Sample viewer

vx.netlux.org/Virus.DOS.Bob.718.b

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:12:56.328055109Z 42 PC: 12c77 | Get date 0x12c77: cmp cx, 0x7c9
0x12c7b: jb 0x12c83
0x12c7d: cmp dh, 1
0x12c80: jne 0x12c83
0x12c82: inc bp
0x12c83: mov dl, 0
0x12c85: mov si, 0
0x12c88: push ss
0x12c89: pop ds
0x12c8a: mov ah, 0x47
0x12c8c: int 0x21
0x12c8e: push cs
0x12c8f: pop ds
0x12c90: call 0x22a62
0x12c93: mov ah, 0x19
0x12c95: int 0x21
0x12c97: push ax
0x12c98: mov dl, al
0x12c9a: cmp al, bl
0x12c9c: jbe 0x12ca0
2018-12-17T22:12:56.330121747Z 71 PC: 12c8e | Get current directory
2018-12-17T22:12:56.332087402Z 25 PC: 12c97 | Get default drive
2018-12-17T22:12:56.332833755Z 14 PC: 12ca4 | Set default drive (Drive = 'A')
2018-12-17T22:12:56.334280314Z 59 PC: 12a57 | Change current directory
2018-12-17T22:12:56.336780795Z 78 PC: 12a5c | Find first file
2018-12-17T22:12:56.340628724Z 78 PC: 12a5c | Find first file
2018-12-17T22:12:56.344793585Z 67 PC: 12a8c | Get or set file attributes
2018-12-17T22:12:56.357627663Z 61 PC: 12a91 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:12:56.364296061Z 66 PC: 12b53 | Move file pointer
2018-12-17T22:12:56.36685328Z 66 PC: 12b53 | Move file pointer
2018-12-17T22:12:56.368316548Z 64 PC: 12b6c | Write file or device (Write 20 bytes on handle 5)
2018-12-17T22:12:56.379783731Z 66 PC: 12b75 | Move file pointer
2018-12-17T22:12:56.381902009Z 63 PC: 12b81 | Read file or device (Read 698 bytes on handle 5)
2018-12-17T22:12:56.389757206Z 66 PC: 12b8a | Move file pointer
2018-12-17T22:12:56.391517357Z 64 PC: 12b94 | Write file or device (Write 698 bytes on handle 5)
2018-12-17T22:12:56.399734726Z 66 PC: 12baa | Move file pointer
2018-12-17T22:12:56.406885249Z 64 PC: 12bb4 | Write file or device (Write 698 bytes on handle 5)
2018-12-17T22:12:56.414732641Z 87 PC: 12aa5 | Get or set file date and time
2018-12-17T22:12:56.416937259Z 62 PC: 12aa9 | Close file
2018-12-17T22:12:56.423096748Z 67 PC: 12aae | Get or set file attributes
2018-12-17T22:12:56.426052438Z 79 PC: 12a61 | Find next file
2018-12-17T22:12:56.427892128Z 67 PC: 12a8c | Get or set file attributes
2018-12-17T22:12:56.434657145Z 61 PC: 12a91 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:12:56.439470884Z 66 PC: 12b53 | Move file pointer
2018-12-17T22:12:56.440732892Z 66 PC: 12b53 | Move file pointer
2018-12-17T22:12:56.442469058Z 64 PC: 12b6c | Write file or device (Write 20 bytes on handle 5)
2018-12-17T22:12:56.445017001Z 66 PC: 12b75 | Move file pointer
2018-12-17T22:12:56.446129728Z 63 PC: 12b81 | Read file or device (Read 698 bytes on handle 5)
2018-12-17T22:12:56.450995662Z 66 PC: 12b8a | Move file pointer
2018-12-17T22:12:56.452084336Z 64 PC: 12b94 | Write file or device (Write 698 bytes on handle 5)
2018-12-17T22:12:56.457721287Z 66 PC: 12baa | Move file pointer
2018-12-17T22:12:56.459512386Z 64 PC: 12bb4 | Write file or device (Write 698 bytes on handle 5)
2018-12-17T22:12:56.46475075Z 87 PC: 12aa5 | Get or set file date and time
2018-12-17T22:12:56.465945251Z 62 PC: 12aa9 | Close file
2018-12-17T22:12:56.471329114Z 67 PC: 12aae | Get or set file attributes
2018-12-17T22:12:56.481019755Z 79 PC: 12a61 | Find next file
2018-12-17T22:12:56.487812428Z 67 PC: 12a8c | Get or set file attributes
2018-12-17T22:12:56.498041231Z 61 PC: 12a91 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:12:56.505151926Z 66 PC: 12b53 | Move file pointer
2018-12-17T22:12:56.50662549Z 66 PC: 12b53 | Move file pointer
2018-12-17T22:12:56.507939491Z 64 PC: 12b6c | Write file or device (Write 20 bytes on handle 5)
2018-12-17T22:12:56.511825975Z 66 PC: 12b75 | Move file pointer
2018-12-17T22:12:56.513164932Z 63 PC: 12b81 | Read file or device (Read 698 bytes on handle 5)
2018-12-17T22:12:56.52024164Z 66 PC: 12b8a | Move file pointer
2018-12-17T22:12:56.522419804Z 64 PC: 12b94 | Write file or device (Write 698 bytes on handle 5)
2018-12-17T22:12:56.530320713Z 66 PC: 12baa | Move file pointer
2018-12-17T22:12:56.531983227Z 64 PC: 12bb4 | Write file or device (Write 698 bytes on handle 5)
2018-12-17T22:12:56.540738313Z 87 PC: 12aa5 | Get or set file date and time
2018-12-17T22:12:56.542580859Z 62 PC: 12aa9 | Close file
2018-12-17T22:12:56.550423726Z 67 PC: 12aae | Get or set file attributes
2018-12-17T22:12:56.557059532Z 79 PC: 12a61 | Find next file
2018-12-17T22:12:56.55990266Z 67 PC: 12a8c | Get or set file attributes
2018-12-17T22:12:56.569505237Z 61 PC: 12a91 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:12:56.57829778Z 66 PC: 12b53 | Move file pointer
2018-12-17T22:12:56.579928396Z 66 PC: 12b53 | Move file pointer
2018-12-17T22:12:56.581458096Z 64 PC: 12b6c | Write file or device (Write 20 bytes on handle 5)
2018-12-17T22:12:56.585572391Z 66 PC: 12b75 | Move file pointer
2018-12-17T22:12:56.586811936Z 63 PC: 12b81 | Read file or device (Read 698 bytes on handle 5)
2018-12-17T22:12:56.593582993Z 66 PC: 12b8a | Move file pointer
2018-12-17T22:12:56.595336471Z 64 PC: 12b94 | Write file or device (Write 698 bytes on handle 5)
2018-12-17T22:12:56.603072992Z 66 PC: 12baa | Move file pointer
2018-12-17T22:12:56.604327948Z 64 PC: 12bb4 | Write file or device (Write 698 bytes on handle 5)
2018-12-17T22:12:56.612435046Z 87 PC: 12aa5 | Get or set file date and time
2018-12-17T22:12:56.613838677Z 62 PC: 12aa9 | Close file
