Sample viewer

vx.netlux.org/Virus.DOS.VCL.Olympic.1440

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:16:05.702190911Z 47 PC: 12a6b | Get disk transfer address
2018-12-17T23:16:05.704275333Z 26 PC: 12a73 | Set disk transfer address
2018-12-17T23:16:05.705660673Z 71 PC: 12b40 | Get current directory
2018-12-17T23:16:05.708706831Z 59 PC: 12b48 | Change current directory
2018-12-17T23:16:05.713743262Z 47 PC: 12b5d | Get disk transfer address
2018-12-17T23:16:05.715296282Z 26 PC: 12b6b | Set disk transfer address
2018-12-17T23:16:05.716507369Z 78 PC: 12b76 | Find first file
2018-12-17T23:16:05.723542796Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:05.726891241Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:05.730794897Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:05.733896744Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:05.737773553Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:05.740644547Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:05.743437667Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:05.746612331Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:05.749402815Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:05.751961238Z 47 PC: 12bc2 | Get disk transfer address
2018-12-17T23:16:05.754268201Z 26 PC: 12bd1 | Set disk transfer address
2018-12-17T23:16:05.759108965Z 78 PC: 12bd9 | Find first file
2018-12-17T23:16:05.765869641Z 47 PC: 12bf1 | Get disk transfer address
2018-12-17T23:16:05.767881337Z 61 PC: 12c09 | Open file (Filename = 'SLEEP.COM')
2018-12-17T23:16:05.776442773Z 63 PC: 12c15 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:16:05.783620617Z 66 PC: 12c1d | Move file pointer
2018-12-17T23:16:05.785940134Z 62 PC: 12c22 | Close file
2018-12-17T23:16:05.79186477Z 67 PC: 12c42 | Get or set file attributes
2018-12-17T23:16:06.866602754Z 61 PC: 12c47 | Open file (Filename = 'SLEEP.COM')
2018-12-17T23:16:06.872310051Z 64 PC: 12c53 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T23:16:06.874543726Z 66 PC: 12c5b | Move file pointer
2018-12-17T23:16:06.876859602Z 64 PC: 12ff7 | Write file or device (Write 1440 bytes on handle 5)
2018-12-17T23:16:06.960648493Z 87 PC: 12c6b | Get or set file date and time
2018-12-17T23:16:06.963487908Z 62 PC: 12c6f | Close file
2018-12-17T23:16:07.058082094Z 67 PC: 12c7c | Get or set file attributes
2018-12-17T23:16:07.11917792Z 26 PC: 12beb | Set disk transfer address
2018-12-17T23:16:07.121129797Z 26 PC: 12bae | Set disk transfer address
2018-12-17T23:16:07.122552744Z 59 PC: 12b52 | Change current directory
2018-12-17T23:16:07.124752841Z 71 PC: 12b40 | Get current directory
2018-12-17T23:16:07.128642148Z 59 PC: 12b48 | Change current directory
2018-12-17T23:16:07.133200561Z 47 PC: 12b5d | Get disk transfer address
2018-12-17T23:16:07.134893827Z 26 PC: 12b6b | Set disk transfer address
2018-12-17T23:16:07.137467363Z 78 PC: 12b76 | Find first file
2018-12-17T23:16:07.144649869Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:07.147756948Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:07.151280523Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:07.15413937Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:07.157049022Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:07.160724438Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:07.163581015Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:07.16621045Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:07.169049815Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:07.172433088Z 47 PC: 12bc2 | Get disk transfer address
2018-12-17T23:16:07.173620932Z 26 PC: 12bd1 | Set disk transfer address
2018-12-17T23:16:07.174763551Z 78 PC: 12bd9 | Find first file
2018-12-17T23:16:07.182687789Z 47 PC: 12bf1 | Get disk transfer address
2018-12-17T23:16:07.183881351Z 61 PC: 12c09 | Open file (Filename = 'SLEEP.COM')
2018-12-17T23:16:07.196764031Z 63 PC: 12c15 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:16:07.204757636Z 66 PC: 12c1d | Move file pointer
2018-12-17T23:16:07.206892618Z 62 PC: 12c22 | Close file
2018-12-17T23:16:07.20928218Z 79 PC: 12bd9 | Find next file
2018-12-17T23:16:07.213318518Z 47 PC: 12bf1 | Get disk transfer address
2018-12-17T23:16:07.215167386Z 61 PC: 12c09 | Open file (Filename = 'PRINT.COM')
2018-12-17T23:16:07.222672342Z 63 PC: 12c15 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:16:07.230097027Z 66 PC: 12c1d | Move file pointer
2018-12-17T23:16:07.232376118Z 62 PC: 12c22 | Close file
2018-12-17T23:16:07.234771432Z 67 PC: 12c42 | Get or set file attributes
2018-12-17T23:16:07.366608496Z 61 PC: 12c47 | Open file (Filename = 'PRINT.COM')
2018-12-17T23:16:07.372052443Z 64 PC: 12c53 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T23:16:07.375630077Z 66 PC: 12c5b | Move file pointer
2018-12-17T23:16:07.379312302Z 64 PC: 12ff7 | Write file or device (Write 1440 bytes on handle 5)
2018-12-17T23:16:07.610016513Z 87 PC: 12c6b | Get or set file date and time
2018-12-17T23:16:07.611629425Z 62 PC: 12c6f | Close file
2018-12-17T23:16:07.851188695Z 67 PC: 12c7c | Get or set file attributes
2018-12-17T23:16:08.025113765Z 26 PC: 12beb | Set disk transfer address
2018-12-17T23:16:08.027547954Z 26 PC: 12bae | Set disk transfer address
2018-12-17T23:16:08.029435776Z 59 PC: 12b52 | Change current directory
2018-12-17T23:16:08.032972036Z 71 PC: 12b40 | Get current directory
2018-12-17T23:16:08.037050205Z 59 PC: 12b48 | Change current directory
2018-12-17T23:16:08.041938706Z 47 PC: 12b5d | Get disk transfer address
2018-12-17T23:16:08.04389991Z 26 PC: 12b6b | Set disk transfer address
2018-12-17T23:16:08.045718651Z 78 PC: 12b76 | Find first file
2018-12-17T23:16:08.054010647Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:08.057225889Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:08.060734785Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:08.063620804Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:08.066412701Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:08.069617748Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:08.072526729Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:08.075310804Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:08.079723035Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:08.082146789Z 47 PC: 12bc2 | Get disk transfer address
2018-12-17T23:16:08.083648522Z 26 PC: 12bd1 | Set disk transfer address
2018-12-17T23:16:08.085382387Z 78 PC: 12bd9 | Find first file
2018-12-17T23:16:08.091840753Z 47 PC: 12bf1 | Get disk transfer address
2018-12-17T23:16:08.092975111Z 61 PC: 12c09 | Open file (Filename = 'SLEEP.COM')
2018-12-17T23:16:08.101533402Z 63 PC: 12c15 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:16:08.104324586Z 66 PC: 12c1d | Move file pointer
2018-12-17T23:16:08.105766156Z 62 PC: 12c22 | Close file
2018-12-17T23:16:08.108917327Z 79 PC: 12bd9 | Find next file
2018-12-17T23:16:08.111979962Z 47 PC: 12bf1 | Get disk transfer address
2018-12-17T23:16:08.113390542Z 61 PC: 12c09 | Open file (Filename = 'PRINT.COM')
2018-12-17T23:16:08.120934275Z 63 PC: 12c15 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:16:08.128752323Z 66 PC: 12c1d | Move file pointer
2018-12-17T23:16:08.130229061Z 62 PC: 12c22 | Close file
2018-12-17T23:16:08.132091569Z 79 PC: 12bd9 | Find next file
2018-12-17T23:16:08.135343532Z 47 PC: 12bf1 | Get disk transfer address
2018-12-17T23:16:08.13677155Z 61 PC: 12c09 | Open file (Filename = 'HELLO.COM')
2018-12-17T23:16:08.145848183Z 63 PC: 12c15 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:16:08.154223661Z 66 PC: 12c1d | Move file pointer
2018-12-17T23:16:08.155714195Z 62 PC: 12c22 | Close file
2018-12-17T23:16:08.157570763Z 67 PC: 12c42 | Get or set file attributes
2018-12-17T23:16:08.473401396Z 61 PC: 12c47 | Open file (Filename = 'HELLO.COM')
2018-12-17T23:16:08.48139137Z 64 PC: 12c53 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T23:16:08.48497599Z 66 PC: 12c5b | Move file pointer
2018-12-17T23:16:08.488767291Z 64 PC: 12ff7 | Write file or device (Write 1440 bytes on handle 5)
2018-12-17T23:16:08.504897961Z 87 PC: 12c6b | Get or set file date and time
2018-12-17T23:16:08.506592844Z 62 PC: 12c6f | Close file
2018-12-17T23:16:08.526678266Z 67 PC: 12c7c | Get or set file attributes
2018-12-17T23:16:08.555590972Z 26 PC: 12beb | Set disk transfer address
2018-12-17T23:16:08.556751189Z 26 PC: 12bae | Set disk transfer address
2018-12-17T23:16:08.55853942Z 59 PC: 12b52 | Change current directory
2018-12-17T23:16:08.560716938Z 71 PC: 12b40 | Get current directory
2018-12-17T23:16:08.563860045Z 59 PC: 12b48 | Change current directory
2018-12-17T23:16:08.568562172Z 47 PC: 12b5d | Get disk transfer address
2018-12-17T23:16:08.570266943Z 26 PC: 12b6b | Set disk transfer address
2018-12-17T23:16:08.57156304Z 78 PC: 12b76 | Find first file
2018-12-17T23:16:08.578936025Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:08.581679215Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:08.584590213Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:08.58790308Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:08.590634832Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:08.593374666Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:08.597324606Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:08.600022427Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:08.602666674Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:08.605840605Z 47 PC: 12bc2 | Get disk transfer address
2018-12-17T23:16:08.610516007Z 26 PC: 12bd1 | Set disk transfer address
2018-12-17T23:16:08.611963203Z 78 PC: 12bd9 | Find first file
2018-12-17T23:16:08.621419502Z 47 PC: 12bf1 | Get disk transfer address
2018-12-17T23:16:08.622936647Z 61 PC: 12c09 | Open file (Filename = 'SLEEP.COM')
2018-12-17T23:16:08.630633064Z 63 PC: 12c15 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:16:08.633880587Z 66 PC: 12c1d | Move file pointer
2018-12-17T23:16:08.635433021Z 62 PC: 12c22 | Close file
2018-12-17T23:16:08.637101749Z 79 PC: 12bd9 | Find next file
2018-12-17T23:16:08.640349585Z 47 PC: 12bf1 | Get disk transfer address
2018-12-17T23:16:08.641451966Z 61 PC: 12c09 | Open file (Filename = 'PRINT.COM')
2018-12-17T23:16:08.648283463Z 63 PC: 12c15 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:16:08.651056916Z 66 PC: 12c1d | Move file pointer
2018-12-17T23:16:08.652618906Z 62 PC: 12c22 | Close file
2018-12-17T23:16:08.654311685Z 79 PC: 12bd9 | Find next file
2018-12-17T23:16:08.657091365Z 47 PC: 12bf1 | Get disk transfer address
2018-12-17T23:16:08.658560355Z 61 PC: 12c09 | Open file (Filename = 'HELLO.COM')
2018-12-17T23:16:08.666446523Z 63 PC: 12c15 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:16:08.681724144Z 66 PC: 12c1d | Move file pointer
2018-12-17T23:16:08.684280875Z 62 PC: 12c22 | Close file
2018-12-17T23:16:08.686740512Z 79 PC: 12bd9 | Find next file
2018-12-17T23:16:08.690020769Z 47 PC: 12bf1 | Get disk transfer address
2018-12-17T23:16:08.69169014Z 61 PC: 12c09 | Open file (Filename = 'PHANG.COM')
2018-12-17T23:16:08.69978876Z 63 PC: 12c15 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:16:08.706854578Z 66 PC: 12c1d | Move file pointer
2018-12-17T23:16:08.709432369Z 62 PC: 12c22 | Close file
2018-12-17T23:16:08.711867742Z 67 PC: 12c42 | Get or set file attributes
2018-12-17T23:16:08.738589892Z 61 PC: 12c47 | Open file (Filename = 'PHANG.COM')
2018-12-17T23:16:08.746340079Z 64 PC: 12c53 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T23:16:08.749446878Z 66 PC: 12c5b | Move file pointer
