Sample viewer

vx.netlux.org/Virus.DOS.Kalunu.1275

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:07:39.437877667Z 26 PC: 21ef5 | Set disk transfer address
2018-12-17T23:07:39.440118309Z 53 PC: 21efb | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:07:39.44162995Z 37 PC: 21f0f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:07:39.443043437Z 42 PC: 21f13 | Get date 0x21f13: cmp dl, 0xa
0x21f16: jne 0x21f1b
0x21f18: jmp 0x22065
0x21f1b: mov ah, 0x4e
0x21f1d: lea dx, word ptr [bp + 0x5f1]
0x21f21: mov cx, 7
0x21f24: int 0x21
0x21f26: jae 0x21f2e
0x21f28: nop
0x21f29: nop
0x21f2a: nop
0x21f2b: jmp 0x22003
0x21f2e: push ax
0x21f2f: push cx
0x21f30: push di
0x21f31: push es
0x21f32: push ds
0x21f33: pop es
0x21f34: lea dx, word ptr [bp + 0x619]
0x21f38: mov di, dx
2018-12-17T23:07:39.445884728Z 78 PC: 21f26 | Find first file
2018-12-17T23:07:39.452536141Z 67 PC: 222c7 | Get or set file attributes
2018-12-17T23:07:39.458092976Z 67 PC: 222d7 | Get or set file attributes
2018-12-17T23:07:39.477446336Z 61 PC: 222e0 | Open file (Filename = 'SLEEP.COM')
2018-12-17T23:07:39.485137193Z 87 PC: 222e6 | Get or set file date and time
2018-12-17T23:07:39.486916768Z 63 PC: 21fd3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:07:39.495042282Z 66 PC: 222bd | Move file pointer
2018-12-17T23:07:39.496698285Z 66 PC: 222bd | Move file pointer
2018-12-17T23:07:39.498337717Z 64 PC: 21ff5 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T23:07:39.502138982Z 66 PC: 222bd | Move file pointer
2018-12-17T23:07:39.504456779Z 64 PC: 22227 | Write file or device (Write 1275 bytes on handle 5)
2018-12-17T23:07:39.51450628Z 87 PC: 22315 | Get or set file date and time
2018-12-17T23:07:39.516834667Z 62 PC: 22319 | Close file
2018-12-17T23:07:39.525237071Z 67 PC: 22327 | Get or set file attributes
2018-12-17T23:07:39.535765552Z 79 PC: 21f26 | Find next file
2018-12-17T23:07:39.540682514Z 67 PC: 221c6 | Get or set file attributes
2018-12-17T23:07:39.547037981Z 65 PC: 221ca | Delete file (Filename = 'ANTI-VIR.DAT')
2018-12-17T23:07:39.553440757Z 67 PC: 221c6 | Get or set file attributes
2018-12-17T23:07:39.560737243Z 65 PC: 221ca | Delete file (Filename = 'CHKLIST.MS')
2018-12-17T23:07:39.567425485Z 67 PC: 221c6 | Get or set file attributes
2018-12-17T23:07:39.574660905Z 65 PC: 221ca | Delete file (Filename = 'SMARTCHK.CPS')
2018-12-17T23:07:39.582152167Z 67 PC: 221c6 | Get or set file attributes
2018-12-17T23:07:39.588619794Z 65 PC: 221ca | Delete file (Filename = 'AVP.CRC')
2018-12-17T23:07:39.595207308Z 67 PC: 221c6 | Get or set file attributes
2018-12-17T23:07:39.602242703Z 65 PC: 221ca | Delete file (Filename = 'IVB.NTZ')
2018-12-17T23:07:39.609314796Z 67 PC: 221c6 | Get or set file attributes
2018-12-17T23:07:39.615573541Z 65 PC: 221ca | Delete file (Filename = 'CHKLIST.TAV')
2018-12-17T23:07:39.622693605Z 79 PC: 21f26 | Find next file
2018-12-17T23:07:39.634482456Z 67 PC: 222c7 | Get or set file attributes
2018-12-17T23:07:39.640734939Z 67 PC: 222d7 | Get or set file attributes
2018-12-17T23:07:39.652115501Z 61 PC: 222e0 | Open file (Filename = 'PRINT.COM')
2018-12-17T23:07:39.65973303Z 87 PC: 222e6 | Get or set file date and time
2018-12-17T23:07:39.661705788Z 63 PC: 21fd3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:07:39.669709433Z 66 PC: 222bd | Move file pointer
2018-12-17T23:07:39.671890373Z 66 PC: 222bd | Move file pointer
2018-12-17T23:07:39.673974401Z 64 PC: 21ff5 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T23:07:39.678244417Z 66 PC: 222bd | Move file pointer
2018-12-17T23:07:39.680895831Z 64 PC: 22227 | Write file or device (Write 1275 bytes on handle 5)
2018-12-17T23:07:39.691729465Z 87 PC: 22315 | Get or set file date and time
2018-12-17T23:07:39.693880058Z 62 PC: 22319 | Close file
2018-12-17T23:07:39.702002045Z 67 PC: 22327 | Get or set file attributes
2018-12-17T23:07:39.716202599Z 79 PC: 21f26 | Find next file
2018-12-17T23:07:39.71951745Z 67 PC: 222c7 | Get or set file attributes
2018-12-17T23:07:39.72674732Z 67 PC: 222d7 | Get or set file attributes
2018-12-17T23:07:39.738425001Z 61 PC: 222e0 | Open file (Filename = 'HELLO.COM')
2018-12-17T23:07:39.746075903Z 87 PC: 222e6 | Get or set file date and time
2018-12-17T23:07:39.748635685Z 63 PC: 21fd3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:07:39.760755457Z 66 PC: 222bd | Move file pointer
2018-12-17T23:07:39.76256549Z 66 PC: 222bd | Move file pointer
2018-12-17T23:07:39.765679553Z 64 PC: 21ff5 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T23:07:39.768873717Z 66 PC: 222bd | Move file pointer
2018-12-17T23:07:39.771191464Z 64 PC: 22227 | Write file or device (Write 1275 bytes on handle 5)
2018-12-17T23:07:39.782103356Z 87 PC: 22315 | Get or set file date and time
2018-12-17T23:07:39.784018245Z 62 PC: 22319 | Close file
2018-12-17T23:07:39.792612932Z 67 PC: 22327 | Get or set file attributes
2018-12-17T23:07:39.805101086Z 79 PC: 21f26 | Find next file
2018-12-17T23:07:39.808573864Z 67 PC: 222c7 | Get or set file attributes
2018-12-17T23:07:39.816528456Z 67 PC: 222d7 | Get or set file attributes
2018-12-17T23:07:39.82815946Z 61 PC: 222e0 | Open file (Filename = 'PHANG.COM')
2018-12-17T23:07:39.835495731Z 87 PC: 222e6 | Get or set file date and time
2018-12-17T23:07:39.837307917Z 63 PC: 21fd3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:07:39.84569916Z 66 PC: 222bd | Move file pointer
2018-12-17T23:07:39.847617126Z 66 PC: 222bd | Move file pointer
2018-12-17T23:07:39.849354752Z 64 PC: 21ff5 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T23:07:39.854585624Z 66 PC: 222bd | Move file pointer
2018-12-17T23:07:39.856887051Z 64 PC: 22227 | Write file or device (Write 1275 bytes on handle 5)
2018-12-17T23:07:39.867052629Z 87 PC: 22315 | Get or set file date and time
2018-12-17T23:07:39.869694877Z 62 PC: 22319 | Close file
2018-12-17T23:07:39.878949503Z 67 PC: 22327 | Get or set file attributes
2018-12-17T23:07:39.89334381Z 79 PC: 21f26 | Find next file
2018-12-17T23:07:39.896726459Z 67 PC: 222c7 | Get or set file attributes
2018-12-17T23:07:39.904058261Z 67 PC: 222d7 | Get or set file attributes
2018-12-17T23:07:39.914968039Z 61 PC: 222e0 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T23:07:39.922846959Z 87 PC: 222e6 | Get or set file date and time
2018-12-17T23:07:39.925466754Z 63 PC: 21fd3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:07:39.933570396Z 66 PC: 222bd | Move file pointer
2018-12-17T23:07:39.935287163Z 66 PC: 222bd | Move file pointer
2018-12-17T23:07:39.937649794Z 64 PC: 21ff5 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T23:07:39.941528235Z 66 PC: 222bd | Move file pointer
2018-12-17T23:07:39.944179388Z 64 PC: 22227 | Write file or device (Write 1275 bytes on handle 5)
2018-12-17T23:07:39.956470994Z 87 PC: 22315 | Get or set file date and time
2018-12-17T23:07:39.958689084Z 62 PC: 22319 | Close file
2018-12-17T23:07:39.967679703Z 67 PC: 22327 | Get or set file attributes
2018-12-17T23:07:39.97971675Z 79 PC: 21f26 | Find next file
2018-12-17T23:07:39.983037993Z 67 PC: 222c7 | Get or set file attributes
2018-12-17T23:07:39.989517864Z 67 PC: 222d7 | Get or set file attributes
2018-12-17T23:07:40.000821803Z 61 PC: 222e0 | Open file (Filename = 'MANDEL.COM')
2018-12-17T23:07:40.013334954Z 87 PC: 222e6 | Get or set file date and time
2018-12-17T23:07:40.015376632Z 87 PC: 22315 | Get or set file date and time
2018-12-17T23:07:40.018368045Z 62 PC: 22319 | Close file
2018-12-17T23:07:40.026196891Z 67 PC: 22327 | Get or set file attributes
2018-12-17T23:07:40.036780175Z 79 PC: 21f26 | Find next file
2018-12-17T23:07:40.040816753Z 67 PC: 222c7 | Get or set file attributes
2018-12-17T23:07:40.047687639Z 67 PC: 222d7 | Get or set file attributes
2018-12-17T23:07:40.057917308Z 61 PC: 222e0 | Open file (Filename = 'PAH.COM')
2018-12-17T23:07:40.070077335Z 87 PC: 222e6 | Get or set file date and time
