Sample viewer

vx.netlux.org/Virus.DOS.Zasta.2546

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:55:01.574486499Z 22 PC: 12aa8 | Create or truncate file
2018-12-17T22:55:01.576051934Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.578269285Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.579787831Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.581426493Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.583642942Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.586684554Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.588583355Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.591577488Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.593511125Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.595462205Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.597387386Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.59967564Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.601655985Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.603597818Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.606213849Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.607924266Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.611348968Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.614415276Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.616188521Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.617760388Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.62179621Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.62350269Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.62542227Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.627794161Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.630190709Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.632171806Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.634769472Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.636665398Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.638289664Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.640110148Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.642909905Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.645367968Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.648815644Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.651143052Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.652887823Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.655131053Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.659375467Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.66132313Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.663810048Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.668203883Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.669906756Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.671475748Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.673881403Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.676396093Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.678635155Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.681459437Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.683325678Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.685149028Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.687331753Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.689248629Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.690873365Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.693010125Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.695328906Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.697048641Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.706864855Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.708886428Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.710761815Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.712652793Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.716328426Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.71838753Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.720422147Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.723487333Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.725156953Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.727301818Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.730042043Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.731995767Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.734080969Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.736708451Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.738656446Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.740579473Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.743138196Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.744633308Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.746071634Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.747768977Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.749378254Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.751346767Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.753151371Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.756094477Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.759085333Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.769179591Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.774351689Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.776408959Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.781350093Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.78606335Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.788445671Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.790765023Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.794070391Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.796105419Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.798129787Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.800921027Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.802636023Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.804082113Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.806543733Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.808206621Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.809608037Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.811176999Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.812917152Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.814254668Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.815573799Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.817863456Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.819723004Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.821681147Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.824308058Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.826410343Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.828419492Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.831495298Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.833616037Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.835880316Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.83913609Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.8416715Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.843724371Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.846820785Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.848948628Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.851055551Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.853911864Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.856071076Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.858029149Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.860234517Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.863106439Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.865101622Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.867236207Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.871092531Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.873177943Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.875253508Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.879915527Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.882157604Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.88423905Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.887387983Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.889493163Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.891526077Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.893363213Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.895541801Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.897291352Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.899040552Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.901009285Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.90260151Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.904176272Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.906639736Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.908228715Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.909825568Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.912710445Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.914681623Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.916538315Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.919026145Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.920983577Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.9228031Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.924875307Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.926290489Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.928086228Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.930313948Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.932407947Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.934511764Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.937551222Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.939664767Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.941514997Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.94396188Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.945786852Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.94757725Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.95027209Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.952358253Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.954430171Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.957258692Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.959062314Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.960840158Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.963640215Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.965592358Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.967337871Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.97037829Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.972932414Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.974798975Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.977393185Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.979117999Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.980899069Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.983299895Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.985043806Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.986984897Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.989426409Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.991282501Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.993044015Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.995422959Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.997351256Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:01.999134Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.001502626Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.00326995Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.00509375Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.008340106Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.010704193Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.012468602Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.015417108Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.017506789Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.019567566Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.027543789Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.029843194Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.031986536Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.034054195Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.03673099Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.038804581Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.040881578Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.043903883Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.046042034Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.048127176Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.0510107Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.053057971Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.055697446Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.059811465Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.063590443Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.067441557Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.070025086Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.071680881Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.074134797Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.077720201Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.079996203Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.08207854Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.085178681Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.08709747Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.089433063Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.092760883Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.095027036Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.09716126Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.106495217Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.108318617Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.110215675Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.116297225Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.118321893Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.120270489Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.123169151Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.125228094Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.12719321Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.130372951Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.133297924Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.135253352Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.137158114Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.142069604Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.145047655Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.146737413Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.150459204Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.152108106Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.15465705Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.157851168Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.159747466Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.163243031Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.165948259Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.168030776Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.169982247Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.173035971Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.175781305Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.17764451Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.180109106Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.182031833Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.18392277Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.186745459Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.188575491Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.190583428Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.193184411Z 23 PC: 12aa8 | Rename file
2018-12-17T22:55:02.195639779Z 120 PC: 12ace | UNKNOWN!