2018-12-17T23:16:08.752678557Z 64 PC: 12ff7 | Write file or device (Write 1440 bytes on handle 5)
2018-12-17T23:16:08.779740281Z 87 PC: 12c6b | Get or set file date and time
2018-12-17T23:16:08.781340729Z 62 PC: 12c6f | Close file
2018-12-17T23:16:08.828817241Z 67 PC: 12c7c | Get or set file attributes
2018-12-17T23:16:08.965083822Z 26 PC: 12beb | Set disk transfer address
2018-12-17T23:16:08.966477812Z 26 PC: 12bae | Set disk transfer address
2018-12-17T23:16:08.967822911Z 59 PC: 12b52 | Change current directory
2018-12-17T23:16:08.971167849Z 71 PC: 12b40 | Get current directory
2018-12-17T23:16:08.974400975Z 59 PC: 12b48 | Change current directory
2018-12-17T23:16:08.978947049Z 47 PC: 12b5d | Get disk transfer address
2018-12-17T23:16:08.981501369Z 26 PC: 12b6b | Set disk transfer address
2018-12-17T23:16:08.982785442Z 78 PC: 12b76 | Find first file
2018-12-17T23:16:08.992380057Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:08.995841424Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:08.99775151Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:09.000643969Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:09.004189754Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:09.007837528Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:09.010637814Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:09.01400425Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:09.017319276Z 79 PC: 12b9e | Find next file
2018-12-17T23:16:09.020169874Z 47 PC: 12bc2 | Get disk transfer address
2018-12-17T23:16:09.026309155Z 26 PC: 12bd1 | Set disk transfer address
2018-12-17T23:16:09.028228769Z 78 PC: 12bd9 | Find first file
2018-12-17T23:16:09.03499684Z 47 PC: 12bf1 | Get disk transfer address
2018-12-17T23:16:09.053076529Z 61 PC: 12c09 | Open file (Filename = 'SLEEP.COM')
2018-12-17T23:16:09.0604458Z 63 PC: 12c15 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:16:09.063238136Z 66 PC: 12c1d | Move file pointer
2018-12-17T23:16:09.065558569Z 62 PC: 12c22 | Close file
2018-12-17T23:16:09.067448364Z 79 PC: 12bd9 | Find next file
2018-12-17T23:16:09.070302346Z 47 PC: 12bf1 | Get disk transfer address
2018-12-17T23:16:09.07240877Z 61 PC: 12c09 | Open file (Filename = 'PRINT.COM')
2018-12-17T23:16:09.079744542Z 63 PC: 12c15 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:16:09.082819949Z 66 PC: 12c1d | Move file pointer
2018-12-17T23:16:09.087258111Z 62 PC: 12c22 | Close file
2018-12-17T23:16:09.089480236Z 79 PC: 12bd9 | Find next file
2018-12-17T23:16:09.093388556Z 47 PC: 12bf1 | Get disk transfer address
2018-12-17T23:16:09.096118291Z 61 PC: 12c09 | Open file (Filename = 'HELLO.COM')
2018-12-17T23:16:09.10340126Z 63 PC: 12c15 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:16:09.107126125Z 66 PC: 12c1d | Move file pointer
2018-12-17T23:16:09.108955223Z 62 PC: 12c22 | Close file
2018-12-17T23:16:09.11097659Z 79 PC: 12bd9 | Find next file
2018-12-17T23:16:09.112848642Z 47 PC: 12bf1 | Get disk transfer address
2018-12-17T23:16:09.114567942Z 61 PC: 12c09 | Open file (Filename = 'PHANG.COM')
2018-12-17T23:16:09.121823803Z 63 PC: 12c15 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:16:09.127716193Z 66 PC: 12c1d | Move file pointer
2018-12-17T23:16:09.129159933Z 62 PC: 12c22 | Close file
2018-12-17T23:16:09.131122907Z 79 PC: 12bd9 | Find next file
2018-12-17T23:16:09.134579296Z 47 PC: 12bf1 | Get disk transfer address
2018-12-17T23:16:09.136179308Z 61 PC: 12c09 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T23:16:09.143578666Z 63 PC: 12c15 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:16:09.148261809Z 66 PC: 12c1d | Move file pointer
2018-12-17T23:16:09.149617556Z 62 PC: 12c22 | Close file
2018-12-17T23:16:09.15107085Z 67 PC: 12c42 | Get or set file attributes
2018-12-17T23:16:09.206447615Z 61 PC: 12c47 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T23:16:09.214214875Z 64 PC: 12c53 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T23:16:09.217532307Z 66 PC: 12c5b | Move file pointer
2018-12-17T23:16:09.221344267Z 64 PC: 12ff7 | Write file or device (Write 1440 bytes on handle 5)
2018-12-17T23:16:09.30119318Z 87 PC: 12c6b | Get or set file date and time
2018-12-17T23:16:09.303059261Z 62 PC: 12c6f | Close file
2018-12-17T23:16:09.362397469Z 67 PC: 12c7c | Get or set file attributes
2018-12-17T23:16:09.420406071Z 26 PC: 12beb | Set disk transfer address
2018-12-17T23:16:09.421572785Z 26 PC: 12bae | Set disk transfer address
2018-12-17T23:16:09.422909035Z 59 PC: 12b52 | Change current directory
2018-12-17T23:16:09.426186685Z 42 PC: 12a86 | Get date 0x12a86: cmp dh, 2
0x12a89: jb 0x12a9b
0x12a8b: cmp dl, 0xc
0x12a8e: jb 0x12a9b
0x12a90: mov ah, 0x2c
0x12a92: int 0x21
0x12a94: cmp dl, 0xa
0x12a97: ja 0x12a9b
0x12a99: jmp 0x12ab1
0x12a9b: pop dx
0x12a9c: mov ah, 0x1a
0x12a9e: int 0x21
0x12aa0: mov sp, bp
0x12aa2: xor ax, ax
0x12aa4: mov bx, ax
0x12aa6: mov cx, ax
0x12aa8: mov dx, ax
0x12aaa: mov si, ax
0x12aac: mov di, ax
0x12aae: mov bp, ax
2018-12-17T23:16:09.428129498Z 44 PC: 12a94 | Get time 0x12a94: cmp dl, 0xa
0x12a97: ja 0x12a9b
0x12a99: jmp 0x12ab1
0x12a9b: pop dx
0x12a9c: mov ah, 0x1a
0x12a9e: int 0x21
0x12aa0: mov sp, bp
0x12aa2: xor ax, ax
0x12aa4: mov bx, ax
0x12aa6: mov cx, ax
0x12aa8: mov dx, ax
0x12aaa: mov si, ax
0x12aac: mov di, ax
0x12aae: mov bp, ax
0x12ab0: ret
0x12ab1: mov ah, 0xf
0x12ab3: int 0x10
0x12ab5: xor ah, ah
0x12ab7: int 0x10
0x12ab9: lea si, word ptr [di + 0x349]
2018-12-17T23:16:09.430314464Z 26 PC: 12aa0 | Set disk transfer address

{"DateBased":true,"Day":12,"Month":2,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":14869,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:41:50.616864166Z 47 PC: 12a6b | Get disk transfer address
2018-12-25T12:41:50.618686317Z 26 PC: 12a73 | Set disk transfer address
2018-12-25T12:41:50.620627349Z 71 PC: 12b40 | Get current directory
2018-12-25T12:41:50.624878282Z 59 PC: 12b48 | Change current directory
2018-12-25T12:41:50.629082613Z 47 PC: 12b5d | Get disk transfer address
2018-12-25T12:41:50.632135031Z 26 PC: 12b6b | Set disk transfer address
2018-12-25T12:41:50.633599019Z 78 PC: 12b76 | Find first file
2018-12-25T12:41:50.63983146Z 79 PC: 12b9e | Find next file
2018-12-25T12:41:50.643914764Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:50.65083147Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:50.672588731Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:50.677183434Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:50.680400827Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:50.683167173Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:50.686668537Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:50.689680292Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:50.692189538Z 47 PC: 12bc2 | Get disk transfer address
2018-12-25T12:41:50.693835313Z 26 PC: 12bd1 | Set disk transfer address
2018-12-25T12:41:50.695975976Z 78 PC: 12bd9 | Find first file
2018-12-25T12:41:50.701944845Z 47 PC: 12bf1 | Get disk transfer address
2018-12-25T12:41:50.703316479Z 61 PC: 12c09 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:41:50.709293708Z 63 PC: 12c15 | Read file or device (Read 3 bytes on handle 5)
2018-12-25T12:41:50.713587377Z 66 PC: 12c1d | Move file pointer
2018-12-25T12:41:50.714677926Z 62 PC: 12c22 | Close file
2018-12-25T12:41:50.716633159Z 67 PC: 12c42 | Get or set file attributes
2018-12-25T12:41:50.996753808Z 61 PC: 12c47 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:41:51.004658611Z 64 PC: 12c53 | Write file or device (Write 3 bytes on handle 5)
2018-12-25T12:41:51.009537496Z 66 PC: 12c5b | Move file pointer
2018-12-25T12:41:51.012386084Z 64 PC: 12ff7 | Write file or device (Write 1440 bytes on handle 5)
2018-12-25T12:41:51.032167689Z 87 PC: 12c6b | Get or set file date and time
2018-12-25T12:41:51.035178574Z 62 PC: 12c6f | Close file
2018-12-25T12:41:51.043325564Z 67 PC: 12c7c | Get or set file attributes
2018-12-25T12:41:51.055188415Z 26 PC: 12beb | Set disk transfer address
2018-12-25T12:41:51.057458356Z 26 PC: 12bae | Set disk transfer address
2018-12-25T12:41:51.058893145Z 59 PC: 12b52 | Change current directory
2018-12-25T12:41:51.060994254Z 71 PC: 12b40 | Get current directory (See above)
2018-12-25T12:41:51.064706801Z 59 PC: 12b48 | Change current directory (See above)
2018-12-25T12:41:51.070036031Z 47 PC: 12b5d | Get disk transfer address (See above)
2018-12-25T12:41:51.071859402Z 26 PC: 12b6b | Set disk transfer address (See above)
2018-12-25T12:41:51.075056253Z 78 PC: 12b76 | Find first file (See above)
2018-12-25T12:41:51.094968858Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.103243842Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.107967994Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.111030629Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.113796886Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.116535429Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.120264388Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.122984773Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.125614795Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.12899191Z 47 PC: 12bc2 | Get disk transfer address (See above)
2018-12-25T12:41:51.130345167Z 26 PC: 12bd1 | Set disk transfer address (See above)
2018-12-25T12:41:51.131640066Z 78 PC: 12bd9 | Find first file (See above)
2018-12-25T12:41:51.138177026Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:51.15229024Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:51.163173294Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:51.175914886Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:51.178229682Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:51.181325131Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:51.186795351Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:51.188843077Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:51.199704911Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:51.207142032Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:51.208978824Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:51.210985731Z 67 PC: 12c42 | Get or set file attributes (See above)
2018-12-25T12:41:51.221492455Z 61 PC: 12c47 | Open file (See above)
2018-12-25T12:41:51.233647059Z 64 PC: 12c53 | Write file or device (See above)
2018-12-25T12:41:51.236774261Z 66 PC: 12c5b | Move file pointer (See above)
2018-12-25T12:41:51.239667942Z 64 PC: 12ff7 | Write file or device (See above)
2018-12-25T12:41:51.249614228Z 87 PC: 12c6b | Get or set file date and time (See above)
2018-12-25T12:41:51.251747061Z 62 PC: 12c6f | Close file (See above)
2018-12-25T12:41:51.260581219Z 67 PC: 12c7c | Get or set file attributes (See above)
2018-12-25T12:41:51.271774994Z 26 PC: 12beb | Set disk transfer address (See above)
2018-12-25T12:41:51.273109879Z 26 PC: 12bae | Set disk transfer address (See above)
2018-12-25T12:41:51.274905571Z 59 PC: 12b52 | Change current directory (See above)
2018-12-25T12:41:51.27803995Z 71 PC: 12b40 | Get current directory (See above)
2018-12-25T12:41:51.281188576Z 59 PC: 12b48 | Change current directory (See above)
2018-12-25T12:41:51.285443235Z 47 PC: 12b5d | Get disk transfer address (See above)
2018-12-25T12:41:51.287780841Z 26 PC: 12b6b | Set disk transfer address (See above)
2018-12-25T12:41:51.289071777Z 78 PC: 12b76 | Find first file (See above)
