Sample viewer

vx.netlux.org/Virus.DOS.Burger.498

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:06:18.722945484Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:18.725350378Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:18.729101947Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:18.731815529Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:18.733650952Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:18.738656943Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:18.745440351Z 61 PC: 12b38 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:06:18.752623041Z 63 PC: 12b46 | Read file or device (Read 498 bytes on handle 5)
2018-12-17T23:06:18.755997199Z 62 PC: 12b4a | Close file
2018-12-17T23:06:18.75834112Z 67 PC: 12b5e | Get or set file attributes
2018-12-17T23:06:18.765204509Z 67 PC: 12b68 | Get or set file attributes
2018-12-17T23:06:18.785551991Z 61 PC: 12b71 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:06:18.792993677Z 87 PC: 12b79 | Get or set file date and time
2018-12-17T23:06:18.794527724Z 64 PC: 12b9f | Write file or device (Write 498 bytes on handle 5)
2018-12-17T23:06:18.79876434Z 87 PC: 12ba7 | Get or set file date and time
2018-12-17T23:06:18.800551563Z 62 PC: 12bab | Close file
2018-12-17T23:06:18.809040556Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:18.811203491Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:18.815582826Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:18.817132377Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:18.820266665Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:18.822058309Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:18.823377161Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:18.827844227Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:18.843302248Z 61 PC: 12b38 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:06:18.858217992Z 63 PC: 12b46 | Read file or device (Read 498 bytes on handle 5)
2018-12-17T23:06:18.866093166Z 62 PC: 12b4a | Close file
2018-12-17T23:06:18.868908128Z 79 PC: 12b2d | Find next file
2018-12-17T23:06:18.871521646Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:18.885432762Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:18.890299007Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:18.896772043Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:18.910659152Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:18.917840749Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:18.918907905Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:18.924808656Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:18.926327955Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:18.931332935Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:18.932749975Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:18.934349268Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:18.940502012Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:18.950505144Z 61 PC: 12b38 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:06:18.957232455Z 63 PC: 12b46 | Read file or device (Read 498 bytes on handle 5)
2018-12-17T23:06:18.964511531Z 62 PC: 12b4a | Close file
2018-12-17T23:06:18.975101392Z 79 PC: 12b2d | Find next file
2018-12-17T23:06:18.976786325Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:18.982215877Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:18.988054903Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:18.994789134Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:19.003233021Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:19.007441427Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:19.008422173Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:19.011704609Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:19.012748892Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:19.014571593Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:19.015985431Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:19.016955387Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:19.01956104Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:19.023779424Z 61 PC: 12b38 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:06:19.027941122Z 63 PC: 12b46 | Read file or device (Read 498 bytes on handle 5)
2018-12-17T23:06:19.032199961Z 62 PC: 12b4a | Close file
2018-12-17T23:06:19.034229078Z 79 PC: 12b2d | Find next file
2018-12-17T23:06:19.036117353Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:19.043688473Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:19.049498977Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:19.056306509Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:19.070894619Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:19.075337715Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:19.076728011Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:19.0795454Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:19.080727813Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:19.083348504Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:19.08448583Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:19.085598262Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:19.098233584Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:19.104918421Z 61 PC: 12b38 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:06:19.117793004Z 63 PC: 12b46 | Read file or device (Read 498 bytes on handle 5)
2018-12-17T23:06:19.125041836Z 62 PC: 12b4a | Close file
2018-12-17T23:06:19.126898202Z 79 PC: 12b2d | Find next file
2018-12-17T23:06:19.129267459Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:19.143705657Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:19.153729173Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:19.163500713Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:19.172158792Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:19.179191835Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:19.180621779Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:19.185533056Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:19.187250126Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:19.195610577Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:19.197507388Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:19.199000963Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:19.208571793Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:19.220742167Z 61 PC: 12b38 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:06:19.227998991Z 63 PC: 12b46 | Read file or device (Read 498 bytes on handle 5)
2018-12-17T23:06:19.234875189Z 62 PC: 12b4a | Close file
2018-12-17T23:06:19.237131539Z 79 PC: 12b2d | Find next file
2018-12-17T23:06:19.239963115Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:19.247936976Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:19.252720153Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:19.264994267Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:19.279416537Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:19.286094042Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:19.287870622Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:19.292320635Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:19.293772519Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:19.297490046Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:19.298956654Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:19.300325095Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:19.30521967Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:19.317071267Z 61 PC: 12b38 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:06:19.329768623Z 63 PC: 12b46 | Read file or device (Read 498 bytes on handle 5)
2018-12-17T23:06:19.337745809Z 62 PC: 12b4a | Close file
2018-12-17T23:06:19.339621097Z 79 PC: 12b2d | Find next file
2018-12-17T23:06:19.342130097Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:19.35058838Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:19.354945716Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:19.361111918Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:19.375373907Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:19.382218703Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:19.383542108Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:19.394407521Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:19.395836619Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:19.398874631Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:19.400780642Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:19.402054724Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:19.406293884Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:19.416674035Z 61 PC: 12b38 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:06:19.420957573Z 63 PC: 12b46 | Read file or device (Read 498 bytes on handle 5)
