Sample viewer

vx.netlux.org/Virus.DOS.Zol.799

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:54:45.248098353Z 71 PC: 12c63 | Get current directory
2018-12-17T22:54:45.251675954Z 59 PC: 12c6e | Change current directory
2018-12-17T22:54:45.255887165Z 78 PC: 12c82 | Find first file
2018-12-17T22:54:45.262338264Z 47 PC: 12c8b | Get disk transfer address
2018-12-17T22:54:45.263625384Z 67 PC: 12c9d | Get or set file attributes
2018-12-17T22:54:45.281844626Z 61 PC: 12ca2 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:54:45.286344818Z 66 PC: 12caf | Move file pointer
2018-12-17T22:54:45.287653375Z 87 PC: 12cc8 | Get or set file date and time
2018-12-17T22:54:45.289660852Z 66 PC: 12cfb | Move file pointer
2018-12-17T22:54:45.290848469Z 63 PC: 12d11 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:54:45.296585249Z 66 PC: 12d1c | Move file pointer
2018-12-17T22:54:45.307976354Z 64 PC: 12d35 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:54:45.311213795Z 66 PC: 12d40 | Move file pointer
2018-12-17T22:54:45.312773353Z 64 PC: 12d53 | Write file or device (Write 799 bytes on handle 5)
2018-12-17T22:54:45.32802002Z 87 PC: 12d5e | Get or set file date and time
2018-12-17T22:54:45.330602258Z 62 PC: 12d62 | Close file
2018-12-17T22:54:45.339873935Z 79 PC: 12cd6 | Find next file
2018-12-17T22:54:45.343308526Z 47 PC: 12c8b | Get disk transfer address
2018-12-17T22:54:45.34584743Z 67 PC: 12c9d | Get or set file attributes
2018-12-17T22:54:45.357727491Z 61 PC: 12ca2 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:54:45.365827721Z 66 PC: 12caf | Move file pointer
2018-12-17T22:54:45.368264117Z 87 PC: 12cc8 | Get or set file date and time
2018-12-17T22:54:45.369749748Z 66 PC: 12cfb | Move file pointer
2018-12-17T22:54:45.3710991Z 63 PC: 12d11 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:54:45.379332753Z 66 PC: 12d1c | Move file pointer
2018-12-17T22:54:45.383414215Z 64 PC: 12d35 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:54:45.386742552Z 66 PC: 12d40 | Move file pointer
2018-12-17T22:54:45.390351871Z 64 PC: 12d53 | Write file or device (Write 799 bytes on handle 5)
2018-12-17T22:54:45.399778703Z 87 PC: 12d5e | Get or set file date and time
2018-12-17T22:54:45.401484423Z 62 PC: 12d62 | Close file
2018-12-17T22:54:45.410167849Z 79 PC: 12cd6 | Find next file
2018-12-17T22:54:45.414168396Z 47 PC: 12c8b | Get disk transfer address
2018-12-17T22:54:45.415813371Z 67 PC: 12c9d | Get or set file attributes
2018-12-17T22:54:45.427026012Z 61 PC: 12ca2 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:54:45.435615648Z 66 PC: 12caf | Move file pointer
2018-12-17T22:54:45.437804216Z 87 PC: 12cc8 | Get or set file date and time
2018-12-17T22:54:45.4396701Z 66 PC: 12cfb | Move file pointer
2018-12-17T22:54:45.442317558Z 63 PC: 12d11 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:54:45.44981677Z 66 PC: 12d1c | Move file pointer
2018-12-17T22:54:45.451750776Z 64 PC: 12d35 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:54:45.455756836Z 66 PC: 12d40 | Move file pointer
2018-12-17T22:54:45.458281068Z 64 PC: 12d53 | Write file or device (Write 799 bytes on handle 5)
2018-12-17T22:54:45.468341504Z 87 PC: 12d5e | Get or set file date and time
2018-12-17T22:54:45.470966412Z 62 PC: 12d62 | Close file
2018-12-17T22:54:45.479988554Z 79 PC: 12cd6 | Find next file
2018-12-17T22:54:45.482971951Z 47 PC: 12c8b | Get disk transfer address
2018-12-17T22:54:45.484414784Z 67 PC: 12c9d | Get or set file attributes
2018-12-17T22:54:45.496316727Z 61 PC: 12ca2 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:54:45.504277722Z 66 PC: 12caf | Move file pointer
2018-12-17T22:54:45.506122846Z 87 PC: 12cc8 | Get or set file date and time
2018-12-17T22:54:45.508665315Z 66 PC: 12cfb | Move file pointer
2018-12-17T22:54:45.510361021Z 63 PC: 12d11 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:54:45.518192545Z 66 PC: 12d1c | Move file pointer
2018-12-17T22:54:45.520776336Z 64 PC: 12d35 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:54:45.524045794Z 66 PC: 12d40 | Move file pointer
2018-12-17T22:54:45.525847614Z 64 PC: 12d53 | Write file or device (Write 799 bytes on handle 5)
2018-12-17T22:54:45.536458828Z 87 PC: 12d5e | Get or set file date and time
2018-12-17T22:54:45.538382383Z 62 PC: 12d62 | Close file
2018-12-17T22:54:45.552134924Z 79 PC: 12cd6 | Find next file
2018-12-17T22:54:45.555913821Z 47 PC: 12c8b | Get disk transfer address
2018-12-17T22:54:45.557185778Z 67 PC: 12c9d | Get or set file attributes
2018-12-17T22:54:45.567900592Z 61 PC: 12ca2 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:54:45.575777531Z 66 PC: 12caf | Move file pointer
2018-12-17T22:54:45.577600554Z 87 PC: 12cc8 | Get or set file date and time
2018-12-17T22:54:45.579300385Z 66 PC: 12cfb | Move file pointer
2018-12-17T22:54:45.581221438Z 63 PC: 12d11 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:54:45.588629981Z 66 PC: 12d1c | Move file pointer
2018-12-17T22:54:45.590237578Z 64 PC: 12d35 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:54:45.593189313Z 66 PC: 12d40 | Move file pointer
2018-12-17T22:54:45.595177635Z 64 PC: 12d53 | Write file or device (Write 799 bytes on handle 5)
2018-12-17T22:54:45.620652308Z 87 PC: 12d5e | Get or set file date and time
2018-12-17T22:54:45.622119852Z 62 PC: 12d62 | Close file
2018-12-17T22:54:45.627775145Z 79 PC: 12cd6 | Find next file
2018-12-17T22:54:45.629780603Z 47 PC: 12c8b | Get disk transfer address
2018-12-17T22:54:45.630846941Z 67 PC: 12c9d | Get or set file attributes
2018-12-17T22:54:45.638063787Z 61 PC: 12ca2 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:54:45.642479883Z 66 PC: 12caf | Move file pointer
2018-12-17T22:54:45.643716615Z 87 PC: 12cc8 | Get or set file date and time
2018-12-17T22:54:45.645550804Z 66 PC: 12cfb | Move file pointer
2018-12-17T22:54:45.646805948Z 63 PC: 12d11 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:54:45.651330323Z 66 PC: 12d1c | Move file pointer
2018-12-17T22:54:45.65313575Z 64 PC: 12d35 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:54:45.655160623Z 66 PC: 12d40 | Move file pointer
2018-12-17T22:54:45.656381337Z 64 PC: 12d53 | Write file or device (Write 799 bytes on handle 5)
2018-12-17T22:54:45.662500439Z 87 PC: 12d5e | Get or set file date and time
2018-12-17T22:54:45.664559038Z 62 PC: 12d62 | Close file
2018-12-17T22:54:45.670180072Z 79 PC: 12cd6 | Find next file
2018-12-17T22:54:45.67212118Z 47 PC: 12c8b | Get disk transfer address
2018-12-17T22:54:45.673423292Z 67 PC: 12c9d | Get or set file attributes
2018-12-17T22:54:45.67986761Z 61 PC: 12ca2 | Open file (Filename = 'PAH.COM')
2018-12-17T22:54:45.687204842Z 66 PC: 12caf | Move file pointer
2018-12-17T22:54:45.689119505Z 87 PC: 12cc8 | Get or set file date and time
2018-12-17T22:54:45.690594812Z 66 PC: 12cfb | Move file pointer
2018-12-17T22:54:45.69199007Z 63 PC: 12d11 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:54:45.699582272Z 66 PC: 12d1c | Move file pointer
2018-12-17T22:54:45.701253168Z 64 PC: 12d35 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:54:45.704326061Z 66 PC: 12d40 | Move file pointer
2018-12-17T22:54:45.706412962Z 64 PC: 12d53 | Write file or device (Write 799 bytes on handle 5)
2018-12-17T22:54:45.715114906Z 87 PC: 12d5e | Get or set file date and time
2018-12-17T22:54:45.716750183Z 62 PC: 12d62 | Close file
2018-12-17T22:54:45.726335791Z 79 PC: 12cd6 | Find next file
2018-12-17T22:54:45.729850419Z 47 PC: 12c8b | Get disk transfer address
2018-12-17T22:54:45.731405346Z 67 PC: 12c9d | Get or set file attributes
2018-12-17T22:54:45.743566891Z 61 PC: 12ca2 | Open file (Filename = 'TEST.COM')
2018-12-17T22:54:45.751010109Z 66 PC: 12caf | Move file pointer
2018-12-17T22:54:45.75296263Z 87 PC: 12cc8 | Get or set file date and time
2018-12-17T22:54:45.75472372Z 66 PC: 12cfb | Move file pointer
2018-12-17T22:54:45.756789103Z 63 PC: 12d11 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:54:45.759652768Z 66 PC: 12d1c | Move file pointer
2018-12-17T22:54:45.761195182Z 64 PC: 12d35 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:54:45.764690763Z 66 PC: 12d40 | Move file pointer
2018-12-17T22:54:45.766577197Z 64 PC: 12d53 | Write file or device (Write 799 bytes on handle 5)
2018-12-17T22:54:45.776921941Z 87 PC: 12d5e | Get or set file date and time