2018-12-17T22:55:02.196645942Z 44 PC: 9eff8 | Get time 0x9eff8: ret
0x9eff9: or ax, 0x200a
0x9effc: and byte ptr [bx + si], ah
0x9effe: and byte ptr [bx + si], ah
0x9f000: and byte ptr [bx + si], ah
0x9f002: and byte ptr [bx + si], ah
0x9f004: and byte ptr [bx + si], ah
0x9f006: and byte ptr [bx + si], ah
0x9f008: and byte ptr [bx + si], ah
0x9f00a: and byte ptr [bx + si], ah
0x9f00c: and byte ptr [bx + si], ah
0x9f00e: and byte ptr [bx + si], ah
0x9f010: and byte ptr [bx + si], ah
0x9f012: and byte ptr [bx + si], ah
0x9f014: and byte ptr [bx + si], ah
0x9f016: sub ch, byte ptr [bp + si]
0x9f018: sub ah, byte ptr [bx + si]
0x9f01a: and byte ptr [bp + si + 0x61], al
0x9f01d: push dx
0x9f01e: je 0x9f040
2018-12-17T22:55:02.200312188Z 42 PC: 12b65 | Get date 0x12b65: cmp dh, dl
0x12b67: je 0x12b73
0x12b69: add dl, 0xa
0x12b6c: cmp dh, dl
0x12b6e: je 0x12b73
0x12b70: jmp 0x12b7e
0x12b72: nop
0x12b73: call 0x12ea4
0x12b76: mov ah, 9
0x12b78: push cs
0x12b79: pop ds
0x12b7a: int 0x21
0x12b7c: int 5
0x12b7e: xor ax, ax
0x12b80: mov bx, ax
0x12b82: mov cx, ax
0x12b84: mov dx, ax
0x12b86: mov si, ax
0x12b88: mov di, ax
0x12b8a: sti

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":11752,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:31:16.276289974Z 22 PC: 12aa8 | Create or truncate file
2018-12-25T12:31:16.277931084Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.280268024Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.282014787Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.283748837Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.286025327Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.287677627Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.289619621Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.292274688Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.294389291Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.296554556Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.29923261Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.302185683Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.305025592Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.308450933Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.311569625Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.313686071Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.315829105Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.317724353Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.319909463Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.321953858Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.323427507Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.332865009Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.334340517Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.335887373Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.338104377Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.343885986Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.345465289Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.355202188Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.357342464Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.359406195Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.363107355Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.364598555Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.367418155Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.368950549Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.373467889Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.374904915Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.376351376Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.378773574Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.380457102Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.382301508Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.384687028Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.386807173Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.389009424Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.391511837Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.394405599Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.396423646Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.398966888Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.400696031Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.40232439Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.404412818Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.406062431Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.407693305Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.409375057Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.411405204Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.413091949Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.414764059Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.417270631Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.418943121Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.420600681Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.422861273Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.424798269Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.426141583Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.428298066Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.430001927Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.431928893Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.434845089Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.442314248Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.443963836Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.44585046Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.447682084Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.44958905Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.452627951Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.455126377Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.457405383Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.459165002Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.462544083Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.464230213Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.465769959Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.468205857Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.470143795Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.472188053Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.475085302Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.47711185Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.479089357Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.481268865Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.483593896Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.48553454Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.487491294Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.490417386Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.492363788Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.494349203Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.496982728Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.498692849Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.500334774Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.502513756Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.504167364Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.506179782Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.508866451Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.510527739Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.51270324Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.515567499Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.51754752Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.519323299Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.521185502Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.523382167Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.525335477Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.527363701Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.530417239Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.532423647Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.534401356Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.5366521Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.538384391Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.540040132Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.542058757Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.543524554Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.54490809Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.54773598Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.54981244Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.552625235Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.555392915Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.557388381Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.559042095Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.561202534Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.563253594Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.565290213Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.567433223Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.569187197Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.570769499Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.573073271Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.575031652Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.576949799Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.579066464Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.581610377Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.583347574Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.585337843Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.587520966Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.589526818Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.591125899Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.593933554Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.595865844Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.597788514Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.600747218Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.602704699Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.604649489Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.60758731Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.609530244Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.611435963Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.618770573Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.620088839Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.621311254Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.62282908Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.624155612Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.62529818Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.627040501Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.628129575Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.629345709Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.630901415Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.632376392Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.633640252Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.635381992Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.636634244Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.637852508Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.639682064Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