2018-12-17T23:06:19.425240786Z 62 PC: 12b4a | Close file
2018-12-17T23:06:19.427141575Z 79 PC: 12b2d | Find next file
2018-12-17T23:06:19.429749627Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:19.437724736Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:19.442589663Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:19.466593985Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:19.475428944Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:19.482781658Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:19.484152581Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:19.488562749Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:19.490483165Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:19.49351742Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:19.494890043Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:19.496851099Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:19.501234753Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:19.507969317Z 61 PC: 12b38 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:06:19.522073871Z 63 PC: 12b46 | Read file or device (Read 498 bytes on handle 5)
2018-12-17T23:06:19.529292428Z 62 PC: 12b4a | Close file
2018-12-17T23:06:19.531277088Z 79 PC: 12b2d | Find next file
2018-12-17T23:06:19.534558531Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:19.542995953Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:19.54782763Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:19.554930535Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:19.568706713Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:19.575608825Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:19.578096226Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:19.583150175Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:19.584576711Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:19.58810956Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:19.58939261Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:19.590552744Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:19.595297447Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:19.601801836Z 61 PC: 12b38 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:06:19.608734772Z 63 PC: 12b46 | Read file or device (Read 498 bytes on handle 5)
2018-12-17T23:06:19.616527142Z 62 PC: 12b4a | Close file
2018-12-17T23:06:19.618383456Z 79 PC: 12b2d | Find next file
2018-12-17T23:06:19.620954574Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:19.629176291Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:19.633613948Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:19.640000898Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:19.649996361Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:19.657126407Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:19.658972679Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:19.664858639Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:19.666576422Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:19.6701412Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:19.672965039Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:19.674957417Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:19.679643566Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:19.686983848Z 61 PC: 12b38 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:06:19.701913012Z 63 PC: 12b46 | Read file or device (Read 498 bytes on handle 5)
2018-12-17T23:06:19.709201562Z 62 PC: 12b4a | Close file
2018-12-17T23:06:19.711869426Z 79 PC: 12b2d | Find next file
2018-12-17T23:06:19.715466147Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:19.723529063Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:19.729180492Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:19.736121044Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:19.744281628Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:19.75221669Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:19.753812146Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:19.758429874Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:19.76076245Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:19.764086758Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:19.768012288Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:19.770292439Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:19.774872105Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:19.782453273Z 61 PC: 12b38 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:06:19.791577312Z 63 PC: 12b46 | Read file or device (Read 498 bytes on handle 5)
2018-12-17T23:06:19.794633519Z 62 PC: 12b4a | Close file
2018-12-17T23:06:19.796707302Z 79 PC: 12b2d | Find next file
2018-12-17T23:06:19.800098552Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:19.808200192Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:19.812587532Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:19.819528984Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:19.827782595Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:19.834691419Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:19.83633352Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:19.841191979Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:19.842665272Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:19.851080743Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:19.852826365Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:19.854523345Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:19.859652919Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:19.866389653Z 61 PC: 12b38 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:06:19.873786502Z 63 PC: 12b46 | Read file or device (Read 498 bytes on handle 5)
2018-12-17T23:06:19.876777224Z 62 PC: 12b4a | Close file
2018-12-17T23:06:19.878990017Z 79 PC: 12b2d | Find next file
2018-12-17T23:06:19.881515292Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:19.890013439Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:19.895569601Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:19.902058562Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:19.910158413Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:19.917749424Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:19.919157567Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:19.923728749Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:19.926374174Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:19.929552922Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:19.931008985Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:19.93320753Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:19.937748251Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:19.9445584Z 61 PC: 12b38 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:06:19.958021943Z 63 PC: 12b46 | Read file or device (Read 498 bytes on handle 5)
2018-12-17T23:06:19.965193785Z 62 PC: 12b4a | Close file
2018-12-17T23:06:19.967231626Z 79 PC: 12b2d | Find next file
2018-12-17T23:06:19.970757282Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:19.985205755Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:19.989980453Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:19.997321288Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:20.011385719Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:20.019161438Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:20.021657649Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:20.034912025Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:20.036724898Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:20.056581186Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:20.058071431Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:20.059420387Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:20.064532335Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:20.074784631Z 61 PC: 12b38 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:06:20.082087257Z 63 PC: 12b46 | Read file or device (Read 498 bytes on handle 5)
2018-12-17T23:06:20.09053326Z 62 PC: 12b4a | Close file