2018-12-17T23:07:40.071858213Z 63 PC: 21fd3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:07:40.079776858Z 66 PC: 222bd | Move file pointer
2018-12-17T23:07:40.082722856Z 66 PC: 222bd | Move file pointer
2018-12-17T23:07:40.084377577Z 64 PC: 21ff5 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T23:07:40.08769884Z 66 PC: 222bd | Move file pointer
2018-12-17T23:07:40.09067284Z 64 PC: 22227 | Write file or device (Write 1275 bytes on handle 5)
2018-12-17T23:07:40.102007967Z 87 PC: 22315 | Get or set file date and time
2018-12-17T23:07:40.10401004Z 62 PC: 22319 | Close file
2018-12-17T23:07:40.113391605Z 67 PC: 22327 | Get or set file attributes
2018-12-17T23:07:40.125449912Z 79 PC: 21f26 | Find next file
2018-12-17T23:07:40.128764262Z 67 PC: 222c7 | Get or set file attributes
2018-12-17T23:07:40.135393934Z 67 PC: 222d7 | Get or set file attributes
2018-12-17T23:07:40.147160192Z 61 PC: 222e0 | Open file (Filename = 'TEST.COM')
2018-12-17T23:07:40.154753575Z 87 PC: 222e6 | Get or set file date and time
2018-12-17T23:07:40.156731323Z 63 PC: 21fd3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:07:40.164701374Z 66 PC: 222bd | Move file pointer
2018-12-17T23:07:40.166665867Z 66 PC: 222bd | Move file pointer
2018-12-17T23:07:40.168519522Z 64 PC: 21ff5 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T23:07:40.172125491Z 66 PC: 222bd | Move file pointer
2018-12-17T23:07:40.17421042Z 64 PC: 22227 | Write file or device (Write 1275 bytes on handle 5)
2018-12-17T23:07:40.18465871Z 87 PC: 22315 | Get or set file date and time
2018-12-17T23:07:40.18688799Z 62 PC: 22319 | Close file
2018-12-17T23:07:40.195704914Z 67 PC: 22327 | Get or set file attributes
2018-12-17T23:07:40.20622071Z 79 PC: 21f26 | Find next file
2018-12-17T23:07:40.209682448Z 26 PC: 2200b | Set disk transfer address
2018-12-17T23:07:40.211334363Z 37 PC: 22014 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:07:40.213911116Z 9 PC: 12a85 | Display string (String= 'Sophos Ltd, Oxford sacrificial COM goat F400H bytes long ')
2018-12-17T23:07:40.221201571Z 0 PC: 12a89 | Program terminate

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":15946,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:44:55.218992999Z 26 PC: 21ef5 | Set disk transfer address
2018-12-25T12:44:55.220389828Z 53 PC: 21efb | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:44:55.22124837Z 37 PC: 21f0f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:44:55.221982055Z 42 PC: 21f13 | Get date 0x21f13: cmp dl, 0xa
0x21f16: jne 0x21f1b
0x21f18: jmp 0x22065
0x21f1b: mov ah, 0x4e
0x21f1d: lea dx, word ptr [bp + 0x5f1]
0x21f21: mov cx, 7
0x21f24: int 0x21
0x21f26: jae 0x21f2e
0x21f28: nop
0x21f29: nop
0x21f2a: nop
0x21f2b: jmp 0x22003
0x21f2e: push ax
0x21f2f: push cx
0x21f30: push di
0x21f31: push es
0x21f32: push ds
0x21f33: pop es
0x21f34: lea dx, word ptr [bp + 0x619]
0x21f38: mov di, dx
2018-12-25T12:44:55.22375958Z 78 PC: 21f26 | Find first file
2018-12-25T12:44:55.227520628Z 67 PC: 222c7 | Get or set file attributes
2018-12-25T12:44:55.231532964Z 67 PC: 222d7 | Get or set file attributes
2018-12-25T12:44:55.248331497Z 61 PC: 222e0 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:44:55.254415276Z 87 PC: 222e6 | Get or set file date and time
2018-12-25T12:44:55.255733314Z 63 PC: 21fd3 | Read file or device (Read 3 bytes on handle 5)
2018-12-25T12:44:55.262177377Z 66 PC: 222bd | Move file pointer
2018-12-25T12:44:55.263808676Z 66 PC: 222bd | Move file pointer (See above)
2018-12-25T12:44:55.265524716Z 64 PC: 21ff5 | Write file or device (Write 3 bytes on handle 5)
2018-12-25T12:44:55.269140978Z 66 PC: 222bd | Move file pointer (See above)
2018-12-25T12:44:55.271361407Z 64 PC: 22227 | Write file or device (Write 1275 bytes on handle 5)
2018-12-25T12:44:55.27977776Z 87 PC: 22315 | Get or set file date and time
2018-12-25T12:44:55.281779846Z 62 PC: 22319 | Close file
2018-12-25T12:44:55.290250712Z 67 PC: 22327 | Get or set file attributes
2018-12-25T12:44:55.299061947Z 79 PC: 21f26 | Find next file (See above)
2018-12-25T12:44:55.302292142Z 67 PC: 221c6 | Get or set file attributes
2018-12-25T12:44:55.308785778Z 65 PC: 221ca | Delete file (Filename = 'ANTI-VIR.DAT')
2018-12-25T12:44:55.314940913Z 67 PC: 221c6 | Get or set file attributes (See above)
2018-12-25T12:44:55.321126868Z 65 PC: 221ca | Delete file (See above)
2018-12-25T12:44:55.327579518Z 67 PC: 221c6 | Get or set file attributes (See above)
2018-12-25T12:44:55.333946853Z 65 PC: 221ca | Delete file (See above)
2018-12-25T12:44:55.339136083Z 67 PC: 221c6 | Get or set file attributes (See above)
2018-12-25T12:44:55.344761259Z 65 PC: 221ca | Delete file (See above)
2018-12-25T12:44:55.351071436Z 67 PC: 221c6 | Get or set file attributes (See above)
2018-12-25T12:44:55.356090435Z 65 PC: 221ca | Delete file (See above)
2018-12-25T12:44:55.362431941Z 67 PC: 221c6 | Get or set file attributes (See above)
2018-12-25T12:44:55.368663247Z 65 PC: 221ca | Delete file (See above)
2018-12-25T12:44:55.374846944Z 79 PC: 21f26 | Find next file (See above)
2018-12-25T12:44:55.378106747Z 67 PC: 222c7 | Get or set file attributes (See above)
2018-12-25T12:44:55.384295156Z 67 PC: 222d7 | Get or set file attributes (See above)
2018-12-25T12:44:55.3953785Z 61 PC: 222e0 | Open file (See above)
2018-12-25T12:44:55.40315487Z 87 PC: 222e6 | Get or set file date and time (See above)
2018-12-25T12:44:55.404637992Z 63 PC: 21fd3 | Read file or device (See above)
2018-12-25T12:44:55.41150559Z 66 PC: 222bd | Move file pointer (See above)
2018-12-25T12:44:55.413724801Z 66 PC: 222bd | Move file pointer (See above)
2018-12-25T12:44:55.415655412Z 64 PC: 21ff5 | Write file or device (See above)
2018-12-25T12:44:55.418978921Z 66 PC: 222bd | Move file pointer (See above)
2018-12-25T12:44:55.421740642Z 64 PC: 22227 | Write file or device (See above)
2018-12-25T12:44:55.432186805Z 87 PC: 22315 | Get or set file date and time (See above)
2018-12-25T12:44:55.433520666Z 62 PC: 22319 | Close file (See above)
2018-12-25T12:44:55.442805294Z 67 PC: 22327 | Get or set file attributes (See above)
2018-12-25T12:44:55.453841629Z 79 PC: 21f26 | Find next file (See above)
2018-12-25T12:44:55.456807137Z 67 PC: 222c7 | Get or set file attributes (See above)
2018-12-25T12:44:55.463761401Z 67 PC: 222d7 | Get or set file attributes (See above)
2018-12-25T12:44:55.475015616Z 61 PC: 222e0 | Open file (See above)
2018-12-25T12:44:55.487970099Z 87 PC: 222e6 | Get or set file date and time (See above)
2018-12-25T12:44:55.491022147Z 63 PC: 21fd3 | Read file or device (See above)
2018-12-25T12:44:55.49813854Z 66 PC: 222bd | Move file pointer (See above)
2018-12-25T12:44:55.499591982Z 66 PC: 222bd | Move file pointer (See above)
2018-12-25T12:44:55.501507556Z 64 PC: 21ff5 | Write file or device (See above)
2018-12-25T12:44:55.50456793Z 66 PC: 222bd | Move file pointer (See above)
2018-12-25T12:44:55.506670977Z 64 PC: 22227 | Write file or device (See above)
2018-12-25T12:44:55.517473984Z 87 PC: 22315 | Get or set file date and time (See above)
2018-12-25T12:44:55.519061434Z 62 PC: 22319 | Close file (See above)
2018-12-25T12:44:55.52751866Z 67 PC: 22327 | Get or set file attributes (See above)
2018-12-25T12:44:55.538324109Z 79 PC: 21f26 | Find next file (See above)
2018-12-25T12:44:55.541465812Z 67 PC: 222c7 | Get or set file attributes (See above)
2018-12-25T12:44:55.547597649Z 67 PC: 222d7 | Get or set file attributes (See above)
2018-12-25T12:44:55.558798416Z 61 PC: 222e0 | Open file (See above)
2018-12-25T12:44:55.572163469Z 87 PC: 222e6 | Get or set file date and time (See above)
2018-12-25T12:44:55.573455087Z 63 PC: 21fd3 | Read file or device (See above)
2018-12-25T12:44:55.580376079Z 66 PC: 222bd | Move file pointer (See above)
2018-12-25T12:44:55.581955124Z 66 PC: 222bd | Move file pointer (See above)
2018-12-25T12:44:55.583457523Z 64 PC: 21ff5 | Write file or device (See above)