2018-12-17T22:12:56.621832027Z 67 PC: 12aae | Get or set file attributes
2018-12-17T22:12:56.627283009Z 79 PC: 12a61 | Find next file
2018-12-17T22:12:56.630182121Z 67 PC: 12a8c | Get or set file attributes
2018-12-17T22:12:56.63980035Z 61 PC: 12a91 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:12:56.647019522Z 66 PC: 12b53 | Move file pointer
2018-12-17T22:12:56.649070241Z 66 PC: 12b53 | Move file pointer
2018-12-17T22:12:56.652018181Z 64 PC: 12b6c | Write file or device (Write 20 bytes on handle 5)
2018-12-17T22:12:56.656197281Z 66 PC: 12b75 | Move file pointer
2018-12-17T22:12:56.657495172Z 63 PC: 12b81 | Read file or device (Read 698 bytes on handle 5)
2018-12-17T22:12:56.664140205Z 66 PC: 12b8a | Move file pointer
2018-12-17T22:12:56.666003342Z 64 PC: 12b94 | Write file or device (Write 698 bytes on handle 5)
2018-12-17T22:12:56.673992678Z 66 PC: 12baa | Move file pointer
2018-12-17T22:12:56.675327385Z 64 PC: 12bb4 | Write file or device (Write 698 bytes on handle 5)
2018-12-17T22:12:56.684180586Z 87 PC: 12aa5 | Get or set file date and time
2018-12-17T22:12:56.686369412Z 62 PC: 12aa9 | Close file
2018-12-17T22:12:56.694094779Z 67 PC: 12aae | Get or set file attributes
2018-12-17T22:12:56.699590593Z 79 PC: 12a61 | Find next file
2018-12-17T22:12:56.702331421Z 67 PC: 12a8c | Get or set file attributes
2018-12-17T22:12:56.712693788Z 61 PC: 12a91 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:12:56.720054787Z 66 PC: 12b53 | Move file pointer
2018-12-17T22:12:56.721480383Z 66 PC: 12b53 | Move file pointer
2018-12-17T22:12:56.722667246Z 64 PC: 12b6c | Write file or device (Write 20 bytes on handle 5)
2018-12-17T22:12:56.7266192Z 66 PC: 12b75 | Move file pointer
2018-12-17T22:12:56.727840996Z 63 PC: 12b81 | Read file or device (Read 698 bytes on handle 5)
2018-12-17T22:12:56.73466388Z 66 PC: 12b8a | Move file pointer
2018-12-17T22:12:56.737463591Z 64 PC: 12b94 | Write file or device (Write 698 bytes on handle 5)
2018-12-17T22:12:56.746102375Z 66 PC: 12baa | Move file pointer
2018-12-17T22:12:56.747851956Z 64 PC: 12bb4 | Write file or device (Write 698 bytes on handle 5)
2018-12-17T22:12:56.754543186Z 87 PC: 12aa5 | Get or set file date and time
2018-12-17T22:12:56.756518502Z 62 PC: 12aa9 | Close file
2018-12-17T22:12:56.762885025Z 67 PC: 12aae | Get or set file attributes
2018-12-17T22:12:56.767862939Z 79 PC: 12a61 | Find next file
2018-12-17T22:12:56.770648829Z 67 PC: 12a8c | Get or set file attributes
2018-12-17T22:12:56.792027978Z 61 PC: 12a91 | Open file (Filename = 'PAH.COM')
2018-12-17T22:12:56.799637048Z 66 PC: 12b53 | Move file pointer
2018-12-17T22:12:56.801724031Z 66 PC: 12b53 | Move file pointer
2018-12-17T22:12:56.803452516Z 64 PC: 12b6c | Write file or device (Write 20 bytes on handle 5)
2018-12-17T22:12:56.807684588Z 66 PC: 12b75 | Move file pointer
2018-12-17T22:12:56.81028016Z 63 PC: 12b81 | Read file or device (Read 698 bytes on handle 5)
2018-12-17T22:12:56.821790707Z 66 PC: 12b8a | Move file pointer
2018-12-17T22:12:56.825024175Z 64 PC: 12b94 | Write file or device (Write 698 bytes on handle 5)
2018-12-17T22:12:56.834303397Z 66 PC: 12baa | Move file pointer
2018-12-17T22:12:56.836211239Z 64 PC: 12bb4 | Write file or device (Write 698 bytes on handle 5)
2018-12-17T22:12:56.84486155Z 87 PC: 12aa5 | Get or set file date and time
2018-12-17T22:12:56.847762845Z 62 PC: 12aa9 | Close file
2018-12-17T22:12:56.856530839Z 67 PC: 12aae | Get or set file attributes
2018-12-17T22:12:56.866374404Z 79 PC: 12a61 | Find next file
2018-12-17T22:12:56.873964276Z 67 PC: 12a8c | Get or set file attributes
2018-12-17T22:12:56.892813632Z 61 PC: 12a91 | Open file (Filename = 'TEST.COM')
2018-12-17T22:12:56.914026067Z 66 PC: 12b53 | Move file pointer
2018-12-17T22:12:56.916969591Z 64 PC: 12b6c | Write file or device (Write 20 bytes on handle 5)
2018-12-17T22:12:56.924247989Z 66 PC: 12b75 | Move file pointer
2018-12-17T22:12:56.92596853Z 63 PC: 12b81 | Read file or device (Read 698 bytes on handle 5)
2018-12-17T22:12:56.93443418Z 66 PC: 12b8a | Move file pointer
2018-12-17T22:12:56.936167049Z 64 PC: 12b94 | Write file or device (Write 698 bytes on handle 5)
2018-12-17T22:12:56.94433052Z 66 PC: 12baa | Move file pointer
2018-12-17T22:12:56.947633399Z 64 PC: 12bb4 | Write file or device (Write 698 bytes on handle 5)
2018-12-17T22:12:56.955639551Z 87 PC: 12aa5 | Get or set file date and time
2018-12-17T22:12:56.957471199Z 62 PC: 12aa9 | Close file
2018-12-17T22:12:56.96573505Z 67 PC: 12aae | Get or set file attributes
2018-12-17T22:12:56.971064178Z 79 PC: 12a61 | Find next file
2018-12-17T22:12:56.973727247Z 59 PC: 12a57 | Change current directory
2018-12-17T22:12:56.978899112Z 14 PC: 12cbe | Set default drive (Drive = 'A')
2018-12-17T22:12:56.9808244Z 59 PC: 12a57 | Change current directory
2018-12-17T22:12:56.98314753Z 9 PC: 12e26 | Display string (String= 'Hello - Copyright S & S International, 1990 ')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2556,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:46:02.085299686Z 42 PC: 12c77 | Get date 0x12c77: cmp cx, 0x7c9
0x12c7b: jb 0x12c83
0x12c7d: cmp dh, 1
0x12c80: jne 0x12c83
0x12c82: inc bp
0x12c83: mov dl, 0
0x12c85: mov si, 0
0x12c88: push ss
0x12c89: pop ds
0x12c8a: mov ah, 0x47
0x12c8c: int 0x21
0x12c8e: push cs
0x12c8f: pop ds
0x12c90: call 0x22a62