2018-12-17T23:06:20.093254322Z 79 PC: 12b2d | Find next file
2018-12-17T23:06:20.096507932Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:20.111670871Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:20.116300209Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:20.122790805Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:20.133159457Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:20.140270834Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:20.142055114Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:20.152974236Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:20.154969532Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:20.163388035Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:20.165773534Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:20.167257294Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:20.177621283Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:20.188746449Z 61 PC: 12b38 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:06:20.196487739Z 63 PC: 12b46 | Read file or device (Read 498 bytes on handle 5)
2018-12-17T23:06:20.203946872Z 62 PC: 12b4a | Close file
2018-12-17T23:06:20.207337527Z 79 PC: 12b2d | Find next file
2018-12-17T23:06:20.210728155Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:20.219173929Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:20.230314701Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:20.243367707Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:20.252450286Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:20.261260427Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:20.263388287Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:20.26899871Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:20.272106723Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:20.275757969Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:20.277632263Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:20.280132335Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:20.298605271Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:20.309758126Z 61 PC: 12b38 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:06:20.317261443Z 63 PC: 12b46 | Read file or device (Read 498 bytes on handle 5)
2018-12-17T23:06:20.324393551Z 62 PC: 12b4a | Close file
2018-12-17T23:06:20.32640874Z 79 PC: 12b2d | Find next file
2018-12-17T23:06:20.329186609Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:20.337647044Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:20.342823206Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:20.354070646Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:20.368220853Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:20.375246709Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:20.376640328Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:20.380880561Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:20.382994319Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:20.385972861Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:20.387266035Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:20.389180462Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:20.392054906Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:20.396467829Z 61 PC: 12b38 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:06:20.405336494Z 63 PC: 12b46 | Read file or device (Read 498 bytes on handle 5)
2018-12-17T23:06:20.412276444Z 62 PC: 12b4a | Close file
2018-12-17T23:06:20.414141719Z 79 PC: 12b2d | Find next file
2018-12-17T23:06:20.417329873Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:20.431300034Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:20.435619367Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:20.44214745Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:20.447548268Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:20.452257357Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:20.453983012Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:20.463414521Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:20.464791563Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:20.473212248Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:20.474514614Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:20.475782134Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:20.485694212Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:20.497735519Z 61 PC: 12b38 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:06:20.502090677Z 63 PC: 12b46 | Read file or device (Read 498 bytes on handle 5)
2018-12-17T23:06:20.509261779Z 62 PC: 12b4a | Close file
2018-12-17T23:06:20.511081373Z 79 PC: 12b2d | Find next file
2018-12-17T23:06:20.514302382Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:20.52221364Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:20.526522611Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:20.538873456Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:20.553080639Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:20.559872471Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:20.561703548Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:20.566021923Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:20.567379546Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:20.570731929Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:20.57261024Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:20.574053336Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:20.578779132Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:20.585288308Z 61 PC: 12b38 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:06:20.597794041Z 63 PC: 12b46 | Read file or device (Read 498 bytes on handle 5)
2018-12-17T23:06:20.605351261Z 62 PC: 12b4a | Close file
2018-12-17T23:06:20.607191911Z 79 PC: 12b2d | Find next file
2018-12-17T23:06:20.609834168Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:20.619535848Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:20.623844375Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:20.62760992Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:20.633007577Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:20.639896945Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:20.641278853Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:20.646541396Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:20.647947238Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:20.651147705Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:20.652689873Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:20.653933687Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:20.65880895Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:20.665085708Z 61 PC: 12b38 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:06:20.677008323Z 63 PC: 12b46 | Read file or device (Read 498 bytes on handle 5)
2018-12-17T23:06:20.684536222Z 62 PC: 12b4a | Close file
2018-12-17T23:06:20.686761525Z 79 PC: 12b2d | Find next file
2018-12-17T23:06:20.689567394Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:20.698443088Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:20.703032324Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:20.709499132Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:20.723570186Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:20.730749209Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:20.732422282Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:20.743880308Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:20.745736095Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:20.74918583Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:20.751433116Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:20.753093607Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:20.757775538Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:20.768539248Z 61 PC: 12b38 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:06:20.776089091Z 63 PC: 12b46 | Read file or device (Read 498 bytes on handle 5)
2018-12-17T23:06:20.784766438Z 62 PC: 12b4a | Close file
2018-12-17T23:06:20.787591122Z 79 PC: 12b2d | Find next file