2018-12-17T22:54:45.77934975Z 62 PC: 12d62 | Close file
2018-12-17T22:54:45.788475147Z 79 PC: 12cd6 | Find next file
2018-12-17T22:54:45.791586791Z 59 PC: 12ce8 | Change current directory
2018-12-17T22:54:45.795029803Z 78 PC: 12c82 | Find first file
2018-12-17T22:54:45.80268691Z 47 PC: 12c8b | Get disk transfer address
2018-12-17T22:54:45.80431966Z 67 PC: 12c9d | Get or set file attributes
2018-12-17T22:54:45.816397951Z 61 PC: 12ca2 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:54:45.823932446Z 66 PC: 12caf | Move file pointer
2018-12-17T22:54:45.825815335Z 87 PC: 12cc8 | Get or set file date and time
2018-12-17T22:54:45.828721573Z 62 PC: 12cd2 | Close file
2018-12-17T22:54:45.831007567Z 79 PC: 12cd6 | Find next file
2018-12-17T22:54:45.833888611Z 47 PC: 12c8b | Get disk transfer address
2018-12-17T22:54:45.835557452Z 67 PC: 12c9d | Get or set file attributes
2018-12-17T22:54:45.846789941Z 61 PC: 12ca2 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:54:45.854607304Z 66 PC: 12caf | Move file pointer
2018-12-17T22:54:45.857029995Z 87 PC: 12cc8 | Get or set file date and time
2018-12-17T22:54:45.85884627Z 62 PC: 12cd2 | Close file
2018-12-17T22:54:45.86097069Z 79 PC: 12cd6 | Find next file
2018-12-17T22:54:45.864163655Z 47 PC: 12c8b | Get disk transfer address
2018-12-17T22:54:45.866178182Z 67 PC: 12c9d | Get or set file attributes
2018-12-17T22:54:45.877758628Z 61 PC: 12ca2 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:54:45.885164172Z 66 PC: 12caf | Move file pointer
2018-12-17T22:54:45.887594522Z 87 PC: 12cc8 | Get or set file date and time
2018-12-17T22:54:45.889182911Z 62 PC: 12cd2 | Close file
2018-12-17T22:54:45.89114545Z 79 PC: 12cd6 | Find next file
2018-12-17T22:54:45.896350812Z 47 PC: 12c8b | Get disk transfer address
2018-12-17T22:54:45.900169535Z 67 PC: 12c9d | Get or set file attributes
2018-12-17T22:54:45.91317851Z 61 PC: 12ca2 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:54:45.921376347Z 66 PC: 12caf | Move file pointer
2018-12-17T22:54:45.923359159Z 87 PC: 12cc8 | Get or set file date and time
2018-12-17T22:54:45.925225158Z 62 PC: 12cd2 | Close file
2018-12-17T22:54:45.928300675Z 79 PC: 12cd6 | Find next file
2018-12-17T22:54:45.931765547Z 47 PC: 12c8b | Get disk transfer address
2018-12-17T22:54:45.9334237Z 67 PC: 12c9d | Get or set file attributes
2018-12-17T22:54:45.945537218Z 61 PC: 12ca2 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:54:45.952944504Z 66 PC: 12caf | Move file pointer
2018-12-17T22:54:45.954706752Z 87 PC: 12cc8 | Get or set file date and time
2018-12-17T22:54:45.956633734Z 62 PC: 12cd2 | Close file
2018-12-17T22:54:45.958490812Z 79 PC: 12cd6 | Find next file
2018-12-17T22:54:45.961167787Z 47 PC: 12c8b | Get disk transfer address
2018-12-17T22:54:45.962913199Z 67 PC: 12c9d | Get or set file attributes
2018-12-17T22:54:45.973805459Z 61 PC: 12ca2 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:54:45.97834819Z 66 PC: 12caf | Move file pointer
2018-12-17T22:54:45.980131078Z 87 PC: 12cc8 | Get or set file date and time
2018-12-17T22:54:45.981739707Z 62 PC: 12cd2 | Close file
2018-12-17T22:54:45.983687094Z 79 PC: 12cd6 | Find next file
2018-12-17T22:54:45.987094003Z 47 PC: 12c8b | Get disk transfer address
2018-12-17T22:54:45.988279967Z 67 PC: 12c9d | Get or set file attributes
2018-12-17T22:54:45.999235144Z 61 PC: 12ca2 | Open file (Filename = 'PAH.COM')
2018-12-17T22:54:46.013240121Z 66 PC: 12caf | Move file pointer
2018-12-17T22:54:46.015226587Z 87 PC: 12cc8 | Get or set file date and time
2018-12-17T22:54:46.017196338Z 62 PC: 12cd2 | Close file
2018-12-17T22:54:46.020065178Z 79 PC: 12cd6 | Find next file
2018-12-17T22:54:46.023263531Z 47 PC: 12c8b | Get disk transfer address
2018-12-17T22:54:46.024836794Z 67 PC: 12c9d | Get or set file attributes
2018-12-17T22:54:46.037103564Z 61 PC: 12ca2 | Open file (Filename = 'TEST.COM')
2018-12-17T22:54:46.044945626Z 66 PC: 12caf | Move file pointer
2018-12-17T22:54:46.046953194Z 87 PC: 12cc8 | Get or set file date and time
2018-12-17T22:54:46.05007928Z 62 PC: 12cd2 | Close file
2018-12-17T22:54:46.052215602Z 79 PC: 12cd6 | Find next file
2018-12-17T22:54:46.055216419Z 42 PC: 12d84 | Get date 0x12d84: cmp al, 5
0x12d86: je 0x12da2
0x12d88: push cs
0x12d89: pop ds
0x12d8a: cld
0x12d8b: xor cx, cx
0x12d8d: mov di, cx
0x12d8f: mov dx, 0xf
0x12d92: pop bx
0x12d93: add dx, bx
0x12d95: push bx
0x12d96: mov si, dx
0x12d98: mov cx, 0x100
0x12d9b: rep movsb byte ptr es:[di], byte ptr [si]
0x12d9d: mov bx, 0x100
0x12da0: jmp bx
0x12da2: mov dx, 0x157
0x12da5: pop bx
0x12da6: add dx, bx
0x12da8: push bx
2018-12-17T22:54:46.059006684Z 9 PC: 12aa2 | Display string (String= 'ABCDE - This is a 100 byte COM test, 1994 ')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":11660,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:31:00.891134313Z 71 PC: 12c63 | Get current directory
2018-12-25T12:31:00.894427101Z 59 PC: 12c6e | Change current directory
2018-12-25T12:31:00.909595698Z 78 PC: 12c82 | Find first file
2018-12-25T12:31:00.917845215Z 47 PC: 12c8b | Get disk transfer address
2018-12-25T12:31:00.919881462Z 67 PC: 12c9d | Get or set file attributes
2018-12-25T12:31:01.181914001Z 61 PC: 12ca2 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:31:01.196032894Z 66 PC: 12caf | Move file pointer
2018-12-25T12:31:01.198097336Z 87 PC: 12cc8 | Get or set file date and time
2018-12-25T12:31:01.201333824Z 66 PC: 12cfb | Move file pointer
2018-12-25T12:31:01.20335345Z 63 PC: 12d11 | Read file or device (Read 3 bytes on handle 5)
2018-12-25T12:31:01.211690665Z 66 PC: 12d1c | Move file pointer
2018-12-25T12:31:01.214729249Z 64 PC: 12d35 | Write file or device (Write 3 bytes on handle 5)
2018-12-25T12:31:01.218065778Z 66 PC: 12d40 | Move file pointer
2018-12-25T12:31:01.2201217Z 64 PC: 12d53 | Write file or device (Write 799 bytes on handle 5)
2018-12-25T12:31:01.230310139Z 87 PC: 12d5e | Get or set file date and time
2018-12-25T12:31:01.232777022Z 62 PC: 12d62 | Close file
2018-12-25T12:31:01.241475387Z 79 PC: 12cd6 | Find next file
2018-12-25T12:31:01.245066525Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:01.247304978Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:01.27344891Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:01.284585957Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:01.287443313Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:01.289069774Z 66 PC: 12cfb | Move file pointer (See above)
2018-12-25T12:31:01.290647155Z 63 PC: 12d11 | Read file or device (See above)
2018-12-25T12:31:01.298923713Z 66 PC: 12d1c | Move file pointer (See above)
2018-12-25T12:31:01.300587751Z 64 PC: 12d35 | Write file or device (See above)
2018-12-25T12:31:01.303612574Z 66 PC: 12d40 | Move file pointer (See above)
2018-12-25T12:31:01.316906731Z 64 PC: 12d53 | Write file or device (See above)
2018-12-25T12:31:01.326496216Z 87 PC: 12d5e | Get or set file date and time (See above)
2018-12-25T12:31:01.328320622Z 62 PC: 12d62 | Close file (See above)
2018-12-25T12:31:01.339020648Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:01.342281515Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:01.344075705Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:01.358896088Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:01.363955803Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:01.372099289Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:01.374433119Z 66 PC: 12cfb | Move file pointer (See above)
2018-12-25T12:31:01.37696197Z 63 PC: 12d11 | Read file or device (See above)
2018-12-25T12:31:01.384478705Z 66 PC: 12d1c | Move file pointer (See above)
2018-12-25T12:31:01.386416062Z 64 PC: 12d35 | Write file or device (See above)
2018-12-25T12:31:01.390617158Z 66 PC: 12d40 | Move file pointer (See above)
2018-12-25T12:31:01.392250421Z 64 PC: 12d53 | Write file or device (See above)
2018-12-25T12:31:01.40123471Z 87 PC: 12d5e | Get or set file date and time (See above)
2018-12-25T12:31:01.404569942Z 62 PC: 12d62 | Close file (See above)
2018-12-25T12:31:01.414106215Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:01.417482879Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:01.419900283Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:01.431136017Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:01.438985248Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:01.442048686Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:01.444424847Z 66 PC: 12cfb | Move file pointer (See above)
