Sample viewer

vx.netlux.org/Virus.DOS.Vdv.853

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:51:34.072121589Z 26 PC: 12ada | Set disk transfer address
2018-12-17T22:51:34.073956586Z 78 PC: 12bcf | Find first file
2018-12-17T22:51:34.081825349Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.084899985Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.088598192Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.092758057Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.095571712Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.098257037Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.102539011Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.106117934Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.10986347Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.114508206Z 78 PC: 12c11 | Find first file
2018-12-17T22:51:34.121418297Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.12444355Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.127634525Z 61 PC: 12c63 | Open file (Filename = '')
2018-12-17T22:51:34.135389372Z 63 PC: 12c76 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:51:34.142403148Z 66 PC: 12c8a | Move file pointer
2018-12-17T22:51:34.14426229Z 87 PC: 12c97 | Get or set file date and time
2018-12-17T22:51:34.147175082Z 64 PC: 12ca6 | Write file or device (Write 853 bytes on handle 5)
2018-12-17T22:51:34.17406639Z 66 PC: 12cb1 | Move file pointer
2018-12-17T22:51:34.176027003Z 64 PC: 12cca | Write file or device (Write 5 bytes on handle 5)
2018-12-17T22:51:34.189284418Z 87 PC: 12cd3 | Get or set file date and time
2018-12-17T22:51:34.191831623Z 62 PC: 12cd9 | Close file
2018-12-17T22:51:34.201235549Z 78 PC: 12bcf | Find first file
2018-12-17T22:51:34.215657591Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.219092294Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.222608309Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.227055864Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.230364259Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.233841001Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.237002139Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.260406025Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.266813392Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.269149871Z 78 PC: 12c11 | Find first file
2018-12-17T22:51:34.274768586Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.277047687Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.280373966Z 61 PC: 12c63 | Open file (Filename = '')
2018-12-17T22:51:34.288832986Z 63 PC: 12c76 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:51:34.292677488Z 62 PC: 12cd9 | Close file
2018-12-17T22:51:34.295070965Z 78 PC: 12bcf | Find first file
2018-12-17T22:51:34.30361701Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.307296221Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.310601871Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.314564715Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.318626175Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.321872383Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.325185707Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.328643763Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.332026018Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.335029831Z 78 PC: 12c11 | Find first file
2018-12-17T22:51:34.34377004Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.346966013Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.350125068Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.35435317Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.357565605Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.360668464Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.364611892Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.371386088Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.374418555Z 61 PC: 12c63 | Open file (Filename = '')
2018-12-17T22:51:34.382839103Z 63 PC: 12c76 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:51:34.385963052Z 62 PC: 12cd9 | Close file
2018-12-17T22:51:34.388278812Z 78 PC: 12bcf | Find first file
2018-12-17T22:51:34.395667572Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.398983251Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.402448451Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.40565239Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.408971305Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.412690762Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.415535786Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.419267196Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.422347863Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.425287956Z 78 PC: 12c11 | Find first file
2018-12-17T22:51:34.432898964Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.43579784Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.438922681Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.443460445Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.446579404Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.4502715Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.453924222Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.457039895Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.460597478Z 61 PC: 12c63 | Open file (Filename = '')
2018-12-17T22:51:34.469800626Z 63 PC: 12c76 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:51:34.473542707Z 62 PC: 12cd9 | Close file
2018-12-17T22:51:34.475773297Z 78 PC: 12c11 | Find first file
2018-12-17T22:51:34.484649401Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.488920755Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.492162044Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.495300379Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.499340078Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.502870089Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.505934977Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.510179301Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.513264717Z 61 PC: 12c63 | Open file (Filename = '')
2018-12-17T22:51:34.520723358Z 63 PC: 12c76 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:51:34.523878085Z 62 PC: 12cd9 | Close file
2018-12-17T22:51:34.527376867Z 78 PC: 12bcf | Find first file
2018-12-17T22:51:34.534132548Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.537120501Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.541289453Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.544424212Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.547527662Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.551536774Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.554992405Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.558932607Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.562582804Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.565681695Z 78 PC: 12c11 | Find first file
2018-12-17T22:51:34.572341757Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.576587352Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.579766765Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.58287793Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.586007058Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.590294563Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.593390929Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.596491925Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.60052455Z 61 PC: 12c63 | Open file (Filename = '')
2018-12-17T22:51:34.608235145Z 63 PC: 12c76 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:51:34.611304841Z 62 PC: 12cd9 | Close file
2018-12-17T22:51:34.614417038Z 78 PC: 12bcf | Find first file
2018-12-17T22:51:34.621525101Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.624508736Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.627805549Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.632663996Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.635687536Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.638753997Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.642736488Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.645652446Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.648624649Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.652253336Z 78 PC: 12c11 | Find first file
2018-12-17T22:51:34.659259658Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.666180439Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.670105893Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.672974111Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.676479486Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.68037807Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.683185704Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.685910062Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.689460853Z 61 PC: 12c63 | Open file (Filename = '')
2018-12-17T22:51:34.697138446Z 63 PC: 12c76 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:51:34.699915042Z 62 PC: 12cd9 | Close file
2018-12-17T22:51:34.703932279Z 78 PC: 12bcf | Find first file
