Sample viewer

vx.netlux.org/Virus.DOS.Kalunu.1245

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:06:07.44574563Z 26 PC: 12be9 | Set disk transfer address
2018-12-17T23:06:07.447418229Z 53 PC: 12bef | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:06:07.451361024Z 37 PC: 12c03 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:06:07.452776694Z 42 PC: 12c07 | Get date 0x12c07: cmp dl, 0xa
0x12c0a: jne 0x12c0f
0x12c0c: jmp 0x12d48
0x12c0f: mov ah, 0x4e
0x12c11: lea dx, word ptr [bp + 0x5d3]
0x12c15: mov cx, 7
0x12c18: int 0x21
0x12c1a: jae 0x12c1f
0x12c1c: jmp 0x12ced
0x12c1f: push ax
0x12c20: push cx
0x12c21: push di
0x12c22: push es
0x12c23: push ds
0x12c24: pop es
0x12c25: lea dx, word ptr [bp + 0x5fb]
0x12c29: mov di, dx
0x12c2b: mov cx, 0x40
0x12c2e: mov al, 0x2e
0x12c30: repne scasb al, byte ptr es:[di]
2018-12-17T23:06:07.455311767Z 78 PC: 12c1a | Find first file
2018-12-17T23:06:07.462641828Z 67 PC: 12fa9 | Get or set file attributes
2018-12-17T23:06:07.469044789Z 67 PC: 12fb9 | Get or set file attributes
2018-12-17T23:06:07.485892414Z 61 PC: 12fc2 | Open file (Filename = 'SLEEP.COM')
2018-12-17T23:06:07.493659547Z 87 PC: 12fc8 | Get or set file date and time
2018-12-17T23:06:07.495285258Z 63 PC: 12cbd | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:06:07.502951435Z 66 PC: 12f9f | Move file pointer
2018-12-17T23:06:07.505022368Z 66 PC: 12f9f | Move file pointer
2018-12-17T23:06:07.506524211Z 64 PC: 12cdf | Write file or device (Write 3 bytes on handle 5)
2018-12-17T23:06:07.509402912Z 66 PC: 12f9f | Move file pointer
2018-12-17T23:06:07.512007122Z 64 PC: 12f09 | Write file or device (Write 1245 bytes on handle 5)
2018-12-17T23:06:07.522193806Z 87 PC: 12ff7 | Get or set file date and time
2018-12-17T23:06:07.523794572Z 62 PC: 12ffb | Close file
2018-12-17T23:06:07.532863288Z 67 PC: 13009 | Get or set file attributes
2018-12-17T23:06:07.544022438Z 79 PC: 12c1a | Find next file
2018-12-17T23:06:07.547301475Z 67 PC: 12ea8 | Get or set file attributes
2018-12-17T23:06:07.554256882Z 65 PC: 12eac | Delete file (Filename = 'ANTI-VIR.DAT')
2018-12-17T23:06:07.561657902Z 67 PC: 12ea8 | Get or set file attributes
2018-12-17T23:06:07.567903675Z 65 PC: 12eac | Delete file (Filename = 'CHKLIST.MS')
2018-12-17T23:06:07.574372918Z 67 PC: 12ea8 | Get or set file attributes
2018-12-17T23:06:07.580559699Z 65 PC: 12eac | Delete file (Filename = 'SMARTCHK.CPS')
2018-12-17T23:06:07.586937472Z 67 PC: 12ea8 | Get or set file attributes
2018-12-17T23:06:07.593590439Z 65 PC: 12eac | Delete file (Filename = 'AVP.CRC')
2018-12-17T23:06:07.600223484Z 67 PC: 12ea8 | Get or set file attributes
2018-12-17T23:06:07.60653679Z 65 PC: 12eac | Delete file (Filename = 'IVB.NTZ')
2018-12-17T23:06:07.613197315Z 67 PC: 12ea8 | Get or set file attributes
2018-12-17T23:06:07.620281967Z 65 PC: 12eac | Delete file (Filename = 'CHKLIST.TAV')
2018-12-17T23:06:07.627403388Z 79 PC: 12c1a | Find next file
2018-12-17T23:06:07.63026291Z 67 PC: 12fa9 | Get or set file attributes
2018-12-17T23:06:07.637014254Z 67 PC: 12fb9 | Get or set file attributes
2018-12-17T23:06:07.647801117Z 61 PC: 12fc2 | Open file (Filename = 'PRINT.COM')
2018-12-17T23:06:07.65507192Z 87 PC: 12fc8 | Get or set file date and time
2018-12-17T23:06:07.656743103Z 63 PC: 12cbd | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:06:07.664353579Z 66 PC: 12f9f | Move file pointer
