Sample viewer

vx.netlux.org/Virus.DOS.Trivial.Vorbis.166

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:16:09.649112745Z 78 PC: 12a72 | Find first file
2018-12-17T22:16:09.655340637Z 61 PC: 12a82 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:16:09.661495446Z 64 PC: 12a93 | Write file or device (Write 166 bytes on handle 5)
2018-12-17T22:16:09.667769889Z 62 PC: 12a9b | Close file
2018-12-17T22:16:09.682741797Z 79 PC: 12a79 | Find next file
2018-12-17T22:16:09.695551843Z 61 PC: 12a82 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:16:09.702347135Z 64 PC: 12a93 | Write file or device (Write 166 bytes on handle 5)
2018-12-17T22:16:09.71003448Z 62 PC: 12a9b | Close file
2018-12-17T22:16:09.719605856Z 79 PC: 12a79 | Find next file
2018-12-17T22:16:09.722308074Z 61 PC: 12a82 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:16:09.729268266Z 64 PC: 12a93 | Write file or device (Write 166 bytes on handle 5)
2018-12-17T22:16:09.737015013Z 62 PC: 12a9b | Close file
2018-12-17T22:16:09.745314187Z 79 PC: 12a79 | Find next file
2018-12-17T22:16:09.747909761Z 61 PC: 12a82 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:16:09.755477686Z 64 PC: 12a93 | Write file or device (Write 166 bytes on handle 5)
2018-12-17T22:16:09.762455138Z 62 PC: 12a9b | Close file
2018-12-17T22:16:09.770313644Z 79 PC: 12a79 | Find next file
2018-12-17T22:16:09.774767881Z 61 PC: 12a82 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:16:09.783036583Z 64 PC: 12a93 | Write file or device (Write 166 bytes on handle 5)
2018-12-17T22:16:09.790441824Z 62 PC: 12a9b | Close file
2018-12-17T22:16:09.80060294Z 59 PC: 12ab4 | Change current directory
2018-12-17T22:16:09.805147738Z 78 PC: 12a72 | Find first file
2018-12-17T22:16:09.811184881Z 61 PC: 12a82 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:16:09.818585208Z 64 PC: 12a93 | Write file or device (Write 166 bytes on handle 5)
2018-12-17T22:16:09.821520787Z 62 PC: 12a9b | Close file
2018-12-17T22:16:09.829261917Z 79 PC: 12a79 | Find next file
2018-12-17T22:16:09.832890602Z 61 PC: 12a82 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:16:09.845373598Z 64 PC: 12a93 | Write file or device (Write 166 bytes on handle 5)
2018-12-17T22:16:09.852099985Z 62 PC: 12a9b | Close file
2018-12-17T22:16:09.859740492Z 79 PC: 12a79 | Find next file
2018-12-17T22:16:09.86294519Z 61 PC: 12a82 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:16:09.870555556Z 64 PC: 12a93 | Write file or device (Write 166 bytes on handle 5)
2018-12-17T22:16:09.877716329Z 62 PC: 12a9b | Close file
2018-12-17T22:16:09.901787271Z 79 PC: 12a79 | Find next file
2018-12-17T22:16:09.904894714Z 61 PC: 12a82 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:16:09.911811047Z 64 PC: 12a93 | Write file or device (Write 166 bytes on handle 5)
2018-12-17T22:16:09.919429698Z 62 PC: 12a9b | Close file
2018-12-17T22:16:09.9276694Z 79 PC: 12a79 | Find next file
2018-12-17T22:16:09.930299132Z 61 PC: 12a82 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:16:09.937922843Z 64 PC: 12a93 | Write file or device (Write 166 bytes on handle 5)
2018-12-17T22:16:09.944342408Z 62 PC: 12a9b | Close file
2018-12-17T22:16:09.951997555Z 59 PC: 12ab4 | Change current directory
2018-12-17T22:16:09.956474146Z 78 PC: 12a72 | Find first file
2018-12-17T22:16:09.96249128Z 61 PC: 12a82 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:16:09.973578754Z 64 PC: 12a93 | Write file or device (Write 166 bytes on handle 5)
2018-12-17T22:16:09.980350552Z 62 PC: 12a9b | Close file
2018-12-17T22:16:09.988416587Z 79 PC: 12a79 | Find next file
2018-12-17T22:16:09.991262851Z 61 PC: 12a82 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:16:09.998804295Z 64 PC: 12a93 | Write file or device (Write 166 bytes on handle 5)
2018-12-17T22:16:10.005470668Z 62 PC: 12a9b | Close file
2018-12-17T22:16:10.013246745Z 79 PC: 12a79 | Find next file
2018-12-17T22:16:10.016509117Z 61 PC: 12a82 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:16:10.022930709Z 64 PC: 12a93 | Write file or device (Write 166 bytes on handle 5)
2018-12-17T22:16:10.029554456Z 62 PC: 12a9b | Close file
2018-12-17T22:16:10.037898133Z 79 PC: 12a79 | Find next file
2018-12-17T22:16:10.040576179Z 61 PC: 12a82 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:16:10.052079435Z 64 PC: 12a93 | Write file or device (Write 166 bytes on handle 5)
2018-12-17T22:16:10.059489965Z 62 PC: 12a9b | Close file
2018-12-17T22:16:10.067137502Z 79 PC: 12a79 | Find next file
2018-12-17T22:16:10.069800684Z 61 PC: 12a82 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:16:10.076847373Z 64 PC: 12a93 | Write file or device (Write 166 bytes on handle 5)
2018-12-17T22:16:10.083264554Z 62 PC: 12a9b | Close file