2018-12-17T22:51:34.710605705Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.713709115Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.717005968Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.720416605Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.72370335Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.727001646Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.731327222Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.734658991Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.73798034Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.742014929Z 78 PC: 12c11 | Find first file
2018-12-17T22:51:34.748860269Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.752011839Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.7562232Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.768537103Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.77143151Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.776090112Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.779595657Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.782955409Z 61 PC: 12c63 | Open file (Filename = '')
2018-12-17T22:51:34.79178227Z 63 PC: 12c76 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:51:34.79481088Z 62 PC: 12cd9 | Close file
2018-12-17T22:51:34.796954858Z 78 PC: 12bcf | Find first file
2018-12-17T22:51:34.803871311Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.807048409Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.81016817Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.814222877Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.817247779Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.820078587Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.823084053Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.826244149Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.828904888Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.831721199Z 78 PC: 12c11 | Find first file
2018-12-17T22:51:34.838483983Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.841625715Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.8459934Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.84893744Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.851819835Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.861829679Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.872603699Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.875760369Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.878884198Z 61 PC: 12c63 | Open file (Filename = '')
2018-12-17T22:51:34.887491367Z 63 PC: 12c76 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:51:34.89082022Z 62 PC: 12cd9 | Close file
2018-12-17T22:51:34.893419262Z 78 PC: 12bcf | Find first file
2018-12-17T22:51:34.90178064Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.905037829Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.908101945Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.912135793Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.915507667Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.918598974Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.923142119Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.926552125Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.929576466Z 79 PC: 12bcf | Find next file
2018-12-17T22:51:34.933824516Z 78 PC: 12c11 | Find first file
2018-12-17T22:51:34.940670517Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.943745514Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.947946426Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.951070915Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.954134681Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.958207091Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.961684734Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.964751635Z 79 PC: 12c24 | Find next file
2018-12-17T22:51:34.967875674Z 61 PC: 12c63 | Open file (Filename = '')
2018-12-17T22:51:34.976287256Z 63 PC: 12c76 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:51:34.979375908Z 62 PC: 12cd9 | Close file
2018-12-17T22:51:34.981709332Z 42 PC: 12afb | Get date 0x12afb: cmp dh, 0xc
0x12afe: jne 0x12b19
0x12b00: cmp dl, 0x18
0x12b03: jb 0x12b19
0x12b05: cmp dl, 0x1a
0x12b08: ja 0x12b19
0x12b0a: call 0x12b1a
0x12b0d: lea dx, word ptr [si + 0x338]
0x12b11: mov ah, 9
0x12b13: int 0x21
0x12b15: mov ah, 0
0x12b17: int 0x16
0x12b19: ret
0x12b1a: mov byte ptr [si + 0x457], 0x5c
0x12b1f: mov word ptr [si + 0x458], 0x2e2a
0x12b25: mov word ptr [si + 0x45a], 0x2a
0x12b2b: lea dx, word ptr [si + 0x457]
0x12b2f: xor cx, cx
0x12b31: mov ah, 0x4e
0x12b33: int 0x21
2018-12-17T22:51:34.985476528Z 26 PC: 12ae9 | Set disk transfer address
2018-12-17T22:51:34.987077296Z 76 PC: 12aa4 | Terminate with return code (Return code = '0')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":10599,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:28:30.277679881Z 26 PC: 12ada | Set disk transfer address
2018-12-25T12:28:30.279947664Z 78 PC: 12bcf | Find first file
2018-12-25T12:28:30.285836651Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.288523613Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.291370972Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.294350789Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.297062509Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.29973008Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.303204311Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.305918381Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.308321297Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.318008491Z 78 PC: 12c11 | Find first file
2018-12-25T12:28:30.323707051Z 79 PC: 12c24 | Find next file
2018-12-25T12:28:30.326170084Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.329449224Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.332595687Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.335121324Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.338095556Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.340825038Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.343475226Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.346715255Z 61 PC: 12c63 | Open file (Filename = '')
2018-12-25T12:28:30.353538013Z 63 PC: 12c76 | Read file or device (Read 5 bytes on handle 5)
2018-12-25T12:28:30.356645991Z 62 PC: 12cd9 | Close file
2018-12-25T12:28:30.35908041Z 78 PC: 12bcf | Find first file (See above)
2018-12-25T12:28:30.365748327Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.368929053Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.372641557Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.375848074Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.378630156Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.381602303Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.384331798Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.385934357Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.387573949Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.389690967Z 78 PC: 12c11 | Find first file (See above)
2018-12-25T12:28:30.393391407Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.395156422Z 61 PC: 12c63 | Open file (See above)
2018-12-25T12:28:30.399662804Z 63 PC: 12c76 | Read file or device (See above)
2018-12-25T12:28:30.404328781Z 66 PC: 12c8a | Move file pointer
2018-12-25T12:28:30.405675594Z 87 PC: 12c97 | Get or set file date and time
2018-12-25T12:28:30.420177124Z 64 PC: 12ca6 | Write file or device (Write 853 bytes on handle 5)
2018-12-25T12:28:30.434010726Z 66 PC: 12cb1 | Move file pointer
2018-12-25T12:28:30.435379313Z 64 PC: 12cca | Write file or device (Write 5 bytes on handle 5)
2018-12-25T12:28:30.44235012Z 87 PC: 12cd3 | Get or set file date and time
2018-12-25T12:28:30.443840605Z 62 PC: 12cd9 | Close file (See above)
2018-12-25T12:28:30.451510868Z 78 PC: 12bcf | Find first file (See above)
2018-12-25T12:28:30.458622507Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.460976469Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.463334637Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.466083576Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.468587085Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.471088939Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.475121835Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.477542745Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.479930424Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.48283265Z 78 PC: 12c11 | Find first file (See above)
2018-12-25T12:28:30.488565421Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.491456458Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.494517309Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.497454921Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.499868627Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.502937903Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.506349467Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.508889428Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.511386599Z 61 PC: 12c63 | Open file (See above)
2018-12-25T12:28:30.517699565Z 63 PC: 12c76 | Read file or device (See above)
