Z 79 PC: 12ae1 | Find next file
2018-12-17T21:59:06.319032437Z 67 PC: 12afd | Get or set file attributes
2018-12-17T21:59:06.328732891Z 61 PC: 12b11 | Open file (Filename = 'PHANG.COM')
2018-12-17T21:59:06.335018753Z 63 PC: 12b2e | Read file or device (Read 691 bytes on handle 5)
2018-12-17T21:59:06.341795953Z 66 PC: 12b4d | Move file pointer
2018-12-17T21:59:06.343174099Z 66 PC: 12b6f | Move file pointer
2018-12-17T21:59:06.344648459Z 64 PC: 12b8a | Write file or device (Write 29 bytes on handle 5)
2018-12-17T21:59:06.348244331Z 64 PC: 12b9a | Write file or device (Write 3 bytes on handle 5)
2018-12-17T21:59:06.352117164Z 66 PC: 12bca | Move file pointer
2018-12-17T21:59:06.353330588Z 64 PC: 12bdc | Write file or device (Write 691 bytes on handle 5)
2018-12-17T21:59:06.362406958Z 87 PC: 12bed | Get or set file date and time
2018-12-17T21:59:06.363779903Z 62 PC: 12bf3 | Close file
2018-12-17T21:59:06.371422332Z 67 PC: 12c05 | Get or set file attributes
2018-12-17T21:59:06.381220139Z 79 PC: 12ae1 | Find next file
2018-12-17T21:59:06.384089212Z 67 PC: 12afd | Get or set file attributes
2018-12-17T21:59:06.394036938Z 61 PC: 12b11 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T21:59:06.400657071Z 63 PC: 12b2e | Read file or device (Read 691 bytes on handle 5)
2018-12-17T21:59:06.406892994Z 66 PC: 12b4d | Move file pointer
2018-12-17T21:59:06.408863584Z 66 PC: 12b6f | Move file pointer
2018-12-17T21:59:06.410350501Z 64 PC: 12b8a | Write file or device (Write 29 bytes on handle 5)
2018-12-17T21:59:06.414014629Z 64 PC: 12b9a | Write file or device (Write 3 bytes on handle 5)
2018-12-17T21:59:06.417217584Z 66 PC: 12bca | Move file pointer
2018-12-17T21:59:06.418407748Z 64 PC: 12bdc | Write file or device (Write 691 bytes on handle 5)
2018-12-17T21:59:06.425502995Z 87 PC: 12bed | Get or set file date and time
2018-12-17T21:59:06.427968776Z 62 PC: 12bf3 | Close file
2018-12-17T21:59:06.435423494Z 67 PC: 12c05 | Get or set file attributes
2018-12-17T21:59:06.445053139Z 59 PC: 12c2b | Change current directory
2018-12-17T21:59:06.455248346Z 26 PC: 12c48 | Set disk transfer address
2018-12-17T21:59:06.45634904Z 59 PC: 12c53 | Change current directory

{"DateBased":true,"Day":1,"Month":4,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":1005,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:42:23.9207107Z 26 PC: 12aa0 | Set disk transfer address
2018-12-25T11:42:23.922308375Z 71 PC: 12ab2 | Get current directory
2018-12-25T11:42:23.925343908Z 42 PC: 12ab8 | Get date 0x12ab8: cmp dh, 4
0x12abb: jne 0x12ad6
0x12abd: cmp dl, 0xf
0x12ac0: jne 0x12ad6
0x12ac2: mov ax, 0x1010
0x12ac5: out 0x70, ax
0x12ac7: mov dx, 0x349
0x12aca: mov ah, 9
0x12acc: int 0x21
0x12ace: mov ah, 8
0x12ad0: int 0x21
0x12ad2: mov al, 0xfe
0x12ad4: out 0x64, al
0x12ad6: mov ah, byte ptr [0x378]
0x12ada: mov cl, 7
0x12adc: mov dx, 0x33d
0x12adf: int 0x21
0x12ae1: jae 0x12ae6
0x12ae3: jmp 0x12c22
0x12ae6: mov dx, word ptr [0x36c]
2018-12-25T11:42:23.927398887Z 78 PC: 12ae1 | Find first file