2018-12-25T12:41:51.295108722Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.299037436Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.301933278Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.304608808Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.308044857Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.311139267Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.313794313Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.317275155Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.320163815Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.326590365Z 47 PC: 12bc2 | Get disk transfer address (See above)
2018-12-25T12:41:51.328552982Z 26 PC: 12bd1 | Set disk transfer address (See above)
2018-12-25T12:41:51.330495196Z 78 PC: 12bd9 | Find first file (See above)
2018-12-25T12:41:51.336418176Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:51.338485881Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:51.346300991Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:51.349049182Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:51.350925109Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:51.353313754Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:51.356158149Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:51.358184036Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:51.365569804Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:51.372063702Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:51.373682389Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:51.376177667Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:51.379024776Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:51.380325331Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:51.388016722Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:51.394796634Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:51.396049562Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:51.398819716Z 67 PC: 12c42 | Get or set file attributes (See above)
2018-12-25T12:41:51.408542774Z 61 PC: 12c47 | Open file (See above)
2018-12-25T12:41:51.415691243Z 64 PC: 12c53 | Write file or device (See above)
2018-12-25T12:41:51.419241273Z 66 PC: 12c5b | Move file pointer (See above)
2018-12-25T12:41:51.421568624Z 64 PC: 12ff7 | Write file or device (See above)
2018-12-25T12:41:51.430506664Z 87 PC: 12c6b | Get or set file date and time (See above)
2018-12-25T12:41:51.433080216Z 62 PC: 12c6f | Close file (See above)
2018-12-25T12:41:51.440894674Z 67 PC: 12c7c | Get or set file attributes (See above)
2018-12-25T12:41:51.450437619Z 26 PC: 12beb | Set disk transfer address (See above)
2018-12-25T12:41:51.452454523Z 26 PC: 12bae | Set disk transfer address (See above)
2018-12-25T12:41:51.453572906Z 59 PC: 12b52 | Change current directory (See above)
2018-12-25T12:41:51.455318821Z 71 PC: 12b40 | Get current directory (See above)
2018-12-25T12:41:51.45911905Z 59 PC: 12b48 | Change current directory (See above)
2018-12-25T12:41:51.4629319Z 47 PC: 12b5d | Get disk transfer address (See above)
2018-12-25T12:41:51.464022771Z 26 PC: 12b6b | Set disk transfer address (See above)
2018-12-25T12:41:51.46597583Z 78 PC: 12b76 | Find first file (See above)
2018-12-25T12:41:51.477145504Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.480682871Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.48423425Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.487408682Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.49031753Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.493840434Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.497371044Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.500153788Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.503660884Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.506876126Z 47 PC: 12bc2 | Get disk transfer address (See above)
2018-12-25T12:41:51.508213266Z 26 PC: 12bd1 | Set disk transfer address (See above)
2018-12-25T12:41:51.509743018Z 78 PC: 12bd9 | Find first file (See above)
2018-12-25T12:41:51.516572581Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:51.517894198Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:51.524537483Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:51.532011637Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:51.533586346Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:51.535553877Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:51.539437038Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:51.540755573Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:51.547346442Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:51.555129712Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:51.556718562Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:51.558695477Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:51.562365818Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:51.564006579Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:51.570596901Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:51.578090661Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:51.580053951Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:51.582038618Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:51.585605504Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:51.587247143Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:51.594189403Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:51.601258301Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:51.603167865Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:51.605114173Z 67 PC: 12c42 | Get or set file attributes (See above)
2018-12-25T12:41:51.615165249Z 61 PC: 12c47 | Open file (See above)
2018-12-25T12:41:51.623138924Z 64 PC: 12c53 | Write file or device (See above)
2018-12-25T12:41:51.626044581Z 66 PC: 12c5b | Move file pointer (See above)
2018-12-25T12:41:51.628820137Z 64 PC: 12ff7 | Write file or device (See above)
2018-12-25T12:41:51.638825166Z 87 PC: 12c6b | Get or set file date and time (See above)
2018-12-25T12:41:51.640505744Z 62 PC: 12c6f | Close file (See above)
2018-12-25T12:41:51.648168837Z 67 PC: 12c7c | Get or set file attributes (See above)
2018-12-25T12:41:51.658922784Z 26 PC: 12beb | Set disk transfer address (See above)
2018-12-25T12:41:51.659935227Z 26 PC: 12bae | Set disk transfer address (See above)
2018-12-25T12:41:51.661376778Z 59 PC: 12b52 | Change current directory (See above)
2018-12-25T12:41:51.663982916Z 71 PC: 12b40 | Get current directory (See above)
2018-12-25T12:41:51.666957408Z 59 PC: 12b48 | Change current directory (See above)
2018-12-25T12:41:51.671432832Z 47 PC: 12b5d | Get disk transfer address (See above)
2018-12-25T12:41:51.673598987Z 26 PC: 12b6b | Set disk transfer address (See above)
2018-12-25T12:41:51.674919889Z 78 PC: 12b76 | Find first file (See above)
2018-12-25T12:41:51.686024464Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.689601993Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.692324086Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.695034824Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.698573044Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.701446109Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.70417512Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.707540745Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.710311194Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.712719491Z 47 PC: 12bc2 | Get disk transfer address (See above)
2018-12-25T12:41:51.714910385Z 26 PC: 12bd1 | Set disk transfer address (See above)
2018-12-25T12:41:51.716690835Z 78 PC: 12bd9 | Find first file (See above)
2018-12-25T12:41:51.720951412Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:51.722380367Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:51.726362867Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:51.730294513Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:51.731873108Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:51.733159701Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:51.734914179Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:51.736372144Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:51.740353725Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:51.744301769Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:51.745964868Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:51.747270097Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:51.750095255Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:51.752165112Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:51.759757046Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:51.766109772Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:51.768460529Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:51.770753614Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:51.773603404Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:51.77564295Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:51.782491422Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:51.788847518Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:51.791186301Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:51.793462065Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:51.796272031Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:51.798323059Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:51.804831254Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:51.810988036Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:51.812997922Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:51.814790779Z 67 PC: 12c42 | Get or set file attributes (See above)
2018-12-25T12:41:51.827354398Z 61 PC: 12c47 | Open file (See above)
2018-12-25T12:41:51.836555724Z 64 PC: 12c53 | Write file or device (See above)
2018-12-25T12:41:51.840673988Z 66 PC: 12c5b | Move file pointer (See above)
2018-12-25T12:41:51.844724155Z 64 PC: 12ff7 | Write file or device (See above)
2018-12-25T12:41:51.85465188Z 87 PC: 12c6b | Get or set file date and time (See above)
2018-12-25T12:41:51.856465604Z 62 PC: 12c6f | Close file (See above)
2018-12-25T12:41:51.864366069Z 67 PC: 12c7c | Get or set file attributes (See above)
2018-12-25T12:41:51.875031298Z 26 PC: 12beb | Set disk transfer address (See above)
2018-12-25T12:41:51.876682342Z 26 PC: 12bae | Set disk transfer address (See above)
2018-12-25T12:41:51.877996574Z 59 PC: 12b52 | Change current directory (See above)
2018-12-25T12:41:51.880710301Z 42 PC: 12a86 | Get date 0x12a86: cmp dh, 2
0x12a89: jb 0x12a9b
0x12a8b: cmp dl, 0xc
0x12a8e: jb 0x12a9b
0x12a90: mov ah, 0x2c
0x12a92: int 0x21
0x12a94: cmp dl, 0xa
0x12a97: ja 0x12a9b
0x12a99: jmp 0x12ab1
0x12a9b: pop dx
0x12a9c: mov ah, 0x1a
0x12a9e: int 0x21
0x12aa0: mov sp, bp
0x12aa2: xor ax, ax
0x12aa4: mov bx, ax
0x12aa6: mov cx, ax
0x12aa8: mov dx, ax
0x12aaa: mov si, ax
0x12aac: mov di, ax
0x12aae: mov bp, ax
2018-12-25T12:41:51.883395574Z 44 PC: 12a94 | Get time 0x12a94: cmp dl, 0xa
0x12a97: ja 0x12a9b
0x12a99: jmp 0x12ab1
0x12a9b: pop dx
0x12a9c: mov ah, 0x1a
0x12a9e: int 0x21
0x12aa0: mov sp, bp
0x12aa2: xor ax, ax
0x12aa4: mov bx, ax
0x12aa6: mov cx, ax
0x12aa8: mov dx, ax
0x12aaa: mov si, ax
0x12aac: mov di, ax
0x12aae: mov bp, ax
0x12ab0: ret
0x12ab1: mov ah, 0xf
0x12ab3: int 0x10
0x12ab5: xor ah, ah
0x12ab7: int 0x10
0x12ab9: lea si, word ptr [di + 0x349]
2018-12-25T12:41:51.885758558Z 26 PC: 12aa0 | Set disk transfer address

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":14869,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T13:07:27.264419247Z 240 PC: 13dd9 | UNKNOWN!