2018-12-25T12:28:30.519916565Z 62 PC: 12cd9 | Close file (See above)
2018-12-25T12:28:30.521590432Z 78 PC: 12c11 | Find first file (See above)
2018-12-25T12:28:30.5275565Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.529937867Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.532417207Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.534972834Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.537278224Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.539705113Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.542948856Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.545352803Z 61 PC: 12c63 | Open file (See above)
2018-12-25T12:28:30.551777231Z 63 PC: 12c76 | Read file or device (See above)
2018-12-25T12:28:30.554520436Z 62 PC: 12cd9 | Close file (See above)
2018-12-25T12:28:30.556216596Z 78 PC: 12bcf | Find first file (See above)
2018-12-25T12:28:30.562077948Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.564798613Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.567168017Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.569657963Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.572299658Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.574653904Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.577019545Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.579603498Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.582295732Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.584437595Z 78 PC: 12c11 | Find first file (See above)
2018-12-25T12:28:30.590078684Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.592587683Z 61 PC: 12c63 | Open file (See above)
2018-12-25T12:28:30.598918584Z 63 PC: 12c76 | Read file or device (See above)
2018-12-25T12:28:30.601327586Z 62 PC: 12cd9 | Close file (See above)
2018-12-25T12:28:30.602890554Z 78 PC: 12bcf | Find first file (See above)
2018-12-25T12:28:30.609218055Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.611643672Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.613831759Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.616332264Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.618841956Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.621070171Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.623451789Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.625821749Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.628071072Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.630276823Z 78 PC: 12c11 | Find first file (See above)
2018-12-25T12:28:30.636356174Z 61 PC: 12c63 | Open file (See above)
2018-12-25T12:28:30.642515736Z 63 PC: 12c76 | Read file or device (See above)
2018-12-25T12:28:30.648794543Z 66 PC: 12c8a | Move file pointer (See above)
2018-12-25T12:28:30.65008185Z 87 PC: 12c97 | Get or set file date and time (See above)
2018-12-25T12:28:30.651156685Z 64 PC: 12ca6 | Write file or device (See above)
2018-12-25T12:28:30.659694803Z 66 PC: 12cb1 | Move file pointer (See above)
2018-12-25T12:28:30.661746697Z 64 PC: 12cca | Write file or device (See above)
2018-12-25T12:28:30.66831642Z 87 PC: 12cd3 | Get or set file date and time (See above)
2018-12-25T12:28:30.670300286Z 62 PC: 12cd9 | Close file (See above)
2018-12-25T12:28:30.678710813Z 78 PC: 12bcf | Find first file (See above)
2018-12-25T12:28:30.684522562Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.686929323Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.689247185Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.691481604Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.693948883Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.696510678Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.699111833Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.701507771Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.704167377Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.706107426Z 78 PC: 12c11 | Find first file (See above)
2018-12-25T12:28:30.711870571Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.714247033Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.716536601Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.71896356Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.721332482Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.723481942Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.726096614Z 61 PC: 12c63 | Open file (See above)
2018-12-25T12:28:30.732683616Z 63 PC: 12c76 | Read file or device (See above)
2018-12-25T12:28:30.742140712Z 66 PC: 12c8a | Move file pointer (See above)
2018-12-25T12:28:30.744680203Z 87 PC: 12c97 | Get or set file date and time (See above)
2018-12-25T12:28:30.74624627Z 64 PC: 12ca6 | Write file or device (See above)
2018-12-25T12:28:30.754005059Z 66 PC: 12cb1 | Move file pointer (See above)
2018-12-25T12:28:30.755534435Z 64 PC: 12cca | Write file or device (See above)
2018-12-25T12:28:30.762748674Z 87 PC: 12cd3 | Get or set file date and time (See above)
2018-12-25T12:28:30.764058621Z 62 PC: 12cd9 | Close file (See above)
2018-12-25T12:28:30.771683621Z 78 PC: 12bcf | Find first file (See above)
2018-12-25T12:28:30.777549436Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.77986115Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.782190683Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.785356383Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.787816583Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.79019447Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.792850571Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.795193266Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.797515226Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.799841828Z 78 PC: 12c11 | Find first file (See above)
2018-12-25T12:28:30.806018443Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.808318817Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.811552399Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.81408356Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.816679443Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.82026937Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.822933698Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.825580422Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.829276661Z 61 PC: 12c63 | Open file (See above)
2018-12-25T12:28:30.835957406Z 63 PC: 12c76 | Read file or device (See above)
2018-12-25T12:28:30.83884652Z 62 PC: 12cd9 | Close file (See above)
2018-12-25T12:28:30.841878104Z 78 PC: 12bcf | Find first file (See above)
2018-12-25T12:28:30.848009067Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.850962821Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.854754828Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.857664376Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.860372618Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.864010943Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.867238232Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.869968245Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.873924632Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.876395122Z 78 PC: 12c11 | Find first file (See above)
2018-12-25T12:28:30.882814218Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.888470265Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.89089918Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.893786196Z 61 PC: 12c63 | Open file (See above)
2018-12-25T12:28:30.900829434Z 63 PC: 12c76 | Read file or device (See above)
2018-12-25T12:28:30.907223732Z 66 PC: 12c8a | Move file pointer (See above)
2018-12-25T12:28:30.909028447Z 87 PC: 12c97 | Get or set file date and time (See above)
2018-12-25T12:28:30.916372966Z 64 PC: 12ca6 | Write file or device (See above)
2018-12-25T12:28:30.92435509Z 66 PC: 12cb1 | Move file pointer (See above)
2018-12-25T12:28:30.925742269Z 64 PC: 12cca | Write file or device (See above)
2018-12-25T12:28:30.933153872Z 87 PC: 12cd3 | Get or set file date and time (See above)
2018-12-25T12:28:30.934841404Z 62 PC: 12cd9 | Close file (See above)
2018-12-25T12:28:30.942705703Z 78 PC: 12bcf | Find first file (See above)
2018-12-25T12:28:30.949710533Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.959628185Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.963134114Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.966834475Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.969224169Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.971692556Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.975112491Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.977580315Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.979947219Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:30.98300576Z 78 PC: 12c11 | Find first file (See above)
2018-12-25T12:28:30.989010165Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.991590362Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.994925466Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:30.997466954Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:31.000028394Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:31.00369165Z 61 PC: 12c63 | Open file (See above)
2018-12-25T12:28:31.009949545Z 63 PC: 12c76 | Read file or device (See above)