2018-12-17T22:16:10.09110393Z 59 PC: 12ab4 | Change current directory
2018-12-17T22:16:10.096555696Z 78 PC: 12a72 | Find first file
2018-12-17T22:16:10.120633073Z 61 PC: 12a82 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:16:10.127431921Z 64 PC: 12a93 | Write file or device (Write 166 bytes on handle 5)
2018-12-17T22:16:10.134259024Z 62 PC: 12a9b | Close file
2018-12-17T22:16:10.14238244Z 79 PC: 12a79 | Find next file
2018-12-17T22:16:10.145318411Z 61 PC: 12a82 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:16:10.152754006Z 64 PC: 12a93 | Write file or device (Write 166 bytes on handle 5)
2018-12-17T22:16:10.159886719Z 62 PC: 12a9b | Close file
2018-12-17T22:16:10.168754804Z 79 PC: 12a79 | Find next file
2018-12-17T22:16:10.171947865Z 61 PC: 12a82 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:16:10.18466658Z 64 PC: 12a93 | Write file or device (Write 166 bytes on handle 5)
2018-12-17T22:16:10.191544577Z 62 PC: 12a9b | Close file
2018-12-17T22:16:10.199309978Z 79 PC: 12a79 | Find next file
2018-12-17T22:16:10.203289292Z 61 PC: 12a82 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:16:10.209936778Z 64 PC: 12a93 | Write file or device (Write 166 bytes on handle 5)
2018-12-17T22:16:10.216815336Z 62 PC: 12a9b | Close file
2018-12-17T22:16:10.224999406Z 79 PC: 12a79 | Find next file
2018-12-17T22:16:10.227859287Z 61 PC: 12a82 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:16:10.2348746Z 64 PC: 12a93 | Write file or device (Write 166 bytes on handle 5)
2018-12-17T22:16:10.242089505Z 62 PC: 12a9b | Close file
2018-12-17T22:16:10.249459095Z 59 PC: 12ab4 | Change current directory
2018-12-17T22:16:10.253801653Z 78 PC: 12a72 | Find first file
2018-12-17T22:16:10.26012818Z 61 PC: 12a82 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:16:10.266415589Z 64 PC: 12a93 | Write file or device (Write 166 bytes on handle 5)
2018-12-17T22:16:10.272680032Z 62 PC: 12a9b | Close file
2018-12-17T22:16:10.280722334Z 79 PC: 12a79 | Find next file
2018-12-17T22:16:10.28354264Z 61 PC: 12a82 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:16:10.294678819Z 64 PC: 12a93 | Write file or device (Write 166 bytes on handle 5)
2018-12-17T22:16:10.30233404Z 62 PC: 12a9b | Close file
2018-12-17T22:16:10.31044386Z 79 PC: 12a79 | Find next file
2018-12-17T22:16:10.313206336Z 61 PC: 12a82 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:16:10.320451374Z 64 PC: 12a93 | Write file or device (Write 166 bytes on handle 5)
2018-12-17T22:16:10.327375095Z 62 PC: 12a9b | Close file
2018-12-17T22:16:10.335060072Z 79 PC: 12a79 | Find next file
2018-12-17T22:16:10.338431971Z 61 PC: 12a82 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:16:10.344901929Z 64 PC: 12a93 | Write file or device (Write 166 bytes on handle 5)
2018-12-17T22:16:10.351287994Z 62 PC: 12a9b | Close file
2018-12-17T22:16:10.359493813Z 79 PC: 12a79 | Find next file
2018-12-17T22:16:10.362369428Z 61 PC: 12a82 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:16:10.373760455Z 64 PC: 12a93 | Write file or device (Write 166 bytes on handle 5)
2018-12-17T22:16:10.380319174Z 62 PC: 12a9b | Close file
2018-12-17T22:16:10.387830692Z 59 PC: 12ab4 | Change current directory
2018-12-17T22:16:10.391804811Z 42 PC: 12ac5 | Get date 0x12ac5: cmp dl, 0xd
0x12ac8: je 0x12acc
0x12aca: int 0x20
0x12acc: mov ah, 5
0x12ace: mov cx, 3
0x12ad1: mov dh, byte ptr [0x127]
0x12ad5: mov dl, 0x80
0x12ad7: int 0x13
0x12ad9: inc byte ptr [0x125]
0x12add: cmp byte ptr [0x127], 0x14
0x12ae2: je 0x12aca
0x12ae4: jmp 0x12acc
0x12ae6: add cl, ch
0x12ae8: and word ptr [bp + di - 0x15], ax
0x12aeb: pop cx
0x12aed: pop bx
0x12aee: ret
0x12aef: push ax
0x12af0: mov ax, 0x1213
0x12af3: int 0x2f

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2907,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:47:44.082578716Z 78 PC: 12a72 | Find first file
2018-12-25T11:47:44.088821337Z 61 PC: 12a82 | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:47:44.09510467Z 64 PC: 12a93 | Write file or device (Write 166 bytes on handle 5)
2018-12-25T11:47:44.101472211Z 62 PC: 12a9b | Close file
2018-12-25T11:47:44.117421609Z 79 PC: 12a79 | Find next file
2018-12-25T11:47:44.119902134Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.126305476Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.133240309Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.141174682Z 79 PC: 12a79 | Find next file (See above)
2018-12-25T11:47:44.144202138Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.151910469Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.158361385Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.165936614Z 79 PC: 12a79 | Find next file (See above)