2018-12-25T12:44:55.586402798Z 66 PC: 222bd | Move file pointer (See above)
2018-12-25T12:44:55.588670922Z 64 PC: 22227 | Write file or device (See above)
2018-12-25T12:44:55.598807159Z 87 PC: 22315 | Get or set file date and time (See above)
2018-12-25T12:44:55.600527707Z 62 PC: 22319 | Close file (See above)
2018-12-25T12:44:55.609143097Z 67 PC: 22327 | Get or set file attributes (See above)
2018-12-25T12:44:55.615856107Z 79 PC: 21f26 | Find next file (See above)
2018-12-25T12:44:55.618550167Z 67 PC: 222c7 | Get or set file attributes (See above)
2018-12-25T12:44:55.622856146Z 67 PC: 222d7 | Get or set file attributes (See above)
2018-12-25T12:44:55.629473075Z 61 PC: 222e0 | Open file (See above)
2018-12-25T12:44:55.634154573Z 87 PC: 222e6 | Get or set file date and time (See above)
2018-12-25T12:44:55.635686168Z 63 PC: 21fd3 | Read file or device (See above)
2018-12-25T12:44:55.63983325Z 66 PC: 222bd | Move file pointer (See above)
2018-12-25T12:44:55.641250774Z 66 PC: 222bd | Move file pointer (See above)
2018-12-25T12:44:55.642901786Z 64 PC: 21ff5 | Write file or device (See above)
2018-12-25T12:44:55.645618882Z 66 PC: 222bd | Move file pointer (See above)
2018-12-25T12:44:55.647459333Z 64 PC: 22227 | Write file or device (See above)
2018-12-25T12:44:55.657149497Z 87 PC: 22315 | Get or set file date and time (See above)
2018-12-25T12:44:55.65848586Z 62 PC: 22319 | Close file (See above)
2018-12-25T12:44:55.667403512Z 67 PC: 22327 | Get or set file attributes (See above)
2018-12-25T12:44:55.678727098Z 79 PC: 21f26 | Find next file (See above)
2018-12-25T12:44:55.682297721Z 67 PC: 222c7 | Get or set file attributes (See above)
2018-12-25T12:44:55.689730306Z 67 PC: 222d7 | Get or set file attributes (See above)
2018-12-25T12:44:55.701175834Z 61 PC: 222e0 | Open file (See above)
2018-12-25T12:44:55.708835919Z 87 PC: 222e6 | Get or set file date and time (See above)
2018-12-25T12:44:55.710564659Z 87 PC: 22315 | Get or set file date and time (See above)
2018-12-25T12:44:55.713765862Z 62 PC: 22319 | Close file (See above)
2018-12-25T12:44:55.722146935Z 67 PC: 22327 | Get or set file attributes (See above)
2018-12-25T12:44:55.732981129Z 79 PC: 21f26 | Find next file (See above)
2018-12-25T12:44:55.736636278Z 67 PC: 222c7 | Get or set file attributes (See above)
2018-12-25T12:44:55.74295254Z 67 PC: 222d7 | Get or set file attributes (See above)
2018-12-25T12:44:55.756703918Z 61 PC: 222e0 | Open file (See above)
2018-12-25T12:44:55.76430851Z 87 PC: 222e6 | Get or set file date and time (See above)
2018-12-25T12:44:55.765799332Z 63 PC: 21fd3 | Read file or device (See above)
2018-12-25T12:44:55.772807353Z 66 PC: 222bd | Move file pointer (See above)
2018-12-25T12:44:55.774460152Z 66 PC: 222bd | Move file pointer (See above)
2018-12-25T12:44:55.77570552Z 64 PC: 21ff5 | Write file or device (See above)
2018-12-25T12:44:55.777679113Z 66 PC: 222bd | Move file pointer (See above)
2018-12-25T12:44:55.779936733Z 64 PC: 22227 | Write file or device (See above)
2018-12-25T12:44:55.786006455Z 87 PC: 22315 | Get or set file date and time (See above)
2018-12-25T12:44:55.787132263Z 62 PC: 22319 | Close file (See above)
2018-12-25T12:44:55.79273854Z 67 PC: 22327 | Get or set file attributes (See above)
2018-12-25T12:44:55.79958086Z 79 PC: 21f26 | Find next file (See above)
2018-12-25T12:44:55.801446945Z 67 PC: 222c7 | Get or set file attributes (See above)
2018-12-25T12:44:55.805722318Z 67 PC: 222d7 | Get or set file attributes (See above)
2018-12-25T12:44:55.820051645Z 61 PC: 222e0 | Open file (See above)
2018-12-25T12:44:55.82744959Z 87 PC: 222e6 | Get or set file date and time (See above)
2018-12-25T12:44:55.829614023Z 63 PC: 21fd3 | Read file or device (See above)
2018-12-25T12:44:55.836723999Z 66 PC: 222bd | Move file pointer (See above)
2018-12-25T12:44:55.83806898Z 66 PC: 222bd | Move file pointer (See above)
2018-12-25T12:44:55.840072272Z 64 PC: 21ff5 | Write file or device (See above)
2018-12-25T12:44:55.84287262Z 66 PC: 222bd | Move file pointer (See above)
2018-12-25T12:44:55.844900046Z 64 PC: 22227 | Write file or device (See above)
2018-12-25T12:44:55.856207541Z 87 PC: 22315 | Get or set file date and time (See above)
2018-12-25T12:44:55.85788059Z 62 PC: 22319 | Close file (See above)
2018-12-25T12:44:55.866644939Z 67 PC: 22327 | Get or set file attributes (See above)
2018-12-25T12:44:55.879255182Z 79 PC: 21f26 | Find next file (See above)
2018-12-25T12:44:55.882281333Z 26 PC: 2200b | Set disk transfer address
2018-12-25T12:44:55.883849271Z 37 PC: 22014 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:44:55.885987795Z 9 PC: 12a85 | Display string (String= 'Sophos Ltd, Oxford sacrificial COM goat F400H bytes long ')
2018-12-25T12:44:55.892768444Z 0 PC: 12a89 | Program terminate

{"DateBased":true,"Day":10,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":15946,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:44:55.418691188Z 26 PC: 21ef5 | Set disk transfer address
2018-12-25T12:44:55.420169424Z 53 PC: 21efb | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:44:55.420979984Z 37 PC: 21f0f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:44:55.42174709Z 42 PC: 21f13 | Get date 0x21f13: cmp dl, 0xa
0x21f16: jne 0x21f1b
0x21f18: jmp 0x22065
0x21f1b: mov ah, 0x4e
0x21f1d: lea dx, word ptr [bp + 0x5f1]
0x21f21: mov cx, 7
0x21f24: int 0x21
0x21f26: jae 0x21f2e
0x21f28: nop
0x21f29: nop
0x21f2a: nop
0x21f2b: jmp 0x22003
0x21f2e: push ax
0x21f2f: push cx
0x21f30: push di
0x21f31: push es
0x21f32: push ds
0x21f33: pop es
0x21f34: lea dx, word ptr [bp + 0x619]
0x21f38: mov di, dx
2018-12-25T12:44:55.424540768Z 57 PC: 2206f | Create subdirectory
2018-12-25T12:44:55.427071055Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.431460342Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.436415531Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.446164039Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.451897591Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.468045837Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.472548088Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.476713738Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.481384082Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.486379035Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.496248183Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.505991296Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.515656943Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.525613264Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.529798674Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.5341891Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.538349747Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.54260206Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.552168197Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.56161607Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.571049695Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.580656319Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.585434254Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.589501219Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.600311575Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.604611565Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.608919435Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.613674979Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.617916912Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.622011774Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.626555613Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.630824448Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.635021366Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.656739472Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.66148559Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.66989184Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