2018-12-25T12:28:31.016104821Z 66 PC: 12c8a | Move file pointer (See above)
2018-12-25T12:28:31.018116871Z 87 PC: 12c97 | Get or set file date and time (See above)
2018-12-25T12:28:31.019426862Z 64 PC: 12ca6 | Write file or device (See above)
2018-12-25T12:28:31.028188043Z 66 PC: 12cb1 | Move file pointer (See above)
2018-12-25T12:28:31.030154091Z 64 PC: 12cca | Write file or device (See above)
2018-12-25T12:28:31.036941655Z 87 PC: 12cd3 | Get or set file date and time (See above)
2018-12-25T12:28:31.038290776Z 62 PC: 12cd9 | Close file (See above)
2018-12-25T12:28:31.047442143Z 42 PC: 12afb | Get date 0x12afb: cmp dh, 0xc
0x12afe: jne 0x12b19
0x12b00: cmp dl, 0x18
0x12b03: jb 0x12b19
0x12b05: cmp dl, 0x1a
0x12b08: ja 0x12b19
0x12b0a: call 0x12b1a
0x12b0d: lea dx, word ptr [si + 0x338]
0x12b11: mov ah, 9
0x12b13: int 0x21
0x12b15: mov ah, 0
0x12b17: int 0x16
0x12b19: ret
0x12b1a: mov byte ptr [si + 0x457], 0x5c
0x12b1f: mov word ptr [si + 0x458], 0x2e2a
0x12b25: mov word ptr [si + 0x45a], 0x2a
0x12b2b: lea dx, word ptr [si + 0x457]
0x12b2f: xor cx, cx
0x12b31: mov ah, 0x4e
0x12b33: int 0x21
2018-12-25T12:28:31.049749338Z 26 PC: 12ae9 | Set disk transfer address
2018-12-25T12:28:31.050864574Z 76 PC: 12aa4 | Terminate with return code (Return code = '0')

{"DateBased":true,"Day":1,"Month":12,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":10599,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:28:31.742452024Z 26 PC: 12ada | Set disk transfer address
2018-12-25T12:28:31.743554394Z 78 PC: 12c11 | Find first file
2018-12-25T12:28:31.749850754Z 79 PC: 12c24 | Find next file
2018-12-25T12:28:31.753327998Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:31.755685117Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:31.758006931Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:31.760747051Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:31.762970407Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:31.765179743Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:31.767919147Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:31.770196521Z 61 PC: 12c63 | Open file (Filename = '')
2018-12-25T12:28:31.776591926Z 63 PC: 12c76 | Read file or device (Read 5 bytes on handle 5)
2018-12-25T12:28:31.77945732Z 62 PC: 12cd9 | Close file
2018-12-25T12:28:31.781122887Z 78 PC: 12c11 | Find first file (See above)
2018-12-25T12:28:31.786746725Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:31.789720384Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:31.792131688Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:31.795092462Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:31.797668906Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:31.800021862Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:31.802209867Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:31.804572642Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:31.807032603Z 61 PC: 12c63 | Open file (See above)
2018-12-25T12:28:31.813047329Z 63 PC: 12c76 | Read file or device (See above)
2018-12-25T12:28:31.815849743Z 62 PC: 12cd9 | Close file (See above)
2018-12-25T12:28:31.817117036Z 78 PC: 12bcf | Find first file
2018-12-25T12:28:31.820709328Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:31.822454977Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:31.825737304Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:31.82807593Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:31.830430239Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:31.832923417Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:31.835151799Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:31.837320304Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:31.83985012Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:31.841935472Z 78 PC: 12c11 | Find first file (See above)
2018-12-25T12:28:31.847571762Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:31.850547604Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:31.852938143Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:31.855270853Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:31.858083082Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:31.860512736Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:31.863646081Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:31.867039458Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:31.869621152Z 61 PC: 12c63 | Open file (See above)
2018-12-25T12:28:31.87595797Z 63 PC: 12c76 | Read file or device (See above)
2018-12-25T12:28:31.879382953Z 62 PC: 12cd9 | Close file (See above)
2018-12-25T12:28:31.881182623Z 78 PC: 12bcf | Find first file (See above)
2018-12-25T12:28:31.887203326Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:31.890858477Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:31.893605419Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:31.896184602Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:31.898785151Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:31.901685436Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:31.903956458Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:31.906171463Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:31.908986467Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:31.911183249Z 78 PC: 12c11 | Find first file (See above)
2018-12-25T12:28:31.917007296Z 61 PC: 12c63 | Open file (See above)
2018-12-25T12:28:31.923815342Z 63 PC: 12c76 | Read file or device (See above)
2018-12-25T12:28:31.930007595Z 66 PC: 12c8a | Move file pointer
2018-12-25T12:28:31.932002978Z 87 PC: 12c97 | Get or set file date and time
2018-12-25T12:28:31.933659432Z 64 PC: 12ca6 | Write file or device (Write 853 bytes on handle 5)
2018-12-25T12:28:31.947110203Z 66 PC: 12cb1 | Move file pointer
2018-12-25T12:28:31.948319328Z 64 PC: 12cca | Write file or device (Write 5 bytes on handle 5)
2018-12-25T12:28:31.956701699Z 87 PC: 12cd3 | Get or set file date and time
2018-12-25T12:28:31.95802624Z 62 PC: 12cd9 | Close file (See above)
2018-12-25T12:28:31.965443227Z 78 PC: 12bcf | Find first file (See above)
2018-12-25T12:28:31.971538873Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:31.973806677Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:31.976008861Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:31.978646701Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:31.980955322Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:31.983214528Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:31.985893297Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:31.988195854Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:31.990465606Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:31.993207659Z 78 PC: 12c11 | Find first file (See above)
2018-12-25T12:28:31.998718694Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.001674336Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.004344959Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.006433576Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.008069126Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.011340082Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.01370996Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.015863181Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.019017903Z 61 PC: 12c63 | Open file (See above)
2018-12-25T12:28:32.025226079Z 63 PC: 12c76 | Read file or device (See above)
2018-12-25T12:28:32.028027312Z 62 PC: 12cd9 | Close file (See above)
2018-12-25T12:28:32.030787962Z 78 PC: 12bcf | Find first file (See above)
2018-12-25T12:28:32.036912138Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.03959558Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.042801042Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.045318469Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.04770985Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.050732791Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.053101475Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.055462145Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.058436486Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.060607204Z 78 PC: 12c11 | Find first file (See above)
2018-12-25T12:28:32.066223492Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.069414832Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.072540508Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.074928504Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.077813991Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.08049505Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.08272914Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.085764284Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.088020692Z 61 PC: 12c63 | Open file (See above)
2018-12-25T12:28:32.094063456Z 63 PC: 12c76 | Read file or device (See above)
2018-12-25T12:28:32.096977068Z 62 PC: 12cd9 | Close file (See above)
2018-12-25T12:28:32.098807198Z 78 PC: 12bcf | Find first file (See above)
