Sample viewer

vx.netlux.org/Virus.DOS.Wit.Remor.955

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:02:52.772242644Z 26 PC: 12ac7 | Set disk transfer address
2018-12-17T23:02:52.773942047Z 71 PC: 12ad9 | Get current directory
2018-12-17T23:02:52.783827511Z 42 PC: 12adf | Get date 0x12adf: cmp dh, 4
0x12ae2: jne 0x12afd
0x12ae4: cmp dl, 0xf
0x12ae7: jne 0x12afd
0x12ae9: mov ax, 0x1010
0x12aec: out 0x70, ax
0x12aee: mov dx, 0x422
0x12af1: mov ah, 9
0x12af3: int 0x21
0x12af5: mov ah, 8
0x12af7: int 0x21
0x12af9: mov al, 0xfe
0x12afb: out 0x64, al
0x12afd: mov dx, 0x410
0x12b00: mov ah, byte ptr [0x47d]
0x12b04: mov cl, 7
0x12b06: int 0x21
0x12b08: jae 0x12b0d
0x12b0a: jmp 0x12cba
0x12b0d: mov dx, word ptr [0x445]
2018-12-17T23:02:52.790216454Z 78 PC: 12b08 | Find first file
2018-12-17T23:02:52.797152356Z 67 PC: 12b24 | Get or set file attributes
2018-12-17T23:02:52.834462477Z 61 PC: 12b46 | Open file (Filename = 'SLEEP.COM')
2018-12-17T23:02:52.8414256Z 63 PC: 12b62 | Read file or device (Read 952 bytes on handle 5)
2018-12-17T23:02:52.847800518Z 66 PC: 12b8a | Move file pointer
2018-12-17T23:02:52.850543391Z 66 PC: 12bad | Move file pointer
2018-12-17T23:02:52.856917317Z 64 PC: 12bc8 | Write file or device (Write 407 bytes on handle 5)
2018-12-17T23:02:52.862527578Z 64 PC: 12bd8 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T23:02:52.865500374Z 66 PC: 12c07 | Move file pointer
2018-12-17T23:02:52.868021691Z 64 PC: 12c18 | Write file or device (Write 952 bytes on handle 5)
2018-12-17T23:02:52.875081555Z 87 PC: 12c29 | Get or set file date and time
2018-12-17T23:02:52.877050575Z 67 PC: 12c3b | Get or set file attributes
2018-12-17T23:02:52.890775943Z 62 PC: 12c41 | Close file
2018-12-17T23:02:52.898636803Z 79 PC: 12b08 | Find next file
2018-12-17T23:02:52.901726247Z 67 PC: 12b24 | Get or set file attributes
2018-12-17T23:02:52.913129833Z 61 PC: 12b46 | Open file (Filename = 'PRINT.COM')
2018-12-17T23:02:52.920836803Z 63 PC: 12b62 | Read file or device (Read 952 bytes on handle 5)
2018-12-17T23:02:52.928651807Z 66 PC: 12b8a | Move file pointer
2018-12-17T23:02:52.931925538Z 66 PC: 12bad | Move file pointer
2018-12-17T23:02:52.934013971Z 64 PC: 12bc8 | Write file or device (Write 27 bytes on handle 5)
2018-12-17T23:02:52.938815363Z 64 PC: 12bd8 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T23:02:52.944412349Z 66 PC: 12c07 | Move file pointer
2018-12-17T23:02:52.947242797Z 64 PC: 12c18 | Write file or device (Write 952 bytes on handle 5)
2018-12-17T23:02:52.956339048Z 87 PC: 12c29 | Get or set file date and time
2018-12-17T23:02:52.959617978Z 67 PC: 12c3b | Get or set file attributes
2018-12-17T23:02:52.973216288Z 62 PC: 12c41 | Close file
2018-12-17T23:02:52.981494381Z 79 PC: 12b08 | Find next file
2018-12-17T23:02:52.985827994Z 67 PC: 12b24 | Get or set file attributes
2018-12-17T23:02:53.003727124Z 61 PC: 12b46 | Open file (Filename = 'HELLO.COM')
2018-12-17T23:02:53.011387467Z 63 PC: 12b62 | Read file or device (Read 952 bytes on handle 5)
2018-12-17T23:02:53.018687653Z 66 PC: 12b8a | Move file pointer
2018-12-17T23:02:53.024794147Z 66 PC: 12bad | Move file pointer