2018-12-17T23:06:20.790731966Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:20.799534106Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:20.804872795Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:20.817089715Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:20.828028931Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:20.836237125Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:20.837641226Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:20.842330983Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:20.843888019Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:20.846956862Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:20.849237652Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:20.85098417Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:20.85992923Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:20.867236105Z 61 PC: 12b38 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:06:20.874768332Z 63 PC: 12b46 | Read file or device (Read 498 bytes on handle 5)
2018-12-17T23:06:20.879671246Z 62 PC: 12b4a | Close file
2018-12-17T23:06:20.882221922Z 79 PC: 12b2d | Find next file
2018-12-17T23:06:20.884057332Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:20.890621454Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:20.895659818Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:20.902074885Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:20.915827777Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:20.922652874Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:20.923934844Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:20.933756375Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:20.935494383Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:20.944031729Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:20.9463513Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:20.948052808Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:20.952920352Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:20.963466388Z 61 PC: 12b38 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:06:20.970704893Z 63 PC: 12b46 | Read file or device (Read 498 bytes on handle 5)
2018-12-17T23:06:20.977818528Z 62 PC: 12b4a | Close file
2018-12-17T23:06:20.979734154Z 79 PC: 12b2d | Find next file
2018-12-17T23:06:20.982293714Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:20.996353272Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:21.006608705Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:21.01615688Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:21.024742758Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:21.032190468Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:21.034074987Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:21.039334481Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:21.040875167Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:21.044200152Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:21.045981205Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:21.047459403Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:21.05826073Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:21.071431846Z 61 PC: 12b38 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:06:21.078886828Z 63 PC: 12b46 | Read file or device (Read 498 bytes on handle 5)
2018-12-17T23:06:21.087085869Z 62 PC: 12b4a | Close file
2018-12-17T23:06:21.089630465Z 79 PC: 12b2d | Find next file
2018-12-17T23:06:21.092468727Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:21.102334178Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:21.107711033Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:21.120009206Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:21.13501325Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:21.142064845Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:21.143347192Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:21.148340308Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:21.149639407Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:21.152844002Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:21.15514509Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:21.156462454Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:21.160947242Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:21.167775637Z 61 PC: 12b38 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:06:21.180604602Z 63 PC: 12b46 | Read file or device (Read 498 bytes on handle 5)
2018-12-17T23:06:21.188144175Z 62 PC: 12b4a | Close file
2018-12-17T23:06:21.190195874Z 79 PC: 12b2d | Find next file
2018-12-17T23:06:21.192877813Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:21.207780223Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:21.212340116Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:21.218898312Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:21.233724683Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:21.240741793Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:21.242178631Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:21.252573224Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:21.25433673Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:21.263378202Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:21.265410318Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:21.267025416Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:21.272075731Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:21.287485421Z 61 PC: 12b38 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:06:21.294841487Z 63 PC: 12b46 | Read file or device (Read 498 bytes on handle 5)
2018-12-17T23:06:21.30277731Z 62 PC: 12b4a | Close file
2018-12-17T23:06:21.305555081Z 79 PC: 12b2d | Find next file
2018-12-17T23:06:21.308157028Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:21.32332407Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:21.328582409Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:21.335203173Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:21.343321493Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:21.350500134Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:21.352578168Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:21.357089557Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:21.359781521Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:21.363652128Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:21.365114718Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:21.366366182Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:21.371772892Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:21.378565131Z 61 PC: 12b38 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:06:21.392640026Z 63 PC: 12b46 | Read file or device (Read 498 bytes on handle 5)
2018-12-17T23:06:21.399863867Z 62 PC: 12b4a | Close file
2018-12-17T23:06:21.401915378Z 79 PC: 12b2d | Find next file
2018-12-17T23:06:21.405410143Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:21.413403387Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:21.418024313Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:21.425455473Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:21.439841477Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:21.447118953Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:21.44924849Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:21.46027189Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:21.461771921Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:21.466125085Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:21.46765196Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:21.469099389Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:21.473954118Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:21.484497347Z 61 PC: 12b38 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:06:21.491986026Z 63 PC: 12b46 | Read file or device (Read 498 bytes on handle 5)
2018-12-17T23:06:21.499125109Z 62 PC: 12b4a | Close file
2018-12-17T23:06:21.501198552Z 79 PC: 12b2d | Find next file
2018-12-17T23:06:21.504508687Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:21.51902468Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:21.523429292Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:21.530408328Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:21.539573464Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:21.546466091Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:21.548370981Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:21.559014781Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:21.561208492Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:21.571365632Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:21.572989246Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:21.575090142Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:21.585616446Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:21.596119232Z 61 PC: 12b38 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:06:21.604185891Z 63 PC: 12b46 | Read file or device (Read 498 bytes on handle 5)