2018-12-25T12:28:32.104642413Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.108108822Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.110456636Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.112749542Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.115986852Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.118358174Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.120714291Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.123549371Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.125943761Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.128111185Z 78 PC: 12c11 | Find first file (See above)
2018-12-25T12:28:32.133956492Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.137126908Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.139694139Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.143146705Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.145540922Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.148102712Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.151569802Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.153991514Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.156349618Z 61 PC: 12c63 | Open file (See above)
2018-12-25T12:28:32.163277972Z 63 PC: 12c76 | Read file or device (See above)
2018-12-25T12:28:32.166147959Z 62 PC: 12cd9 | Close file (See above)
2018-12-25T12:28:32.167713712Z 78 PC: 12bcf | Find first file (See above)
2018-12-25T12:28:32.1738286Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.176516951Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.17910779Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.182623066Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.185263556Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.187763178Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.190518706Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.193700602Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.196261168Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.198643225Z 78 PC: 12c11 | Find first file (See above)
2018-12-25T12:28:32.205158357Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.207886986Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.210402632Z 61 PC: 12c63 | Open file (See above)
2018-12-25T12:28:32.217946014Z 63 PC: 12c76 | Read file or device (See above)
2018-12-25T12:28:32.224480729Z 66 PC: 12c8a | Move file pointer (See above)
2018-12-25T12:28:32.225894832Z 87 PC: 12c97 | Get or set file date and time (See above)
2018-12-25T12:28:32.228189299Z 64 PC: 12ca6 | Write file or device (See above)
2018-12-25T12:28:32.235796837Z 66 PC: 12cb1 | Move file pointer (See above)
2018-12-25T12:28:32.236829994Z 64 PC: 12cca | Write file or device (See above)
2018-12-25T12:28:32.243334614Z 87 PC: 12cd3 | Get or set file date and time (See above)
2018-12-25T12:28:32.244618632Z 62 PC: 12cd9 | Close file (See above)
2018-12-25T12:28:32.251906685Z 78 PC: 12bcf | Find first file (See above)
2018-12-25T12:28:32.257578648Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.259838108Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.262001687Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.264605282Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.266957718Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.269293265Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.271947654Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.274203455Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.276407828Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.279431241Z 78 PC: 12c11 | Find first file (See above)
2018-12-25T12:28:32.28487614Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.287216065Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.289665506Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.291835091Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.294171421Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.296742196Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.298959898Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.301485601Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.303809416Z 61 PC: 12c63 | Open file (See above)
2018-12-25T12:28:32.309864654Z 63 PC: 12c76 | Read file or device (See above)
2018-12-25T12:28:32.312755656Z 62 PC: 12cd9 | Close file (See above)
2018-12-25T12:28:32.314355054Z 78 PC: 12c11 | Find first file (See above)
2018-12-25T12:28:32.320049353Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.322805251Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.325116789Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.327290992Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.330628483Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.332980108Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.335363793Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.338287633Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.340671094Z 61 PC: 12c63 | Open file (See above)
2018-12-25T12:28:32.347752416Z 63 PC: 12c76 | Read file or device (See above)
2018-12-25T12:28:32.351222381Z 62 PC: 12cd9 | Close file (See above)
2018-12-25T12:28:32.353050282Z 42 PC: 12afb | Get date 0x12afb: cmp dh, 0xc
0x12afe: jne 0x12b19
0x12b00: cmp dl, 0x18
0x12b03: jb 0x12b19
0x12b05: cmp dl, 0x1a
0x12b08: ja 0x12b19
0x12b0a: call 0x12b1a
0x12b0d: lea dx, word ptr [si + 0x338]
0x12b11: mov ah, 9
0x12b13: int 0x21
0x12b15: mov ah, 0
0x12b17: int 0x16
0x12b19: ret
0x12b1a: mov byte ptr [si + 0x457], 0x5c
0x12b1f: mov word ptr [si + 0x458], 0x2e2a
0x12b25: mov word ptr [si + 0x45a], 0x2a
0x12b2b: lea dx, word ptr [si + 0x457]
0x12b2f: xor cx, cx
0x12b31: mov ah, 0x4e
0x12b33: int 0x21
2018-12-25T12:28:32.354974312Z 26 PC: 12ae9 | Set disk transfer address
2018-12-25T12:28:32.356908575Z 76 PC: 12aa4 | Terminate with return code (Return code = '0')

{"DateBased":true,"Day":24,"Month":12,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":10599,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:28:32.236278403Z 26 PC: 12ada | Set disk transfer address
2018-12-25T12:28:32.237924748Z 78 PC: 12bcf | Find first file
2018-12-25T12:28:32.245685549Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.248640916Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.252651155Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.256632657Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.259614402Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.262343018Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.268295003Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.271024978Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.273737491Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.276910815Z 78 PC: 12c11 | Find first file
2018-12-25T12:28:32.283413815Z 79 PC: 12c24 | Find next file
2018-12-25T12:28:32.286264979Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.289672739Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.292811116Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.295981007Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.300344015Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.303373919Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.306207057Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.309110598Z 61 PC: 12c63 | Open file (Filename = '')
2018-12-25T12:28:32.317983567Z 63 PC: 12c76 | Read file or device (Read 5 bytes on handle 5)
2018-12-25T12:28:32.321209758Z 62 PC: 12cd9 | Close file
2018-12-25T12:28:32.323607748Z 78 PC: 12bcf | Find first file (See above)
2018-12-25T12:28:32.331342866Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.334207144Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.337466089Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.344090192Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.346982545Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.349823214Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.353660547Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.364081271Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.366796332Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.36977493Z 78 PC: 12c11 | Find first file (See above)
2018-12-25T12:28:32.376025214Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.379057958Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.382094179Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.385463266Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.388052194Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.390653699Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.394142202Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.397037937Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.400502385Z 61 PC: 12c63 | Open file (See above)
2018-12-25T12:28:32.408425687Z 63 PC: 12c76 | Read file or device (See above)
2018-12-25T12:28:32.412018503Z 62 PC: 12cd9 | Close file (See above)
2018-12-25T12:28:32.414118395Z 78 PC: 12bcf | Find first file (See above)
2018-12-25T12:28:32.421095766Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.423757607Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.426487904Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.429838458Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.432737021Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.435510548Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.439215311Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.441932778Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.443810787Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.445749011Z 78 PC: 12c11 | Find first file (See above)