2018-12-25T11:47:44.168735307Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.17532892Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.181823211Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.190127843Z 79 PC: 12a79 | Find next file (See above)
2018-12-25T11:47:44.19311523Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.204681797Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.209054121Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.214171867Z 59 PC: 12ab4 | Change current directory
2018-12-25T11:47:44.21811737Z 78 PC: 12a72 | Find first file (See above)
2018-12-25T11:47:44.223804863Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.230335206Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.236627188Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.244289711Z 79 PC: 12a79 | Find next file (See above)
2018-12-25T11:47:44.247122196Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.258504746Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.265663228Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.274129979Z 79 PC: 12a79 | Find next file (See above)
2018-12-25T11:47:44.27662365Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.288081845Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.295718277Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.303672136Z 79 PC: 12a79 | Find next file (See above)
2018-12-25T11:47:44.306392046Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.313622139Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.32007766Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.327829279Z 79 PC: 12a79 | Find next file (See above)
2018-12-25T11:47:44.331355465Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.338695661Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.345334298Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.353450399Z 59 PC: 12ab4 | Change current directory (See above)
2018-12-25T11:47:44.358033265Z 78 PC: 12a72 | Find first file (See above)
2018-12-25T11:47:44.3639251Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.370923069Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.377742577Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.385561861Z 79 PC: 12a79 | Find next file (See above)
2018-12-25T11:47:44.388554069Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.40152539Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.408296834Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.416739056Z 79 PC: 12a79 | Find next file (See above)
2018-12-25T11:47:44.420184732Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.426780863Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.433711193Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.442722263Z 79 PC: 12a79 | Find next file (See above)
2018-12-25T11:47:44.445378615Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.452341094Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.459710666Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.467711024Z 79 PC: 12a79 | Find next file (See above)
2018-12-25T11:47:44.470212786Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.477228978Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.484061598Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.491310319Z 59 PC: 12ab4 | Change current directory (See above)
2018-12-25T11:47:44.495782501Z 78 PC: 12a72 | Find first file (See above)
2018-12-25T11:47:44.501775806Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.519467794Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.524418839Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.52962345Z 79 PC: 12a79 | Find next file (See above)
2018-12-25T11:47:44.531410903Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.535863371Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.542118514Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.549421615Z 79 PC: 12a79 | Find next file (See above)
2018-12-25T11:47:44.551628437Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.557811749Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.564076992Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.573195724Z 79 PC: 12a79 | Find next file (See above)
2018-12-25T11:47:44.579599086Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.591361512Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.59888224Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.607320064Z 79 PC: 12a79 | Find next file (See above)
2018-12-25T11:47:44.611345995Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.623560649Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.629996326Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.638013629Z 59 PC: 12ab4 | Change current directory (See above)
2018-12-25T11:47:44.642232165Z 78 PC: 12a72 | Find first file (See above)