2018-12-17T23:02:53.026783915Z 64 PC: 12bc8 | Write file or device (Write 92 bytes on handle 5)
2018-12-17T23:02:53.031545812Z 64 PC: 12bd8 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T23:02:53.036102613Z 66 PC: 12c07 | Move file pointer
2018-12-17T23:02:53.037860296Z 64 PC: 12c18 | Write file or device (Write 952 bytes on handle 5)
2018-12-17T23:02:53.047020507Z 87 PC: 12c29 | Get or set file date and time
2018-12-17T23:02:53.049502721Z 67 PC: 12c3b | Get or set file attributes
2018-12-17T23:02:53.061831344Z 62 PC: 12c41 | Close file
2018-12-17T23:02:53.070485795Z 79 PC: 12b08 | Find next file
2018-12-17T23:02:53.076237041Z 67 PC: 12b24 | Get or set file attributes
2018-12-17T23:02:53.087389004Z 61 PC: 12b46 | Open file (Filename = 'PHANG.COM')
2018-12-17T23:02:53.095004382Z 63 PC: 12b62 | Read file or device (Read 952 bytes on handle 5)
2018-12-17T23:02:53.102840165Z 66 PC: 12b8a | Move file pointer
2018-12-17T23:02:53.105778907Z 66 PC: 12bad | Move file pointer
2018-12-17T23:02:53.108161273Z 64 PC: 12bc8 | Write file or device (Write 29 bytes on handle 5)
2018-12-17T23:02:53.117323658Z 64 PC: 12bd8 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T23:02:53.12217903Z 66 PC: 12c07 | Move file pointer
2018-12-17T23:02:53.12382361Z 64 PC: 12c18 | Write file or device (Write 952 bytes on handle 5)
2018-12-17T23:02:53.132961198Z 87 PC: 12c29 | Get or set file date and time
2018-12-17T23:02:53.135616417Z 67 PC: 12c3b | Get or set file attributes
2018-12-17T23:02:53.148534098Z 62 PC: 12c41 | Close file
2018-12-17T23:02:53.156374178Z 79 PC: 12b08 | Find next file
2018-12-17T23:02:53.160438925Z 67 PC: 12b24 | Get or set file attributes
2018-12-17T23:02:53.17211351Z 61 PC: 12b46 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T23:02:53.180084848Z 63 PC: 12b62 | Read file or device (Read 952 bytes on handle 5)
2018-12-17T23:02:53.188868551Z 66 PC: 12b8a | Move file pointer
2018-12-17T23:02:53.191249254Z 66 PC: 12bad | Move file pointer
2018-12-17T23:02:53.193098138Z 64 PC: 12bc8 | Write file or device (Write 29 bytes on handle 5)
2018-12-17T23:02:53.198201797Z 64 PC: 12bd8 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T23:02:53.202645135Z 66 PC: 12c07 | Move file pointer
2018-12-17T23:02:53.20446775Z 64 PC: 12c18 | Write file or device (Write 952 bytes on handle 5)
2018-12-17T23:02:53.214341642Z 87 PC: 12c29 | Get or set file date and time
2018-12-17T23:02:53.217577903Z 67 PC: 12c3b | Get or set file attributes
2018-12-17T23:02:53.230288644Z 62 PC: 12c41 | Close file
2018-12-17T23:02:53.238779828Z 78 PC: 12b08 | Find first file
2018-12-17T23:02:53.246414783Z 59 PC: 12cdc | Change current directory
2018-12-17T23:02:53.251796815Z 26 PC: 12cf9 | Set disk transfer address
2018-12-17T23:02:53.253505546Z 59 PC: 12d04 | Change current directory

{"DateBased":true,"Day":15,"Month":4,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":14353,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:40:19.191027845Z 26 PC: 12ac7 | Set disk transfer address
2018-12-25T12:40:19.192717515Z 71 PC: 12ad9 | Get current directory
2018-12-25T12:40:19.196497617Z 42 PC: 12adf | Get date 0x12adf: cmp dh, 4
0x12ae2: jne 0x12afd
0x12ae4: cmp dl, 0xf