2018-12-25T12:28:32.450269281Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.452094789Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.45388339Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.456593818Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.459200903Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.461869311Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.464798086Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.467391282Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.469811266Z 61 PC: 12c63 | Open file (See above)
2018-12-25T12:28:32.477378064Z 63 PC: 12c76 | Read file or device (See above)
2018-12-25T12:28:32.481362439Z 62 PC: 12cd9 | Close file (See above)
2018-12-25T12:28:32.483388068Z 78 PC: 12bcf | Find first file (See above)
2018-12-25T12:28:32.49039631Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.493149385Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.495900179Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.499396358Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.502145438Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.504913565Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.507709611Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.510706182Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.513424296Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.515890352Z 78 PC: 12c11 | Find first file (See above)
2018-12-25T12:28:32.522525018Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.525216701Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.527707037Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.530803409Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.533520637Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.53614981Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.539615182Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.542380993Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.545081929Z 61 PC: 12c63 | Open file (See above)
2018-12-25T12:28:32.553642018Z 63 PC: 12c76 | Read file or device (See above)
2018-12-25T12:28:32.557161832Z 62 PC: 12cd9 | Close file (See above)
2018-12-25T12:28:32.559661341Z 78 PC: 12bcf | Find first file (See above)
2018-12-25T12:28:32.567777294Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.571027605Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.574274085Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.578572897Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.581807736Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.585440938Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.58913144Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.59247326Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.595710583Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.598616735Z 78 PC: 12c11 | Find first file (See above)
2018-12-25T12:28:32.60652773Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.609266568Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.611989488Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.61553034Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.618696269Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.622788284Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.626454975Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.629142016Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.631846518Z 61 PC: 12c63 | Open file (See above)
2018-12-25T12:28:32.639922926Z 63 PC: 12c76 | Read file or device (See above)
2018-12-25T12:28:32.64306325Z 62 PC: 12cd9 | Close file (See above)
2018-12-25T12:28:32.645097684Z 78 PC: 12c11 | Find first file (See above)
2018-12-25T12:28:32.652837642Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.655709261Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.658801421Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.662561053Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.66543103Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.668643737Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.671891944Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.674657955Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.677234679Z 61 PC: 12c63 | Open file (See above)
2018-12-25T12:28:32.684249257Z 63 PC: 12c76 | Read file or device (See above)
2018-12-25T12:28:32.687112317Z 62 PC: 12cd9 | Close file (See above)
2018-12-25T12:28:32.689126756Z 78 PC: 12c11 | Find first file (See above)
2018-12-25T12:28:32.696775174Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.700179833Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.702901122Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.705603882Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.709170717Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.712265081Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.71546439Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.719668321Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.722545373Z 61 PC: 12c63 | Open file (See above)
2018-12-25T12:28:32.729592217Z 63 PC: 12c76 | Read file or device (See above)
2018-12-25T12:28:32.732757382Z 62 PC: 12cd9 | Close file (See above)
2018-12-25T12:28:32.734631188Z 78 PC: 12bcf | Find first file (See above)
2018-12-25T12:28:32.740970428Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.743928492Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.746573203Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.74912127Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.752298737Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.754983186Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.758355249Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.761563435Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.76423921Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.772510641Z 78 PC: 12c11 | Find first file (See above)
2018-12-25T12:28:32.779189971Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.78187593Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.784357417Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.787598305Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.790237078Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.792879222Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.796189086Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.799045514Z 61 PC: 12c63 | Open file (See above)
2018-12-25T12:28:32.805946072Z 63 PC: 12c76 | Read file or device (See above)
2018-12-25T12:28:32.809437787Z 62 PC: 12cd9 | Close file (See above)
2018-12-25T12:28:32.811353951Z 78 PC: 12bcf | Find first file (See above)
2018-12-25T12:28:32.817857845Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.821935716Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.825013189Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.828096097Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.832644353Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.835456172Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.838157545Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.841617955Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.844392824Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.8471789Z 78 PC: 12c11 | Find first file (See above)
2018-12-25T12:28:32.854625818Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.858249477Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.861422895Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.865103969Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.867870615Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.87075723Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.874721946Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.877575127Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.880351718Z 61 PC: 12c63 | Open file (See above)
2018-12-25T12:28:32.88820117Z 63 PC: 12c76 | Read file or device (See above)
2018-12-25T12:28:32.891037577Z 62 PC: 12cd9 | Close file (See above)
2018-12-25T12:28:32.893083208Z 78 PC: 12bcf | Find first file (See above)
2018-12-25T12:28:32.90154751Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.904246708Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.90723059Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.910795087Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.913840417Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.916629501Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.920751267Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.923446518Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.926136362Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:32.929197043Z 78 PC: 12c11 | Find first file (See above)
2018-12-25T12:28:32.935935921Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.938935662Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.942575412Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.945530636Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.9487938Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.951834241Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:32.956048055Z 61 PC: 12c63 | Open file (See above)