2018-12-25T11:47:44.654086363Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.660408441Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.666489283Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.673870519Z 79 PC: 12a79 | Find next file (See above)
2018-12-25T11:47:44.676069136Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.681973091Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.689178123Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.697074087Z 79 PC: 12a79 | Find next file (See above)
2018-12-25T11:47:44.699752477Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.711047619Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.715184873Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.72163727Z 79 PC: 12a79 | Find next file (See above)
2018-12-25T11:47:44.724930768Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.729221358Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.735736122Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.742840194Z 79 PC: 12a79 | Find next file (See above)
2018-12-25T11:47:44.744693214Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.748693752Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.75335478Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.758920611Z 59 PC: 12ab4 | Change current directory (See above)
2018-12-25T11:47:44.767341775Z 42 PC: 12ac5 | Get date 0x12ac5: cmp dl, 0xd
0x12ac8: je 0x12acc
0x12aca: int 0x20
0x12acc: mov ah, 5
0x12ace: mov cx, 3
0x12ad1: mov dh, byte ptr [0x127]
0x12ad5: mov dl, 0x80
0x12ad7: int 0x13
0x12ad9: inc byte ptr [0x125]
0x12add: cmp byte ptr [0x127], 0x14
0x12ae2: je 0x12aca
0x12ae4: jmp 0x12acc
0x12ae6: add cl, ch
0x12ae8: and word ptr [bp + di - 0x15], ax
0x12aeb: pop cx
0x12aed: pop bx
0x12aee: ret
0x12aef: push ax
0x12af0: mov ax, 0x1213
0x12af3: int 0x2f

{"DateBased":true,"Day":13,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2907,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:47:44.305082332Z 78 PC: 12a72 | Find first file
2018-12-25T11:47:44.312232088Z 61 PC: 12a82 | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:47:44.320170891Z 64 PC: 12a93 | Write file or device (Write 166 bytes on handle 5)
2018-12-25T11:47:44.328124974Z 62 PC: 12a9b | Close file
2018-12-25T11:47:44.343303201Z 79 PC: 12a79 | Find next file
2018-12-25T11:47:44.349080275Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.3534482Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.357999692Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.363636171Z 79 PC: 12a79 | Find next file (See above)
2018-12-25T11:47:44.365587482Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.373570829Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.378632356Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.384125833Z 79 PC: 12a79 | Find next file (See above)
2018-12-25T11:47:44.386065852Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.391267039Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.395765684Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.412018517Z 79 PC: 12a79 | Find next file (See above)
2018-12-25T11:47:44.41445545Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.418862473Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.423281572Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.428847805Z 59 PC: 12ab4 | Change current directory
2018-12-25T11:47:44.435071248Z 78 PC: 12a72 | Find first file (See above)
2018-12-25T11:47:44.441911211Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.449864743Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.456140974Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.462184987Z 79 PC: 12a79 | Find next file (See above)
2018-12-25T11:47:44.465370299Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.478446165Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.48771068Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.496941696Z 79 PC: 12a79 | Find next file (See above)
2018-12-25T11:47:44.500267832Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.508734315Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.516437589Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.526117684Z 79 PC: 12a79 | Find next file (See above)
2018-12-25T11:47:44.53055804Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.540601368Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.548526641Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.558449233Z 79 PC: 12a79 | Find next file (See above)
2018-12-25T11:47:44.562250831Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.569997005Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.579875617Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.589487877Z 59 PC: 12ab4 | Change current directory (See above)