2018-12-25T11:42:23.93354233Z 67 PC: 12afd | Get or set file attributes
2018-12-25T11:42:24.260381677Z 61 PC: 12b11 | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:42:24.266967451Z 63 PC: 12b2e | Read file or device (Read 691 bytes on handle 5)
2018-12-25T11:42:24.273940518Z 66 PC: 12b4d | Move file pointer
2018-12-25T11:42:24.275775687Z 66 PC: 12b6f | Move file pointer
2018-12-25T11:42:24.277656373Z 64 PC: 12b8a | Write file or device (Write 407 bytes on handle 5)
2018-12-25T11:42:24.28571605Z 64 PC: 12b9a | Write file or device (Write 3 bytes on handle 5)
2018-12-25T11:42:24.289687764Z 66 PC: 12bca | Move file pointer
2018-12-25T11:42:24.29115234Z 64 PC: 12bdc | Write file or device (Write 691 bytes on handle 5)
2018-12-25T11:42:24.299261974Z 87 PC: 12bed | Get or set file date and time
2018-12-25T11:42:24.302095286Z 62 PC: 12bf3 | Close file
2018-12-25T11:42:24.309936951Z 67 PC: 12c05 | Get or set file attributes
2018-12-25T11:42:24.319759282Z 79 PC: 12ae1 | Find next file (See above)
2018-12-25T11:42:24.323050544Z 67 PC: 12afd | Get or set file attributes (See above)
2018-12-25T11:42:24.332503878Z 61 PC: 12b11 | Open file (See above)
2018-12-25T11:42:24.339130251Z 63 PC: 12b2e | Read file or device (See above)
2018-12-25T11:42:24.346185343Z 66 PC: 12b4d | Move file pointer (See above)
2018-12-25T11:42:24.34755208Z 66 PC: 12b6f | Move file pointer (See above)
2018-12-25T11:42:24.34888796Z 64 PC: 12b8a | Write file or device (See above)
2018-12-25T11:42:24.352988044Z 64 PC: 12b9a | Write file or device (See above)
2018-12-25T11:42:24.356459841Z 66 PC: 12bca | Move file pointer (See above)
2018-12-25T11:42:24.357713685Z 64 PC: 12bdc | Write file or device (See above)
2018-12-25T11:42:24.365275312Z 87 PC: 12bed | Get or set file date and time (See above)
2018-12-25T11:42:24.367289887Z 62 PC: 12bf3 | Close file (See above)
2018-12-25T11:42:24.372495168Z 67 PC: 12c05 | Get or set file attributes (See above)
2018-12-25T11:42:24.380951144Z 79 PC: 12ae1 | Find next file (See above)
2018-12-25T11:42:24.385498937Z 67 PC: 12afd | Get or set file attributes (See above)
2018-12-25T11:42:24.392114657Z 61 PC: 12b11 | Open file (See above)
2018-12-25T11:42:24.396821843Z 63 PC: 12b2e | Read file or device (See above)
2018-12-25T11:42:24.401284852Z 66 PC: 12b4d | Move file pointer (See above)
2018-12-25T11:42:24.402962376Z 66 PC: 12b6f | Move file pointer (See above)
2018-12-25T11:42:24.405019736Z 64 PC: 12b8a | Write file or device (See above)
2018-12-25T11:42:24.408924112Z 64 PC: 12b9a | Write file or device (See above)
2018-12-25T11:42:24.411085066Z 66 PC: 12bca | Move file pointer (See above)
2018-12-25T11:42:24.4124019Z 64 PC: 12bdc | Write file or device (See above)
2018-12-25T11:42:24.417763441Z 87 PC: 12bed | Get or set file date and time (See above)
2018-12-25T11:42:24.4188441Z 62 PC: 12bf3 | Close file (See above)
2018-12-25T11:42:24.423817575Z 67 PC: 12c05 | Get or set file attributes (See above)
2018-12-25T11:42:24.432357967Z 79 PC: 12ae1 | Find next file (See above)