2018-12-25T12:28:32.963509428Z 63 PC: 12c76 | Read file or device (See above)
2018-12-25T12:28:32.971083855Z 66 PC: 12c8a | Move file pointer
2018-12-25T12:28:32.973100246Z 87 PC: 12c97 | Get or set file date and time
2018-12-25T12:28:32.974899672Z 64 PC: 12ca6 | Write file or device (Write 853 bytes on handle 5)
2018-12-25T12:28:32.990724632Z 66 PC: 12cb1 | Move file pointer
2018-12-25T12:28:32.993113913Z 64 PC: 12cca | Write file or device (Write 5 bytes on handle 5)
2018-12-25T12:28:33.000859923Z 87 PC: 12cd3 | Get or set file date and time
2018-12-25T12:28:33.002510936Z 62 PC: 12cd9 | Close file (See above)
2018-12-25T12:28:33.012887588Z 42 PC: 12afb | Get date 0x12afb: cmp dh, 0xc
0x12afe: jne 0x12b19
0x12b00: cmp dl, 0x18
0x12b03: jb 0x12b19
0x12b05: cmp dl, 0x1a
0x12b08: ja 0x12b19
0x12b0a: call 0x12b1a
0x12b0d: lea dx, word ptr [si + 0x338]
0x12b11: mov ah, 9
0x12b13: int 0x21
0x12b15: mov ah, 0
0x12b17: int 0x16
0x12b19: ret
0x12b1a: mov byte ptr [si + 0x457], 0x5c
0x12b1f: mov word ptr [si + 0x458], 0x2e2a
0x12b25: mov word ptr [si + 0x45a], 0x2a
0x12b2b: lea dx, word ptr [si + 0x457]
0x12b2f: xor cx, cx
0x12b31: mov ah, 0x4e
0x12b33: int 0x21
2018-12-25T12:28:33.015725317Z 78 PC: 12b35 | Find first file
2018-12-25T12:28:33.022795412Z 60 PC: 12b54 | Create or truncate file
2018-12-25T12:28:33.037463745Z 64 PC: 12b65 | Write file or device (Write 273 bytes on handle 5)
2018-12-25T12:28:33.04191984Z 62 PC: 12b6b | Close file
2018-12-25T12:28:33.051802505Z 79 PC: 12b47 | Find next file
2018-12-25T12:28:33.056232923Z 60 PC: 12b54 | Create or truncate file (See above)
2018-12-25T12:28:33.069761886Z 64 PC: 12b65 | Write file or device (See above)
2018-12-25T12:28:33.073973387Z 62 PC: 12b6b | Close file (See above)
2018-12-25T12:28:33.084525172Z 79 PC: 12b47 | Find next file (See above)
2018-12-25T12:28:33.087750497Z 60 PC: 12b54 | Create or truncate file (See above)
2018-12-25T12:28:33.101851886Z 64 PC: 12b65 | Write file or device (See above)
2018-12-25T12:28:33.107241654Z 62 PC: 12b6b | Close file (See above)
2018-12-25T12:28:33.117106074Z 79 PC: 12b47 | Find next file (See above)
2018-12-25T12:28:33.120475821Z 60 PC: 12b54 | Create or truncate file (See above)
2018-12-25T12:28:33.134889033Z 64 PC: 12b65 | Write file or device (See above)
2018-12-25T12:28:33.139176562Z 62 PC: 12b6b | Close file (See above)
2018-12-25T12:28:33.148525089Z 79 PC: 12b47 | Find next file (See above)
2018-12-25T12:28:33.152865806Z 60 PC: 12b54 | Create or truncate file (See above)
2018-12-25T12:28:33.166961234Z 64 PC: 12b65 | Write file or device (See above)
2018-12-25T12:28:33.171584859Z 62 PC: 12b6b | Close file (See above)
2018-12-25T12:28:33.182464734Z 79 PC: 12b47 | Find next file (See above)
2018-12-25T12:28:33.185654221Z 60 PC: 12b54 | Create or truncate file (See above)
2018-12-25T12:28:33.199765616Z 64 PC: 12b65 | Write file or device (See above)
2018-12-25T12:28:33.204366864Z 62 PC: 12b6b | Close file (See above)
2018-12-25T12:28:33.214759968Z 79 PC: 12b47 | Find next file (See above)
2018-12-25T12:28:33.218158146Z 60 PC: 12b54 | Create or truncate file (See above)
2018-12-25T12:28:33.232005431Z 64 PC: 12b65 | Write file or device (See above)
2018-12-25T12:28:33.237588025Z 62 PC: 12b6b | Close file (See above)
2018-12-25T12:28:33.247466071Z 79 PC: 12b47 | Find next file (See above)
2018-12-25T12:28:33.250909032Z 60 PC: 12b54 | Create or truncate file (See above)
2018-12-25T12:28:33.264954257Z 64 PC: 12b65 | Write file or device (See above)
2018-12-25T12:28:33.269226754Z 62 PC: 12b6b | Close file (See above)
2018-12-25T12:28:33.278575793Z 79 PC: 12b47 | Find next file (See above)
2018-12-25T12:28:33.283205274Z 60 PC: 12b54 | Create or truncate file (See above)
2018-12-25T12:28:33.297093069Z 64 PC: 12b65 | Write file or device (See above)
2018-12-25T12:28:33.301626766Z 62 PC: 12b6b | Close file (See above)
2018-12-25T12:28:33.31232915Z 79 PC: 12b47 | Find next file (See above)
2018-12-25T12:28:33.314912154Z 9 PC: 12b15 | Display string (Could not find end pointer)

{"DateBased":true,"Day":27,"Month":12,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":10599,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:28:34.199428152Z 26 PC: 12ada | Set disk transfer address
2018-12-25T12:28:34.201232441Z 78 PC: 12bcf | Find first file
2018-12-25T12:28:34.206926412Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.209301402Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.21226766Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.214679954Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.21700861Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.219755293Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.222424736Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.226070565Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.228720651Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.231660684Z 78 PC: 12c11 | Find first file
2018-12-25T12:28:34.23737098Z 79 PC: 12c24 | Find next file
2018-12-25T12:28:34.239811307Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.24587123Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.248467532Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.251130529Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.254838075Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.257568853Z 61 PC: 12c63 | Open file (Filename = '')
2018-12-25T12:28:34.263915321Z 63 PC: 12c76 | Read file or device (Read 5 bytes on handle 5)
2018-12-25T12:28:34.271109797Z 66 PC: 12c8a | Move file pointer
2018-12-25T12:28:34.272717734Z 87 PC: 12c97 | Get or set file date and time
2018-12-25T12:28:34.274398012Z 64 PC: 12ca6 | Write file or device (Write 853 bytes on handle 5)
2018-12-25T12:28:34.29000387Z 66 PC: 12cb1 | Move file pointer
2018-12-25T12:28:34.291347382Z 64 PC: 12cca | Write file or device (Write 5 bytes on handle 5)
2018-12-25T12:28:34.298253797Z 87 PC: 12cd3 | Get or set file date and time
2018-12-25T12:28:34.301088432Z 62 PC: 12cd9 | Close file
2018-12-25T12:28:34.309368021Z 78 PC: 12c11 | Find first file (See above)
2018-12-25T12:28:34.315192695Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.318439099Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.32113239Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.323950402Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.339495416Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.342779251Z 61 PC: 12c63 | Open file (See above)
2018-12-25T12:28:34.350373603Z 63 PC: 12c76 | Read file or device (See above)
2018-12-25T12:28:34.35723696Z 66 PC: 12c8a | Move file pointer (See above)
2018-12-25T12:28:34.359587556Z 87 PC: 12c97 | Get or set file date and time (See above)
2018-12-25T12:28:34.36130153Z 64 PC: 12ca6 | Write file or device (See above)
2018-12-25T12:28:34.370068872Z 66 PC: 12cb1 | Move file pointer (See above)
2018-12-25T12:28:34.372224465Z 64 PC: 12cca | Write file or device (See above)
2018-12-25T12:28:34.378897303Z 87 PC: 12cd3 | Get or set file date and time (See above)
2018-12-25T12:28:34.380558176Z 62 PC: 12cd9 | Close file (See above)
2018-12-25T12:28:34.390016456Z 78 PC: 12bcf | Find first file (See above)
2018-12-25T12:28:34.396312222Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.399160896Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.4025785Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.40517505Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.407717799Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.41099447Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.413583277Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.416071962Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.419369199Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.421903868Z 78 PC: 12c11 | Find first file (See above)
2018-12-25T12:28:34.427983006Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.431531155Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.434099799Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.436553554Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.439316308Z 61 PC: 12c63 | Open file (See above)
2018-12-25T12:28:34.447219407Z 63 PC: 12c76 | Read file or device (See above)
2018-12-25T12:28:34.453923562Z 66 PC: 12c8a | Move file pointer (See above)
2018-12-25T12:28:34.455950202Z 87 PC: 12c97 | Get or set file date and time (See above)
2018-12-25T12:28:34.458695892Z 64 PC: 12ca6 | Write file or device (See above)
2018-12-25T12:28:34.467194036Z 66 PC: 12cb1 | Move file pointer (See above)
2018-12-25T12:28:34.468988939Z 64 PC: 12cca | Write file or device (See above)
2018-12-25T12:28:34.477276134Z 87 PC: 12cd3 | Get or set file date and time (See above)
2018-12-25T12:28:34.479964668Z 62 PC: 12cd9 | Close file (See above)
2018-12-25T12:28:34.488050431Z 78 PC: 12bcf | Find first file (See above)