2018-12-25T11:47:44.594369277Z 78 PC: 12a72 | Find first file (See above)
2018-12-25T11:47:44.601487354Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.608797851Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.611797925Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.620225561Z 79 PC: 12a79 | Find next file (See above)
2018-12-25T11:47:44.624259567Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.636752896Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.644371487Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.65368142Z 79 PC: 12a79 | Find next file (See above)
2018-12-25T11:47:44.656591084Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.663617238Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.671332026Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.679882631Z 79 PC: 12a79 | Find next file (See above)
2018-12-25T11:47:44.683690194Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.691923379Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.69951446Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.708461334Z 79 PC: 12a79 | Find next file (See above)
2018-12-25T11:47:44.712241786Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.720112772Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.727251881Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.736235094Z 59 PC: 12ab4 | Change current directory (See above)
2018-12-25T11:47:44.741124941Z 78 PC: 12a72 | Find first file (See above)
2018-12-25T11:47:44.748460633Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.756088559Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.764593061Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.780394394Z 79 PC: 12a79 | Find next file (See above)
2018-12-25T11:47:44.783459861Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.793002847Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.7960816Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.805053473Z 79 PC: 12a79 | Find next file (See above)
2018-12-25T11:47:44.808386229Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.815671788Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.818722949Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.827934349Z 79 PC: 12a79 | Find next file (See above)
2018-12-25T11:47:44.830858073Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.838835554Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.847282757Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.856708255Z 79 PC: 12a79 | Find next file (See above)
2018-12-25T11:47:44.859673991Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.867799281Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.87155437Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.879753894Z 59 PC: 12ab4 | Change current directory (See above)
2018-12-25T11:47:44.884768676Z 78 PC: 12a72 | Find first file (See above)
2018-12-25T11:47:44.89144853Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.904264618Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.912605976Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.927543114Z 79 PC: 12a79 | Find next file (See above)
2018-12-25T11:47:44.930868634Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.938560651Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.94616631Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.95455888Z 79 PC: 12a79 | Find next file (See above)
2018-12-25T11:47:44.957271335Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.965093149Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.972519993Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.981537637Z 79 PC: 12a79 | Find next file (See above)
2018-12-25T11:47:44.984152556Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:44.988637346Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:44.992991989Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:44.998978139Z 79 PC: 12a79 | Find next file (See above)
2018-12-25T11:47:45.001975756Z 61 PC: 12a82 | Open file (See above)
2018-12-25T11:47:45.009696665Z 64 PC: 12a93 | Write file or device (See above)
2018-12-25T11:47:45.027214634Z 62 PC: 12a9b | Close file (See above)
2018-12-25T11:47:45.03608282Z 59 PC: 12ab4 | Change current directory (See above)
2018-12-25T11:47:45.039576959Z 42 PC: 12ac5 | Get date 0x12ac5: cmp dl, 0xd
0x12ac8: je 0x12acc
0x12aca: int 0x20
0x12acc: mov ah, 5
0x12ace: mov cx, 3
0x12ad1: mov dh, byte ptr [0x127]
0x12ad5: mov dl, 0x80
0x12ad7: int 0x13
0x12ad9: inc byte ptr [0x125]
0x12add: cmp byte ptr [0x127], 0x14
0x12ae2: je 0x12aca
0x12ae4: jmp 0x12acc
0x12ae6: add cl, ch
0x12ae8: and word ptr [bp + di - 0x15], ax
0x12aeb: pop cx
0x12aed: pop bx
0x12aee: ret
0x12aef: push ax
0x12af0: mov ax, 0x1213
0x12af3: int 0x2f