.680167869Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.694076406Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.707755792Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.722533891Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.736748647Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.750664886Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.756643948Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.765407268Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.775273569Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.791283401Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.794484552Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.797264426Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.806048112Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.819422504Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.835321826Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.850698482Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.860184474Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.869018319Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.878728263Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.888271652Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.900601198Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.910648718Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.913989051Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.916760135Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.920878615Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.924395045Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.931680152Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.9387004Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.952554766Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.963023673Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.97312107Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.981866803Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.990551279Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:55.999209291Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.008336025Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.019929756Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.03035678Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.043264718Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.051428086Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.060054794Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.074240758Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.091171189Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.105646302Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.119422909Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.133753094Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.148238642Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.162028404Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.175847634Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.189869354Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.203980098Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.214259767Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.228120819Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.237891267Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.248750563Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.263566961Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.275089703Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.27985368Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.284982128Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.301088678Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.315245925Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.332498855Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.340841781Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.347934811Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.355507957Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.371414229Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.38422233Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.397176543Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.40598289Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.413942797Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.421507182Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.429941805Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.437486086Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.445073073Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.453024555Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.463764904Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.468023424Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.473049524Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.477623933Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.482342763Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.491199248Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.498729679Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.506838832Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.515136084Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.523441174Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.527880762Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.534124071Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.538597388Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.547191195Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.553842263Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.564834033Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.578166762Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.59582591Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.605913333Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.614839388Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.619668798Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.62389718Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.634322046Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.643436506Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.657266149Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.662932877Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.672015489Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.679769707Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.686836308Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.699931845Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.712669013Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.720110968Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.731256054Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.738162551Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.749401453Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.769309681Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.776545888Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.78373138Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.797814209Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.804755572Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.817022527Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.830965158Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.838504918Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.848563179Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.856244973Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.870503445Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.887362106Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.902420502Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.916121459Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.930147055Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.938893291Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.946392814Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.960438646Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.970329297Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.98599286Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.993781328Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.01111492Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.026850737Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.041366852Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.057650103Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.072258271Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.087299008Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.103740519Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.117726553Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.132178373Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.147385378Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.161783376Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.176271191Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.191771Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.208916586Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.224884218Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.241270616Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.256473697Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.271152217Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.285250801Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.30510475Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.320861324Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.33648547Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.350731967Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.365268202Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.379969196Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.393867493Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.407876697Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.423577099Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.438011866Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.452523375Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.467467913Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.482596658Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.497517911Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.509700036Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.519660516Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.529455376Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.539198893Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.551989556Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.56467328Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.57579048Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.586544279Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.596401424Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.606974507Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.6190589Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.627772813Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.637290681Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.647448086Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.6587192Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.673980344Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.692461722Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.707318996Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.722663951Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.737536603Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.752190298Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.766458388Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.780761709Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.795238814Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.811438686Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.82615937Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.840642726Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.856265444Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.871178335Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.885755937Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.898335494Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.908204967Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.917690086Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.932063075Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.940744262Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.950062239Z 9 PC: 2207d | Display string (Could not find end pointer)
2018-12-25T12:44:57.964019812Z 26 PC: 2200b | Set disk transfer address
2018-12-25T12:44:57.965933812Z 37 PC: 22014 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:44:57.967935788Z 9 PC: 12a85 | Display string (String= 'Sophos Ltd, Oxford sacrificial COM goat F400H bytes long ')
2018-12-25T12:44:57.975770984Z 0 PC: 12a89 | Program terminate

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":15946,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:44:56.052904155Z 26 PC: 21ef5 | Set disk transfer address
2018-12-25T12:44:56.055770618Z 53 PC: 21efb | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:44:56.056858471Z 37 PC: 21f0f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:44:56.057832811Z 42 PC: 21f13 | Get date 0x21f13: cmp dl, 0xa
0x21f16: jne 0x21f1b
0x21f18: jmp 0x22065
0x21f1b: mov ah, 0x4e
0x21f1d: lea dx, word ptr [bp + 0x5f1]
0x21f21: mov cx, 7
0x21f24: int 0x21
0x21f26: jae 0x21f2e
0x21f28: nop
0x21f29: nop
0x21f2a: nop
0x21f2b: jmp 0x22003
0x21f2e: push ax
0x21f2f: push cx
0x21f30: push di
0x21f31: push es
0x21f32: push ds
0x21f33: pop es
0x21f34: lea dx, word ptr [bp + 0x619]
0x21f38: mov di, dx
2018-12-25T12:44:56.060144035Z 78 PC: 21f26 | Find first file
2018-12-25T12:44:56.066136503Z 67 PC: 222c7 | Get or set file attributes
2018-12-25T12:44:56.071502161Z 67 PC: 222d7 | Get or set file attributes
2018-12-25T12:44:56.089844306Z 61 PC: 222e0 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:44:56.09645137Z 87 PC: 222e6 | Get or set file date and time
2018-12-25T12:44:56.098074307Z 63 PC: 21fd3 | Read file or device (Read 3 bytes on handle 5)
2018-12-25T12:44:56.104905422Z 66 PC: 222bd | Move file pointer
2018-12-25T12:44:56.106396246Z 66 PC: 222bd | Move file pointer (See above)
2018-12-25T12:44:56.107729215Z 64 PC: 21ff5 | Write file or device (Write 3 bytes on handle 5)
2018-12-25T12:44:56.110540082Z 66 PC: 222bd | Move file pointer (See above)
2018-12-25T12:44:56.112409166Z 64 PC: 22227 | Write file or device (Write 1275 bytes on handle 5)
2018-12-25T12:44:56.12133701Z 87 PC: 22315 | Get or set file date and time
2018-12-25T12:44:56.124881271Z 62 PC: 22319 | Close file
2018-12-25T12:44:56.132794666Z 67 PC: 22327 | Get or set file attributes
2018-12-25T12:44:56.14282591Z 79 PC: 21f26 | Find next file (See above)
2018-12-25T12:44:56.146473568Z 67 PC: 221c6 | Get or set file attributes
2018-12-25T12:44:56.153109822Z 65 PC: 221ca | Delete file (Filename = 'ANTI-VIR.DAT')
2018-12-25T12:44:56.158684032Z 67 PC: 221c6 | Get or set file attributes (See above)
2018-12-25T12:44:56.165581006Z 65 PC: 221ca | Delete file (See above)
2018-12-25T12:44:56.17142352Z 67 PC: 221c6 | Get or set file attributes (See above)
2018-12-25T12:44:56.177231086Z 65 PC: 221ca | Delete file (See above)
2018-12-25T12:44:56.183726911Z 67 PC: 221c6 | Get or set file attributes (See above)
2018-12-25T12:44:56.189363408Z 65 PC: 221ca | Delete file (See above)
2018-12-25T12:44:56.19517507Z 67 PC: 221c6 | Get or set file attributes (See above)
2018-12-25T12:44:56.201559268Z 65 PC: 221ca | Delete file (See above)
2018-12-25T12:44:56.207384509Z 67 PC: 221c6 | Get or set file attributes (See above)
2018-12-25T12:44:56.213240246Z 65 PC: 221ca | Delete file (See above)
2018-12-25T12:44:56.220809511Z 79 PC: 21f26 | Find next file (See above)