2018-12-25T12:28:34.4952352Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.497722857Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.500054504Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.503487339Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.505942753Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.508362664Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.511562841Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.514116396Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.516524005Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.519847877Z 78 PC: 12c11 | Find first file (See above)
2018-12-25T12:28:34.525629731Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.52841981Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.532309853Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.535094457Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.538033936Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.541747842Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.545086784Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.548085544Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.551681894Z 61 PC: 12c63 | Open file (See above)
2018-12-25T12:28:34.558834363Z 63 PC: 12c76 | Read file or device (See above)
2018-12-25T12:28:34.561745478Z 62 PC: 12cd9 | Close file (See above)
2018-12-25T12:28:34.564146229Z 78 PC: 12bcf | Find first file (See above)
2018-12-25T12:28:34.570984018Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.573534251Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.576052716Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.579759392Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.582160594Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.584585321Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.587990529Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.590388124Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.592728498Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.595846307Z 78 PC: 12c11 | Find first file (See above)
2018-12-25T12:28:34.601656707Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.604796787Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.608534717Z 61 PC: 12c63 | Open file (See above)
2018-12-25T12:28:34.615010535Z 63 PC: 12c76 | Read file or device (See above)
2018-12-25T12:28:34.621480004Z 66 PC: 12c8a | Move file pointer (See above)
2018-12-25T12:28:34.623614259Z 87 PC: 12c97 | Get or set file date and time (See above)
2018-12-25T12:28:34.624964142Z 64 PC: 12ca6 | Write file or device (See above)
2018-12-25T12:28:34.632618904Z 66 PC: 12cb1 | Move file pointer (See above)
2018-12-25T12:28:34.63443636Z 64 PC: 12cca | Write file or device (See above)
2018-12-25T12:28:34.640630754Z 87 PC: 12cd3 | Get or set file date and time (See above)
2018-12-25T12:28:34.641961836Z 62 PC: 12cd9 | Close file (See above)
2018-12-25T12:28:34.650064472Z 78 PC: 12bcf | Find first file (See above)
2018-12-25T12:28:34.655758439Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.658083704Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.661030351Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.663384797Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.665802951Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.668664846Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.671660113Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.673970137Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.67675549Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.678917573Z 78 PC: 12c11 | Find first file (See above)
2018-12-25T12:28:34.684557437Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.687395109Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.690134596Z 61 PC: 12c63 | Open file (See above)
2018-12-25T12:28:34.69647434Z 63 PC: 12c76 | Read file or device (See above)
2018-12-25T12:28:34.699305934Z 62 PC: 12cd9 | Close file (See above)
2018-12-25T12:28:34.701012668Z 78 PC: 12bcf | Find first file (See above)
2018-12-25T12:28:34.706655939Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.709425296Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.711777299Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.714103921Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.717377884Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.720286114Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.72262619Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.726825695Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.72999044Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.732253762Z 78 PC: 12c11 | Find first file (See above)
2018-12-25T12:28:34.739120424Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.74256486Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.745238432Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.748524645Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.751017464Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.753403441Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.756920217Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.759391047Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.761726278Z 61 PC: 12c63 | Open file (See above)
2018-12-25T12:28:34.769609666Z 63 PC: 12c76 | Read file or device (See above)
2018-12-25T12:28:34.77218326Z 62 PC: 12cd9 | Close file (See above)
2018-12-25T12:28:34.773955508Z 78 PC: 12bcf | Find first file (See above)
2018-12-25T12:28:34.780392146Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.784449678Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.786974075Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.790301312Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.79271203Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.795085415Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.797968522Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.800313149Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.802665863Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.805211506Z 78 PC: 12c11 | Find first file (See above)
2018-12-25T12:28:34.811423806Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.814528102Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.817614227Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.820053552Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.822789507Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.825618516Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.829186142Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.83162541Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.834102297Z 61 PC: 12c63 | Open file (See above)
2018-12-25T12:28:34.841097969Z 63 PC: 12c76 | Read file or device (See above)
2018-12-25T12:28:34.843510206Z 62 PC: 12cd9 | Close file (See above)
2018-12-25T12:28:34.845192814Z 78 PC: 12bcf | Find first file (See above)
2018-12-25T12:28:34.85164015Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.854022611Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.856671486Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.860153774Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.862505359Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.864899691Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.867882439Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.870228038Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.872567667Z 79 PC: 12bcf | Find next file (See above)
2018-12-25T12:28:34.876481743Z 78 PC: 12c11 | Find first file (See above)
2018-12-25T12:28:34.883022933Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.885681506Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.889323373Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.891643445Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.894579695Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.897987639Z 61 PC: 12c63 | Open file (See above)
2018-12-25T12:28:34.904681437Z 63 PC: 12c76 | Read file or device (See above)
2018-12-25T12:28:34.907104904Z 62 PC: 12cd9 | Close file (See above)
2018-12-25T12:28:34.909504405Z 78 PC: 12c11 | Find first file (See above)
2018-12-25T12:28:34.915648514Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.918099364Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.921242585Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.923765534Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.926128725Z 79 PC: 12c24 | Find next file (See above)
2018-12-25T12:28:34.92947251Z 61 PC: 12c63 | Open file (See above)
2018-12-25T12:28:34.93653508Z 63 PC: 12c76 | Read file or device (See above)
2018-12-25T12:28:34.939761868Z 62 PC: 12cd9 | Close file (See above)
2018-12-25T12:28:34.942488487Z 42 PC: 12afb | Get date 0x12afb: cmp dh, 0xc
0x12afe: jne 0x12b19
0x12b00: cmp dl, 0x18
0x12b03: jb 0x12b19
0x12b05: cmp dl, 0x1a
0x12b08: ja 0x12b19
0x12b0a: call 0x12b1a
0x12b0d: lea dx, word ptr [si + 0x338]
0x12b11: mov ah, 9
0x12b13: int 0x21
0x12b15: mov ah, 0
0x12b17: int 0x16
0x12b19: ret
0x12b1a: mov byte ptr [si + 0x457], 0x5c
0x12b1f: mov word ptr [si + 0x458], 0x2e2a
0x12b25: mov word ptr [si + 0x45a], 0x2a
0x12b2b: lea dx, word ptr [si + 0x457]
0x12b2f: xor cx, cx
0x12b31: mov ah, 0x4e
0x12b33: int 0x21
2018-12-25T12:28:34.944615875Z 26 PC: 12ae9 | Set disk transfer address
2018-12-25T12:28:34.945627286Z 76 PC: 12aa4 | Terminate with return code (Return code = '0')