0x12c93: mov ah, 0x19
0x12c95: int 0x21
0x12c97: push ax
0x12c98: mov dl, al
0x12c9a: cmp al, bl
0x12c9c: jbe 0x12ca0
2018-12-25T11:46:02.08820291Z 71 PC: 12c8e | Get current directory
2018-12-25T11:46:02.093415522Z 25 PC: 12c97 | Get default drive
2018-12-25T11:46:02.094467209Z 14 PC: 12ca4 | Set default drive (Drive = 'A')
2018-12-25T11:46:02.095965729Z 59 PC: 12a57 | Change current directory
2018-12-25T11:46:02.100318233Z 78 PC: 12a5c | Find first file
2018-12-25T11:46:02.106453867Z 78 PC: 12a5c | Find first file (See above)
2018-12-25T11:46:02.112875649Z 67 PC: 12a8c | Get or set file attributes
2018-12-25T11:46:02.701724243Z 61 PC: 12a91 | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:46:02.716281154Z 66 PC: 12b53 | Move file pointer
2018-12-25T11:46:02.717884648Z 66 PC: 12b53 | Move file pointer (See above)
2018-12-25T11:46:02.719837666Z 64 PC: 12b6c | Write file or device (Write 20 bytes on handle 5)
2018-12-25T11:46:02.724116067Z 66 PC: 12b75 | Move file pointer
2018-12-25T11:46:02.72600385Z 63 PC: 12b81 | Read file or device (Read 698 bytes on handle 5)
2018-12-25T11:46:02.735339306Z 66 PC: 12b8a | Move file pointer
2018-12-25T11:46:02.736947186Z 64 PC: 12b94 | Write file or device (Write 698 bytes on handle 5)
2018-12-25T11:46:02.7460065Z 66 PC: 12baa | Move file pointer
2018-12-25T11:46:02.749023996Z 64 PC: 12bb4 | Write file or device (Write 698 bytes on handle 5)
2018-12-25T11:46:02.758124412Z 87 PC: 12aa5 | Get or set file date and time
2018-12-25T11:46:02.760208546Z 62 PC: 12aa9 | Close file
2018-12-25T11:46:02.77161997Z 67 PC: 12aae | Get or set file attributes
2018-12-25T11:46:02.777120018Z 79 PC: 12a61 | Find next file
2018-12-25T11:46:02.78016743Z 67 PC: 12a8c | Get or set file attributes (See above)
2018-12-25T11:46:02.79384659Z 61 PC: 12a91 | Open file (See above)
2018-12-25T11:46:02.802113842Z 66 PC: 12b53 | Move file pointer (See above)
2018-12-25T11:46:02.804249117Z 66 PC: 12b53 | Move file pointer (See above)
2018-12-25T11:46:02.806137153Z 64 PC: 12b6c | Write file or device (See above)
2018-12-25T11:46:02.811638898Z 66 PC: 12b75 | Move file pointer (See above)
2018-12-25T11:46:02.81346629Z 63 PC: 12b81 | Read file or device (See above)
2018-12-25T11:46:02.822194942Z 66 PC: 12b8a | Move file pointer (See above)
2018-12-25T11:46:02.825334536Z 64 PC: 12b94 | Write file or device (See above)
2018-12-25T11:46:02.834585847Z 66 PC: 12baa | Move file pointer (See above)
2018-12-25T11:46:02.836654893Z 64 PC: 12bb4 | Write file or device (See above)
2018-12-25T11:46:02.847498071Z 87 PC: 12aa5 | Get or set file date and time (See above)
2018-12-25T11:46:02.850177148Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T11:46:02.859663191Z 67 PC: 12aae | Get or set file attributes (See above)
2018-12-25T11:46:02.866270136Z 79 PC: 12a61 | Find next file (See above)
2018-12-25T11:46:02.870152638Z 67 PC: 12a8c | Get or set file attributes (See above)
2018-12-25T11:46:02.881689719Z 61 PC: 12a91 | Open file (See above)
2018-12-25T11:46:02.889618389Z 66 PC: 12b53 | Move file pointer (See above)
2018-12-25T11:46:02.892712389Z 66 PC: 12b53 | Move file pointer (See above)
2018-12-25T11:46:02.894697599Z 64 PC: 12b6c | Write file or device (See above)
2018-12-25T11:46:02.899088484Z 66 PC: 12b75 | Move file pointer (See above)
2018-12-25T11:46:02.902055786Z 63 PC: 12b81 | Read file or device (See above)
2018-12-25T11:46:02.910234183Z 66 PC: 12b8a | Move file pointer (See above)
2018-12-25T11:46:02.912227412Z 64 PC: 12b94 | Write file or device (See above)
2018-12-25T11:46:02.922589306Z 66 PC: 12baa | Move file pointer (See above)
2018-12-25T11:46:02.924617925Z 64 PC: 12bb4 | Write file or device (See above)
2018-12-25T11:46:02.93435746Z 87 PC: 12aa5 | Get or set file date and time (See above)
2018-12-25T11:46:02.936805461Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T11:46:02.94593127Z 67 PC: 12aae | Get or set file attributes (See above)
2018-12-25T11:46:02.951565169Z 79 PC: 12a61 | Find next file (See above)
2018-12-25T11:46:02.95520949Z 67 PC: 12a8c | Get or set file attributes (See above)
2018-12-25T11:46:02.966782804Z 61 PC: 12a91 | Open file (See above)
2018-12-25T11:46:02.974654861Z 66 PC: 12b53 | Move file pointer (See above)
2018-12-25T11:46:02.97668243Z 66 PC: 12b53 | Move file pointer (See above)
2018-12-25T11:46:02.979746195Z 64 PC: 12b6c | Write file or device (See above)
2018-12-25T11:46:02.984327082Z 66 PC: 12b75 | Move file pointer (See above)
2018-12-25T11:46:02.987074804Z 63 PC: 12b81 | Read file or device (See above)
2018-12-25T11:46:02.996156497Z 66 PC: 12b8a | Move file pointer (See above)
2018-12-25T11:46:02.997688765Z 64 PC: 12b94 | Write file or device (See above)
2018-12-25T11:46:03.00701515Z 66 PC: 12baa | Move file pointer (See above)
2018-12-25T11:46:03.009082309Z 64 PC: 12bb4 | Write file or device (See above)
2018-12-25T11:46:03.017885643Z 87 PC: 12aa5 | Get or set file date and time (See above)
2018-12-25T11:46:03.019428067Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T11:46:03.028659363Z 67 PC: 12aae | Get or set file attributes (See above)
2018-12-25T11:46:03.03427706Z 79 PC: 12a61 | Find next file (See above)
2018-12-25T11:46:03.037134311Z 67 PC: 12a8c | Get or set file attributes (See above)
2018-12-25T11:46:03.048588019Z 61 PC: 12a91 | Open file (See above)