0x12ae7: jne 0x12afd
0x12ae9: mov ax, 0x1010
0x12aec: out 0x70, ax
0x12aee: mov dx, 0x422
0x12af1: mov ah, 9
0x12af3: int 0x21
0x12af5: mov ah, 8
0x12af7: int 0x21
0x12af9: mov al, 0xfe
0x12afb: out 0x64, al
0x12afd: mov dx, 0x410
0x12b00: mov ah, byte ptr [0x47d]
0x12b04: mov cl, 7
0x12b06: int 0x21
0x12b08: jae 0x12b0d
0x12b0a: jmp 0x12cba
0x12b0d: mov dx, word ptr [0x445]
2018-12-25T12:40:19.199449478Z 9 PC: 12af5 | Display string (String= '��ࠡ���� - rulez forever ! ')
2018-12-25T12:40:19.204680941Z 8 PC: 12af9 | Console input without echo

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":14353,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:40:19.443700007Z 26 PC: 12ac7 | Set disk transfer address
2018-12-25T12:40:19.445294635Z 71 PC: 12ad9 | Get current directory
2018-12-25T12:40:19.449559144Z 42 PC: 12adf | Get date 0x12adf: cmp dh, 4
0x12ae2: jne 0x12afd
0x12ae4: cmp dl, 0xf
0x12ae7: jne 0x12afd
0x12ae9: mov ax, 0x1010
0x12aec: out 0x70, ax
0x12aee: mov dx, 0x422
0x12af1: mov ah, 9
0x12af3: int 0x21
0x12af5: mov ah, 8
0x12af7: int 0x21
0x12af9: mov al, 0xfe
0x12afb: out 0x64, al
0x12afd: mov dx, 0x410
0x12b00: mov ah, byte ptr [0x47d]
0x12b04: mov cl, 7
0x12b06: int 0x21
0x12b08: jae 0x12b0d
0x12b0a: jmp 0x12cba
0x12b0d: mov dx, word ptr [0x445]
2018-12-25T12:40:19.452248549Z 78 PC: 12b08 | Find first file
2018-12-25T12:40:19.459198971Z 67 PC: 12b24 | Get or set file attributes
2018-12-25T12:40:19.488635958Z 61 PC: 12b46 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:40:19.496559919Z 63 PC: 12b62 | Read file or device (Read 952 bytes on handle 5)
2018-12-25T12:40:19.504588481Z 66 PC: 12b8a | Move file pointer
2018-12-25T12:40:19.507781299Z 66 PC: 12bad | Move file pointer
2018-12-25T12:40:19.510261961Z 64 PC: 12bc8 | Write file or device (Write 407 bytes on handle 5)
2018-12-25T12:40:19.515281529Z 64 PC: 12bd8 | Write file or device (Write 3 bytes on handle 5)
2018-12-25T12:40:19.519918737Z 66 PC: 12c07 | Move file pointer
2018-12-25T12:40:19.521712125Z 64 PC: 12c18 | Write file or device (Write 952 bytes on handle 5)
2018-12-25T12:40:19.531414088Z 87 PC: 12c29 | Get or set file date and time
2018-12-25T12:40:19.533164904Z 67 PC: 12c3b | Get or set file attributes
2018-12-25T12:40:19.546364451Z 62 PC: 12c41 | Close file
2018-12-25T12:40:19.554342046Z 79 PC: 12b08 | Find next file (See above)
2018-12-25T12:40:19.557726467Z 67 PC: 12b24 | Get or set file attributes (See above)
2018-12-25T12:40:19.56935374Z 61 PC: 12b46 | Open file (See above)
2018-12-25T12:40:19.577330649Z 63 PC: 12b62 | Read file or device (See above)
2018-12-25T12:40:19.584753705Z 66 PC: 12b8a | Move file pointer (See above)
2018-12-25T12:40:19.587014932Z 66 PC: 12bad | Move file pointer (See above)
2018-12-25T12:40:19.589812405Z 64 PC: 12bc8 | Write file or device (See above)
2018-12-25T12:40:19.594714707Z 64 PC: 12bd8 | Write file or device (See above)
2018-12-25T12:40:19.598950915Z 66 PC: 12c07 | Move file pointer (See above)
2018-12-25T12:40:19.601265763Z 64 PC: 12c18 | Write file or device (See above)
2018-12-25T12:40:19.610565222Z 87 PC: 12c29 | Get or set file date and time (See above)