2018-12-25T13:07:27.265873912Z 53 PC: 13de6 | Get interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-25T13:07:27.26878008Z 53 PC: 13df4 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T13:07:27.27029044Z 53 PC: 13e02 | Get interrupt vector (Interrupt = '38' AKA 'Create PSP')
2018-12-25T13:07:27.271496733Z 82 PC: 13e10 | Get DOS internal pointers (SYSVARS)
2018-12-25T13:07:27.280416045Z 42 PC: 13e52 | Get date 0x13e52: cmp dh, 6
0x13e55: ja 0x13e5f
0x13e57: mov ax, 0x2513
0x13e5a: mov dx, 0x471
0x13e5d: int 0x21
0x13e5f: mov ax, 0x2521
0x13e62: mov dx, 0x4a5
0x13e65: int 0x21
0x13e67: pop ds
0x13e68: push ds
0x13e69: push si
0x13e6a: push cs
0x13e6b: pop es
0x13e6c: mov ax, word ptr [0x2c]
0x13e6f: mov ds, ax
0x13e71: xor cx, cx
0x13e73: mov di, si
0x13e75: add di, 0x17e
0x13e79: mov bx, di
0x13e7b: mov ax, di
2018-12-25T13:07:27.286549894Z 37 PC: 13e5f | Set interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-25T13:07:27.288393339Z 37 PC: 13e67 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T13:07:27.290760282Z 61 PC: 9fa57 | Open file (Filename = '<')
2018-12-25T13:07:27.296416008Z 66 PC: 9fa66 | Move file pointer
2018-12-25T13:07:27.297881146Z 63 PC: 9fa74 | Read file or device (Read 10 bytes on handle 5)
2018-12-25T13:07:27.303989231Z 62 PC: 9fa7a | Close file
2018-12-25T13:07:27.306010689Z 53 PC: 9fa8f | Get interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-25T13:07:27.320915276Z 53 PC: 9fa95 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T13:07:27.329267031Z 53 PC: 9fa9b | Get interrupt vector (Interrupt = '38' AKA 'Create PSP')
2018-12-25T13:07:27.332562667Z 37 PC: 9faa9 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T13:07:27.334456198Z 37 PC: 9f9d3 | Set interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-25T13:07:27.336314793Z 37 PC: 9f9e1 | Set interrupt vector (Interrupt = '38' AKA 'Create PSP')
2018-12-25T13:07:27.339351904Z 67 PC: 9fab3 | Get or set file attributes
2018-12-25T13:07:27.346136951Z 67 PC: 9fabd | Get or set file attributes
2018-12-25T13:07:28.037205608Z 61 PC: 9fac9 | Open file (Filename = 'S�')
2018-12-25T13:07:28.046018047Z 63 PC: 9fad9 | Read file or device (Read 24 bytes on handle 5)
2018-12-25T13:07:28.055591785Z 66 PC: 9fae4 | Move file pointer
2018-12-25T13:07:28.057794492Z 87 PC: 9fb1b | Get or set file date and time
2018-12-25T13:07:28.060284168Z 64 PC: 9fb28 | Write file or device (Write 1137 bytes on handle 5)
2018-12-25T13:07:28.072875492Z 66 PC: 9fb37 | Move file pointer
2018-12-25T13:07:28.074555671Z 64 PC: 9fb43 | Write file or device (Write 24 bytes on handle 5)
2018-12-25T13:07:28.08052257Z 87 PC: 9faf6 | Get or set file date and time
2018-12-25T13:07:28.094480164Z 62 PC: 9fafa | Close file
2018-12-25T13:07:28.103145599Z 67 PC: 9fb02 | Get or set file attributes
2018-12-25T13:07:28.114277349Z 37 PC: 9fb09 | Set interrupt vector (Interrupt = '38' AKA 'Create PSP')
2018-12-25T13:07:28.117134733Z 37 PC: 9fb0f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T13:07:28.11839185Z 37 PC: 9fb15 | Set interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-25T13:07:28.120610209Z 42 PC: 13eb1 | Get date 0x13eb1: cmp dh, 6
0x13eb4: ja 0x13ef9
0x13eb6: xor ax, ax
0x13eb8: mov ds, ax
0x13eba: test word ptr [0x46c], 0x1ff
0x13ec0: jne 0x13ef9
0x13ec2: mov al, 0x3f
0x13ec4: out 0x21, al
0x13ec6: mov ah, 0xf2
0x13ec8: int 0x21
0x13eca: mov ax, 3
0x13ecd: cmp byte ptr [0x488], 0xfb
0x13ed2: jne 0x13ed6
0x13ed4: mov al, 7
0x13ed6: int 0x10
0x13ed8: push cs
0x13ed9: pop ds
0x13eda: mov ah, 9
0x13edc: mov dx, 0x16a
0x13edf: add dx, si
2018-12-25T13:07:28.125244803Z 9 PC: 13dc6 | Display string (String= 'Hello - Copyright S & S International, 1990 ')

{"DateBased":true,"Day":1,"Month":2,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":14869,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:41:51.278807062Z 47 PC: 12a6b | Get disk transfer address
2018-12-25T12:41:51.28107036Z 26 PC: 12a73 | Set disk transfer address
2018-12-25T12:41:51.282470809Z 71 PC: 12b40 | Get current directory
2018-12-25T12:41:51.285537888Z 59 PC: 12b48 | Change current directory
2018-12-25T12:41:51.290206909Z 47 PC: 12b5d | Get disk transfer address
2018-12-25T12:41:51.291478005Z 26 PC: 12b6b | Set disk transfer address
2018-12-25T12:41:51.292793404Z 78 PC: 12b76 | Find first file
2018-12-25T12:41:51.299651824Z 79 PC: 12b9e | Find next file
2018-12-25T12:41:51.303109895Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.305810538Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.308518941Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.311679554Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.314138453Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.316581064Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.329924997Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.332461285Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.334631981Z 47 PC: 12bc2 | Get disk transfer address
2018-12-25T12:41:51.336301947Z 26 PC: 12bd1 | Set disk transfer address
2018-12-25T12:41:51.337319858Z 78 PC: 12bd9 | Find first file
2018-12-25T12:41:51.342957351Z 47 PC: 12bf1 | Get disk transfer address
2018-12-25T12:41:51.34461411Z 61 PC: 12c09 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:41:51.350901575Z 63 PC: 12c15 | Read file or device (Read 3 bytes on handle 5)
2018-12-25T12:41:51.35739114Z 66 PC: 12c1d | Move file pointer
2018-12-25T12:41:51.359013974Z 62 PC: 12c22 | Close file
2018-12-25T12:41:51.360763055Z 67 PC: 12c42 | Get or set file attributes
2018-12-25T12:41:51.376996364Z 61 PC: 12c47 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:41:51.384446342Z 64 PC: 12c53 | Write file or device (Write 3 bytes on handle 5)
2018-12-25T12:41:51.387245179Z 66 PC: 12c5b | Move file pointer
2018-12-25T12:41:51.389762399Z 64 PC: 12ff7 | Write file or device (Write 1440 bytes on handle 5)
2018-12-25T12:41:51.410429049Z 87 PC: 12c6b | Get or set file date and time
2018-12-25T12:41:51.41216088Z 62 PC: 12c6f | Close file
2018-12-25T12:41:51.419980172Z 67 PC: 12c7c | Get or set file attributes
2018-12-25T12:41:51.459016471Z 26 PC: 12beb | Set disk transfer address
2018-12-25T12:41:51.46041751Z 26 PC: 12bae | Set disk transfer address
2018-12-25T12:41:51.46178595Z 59 PC: 12b52 | Change current directory
2018-12-25T12:41:51.464096799Z 71 PC: 12b40 | Get current directory (See above)
2018-12-25T12:41:51.468075697Z 59 PC: 12b48 | Change current directory (See above)
2018-12-25T12:41:51.472282961Z 47 PC: 12b5d | Get disk transfer address (See above)
2018-12-25T12:41:51.473614936Z 26 PC: 12b6b | Set disk transfer address (See above)
2018-12-25T12:41:51.475756522Z 78 PC: 12b76 | Find first file (See above)
2018-12-25T12:41:51.481697228Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.484227063Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.487887546Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.490647897Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.49340677Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.497310951Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.500026594Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.502782874Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.506086561Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.509385965Z 47 PC: 12bc2 | Get disk transfer address (See above)
2018-12-25T12:41:51.510723166Z 26 PC: 12bd1 | Set disk transfer address (See above)
2018-12-25T12:41:51.512579744Z 78 PC: 12bd9 | Find first file (See above)
2018-12-25T12:41:51.519038427Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:51.520361817Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:51.527703487Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:51.53453152Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:51.536113811Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:51.538108181Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:51.541968148Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:51.543289239Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:51.550404414Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:51.557902579Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:51.559533478Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:51.561506919Z 67 PC: 12c42 | Get or set file attributes (See above)
2018-12-25T12:41:51.57251926Z 61 PC: 12c47 | Open file (See above)
2018-12-25T12:41:51.579853446Z 64 PC: 12c53 | Write file or device (See above)
2018-12-25T12:41:51.582817639Z 66 PC: 12c5b | Move file pointer (See above)
2018-12-25T12:41:51.586319959Z 64 PC: 12ff7 | Write file or device (See above)
2018-12-25T12:41:51.596244895Z 87 PC: 12c6b | Get or set file date and time (See above)
2018-12-25T12:41:51.598058096Z 62 PC: 12c6f | Close file (See above)
2018-12-25T12:41:51.60681475Z 67 PC: 12c7c | Get or set file attributes (See above)
2018-12-25T12:41:51.616549944Z 26 PC: 12beb | Set disk transfer address (See above)
2018-12-25T12:41:51.617624139Z 26 PC: 12bae | Set disk transfer address (See above)
2018-12-25T12:41:51.619409876Z 59 PC: 12b52 | Change current directory (See above)
2018-12-25T12:41:51.62118749Z 71 PC: 12b40 | Get current directory (See above)
2018-12-25T12:41:51.623948176Z 59 PC: 12b48 | Change current directory (See above)
2018-12-25T12:41:51.628465382Z 47 PC: 12b5d | Get disk transfer address (See above)
2018-12-25T12:41:51.630055873Z 26 PC: 12b6b | Set disk transfer address (See above)
2018-12-25T12:41:51.631078812Z 78 PC: 12b76 | Find first file (See above)
2018-12-25T12:41:51.641588518Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.645272175Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.648646987Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.651351332Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.655044446Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.657751935Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.660412511Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.664046936Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.666724695Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.669159341Z 47 PC: 12bc2 | Get disk transfer address (See above)
2018-12-25T12:41:51.671270609Z 26 PC: 12bd1 | Set disk transfer address (See above)
2018-12-25T12:41:51.672865905Z 78 PC: 12bd9 | Find first file (See above)
2018-12-25T12:41:51.678800476Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:51.680830849Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:51.687745291Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:51.694128778Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:51.696433905Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:51.698749809Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:51.701556068Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:51.703523426Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:51.710389363Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:51.717094486Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:51.718823823Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:51.721563602Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:51.724357156Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:51.725622175Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:51.733118979Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:51.739433918Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:51.740980795Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:51.743908122Z 67 PC: 12c42 | Get or set file attributes (See above)
2018-12-25T12:41:51.753922955Z 61 PC: 12c47 | Open file (See above)
2018-12-25T12:41:51.7605714Z 64 PC: 12c53 | Write file or device (See above)
2018-12-25T12:41:51.764501567Z 66 PC: 12c5b | Move file pointer (See above)
2018-12-25T12:41:51.767131261Z 64 PC: 12ff7 | Write file or device (See above)
2018-12-25T12:41:51.776222135Z 87 PC: 12c6b | Get or set file date and time (See above)
2018-12-25T12:41:51.778899235Z 62 PC: 12c6f | Close file (See above)
2018-12-25T12:41:51.801540718Z 67 PC: 12c7c | Get or set file attributes (See above)
2018-12-25T12:41:51.817394528Z 26 PC: 12beb | Set disk transfer address (See above)
2018-12-25T12:41:51.820153726Z 26 PC: 12bae | Set disk transfer address (See above)
2018-12-25T12:41:51.821978108Z 59 PC: 12b52 | Change current directory (See above)
2018-12-25T12:41:51.824978568Z 71 PC: 12b40 | Get current directory (See above)
2018-12-25T12:41:51.830821249Z 59 PC: 12b48 | Change current directory (See above)
2018-12-25T12:41:51.838215235Z 47 PC: 12b5d | Get disk transfer address (See above)
2018-12-25T12:41:51.839893867Z 26 PC: 12b6b | Set disk transfer address (See above)
2018-12-25T12:41:51.842218365Z 78 PC: 12b76 | Find first file (See above)
2018-12-25T12:41:51.854919544Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.85931805Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.862459598Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.865031172Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.867452636Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.870269192Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.872758976Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.875419016Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.878942711Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:51.881602504Z 47 PC: 12bc2 | Get disk transfer address (See above)
2018-12-25T12:41:51.883072385Z 26 PC: 12bd1 | Set disk transfer address (See above)
2018-12-25T12:41:51.885126213Z 78 PC: 12bd9 | Find first file (See above)