.640957102Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.64214747Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.644060525Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.645407222Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.647219167Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.649134187Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.65037493Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.651589101Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.653191964Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.654311988Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.655447771Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.657063298Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.658310033Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.659505368Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.661287003Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.662530321Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.663740348Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.665518417Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.666644174Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.667817604Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.669646417Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.670834034Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.672047042Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.673866272Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.675102645Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.676277994Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.678046126Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.679248427Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.680423347Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.682234846Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.683417684Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.684565399Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.686340696Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.687708291Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.688905812Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.690890005Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.692199883Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.693431749Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.695338634Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.69662184Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.697866433Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.699698509Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.701000556Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.702232204Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.704098735Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.705303543Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.706465373Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.708480987Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.710008237Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.711695407Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.714395117Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.715556003Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.716740732Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.718620472Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.719815877Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.720982799Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.722831366Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.724198526Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.7254278Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.727324882Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.728503202Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.729711134Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.731237213Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.732437705Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.73363943Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.735241204Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.736445889Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.737575578Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.74027323Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.741685168Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.74351387Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.745327761Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.74680536Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.748428868Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.750983906Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.752882473Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.754752302Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.757524696Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.759518008Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.761807839Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.764555781Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.766510888Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.768444902Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.770783829Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.772748791Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.774683562Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.776871125Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.778374651Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.779814756Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.781993709Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.783461449Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.786300247Z 120 PC: 12ace | UNKNOWN!
2018-12-25T12:31:16.788116282Z 44 PC: 9eff8 | Get time 0x9eff8: ret
0x9eff9: or ax, 0x200a
0x9effc: and byte ptr [bx + si], ah
0x9effe: and byte ptr [bx + si], ah
0x9f000: and byte ptr [bx + si], ah
0x9f002: and byte ptr [bx + si], ah
0x9f004: and byte ptr [bx + si], ah
0x9f006: and byte ptr [bx + si], ah
0x9f008: and byte ptr [bx + si], ah
0x9f00a: and byte ptr [bx + si], ah
0x9f00c: and byte ptr [bx + si], ah
0x9f00e: and byte ptr [bx + si], ah
0x9f010: and byte ptr [bx + si], ah
0x9f012: and byte ptr [bx + si], ah
0x9f014: and byte ptr [bx + si], ah
0x9f016: sub ch, byte ptr [bp + si]
0x9f018: sub ah, byte ptr [bx + si]
0x9f01a: and byte ptr [bp + si + 0x61], al
0x9f01d: push dx
0x9f01e: je 0x9f040
2018-12-25T12:31:16.791321831Z 42 PC: 12b65 | Get date 0x12b65: cmp dh, dl
0x12b67: je 0x12b73
0x12b69: add dl, 0xa
0x12b6c: cmp dh, dl
0x12b6e: je 0x12b73
0x12b70: jmp 0x12b7e
0x12b72: nop
0x12b73: call 0x12ea4
0x12b76: mov ah, 9
0x12b78: push cs
0x12b79: pop ds
0x12b7a: int 0x21
0x12b7c: int 5
0x12b7e: xor ax, ax
0x12b80: mov bx, ax
0x12b82: mov cx, ax
0x12b84: mov dx, ax
0x12b86: mov si, ax
0x12b88: mov di, ax
0x12b8a: sti

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":11752,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:31:16.293788529Z 22 PC: 12aa8 | Create or truncate file
2018-12-25T12:31:16.295464908Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.297466445Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.299431954Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.301461896Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.308624116Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.310624768Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.312623248Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.315614999Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.317204397Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.318610916Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.321082108Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.323165236Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.325137021Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.326837892Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.328801218Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.330595453Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.331814933Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.332993175Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.334761319Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.336125033Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.337422982Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.339349387Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.341296765Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.343284849Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.345728909Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.348389736Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.350609395Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.352774266Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.354905306Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.364024856Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.365548043Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.380419049Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.381984171Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.383494601Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.385686499Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.387034603Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.38845544Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.402323953Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.403852483Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.405136164Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.406843167Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.408279433Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.409531444Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.411303283Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.412922615Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.414143383Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.415659718Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.417148105Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.41837953Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.419876245Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.42151278Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.422738624Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.424046681Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.425522759Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.42688528Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.428285413Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.430637254Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.431897412Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.433149143Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.434750044Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.436305759Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.437864452Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.439779612Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.441268812Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.456892086Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.459215615Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.460827085Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.462292065Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.463947095Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.465590441Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.467099011Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