2018-12-25T12:44:56.223629915Z 67 PC: 222c7 | Get or set file attributes (See above)
2018-12-25T12:44:56.229478627Z 67 PC: 222d7 | Get or set file attributes (See above)
2018-12-25T12:44:56.239688143Z 61 PC: 222e0 | Open file (See above)
2018-12-25T12:44:56.246150932Z 87 PC: 222e6 | Get or set file date and time (See above)
2018-12-25T12:44:56.247477488Z 63 PC: 21fd3 | Read file or device (See above)
2018-12-25T12:44:56.254458913Z 66 PC: 222bd | Move file pointer (See above)
2018-12-25T12:44:56.256117169Z 66 PC: 222bd | Move file pointer (See above)
2018-12-25T12:44:56.257709241Z 64 PC: 21ff5 | Write file or device (See above)
2018-12-25T12:44:56.261041884Z 66 PC: 222bd | Move file pointer (See above)
2018-12-25T12:44:56.263135613Z 64 PC: 22227 | Write file or device (See above)
2018-12-25T12:44:56.272650279Z 87 PC: 22315 | Get or set file date and time (See above)
2018-12-25T12:44:56.274678051Z 62 PC: 22319 | Close file (See above)
2018-12-25T12:44:56.282608574Z 67 PC: 22327 | Get or set file attributes (See above)
2018-12-25T12:44:56.29231724Z 79 PC: 21f26 | Find next file (See above)
2018-12-25T12:44:56.295427077Z 67 PC: 222c7 | Get or set file attributes (See above)
2018-12-25T12:44:56.301164204Z 67 PC: 222d7 | Get or set file attributes (See above)
2018-12-25T12:44:56.310604239Z 61 PC: 222e0 | Open file (See above)
2018-12-25T12:44:56.317600798Z 87 PC: 222e6 | Get or set file date and time (See above)
2018-12-25T12:44:56.318905545Z 63 PC: 21fd3 | Read file or device (See above)
2018-12-25T12:44:56.324993977Z 66 PC: 222bd | Move file pointer (See above)
2018-12-25T12:44:56.326898418Z 66 PC: 222bd | Move file pointer (See above)
2018-12-25T12:44:56.328348038Z 64 PC: 21ff5 | Write file or device (See above)
2018-12-25T12:44:56.331312128Z 66 PC: 222bd | Move file pointer (See above)
2018-12-25T12:44:56.33432403Z 64 PC: 22227 | Write file or device (See above)
2018-12-25T12:44:56.343964353Z 87 PC: 22315 | Get or set file date and time (See above)
2018-12-25T12:44:56.346496164Z 62 PC: 22319 | Close file (See above)
2018-12-25T12:44:56.354929836Z 67 PC: 22327 | Get or set file attributes (See above)
2018-12-25T12:44:56.364195382Z 79 PC: 21f26 | Find next file (See above)
2018-12-25T12:44:56.366774887Z 67 PC: 222c7 | Get or set file attributes (See above)
2018-12-25T12:44:56.373357344Z 67 PC: 222d7 | Get or set file attributes (See above)
2018-12-25T12:44:56.382962745Z 61 PC: 222e0 | Open file (See above)
2018-12-25T12:44:56.393237748Z 87 PC: 222e6 | Get or set file date and time (See above)
2018-12-25T12:44:56.395234581Z 63 PC: 21fd3 | Read file or device (See above)
2018-12-25T12:44:56.401350894Z 66 PC: 222bd | Move file pointer (See above)
2018-12-25T12:44:56.402861151Z 66 PC: 222bd | Move file pointer (See above)
2018-12-25T12:44:56.405068226Z 64 PC: 21ff5 | Write file or device (See above)
2018-12-25T12:44:56.407487453Z 66 PC: 222bd | Move file pointer (See above)
2018-12-25T12:44:56.40915811Z 64 PC: 22227 | Write file or device (See above)
2018-12-25T12:44:56.41882408Z 87 PC: 22315 | Get or set file date and time (See above)
2018-12-25T12:44:56.420117184Z 62 PC: 22319 | Close file (See above)
2018-12-25T12:44:56.427309809Z 67 PC: 22327 | Get or set file attributes (See above)
2018-12-25T12:44:56.437022492Z 79 PC: 21f26 | Find next file (See above)
2018-12-25T12:44:56.439459086Z 67 PC: 222c7 | Get or set file attributes (See above)
2018-12-25T12:44:56.444874605Z 67 PC: 222d7 | Get or set file attributes (See above)
2018-12-25T12:44:56.451629704Z 61 PC: 222e0 | Open file (See above)
2018-12-25T12:44:56.463353473Z 87 PC: 222e6 | Get or set file date and time (See above)
2018-12-25T12:44:56.464934789Z 63 PC: 21fd3 | Read file or device (See above)
2018-12-25T12:44:56.471767579Z 66 PC: 222bd | Move file pointer (See above)
2018-12-25T12:44:56.473206467Z 66 PC: 222bd | Move file pointer (See above)
2018-12-25T12:44:56.475667754Z 64 PC: 21ff5 | Write file or device (See above)
2018-12-25T12:44:56.479155536Z 66 PC: 222bd | Move file pointer (See above)
2018-12-25T12:44:56.481110815Z 64 PC: 22227 | Write file or device (See above)
2018-12-25T12:44:56.490419627Z 87 PC: 22315 | Get or set file date and time (See above)
2018-12-25T12:44:56.493140527Z 62 PC: 22319 | Close file (See above)
2018-12-25T12:44:56.501084974Z 67 PC: 22327 | Get or set file attributes (See above)
2018-12-25T12:44:56.50910113Z 79 PC: 21f26 | Find next file (See above)
2018-12-25T12:44:56.511532748Z 67 PC: 222c7 | Get or set file attributes (See above)
2018-12-25T12:44:56.515159023Z 67 PC: 222d7 | Get or set file attributes (See above)
2018-12-25T12:44:56.52177507Z 61 PC: 222e0 | Open file (See above)
2018-12-25T12:44:56.53371388Z 87 PC: 222e6 | Get or set file date and time (See above)
2018-12-25T12:44:56.535169927Z 87 PC: 22315 | Get or set file date and time (See above)
2018-12-25T12:44:56.536554311Z 62 PC: 22319 | Close file (See above)
2018-12-25T12:44:56.547016321Z 67 PC: 22327 | Get or set file attributes (See above)
2018-12-25T12:44:56.556699577Z 79 PC: 21f26 | Find next file (See above)
2018-12-25T12:44:56.559276883Z 67 PC: 222c7 | Get or set file attributes (See above)
2018-12-25T12:44:56.56532994Z 67 PC: 222d7 | Get or set file attributes (See above)
2018-12-25T12:44:56.574802256Z 61 PC: 222e0 | Open file (See above)
2018-12-25T12:44:56.581783731Z 87 PC: 222e6 | Get or set file date and time (See above)
2018-12-25T12:44:56.583928152Z 63 PC: 21fd3 | Read file or device (See above)
2018-12-25T12:44:56.599394552Z 66 PC: 222bd | Move file pointer (See above)
2018-12-25T12:44:56.600454916Z 66 PC: 222bd | Move file pointer (See above)
2018-12-25T12:44:56.601726406Z 64 PC: 21ff5 | Write file or device (See above)
2018-12-25T12:44:56.604407921Z 66 PC: 222bd | Move file pointer (See above)
2018-12-25T12:44:56.606241232Z 64 PC: 22227 | Write file or device (See above)
2018-12-25T12:44:56.61359661Z 87 PC: 22315 | Get or set file date and time (See above)
2018-12-25T12:44:56.614703922Z 62 PC: 22319 | Close file (See above)
2018-12-25T12:44:56.620027336Z 67 PC: 22327 | Get or set file attributes (See above)
2018-12-25T12:44:56.626270325Z 79 PC: 21f26 | Find next file (See above)
2018-12-25T12:44:56.62870128Z 67 PC: 222c7 | Get or set file attributes (See above)
2018-12-25T12:44:56.634656688Z 67 PC: 222d7 | Get or set file attributes (See above)
2018-12-25T12:44:56.644090594Z 61 PC: 222e0 | Open file (See above)
2018-12-25T12:44:56.655119359Z 87 PC: 222e6 | Get or set file date and time (See above)
2018-12-25T12:44:56.656906299Z 63 PC: 21fd3 | Read file or device (See above)
2018-12-25T12:44:56.663008007Z 66 PC: 222bd | Move file pointer (See above)
2018-12-25T12:44:56.664262253Z 66 PC: 222bd | Move file pointer (See above)
2018-12-25T12:44:56.666713927Z 64 PC: 21ff5 | Write file or device (See above)
2018-12-25T12:44:56.669085041Z 66 PC: 222bd | Move file pointer (See above)
2018-12-25T12:44:56.67066756Z 64 PC: 22227 | Write file or device (See above)
2018-12-25T12:44:56.677599222Z 87 PC: 22315 | Get or set file date and time (See above)
2018-12-25T12:44:56.6797715Z 62 PC: 22319 | Close file (See above)
2018-12-25T12:44:56.68473101Z 67 PC: 22327 | Get or set file attributes (See above)
2018-12-25T12:44:56.694640881Z 79 PC: 21f26 | Find next file (See above)
2018-12-25T12:44:56.697639663Z 26 PC: 2200b | Set disk transfer address
2018-12-25T12:44:56.698891547Z 37 PC: 22014 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:44:56.700952685Z 9 PC: 12a85 | Display string (String= 'Sophos Ltd, Oxford sacrificial COM goat F400H bytes long ')
2018-12-25T12:44:56.707201386Z 0 PC: 12a89 | Program terminate

{"DateBased":true,"Day":10,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":15946,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:44:56.364935771Z 26 PC: 21ef5 | Set disk transfer address