2018-12-25T11:46:03.056647908Z 66 PC: 12b53 | Move file pointer (See above)
2018-12-25T11:46:03.058090595Z 66 PC: 12b53 | Move file pointer (See above)
2018-12-25T11:46:03.059590933Z 64 PC: 12b6c | Write file or device (See above)
2018-12-25T11:46:03.064039902Z 66 PC: 12b75 | Move file pointer (See above)
2018-12-25T11:46:03.065412844Z 63 PC: 12b81 | Read file or device (See above)
2018-12-25T11:46:03.073395306Z 66 PC: 12b8a | Move file pointer (See above)
2018-12-25T11:46:03.07525578Z 64 PC: 12b94 | Write file or device (See above)
2018-12-25T11:46:03.084671299Z 66 PC: 12baa | Move file pointer (See above)
2018-12-25T11:46:03.086267917Z 64 PC: 12bb4 | Write file or device (See above)
2018-12-25T11:46:03.097076375Z 87 PC: 12aa5 | Get or set file date and time (See above)
2018-12-25T11:46:03.100131332Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T11:46:03.109390382Z 67 PC: 12aae | Get or set file attributes (See above)
2018-12-25T11:46:03.117085571Z 79 PC: 12a61 | Find next file (See above)
2018-12-25T11:46:03.120432691Z 67 PC: 12a8c | Get or set file attributes (See above)
2018-12-25T11:46:03.131311853Z 61 PC: 12a91 | Open file (See above)
2018-12-25T11:46:03.139641427Z 66 PC: 12b53 | Move file pointer (See above)
2018-12-25T11:46:03.141559496Z 66 PC: 12b53 | Move file pointer (See above)
2018-12-25T11:46:03.143387885Z 64 PC: 12b6c | Write file or device (See above)
2018-12-25T11:46:03.148468518Z 66 PC: 12b75 | Move file pointer (See above)
2018-12-25T11:46:03.149948711Z 63 PC: 12b81 | Read file or device (See above)
2018-12-25T11:46:03.158696744Z 66 PC: 12b8a | Move file pointer (See above)
2018-12-25T11:46:03.16100639Z 64 PC: 12b94 | Write file or device (See above)
2018-12-25T11:46:03.169800452Z 66 PC: 12baa | Move file pointer (See above)
2018-12-25T11:46:03.171326609Z 64 PC: 12bb4 | Write file or device (See above)
2018-12-25T11:46:03.18153177Z 87 PC: 12aa5 | Get or set file date and time (See above)
2018-12-25T11:46:03.1846571Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T11:46:03.193418282Z 67 PC: 12aae | Get or set file attributes (See above)
2018-12-25T11:46:03.198834483Z 79 PC: 12a61 | Find next file (See above)
2018-12-25T11:46:03.201611968Z 67 PC: 12a8c | Get or set file attributes (See above)
2018-12-25T11:46:03.213151343Z 61 PC: 12a91 | Open file (See above)
2018-12-25T11:46:03.217584173Z 66 PC: 12b53 | Move file pointer (See above)
2018-12-25T11:46:03.219179459Z 66 PC: 12b53 | Move file pointer (See above)
2018-12-25T11:46:03.220593457Z 64 PC: 12b6c | Write file or device (See above)
2018-12-25T11:46:03.22451972Z 66 PC: 12b75 | Move file pointer (See above)
2018-12-25T11:46:03.227120361Z 63 PC: 12b81 | Read file or device (See above)
2018-12-25T11:46:03.235121543Z 66 PC: 12b8a | Move file pointer (See above)
2018-12-25T11:46:03.236773732Z 64 PC: 12b94 | Write file or device (See above)
2018-12-25T11:46:03.246031304Z 66 PC: 12baa | Move file pointer (See above)
2018-12-25T11:46:03.247884557Z 64 PC: 12bb4 | Write file or device (See above)
2018-12-25T11:46:03.25724225Z 87 PC: 12aa5 | Get or set file date and time (See above)
2018-12-25T11:46:03.259486681Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T11:46:03.269200797Z 67 PC: 12aae | Get or set file attributes (See above)
2018-12-25T11:46:03.274589904Z 79 PC: 12a61 | Find next file (See above)
2018-12-25T11:46:03.278079485Z 67 PC: 12a8c | Get or set file attributes (See above)
2018-12-25T11:46:03.288889117Z 61 PC: 12a91 | Open file (See above)
2018-12-25T11:46:03.296237411Z 66 PC: 12b53 | Move file pointer (See above)
2018-12-25T11:46:03.298311091Z 64 PC: 12b6c | Write file or device (See above)
2018-12-25T11:46:03.306138956Z 66 PC: 12b75 | Move file pointer (See above)
2018-12-25T11:46:03.307194383Z 63 PC: 12b81 | Read file or device (See above)
2018-12-25T11:46:03.313308418Z 66 PC: 12b8a | Move file pointer (See above)
2018-12-25T11:46:03.314381617Z 64 PC: 12b94 | Write file or device (See above)
2018-12-25T11:46:03.319874673Z 66 PC: 12baa | Move file pointer (See above)
2018-12-25T11:46:03.321855045Z 64 PC: 12bb4 | Write file or device (See above)
2018-12-25T11:46:03.330093773Z 87 PC: 12aa5 | Get or set file date and time (See above)
2018-12-25T11:46:03.331545362Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T11:46:03.341045841Z 67 PC: 12aae | Get or set file attributes (See above)
2018-12-25T11:46:03.346235907Z 79 PC: 12a61 | Find next file (See above)
2018-12-25T11:46:03.34875864Z 59 PC: 12a57 | Change current directory (See above)
2018-12-25T11:46:03.354596117Z 14 PC: 12cbe | Set default drive (Drive = 'A')
2018-12-25T11:46:03.356276112Z 59 PC: 12a57 | Change current directory (See above)
2018-12-25T11:46:03.357898838Z 9 PC: 12e26 | Display string (String= 'Hello - Copyright S & S International, 1990 ')

{"DateBased":true,"Day":1,"Month":1,"Year":1993,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2556,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:46:02.235474026Z 42 PC: 12c77 | Get date 0x12c77: cmp cx, 0x7c9
0x12c7b: jb 0x12c83
0x12c7d: cmp dh, 1
0x12c80: jne 0x12c83
0x12c82: inc bp
0x12c83: mov dl, 0
0x12c85: mov si, 0
0x12c88: push ss
0x12c89: pop ds
0x12c8a: mov ah, 0x47
0x12c8c: int 0x21
0x12c8e: push cs
0x12c8f: pop ds
0x12c90: call 0x22a62
0x12c93: mov ah, 0x19
0x12c95: int 0x21