2018-12-25T12:31:01.446415085Z 63 PC: 12d11 | Read file or device (See above)
2018-12-25T12:31:01.454787539Z 66 PC: 12d1c | Move file pointer (See above)
2018-12-25T12:31:01.457091064Z 64 PC: 12d35 | Write file or device (See above)
2018-12-25T12:31:01.460402176Z 66 PC: 12d40 | Move file pointer (See above)
2018-12-25T12:31:01.462353621Z 64 PC: 12d53 | Write file or device (See above)
2018-12-25T12:31:01.473014967Z 87 PC: 12d5e | Get or set file date and time (See above)
2018-12-25T12:31:01.475059372Z 62 PC: 12d62 | Close file (See above)
2018-12-25T12:31:01.486527477Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:01.490372714Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:01.492232147Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:01.504430162Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:01.513176657Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:01.515312207Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:01.517045467Z 66 PC: 12cfb | Move file pointer (See above)
2018-12-25T12:31:01.519953506Z 63 PC: 12d11 | Read file or device (See above)
2018-12-25T12:31:01.527252709Z 66 PC: 12d1c | Move file pointer (See above)
2018-12-25T12:31:01.529069123Z 64 PC: 12d35 | Write file or device (See above)
2018-12-25T12:31:01.534695388Z 66 PC: 12d40 | Move file pointer (See above)
2018-12-25T12:31:01.536498367Z 64 PC: 12d53 | Write file or device (See above)
2018-12-25T12:31:01.545717166Z 87 PC: 12d5e | Get or set file date and time (See above)
2018-12-25T12:31:01.548310114Z 62 PC: 12d62 | Close file (See above)
2018-12-25T12:31:01.558283141Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:01.561758795Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:01.577365219Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:01.611714018Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:01.619425538Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:01.621638349Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:01.625115214Z 66 PC: 12cfb | Move file pointer (See above)
2018-12-25T12:31:01.627627056Z 63 PC: 12d11 | Read file or device (See above)
2018-12-25T12:31:01.635699376Z 66 PC: 12d1c | Move file pointer (See above)
2018-12-25T12:31:01.638439454Z 64 PC: 12d35 | Write file or device (See above)
2018-12-25T12:31:01.642118622Z 66 PC: 12d40 | Move file pointer (See above)
2018-12-25T12:31:01.644084481Z 64 PC: 12d53 | Write file or device (See above)
2018-12-25T12:31:01.697912585Z 87 PC: 12d5e | Get or set file date and time (See above)
2018-12-25T12:31:01.701863782Z 62 PC: 12d62 | Close file (See above)
2018-12-25T12:31:01.750284266Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:01.753225964Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:01.757837329Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:01.829370778Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:01.83693478Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:01.839305265Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:01.840976618Z 66 PC: 12cfb | Move file pointer (See above)
2018-12-25T12:31:01.842531547Z 63 PC: 12d11 | Read file or device (See above)
2018-12-25T12:31:01.852933166Z 66 PC: 12d1c | Move file pointer (See above)
2018-12-25T12:31:01.854648849Z 64 PC: 12d35 | Write file or device (See above)
2018-12-25T12:31:01.859301311Z 66 PC: 12d40 | Move file pointer (See above)
2018-12-25T12:31:01.862175651Z 64 PC: 12d53 | Write file or device (See above)
2018-12-25T12:31:01.893389492Z 87 PC: 12d5e | Get or set file date and time (See above)
2018-12-25T12:31:01.895948444Z 62 PC: 12d62 | Close file (See above)
2018-12-25T12:31:01.940402125Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:01.944132022Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:01.94573919Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:01.96463563Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:01.973612846Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:01.975765465Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:01.977791233Z 66 PC: 12cfb | Move file pointer (See above)
2018-12-25T12:31:01.980995447Z 63 PC: 12d11 | Read file or device (See above)
2018-12-25T12:31:01.988361522Z 66 PC: 12d1c | Move file pointer (See above)
2018-12-25T12:31:01.990204723Z 64 PC: 12d35 | Write file or device (See above)
2018-12-25T12:31:01.992628317Z 66 PC: 12d40 | Move file pointer (See above)
2018-12-25T12:31:01.993888192Z 64 PC: 12d53 | Write file or device (See above)
2018-12-25T12:31:02.034353306Z 87 PC: 12d5e | Get or set file date and time (See above)
2018-12-25T12:31:02.037591657Z 62 PC: 12d62 | Close file (See above)
2018-12-25T12:31:02.110906926Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:02.11363602Z 59 PC: 12ce8 | Change current directory
2018-12-25T12:31:02.117147775Z 78 PC: 12c82 | Find first file (See above)
2018-12-25T12:31:02.12342255Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:02.124789649Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:02.19543581Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:02.20065179Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:02.201915797Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:02.203709319Z 62 PC: 12cd2 | Close file
2018-12-25T12:31:02.205065385Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:02.207695068Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:02.20975201Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:02.271479581Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:02.279275813Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:02.281805473Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:02.283296404Z 62 PC: 12cd2 | Close file (See above)
2018-12-25T12:31:02.285338668Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:02.288872871Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:02.290483202Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:02.370126326Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:02.381524053Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:02.384647812Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:02.386857425Z 62 PC: 12cd2 | Close file (See above)
2018-12-25T12:31:02.389638112Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:02.394566036Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:02.396207834Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:02.519824655Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:02.525033906Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:02.526647209Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:02.528287569Z 62 PC: 12cd2 | Close file (See above)
2018-12-25T12:31:02.530561178Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:02.533729395Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:02.535279473Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:02.633641786Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:02.64228631Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:02.644313035Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:02.647396765Z 62 PC: 12cd2 | Close file (See above)
2018-12-25T12:31:02.648857426Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:02.651623646Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:02.653269372Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:02.814539525Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:02.822138516Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:02.825321608Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:02.827158997Z 62 PC: 12cd2 | Close file (See above)
2018-12-25T12:31:02.829351642Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:02.833195587Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:02.835094587Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:02.94849111Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:02.957564994Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:02.959358581Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:02.961749147Z 62 PC: 12cd2 | Close file (See above)