2018-12-25T12:40:19.613806581Z 67 PC: 12c3b | Get or set file attributes (See above)
2018-12-25T12:40:19.626551352Z 62 PC: 12c41 | Close file (See above)
2018-12-25T12:40:19.634424967Z 79 PC: 12b08 | Find next file (See above)
2018-12-25T12:40:19.638027622Z 67 PC: 12b24 | Get or set file attributes (See above)
2018-12-25T12:40:19.649224165Z 61 PC: 12b46 | Open file (See above)
2018-12-25T12:40:19.657490699Z 63 PC: 12b62 | Read file or device (See above)
2018-12-25T12:40:19.665017231Z 66 PC: 12b8a | Move file pointer (See above)
2018-12-25T12:40:19.667451196Z 66 PC: 12bad | Move file pointer (See above)
2018-12-25T12:40:19.669739701Z 64 PC: 12bc8 | Write file or device (See above)
2018-12-25T12:40:19.674938276Z 64 PC: 12bd8 | Write file or device (See above)
2018-12-25T12:40:19.679274096Z 66 PC: 12c07 | Move file pointer (See above)
2018-12-25T12:40:19.681596031Z 64 PC: 12c18 | Write file or device (See above)
2018-12-25T12:40:19.691622855Z 87 PC: 12c29 | Get or set file date and time (See above)
2018-12-25T12:40:19.694598212Z 67 PC: 12c3b | Get or set file attributes (See above)
2018-12-25T12:40:19.706596509Z 62 PC: 12c41 | Close file (See above)
2018-12-25T12:40:19.714582901Z 79 PC: 12b08 | Find next file (See above)
2018-12-25T12:40:19.718498402Z 67 PC: 12b24 | Get or set file attributes (See above)
2018-12-25T12:40:19.730247168Z 61 PC: 12b46 | Open file (See above)
2018-12-25T12:40:19.737550501Z 63 PC: 12b62 | Read file or device (See above)
2018-12-25T12:40:19.745700787Z 66 PC: 12b8a | Move file pointer (See above)
2018-12-25T12:40:19.747538422Z 66 PC: 12bad | Move file pointer (See above)
2018-12-25T12:40:19.749489644Z 64 PC: 12bc8 | Write file or device (See above)
2018-12-25T12:40:19.759787415Z 64 PC: 12bd8 | Write file or device (See above)
2018-12-25T12:40:19.763187558Z 66 PC: 12c07 | Move file pointer (See above)
2018-12-25T12:40:19.764840729Z 64 PC: 12c18 | Write file or device (See above)
2018-12-25T12:40:19.774695716Z 87 PC: 12c29 | Get or set file date and time (See above)
2018-12-25T12:40:19.777112984Z 67 PC: 12c3b | Get or set file attributes (See above)
2018-12-25T12:40:19.789771398Z 62 PC: 12c41 | Close file (See above)
2018-12-25T12:40:19.798008034Z 79 PC: 12b08 | Find next file (See above)
2018-12-25T12:40:19.802576019Z 67 PC: 12b24 | Get or set file attributes (See above)
2018-12-25T12:40:19.814013386Z 61 PC: 12b46 | Open file (See above)
2018-12-25T12:40:19.822202471Z 63 PC: 12b62 | Read file or device (See above)
2018-12-25T12:40:19.831256982Z 66 PC: 12b8a | Move file pointer (See above)
2018-12-25T12:40:19.83381067Z 66 PC: 12bad | Move file pointer (See above)
2018-12-25T12:40:19.835896666Z 64 PC: 12bc8 | Write file or device (See above)
2018-12-25T12:40:19.841714736Z 64 PC: 12bd8 | Write file or device (See above)
2018-12-25T12:40:19.845518554Z 66 PC: 12c07 | Move file pointer (See above)
2018-12-25T12:40:19.847574303Z 64 PC: 12c18 | Write file or device (See above)
2018-12-25T12:40:19.858105614Z 87 PC: 12c29 | Get or set file date and time (See above)
2018-12-25T12:40:19.861604455Z 67 PC: 12c3b | Get or set file attributes (See above)
2018-12-25T12:40:19.874271996Z 62 PC: 12c41 | Close file (See above)