2018-12-17T23:06:21.611476016Z 62 PC: 12b4a | Close file
2018-12-17T23:06:21.613446818Z 79 PC: 12b2d | Find next file
2018-12-17T23:06:21.6178861Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:21.626426352Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:21.636276044Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:21.649826129Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:21.658471293Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:21.665897615Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:21.669161574Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:21.674100176Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:21.676728594Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:21.680986442Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:21.68258019Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:21.684960107Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:21.691909419Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:21.698827639Z 61 PC: 12b38 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:06:21.713135646Z 63 PC: 12b46 | Read file or device (Read 498 bytes on handle 5)
2018-12-17T23:06:21.717468325Z 62 PC: 12b4a | Close file
2018-12-17T23:06:21.719371511Z 79 PC: 12b2d | Find next file
2018-12-17T23:06:21.722599688Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:21.730751227Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:21.735161532Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:21.741905121Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:21.75632001Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:21.763941597Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:21.765667007Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:21.774970621Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:21.776870305Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:21.779834081Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:21.781270438Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:21.78388142Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:21.788811637Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:21.79905543Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:21.807103506Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:21.811942689Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:21.819234367Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:21.833926252Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:21.841652055Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:21.844552866Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:21.849928987Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:21.851939109Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:21.856609719Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:21.858895978Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:21.860713117Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:21.866590483Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:21.873629375Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:21.886656062Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:21.897808233Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:21.910970534Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:21.918712119Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:21.92695619Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:21.928407868Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:21.934330106Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:21.936826349Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:21.940478653Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:21.943336139Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:21.94530017Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:21.955609871Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:21.969575231Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:21.978255081Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:21.983319551Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:21.991133848Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:21.998737816Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:22.007122473Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:22.009321662Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:22.014234869Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:22.017428481Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:22.021081761Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:22.022565756Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:22.025186276Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:22.029907675Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:22.037036695Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:22.05050463Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:22.055276217Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:22.063680869Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:22.076965966Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:22.264664185Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:22.266390092Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:22.272302002Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:22.273962838Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:22.279061424Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:22.280081593Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:22.281781588Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:22.2876173Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:22.293561012Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:22.298247163Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:22.301180188Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:22.305484163Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:22.317703228Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:22.351944859Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:22.354148398Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:22.363614202Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:22.36631858Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:22.375386264Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:22.377056278Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:22.379659475Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:22.384745584Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:22.392035798Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:22.396808918Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:22.399798211Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:22.404546704Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:22.41675985Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:22.422668199Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:22.425483263Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:22.438865406Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:22.441783485Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:22.451112248Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:22.453008109Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:22.456737174Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:22.462422967Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:22.475073365Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:22.483293347Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:22.493221469Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:22.507652651Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:22.520890112Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:22.527827649Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:22.530194453Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:22.534722692Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:22.537384845Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:22.540756523Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:22.542173677Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:22.54415887Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:22.548598656Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:22.561100135Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:22.574097306Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