2018-12-25T12:31:02.964357281Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:02.968294716Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:02.970377817Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:03.089946544Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:03.094852122Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:03.096423711Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:03.098715152Z 62 PC: 12cd2 | Close file (See above)
2018-12-25T12:31:03.100591318Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:03.105555289Z 42 PC: 12d84 | Get date 0x12d84: cmp al, 5
0x12d86: je 0x12da2
0x12d88: push cs
0x12d89: pop ds
0x12d8a: cld
0x12d8b: xor cx, cx
0x12d8d: mov di, cx
0x12d8f: mov dx, 0xf
0x12d92: pop bx
0x12d93: add dx, bx
0x12d95: push bx
0x12d96: mov si, dx
0x12d98: mov cx, 0x100
0x12d9b: rep movsb byte ptr es:[di], byte ptr [si]
0x12d9d: mov bx, 0x100
0x12da0: jmp bx
0x12da2: mov dx, 0x157
0x12da5: pop bx
0x12da6: add dx, bx
0x12da8: push bx
2018-12-25T12:31:03.108645375Z 9 PC: 12aa2 | Display string (String= 'ABCDE - This is a 100 byte COM test, 1994 ')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":11660,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:31:02.466465669Z 71 PC: 12c63 | Get current directory
2018-12-25T12:31:02.469206843Z 59 PC: 12c6e | Change current directory
2018-12-25T12:31:02.473653352Z 78 PC: 12c82 | Find first file
2018-12-25T12:31:02.477745311Z 47 PC: 12c8b | Get disk transfer address
2018-12-25T12:31:02.478890972Z 67 PC: 12c9d | Get or set file attributes
2018-12-25T12:31:03.254681745Z 61 PC: 12ca2 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:31:03.262526016Z 66 PC: 12caf | Move file pointer
2018-12-25T12:31:03.265837867Z 87 PC: 12cc8 | Get or set file date and time
2018-12-25T12:31:03.267964433Z 66 PC: 12cfb | Move file pointer
2018-12-25T12:31:03.270137263Z 63 PC: 12d11 | Read file or device (Read 3 bytes on handle 5)
2018-12-25T12:31:03.27797967Z 66 PC: 12d1c | Move file pointer
2018-12-25T12:31:03.27959749Z 64 PC: 12d35 | Write file or device (Write 3 bytes on handle 5)
2018-12-25T12:31:03.28173946Z 66 PC: 12d40 | Move file pointer
2018-12-25T12:31:03.284035851Z 64 PC: 12d53 | Write file or device (Write 799 bytes on handle 5)
2018-12-25T12:31:03.296026213Z 87 PC: 12d5e | Get or set file date and time
2018-12-25T12:31:03.297889513Z 62 PC: 12d62 | Close file
2018-12-25T12:31:03.306860357Z 79 PC: 12cd6 | Find next file
2018-12-25T12:31:03.31110944Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:03.312523996Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:03.321226362Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:03.326303119Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:03.327492513Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:03.328692482Z 66 PC: 12cfb | Move file pointer (See above)
2018-12-25T12:31:03.330298267Z 63 PC: 12d11 | Read file or device (See above)
2018-12-25T12:31:03.334577232Z 66 PC: 12d1c | Move file pointer (See above)
2018-12-25T12:31:03.335750295Z 64 PC: 12d35 | Write file or device (See above)
2018-12-25T12:31:03.338238879Z 66 PC: 12d40 | Move file pointer (See above)
2018-12-25T12:31:03.341661402Z 64 PC: 12d53 | Write file or device (See above)
2018-12-25T12:31:03.353217744Z 87 PC: 12d5e | Get or set file date and time (See above)
2018-12-25T12:31:03.354784234Z 62 PC: 12d62 | Close file (See above)
2018-12-25T12:31:03.363874699Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:03.366739395Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:03.368029763Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:03.379858837Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:03.387325411Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:03.388851433Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:03.390911047Z 66 PC: 12cfb | Move file pointer (See above)
2018-12-25T12:31:03.392545187Z 63 PC: 12d11 | Read file or device (See above)
2018-12-25T12:31:03.400064381Z 66 PC: 12d1c | Move file pointer (See above)
2018-12-25T12:31:03.40236524Z 64 PC: 12d35 | Write file or device (See above)
2018-12-25T12:31:03.40553821Z 66 PC: 12d40 | Move file pointer (See above)
2018-12-25T12:31:03.407212935Z 64 PC: 12d53 | Write file or device (See above)
2018-12-25T12:31:03.417013885Z 87 PC: 12d5e | Get or set file date and time (See above)
2018-12-25T12:31:03.419043362Z 62 PC: 12d62 | Close file (See above)
2018-12-25T12:31:03.427857657Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:03.431323459Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:03.432793643Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:03.442009246Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:03.448126418Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:03.45030526Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:03.451915335Z 66 PC: 12cfb | Move file pointer (See above)
2018-12-25T12:31:03.456525509Z 63 PC: 12d11 | Read file or device (See above)
2018-12-25T12:31:03.46159399Z 66 PC: 12d1c | Move file pointer (See above)
2018-12-25T12:31:03.462778268Z 64 PC: 12d35 | Write file or device (See above)
2018-12-25T12:31:03.464978643Z 66 PC: 12d40 | Move file pointer (See above)
2018-12-25T12:31:03.46706532Z 64 PC: 12d53 | Write file or device (See above)
2018-12-25T12:31:03.472511347Z 87 PC: 12d5e | Get or set file date and time (See above)
2018-12-25T12:31:03.474189006Z 62 PC: 12d62 | Close file (See above)
2018-12-25T12:31:03.482307269Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:03.48619796Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:03.487896033Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:03.500089142Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:03.508242092Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:03.509786921Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:03.512380149Z 66 PC: 12cfb | Move file pointer (See above)
2018-12-25T12:31:03.514503741Z 63 PC: 12d11 | Read file or device (See above)
2018-12-25T12:31:03.52155098Z 66 PC: 12d1c | Move file pointer (See above)
2018-12-25T12:31:03.523138671Z 64 PC: 12d35 | Write file or device (See above)
2018-12-25T12:31:03.536901565Z 66 PC: 12d40 | Move file pointer (See above)
2018-12-25T12:31:03.538550092Z 64 PC: 12d53 | Write file or device (See above)
2018-12-25T12:31:03.547365008Z 87 PC: 12d5e | Get or set file date and time (See above)
2018-12-25T12:31:03.549993576Z 62 PC: 12d62 | Close file (See above)
2018-12-25T12:31:03.566881227Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:03.569911562Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:03.571980645Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:03.583573821Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:03.592437562Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:03.59539073Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:03.597378894Z 66 PC: 12cfb | Move file pointer (See above)
2018-12-25T12:31:03.599349336Z 63 PC: 12d11 | Read file or device (See above)
2018-12-25T12:31:03.60766661Z 66 PC: 12d1c | Move file pointer (See above)
2018-12-25T12:31:03.609794634Z 64 PC: 12d35 | Write file or device (See above)
2018-12-25T12:31:03.61310774Z 66 PC: 12d40 | Move file pointer (See above)
2018-12-25T12:31:03.615270776Z 64 PC: 12d53 | Write file or device (See above)
2018-12-25T12:31:03.625863899Z 87 PC: 12d5e | Get or set file date and time (See above)
2018-12-25T12:31:03.628076602Z 62 PC: 12d62 | Close file (See above)
2018-12-25T12:31:03.637846524Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:03.641860068Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:03.643202071Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:03.654219503Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:03.66364888Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:03.665701236Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:03.667740061Z 66 PC: 12cfb | Move file pointer (See above)
2018-12-25T12:31:03.670693184Z 63 PC: 12d11 | Read file or device (See above)
2018-12-25T12:31:03.679001941Z 66 PC: 12d1c | Move file pointer (See above)
2018-12-25T12:31:03.681004921Z 64 PC: 12d35 | Write file or device (See above)
2018-12-25T12:31:03.685129555Z 66 PC: 12d40 | Move file pointer (See above)
2018-12-25T12:31:03.686906472Z 64 PC: 12d53 | Write file or device (See above)
2018-12-25T12:31:03.69623597Z 87 PC: 12d5e | Get or set file date and time (See above)
2018-12-25T12:31:03.69810029Z 62 PC: 12d62 | Close file (See above)