2018-12-25T12:40:19.882365687Z 78 PC: 12b08 | Find first file (See above)
2018-12-25T12:40:19.890252597Z 59 PC: 12cdc | Change current directory
2018-12-25T12:40:19.895215119Z 26 PC: 12cf9 | Set disk transfer address
2018-12-25T12:40:19.896779418Z 59 PC: 12d04 | Change current directory

{"DateBased":true,"Day":1,"Month":4,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":14353,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:40:20.233938844Z 26 PC: 12ac7 | Set disk transfer address
2018-12-25T12:40:20.23746692Z 71 PC: 12ad9 | Get current directory
2018-12-25T12:40:20.240892295Z 42 PC: 12adf | Get date 0x12adf: cmp dh, 4
0x12ae2: jne 0x12afd
0x12ae4: cmp dl, 0xf
0x12ae7: jne 0x12afd
0x12ae9: mov ax, 0x1010
0x12aec: out 0x70, ax
0x12aee: mov dx, 0x422
0x12af1: mov ah, 9
0x12af3: int 0x21
0x12af5: mov ah, 8
0x12af7: int 0x21
0x12af9: mov al, 0xfe
0x12afb: out 0x64, al
0x12afd: mov dx, 0x410
0x12b00: mov ah, byte ptr [0x47d]
0x12b04: mov cl, 7
0x12b06: int 0x21
0x12b08: jae 0x12b0d
0x12b0a: jmp 0x12cba
0x12b0d: mov dx, word ptr [0x445]
2018-12-25T12:40:20.243491188Z 78 PC: 12b08 | Find first file
2018-12-25T12:40:20.250621859Z 67 PC: 12b24 | Get or set file attributes
2018-12-25T12:40:20.269734894Z 61 PC: 12b46 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:40:20.277387433Z 63 PC: 12b62 | Read file or device (Read 952 bytes on handle 5)
2018-12-25T12:40:20.304111331Z 66 PC: 12b8a | Move file pointer
2018-12-25T12:40:20.3064966Z 66 PC: 12bad | Move file pointer
2018-12-25T12:40:20.315168305Z 64 PC: 12bc8 | Write file or device (Write 407 bytes on handle 5)
2018-12-25T12:40:20.319657511Z 64 PC: 12bd8 | Write file or device (Write 3 bytes on handle 5)
2018-12-25T12:40:20.336962686Z 66 PC: 12c07 | Move file pointer
2018-12-25T12:40:20.338819639Z 64 PC: 12c18 | Write file or device (Write 952 bytes on handle 5)
2018-12-25T12:40:20.355047726Z 87 PC: 12c29 | Get or set file date and time
2018-12-25T12:40:20.357378827Z 67 PC: 12c3b | Get or set file attributes
2018-12-25T12:40:20.368246822Z 62 PC: 12c41 | Close file
2018-12-25T12:40:20.375506217Z 79 PC: 12b08 | Find next file (See above)
2018-12-25T12:40:20.379494168Z 67 PC: 12b24 | Get or set file attributes (See above)
2018-12-25T12:40:20.389349835Z 61 PC: 12b46 | Open file (See above)
2018-12-25T12:40:20.396808129Z 63 PC: 12b62 | Read file or device (See above)
2018-12-25T12:40:20.404175126Z 66 PC: 12b8a | Move file pointer (See above)
2018-12-25T12:40:20.405790261Z 66 PC: 12bad | Move file pointer (See above)
2018-12-25T12:40:20.407503176Z 64 PC: 12bc8 | Write file or device (See above)
2018-12-25T12:40:20.412261058Z 64 PC: 12bd8 | Write file or device (See above)
2018-12-25T12:40:20.415111578Z 66 PC: 12c07 | Move file pointer (See above)
2018-12-25T12:40:20.416239402Z 64 PC: 12c18 | Write file or device (See above)
2018-12-25T12:40:20.42441985Z 87 PC: 12c29 | Get or set file date and time (See above)
2018-12-25T12:40:20.442954065Z 67 PC: 12c3b | Get or set file attributes (See above)
2018-12-25T12:40:20.454066376Z 62 PC: 12c41 | Close file (See above)
2018-12-25T12:40:20.469541121Z 79 PC: 12b08 | Find next file (See above)
2018-12-25T12:40:20.472535429Z 67 PC: 12b24 | Get or set file attributes (See above)