2018-12-17T23:06:07.666437868Z 66 PC: 12f9f | Move file pointer
2018-12-17T23:06:07.668257719Z 64 PC: 12cdf | Write file or device (Write 3 bytes on handle 5)
2018-12-17T23:06:07.670243597Z 66 PC: 12f9f | Move file pointer
2018-12-17T23:06:07.67194321Z 64 PC: 12f09 | Write file or device (Write 1245 bytes on handle 5)
2018-12-17T23:06:07.678823133Z 87 PC: 12ff7 | Get or set file date and time
2018-12-17T23:06:07.680635412Z 62 PC: 12ffb | Close file
2018-12-17T23:06:07.690216799Z 67 PC: 13009 | Get or set file attributes
2018-12-17T23:06:07.698968592Z 79 PC: 12c1a | Find next file
2018-12-17T23:06:07.702936387Z 67 PC: 12fa9 | Get or set file attributes
2018-12-17T23:06:07.710471091Z 67 PC: 12fb9 | Get or set file attributes
2018-12-17T23:06:07.723754901Z 61 PC: 12fc2 | Open file (Filename = 'HELLO.COM')
2018-12-17T23:06:07.732228363Z 87 PC: 12fc8 | Get or set file date and time
2018-12-17T23:06:07.733898859Z 63 PC: 12cbd | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:06:07.741746476Z 66 PC: 12f9f | Move file pointer
2018-12-17T23:06:07.743980451Z 66 PC: 12f9f | Move file pointer
2018-12-17T23:06:07.746458469Z 64 PC: 12cdf | Write file or device (Write 3 bytes on handle 5)
2018-12-17T23:06:07.749519373Z 66 PC: 12f9f | Move file pointer
2018-12-17T23:06:07.754006831Z 64 PC: 12f09 | Write file or device (Write 1245 bytes on handle 5)
2018-12-17T23:06:07.764623502Z 87 PC: 12ff7 | Get or set file date and time
2018-12-17T23:06:07.766887237Z 62 PC: 12ffb | Close file
2018-12-17T23:06:07.781235476Z 67 PC: 13009 | Get or set file attributes
2018-12-17T23:06:07.79321966Z 79 PC: 12c1a | Find next file
2018-12-17T23:06:07.796403044Z 67 PC: 12fa9 | Get or set file attributes
2018-12-17T23:06:07.803964917Z 67 PC: 12fb9 | Get or set file attributes
2018-12-17T23:06:07.815151573Z 61 PC: 12fc2 | Open file (Filename = 'PHANG.COM')
2018-12-17T23:06:07.829306502Z 87 PC: 12fc8 | Get or set file date and time
2018-12-17T23:06:07.833123047Z 63 PC: 12cbd | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:06:07.840494074Z 66 PC: 12f9f | Move file pointer
2018-12-17T23:06:07.842435338Z 66 PC: 12f9f | Move file pointer
2018-12-17T23:06:07.844210109Z 64 PC: 12cdf | Write file or device (Write 3 bytes on handle 5)
2018-12-17T23:06:07.848127784Z 66 PC: 12f9f | Move file pointer
2018-12-17T23:06:07.850570654Z 64 PC: 12f09 | Write file or device (Write 1245 bytes on handle 5)
2018-12-17T23:06:07.860745929Z 87 PC: 12ff7 | Get or set file date and time
2018-12-17T23:06:07.863411717Z 62 PC: 12ffb | Close file
2018-12-17T23:06:07.872776268Z 67 PC: 13009 | Get or set file attributes
2018-12-17T23:06:07.883865214Z 79 PC: 12c1a | Find next file
2018-12-17T23:06:07.887652606Z 67 PC: 12fa9 | Get or set file attributes
2018-12-17T23:06:07.894824067Z 67 PC: 12fb9 | Get or set file attributes
2018-12-17T23:06:07.906207464Z 61 PC: 12fc2 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T23:06:07.914497212Z 87 PC: 12fc8 | Get or set file date and time
2018-12-17T23:06:07.916137511Z 63 PC: 12cbd | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:06:07.923110635Z 66 PC: 12f9f | Move file pointer
2018-12-17T23:06:07.925423587Z 66 PC: 12f9f | Move file pointer
2018-12-17T23:06:07.92704974Z 64 PC: 12cdf | Write file or device (Write 3 bytes on handle 5)
2018-12-17T23:06:07.93006936Z 66 PC: 12f9f | Move file pointer