:22.579141621Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:22.586158084Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:22.592999183Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:22.599787126Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:22.601556284Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:22.604173167Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:22.605873736Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:22.609029201Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:22.610376151Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:22.612050551Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:22.616417921Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:22.623771212Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:22.636775973Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:22.646847227Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:22.657507785Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:22.664597549Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:22.671527878Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:22.673112745Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:22.67747284Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:22.679855699Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:22.688504365Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:22.690485941Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:22.69253378Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:22.702008902Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:22.713228877Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:22.720230427Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:22.725119709Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:22.732559547Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:22.740662078Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:22.745323195Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:22.746438992Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:22.752302891Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:22.754027794Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:22.759372037Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:22.761326482Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:22.76267347Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:22.772971008Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:22.78400849Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:22.79085892Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:22.796151118Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:22.808230408Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:22.820965442Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:22.828539382Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:22.830708905Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:22.834978586Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:22.836883778Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:22.839956601Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:22.842007719Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:22.8432986Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:22.847532757Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:22.854574759Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:22.861324517Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:22.86626497Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:22.872694807Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:22.879463437Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:22.886306524Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:22.88775957Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:22.892642336Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:22.895152063Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:22.898303908Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:22.899942365Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:22.901300464Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:22.906590684Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:22.913948181Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:22.921541312Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:22.927087356Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:22.934050051Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:22.941558973Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:22.950134672Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:22.951950829Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:22.957780565Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:22.960004718Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:22.964189278Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:22.967116618Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:22.968776286Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:22.97439412Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:22.981254742Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:22.98819798Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:22.993792775Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:23.000365979Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:23.00750948Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:23.305980523Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:23.307262858Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:23.310704775Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:23.312390789Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:23.315887296Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:23.317568378Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:23.318921085Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:23.327191415Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:23.334458211Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:23.339191223Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:23.344323444Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:23.348357245Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:23.352992383Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:23.357550777Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:23.359473021Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:23.364443976Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:23.366085527Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:23.37015316Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:23.372094246Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:23.373932613Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:23.379024015Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:23.385407861Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:23.398082133Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:23.402713226Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:23.409124173Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:23.422083072Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:23.428758825Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:23.430858553Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:23.437082835Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:23.438204581Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:23.44473955Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:23.446168393Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:23.447919641Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:23.456289396Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:23.465972651Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:23.472462781Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:23.476185597Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:23.480903821Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:23.494381508Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:23.502110549Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:23.505015338Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:23.513236904Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:23.515206759Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:23.523954854Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:23.526613487Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:23.52860129Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:23.533229739Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:23.543555505Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