2018-12-25T12:41:51.891569104Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:51.893018732Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:51.900503416Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:51.903584086Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:51.905197903Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:51.907384656Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:51.911029197Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:51.912352937Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:51.919598783Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:51.92331182Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:51.924901398Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:51.926871663Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:51.930633629Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:51.931825835Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:51.937594454Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:51.944420324Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:51.945950628Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:51.94783655Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:51.951186357Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:51.952776994Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:51.95880025Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:51.965275463Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:51.96709981Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:51.96898905Z 67 PC: 12c42 | Get or set file attributes (See above)
2018-12-25T12:41:51.978901014Z 61 PC: 12c47 | Open file (See above)
2018-12-25T12:41:51.985941244Z 64 PC: 12c53 | Write file or device (See above)
2018-12-25T12:41:51.987789379Z 66 PC: 12c5b | Move file pointer (See above)
2018-12-25T12:41:51.989835748Z 64 PC: 12ff7 | Write file or device (See above)
2018-12-25T12:41:51.995548243Z 87 PC: 12c6b | Get or set file date and time (See above)
2018-12-25T12:41:51.996651315Z 62 PC: 12c6f | Close file (See above)
2018-12-25T12:41:52.001910128Z 67 PC: 12c7c | Get or set file attributes (See above)
2018-12-25T12:41:52.008112185Z 26 PC: 12beb | Set disk transfer address (See above)
2018-12-25T12:41:52.008954291Z 26 PC: 12bae | Set disk transfer address (See above)
2018-12-25T12:41:52.01026985Z 59 PC: 12b52 | Change current directory (See above)
2018-12-25T12:41:52.011537905Z 71 PC: 12b40 | Get current directory (See above)
2018-12-25T12:41:52.01357962Z 59 PC: 12b48 | Change current directory (See above)
2018-12-25T12:41:52.017195447Z 47 PC: 12b5d | Get disk transfer address (See above)
2018-12-25T12:41:52.018286469Z 26 PC: 12b6b | Set disk transfer address (See above)
2018-12-25T12:41:52.019377871Z 78 PC: 12b76 | Find first file (See above)
2018-12-25T12:41:52.028598707Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:52.030900409Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:52.033095219Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:52.036033633Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:52.038326227Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:52.040464828Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:52.043203282Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:52.045218045Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:52.047209877Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:52.049360737Z 47 PC: 12bc2 | Get disk transfer address (See above)
2018-12-25T12:41:52.050607571Z 26 PC: 12bd1 | Set disk transfer address (See above)
2018-12-25T12:41:52.051525754Z 78 PC: 12bd9 | Find first file (See above)
2018-12-25T12:41:52.060373594Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:52.061981357Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:52.068679466Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:52.075665483Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:52.076933476Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:52.078523025Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:52.081466237Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:52.082443886Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:52.088576033Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:52.095355657Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:52.096977769Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:52.099299127Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:52.102966626Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:52.104417491Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:52.111048213Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:52.117947938Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:52.119577448Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:52.121548983Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:52.12614969Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:52.127481559Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:52.133926935Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:52.141201366Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:52.142832046Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:52.144797858Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:52.148548864Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:52.149893773Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:52.157175713Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:52.164424986Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:52.166011214Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:52.167928937Z 67 PC: 12c42 | Get or set file attributes (See above)
2018-12-25T12:41:52.178567239Z 61 PC: 12c47 | Open file (See above)
2018-12-25T12:41:52.185090553Z 64 PC: 12c53 | Write file or device (See above)
2018-12-25T12:41:52.1879558Z 66 PC: 12c5b | Move file pointer (See above)
2018-12-25T12:41:52.192079991Z 64 PC: 12ff7 | Write file or device (See above)
2018-12-25T12:41:52.201184523Z 87 PC: 12c6b | Get or set file date and time (See above)
2018-12-25T12:41:52.202826366Z 62 PC: 12c6f | Close file (See above)
2018-12-25T12:41:52.211318307Z 67 PC: 12c7c | Get or set file attributes (See above)
2018-12-25T12:41:52.221256116Z 26 PC: 12beb | Set disk transfer address (See above)
2018-12-25T12:41:52.222664475Z 26 PC: 12bae | Set disk transfer address (See above)
2018-12-25T12:41:52.225197757Z 59 PC: 12b52 | Change current directory (See above)
2018-12-25T12:41:52.227280666Z 42 PC: 12a86 | Get date 0x12a86: cmp dh, 2
0x12a89: jb 0x12a9b
0x12a8b: cmp dl, 0xc
0x12a8e: jb 0x12a9b
0x12a90: mov ah, 0x2c
0x12a92: int 0x21
0x12a94: cmp dl, 0xa
0x12a97: ja 0x12a9b
0x12a99: jmp 0x12ab1
0x12a9b: pop dx
0x12a9c: mov ah, 0x1a
0x12a9e: int 0x21
0x12aa0: mov sp, bp
0x12aa2: xor ax, ax
0x12aa4: mov bx, ax
0x12aa6: mov cx, ax
0x12aa8: mov dx, ax
0x12aaa: mov si, ax
0x12aac: mov di, ax
0x12aae: mov bp, ax
2018-12-25T12:41:52.229731457Z 26 PC: 12aa0 | Set disk transfer address

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":14869,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:41:52.706131052Z 47 PC: 12a6b | Get disk transfer address
2018-12-25T12:41:52.707658743Z 26 PC: 12a73 | Set disk transfer address
2018-12-25T12:41:52.710799095Z 71 PC: 12b40 | Get current directory
2018-12-25T12:41:52.713923996Z 59 PC: 12b48 | Change current directory
2018-12-25T12:41:52.718329875Z 47 PC: 12b5d | Get disk transfer address
2018-12-25T12:41:52.720033161Z 26 PC: 12b6b | Set disk transfer address
2018-12-25T12:41:52.72124143Z 78 PC: 12b76 | Find first file
2018-12-25T12:41:52.728126537Z 79 PC: 12b9e | Find next file
2018-12-25T12:41:52.732072535Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:52.735186496Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:52.738387826Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:52.742039485Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:52.744937387Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:52.747724238Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:52.750781879Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:52.762157511Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:52.763962902Z 47 PC: 12bc2 | Get disk transfer address
2018-12-25T12:41:52.765060203Z 26 PC: 12bd1 | Set disk transfer address
2018-12-25T12:41:52.766444222Z 78 PC: 12bd9 | Find first file
2018-12-25T12:41:52.774452793Z 47 PC: 12bf1 | Get disk transfer address
2018-12-25T12:41:52.77571465Z 61 PC: 12c09 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:41:52.788081533Z 63 PC: 12c15 | Read file or device (Read 3 bytes on handle 5)
2018-12-25T12:41:52.796677641Z 66 PC: 12c1d | Move file pointer
2018-12-25T12:41:52.79871039Z 62 PC: 12c22 | Close file
2018-12-25T12:41:52.801475105Z 67 PC: 12c42 | Get or set file attributes
2018-12-25T12:41:52.826325259Z 61 PC: 12c47 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:41:52.847592392Z 64 PC: 12c53 | Write file or device (Write 3 bytes on handle 5)
2018-12-25T12:41:52.8516131Z 66 PC: 12c5b | Move file pointer
2018-12-25T12:41:52.855158934Z 64 PC: 12ff7 | Write file or device (Write 1440 bytes on handle 5)
2018-12-25T12:41:52.885295698Z 87 PC: 12c6b | Get or set file date and time
2018-12-25T12:41:52.899386507Z 62 PC: 12c6f | Close file
2018-12-25T12:41:52.908599999Z 67 PC: 12c7c | Get or set file attributes
2018-12-25T12:41:52.920773566Z 26 PC: 12beb | Set disk transfer address
2018-12-25T12:41:52.923523636Z 26 PC: 12bae | Set disk transfer address
2018-12-25T12:41:52.924845705Z 59 PC: 12b52 | Change current directory
2018-12-25T12:41:52.926882814Z 71 PC: 12b40 | Get current directory (See above)
2018-12-25T12:41:52.930564302Z 59 PC: 12b48 | Change current directory (See above)
2018-12-25T12:41:52.935608494Z 47 PC: 12b5d | Get disk transfer address (See above)
2018-12-25T12:41:52.937172892Z 26 PC: 12b6b | Set disk transfer address (See above)
2018-12-25T12:41:52.938801812Z 78 PC: 12b76 | Find first file (See above)
2018-12-25T12:41:52.958036585Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:52.960927115Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:52.967870912Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:52.971433968Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:52.980653867Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:52.985566171Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:52.991602389Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:52.994781684Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.014923324Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.019598042Z 47 PC: 12bc2 | Get disk transfer address (See above)
2018-12-25T12:41:53.021958889Z 26 PC: 12bd1 | Set disk transfer address (See above)
2018-12-25T12:41:53.023619146Z 78 PC: 12bd9 | Find first file (See above)
2018-12-25T12:41:53.031717712Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:53.033482763Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:53.040930488Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:53.04921824Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:53.051621622Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:53.05380049Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:53.057465998Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:53.059952956Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:53.067683015Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:53.07520052Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:53.077951657Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:53.080756313Z 67 PC: 12c42 | Get or set file attributes (See above)
2018-12-25T12:41:53.092232784Z 61 PC: 12c47 | Open file (See above)
2018-12-25T12:41:53.100667735Z 64 PC: 12c53 | Write file or device (See above)
2018-12-25T12:41:53.104279071Z 66 PC: 12c5b | Move file pointer (See above)
2018-12-25T12:41:53.107917601Z 64 PC: 12ff7 | Write file or device (See above)
2018-12-25T12:41:53.124954525Z 87 PC: 12c6b | Get or set file date and time (See above)
2018-12-25T12:41:53.127340671Z 62 PC: 12c6f | Close file (See above)
2018-12-25T12:41:53.136234488Z 67 PC: 12c7c | Get or set file attributes (See above)
2018-12-25T12:41:53.147710537Z 26 PC: 12beb | Set disk transfer address (See above)
2018-12-25T12:41:53.150629727Z 26 PC: 12bae | Set disk transfer address (See above)
2018-12-25T12:41:53.152431984Z 59 PC: 12b52 | Change current directory (See above)
2018-12-25T12:41:53.154966889Z 71 PC: 12b40 | Get current directory (See above)
2018-12-25T12:41:53.159616834Z 59 PC: 12b48 | Change current directory (See above)
2018-12-25T12:41:53.165066187Z 47 PC: 12b5d | Get disk transfer address (See above)
2018-12-25T12:41:53.166847502Z 26 PC: 12b6b | Set disk transfer address (See above)
2018-12-25T12:41:53.169335429Z 78 PC: 12b76 | Find first file (See above)
2018-12-25T12:41:53.182124875Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.185419981Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.188947907Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.194052262Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.197291246Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.200555243Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.204985487Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.208374292Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.211596049Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.215417881Z 47 PC: 12bc2 | Get disk transfer address (See above)
2018-12-25T12:41:53.21747424Z 26 PC: 12bd1 | Set disk transfer address (See above)
2018-12-25T12:41:53.219076961Z 78 PC: 12bd9 | Find first file (See above)
2018-12-25T12:41:53.226779807Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:53.228758848Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:53.236410534Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:53.244147826Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:53.246961224Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:53.249356897Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:53.25272986Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:53.255367973Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:53.26303471Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:53.270869339Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:53.273626715Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:53.276337876Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:53.279680342Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:53.28211792Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:53.290065478Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:53.297437132Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:53.299553427Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:53.302765321Z 67 PC: 12c42 | Get or set file attributes (See above)
2018-12-25T12:41:53.314221398Z 61 PC: 12c47 | Open file (See above)
2018-12-25T12:41:53.321952974Z 64 PC: 12c53 | Write file or device (See above)
2018-12-25T12:41:53.326440241Z 66 PC: 12c5b | Move file pointer (See above)