0x12c97: push ax
0x12c98: mov dl, al
0x12c9a: cmp al, bl
0x12c9c: jbe 0x12ca0
2018-12-25T11:46:02.238985111Z 71 PC: 12c8e | Get current directory
2018-12-25T11:46:02.24220039Z 25 PC: 12c97 | Get default drive
2018-12-25T11:46:02.24325958Z 14 PC: 12ca4 | Set default drive (Drive = 'A')
2018-12-25T11:46:02.244560357Z 59 PC: 12a57 | Change current directory
2018-12-25T11:46:02.249246958Z 78 PC: 12a5c | Find first file
2018-12-25T11:46:02.255813019Z 78 PC: 12a5c | Find first file (See above)
2018-12-25T11:46:02.262924633Z 25 PC: 12af9 | Get default drive
2018-12-25T11:46:02.264295741Z 67 PC: 12a8c | Get or set file attributes
2018-12-25T11:46:02.703458476Z 61 PC: 12a91 | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:46:02.715449154Z 66 PC: 12b53 | Move file pointer
2018-12-25T11:46:02.729735097Z 66 PC: 12b53 | Move file pointer (See above)
2018-12-25T11:46:02.731725123Z 64 PC: 12b6c | Write file or device (Write 20 bytes on handle 5)
2018-12-25T11:46:02.737106598Z 66 PC: 12b75 | Move file pointer
2018-12-25T11:46:02.739132635Z 63 PC: 12b81 | Read file or device (Read 698 bytes on handle 5)
2018-12-25T11:46:02.746876672Z 66 PC: 12b8a | Move file pointer
2018-12-25T11:46:02.748580281Z 64 PC: 12b94 | Write file or device (Write 698 bytes on handle 5)
2018-12-25T11:46:02.758204939Z 66 PC: 12baa | Move file pointer
2018-12-25T11:46:02.760153429Z 64 PC: 12bb4 | Write file or device (Write 698 bytes on handle 5)
2018-12-25T11:46:02.772769698Z 87 PC: 12aa5 | Get or set file date and time
2018-12-25T11:46:02.775141139Z 62 PC: 12aa9 | Close file
2018-12-25T11:46:02.784192787Z 67 PC: 12aae | Get or set file attributes
2018-12-25T11:46:02.789625767Z 79 PC: 12a61 | Find next file
2018-12-25T11:46:02.793686496Z 25 PC: 12af9 | Get default drive (See above)
2018-12-25T11:46:02.79526615Z 67 PC: 12a8c | Get or set file attributes (See above)
2018-12-25T11:46:02.807219588Z 61 PC: 12a91 | Open file (See above)
2018-12-25T11:46:02.814682347Z 66 PC: 12b53 | Move file pointer (See above)
2018-12-25T11:46:02.816345275Z 66 PC: 12b53 | Move file pointer (See above)
2018-12-25T11:46:02.817739442Z 64 PC: 12b6c | Write file or device (See above)
2018-12-25T11:46:02.821774841Z 66 PC: 12b75 | Move file pointer (See above)
2018-12-25T11:46:02.824348361Z 63 PC: 12b81 | Read file or device (See above)
2018-12-25T11:46:02.834438507Z 66 PC: 12b8a | Move file pointer (See above)
2018-12-25T11:46:02.83584017Z 64 PC: 12b94 | Write file or device (See above)
2018-12-25T11:46:02.843065736Z 66 PC: 12baa | Move file pointer (See above)
2018-12-25T11:46:02.84444739Z 64 PC: 12bb4 | Write file or device (See above)
2018-12-25T11:46:02.85017445Z 87 PC: 12aa5 | Get or set file date and time (See above)
2018-12-25T11:46:02.852394205Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T11:46:02.860102778Z 67 PC: 12aae | Get or set file attributes (See above)
2018-12-25T11:46:02.867632651Z 79 PC: 12a61 | Find next file (See above)
2018-12-25T11:46:02.872427571Z 25 PC: 12af9 | Get default drive (See above)
2018-12-25T11:46:02.873862521Z 67 PC: 12a8c | Get or set file attributes (See above)
2018-12-25T11:46:02.885042786Z 61 PC: 12a91 | Open file (See above)
2018-12-25T11:46:02.893059157Z 66 PC: 12b53 | Move file pointer (See above)
2018-12-25T11:46:02.894542613Z 66 PC: 12b53 | Move file pointer (See above)
2018-12-25T11:46:02.895765337Z 64 PC: 12b6c | Write file or device (See above)
2018-12-25T11:46:02.899508502Z 66 PC: 12b75 | Move file pointer (See above)
2018-12-25T11:46:02.90164692Z 63 PC: 12b81 | Read file or device (See above)
2018-12-25T11:46:02.909833825Z 66 PC: 12b8a | Move file pointer (See above)
2018-12-25T11:46:02.91451371Z 64 PC: 12b94 | Write file or device (See above)
2018-12-25T11:46:02.924945022Z 66 PC: 12baa | Move file pointer (See above)
2018-12-25T11:46:02.926962443Z 64 PC: 12bb4 | Write file or device (See above)
2018-12-25T11:46:02.937295114Z 87 PC: 12aa5 | Get or set file date and time (See above)
2018-12-25T11:46:02.940707273Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T11:46:02.950333124Z 67 PC: 12aae | Get or set file attributes (See above)
2018-12-25T11:46:02.956476096Z 79 PC: 12a61 | Find next file (See above)
2018-12-25T11:46:02.961716599Z 25 PC: 12af9 | Get default drive (See above)
2018-12-25T11:46:02.963757215Z 67 PC: 12a8c | Get or set file attributes (See above)
2018-12-25T11:46:02.976066692Z 61 PC: 12a91 | Open file (See above)
2018-12-25T11:46:02.984645161Z 66 PC: 12b53 | Move file pointer (See above)
2018-12-25T11:46:02.987291452Z 66 PC: 12b53 | Move file pointer (See above)
2018-12-25T11:46:02.989261259Z 64 PC: 12b6c | Write file or device (See above)
2018-12-25T11:46:02.994148408Z 66 PC: 12b75 | Move file pointer (See above)
2018-12-25T11:46:02.996846077Z 63 PC: 12b81 | Read file or device (See above)
2018-12-25T11:46:03.005007987Z 66 PC: 12b8a | Move file pointer (See above)
2018-12-25T11:46:03.007822078Z 64 PC: 12b94 | Write file or device (See above)
2018-12-25T11:46:03.017339041Z 66 PC: 12baa | Move file pointer (See above)
2018-12-25T11:46:03.019209026Z 64 PC: 12bb4 | Write file or device (See above)
2018-12-25T11:46:03.028535757Z 87 PC: 12aa5 | Get or set file date and time (See above)
2018-12-25T11:46:03.031132315Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T11:46:03.04015389Z 67 PC: 12aae | Get or set file attributes (See above)