2018-12-17T23:06:07.933353596Z 64 PC: 12f09 | Write file or device (Write 1245 bytes on handle 5)
2018-12-17T23:06:07.94354243Z 87 PC: 12ff7 | Get or set file date and time
2018-12-17T23:06:07.945178715Z 62 PC: 12ffb | Close file
2018-12-17T23:06:07.954453292Z 67 PC: 13009 | Get or set file attributes
2018-12-17T23:06:07.966455539Z 79 PC: 12c1a | Find next file
2018-12-17T23:06:07.969733762Z 67 PC: 12fa9 | Get or set file attributes
2018-12-17T23:06:07.976385578Z 67 PC: 12fb9 | Get or set file attributes
2018-12-17T23:06:07.987493536Z 61 PC: 12fc2 | Open file (Filename = 'MANDEL.COM')
2018-12-17T23:06:07.995302607Z 87 PC: 12fc8 | Get or set file date and time
2018-12-17T23:06:07.997336749Z 87 PC: 12ff7 | Get or set file date and time
2018-12-17T23:06:08.00004979Z 62 PC: 12ffb | Close file
2018-12-17T23:06:08.007914268Z 67 PC: 13009 | Get or set file attributes
2018-12-17T23:06:08.022396657Z 79 PC: 12c1a | Find next file
2018-12-17T23:06:08.026998043Z 67 PC: 12fa9 | Get or set file attributes
2018-12-17T23:06:08.033673844Z 67 PC: 12fb9 | Get or set file attributes
2018-12-17T23:06:08.045259056Z 61 PC: 12fc2 | Open file (Filename = 'PAH.COM')
2018-12-17T23:06:08.053750605Z 87 PC: 12fc8 | Get or set file date and time
2018-12-17T23:06:08.055625489Z 63 PC: 12cbd | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:06:08.063443013Z 66 PC: 12f9f | Move file pointer
2018-12-17T23:06:08.066064563Z 66 PC: 12f9f | Move file pointer
2018-12-17T23:06:08.068049267Z 64 PC: 12cdf | Write file or device (Write 3 bytes on handle 5)
2018-12-17T23:06:08.071141761Z 66 PC: 12f9f | Move file pointer
2018-12-17T23:06:08.07354642Z 64 PC: 12f09 | Write file or device (Write 1245 bytes on handle 5)
2018-12-17T23:06:08.084640292Z 87 PC: 12ff7 | Get or set file date and time
2018-12-17T23:06:08.087066611Z 62 PC: 12ffb | Close file
2018-12-17T23:06:08.09654428Z 67 PC: 13009 | Get or set file attributes
2018-12-17T23:06:08.108692017Z 79 PC: 12c1a | Find next file
2018-12-17T23:06:08.112070996Z 67 PC: 12fa9 | Get or set file attributes
2018-12-17T23:06:08.1187431Z 67 PC: 12fb9 | Get or set file attributes
2018-12-17T23:06:08.131034591Z 61 PC: 12fc2 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:06:08.139076861Z 87 PC: 12fc8 | Get or set file date and time
2018-12-17T23:06:08.141472069Z 63 PC: 12c5f | Read file or device (Read 28 bytes on handle 5)
2018-12-17T23:06:08.149218861Z 66 PC: 12f9f | Move file pointer
2018-12-17T23:06:08.152778321Z 64 PC: 12f09 | Write file or device (Write 1245 bytes on handle 5)
2018-12-17T23:06:08.163998614Z 66 PC: 12f9f | Move file pointer
2018-12-17T23:06:08.165469271Z 64 PC: 12c97 | Write file or device (Write 28 bytes on handle 5)
2018-12-17T23:06:08.169355022Z 87 PC: 12ff7 | Get or set file date and time
2018-12-17T23:06:08.170901636Z 62 PC: 12ffb | Close file
2018-12-17T23:06:08.179441755Z 67 PC: 13009 | Get or set file attributes
2018-12-17T23:06:08.190565519Z 79 PC: 12c1a | Find next file
2018-12-17T23:06:08.193090612Z 26 PC: 12cf5 | Set disk transfer address
2018-12-17T23:06:08.19426572Z 37 PC: 12cfe | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":15438,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:43:25.256642593Z 26 PC: 12be9 | Set disk transfer address