2018-12-25T12:41:53.32958205Z 64 PC: 12ff7 | Write file or device (See above)
2018-12-25T12:41:53.340551938Z 87 PC: 12c6b | Get or set file date and time (See above)
2018-12-25T12:41:53.343406305Z 62 PC: 12c6f | Close file (See above)
2018-12-25T12:41:53.352630827Z 67 PC: 12c7c | Get or set file attributes (See above)
2018-12-25T12:41:53.363866972Z 26 PC: 12beb | Set disk transfer address (See above)
2018-12-25T12:41:53.366243751Z 26 PC: 12bae | Set disk transfer address (See above)
2018-12-25T12:41:53.368189145Z 59 PC: 12b52 | Change current directory (See above)
2018-12-25T12:41:53.370557837Z 71 PC: 12b40 | Get current directory (See above)
2018-12-25T12:41:53.374298549Z 59 PC: 12b48 | Change current directory (See above)
2018-12-25T12:41:53.379999323Z 47 PC: 12b5d | Get disk transfer address (See above)
2018-12-25T12:41:53.3813258Z 26 PC: 12b6b | Set disk transfer address (See above)
2018-12-25T12:41:53.382829989Z 78 PC: 12b76 | Find first file (See above)
2018-12-25T12:41:53.396044098Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.399996033Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.403096281Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.407011555Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.410441976Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.413468757Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.417121947Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.420320994Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.423225548Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.426653247Z 47 PC: 12bc2 | Get disk transfer address (See above)
2018-12-25T12:41:53.428487209Z 26 PC: 12bd1 | Set disk transfer address (See above)
2018-12-25T12:41:53.430010578Z 78 PC: 12bd9 | Find first file (See above)
2018-12-25T12:41:53.437539699Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:53.4394073Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:53.446959656Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:53.454548658Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:53.457240147Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:53.459522159Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:53.46276696Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:53.465357059Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:53.473666986Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:53.481023467Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:53.483984308Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:53.486334182Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:53.490383001Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:53.49298086Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:53.500606561Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:53.507953668Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:53.510655741Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:53.513276217Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:53.516602832Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:53.519066514Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:53.526968797Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:53.534328804Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:53.536997196Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:53.540455129Z 67 PC: 12c42 | Get or set file attributes (See above)
2018-12-25T12:41:53.551754374Z 61 PC: 12c47 | Open file (See above)
2018-12-25T12:41:53.560228271Z 64 PC: 12c53 | Write file or device (See above)
2018-12-25T12:41:53.563983071Z 66 PC: 12c5b | Move file pointer (See above)
2018-12-25T12:41:53.567043075Z 64 PC: 12ff7 | Write file or device (See above)
2018-12-25T12:41:53.578163912Z 87 PC: 12c6b | Get or set file date and time (See above)
2018-12-25T12:41:53.581125086Z 62 PC: 12c6f | Close file (See above)
2018-12-25T12:41:53.590179354Z 67 PC: 12c7c | Get or set file attributes (See above)
2018-12-25T12:41:53.601367666Z 26 PC: 12beb | Set disk transfer address (See above)
2018-12-25T12:41:53.604851798Z 26 PC: 12bae | Set disk transfer address (See above)
2018-12-25T12:41:53.606453267Z 59 PC: 12b52 | Change current directory (See above)
2018-12-25T12:41:53.608858263Z 71 PC: 12b40 | Get current directory (See above)
2018-12-25T12:41:53.613562827Z 59 PC: 12b48 | Change current directory (See above)
2018-12-25T12:41:53.618445313Z 47 PC: 12b5d | Get disk transfer address (See above)
2018-12-25T12:41:53.61986304Z 26 PC: 12b6b | Set disk transfer address (See above)
2018-12-25T12:41:53.621929406Z 78 PC: 12b76 | Find first file (See above)
2018-12-25T12:41:53.628827925Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.631904157Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.635872992Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.639312165Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.642433636Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.646340609Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.649733317Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.652811116Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.657088929Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.660252509Z 47 PC: 12bc2 | Get disk transfer address (See above)
2018-12-25T12:41:53.661789881Z 26 PC: 12bd1 | Set disk transfer address (See above)
2018-12-25T12:41:53.664069027Z 78 PC: 12bd9 | Find first file (See above)
2018-12-25T12:41:53.671193474Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:53.672757218Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:53.681234877Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:53.685243221Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:53.687106661Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:53.689408016Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:53.69374737Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:53.695410065Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:53.703036314Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:53.707342488Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:53.709281315Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:53.711646258Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:53.716030209Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:53.717662041Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:53.725257927Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:53.729345213Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:53.731602077Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:53.733963616Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:53.738483773Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:53.740420442Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:53.748833609Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:53.757110741Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:53.759376648Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:53.761761098Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:53.765854191Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:53.767803054Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:53.775451565Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:53.78313074Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:53.785946478Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:53.788317523Z 67 PC: 12c42 | Get or set file attributes (See above)
2018-12-25T12:41:53.799628526Z 61 PC: 12c47 | Open file (See above)
2018-12-25T12:41:53.808436319Z 64 PC: 12c53 | Write file or device (See above)
2018-12-25T12:41:53.811913965Z 66 PC: 12c5b | Move file pointer (See above)
2018-12-25T12:41:53.815065064Z 64 PC: 12ff7 | Write file or device (See above)
2018-12-25T12:41:53.827135179Z 87 PC: 12c6b | Get or set file date and time (See above)
2018-12-25T12:41:53.833124409Z 62 PC: 12c6f | Close file (See above)
2018-12-25T12:41:53.852454424Z 67 PC: 12c7c | Get or set file attributes (See above)
2018-12-25T12:41:53.864692296Z 26 PC: 12beb | Set disk transfer address (See above)
2018-12-25T12:41:53.866044501Z 26 PC: 12bae | Set disk transfer address (See above)
2018-12-25T12:41:53.867405995Z 59 PC: 12b52 | Change current directory (See above)
2018-12-25T12:41:53.870333845Z 42 PC: 12a86 | Get date 0x12a86: cmp dh, 2
0x12a89: jb 0x12a9b
0x12a8b: cmp dl, 0xc
0x12a8e: jb 0x12a9b
0x12a90: mov ah, 0x2c
0x12a92: int 0x21
0x12a94: cmp dl, 0xa
0x12a97: ja 0x12a9b
0x12a99: jmp 0x12ab1
0x12a9b: pop dx
0x12a9c: mov ah, 0x1a
0x12a9e: int 0x21
0x12aa0: mov sp, bp
0x12aa2: xor ax, ax
0x12aa4: mov bx, ax
0x12aa6: mov cx, ax
0x12aa8: mov dx, ax
0x12aaa: mov si, ax
0x12aac: mov di, ax
0x12aae: mov bp, ax
2018-12-25T12:41:53.872684611Z 26 PC: 12aa0 | Set disk transfer address

{"DateBased":true,"Day":1,"Month":2,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":14869,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:41:52.993740668Z 47 PC: 12a6b | Get disk transfer address
2018-12-25T12:41:52.99785302Z 26 PC: 12a73 | Set disk transfer address
2018-12-25T12:41:53.000476688Z 71 PC: 12b40 | Get current directory
2018-12-25T12:41:53.006439079Z 59 PC: 12b48 | Change current directory
2018-12-25T12:41:53.0155601Z 47 PC: 12b5d | Get disk transfer address
2018-12-25T12:41:53.021429167Z 26 PC: 12b6b | Set disk transfer address
2018-12-25T12:41:53.022684768Z 78 PC: 12b76 | Find first file
2018-12-25T12:41:53.039545758Z 79 PC: 12b9e | Find next file
2018-12-25T12:41:53.048794905Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.053109256Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.056636903Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.060740135Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.063459065Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.066062361Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.069827741Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.072857403Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.075604214Z 47 PC: 12bc2 | Get disk transfer address
2018-12-25T12:41:53.077344757Z 26 PC: 12bd1 | Set disk transfer address
2018-12-25T12:41:53.08029656Z 78 PC: 12bd9 | Find first file
2018-12-25T12:41:53.087093828Z 47 PC: 12bf1 | Get disk transfer address
2018-12-25T12:41:53.08840531Z 61 PC: 12c09 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:41:53.095521079Z 63 PC: 12c15 | Read file or device (Read 3 bytes on handle 5)
2018-12-25T12:41:53.102395904Z 66 PC: 12c1d | Move file pointer
2018-12-25T12:41:53.104136437Z 62 PC: 12c22 | Close file
2018-12-25T12:41:53.10738682Z 67 PC: 12c42 | Get or set file attributes
2018-12-25T12:41:53.125059316Z 61 PC: 12c47 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:41:53.130234605Z 64 PC: 12c53 | Write file or device (Write 3 bytes on handle 5)
2018-12-25T12:41:53.133884702Z 66 PC: 12c5b | Move file pointer
2018-12-25T12:41:53.136680834Z 64 PC: 12ff7 | Write file or device (Write 1440 bytes on handle 5)
2018-12-25T12:41:53.147157482Z 87 PC: 12c6b | Get or set file date and time
2018-12-25T12:41:53.150134063Z 62 PC: 12c6f | Close file
2018-12-25T12:41:53.15889423Z 67 PC: 12c7c | Get or set file attributes
2018-12-25T12:41:53.170045206Z 26 PC: 12beb | Set disk transfer address
2018-12-25T12:41:53.172689175Z 26 PC: 12bae | Set disk transfer address
2018-12-25T12:41:53.190228062Z 59 PC: 12b52 | Change current directory
2018-12-25T12:41:53.192412195Z 71 PC: 12b40 | Get current directory (See above)
2018-12-25T12:41:53.196258183Z 59 PC: 12b48 | Change current directory (See above)
2018-12-25T12:41:53.212671854Z 47 PC: 12b5d | Get disk transfer address (See above)
2018-12-25T12:41:53.214104671Z 26 PC: 12b6b | Set disk transfer address (See above)
2018-12-25T12:41:53.215746872Z 78 PC: 12b76 | Find first file (See above)
2018-12-25T12:41:53.223482962Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.236638761Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.239577635Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.243762304Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.246903587Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.250065058Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.25552177Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.258685232Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.262002549Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.265716723Z 47 PC: 12bc2 | Get disk transfer address (See above)
2018-12-25T12:41:53.267568711Z 26 PC: 12bd1 | Set disk transfer address (See above)
2018-12-25T12:41:53.26934942Z 78 PC: 12bd9 | Find first file (See above)
2018-12-25T12:41:53.276231267Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:53.278386045Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:53.286898418Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:53.295512972Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:53.298497458Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:53.301267653Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:53.305073405Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:53.307875103Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:53.316613418Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:53.324413083Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:53.327850168Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:53.333531892Z 67 PC: 12c42 | Get or set file attributes (See above)
2018-12-25T12:41:53.360884655Z 61 PC: 12c47 | Open file (See above)
2018-12-25T12:41:53.374667298Z 64 PC: 12c53 | Write file or device (See above)
2018-12-25T12:41:53.383301873Z 66 PC: 12c5b | Move file pointer (See above)
2018-12-25T12:41:53.397103516Z 64 PC: 12ff7 | Write file or device (See above)
2018-12-25T12:41:53.408596276Z 87 PC: 12c6b | Get or set file date and time (See above)
2018-12-25T12:41:53.411051604Z 62 PC: 12c6f | Close file (See above)
2018-12-25T12:41:53.42055108Z 67 PC: 12c7c | Get or set file attributes (See above)
2018-12-25T12:41:53.43270414Z 26 PC: 12beb | Set disk transfer address (See above)
2018-12-25T12:41:53.435264054Z 26 PC: 12bae | Set disk transfer address (See above)
2018-12-25T12:41:53.436968709Z 59 PC: 12b52 | Change current directory (See above)
2018-12-25T12:41:53.439445503Z 71 PC: 12b40 | Get current directory (See above)
2018-12-25T12:41:53.44411656Z 59 PC: 12b48 | Change current directory (See above)