.469078811Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.470752755Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.472282702Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.473777599Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.475578895Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.478247862Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.480211821Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.482239107Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.483745426Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.48516631Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.487247605Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.488843554Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.490321746Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.492215024Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.493830204Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.495319875Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.497205227Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.499068053Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.500960293Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.503284817Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.505013642Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.506594263Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.508574994Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.510486831Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.512370492Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.514445028Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.516143094Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.520483638Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.523039704Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.524835948Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.526748276Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.528874742Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.530481115Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.532162653Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.533833261Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.535493673Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.537016987Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.538737003Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.540298488Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.541710841Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.543167943Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.544955833Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.54653423Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.548319392Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.550176278Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.551623062Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.553234747Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.555118892Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.556985751Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.558727722Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.561010237Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.563710816Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.565586158Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.568493867Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.570252575Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.571843982Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.57395763Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.575683344Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.577226794Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.579152394Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.580695749Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.582209159Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.58409867Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.585697403Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.587270923Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.589808648Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.591259494Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.59262288Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.595444676Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.596977845Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.598557234Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.600548509Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.602376728Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.603978988Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.606185647Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.607843521Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.60928475Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.619909959Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.621631353Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.623092688Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.625152599Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.626819681Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.628406185Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.630309641Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.631758238Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.633066157Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.63486817Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.636577325Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.638158806Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.641047545Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.642631119Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.644019009Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.645810739Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.647132212Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.648576978Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.650544698Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.652110787Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.653554052Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.655886925Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.657502566Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.659809498Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.66187881Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.663506681Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.665180037Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.66809555Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.670027867Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.671927826Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.674782752Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.676304041Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.677751249Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.67992401Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.681660197Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.683275733Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.685985865Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.687780613Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.689226468Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.691299699Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.692971081Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.694605218Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.696713081Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.698699323Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.700643502Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.702663581Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.704183422Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.705686921Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.70745188Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.709250168Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.711270745Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.714372994Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.716399591Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.718416712Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.721386702Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.72326988Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.725240452Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.727513085Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.728999495Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.730423592Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.733069331Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.735027869Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.736937008Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.739347725Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.741162955Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.74303733Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.745443357Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.746896387Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.74830932Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.751058993Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.752663913Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.754124819Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.755934182Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.757644601Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.759215412Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.761377826Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.763218161Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.765091599Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.76741765Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.769023249Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.771186052Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.773593683Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.775085048Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.776687281Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.779671882Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.781769736Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.783778819Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.786310092Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.788569446Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.790511618Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.792676746Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.794294854Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.796408137Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.79864168Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.800693129Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.802674667Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.805620021Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.807236198Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.808730048Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.811193648Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.813066363Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.814908169Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.81760967Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.819574999Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.821289987Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.823406038Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.826268673Z 120 PC: 12ace | UNKNOWN!