2018-12-25T12:43:25.266414153Z 53 PC: 12bef | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:43:25.267502685Z 37 PC: 12c03 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:43:25.268538123Z 42 PC: 12c07 | Get date 0x12c07: cmp dl, 0xa
0x12c0a: jne 0x12c0f
0x12c0c: jmp 0x12d48
0x12c0f: mov ah, 0x4e
0x12c11: lea dx, word ptr [bp + 0x5d3]
0x12c15: mov cx, 7
0x12c18: int 0x21
0x12c1a: jae 0x12c1f
0x12c1c: jmp 0x12ced
0x12c1f: push ax
0x12c20: push cx
0x12c21: push di
0x12c22: push es
0x12c23: push ds
0x12c24: pop es
0x12c25: lea dx, word ptr [bp + 0x5fb]
0x12c29: mov di, dx
0x12c2b: mov cx, 0x40
0x12c2e: mov al, 0x2e
0x12c30: repne scasb al, byte ptr es:[di]
2018-12-25T12:43:25.271244116Z 78 PC: 12c1a | Find first file
2018-12-25T12:43:25.277400916Z 67 PC: 12fa9 | Get or set file attributes
2018-12-25T12:43:25.283683006Z 67 PC: 12fb9 | Get or set file attributes
2018-12-25T12:43:25.778589163Z 61 PC: 12fc2 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:43:25.78534235Z 87 PC: 12fc8 | Get or set file date and time
2018-12-25T12:43:25.786626751Z 63 PC: 12cbd | Read file or device (Read 3 bytes on handle 5)
2018-12-25T12:43:25.793525456Z 66 PC: 12f9f | Move file pointer
2018-12-25T12:43:25.79487019Z 66 PC: 12f9f | Move file pointer (See above)
2018-12-25T12:43:25.796103558Z 64 PC: 12cdf | Write file or device (Write 3 bytes on handle 5)
2018-12-25T12:43:25.798972116Z 66 PC: 12f9f | Move file pointer (See above)
2018-12-25T12:43:25.800878319Z 64 PC: 12f09 | Write file or device (Write 1245 bytes on handle 5)
2018-12-25T12:43:25.814418406Z 87 PC: 12ff7 | Get or set file date and time
2018-12-25T12:43:25.816593954Z 62 PC: 12ffb | Close file
2018-12-25T12:43:25.860808491Z 67 PC: 13009 | Get or set file attributes
2018-12-25T12:43:25.871963801Z 79 PC: 12c1a | Find next file (See above)
2018-12-25T12:43:25.87447504Z 67 PC: 12ea8 | Get or set file attributes
2018-12-25T12:43:25.880009051Z 65 PC: 12eac | Delete file (Filename = 'ANTI-VIR.DAT')
2018-12-25T12:43:25.885394059Z 67 PC: 12ea8 | Get or set file attributes (See above)
2018-12-25T12:43:25.895437778Z 65 PC: 12eac | Delete file (See above)
2018-12-25T12:43:25.907503544Z 67 PC: 12ea8 | Get or set file attributes (See above)
2018-12-25T12:43:25.913072642Z 65 PC: 12eac | Delete file (See above)
2018-12-25T12:43:25.918699743Z 67 PC: 12ea8 | Get or set file attributes (See above)
2018-12-25T12:43:25.931127077Z 65 PC: 12eac | Delete file (See above)
2018-12-25T12:43:25.934696401Z 67 PC: 12ea8 | Get or set file attributes (See above)
2018-12-25T12:43:25.941158446Z 65 PC: 12eac | Delete file (See above)
2018-12-25T12:43:25.948121044Z 67 PC: 12ea8 | Get or set file attributes (See above)
2018-12-25T12:43:25.954594551Z 65 PC: 12eac | Delete file (See above)
2018-12-25T12:43:25.965224689Z 79 PC: 12c1a | Find next file (See above)
2018-12-25T12:43:25.96862974Z 67 PC: 12fa9 | Get or set file attributes (See above)
2018-12-25T12:43:25.974106338Z 67 PC: 12fb9 | Get or set file attributes (See above)
2018-12-25T12:43:25.983185899Z 61 PC: 12fc2 | Open file (See above)
2018-12-25T12:43:25.989892584Z 87 PC: 12fc8 | Get or set file date and time (See above)
2018-12-25T12:43:25.991167663Z 63 PC: 12cbd | Read file or device (See above)
2018-12-25T12:43:25.997220362Z 66 PC: 12f9f | Move file pointer (See above)
2018-12-25T12:43:25.999211343Z 66 PC: 12f9f | Move file pointer (See above)
2018-12-25T12:43:26.000407425Z 64 PC: 12cdf | Write file or device (See above)