2018-12-25T12:31:03.70752614Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:03.710465501Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:03.711739525Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:03.724788408Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:03.733868609Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:03.736107683Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:03.739092076Z 66 PC: 12cfb | Move file pointer (See above)
2018-12-25T12:31:03.741048993Z 63 PC: 12d11 | Read file or device (See above)
2018-12-25T12:31:03.744279306Z 66 PC: 12d1c | Move file pointer (See above)
2018-12-25T12:31:03.746931779Z 64 PC: 12d35 | Write file or device (See above)
2018-12-25T12:31:03.750033716Z 66 PC: 12d40 | Move file pointer (See above)
2018-12-25T12:31:03.751866337Z 64 PC: 12d53 | Write file or device (See above)
2018-12-25T12:31:03.762465735Z 87 PC: 12d5e | Get or set file date and time (See above)
2018-12-25T12:31:03.764741924Z 62 PC: 12d62 | Close file (See above)
2018-12-25T12:31:03.773819004Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:03.777125267Z 59 PC: 12ce8 | Change current directory
2018-12-25T12:31:03.780451922Z 78 PC: 12c82 | Find first file (See above)
2018-12-25T12:31:03.787264758Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:03.788955102Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:03.800711924Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:03.807947563Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:03.810001286Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:03.812555482Z 62 PC: 12cd2 | Close file
2018-12-25T12:31:03.814976385Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:03.818241701Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:03.820394229Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:03.831083629Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:03.838366345Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:03.841084804Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:03.842588068Z 62 PC: 12cd2 | Close file (See above)
2018-12-25T12:31:03.844682508Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:03.847924681Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:03.84919517Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:03.86009729Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:03.874125168Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:03.875762257Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:03.877543599Z 62 PC: 12cd2 | Close file (See above)
2018-12-25T12:31:03.880729474Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:03.883664364Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:03.885099252Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:03.896346072Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:03.903867862Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:03.90555323Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:03.90748854Z 62 PC: 12cd2 | Close file (See above)
2018-12-25T12:31:03.90931617Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:03.9119916Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:03.913577057Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:03.924430714Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:03.930006494Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:03.931636838Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:03.933157842Z 62 PC: 12cd2 | Close file (See above)
2018-12-25T12:31:03.934302849Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:03.936329597Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:03.937553088Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:03.948189133Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:03.955968807Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:03.957404179Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:03.9586229Z 62 PC: 12cd2 | Close file (See above)
2018-12-25T12:31:03.960839969Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:03.963437845Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:03.964359041Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:03.975403076Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:03.982872069Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:03.984376227Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:03.986605303Z 62 PC: 12cd2 | Close file (See above)
2018-12-25T12:31:03.988460064Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:03.991158615Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:03.993147256Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:04.004373397Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:04.011779946Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:04.013627108Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:04.015410977Z 62 PC: 12cd2 | Close file (See above)
2018-12-25T12:31:04.017279141Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:04.019837864Z 42 PC: 12d84 | Get date 0x12d84: cmp al, 5
0x12d86: je 0x12da2
0x12d88: push cs
0x12d89: pop ds
0x12d8a: cld
0x12d8b: xor cx, cx
0x12d8d: mov di, cx
0x12d8f: mov dx, 0xf
0x12d92: pop bx
0x12d93: add dx, bx
0x12d95: push bx
0x12d96: mov si, dx
0x12d98: mov cx, 0x100
0x12d9b: rep movsb byte ptr es:[di], byte ptr [si]
0x12d9d: mov bx, 0x100
0x12da0: jmp bx
0x12da2: mov dx, 0x157
0x12da5: pop bx
0x12da6: add dx, bx
0x12da8: push bx
2018-12-25T12:31:04.023149735Z 2 PC: 12db5 | Character output (Char = '43')
2018-12-25T12:31:04.025430937Z 2 PC: 12db5 | Character output (See above)
2018-12-25T12:31:04.027879548Z 2 PC: 12db5 | Character output (See above)
2018-12-25T12:31:04.030251558Z 2 PC: 12db5 | Character output (See above)
2018-12-25T12:31:04.032531891Z 2 PC: 12db5 | Character output (See above)
2018-12-25T12:31:04.034846057Z 2 PC: 12db5 | Character output (See above)
2018-12-25T12:31:04.037397572Z 2 PC: 12db5 | Character output (See above)
2018-12-25T12:31:04.039638105Z 2 PC: 12db5 | Character output (See above)
2018-12-25T12:31:04.041852911Z 2 PC: 12db5 | Character output (See above)
2018-12-25T12:31:04.044284889Z 2 PC: 12db5 | Character output (See above)
2018-12-25T12:31:04.046528121Z 2 PC: 12db5 | Character output (See above)
2018-12-25T12:31:04.048773668Z 2 PC: 12db5 | Character output (See above)
2018-12-25T12:31:04.051544259Z 2 PC: 12db5 | Character output (See above)
2018-12-25T12:31:04.054054869Z 2 PC: 12db5 | Character output (See above)
2018-12-25T12:31:04.056463625Z 8 PC: 12dc0 | Console input without echo

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":11660,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:31:02.491685816Z 71 PC: 12c63 | Get current directory
2018-12-25T12:31:02.496045331Z 59 PC: 12c6e | Change current directory
2018-12-25T12:31:02.500372758Z 78 PC: 12c82 | Find first file
2018-12-25T12:31:02.508358536Z 47 PC: 12c8b | Get disk transfer address
2018-12-25T12:31:02.510079542Z 67 PC: 12c9d | Get or set file attributes
2018-12-25T12:31:03.254902386Z 61 PC: 12ca2 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:31:03.263659748Z 66 PC: 12caf | Move file pointer
2018-12-25T12:31:03.266746522Z 87 PC: 12cc8 | Get or set file date and time
2018-12-25T12:31:03.269917019Z 66 PC: 12cfb | Move file pointer
2018-12-25T12:31:03.28136668Z 63 PC: 12d11 | Read file or device (Read 3 bytes on handle 5)
2018-12-25T12:31:03.28869225Z 66 PC: 12d1c | Move file pointer
2018-12-25T12:31:03.291636988Z 64 PC: 12d35 | Write file or device (Write 3 bytes on handle 5)
2018-12-25T12:31:03.294734943Z 66 PC: 12d40 | Move file pointer
2018-12-25T12:31:03.29670855Z 64 PC: 12d53 | Write file or device (Write 799 bytes on handle 5)
2018-12-25T12:31:03.308054558Z 87 PC: 12d5e | Get or set file date and time
2018-12-25T12:31:03.309848735Z 62 PC: 12d62 | Close file
2018-12-25T12:31:03.319549529Z 79 PC: 12cd6 | Find next file
2018-12-25T12:31:03.32331303Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:03.324730808Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:03.336575752Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:03.3453778Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:03.350378574Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:03.352264619Z 66 PC: 12cfb | Move file pointer (See above)
2018-12-25T12:31:03.354093155Z 63 PC: 12d11 | Read file or device (See above)
2018-12-25T12:31:03.369418341Z 66 PC: 12d1c | Move file pointer (See above)