2018-12-25T11:42:24.435097176Z 67 PC: 12afd | Get or set file attributes (See above)
2018-12-25T11:42:24.44412763Z 61 PC: 12b11 | Open file (See above)
2018-12-25T11:42:24.449440261Z 63 PC: 12b2e | Read file or device (See above)
2018-12-25T11:42:24.454049496Z 66 PC: 12b4d | Move file pointer (See above)
2018-12-25T11:42:24.456162686Z 66 PC: 12b6f | Move file pointer (See above)
2018-12-25T11:42:24.458198431Z 64 PC: 12b8a | Write file or device (See above)
2018-12-25T11:42:24.461936505Z 64 PC: 12b9a | Write file or device (See above)
2018-12-25T11:42:24.465593918Z 66 PC: 12bca | Move file pointer (See above)
2018-12-25T11:42:24.467947505Z 64 PC: 12bdc | Write file or device (See above)
2018-12-25T11:42:24.47548829Z 87 PC: 12bed | Get or set file date and time (See above)
2018-12-25T11:42:24.477233372Z 62 PC: 12bf3 | Close file (See above)
2018-12-25T11:42:24.485493385Z 67 PC: 12c05 | Get or set file attributes (See above)
2018-12-25T11:42:24.495620117Z 79 PC: 12ae1 | Find next file (See above)
2018-12-25T11:42:24.498456439Z 67 PC: 12afd | Get or set file attributes (See above)
2018-12-25T11:42:24.507372753Z 61 PC: 12b11 | Open file (See above)
2018-12-25T11:42:24.511618871Z 63 PC: 12b2e | Read file or device (See above)
2018-12-25T11:42:24.515759923Z 66 PC: 12b4d | Move file pointer (See above)
2018-12-25T11:42:24.517720309Z 66 PC: 12b6f | Move file pointer (See above)
2018-12-25T11:42:24.519018393Z 64 PC: 12b8a | Write file or device (See above)
2018-12-25T11:42:24.522510853Z 64 PC: 12b9a | Write file or device (See above)
2018-12-25T11:42:24.525747079Z 66 PC: 12bca | Move file pointer (See above)
2018-12-25T11:42:24.526960431Z 64 PC: 12bdc | Write file or device (See above)
2018-12-25T11:42:24.534143025Z 87 PC: 12bed | Get or set file date and time (See above)
2018-12-25T11:42:24.536805767Z 62 PC: 12bf3 | Close file (See above)
2018-12-25T11:42:24.543999348Z 67 PC: 12c05 | Get or set file attributes (See above)
2018-12-25T11:42:24.553412422Z 59 PC: 12c2b | Change current directory
2018-12-25T11:42:24.56265147Z 26 PC: 12c48 | Set disk transfer address
2018-12-25T11:42:24.565529378Z 59 PC: 12c53 | Change current directory

{"DateBased":true,"Day":15,"Month":4,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":1005,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:42:24.313292644Z 26 PC: 12aa0 | Set disk transfer address
2018-12-25T11:42:24.315175426Z 71 PC: 12ab2 | Get current directory
2018-12-25T11:42:24.317816043Z 42 PC: 12ab8 | Get date 0x12ab8: cmp dh, 4
0x12abb: jne 0x12ad6
0x12abd: cmp dl, 0xf
0x12ac0: jne 0x12ad6
0x12ac2: mov ax, 0x1010
0x12ac5: out 0x70, ax
0x12ac7: mov dx, 0x349
0x12aca: mov ah, 9
0x12acc: int 0x21
0x12ace: mov ah, 8
0x12ad0: int 0x21
0x12ad2: mov al, 0xfe
0x12ad4: out 0x64, al
0x12ad6: mov ah, byte ptr [0x378]
0x12ada: mov cl, 7
0x12adc: mov dx, 0x33d
0x12adf: int 0x21
0x12ae1: jae 0x12ae6
0x12ae3: jmp 0x12c22
0x12ae6: mov dx, word ptr [0x36c]
2018-12-25T11:42:24.319770272Z 9 PC: 12ace | Display string (String= 'Корабелка - rulez forever ! ')