2018-12-25T12:43:26.002902296Z 66 PC: 12f9f | Move file pointer (See above)
2018-12-25T12:43:26.018295172Z 64 PC: 12f09 | Write file or device (See above)
2018-12-25T12:43:26.036073389Z 87 PC: 12ff7 | Get or set file date and time (See above)
2018-12-25T12:43:26.037379851Z 62 PC: 12ffb | Close file (See above)
2018-12-25T12:43:26.067914525Z 67 PC: 13009 | Get or set file attributes (See above)
2018-12-25T12:43:26.081819785Z 79 PC: 12c1a | Find next file (See above)
2018-12-25T12:43:26.08360242Z 67 PC: 12fa9 | Get or set file attributes (See above)
2018-12-25T12:43:26.08743575Z 67 PC: 12fb9 | Get or set file attributes (See above)
2018-12-25T12:43:26.103757121Z 61 PC: 12fc2 | Open file (See above)
2018-12-25T12:43:26.110042256Z 87 PC: 12fc8 | Get or set file date and time (See above)
2018-12-25T12:43:26.111482655Z 63 PC: 12cbd | Read file or device (See above)
2018-12-25T12:43:26.117787617Z 66 PC: 12f9f | Move file pointer (See above)
2018-12-25T12:43:26.118740163Z 66 PC: 12f9f | Move file pointer (See above)
2018-12-25T12:43:26.120009204Z 64 PC: 12cdf | Write file or device (See above)
2018-12-25T12:43:26.121782174Z 66 PC: 12f9f | Move file pointer (See above)
2018-12-25T12:43:26.122996726Z 64 PC: 12f09 | Write file or device (See above)
2018-12-25T12:43:26.480522351Z 87 PC: 12ff7 | Get or set file date and time (See above)
2018-12-25T12:43:26.481942687Z 62 PC: 12ffb | Close file (See above)
2018-12-25T12:43:26.678890505Z 67 PC: 13009 | Get or set file attributes (See above)
2018-12-25T12:43:26.688864773Z 79 PC: 12c1a | Find next file (See above)
2018-12-25T12:43:26.691674329Z 67 PC: 12fa9 | Get or set file attributes (See above)
2018-12-25T12:43:26.697129652Z 67 PC: 12fb9 | Get or set file attributes (See above)
2018-12-25T12:43:26.706659752Z 61 PC: 12fc2 | Open file (See above)
2018-12-25T12:43:26.724995085Z 87 PC: 12fc8 | Get or set file date and time (See above)
2018-12-25T12:43:26.726917935Z 63 PC: 12cbd | Read file or device (See above)
2018-12-25T12:43:26.733536716Z 66 PC: 12f9f | Move file pointer (See above)
2018-12-25T12:43:26.735304191Z 66 PC: 12f9f | Move file pointer (See above)
2018-12-25T12:43:26.736553985Z 64 PC: 12cdf | Write file or device (See above)
2018-12-25T12:43:26.739295186Z 66 PC: 12f9f | Move file pointer (See above)
2018-12-25T12:43:26.740975369Z 64 PC: 12f09 | Write file or device (See above)
2018-12-25T12:43:26.747880535Z 87 PC: 12ff7 | Get or set file date and time (See above)
2018-12-25T12:43:26.750213024Z 62 PC: 12ffb | Close file (See above)
2018-12-25T12:43:26.760020461Z 67 PC: 13009 | Get or set file attributes (See above)
2018-12-25T12:43:26.769984546Z 79 PC: 12c1a | Find next file (See above)
2018-12-25T12:43:26.77264311Z 67 PC: 12fa9 | Get or set file attributes (See above)
2018-12-25T12:43:26.778939079Z 67 PC: 12fb9 | Get or set file attributes (See above)
2018-12-25T12:43:26.788970947Z 61 PC: 12fc2 | Open file (See above)
2018-12-25T12:43:26.795794622Z 87 PC: 12fc8 | Get or set file date and time (See above)
2018-12-25T12:43:26.797736497Z 63 PC: 12cbd | Read file or device (See above)
2018-12-25T12:43:26.804206893Z 66 PC: 12f9f | Move file pointer (See above)
2018-12-25T12:43:26.805962112Z 66 PC: 12f9f | Move file pointer (See above)
2018-12-25T12:43:26.808502404Z 64 PC: 12cdf | Write file or device (See above)
2018-12-25T12:43:26.81137923Z 66 PC: 12f9f | Move file pointer (See above)