2018-12-25T12:31:16.827727725Z 44 PC: 9eff8 | Get time 0x9eff8: ret
0x9eff9: or ax, 0x200a
0x9effc: and byte ptr [bx + si], ah
0x9effe: and byte ptr [bx + si], ah
0x9f000: and byte ptr [bx + si], ah
0x9f002: and byte ptr [bx + si], ah
0x9f004: and byte ptr [bx + si], ah
0x9f006: and byte ptr [bx + si], ah
0x9f008: and byte ptr [bx + si], ah
0x9f00a: and byte ptr [bx + si], ah
0x9f00c: and byte ptr [bx + si], ah
0x9f00e: and byte ptr [bx + si], ah
0x9f010: and byte ptr [bx + si], ah
0x9f012: and byte ptr [bx + si], ah
0x9f014: and byte ptr [bx + si], ah
0x9f016: sub ch, byte ptr [bp + si]
0x9f018: sub ah, byte ptr [bx + si]
0x9f01a: and byte ptr [bp + si + 0x61], al
0x9f01d: push dx
0x9f01e: je 0x9f040
2018-12-25T12:31:16.83085304Z 42 PC: 12b65 | Get date 0x12b65: cmp dh, dl
0x12b67: je 0x12b73
0x12b69: add dl, 0xa
0x12b6c: cmp dh, dl
0x12b6e: je 0x12b73
0x12b70: jmp 0x12b7e
0x12b72: nop
0x12b73: call 0x12ea4
0x12b76: mov ah, 9
0x12b78: push cs
0x12b79: pop ds
0x12b7a: int 0x21
0x12b7c: int 5
0x12b7e: xor ax, ax
0x12b80: mov bx, ax
0x12b82: mov cx, ax
0x12b84: mov dx, ax
0x12b86: mov si, ax
0x12b88: mov di, ax
0x12b8a: sti

{"DateBased":true,"Day":1,"Month":11,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":11752,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:31:16.495934683Z 22 PC: 12aa8 | Create or truncate file
2018-12-25T12:31:16.497933901Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.500409391Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.502339507Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.504047155Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.508371475Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.50987695Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.511386902Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.51346483Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.51518981Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.516884669Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.519069555Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.520867941Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.522420267Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.524212882Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.526194005Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.528187164Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.530400725Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.532825184Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.534730044Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.536678396Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.539379288Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.541432136Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.543455155Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.546429557Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.547930657Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.549374894Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.551508505Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.553085075Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.554400004Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.556393761Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.558276885Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.560342637Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.562738753Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.564569433Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.566248849Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.568608798Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.570397297Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.571966252Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.573666286Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.576979577Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.578745203Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.580682077Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.582962129Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.584786214Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.586631872Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.589055984Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.590838436Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.592631897Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.60247271Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.604727019Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.606906943Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.609508678Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.611194386Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.612803204Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.61496294Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.616794037Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.618290456Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.620528231Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.623091632Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.62479847Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.626929165Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.629067756Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.631052437Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.633093173Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.635053346Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.636683133Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.638365331Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.641635791Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.643248347Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.644739689Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.646827253Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.648765025Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.650403754Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.655304559Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.656852957Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.658306316Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.660231519Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.66850448Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.671384104Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.674131318Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.676259102Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.678335404Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.681690188Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.683563804Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.685153958Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.686899002Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.688477164Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.689978923Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.691507614Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.693334367Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.695268839Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.697066824Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.699541537Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.700989141Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.702499706Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.708494879Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.710884323Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.712328409Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.714678066Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.71684431Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.71882649Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.721795441Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.723380312Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.724957009Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.727445125Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.729469009Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.731264924Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.734254431Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.735897902Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.737816775Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.739440944Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.741284046Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.742778082Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.744327954Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.746244943Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.747686681Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.749619866Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.751207605Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.752694552Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.754417899Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.756260933Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.757667999Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.759116937Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.760632586Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.761904762Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.764168695Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.