2018-12-25T11:42:24.324460932Z 8 PC: 12ad2 | Console input without echo

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":1005,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:42:24.312378295Z 26 PC: 12aa0 | Set disk transfer address
2018-12-25T11:42:24.313689619Z 71 PC: 12ab2 | Get current directory
2018-12-25T11:42:24.315485438Z 42 PC: 12ab8 | Get date 0x12ab8: cmp dh, 4
0x12abb: jne 0x12ad6
0x12abd: cmp dl, 0xf
0x12ac0: jne 0x12ad6
0x12ac2: mov ax, 0x1010
0x12ac5: out 0x70, ax
0x12ac7: mov dx, 0x349
0x12aca: mov ah, 9
0x12acc: int 0x21
0x12ace: mov ah, 8
0x12ad0: int 0x21
0x12ad2: mov al, 0xfe
0x12ad4: out 0x64, al
0x12ad6: mov ah, byte ptr [0x378]
0x12ada: mov cl, 7
0x12adc: mov dx, 0x33d
0x12adf: int 0x21
0x12ae1: jae 0x12ae6
0x12ae3: jmp 0x12c22
0x12ae6: mov dx, word ptr [0x36c]
2018-12-25T11:42:24.317176444Z 78 PC: 12ae1 | Find first file
2018-12-25T11:42:24.321411952Z 67 PC: 12afd | Get or set file attributes
2018-12-25T11:42:24.344708626Z 61 PC: 12b11 | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:42:24.351288423Z 63 PC: 12b2e | Read file or device (Read 691 bytes on handle 5)
2018-12-25T11:42:24.362256173Z 66 PC: 12b4d | Move file pointer
2018-12-25T11:42:24.364365592Z 66 PC: 12b6f | Move file pointer
2018-12-25T11:42:24.36646933Z 64 PC: 12b8a | Write file or device (Write 407 bytes on handle 5)
2018-12-25T11:42:24.375020037Z 64 PC: 12b9a | Write file or device (Write 3 bytes on handle 5)
2018-12-25T11:42:24.378226262Z 66 PC: 12bca | Move file pointer
2018-12-25T11:42:24.379712773Z 64 PC: 12bdc | Write file or device (Write 691 bytes on handle 5)
2018-12-25T11:42:24.388549125Z 87 PC: 12bed | Get or set file date and time
2018-12-25T11:42:24.390724316Z 62 PC: 12bf3 | Close file
2018-12-25T11:42:24.399271102Z 67 PC: 12c05 | Get or set file attributes
2018-12-25T11:42:24.408536658Z 79 PC: 12ae1 | Find next file (See above)
2018-12-25T11:42:24.411487742Z 67 PC: 12afd | Get or set file attributes (See above)
2018-12-25T11:42:24.42106566Z 61 PC: 12b11 | Open file (See above)
2018-12-25T11:42:24.427386662Z 63 PC: 12b2e | Read file or device (See above)
2018-12-25T11:42:24.434414616Z 66 PC: 12b4d | Move file pointer (See above)
2018-12-25T11:42:24.435727556Z 66 PC: 12b6f | Move file pointer (See above)
2018-12-25T11:42:24.437003771Z 64 PC: 12b8a | Write file or device (See above)
2018-12-25T11:42:24.441175553Z 64 PC: 12b9a | Write file or device (See above)
2018-12-25T11:42:24.444303669Z 66 PC: 12bca | Move file pointer (See above)
2018-12-25T11:42:24.445883382Z 64 PC: 12bdc | Write file or device (See above)
2018-12-25T11:42:24.455266073Z 87 PC: 12bed | Get or set file date and time (See above)
2018-12-25T11:42:24.456704292Z 62 PC: 12bf3 | Close file (See above)
2018-12-25T11:42:24.464103096Z 67 PC: 12c05 | Get or set file attributes (See above)
2018-12-25T11:42:24.474884044Z 79 PC: 12ae1 | Find next file (See above)
2018-12-25T11:42:24.477767623Z 67 PC: 12afd | Get or set file attributes (See above)
2018-12-25T11:42:24.487257118Z 61 PC: 12b11 | Open file (See above)