:23.551020748Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:23.555518858Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:23.563422023Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:23.57620905Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:23.583103641Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:23.595262445Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:23.599771762Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:23.601456194Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:23.605527645Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:23.607107427Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:23.609734719Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:23.614266574Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:23.620935583Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:23.629314968Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:23.633838039Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:23.640445386Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:23.647759006Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:23.654314279Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:23.656472031Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:23.661624332Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:23.663226347Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:23.66701506Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:23.668301925Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:23.670371662Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:23.674652915Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:23.681986999Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:23.688773198Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:23.693278012Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:23.700916777Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:23.70791168Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:23.7154789Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:23.7172394Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:23.721907665Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:23.724611997Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:23.728653819Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:23.730499749Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:23.732397982Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:23.737461714Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:23.744917282Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:23.751967827Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:23.757094837Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:23.764615099Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:23.772857362Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:23.781691035Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:23.784161746Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:23.789067936Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:23.792188311Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:23.796024904Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:23.798775259Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:23.800147067Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:23.804693863Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:23.812575038Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:23.819641575Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:23.827438638Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:23.834121486Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:23.841217291Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:23.849602632Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:23.851384523Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:23.857810366Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:23.85971839Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:23.863205809Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:23.86630269Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:23.868009549Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:23.874674822Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:23.881560466Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:23.888663936Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:23.894940396Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:23.90195246Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:23.910386338Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:23.917330904Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:23.919272954Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:23.925446271Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:23.927408665Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:23.931995639Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:23.933484126Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:23.935634714Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:23.941492477Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:23.948967579Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:23.957660114Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:23.962355356Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:23.969074066Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:23.978088375Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:23.985259737Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:23.988700258Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:23.993699069Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:23.995773816Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:24.001069636Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:24.003242707Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:24.006714351Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:24.011911519Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:24.019706897Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:24.027138255Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:24.029794064Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:24.0349907Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:24.041800303Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:24.048367836Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:24.050403469Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:24.05501044Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:24.057809097Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:24.06165153Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:24.063766591Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:24.066369326Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:24.071138944Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:24.079953142Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:24.093368931Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:24.09847316Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:24.105643264Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:24.118886854Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:24.127127319Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:24.128689907Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:24.139051928Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:24.140712216Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:24.149117839Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:24.151461401Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:24.15391952Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:24.159048826Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:24.169707345Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:24.176754689Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:24.181543334Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:24.188211523Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:24.201754785Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:24.206312342Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:24.208074136Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:24.214190059Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:24.215555633Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:24.218545166Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:24.219577871Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:24.221741472Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:24.22466644Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