2018-12-25T12:44:56.365998866Z 53 PC: 21efb | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:44:56.367148423Z 37 PC: 21f0f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:44:56.368940276Z 42 PC: 21f13 | Get date 0x21f13: cmp dl, 0xa
0x21f16: jne 0x21f1b
0x21f18: jmp 0x22065
0x21f1b: mov ah, 0x4e
0x21f1d: lea dx, word ptr [bp + 0x5f1]
0x21f21: mov cx, 7
0x21f24: int 0x21
0x21f26: jae 0x21f2e
0x21f28: nop
0x21f29: nop
0x21f2a: nop
0x21f2b: jmp 0x22003
0x21f2e: push ax
0x21f2f: push cx
0x21f30: push di
0x21f31: push es
0x21f32: push ds
0x21f33: pop es
0x21f34: lea dx, word ptr [bp + 0x619]
0x21f38: mov di, dx
2018-12-25T12:44:56.371228607Z 57 PC: 2206f | Create subdirectory
2018-12-25T12:44:56.372934061Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.377496056Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.382060611Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.391000522Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.400257662Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.404979368Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.408809225Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.41268387Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.417159557Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.425973943Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.434615688Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.444622175Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.453509223Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.459187435Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.462183952Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.464625797Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.466991009Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.46985517Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.475094631Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.483552417Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.492308066Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.50069473Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.508849922Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.51861748Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.522337602Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.525989625Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.530241035Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.533952508Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.537625073Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.541898798Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.545562844Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.549273958Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.553628438Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.571744132Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.575508894Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.588602956Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.600891848Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.613513822Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.626644674Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.638865936Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.65329956Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.66599079Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.670582799Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.674842298Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.679526245Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.694000064Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.703580124Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.708244537Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.716563174Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.726512633Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.736991809Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.750149328Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.767590958Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.781974902Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.794657751Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.807034227Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.820206033Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.833584513Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.8379345Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.84266327Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.846540991Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.850451459Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.859524144Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.868521554Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.88282016Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.892900076Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.905952506Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.917913476Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.931453472Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.939430877Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.948720189Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.963919077Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.975966765Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:56.988025236Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.000902907Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.013484615Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.027321645Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.040549769Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.053165743Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.065397613Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.081417603Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.094197263Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.106761058Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.120514098Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.133250174Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.146129534Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.159360966Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.172098262Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.18440437Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.205392842Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.217594949Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.221435785Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.226082343Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.229846127Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.244064993Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.256410699Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.264474253Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.268431783Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.272845148Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.27689001Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.28354461Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.295933624Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.307898251Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.319013318Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.32426942Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.328251587Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.334619042Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.341763193Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.348394493Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.354615747Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.364894531Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.371253806Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.377614976Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.386302844Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.392906687Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.399659441Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.407335931Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.414432355Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.421013491Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.428413776Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.435340054Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.441967651Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.449995101Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.464899922Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.472413232Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.490550484Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.503302125Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.522620986Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.535627914Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.549249177Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.55558361Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.562844698Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.578188781Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.585180349Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.598405942Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.605016611Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.611921626Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.624238895Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.637643869Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.644654025Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.652565424Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.659080012Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.670427287Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.678744536Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.691900102Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.704935636Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.71283004Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.719481834Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.732710856Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.740219083Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.753299151Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.765911027Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.773548914Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.783003725Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.789735012Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.803158833Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.818529889Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.832334626Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.846507901Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.859502604Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.865828551Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.872818079Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.884484457Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.89090266Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.90434747Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.911127828Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.920770571Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.930777303Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.941188986Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.949394196Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.957254106Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.965039367Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.973530074Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:57.985706593Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.00068005Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.01454008Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.026997227Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.039448221Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.052595419Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.065907919Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.078291968Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.093702202Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.106624412Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.119235538Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.13541657Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.147783334Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.15978274Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.172556529Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.186126936Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.19887852Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.211812462Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.22453305Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.236745732Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.250097632Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.264169055Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.276618256Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.289525585Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.303422097Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.319372976Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.332866656Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.346466232Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.359291362Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.373113362Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.386364601Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.399563114Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.413712908Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.427835412Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.443926384Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.457110272Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.469786099Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.482353178Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.495849242Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.508257796Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.52110501Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.534116699Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.546587679Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.563266548Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.577164031Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.590003661Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.602850114Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.614617522Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.62335899Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.636042032Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.649561167Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.66325806Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.679350834Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.692817377Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.705956171Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.718781825Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.732808488Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.746657483Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.759480894Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.772900854Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.78605532Z 57 PC: 2206f | Create subdirectory (See above)
2018-12-25T12:44:58.803292494Z 9 PC: 2207d | Display string (Could not find end pointer)
2018-12-25T12:44:58.819459944Z 26 PC: 2200b | Set disk transfer address
2018-12-25T12:44:58.821036197Z 37 PC: 22014 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:44:58.822389976Z 9 PC: 12a85 | Display string (String= 'Sophos Ltd, Oxford sacrificial COM goat F400H bytes long ')
2018-12-25T12:44:58.830068614Z 0 PC: 12a89 | Program terminate