2018-12-25T11:42:24.494184563Z 63 PC: 12b2e | Read file or device (See above)
2018-12-25T11:42:24.500412894Z 66 PC: 12b4d | Move file pointer (See above)
2018-12-25T11:42:24.501728252Z 66 PC: 12b6f | Move file pointer (See above)
2018-12-25T11:42:24.503625654Z 64 PC: 12b8a | Write file or device (See above)
2018-12-25T11:42:24.507197644Z 64 PC: 12b9a | Write file or device (See above)
2018-12-25T11:42:24.50995311Z 66 PC: 12bca | Move file pointer (See above)
2018-12-25T11:42:24.512157681Z 64 PC: 12bdc | Write file or device (See above)
2018-12-25T11:42:24.519337564Z 87 PC: 12bed | Get or set file date and time (See above)
2018-12-25T11:42:24.520883406Z 62 PC: 12bf3 | Close file (See above)
2018-12-25T11:42:24.529411517Z 67 PC: 12c05 | Get or set file attributes (See above)
2018-12-25T11:42:24.539519686Z 79 PC: 12ae1 | Find next file (See above)
2018-12-25T11:42:24.542056245Z 67 PC: 12afd | Get or set file attributes (See above)
2018-12-25T11:42:24.552041397Z 61 PC: 12b11 | Open file (See above)
2018-12-25T11:42:24.558589218Z 63 PC: 12b2e | Read file or device (See above)
2018-12-25T11:42:24.564844742Z 66 PC: 12b4d | Move file pointer (See above)
2018-12-25T11:42:24.567428554Z 66 PC: 12b6f | Move file pointer (See above)
2018-12-25T11:42:24.569551767Z 64 PC: 12b8a | Write file or device (See above)
2018-12-25T11:42:24.573608477Z 64 PC: 12b9a | Write file or device (See above)
2018-12-25T11:42:24.576608223Z 66 PC: 12bca | Move file pointer (See above)
2018-12-25T11:42:24.579092885Z 64 PC: 12bdc | Write file or device (See above)
2018-12-25T11:42:24.5863153Z 87 PC: 12bed | Get or set file date and time (See above)
2018-12-25T11:42:24.588067593Z 62 PC: 12bf3 | Close file (See above)
2018-12-25T11:42:24.596792818Z 67 PC: 12c05 | Get or set file attributes (See above)
2018-12-25T11:42:24.615677868Z 79 PC: 12ae1 | Find next file (See above)
2018-12-25T11:42:24.618648258Z 67 PC: 12afd | Get or set file attributes (See above)
2018-12-25T11:42:24.630019854Z 61 PC: 12b11 | Open file (See above)
2018-12-25T11:42:24.636852073Z 63 PC: 12b2e | Read file or device (See above)
2018-12-25T11:42:24.643133901Z 66 PC: 12b4d | Move file pointer (See above)
2018-12-25T11:42:24.645759512Z 66 PC: 12b6f | Move file pointer (See above)
2018-12-25T11:42:24.647867355Z 64 PC: 12b8a | Write file or device (See above)
2018-12-25T11:42:24.651838369Z 64 PC: 12b9a | Write file or device (See above)
2018-12-25T11:42:24.655778354Z 66 PC: 12bca | Move file pointer (See above)
2018-12-25T11:42:24.656988365Z 64 PC: 12bdc | Write file or device (See above)
2018-12-25T11:42:24.662376712Z 87 PC: 12bed | Get or set file date and time (See above)
2018-12-25T11:42:24.664486251Z 62 PC: 12bf3 | Close file (See above)
2018-12-25T11:42:24.670062418Z 67 PC: 12c05 | Get or set file attributes (See above)
2018-12-25T11:42:24.676674647Z 59 PC: 12c2b | Change current directory
2018-12-25T11:42:24.681083861Z 26 PC: 12c48 | Set disk transfer address
2018-12-25T11:42:24.682075406Z 59 PC: 12c53 | Change current directory