2018-12-25T11:46:03.045959933Z 79 PC: 12a61 | Find next file (See above)
2018-12-25T11:46:03.050940969Z 25 PC: 12af9 | Get default drive (See above)
2018-12-25T11:46:03.05316293Z 67 PC: 12a8c | Get or set file attributes (See above)
2018-12-25T11:46:03.064377004Z 61 PC: 12a91 | Open file (See above)
2018-12-25T11:46:03.073774814Z 66 PC: 12b53 | Move file pointer (See above)
2018-12-25T11:46:03.075808201Z 66 PC: 12b53 | Move file pointer (See above)
2018-12-25T11:46:03.077812466Z 64 PC: 12b6c | Write file or device (See above)
2018-12-25T11:46:03.083069482Z 66 PC: 12b75 | Move file pointer (See above)
2018-12-25T11:46:03.085050461Z 63 PC: 12b81 | Read file or device (See above)
2018-12-25T11:46:03.093149845Z 66 PC: 12b8a | Move file pointer (See above)
2018-12-25T11:46:03.095371787Z 64 PC: 12b94 | Write file or device (See above)
2018-12-25T11:46:03.104842087Z 66 PC: 12baa | Move file pointer (See above)
2018-12-25T11:46:03.106766742Z 64 PC: 12bb4 | Write file or device (See above)
2018-12-25T11:46:03.116224462Z 87 PC: 12aa5 | Get or set file date and time (See above)
2018-12-25T11:46:03.118253457Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T11:46:03.127289574Z 67 PC: 12aae | Get or set file attributes (See above)
2018-12-25T11:46:03.133369956Z 79 PC: 12a61 | Find next file (See above)
2018-12-25T11:46:03.138202479Z 25 PC: 12af9 | Get default drive (See above)
2018-12-25T11:46:03.14079089Z 67 PC: 12a8c | Get or set file attributes (See above)
2018-12-25T11:46:03.152034932Z 61 PC: 12a91 | Open file (See above)
2018-12-25T11:46:03.157418948Z 66 PC: 12b53 | Move file pointer (See above)
2018-12-25T11:46:03.158993148Z 66 PC: 12b53 | Move file pointer (See above)
2018-12-25T11:46:03.160550495Z 64 PC: 12b6c | Write file or device (See above)
2018-12-25T11:46:03.165760933Z 66 PC: 12b75 | Move file pointer (See above)
2018-12-25T11:46:03.167977427Z 63 PC: 12b81 | Read file or device (See above)
2018-12-25T11:46:03.176095422Z 66 PC: 12b8a | Move file pointer (See above)
2018-12-25T11:46:03.178766689Z 64 PC: 12b94 | Write file or device (See above)
2018-12-25T11:46:03.188714422Z 66 PC: 12baa | Move file pointer (See above)
2018-12-25T11:46:03.19070148Z 64 PC: 12bb4 | Write file or device (See above)
2018-12-25T11:46:03.200334121Z 87 PC: 12aa5 | Get or set file date and time (See above)
2018-12-25T11:46:03.203317652Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T11:46:03.212958412Z 67 PC: 12aae | Get or set file attributes (See above)
2018-12-25T11:46:03.218732654Z 79 PC: 12a61 | Find next file (See above)
2018-12-25T11:46:03.223605056Z 25 PC: 12af9 | Get default drive (See above)
2018-12-25T11:46:03.225434338Z 67 PC: 12a8c | Get or set file attributes (See above)
2018-12-25T11:46:03.236619694Z 61 PC: 12a91 | Open file (See above)
2018-12-25T11:46:03.24481976Z 66 PC: 12b53 | Move file pointer (See above)
2018-12-25T11:46:03.247093663Z 66 PC: 12b53 | Move file pointer (See above)
2018-12-25T11:46:03.250142437Z 64 PC: 12b6c | Write file or device (See above)
2018-12-25T11:46:03.257917269Z 66 PC: 12b75 | Move file pointer (See above)
2018-12-25T11:46:03.260028751Z 63 PC: 12b81 | Read file or device (See above)
2018-12-25T11:46:03.268327062Z 66 PC: 12b8a | Move file pointer (See above)
2018-12-25T11:46:03.270679481Z 64 PC: 12b94 | Write file or device (See above)
2018-12-25T11:46:03.281013238Z 66 PC: 12baa | Move file pointer (See above)
2018-12-25T11:46:03.282488658Z 64 PC: 12bb4 | Write file or device (See above)
2018-12-25T11:46:03.292452168Z 87 PC: 12aa5 | Get or set file date and time (See above)
2018-12-25T11:46:03.294500592Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T11:46:03.303253744Z 67 PC: 12aae | Get or set file attributes (See above)
2018-12-25T11:46:03.30914157Z 79 PC: 12a61 | Find next file (See above)
2018-12-25T11:46:03.312961798Z 25 PC: 12af9 | Get default drive (See above)
2018-12-25T11:46:03.314692693Z 67 PC: 12a8c | Get or set file attributes (See above)
2018-12-25T11:46:03.326207481Z 61 PC: 12a91 | Open file (See above)
2018-12-25T11:46:03.334485774Z 66 PC: 12b53 | Move file pointer (See above)
2018-12-25T11:46:03.336463168Z 64 PC: 12b6c | Write file or device (See above)
2018-12-25T11:46:03.345157973Z 66 PC: 12b75 | Move file pointer (See above)
2018-12-25T11:46:03.348683595Z 63 PC: 12b81 | Read file or device (See above)
2018-12-25T11:46:03.357036468Z 66 PC: 12b8a | Move file pointer (See above)
2018-12-25T11:46:03.359071743Z 64 PC: 12b94 | Write file or device (See above)
2018-12-25T11:46:03.368920469Z 66 PC: 12baa | Move file pointer (See above)
2018-12-25T11:46:03.370511978Z 64 PC: 12bb4 | Write file or device (See above)
2018-12-25T11:46:03.378670854Z 87 PC: 12aa5 | Get or set file date and time (See above)
2018-12-25T11:46:03.381149963Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T11:46:03.389897288Z 67 PC: 12aae | Get or set file attributes (See above)
2018-12-25T11:46:03.395212667Z 79 PC: 12a61 | Find next file (See above)
2018-12-25T11:46:03.399761251Z 59 PC: 12a57 | Change current directory (See above)
2018-12-25T11:46:03.404747694Z 14 PC: 12cbe | Set default drive (Drive = 'A')
2018-12-25T11:46:03.407416158Z 59 PC: 12a57 | Change current directory (See above)
2018-12-25T11:46:03.411213883Z 9 PC: 12e26 | Display string (String= 'Hello - Copyright S & S International, 1990 ')