2018-12-25T12:31:03.371326567Z 64 PC: 12d35 | Write file or device (See above)
2018-12-25T12:31:03.375061501Z 66 PC: 12d40 | Move file pointer (See above)
2018-12-25T12:31:03.378442566Z 64 PC: 12d53 | Write file or device (See above)
2018-12-25T12:31:03.38776763Z 87 PC: 12d5e | Get or set file date and time (See above)
2018-12-25T12:31:03.389900313Z 62 PC: 12d62 | Close file (See above)
2018-12-25T12:31:03.400522124Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:03.403550569Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:03.405192504Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:03.41718667Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:03.423738528Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:03.425605667Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:03.42832716Z 66 PC: 12cfb | Move file pointer (See above)
2018-12-25T12:31:03.430046631Z 63 PC: 12d11 | Read file or device (See above)
2018-12-25T12:31:03.437577665Z 66 PC: 12d1c | Move file pointer (See above)
2018-12-25T12:31:03.439692853Z 64 PC: 12d35 | Write file or device (See above)
2018-12-25T12:31:03.442958908Z 66 PC: 12d40 | Move file pointer (See above)
2018-12-25T12:31:03.444580148Z 64 PC: 12d53 | Write file or device (See above)
2018-12-25T12:31:03.45353282Z 87 PC: 12d5e | Get or set file date and time (See above)
2018-12-25T12:31:03.456485833Z 62 PC: 12d62 | Close file (See above)
2018-12-25T12:31:03.466073332Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:03.469457806Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:03.472728781Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:03.488018974Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:03.495877729Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:03.498761716Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:03.50074151Z 66 PC: 12cfb | Move file pointer (See above)
2018-12-25T12:31:03.502680912Z 63 PC: 12d11 | Read file or device (See above)
2018-12-25T12:31:03.511011018Z 66 PC: 12d1c | Move file pointer (See above)
2018-12-25T12:31:03.512936105Z 64 PC: 12d35 | Write file or device (See above)
2018-12-25T12:31:03.516001994Z 66 PC: 12d40 | Move file pointer (See above)
2018-12-25T12:31:03.518581515Z 64 PC: 12d53 | Write file or device (See above)
2018-12-25T12:31:03.528268082Z 87 PC: 12d5e | Get or set file date and time (See above)
2018-12-25T12:31:03.531277549Z 62 PC: 12d62 | Close file (See above)
2018-12-25T12:31:03.540567086Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:03.544201106Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:03.545479655Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:03.55805341Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:03.567229678Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:03.569014135Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:03.570744814Z 66 PC: 12cfb | Move file pointer (See above)
2018-12-25T12:31:03.573199555Z 63 PC: 12d11 | Read file or device (See above)
2018-12-25T12:31:03.580320713Z 66 PC: 12d1c | Move file pointer (See above)
2018-12-25T12:31:03.581926836Z 64 PC: 12d35 | Write file or device (See above)
2018-12-25T12:31:03.585596536Z 66 PC: 12d40 | Move file pointer (See above)
2018-12-25T12:31:03.587215899Z 64 PC: 12d53 | Write file or device (See above)
2018-12-25T12:31:03.596420256Z 87 PC: 12d5e | Get or set file date and time (See above)
2018-12-25T12:31:03.600079999Z 62 PC: 12d62 | Close file (See above)
2018-12-25T12:31:03.609267334Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:03.61261144Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:03.614758276Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:03.626288785Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:03.634113697Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:03.636284361Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:03.638597676Z 66 PC: 12cfb | Move file pointer (See above)
2018-12-25T12:31:03.640347196Z 63 PC: 12d11 | Read file or device (See above)
2018-12-25T12:31:03.647388876Z 66 PC: 12d1c | Move file pointer (See above)
2018-12-25T12:31:03.648943537Z 64 PC: 12d35 | Write file or device (See above)
2018-12-25T12:31:03.652336972Z 66 PC: 12d40 | Move file pointer (See above)
2018-12-25T12:31:03.653887028Z 64 PC: 12d53 | Write file or device (See above)
2018-12-25T12:31:03.664063248Z 87 PC: 12d5e | Get or set file date and time (See above)
2018-12-25T12:31:03.666536314Z 62 PC: 12d62 | Close file (See above)
2018-12-25T12:31:03.675510976Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:03.680193009Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:03.681596621Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:03.692696626Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:03.701336633Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:03.703156403Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:03.70507165Z 66 PC: 12cfb | Move file pointer (See above)
2018-12-25T12:31:03.707782877Z 63 PC: 12d11 | Read file or device (See above)
2018-12-25T12:31:03.715424377Z 66 PC: 12d1c | Move file pointer (See above)
2018-12-25T12:31:03.717382608Z 64 PC: 12d35 | Write file or device (See above)
2018-12-25T12:31:03.721808752Z 66 PC: 12d40 | Move file pointer (See above)
2018-12-25T12:31:03.723501538Z 64 PC: 12d53 | Write file or device (See above)
2018-12-25T12:31:03.732565368Z 87 PC: 12d5e | Get or set file date and time (See above)
2018-12-25T12:31:03.734602331Z 62 PC: 12d62 | Close file (See above)
2018-12-25T12:31:03.744743031Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:03.747708781Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:03.749031772Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:03.761301967Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:03.769040947Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:03.77099895Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:03.773687113Z 66 PC: 12cfb | Move file pointer (See above)
2018-12-25T12:31:03.775395854Z 63 PC: 12d11 | Read file or device (See above)
2018-12-25T12:31:03.782981085Z 66 PC: 12d1c | Move file pointer (See above)
2018-12-25T12:31:03.785617854Z 64 PC: 12d35 | Write file or device (See above)
2018-12-25T12:31:03.788662809Z 66 PC: 12d40 | Move file pointer (See above)
2018-12-25T12:31:03.790525088Z 64 PC: 12d53 | Write file or device (See above)
2018-12-25T12:31:03.801595432Z 87 PC: 12d5e | Get or set file date and time (See above)
2018-12-25T12:31:03.803702614Z 62 PC: 12d62 | Close file (See above)
2018-12-25T12:31:03.813525599Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:03.81685488Z 59 PC: 12ce8 | Change current directory
2018-12-25T12:31:03.819414765Z 78 PC: 12c82 | Find first file (See above)
2018-12-25T12:31:03.826400573Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:03.828099402Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:03.840623195Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:03.848414323Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:03.849706923Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:03.851494456Z 62 PC: 12cd2 | Close file
2018-12-25T12:31:03.853140896Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:03.855043272Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:03.856709862Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:03.863716318Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:03.875193445Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:03.877427363Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:03.879097505Z 62 PC: 12cd2 | Close file (See above)
2018-12-25T12:31:03.881002314Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:03.883759979Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:03.885196476Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:03.894701056Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:03.901708969Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:03.903340822Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:03.904852948Z 62 PC: 12cd2 | Close file (See above)
2018-12-25T12:31:03.907127058Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:03.909979592Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:03.911401985Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:03.923179299Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:03.930892348Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:03.932661379Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:03.934424445Z 62 PC: 12cd2 | Close file (See above)