2018-12-25T12:41:53.449034077Z 47 PC: 12b5d | Get disk transfer address (See above)
2018-12-25T12:41:53.45075304Z 26 PC: 12b6b | Set disk transfer address (See above)
2018-12-25T12:41:53.453309476Z 78 PC: 12b76 | Find first file (See above)
2018-12-25T12:41:53.461933896Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.46519405Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.469256485Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.472816269Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.476068357Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.47949462Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.483530468Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.486700823Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.489862589Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.493791202Z 47 PC: 12bc2 | Get disk transfer address (See above)
2018-12-25T12:41:53.495439816Z 26 PC: 12bd1 | Set disk transfer address (See above)
2018-12-25T12:41:53.497093112Z 78 PC: 12bd9 | Find first file (See above)
2018-12-25T12:41:53.504787831Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:53.506717566Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:53.514789043Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:53.518790727Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:53.521034297Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:53.523612626Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:53.527714257Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:53.529566123Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:53.537189918Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:53.545265165Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:53.547642042Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:53.550031007Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:53.553497569Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:53.555466091Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:53.563082806Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:53.570438349Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:53.572637088Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:53.575015959Z 67 PC: 12c42 | Get or set file attributes (See above)
2018-12-25T12:41:53.590989032Z 61 PC: 12c47 | Open file (See above)
2018-12-25T12:41:53.600658945Z 64 PC: 12c53 | Write file or device (See above)
2018-12-25T12:41:53.604759778Z 66 PC: 12c5b | Move file pointer (See above)
2018-12-25T12:41:53.608402917Z 64 PC: 12ff7 | Write file or device (See above)
2018-12-25T12:41:53.619871102Z 87 PC: 12c6b | Get or set file date and time (See above)
2018-12-25T12:41:53.62172226Z 62 PC: 12c6f | Close file (See above)
2018-12-25T12:41:53.630844173Z 67 PC: 12c7c | Get or set file attributes (See above)
2018-12-25T12:41:53.643422154Z 26 PC: 12beb | Set disk transfer address (See above)
2018-12-25T12:41:53.645410038Z 26 PC: 12bae | Set disk transfer address (See above)
2018-12-25T12:41:53.647155295Z 59 PC: 12b52 | Change current directory (See above)
2018-12-25T12:41:53.64974344Z 71 PC: 12b40 | Get current directory (See above)
2018-12-25T12:41:53.654190534Z 59 PC: 12b48 | Change current directory (See above)
2018-12-25T12:41:53.659072022Z 47 PC: 12b5d | Get disk transfer address (See above)
2018-12-25T12:41:53.661626199Z 26 PC: 12b6b | Set disk transfer address (See above)
2018-12-25T12:41:53.664309635Z 78 PC: 12b76 | Find first file (See above)
2018-12-25T12:41:53.671346942Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.674598109Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.678663286Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.682225418Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.685448957Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.693820646Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.697403281Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.700608767Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.704587684Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.707848656Z 47 PC: 12bc2 | Get disk transfer address (See above)
2018-12-25T12:41:53.709528256Z 26 PC: 12bd1 | Set disk transfer address (See above)
2018-12-25T12:41:53.711371082Z 78 PC: 12bd9 | Find first file (See above)
2018-12-25T12:41:53.71874214Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:53.720438449Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:53.728109498Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:53.732886455Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:53.734836576Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:53.737276079Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:53.741130574Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:53.742831409Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:53.750513062Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:53.754220727Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:53.75620185Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:53.758672707Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:53.762922631Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:53.764552413Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:53.772613681Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:53.781097357Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:53.78310175Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:53.785544249Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:53.78941201Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:53.79112758Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:53.798627336Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:53.807322878Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:53.80936326Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:53.811808585Z 67 PC: 12c42 | Get or set file attributes (See above)
2018-12-25T12:41:53.82418411Z 61 PC: 12c47 | Open file (See above)
2018-12-25T12:41:53.832030372Z 64 PC: 12c53 | Write file or device (See above)
2018-12-25T12:41:53.835409784Z 66 PC: 12c5b | Move file pointer (See above)
2018-12-25T12:41:53.839205234Z 64 PC: 12ff7 | Write file or device (See above)
2018-12-25T12:41:53.85036743Z 87 PC: 12c6b | Get or set file date and time (See above)
2018-12-25T12:41:53.860607339Z 62 PC: 12c6f | Close file (See above)
2018-12-25T12:41:53.881339242Z 67 PC: 12c7c | Get or set file attributes (See above)
2018-12-25T12:41:53.889392929Z 26 PC: 12beb | Set disk transfer address (See above)
2018-12-25T12:41:53.890488556Z 26 PC: 12bae | Set disk transfer address (See above)
2018-12-25T12:41:53.892967642Z 59 PC: 12b52 | Change current directory (See above)
2018-12-25T12:41:53.894616797Z 71 PC: 12b40 | Get current directory (See above)
2018-12-25T12:41:53.898230167Z 59 PC: 12b48 | Change current directory (See above)
2018-12-25T12:41:53.903654385Z 47 PC: 12b5d | Get disk transfer address (See above)
2018-12-25T12:41:53.905812457Z 26 PC: 12b6b | Set disk transfer address (See above)
2018-12-25T12:41:53.907057009Z 78 PC: 12b76 | Find first file (See above)
2018-12-25T12:41:53.914082354Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.918067656Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.922428771Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.925598731Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.928834456Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.931648715Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.934514511Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.938526758Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.94122725Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.943613494Z 47 PC: 12bc2 | Get disk transfer address (See above)
2018-12-25T12:41:53.945347715Z 26 PC: 12bd1 | Set disk transfer address (See above)
2018-12-25T12:41:53.946217182Z 78 PC: 12bd9 | Find first file (See above)
2018-12-25T12:41:53.952373086Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:53.954008981Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:53.960904276Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:53.96351172Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:53.965414388Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:53.967222641Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:53.969950042Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:53.971506407Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:53.97846583Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:53.981277993Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:53.983812124Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:53.985843495Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:53.988786955Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:53.991311452Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:54.001276497Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:54.004438671Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:54.007616632Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:54.01018108Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:54.01358608Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:54.015919635Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:54.023214038Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:54.030920721Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:54.033056373Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:54.035031065Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:54.038203879Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:54.040816449Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:54.048136303Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:54.055300031Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:54.057872104Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:54.060466568Z 67 PC: 12c42 | Get or set file attributes (See above)
2018-12-25T12:41:54.071401735Z 61 PC: 12c47 | Open file (See above)
2018-12-25T12:41:54.080363165Z 64 PC: 12c53 | Write file or device (See above)
2018-12-25T12:41:54.0847013Z 66 PC: 12c5b | Move file pointer (See above)
2018-12-25T12:41:54.087612453Z 64 PC: 12ff7 | Write file or device (See above)
2018-12-25T12:41:54.099325545Z 87 PC: 12c6b | Get or set file date and time (See above)
2018-12-25T12:41:54.101797356Z 62 PC: 12c6f | Close file (See above)
2018-12-25T12:41:54.111937142Z 67 PC: 12c7c | Get or set file attributes (See above)
2018-12-25T12:41:54.124986794Z 26 PC: 12beb | Set disk transfer address (See above)
2018-12-25T12:41:54.127141268Z 26 PC: 12bae | Set disk transfer address (See above)
2018-12-25T12:41:54.128547525Z 59 PC: 12b52 | Change current directory (See above)
2018-12-25T12:41:54.130610297Z 42 PC: 12a86 | Get date 0x12a86: cmp dh, 2
0x12a89: jb 0x12a9b
0x12a8b: cmp dl, 0xc
0x12a8e: jb 0x12a9b
0x12a90: mov ah, 0x2c
0x12a92: int 0x21
0x12a94: cmp dl, 0xa
0x12a97: ja 0x12a9b
0x12a99: jmp 0x12ab1
0x12a9b: pop dx
0x12a9c: mov ah, 0x1a
0x12a9e: int 0x21
0x12aa0: mov sp, bp
0x12aa2: xor ax, ax
0x12aa4: mov bx, ax
0x12aa6: mov cx, ax
0x12aa8: mov dx, ax
0x12aaa: mov si, ax
0x12aac: mov di, ax
0x12aae: mov bp, ax
2018-12-25T12:41:54.134647396Z 26 PC: 12aa0 | Set disk transfer address

{"DateBased":true,"Day":12,"Month":2,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":14869,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:41:53.57510587Z 47 PC: 12a6b | Get disk transfer address
2018-12-25T12:41:53.577395163Z 26 PC: 12a73 | Set disk transfer address
2018-12-25T12:41:53.58060884Z 71 PC: 12b40 | Get current directory
2018-12-25T12:41:53.584735775Z 59 PC: 12b48 | Change current directory
2018-12-25T12:41:53.589436937Z 47 PC: 12b5d | Get disk transfer address
2018-12-25T12:41:53.590764179Z 26 PC: 12b6b | Set disk transfer address
2018-12-25T12:41:53.591769291Z 78 PC: 12b76 | Find first file
2018-12-25T12:41:53.59791934Z 79 PC: 12b9e | Find next file
2018-12-25T12:41:53.60109067Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.603865975Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.606857632Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.609947512Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.61260805Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.615140638Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.61881967Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.621454841Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.623886401Z 47 PC: 12bc2 | Get disk transfer address
2018-12-25T12:41:53.626146673Z 26 PC: 12bd1 | Set disk transfer address
2018-12-25T12:41:53.627464706Z 78 PC: 12bd9 | Find first file
2018-12-25T12:41:53.633675072Z 47 PC: 12bf1 | Get disk transfer address
2018-12-25T12:41:53.635726957Z 61 PC: 12c09 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:41:53.642263209Z 63 PC: 12c15 | Read file or device (Read 3 bytes on handle 5)
2018-12-25T12:41:53.64849769Z 66 PC: 12c1d | Move file pointer
2018-12-25T12:41:53.650492937Z 62 PC: 12c22 | Close file
2018-12-25T12:41:53.652352174Z 67 PC: 12c42 | Get or set file attributes
2018-12-25T12:41:53.673004831Z 61 PC: 12c47 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:41:53.680049388Z 64 PC: 12c53 | Write file or device (Write 3 bytes on handle 5)
2018-12-25T12:41:53.684173258Z 66 PC: 12c5b | Move file pointer
2018-12-25T12:41:53.686551742Z 64 PC: 12ff7 | Write file or device (Write 1440 bytes on handle 5)
2018-12-25T12:41:53.695809314Z 87 PC: 12c6b | Get or set file date and time
2018-12-25T12:41:53.697883597Z 62 PC: 12c6f | Close file
2018-12-25T12:41:53.709266133Z 67 PC: 12c7c | Get or set file attributes
2018-12-25T12:41:53.719204222Z 26 PC: 12beb | Set disk transfer address
2018-12-25T12:41:53.720986084Z 26 PC: 12bae | Set disk transfer address
2018-12-25T12:41:53.722074081Z 59 PC: 12b52 | Change current directory
2018-12-25T12:41:53.723816497Z 71 PC: 12b40 | Get current directory (See above)
2018-12-25T12:41:53.729317725Z 59 PC: 12b48 | Change current directory (See above)
2018-12-25T12:41:53.738254313Z 47 PC: 12b5d | Get disk transfer address (See above)
2018-12-25T12:41:53.739411918Z 26 PC: 12b6b | Set disk transfer address (See above)
2018-12-25T12:41:53.741290943Z 78 PC: 12b76 | Find first file (See above)