{"DateBased":true,"Day":1,"Month":2,"Year":1993,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2556,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:46:02.261248951Z 42 PC: 12c77 | Get date 0x12c77: cmp cx, 0x7c9
0x12c7b: jb 0x12c83
0x12c7d: cmp dh, 1
0x12c80: jne 0x12c83
0x12c82: inc bp
0x12c83: mov dl, 0
0x12c85: mov si, 0
0x12c88: push ss
0x12c89: pop ds
0x12c8a: mov ah, 0x47
0x12c8c: int 0x21
0x12c8e: push cs
0x12c8f: pop ds
0x12c90: call 0x22a62
0x12c93: mov ah, 0x19
0x12c95: int 0x21
0x12c97: push ax
0x12c98: mov dl, al
0x12c9a: cmp al, bl
0x12c9c: jbe 0x12ca0
2018-12-25T11:46:02.26373121Z 71 PC: 12c8e | Get current directory
2018-12-25T11:46:02.266696996Z 25 PC: 12c97 | Get default drive
2018-12-25T11:46:02.267718177Z 14 PC: 12ca4 | Set default drive (Drive = 'A')
2018-12-25T11:46:02.268924962Z 59 PC: 12a57 | Change current directory
2018-12-25T11:46:02.271877177Z 78 PC: 12a5c | Find first file
2018-12-25T11:46:02.279279811Z 78 PC: 12a5c | Find first file (See above)
2018-12-25T11:46:02.283628894Z 67 PC: 12a8c | Get or set file attributes
2018-12-25T11:46:02.700066182Z 61 PC: 12a91 | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:46:02.707603907Z 66 PC: 12b53 | Move file pointer
2018-12-25T11:46:02.708962602Z 66 PC: 12b53 | Move file pointer (See above)
2018-12-25T11:46:02.713815601Z 64 PC: 12b6c | Write file or device (Write 20 bytes on handle 5)
2018-12-25T11:46:02.718089195Z 66 PC: 12b75 | Move file pointer
2018-12-25T11:46:02.719970864Z 63 PC: 12b81 | Read file or device (Read 698 bytes on handle 5)
2018-12-25T11:46:02.729381077Z 66 PC: 12b8a | Move file pointer
2018-12-25T11:46:02.731366928Z 64 PC: 12b94 | Write file or device (Write 698 bytes on handle 5)
2018-12-25T11:46:02.740734122Z 66 PC: 12baa | Move file pointer
2018-12-25T11:46:02.74282922Z 64 PC: 12bb4 | Write file or device (Write 698 bytes on handle 5)
2018-12-25T11:46:02.75277219Z 87 PC: 12aa5 | Get or set file date and time
2018-12-25T11:46:02.75454568Z 62 PC: 12aa9 | Close file
2018-12-25T11:46:02.765279108Z 67 PC: 12aae | Get or set file attributes
2018-12-25T11:46:02.772633097Z 79 PC: 12a61 | Find next file
2018-12-25T11:46:02.776613671Z 67 PC: 12a8c | Get or set file attributes (See above)
2018-12-25T11:46:02.794155176Z 61 PC: 12a91 | Open file (See above)
2018-12-25T11:46:02.802626695Z 66 PC: 12b53 | Move file pointer (See above)
2018-12-25T11:46:02.804051843Z 66 PC: 12b53 | Move file pointer (See above)
2018-12-25T11:46:02.805484614Z 64 PC: 12b6c | Write file or device (See above)
2018-12-25T11:46:02.810155557Z 66 PC: 12b75 | Move file pointer (See above)
2018-12-25T11:46:02.811580866Z 63 PC: 12b81 | Read file or device (See above)
2018-12-25T11:46:02.819861286Z 66 PC: 12b8a | Move file pointer (See above)
2018-12-25T11:46:02.822723291Z 64 PC: 12b94 | Write file or device (See above)
2018-12-25T11:46:02.832577507Z 66 PC: 12baa | Move file pointer (See above)
2018-12-25T11:46:02.834461853Z 64 PC: 12bb4 | Write file or device (See above)
2018-12-25T11:46:02.844139878Z 87 PC: 12aa5 | Get or set file date and time (See above)
2018-12-25T11:46:02.846413551Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T11:46:02.855239681Z 67 PC: 12aae | Get or set file attributes (See above)
2018-12-25T11:46:02.861066501Z 79 PC: 12a61 | Find next file (See above)
2018-12-25T11:46:02.864116759Z 67 PC: 12a8c | Get or set file attributes (See above)
2018-12-25T11:46:02.874739192Z 61 PC: 12a91 | Open file (See above)
2018-12-25T11:46:02.883039148Z 66 PC: 12b53 | Move file pointer (See above)
2018-12-25T11:46:02.884159729Z 66 PC: 12b53 | Move file pointer (See above)
2018-12-25T11:46:02.885584679Z 64 PC: 12b6c | Write file or device (See above)
2018-12-25T11:46:02.890786155Z 66 PC: 12b75 | Move file pointer (See above)
2018-12-25T11:46:02.892328442Z 63 PC: 12b81 | Read file or device (See above)
2018-12-25T11:46:02.897110857Z 66 PC: 12b8a | Move file pointer (See above)
2018-12-25T11:46:02.898983028Z 64 PC: 12b94 | Write file or device (See above)
2018-12-25T11:46:02.90774904Z 66 PC: 12baa | Move file pointer (See above)
2018-12-25T11:46:02.909036598Z 64 PC: 12bb4 | Write file or device (See above)
2018-12-25T11:46:02.91751403Z 87 PC: 12aa5 | Get or set file date and time (See above)
2018-12-25T11:46:02.919154533Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T11:46:02.927512045Z 67 PC: 12aae | Get or set file attributes (See above)
2018-12-25T11:46:02.932715273Z 79 PC: 12a61 | Find next file (See above)
2018-12-25T11:46:02.936153305Z 67 PC: 12a8c | Get or set file attributes (See above)
2018-12-25T11:46:02.942377519Z 61 PC: 12a91 | Open file (See above)
2018-12-25T11:46:02.946535644Z 66 PC: 12b53 | Move file pointer (See above)
2018-12-25T11:46:02.947830726Z 66 PC: 12b53 | Move file pointer (See above)
2018-12-25T11:46:02.949163176Z 64 PC: 12b6c | Write file or device (See above)
2018-12-25T11:46:02.953892809Z 66 PC: 12b75 | Move file pointer (See above)
2018-12-25T11:46:02.955500571Z 63 PC: 12b81 | Read file or device (See above)
2018-12-25T11:46:02.963066622Z 66 PC: 12b8a | Move file pointer (See above)
2018-12-25T11:46:02.964469749Z 64 PC: 12b94 | Write file or device (See above)
2018-12-25T11:46:02.973439142Z 66 PC: 12baa | Move file pointer (See above)