2018-12-25T12:31:03.936399508Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:03.939148463Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:03.941500387Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:03.95325366Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:03.960719803Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:03.962608773Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:03.964723348Z 62 PC: 12cd2 | Close file (See above)
2018-12-25T12:31:03.966910288Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:03.969694163Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:03.971265293Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:03.982124297Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:03.989702747Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:03.991796517Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:03.993791085Z 62 PC: 12cd2 | Close file (See above)
2018-12-25T12:31:03.996026552Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:03.999486526Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:04.000809298Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:04.012460593Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:04.021141937Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:04.022797188Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:04.025488038Z 62 PC: 12cd2 | Close file (See above)
2018-12-25T12:31:04.028173214Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:04.032436982Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:04.034033026Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:04.046099479Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:04.053579004Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:04.055535414Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:04.058650018Z 62 PC: 12cd2 | Close file (See above)
2018-12-25T12:31:04.060952277Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:04.063825529Z 42 PC: 12d84 | Get date 0x12d84: cmp al, 5
0x12d86: je 0x12da2
0x12d88: push cs
0x12d89: pop ds
0x12d8a: cld
0x12d8b: xor cx, cx
0x12d8d: mov di, cx
0x12d8f: mov dx, 0xf
0x12d92: pop bx
0x12d93: add dx, bx
0x12d95: push bx
0x12d96: mov si, dx
0x12d98: mov cx, 0x100
0x12d9b: rep movsb byte ptr es:[di], byte ptr [si]
0x12d9d: mov bx, 0x100
0x12da0: jmp bx
0x12da2: mov dx, 0x157
0x12da5: pop bx
0x12da6: add dx, bx
0x12da8: push bx
2018-12-25T12:31:04.067960058Z 9 PC: 12aa2 | Display string (String= 'ABCDE - This is a 100 byte COM test, 1994 ')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":11660,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:31:03.807887544Z 71 PC: 12c63 | Get current directory
2018-12-25T12:31:03.811247713Z 59 PC: 12c6e | Change current directory
2018-12-25T12:31:03.815294245Z 78 PC: 12c82 | Find first file
2018-12-25T12:31:03.820943808Z 47 PC: 12c8b | Get disk transfer address
2018-12-25T12:31:03.823517603Z 67 PC: 12c9d | Get or set file attributes
2018-12-25T12:31:03.839465028Z 61 PC: 12ca2 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:31:03.856026352Z 66 PC: 12caf | Move file pointer
2018-12-25T12:31:03.858829835Z 87 PC: 12cc8 | Get or set file date and time
2018-12-25T12:31:03.871069382Z 66 PC: 12cfb | Move file pointer
2018-12-25T12:31:03.872399869Z 63 PC: 12d11 | Read file or device (Read 3 bytes on handle 5)
2018-12-25T12:31:03.878609878Z 66 PC: 12d1c | Move file pointer
2018-12-25T12:31:03.880268406Z 64 PC: 12d35 | Write file or device (Write 3 bytes on handle 5)
2018-12-25T12:31:03.882788588Z 66 PC: 12d40 | Move file pointer
2018-12-25T12:31:03.884134341Z 64 PC: 12d53 | Write file or device (Write 799 bytes on handle 5)
2018-12-25T12:31:03.892518646Z 87 PC: 12d5e | Get or set file date and time
2018-12-25T12:31:03.894108886Z 62 PC: 12d62 | Close file
2018-12-25T12:31:03.90220379Z 79 PC: 12cd6 | Find next file
2018-12-25T12:31:03.906047169Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:03.907867345Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:03.917668584Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:03.925311373Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:03.926757523Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:03.927999603Z 66 PC: 12cfb | Move file pointer (See above)
2018-12-25T12:31:03.931010685Z 63 PC: 12d11 | Read file or device (See above)
2018-12-25T12:31:03.940480619Z 66 PC: 12d1c | Move file pointer (See above)
2018-12-25T12:31:03.942278651Z 64 PC: 12d35 | Write file or device (See above)
2018-12-25T12:31:03.945615209Z 66 PC: 12d40 | Move file pointer (See above)
2018-12-25T12:31:03.947208804Z 64 PC: 12d53 | Write file or device (See above)
2018-12-25T12:31:03.955712574Z 87 PC: 12d5e | Get or set file date and time (See above)
2018-12-25T12:31:03.957698755Z 62 PC: 12d62 | Close file (See above)
2018-12-25T12:31:03.965702799Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:03.968520767Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:03.969812104Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:03.980358058Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:03.986942342Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:03.988609092Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:03.990985476Z 66 PC: 12cfb | Move file pointer (See above)
2018-12-25T12:31:03.992747031Z 63 PC: 12d11 | Read file or device (See above)
2018-12-25T12:31:03.999242202Z 66 PC: 12d1c | Move file pointer (See above)
2018-12-25T12:31:04.000994177Z 64 PC: 12d35 | Write file or device (See above)
2018-12-25T12:31:04.003542493Z 66 PC: 12d40 | Move file pointer (See above)
2018-12-25T12:31:04.004953911Z 64 PC: 12d53 | Write file or device (See above)
2018-12-25T12:31:04.01318916Z 87 PC: 12d5e | Get or set file date and time (See above)
2018-12-25T12:31:04.014814116Z 62 PC: 12d62 | Close file (See above)
2018-12-25T12:31:04.022194927Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:04.025201012Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:04.026398903Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:04.035969422Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:04.042030409Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:04.043259035Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:04.044595209Z 66 PC: 12cfb | Move file pointer (See above)
2018-12-25T12:31:04.046477785Z 63 PC: 12d11 | Read file or device (See above)
2018-12-25T12:31:04.051637529Z 66 PC: 12d1c | Move file pointer (See above)
2018-12-25T12:31:04.052696304Z 64 PC: 12d35 | Write file or device (See above)
2018-12-25T12:31:04.055599301Z 66 PC: 12d40 | Move file pointer (See above)
2018-12-25T12:31:04.057057065Z 64 PC: 12d53 | Write file or device (See above)
2018-12-25T12:31:04.065176846Z 87 PC: 12d5e | Get or set file date and time (See above)
2018-12-25T12:31:04.067191695Z 62 PC: 12d62 | Close file (See above)
2018-12-25T12:31:04.08082073Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:04.083413791Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:04.085311467Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:04.095028091Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:04.101718077Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:04.103854712Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:04.105542559Z 66 PC: 12cfb | Move file pointer (See above)
2018-12-25T12:31:04.10734509Z 63 PC: 12d11 | Read file or device (See above)
2018-12-25T12:31:04.114735217Z 66 PC: 12d1c | Move file pointer (See above)
2018-12-25T12:31:04.1165375Z 64 PC: 12d35 | Write file or device (See above)
2018-12-25T12:31:04.119410122Z 66 PC: 12d40 | Move file pointer (See above)
2018-12-25T12:31:04.121312107Z 64 PC: 12d53 | Write file or device (See above)
2018-12-25T12:31:04.129700997Z 87 PC: 12d5e | Get or set file date and time (See above)
2018-12-25T12:31:04.131432799Z 62 PC: 12d62 | Close file (See above)
2018-12-25T12:31:04.139357864Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:04.142518741Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:04.143861628Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:04.154578308Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:04.162487303Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:04.164132127Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:04.165746329Z 66 PC: 12cfb | Move file pointer (See above)