2018-12-25T12:43:26.813563189Z 64 PC: 12f09 | Write file or device (See above)
2018-12-25T12:43:26.823681316Z 87 PC: 12ff7 | Get or set file date and time (See above)
2018-12-25T12:43:26.825361571Z 62 PC: 12ffb | Close file (See above)
2018-12-25T12:43:26.833103639Z 67 PC: 13009 | Get or set file attributes (See above)
2018-12-25T12:43:26.843467592Z 79 PC: 12c1a | Find next file (See above)
2018-12-25T12:43:26.846026016Z 67 PC: 12fa9 | Get or set file attributes (See above)
2018-12-25T12:43:26.851464491Z 67 PC: 12fb9 | Get or set file attributes (See above)
2018-12-25T12:43:26.861587108Z 61 PC: 12fc2 | Open file (See above)
2018-12-25T12:43:26.8734361Z 87 PC: 12fc8 | Get or set file date and time (See above)
2018-12-25T12:43:26.874844554Z 87 PC: 12ff7 | Get or set file date and time (See above)
2018-12-25T12:43:26.877174889Z 62 PC: 12ffb | Close file (See above)
2018-12-25T12:43:26.886636923Z 67 PC: 13009 | Get or set file attributes (See above)
2018-12-25T12:43:26.896229804Z 79 PC: 12c1a | Find next file (See above)
2018-12-25T12:43:26.900118766Z 67 PC: 12fa9 | Get or set file attributes (See above)
2018-12-25T12:43:26.905620166Z 67 PC: 12fb9 | Get or set file attributes (See above)
2018-12-25T12:43:26.91510258Z 61 PC: 12fc2 | Open file (See above)
2018-12-25T12:43:26.922152236Z 87 PC: 12fc8 | Get or set file date and time (See above)
2018-12-25T12:43:26.923677631Z 63 PC: 12cbd | Read file or device (See above)
2018-12-25T12:43:26.929763067Z 66 PC: 12f9f | Move file pointer (See above)
2018-12-25T12:43:26.931383405Z 66 PC: 12f9f | Move file pointer (See above)
2018-12-25T12:43:26.932969338Z 64 PC: 12cdf | Write file or device (See above)
2018-12-25T12:43:26.935451757Z 66 PC: 12f9f | Move file pointer (See above)
2018-12-25T12:43:26.937142676Z 64 PC: 12f09 | Write file or device (See above)
2018-12-25T12:43:26.946867122Z 87 PC: 12ff7 | Get or set file date and time (See above)
2018-12-25T12:43:26.948596927Z 62 PC: 12ffb | Close file (See above)
2018-12-25T12:43:26.956691775Z 67 PC: 13009 | Get or set file attributes (See above)
2018-12-25T12:43:26.963884936Z 79 PC: 12c1a | Find next file (See above)
2018-12-25T12:43:26.966218396Z 67 PC: 12fa9 | Get or set file attributes (See above)
2018-12-25T12:43:26.971385796Z 67 PC: 12fb9 | Get or set file attributes (See above)
2018-12-25T12:43:26.980561587Z 61 PC: 12fc2 | Open file (See above)
2018-12-25T12:43:26.986734437Z 87 PC: 12fc8 | Get or set file date and time (See above)
2018-12-25T12:43:26.987812255Z 63 PC: 12c5f | Read file or device (Read 28 bytes on handle 5)
2018-12-25T12:43:26.994994269Z 66 PC: 12f9f | Move file pointer (See above)
2018-12-25T12:43:26.997049243Z 64 PC: 12f09 | Write file or device (See above)
2018-12-25T12:43:27.006336782Z 66 PC: 12f9f | Move file pointer (See above)
2018-12-25T12:43:27.008779723Z 64 PC: 12c97 | Write file or device (Write 28 bytes on handle 5)
2018-12-25T12:43:27.012298962Z 87 PC: 12ff7 | Get or set file date and time (See above)
2018-12-25T12:43:27.013822286Z 62 PC: 12ffb | Close file (See above)
2018-12-25T12:43:27.022582775Z 67 PC: 13009 | Get or set file attributes (See above)
2018-12-25T12:43:27.033841956Z 79 PC: 12c1a | Find next file (See above)
2018-12-25T12:43:27.036723409Z 26 PC: 12cf5 | Set disk transfer address
2018-12-25T12:43:27.039034571Z 37 PC: 12cfe | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')