76596225Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.767362136Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.768765735Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.770736137Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.772156976Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.773421261Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.774925053Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.776316485Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.777549811Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.779101147Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.780535135Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.781944074Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.783825804Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.785251235Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.786528681Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.788078423Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.789510046Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.790790757Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.792698051Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.794151581Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.795573754Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.797151855Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.798593456Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.800036049Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.802011134Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.803460128Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.804772438Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.806708166Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.808591712Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.81045887Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.812679051Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.814558232Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.816270175Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.818065053Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.819392082Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.820688685Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.822218818Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.82364511Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.825150981Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.833176902Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.834570467Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.835934963Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.838426156Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.840151651Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.8420951Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.844032501Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.845664331Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.847005663Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.849212271Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.852034447Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.853630934Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.855500304Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.856955183Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.858296814Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.860428883Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.862339098Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.864274859Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.866524027Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.86790371Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.869364982Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.888566743Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.890068988Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.89153373Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.893650915Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.895189596Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.896720474Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.898969763Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.900427012Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.901843652Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.903807225Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.905448265Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.907081079Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.908893356Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.910512804Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.912046923Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.914140246Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.915770112Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.917301681Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.920523158Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.921965514Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.923401242Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.925446675Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.927015539Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.929059679Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.931333165Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.932771205Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.944634899Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.946415561Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.947932812Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.950201688Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.951995974Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.953870006Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.955723392Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.957682955Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.959144999Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.973195888Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.975116663Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.976691071Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.978278261Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.98456754Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.986118789Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.987542399Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.989034926Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.990457474Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.991858957Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.993522304Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.99513836Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.996790004Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:16.998880828Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:17.000330252Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:17.001764958Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:17.003584926Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:17.004992839Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:17.00670431Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:17.008570905Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:17.010198042Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:17.012843489Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:17.014487506Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:17.016091965Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:17.018803329Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:17.020299688Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:17.036636244Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:17.039000803Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:17.040693676Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:17.042709208Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:17.045330649Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:17.047206819Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:17.048742476Z 23 PC: 12aa8 | Rename file (See above)
2018-12-25T12:31:17.052986301Z 120 PC: 12ace | UNKNOWN!
2018-12-25T12:31:17.054257514Z 44 PC: 9eff8 | Get time 0x9eff8: ret
0x9eff9: or ax, 0x200a
0x9effc: and byte ptr [bx + si], ah
0x9effe: and byte ptr [bx + si], ah
0x9f000: and byte ptr [bx + si], ah
0x9f002: and byte ptr [bx + si], ah
0x9f004: and byte ptr [bx + si], ah
0x9f006: and byte ptr [bx + si], ah
0x9f008: and byte ptr [bx + si], ah
0x9f00a: and byte ptr [bx + si], ah
0x9f00c: and byte ptr [bx + si], ah
0x9f00e: and byte ptr [bx + si], ah
0x9f010: and byte ptr [bx + si], ah
0x9f012: and byte ptr [bx + si], ah
0x9f014: and byte ptr [bx + si], ah
0x9f016: sub ch, byte ptr [bp + si]
0x9f018: sub ah, byte ptr [bx + si]
0x9f01a: and byte ptr [bp + si + 0x61], al
0x9f01d: push dx
0x9f01e: je 0x9f040
2018-12-25T12:31:17.057007624Z 42 PC: 12b65 | Get date 0x12b65: cmp dh, dl
0x12b67: je 0x12b73
0x12b69: add dl, 0xa
0x12b6c: cmp dh, dl
0x12b6e: je 0x12b73
0x12b70: jmp 0x12b7e
0x12b72: nop
0x12b73: call 0x12ea4
0x12b76: mov ah, 9
0x12b78: push cs
0x12b79: pop ds
0x12b7a: int 0x21
0x12b7c: int 5
0x12b7e: xor ax, ax
0x12b80: mov bx, ax
0x12b82: mov cx, ax
0x12b84: mov dx, ax
0x12b86: mov si, ax
0x12b88: mov di, ax
0x12b8a: sti