2018-12-25T12:31:04.16817764Z 63 PC: 12d11 | Read file or device (See above)
2018-12-25T12:31:04.174625008Z 66 PC: 12d1c | Move file pointer (See above)
2018-12-25T12:31:04.176991861Z 64 PC: 12d35 | Write file or device (See above)
2018-12-25T12:31:04.180649359Z 66 PC: 12d40 | Move file pointer (See above)
2018-12-25T12:31:04.182305356Z 64 PC: 12d53 | Write file or device (See above)
2018-12-25T12:31:04.191045699Z 87 PC: 12d5e | Get or set file date and time (See above)
2018-12-25T12:31:04.193197239Z 62 PC: 12d62 | Close file (See above)
2018-12-25T12:31:04.200869433Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:04.203671962Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:04.205848265Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:04.215611438Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:04.222330908Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:04.224835267Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:04.226669208Z 66 PC: 12cfb | Move file pointer (See above)
2018-12-25T12:31:04.228257726Z 63 PC: 12d11 | Read file or device (See above)
2018-12-25T12:31:04.235311397Z 66 PC: 12d1c | Move file pointer (See above)
2018-12-25T12:31:04.236919087Z 64 PC: 12d35 | Write file or device (See above)
2018-12-25T12:31:04.239210468Z 66 PC: 12d40 | Move file pointer (See above)
2018-12-25T12:31:04.240904817Z 64 PC: 12d53 | Write file or device (See above)
2018-12-25T12:31:04.246322605Z 87 PC: 12d5e | Get or set file date and time (See above)
2018-12-25T12:31:04.247401336Z 62 PC: 12d62 | Close file (See above)
2018-12-25T12:31:04.25286154Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:04.254639316Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:04.255538659Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:04.262396862Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:04.266557962Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:04.267631188Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:04.269189686Z 66 PC: 12cfb | Move file pointer (See above)
2018-12-25T12:31:04.27025605Z 63 PC: 12d11 | Read file or device (See above)
2018-12-25T12:31:04.274285808Z 66 PC: 12d1c | Move file pointer (See above)
2018-12-25T12:31:04.275902499Z 64 PC: 12d35 | Write file or device (See above)
2018-12-25T12:31:04.27766802Z 66 PC: 12d40 | Move file pointer (See above)
2018-12-25T12:31:04.278725792Z 64 PC: 12d53 | Write file or device (See above)
2018-12-25T12:31:04.285096558Z 87 PC: 12d5e | Get or set file date and time (See above)
2018-12-25T12:31:04.286439818Z 62 PC: 12d62 | Close file (See above)
2018-12-25T12:31:04.292439339Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:04.295914223Z 59 PC: 12ce8 | Change current directory
2018-12-25T12:31:04.29786033Z 78 PC: 12c82 | Find first file (See above)
2018-12-25T12:31:04.308558082Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:04.309899121Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:04.322574437Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:04.329080769Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:04.330522802Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:04.332052507Z 62 PC: 12cd2 | Close file
2018-12-25T12:31:04.333732093Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:04.336304193Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:04.337575626Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:04.347196175Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:04.353942652Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:04.356131402Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:04.357610711Z 62 PC: 12cd2 | Close file (See above)
2018-12-25T12:31:04.359517887Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:04.362488671Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:04.363458199Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:04.373332853Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:04.384989736Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:04.386300467Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:04.387694324Z 62 PC: 12cd2 | Close file (See above)
2018-12-25T12:31:04.389789025Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:04.392166219Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:04.393126237Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:04.402750538Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:04.409367125Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:04.410949327Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:04.413313733Z 62 PC: 12cd2 | Close file (See above)
2018-12-25T12:31:04.415228515Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:04.417874153Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:04.419626221Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:04.430220765Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:04.43674234Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:04.438873262Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:04.440478146Z 62 PC: 12cd2 | Close file (See above)
2018-12-25T12:31:04.44227428Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:04.445327613Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:04.446469635Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:04.458944743Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:04.466442584Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:04.468284404Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:04.469931662Z 62 PC: 12cd2 | Close file (See above)
2018-12-25T12:31:04.473124604Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:04.475957994Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:04.47731787Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:04.488613534Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:04.495197293Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:04.496403964Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:04.498592115Z 62 PC: 12cd2 | Close file (See above)
2018-12-25T12:31:04.500273658Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:04.502841863Z 47 PC: 12c8b | Get disk transfer address (See above)
2018-12-25T12:31:04.505306868Z 67 PC: 12c9d | Get or set file attributes (See above)
2018-12-25T12:31:04.515374653Z 61 PC: 12ca2 | Open file (See above)
2018-12-25T12:31:04.522714674Z 66 PC: 12caf | Move file pointer (See above)
2018-12-25T12:31:04.525149847Z 87 PC: 12cc8 | Get or set file date and time (See above)
2018-12-25T12:31:04.527125283Z 62 PC: 12cd2 | Close file (See above)
2018-12-25T12:31:04.529196062Z 79 PC: 12cd6 | Find next file (See above)
2018-12-25T12:31:04.532466878Z 42 PC: 12d84 | Get date 0x12d84: cmp al, 5
0x12d86: je 0x12da2
0x12d88: push cs
0x12d89: pop ds
0x12d8a: cld
0x12d8b: xor cx, cx
0x12d8d: mov di, cx
0x12d8f: mov dx, 0xf
0x12d92: pop bx
0x12d93: add dx, bx
0x12d95: push bx
0x12d96: mov si, dx
0x12d98: mov cx, 0x100
0x12d9b: rep movsb byte ptr es:[di], byte ptr [si]
0x12d9d: mov bx, 0x100
0x12da0: jmp bx
0x12da2: mov dx, 0x157
0x12da5: pop bx
0x12da6: add dx, bx
0x12da8: push bx
2018-12-25T12:31:04.535310338Z 2 PC: 12db5 | Character output (Char = '43')
2018-12-25T12:31:04.537756437Z 2 PC: 12db5 | Character output (See above)
2018-12-25T12:31:04.540875519Z 2 PC: 12db5 | Character output (See above)
2018-12-25T12:31:04.543794297Z 2 PC: 12db5 | Character output (See above)
2018-12-25T12:31:04.546177556Z 2 PC: 12db5 | Character output (See above)
2018-12-25T12:31:04.549191494Z 2 PC: 12db5 | Character output (See above)
2018-12-25T12:31:04.55126595Z 2 PC: 12db5 | Character output (See above)
2018-12-25T12:31:04.553495488Z 2 PC: 12db5 | Character output (See above)
2018-12-25T12:31:04.556476743Z 2 PC: 12db5 | Character output (See above)
2018-12-25T12:31:04.558450679Z 2 PC: 12db5 | Character output (See above)
2018-12-25T12:31:04.560694521Z 2 PC: 12db5 | Character output (See above)
2018-12-25T12:31:04.563135255Z 2 PC: 12db5 | Character output (See above)
2018-12-25T12:31:04.565379223Z 2 PC: 12db5 | Character output (See above)
2018-12-25T12:31:04.568002841Z 2 PC: 12db5 | Character output (See above)
2018-12-25T12:31:04.571261109Z 8 PC: 12dc0 | Console input without echo