2018-12-25T11:46:02.974903248Z 64 PC: 12bb4 | Write file or device (See above)
2018-12-25T11:46:02.983511481Z 87 PC: 12aa5 | Get or set file date and time (See above)
2018-12-25T11:46:02.985356953Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T11:46:02.99373513Z 67 PC: 12aae | Get or set file attributes (See above)
2018-12-25T11:46:02.998733917Z 79 PC: 12a61 | Find next file (See above)
2018-12-25T11:46:03.001950952Z 67 PC: 12a8c | Get or set file attributes (See above)
2018-12-25T11:46:03.013342175Z 61 PC: 12a91 | Open file (See above)
2018-12-25T11:46:03.022118965Z 66 PC: 12b53 | Move file pointer (See above)
2018-12-25T11:46:03.02562858Z 66 PC: 12b53 | Move file pointer (See above)
2018-12-25T11:46:03.027370619Z 64 PC: 12b6c | Write file or device (See above)
2018-12-25T11:46:03.031975322Z 66 PC: 12b75 | Move file pointer (See above)
2018-12-25T11:46:03.033664726Z 63 PC: 12b81 | Read file or device (See above)
2018-12-25T11:46:03.042566898Z 66 PC: 12b8a | Move file pointer (See above)
2018-12-25T11:46:03.044574597Z 64 PC: 12b94 | Write file or device (See above)
2018-12-25T11:46:03.05399469Z 66 PC: 12baa | Move file pointer (See above)
2018-12-25T11:46:03.056584673Z 64 PC: 12bb4 | Write file or device (See above)
2018-12-25T11:46:03.065824715Z 87 PC: 12aa5 | Get or set file date and time (See above)
2018-12-25T11:46:03.067377479Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T11:46:03.077018198Z 67 PC: 12aae | Get or set file attributes (See above)
2018-12-25T11:46:03.082662154Z 79 PC: 12a61 | Find next file (See above)
2018-12-25T11:46:03.086696659Z 67 PC: 12a8c | Get or set file attributes (See above)
2018-12-25T11:46:03.098262994Z 61 PC: 12a91 | Open file (See above)
2018-12-25T11:46:03.105733909Z 66 PC: 12b53 | Move file pointer (See above)
2018-12-25T11:46:03.107176748Z 66 PC: 12b53 | Move file pointer (See above)
2018-12-25T11:46:03.109571989Z 64 PC: 12b6c | Write file or device (See above)
2018-12-25T11:46:03.113802748Z 66 PC: 12b75 | Move file pointer (See above)
2018-12-25T11:46:03.115547409Z 63 PC: 12b81 | Read file or device (See above)
2018-12-25T11:46:03.123278493Z 66 PC: 12b8a | Move file pointer (See above)
2018-12-25T11:46:03.12529496Z 64 PC: 12b94 | Write file or device (See above)
2018-12-25T11:46:03.134141861Z 66 PC: 12baa | Move file pointer (See above)
2018-12-25T11:46:03.135842711Z 64 PC: 12bb4 | Write file or device (See above)
2018-12-25T11:46:03.145444051Z 87 PC: 12aa5 | Get or set file date and time (See above)
2018-12-25T11:46:03.147173003Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T11:46:03.156458132Z 67 PC: 12aae | Get or set file attributes (See above)
2018-12-25T11:46:03.163860269Z 79 PC: 12a61 | Find next file (See above)
2018-12-25T11:46:03.167326726Z 67 PC: 12a8c | Get or set file attributes (See above)
2018-12-25T11:46:03.178391622Z 61 PC: 12a91 | Open file (See above)
2018-12-25T11:46:03.186685417Z 66 PC: 12b53 | Move file pointer (See above)
2018-12-25T11:46:03.188657015Z 66 PC: 12b53 | Move file pointer (See above)
2018-12-25T11:46:03.190159691Z 64 PC: 12b6c | Write file or device (See above)
2018-12-25T11:46:03.194788878Z 66 PC: 12b75 | Move file pointer (See above)
2018-12-25T11:46:03.196321448Z 63 PC: 12b81 | Read file or device (See above)
2018-12-25T11:46:03.203970719Z 66 PC: 12b8a | Move file pointer (See above)
2018-12-25T11:46:03.206509321Z 64 PC: 12b94 | Write file or device (See above)
2018-12-25T11:46:03.21483413Z 66 PC: 12baa | Move file pointer (See above)
2018-12-25T11:46:03.216106134Z 64 PC: 12bb4 | Write file or device (See above)
2018-12-25T11:46:03.223373212Z 87 PC: 12aa5 | Get or set file date and time (See above)
2018-12-25T11:46:03.225350257Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T11:46:03.231089982Z 67 PC: 12aae | Get or set file attributes (See above)
2018-12-25T11:46:03.23442163Z 79 PC: 12a61 | Find next file (See above)
2018-12-25T11:46:03.236954956Z 67 PC: 12a8c | Get or set file attributes (See above)
2018-12-25T11:46:03.247408498Z 61 PC: 12a91 | Open file (See above)
2018-12-25T11:46:03.251840984Z 66 PC: 12b53 | Move file pointer (See above)
2018-12-25T11:46:03.253132621Z 64 PC: 12b6c | Write file or device (See above)
2018-12-25T11:46:03.257887637Z 66 PC: 12b75 | Move file pointer (See above)
2018-12-25T11:46:03.259435413Z 63 PC: 12b81 | Read file or device (See above)
2018-12-25T11:46:03.264769213Z 66 PC: 12b8a | Move file pointer (See above)
2018-12-25T11:46:03.2660354Z 64 PC: 12b94 | Write file or device (See above)
2018-12-25T11:46:03.271714029Z 66 PC: 12baa | Move file pointer (See above)
2018-12-25T11:46:03.273460211Z 64 PC: 12bb4 | Write file or device (See above)
2018-12-25T11:46:03.281033465Z 87 PC: 12aa5 | Get or set file date and time (See above)
2018-12-25T11:46:03.289521852Z 62 PC: 12aa9 | Close file (See above)
2018-12-25T11:46:03.29899973Z 67 PC: 12aae | Get or set file attributes (See above)
2018-12-25T11:46:03.305917827Z 79 PC: 12a61 | Find next file (See above)
2018-12-25T11:46:03.309294985Z 59 PC: 12a57 | Change current directory (See above)
2018-12-25T11:46:03.315091618Z 14 PC: 12cbe | Set default drive (Drive = 'A')
2018-12-25T11:46:03.316989757Z 59 PC: 12a57 | Change current directory (See above)
2018-12-25T11:46:03.319788662Z 9 PC: 12e26 | Display string (String= 'Hello - Copyright S & S International, 1990 ')