2018-12-25T12:41:53.749909338Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.75264772Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.756170266Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.759053524Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.761860618Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.76533053Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.767800495Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.77019204Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.773334725Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.775450866Z 47 PC: 12bc2 | Get disk transfer address (See above)
2018-12-25T12:41:53.776413523Z 26 PC: 12bd1 | Set disk transfer address (See above)
2018-12-25T12:41:53.778101717Z 78 PC: 12bd9 | Find first file (See above)
2018-12-25T12:41:53.783965578Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:53.785074009Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:53.791914485Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:53.798153298Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:53.799484516Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:53.801933857Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:53.804523087Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:53.805597384Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:53.813906246Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:53.82033074Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:53.821970783Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:53.824567926Z 67 PC: 12c42 | Get or set file attributes (See above)
2018-12-25T12:41:53.834210452Z 61 PC: 12c47 | Open file (See above)
2018-12-25T12:41:53.84052549Z 64 PC: 12c53 | Write file or device (See above)
2018-12-25T12:41:53.843675545Z 66 PC: 12c5b | Move file pointer (See above)
2018-12-25T12:41:53.845971015Z 64 PC: 12ff7 | Write file or device (See above)
2018-12-25T12:41:53.854715161Z 87 PC: 12c6b | Get or set file date and time (See above)
2018-12-25T12:41:53.856568325Z 62 PC: 12c6f | Close file (See above)
2018-12-25T12:41:53.863864177Z 67 PC: 12c7c | Get or set file attributes (See above)
2018-12-25T12:41:53.874364997Z 26 PC: 12beb | Set disk transfer address (See above)
2018-12-25T12:41:53.875763214Z 26 PC: 12bae | Set disk transfer address (See above)
2018-12-25T12:41:53.876706823Z 59 PC: 12b52 | Change current directory (See above)
2018-12-25T12:41:53.878400454Z 71 PC: 12b40 | Get current directory (See above)
2018-12-25T12:41:53.881548779Z 59 PC: 12b48 | Change current directory (See above)
2018-12-25T12:41:53.885330309Z 47 PC: 12b5d | Get disk transfer address (See above)
2018-12-25T12:41:53.88630697Z 26 PC: 12b6b | Set disk transfer address (See above)
2018-12-25T12:41:53.888351369Z 78 PC: 12b76 | Find first file (See above)
2018-12-25T12:41:53.894102904Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.896456017Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.899228259Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.902019184Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.904740219Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.907608511Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.910334283Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.912707621Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.915455867Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:53.917981999Z 47 PC: 12bc2 | Get disk transfer address (See above)
2018-12-25T12:41:53.918925956Z 26 PC: 12bd1 | Set disk transfer address (See above)
2018-12-25T12:41:53.920071738Z 78 PC: 12bd9 | Find first file (See above)
2018-12-25T12:41:53.926148507Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:53.927165244Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:53.938054078Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:53.944794806Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:53.94586079Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:53.947167108Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:53.949691657Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:53.950617963Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:53.954666519Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:53.959036472Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:53.960109809Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:53.961400113Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:53.963929743Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:53.965052815Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:53.969274314Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:53.974127943Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:53.975180447Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:53.97636658Z 67 PC: 12c42 | Get or set file attributes (See above)
2018-12-25T12:41:53.983141501Z 61 PC: 12c47 | Open file (See above)
2018-12-25T12:41:53.987315879Z 64 PC: 12c53 | Write file or device (See above)
2018-12-25T12:41:53.989305466Z 66 PC: 12c5b | Move file pointer (See above)
2018-12-25T12:41:53.99139036Z 64 PC: 12ff7 | Write file or device (See above)
2018-12-25T12:41:53.996990256Z 87 PC: 12c6b | Get or set file date and time (See above)
2018-12-25T12:41:53.998087514Z 62 PC: 12c6f | Close file (See above)
2018-12-25T12:41:54.003538614Z 67 PC: 12c7c | Get or set file attributes (See above)
2018-12-25T12:41:54.014226464Z 26 PC: 12beb | Set disk transfer address (See above)
2018-12-25T12:41:54.015304432Z 26 PC: 12bae | Set disk transfer address (See above)
2018-12-25T12:41:54.017124654Z 59 PC: 12b52 | Change current directory (See above)
2018-12-25T12:41:54.018974492Z 71 PC: 12b40 | Get current directory (See above)
2018-12-25T12:41:54.021761049Z 59 PC: 12b48 | Change current directory (See above)
2018-12-25T12:41:54.026548152Z 47 PC: 12b5d | Get disk transfer address (See above)
2018-12-25T12:41:54.027595791Z 26 PC: 12b6b | Set disk transfer address (See above)
2018-12-25T12:41:54.028597346Z 78 PC: 12b76 | Find first file (See above)
2018-12-25T12:41:54.034924359Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:54.0371144Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:54.039284248Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:54.042085427Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:54.044303186Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:54.046454806Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:54.049651193Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:54.05227488Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:54.05478819Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:54.057426308Z 47 PC: 12bc2 | Get disk transfer address (See above)
2018-12-25T12:41:54.058448309Z 26 PC: 12bd1 | Set disk transfer address (See above)
2018-12-25T12:41:54.059498428Z 78 PC: 12bd9 | Find first file (See above)
2018-12-25T12:41:54.065619582Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:54.066683025Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:54.077669326Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:54.084743346Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:54.086024043Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:54.087962044Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:54.09115811Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:54.092461699Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:54.09904347Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:54.106394419Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:54.10809302Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:54.11015253Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:54.112643078Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:54.113740426Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:54.120006215Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:54.126695915Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:54.1279764Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:54.129926979Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:54.13322459Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:54.134219534Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:54.140466686Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:54.147155393Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:54.148430876Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:54.149992222Z 67 PC: 12c42 | Get or set file attributes (See above)
2018-12-25T12:41:54.160808254Z 61 PC: 12c47 | Open file (See above)
2018-12-25T12:41:54.167384035Z 64 PC: 12c53 | Write file or device (See above)
2018-12-25T12:41:54.170103772Z 66 PC: 12c5b | Move file pointer (See above)
2018-12-25T12:41:54.173810177Z 64 PC: 12ff7 | Write file or device (See above)
2018-12-25T12:41:54.180873588Z 87 PC: 12c6b | Get or set file date and time (See above)
2018-12-25T12:41:54.182169399Z 62 PC: 12c6f | Close file (See above)
2018-12-25T12:41:54.187881341Z 67 PC: 12c7c | Get or set file attributes (See above)
2018-12-25T12:41:54.195600534Z 26 PC: 12beb | Set disk transfer address (See above)
2018-12-25T12:41:54.196593929Z 26 PC: 12bae | Set disk transfer address (See above)
2018-12-25T12:41:54.198268725Z 59 PC: 12b52 | Change current directory (See above)
2018-12-25T12:41:54.199782511Z 71 PC: 12b40 | Get current directory (See above)
2018-12-25T12:41:54.202080064Z 59 PC: 12b48 | Change current directory (See above)
2018-12-25T12:41:54.209031075Z 47 PC: 12b5d | Get disk transfer address (See above)
2018-12-25T12:41:54.210167997Z 26 PC: 12b6b | Set disk transfer address (See above)
2018-12-25T12:41:54.210935051Z 78 PC: 12b76 | Find first file (See above)
2018-12-25T12:41:54.218439679Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:54.221533229Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:54.223941354Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:54.227280867Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:54.230044668Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:54.232370426Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:54.235126421Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:54.237432801Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:54.239794257Z 79 PC: 12b9e | Find next file (See above)
2018-12-25T12:41:54.242542919Z 47 PC: 12bc2 | Get disk transfer address (See above)
2018-12-25T12:41:54.243721272Z 26 PC: 12bd1 | Set disk transfer address (See above)
2018-12-25T12:41:54.244980408Z 78 PC: 12bd9 | Find first file (See above)
2018-12-25T12:41:54.251183532Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:54.252332329Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:54.258667045Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:54.265845395Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:54.267339009Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:54.269140037Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:54.272224309Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:54.273390505Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:54.279848052Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:54.287862058Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:54.289883243Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:54.291609608Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:54.295198487Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:54.296232702Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:54.302725642Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:54.309977608Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:54.312938853Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:54.314945962Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:54.318902536Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:54.320255134Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:54.326814073Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:54.333978457Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:54.335456719Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:54.337300496Z 79 PC: 12bd9 | Find next file (See above)
2018-12-25T12:41:54.340666583Z 47 PC: 12bf1 | Get disk transfer address (See above)
2018-12-25T12:41:54.341769618Z 61 PC: 12c09 | Open file (See above)
2018-12-25T12:41:54.348119057Z 63 PC: 12c15 | Read file or device (See above)
2018-12-25T12:41:54.354718825Z 66 PC: 12c1d | Move file pointer (See above)
2018-12-25T12:41:54.35596708Z 62 PC: 12c22 | Close file (See above)
2018-12-25T12:41:54.358543697Z 67 PC: 12c42 | Get or set file attributes (See above)
2018-12-25T12:41:54.368463925Z 61 PC: 12c47 | Open file (See above)
2018-12-25T12:41:54.374803777Z 64 PC: 12c53 | Write file or device (See above)
2018-12-25T12:41:54.37771641Z 66 PC: 12c5b | Move file pointer (See above)
2018-12-25T12:41:54.380669106Z 64 PC: 12ff7 | Write file or device (See above)
2018-12-25T12:41:54.389519834Z 87 PC: 12c6b | Get or set file date and time (See above)
2018-12-25T12:41:54.391190204Z 62 PC: 12c6f | Close file (See above)
2018-12-25T12:41:54.398932905Z 67 PC: 12c7c | Get or set file attributes (See above)
2018-12-25T12:41:54.408253153Z 26 PC: 12beb | Set disk transfer address (See above)
2018-12-25T12:41:54.409525236Z 26 PC: 12bae | Set disk transfer address (See above)
2018-12-25T12:41:54.410935187Z 59 PC: 12b52 | Change current directory (See above)
2018-12-25T12:41:54.412678361Z 42 PC: 12a86 | Get date 0x12a86: cmp dh, 2
0x12a89: jb 0x12a9b
0x12a8b: cmp dl, 0xc
0x12a8e: jb 0x12a9b
0x12a90: mov ah, 0x2c
0x12a92: int 0x21
0x12a94: cmp dl, 0xa
0x12a97: ja 0x12a9b
0x12a99: jmp 0x12ab1
0x12a9b: pop dx
0x12a9c: mov ah, 0x1a
0x12a9e: int 0x21
0x12aa0: mov sp, bp
0x12aa2: xor ax, ax
0x12aa4: mov bx, ax
0x12aa6: mov cx, ax
0x12aa8: mov dx, ax
0x12aaa: mov si, ax
0x12aac: mov di, ax
0x12aae: mov bp, ax
2018-12-25T12:41:54.415346836Z 44 PC: 12a94 | Get time 0x12a94: cmp dl, 0xa
0x12a97: ja 0x12a9b
0x12a99: jmp 0x12ab1
0x12a9b: pop dx
0x12a9c: mov ah, 0x1a
0x12a9e: int 0x21
0x12aa0: mov sp, bp
0x12aa2: xor ax, ax
0x12aa4: mov bx, ax
0x12aa6: mov cx, ax
0x12aa8: mov dx, ax
0x12aaa: mov si, ax
0x12aac: mov di, ax
0x12aae: mov bp, ax
0x12ab0: ret
0x12ab1: mov ah, 0xf
0x12ab3: int 0x10
0x12ab5: xor ah, ah
0x12ab7: int 0x10
0x12ab9: lea si, word ptr [di + 0x349]
2018-12-25T12:41:54.417344828Z 26 PC: 12aa0 | Set disk transfer address