2018-12-25T12:40:20.48216704Z 61 PC: 12b46 | Open file (See above)
2018-12-25T12:40:20.493736938Z 63 PC: 12b62 | Read file or device (See above)
2018-12-25T12:40:20.500761136Z 66 PC: 12b8a | Move file pointer (See above)
2018-12-25T12:40:20.502462648Z 66 PC: 12bad | Move file pointer (See above)
2018-12-25T12:40:20.50421001Z 64 PC: 12bc8 | Write file or device (See above)
2018-12-25T12:40:20.509290563Z 64 PC: 12bd8 | Write file or device (See above)
2018-12-25T12:40:20.512413101Z 66 PC: 12c07 | Move file pointer (See above)
2018-12-25T12:40:20.514010658Z 64 PC: 12c18 | Write file or device (See above)
2018-12-25T12:40:20.522407619Z 87 PC: 12c29 | Get or set file date and time (See above)
2018-12-25T12:40:20.524090978Z 67 PC: 12c3b | Get or set file attributes (See above)
2018-12-25T12:40:20.534835001Z 62 PC: 12c41 | Close file (See above)
2018-12-25T12:40:20.542196799Z 79 PC: 12b08 | Find next file (See above)
2018-12-25T12:40:20.552379661Z 67 PC: 12b24 | Get or set file attributes (See above)
2018-12-25T12:40:20.56196706Z 61 PC: 12b46 | Open file (See above)
2018-12-25T12:40:20.569166147Z 63 PC: 12b62 | Read file or device (See above)
2018-12-25T12:40:20.575618135Z 66 PC: 12b8a | Move file pointer (See above)
2018-12-25T12:40:20.577272443Z 66 PC: 12bad | Move file pointer (See above)
2018-12-25T12:40:20.580191366Z 64 PC: 12bc8 | Write file or device (See above)
2018-12-25T12:40:20.590610122Z 64 PC: 12bd8 | Write file or device (See above)
2018-12-25T12:40:20.593779279Z 66 PC: 12c07 | Move file pointer (See above)
2018-12-25T12:40:20.596876688Z 64 PC: 12c18 | Write file or device (See above)
2018-12-25T12:40:20.609285557Z 87 PC: 12c29 | Get or set file date and time (See above)
2018-12-25T12:40:20.612281002Z 67 PC: 12c3b | Get or set file attributes (See above)
2018-12-25T12:40:20.623708876Z 62 PC: 12c41 | Close file (See above)
2018-12-25T12:40:20.63104225Z 79 PC: 12b08 | Find next file (See above)
2018-12-25T12:40:20.63409754Z 67 PC: 12b24 | Get or set file attributes (See above)
2018-12-25T12:40:20.644844976Z 61 PC: 12b46 | Open file (See above)
2018-12-25T12:40:20.665160113Z 63 PC: 12b62 | Read file or device (See above)
2018-12-25T12:40:20.671825366Z 66 PC: 12b8a | Move file pointer (See above)
2018-12-25T12:40:20.674731119Z 66 PC: 12bad | Move file pointer (See above)
2018-12-25T12:40:20.676658755Z 64 PC: 12bc8 | Write file or device (See above)
2018-12-25T12:40:20.681083144Z 64 PC: 12bd8 | Write file or device (See above)
2018-12-25T12:40:20.684774218Z 66 PC: 12c07 | Move file pointer (See above)
2018-12-25T12:40:20.686360752Z 64 PC: 12c18 | Write file or device (See above)
2018-12-25T12:40:20.694731762Z 87 PC: 12c29 | Get or set file date and time (See above)
2018-12-25T12:40:20.697117247Z 67 PC: 12c3b | Get or set file attributes (See above)
2018-12-25T12:40:20.708040002Z 62 PC: 12c41 | Close file (See above)
2018-12-25T12:40:20.715207006Z 78 PC: 12b08 | Find first file (See above)
2018-12-25T12:40:20.72269896Z 59 PC: 12cdc | Change current directory
2018-12-25T12:40:20.727406173Z 26 PC: 12cf9 | Set disk transfer address
2018-12-25T12:40:20.728837665Z 59 PC: 12d04 | Change current directory