:24.231212915Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:24.2357213Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:24.238657501Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:24.243452771Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:24.256458354Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:24.264907075Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:24.266455723Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:24.276630368Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:24.279884743Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:24.288924426Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:24.291326743Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:24.292707583Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:24.297223524Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:24.3087267Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:24.316180827Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:24.327052556Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:24.339533429Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:24.353801338Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:24.361704696Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:24.36320508Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:24.368882815Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:24.370836562Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:24.375273885Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:24.376798997Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:24.378719053Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:24.3840879Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:24.39707375Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:24.411045586Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:24.416265329Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:24.423750276Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:24.430721239Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:24.437583929Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:24.440860609Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:24.456788061Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:24.460003896Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:24.463447604Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:24.465096481Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:24.467977791Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:24.472993494Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:24.480952495Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:24.488808467Z 59 PC: 12ad9 | Change current directory
2018-12-17T23:06:24.493471674Z 78 PC: 12ae3 | Find first file
2018-12-17T23:06:24.501487836Z 23 PC: 12a8e | Rename file
2018-12-17T23:06:24.508642774Z 44 PC: 12a96 | Get time 0x12a96: mov bx, word ptr cs:[0x299]
0x12a9b: mov al, byte ptr cs:[bx]
0x12a9e: mov bx, dx
0x12aa0: mov cx, 2
0x12aa3: mov dh, 0
0x12aa5: int 0x26
0x12aa7: mov bx, word ptr cs:[0x299]
0x12aac: dec bx
0x12aad: mov word ptr cs:[0x299], bx
0x12ab2: mov dl, byte ptr cs:[bx]
0x12ab5: cmp dl, 0xff
0x12ab8: jne 0x12abd
0x12aba: jmp 0x12bb5
0x12abd: mov ah, 0xe
0x12abf: int 0x21
0x12ac1: mov ah, 0x3b
0x12ac3: mov dx, 0x2ee
0x12ac6: int 0x21
0x12ac8: jmp 0x12b1a
0x12aca: nop
2018-12-17T23:06:24.516834301Z 14 PC: 12bc9 | Set default drive (Drive = '@')
2018-12-17T23:06:24.518647598Z 59 PC: 12bd0 | Change current directory
2018-12-17T23:06:24.523473027Z 19 PC: 12a56 | Delete file
2018-12-17T23:06:24.526544237Z 71 PC: 12a67 | Get current directory
2018-12-17T23:06:24.529884781Z 14 PC: 12a6d | Set default drive (Drive = 'A')
2018-12-17T23:06:24.534668689Z 14 PC: 12ac1 | Set default drive (Drive = 'A')
2018-12-17T23:06:24.536507254Z 59 PC: 12ac8 | Change current directory
2018-12-17T23:06:24.541357769Z 78 PC: 12b24 | Find first file
2018-12-17T23:06:24.549574557Z 23 PC: 12ad2 | Rename file
2018-12-17T23:06:24.559774837Z 81 PC: 122cc | Get current PSP
2018-12-17T23:06:24.56218905Z 2 PC: 1268d | Character output (Char = '0d')
2018-12-17T23:06:24.564659817Z 2 PC: 1268d | Character output (Char = '0a')
2018-12-17T23:06:24.569069405Z 89 PC: 12459 | Get extended error info
2018-12-17T23:06:24.570943665Z 2 PC: 1268d | Character output (Char = '49')
2018-12-17T23:06:24.573562465Z 2 PC: 1268d | Character output (Char = '6e')
2018-12-17T23:06:24.576449271Z 2 PC: 1268d | Character output (Char = '76')
2018-12-17T23:06:24.578837777Z 2 PC: 1268d | Character output (Char = '61')
2018-12-17T23:06:24.582489315Z 2 PC: 1268d | Character output (Char = '6c')
2018-12-17T23:06:24.584805934Z 2 PC: 1268d | Character output (Char = '69')
2018-12-17T23:06:24.587070719Z 2 PC: 1268d | Character output (Char = '64')
2018-12-17T23:06:24.590466563Z 2 PC: 1268d | Character output (Char = '20')
2018-12-17T23:06:24.592826924Z 2 PC: 1268d | Character output (Char = '6d')
2018-12-17T23:06:24.595895057Z 2 PC: 1268d | Character output (Char = '65')
2018-12-17T23:06:24.598237634Z 2 PC: 1268d | Character output (Char = '64')
2018-12-17T23:06:24.60106439Z 2 PC: 1268d | Character output (Char = '69')
2018-12-17T23:06:24.604033651Z 2 PC: 1268d | Character output (Char = '61')
2018-12-17T23:06:24.608501071Z 2 PC: 1268d | Character output (Char = '20')
2018-12-17T23:06:24.617415303Z 2 PC: 1268d | Character output (Char = '74')
2018-12-17T23:06:24.620200165Z 2 PC: 1268d | Character output (Char = '79')
2018-12-17T23:06:24.623471479Z 2 PC: 1268d | Character output (Char = '70')
2018-12-17T23:06:24.627183994Z 2 PC: 1268d | Character output (Char = '65')
2018-12-17T23:06:24.629871783Z 2 PC: 1268d | Character output (Char = '20')
2018-12-17T23:06:24.632844722Z 2 PC: 126da | Character output (Char = '72')
2018-12-17T23:06:24.63537507Z 2 PC: 126da | Character output (Char = '65')
2018-12-17T23:06:24.638487748Z 2 PC: 126da | Character output (Char = '61')
2018-12-17T23:06:24.640782745Z 2 PC: 126da | Character output (Char = '64')
2018-12-17T23:06:24.644038259Z 2 PC: 126da | Character output (Char = '69')
2018-12-17T23:06:24.647920512Z 2 PC: 126da | Character output (Char = '6e')
2018-12-17T23:06:24.650579271Z 2 PC: 126da | Character output (Char = '67')
2018-12-17T23:06:24.654485145Z 2 PC: 1268d | Character output (Char = '20')
2018-12-17T23:06:24.657307867Z 2 PC: 1268d | Character output (Char = '64')
2018-12-17T23:06:24.660359719Z 2 PC: 1268d | Character output (Char = '72')
2018-12-17T23:06:24.663946384Z 2 PC: 1268d | Character output (Char = '69')
2018-12-17T23:06:24.666821169Z 2 PC: 1268d | Character output (Char = '76')
2018-12-17T23:06:24.670254779Z 2 PC: 1268d | Character output (Char = '65')
2018-12-17T23:06:24.672897446Z 2 PC: 1268d | Character output (Char = '20')
2018-12-17T23:06:24.676574308Z 2 PC: 126ce | Character output (Char = '41')
2018-12-17T23:06:24.679139972Z 2 PC: 1268d | Character output (Char = '0d')
2018-12-17T23:06:24.681598567Z 2 PC: 1268d | Character output (Char = '0a')
2018-12-17T23:06:24.686809525Z 2 PC: 1268d | Character output (Char = '41')
2018-12-17T23:06:24.689339358Z 2 PC: 1268d | Character output (Char = '62')
2018-12-17T23:06:24.693111464Z 2 PC: 1268d | Character output (Char = '6f')
2018-12-17T23:06:24.696149437Z 2 PC: 1268d | Character output (Char = '72')
2018-12-17T23:06:24.699295453Z 2 PC: 1268d | Character output (Char = '74')
2018-12-17T23:06:24.703257256Z 2 PC: 1268d | Character output (Char = '2c')
2018-12-17T23:06:24.706311064Z 2 PC: 1268d | Character output (Char = '20')
2018-12-17T23:06:24.710550857Z 2 PC: 1268d | Character output (Char = '52')
2018-12-17T23:06:24.713595457Z 2 PC: 1268d | Character output (Char = '65')
2018-12-17T23:06:24.716960259Z 2 PC: 1268d | Character output (Char = '74')
2018-12-17T23:06:24.719627992Z 2 PC: 1268d | Character output (Char = '72')
2018-12-17T23:06:24.721998632Z 2 PC: 1268d | Character output (Char = '79')
2018-12-17T23:06:24.726344597Z 2 PC: 1268d | Character output (Char = '2c')
2018-12-17T23:06:24.728958125Z 2 PC: 1268d | Character output (Char = '20')
2018-12-17T23:06:24.732845358Z 2 PC: 1268d | Character output (Char = '46')
2018-12-17T23:06:24.73568065Z 2 PC: 1268d | Character output (Char = '61')
2018-12-17T23:06:24.738217215Z 2 PC: 1268d | Character output (Char = '69')
2018-12-17T23:06:24.741692887Z 2 PC: 1268d | Character output (Char = '6c')
2018-12-17T23:06:24.744293159Z 2 PC: 1268d | Character output (Char = '3f')
2018-12-17T23:06:24.749269523Z 12 PC: 12581 | Flush input buffer and input