Sample viewer

vx.netlux.org/Virus.DOS.ARCV.826

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-17T22:33:25.11036231Z	26	PC: 12a8c \| Set disk transfer address
2018-12-17T22:33:25.112729947Z	71	PC: 12a96 \| Get current directory
2018-12-17T22:33:25.11591608Z	53	PC: 12aa0 \| Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:33:25.117406208Z	37	PC: 12ab0 \| Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:33:25.119713931Z	78	PC: 12be2 \| Find first file
2018-12-17T22:33:25.125850942Z	78	PC: 12be2 \| Find first file
2018-12-17T22:33:25.13192643Z	61	PC: 12d50 \| Open file (Filename = 'SLEEP.COM')
2018-12-17T22:33:25.139374209Z	63	PC: 12bf4 \| Read file or device (Read 26 bytes on handle 5)
2018-12-17T22:33:25.146407992Z	62	PC: 12bf8 \| Close file
2018-12-17T22:33:25.148508082Z	79	PC: 12be2 \| Find next file
2018-12-17T22:33:25.152286966Z	61	PC: 12d50 \| Open file (Filename = 'PRINT.COM')
2018-12-17T22:33:25.16406556Z	63	PC: 12bf4 \| Read file or device (Read 26 bytes on handle 5)
2018-12-17T22:33:25.170778884Z	62	PC: 12bf8 \| Close file
2018-12-17T22:33:25.172496363Z	79	PC: 12be2 \| Find next file
2018-12-17T22:33:25.175409752Z	61	PC: 12d50 \| Open file (Filename = 'HELLO.COM')
2018-12-17T22:33:25.191121413Z	63	PC: 12bf4 \| Read file or device (Read 26 bytes on handle 5)
2018-12-17T22:33:25.197457267Z	62	PC: 12bf8 \| Close file
2018-12-17T22:33:25.200451108Z	79	PC: 12be2 \| Find next file
2018-12-17T22:33:25.203397141Z	61	PC: 12d50 \| Open file (Filename = 'PHANG.COM')
2018-12-17T22:33:25.210132056Z	63	PC: 12bf4 \| Read file or device (Read 26 bytes on handle 5)
2018-12-17T22:33:25.217834199Z	62	PC: 12bf8 \| Close file
2018-12-17T22:33:25.220096634Z	79	PC: 12be2 \| Find next file
2018-12-17T22:33:25.223056786Z	61	PC: 12d50 \| Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:33:25.237654225Z	63	PC: 12bf4 \| Read file or device (Read 26 bytes on handle 5)
2018-12-17T22:33:25.244962599Z	62	PC: 12bf8 \| Close file
2018-12-17T22:33:25.247238784Z	79	PC: 12be2 \| Find next file
2018-12-17T22:33:25.251550599Z	61	PC: 12d50 \| Open file (Filename = 'MANDEL.COM')
2018-12-17T22:33:25.258202462Z	63	PC: 12bf4 \| Read file or device (Read 26 bytes on handle 5)
2018-12-17T22:33:25.264483527Z	62	PC: 12bf8 \| Close file
2018-12-17T22:33:25.267247011Z	79	PC: 12be2 \| Find next file
2018-12-17T22:33:25.269908703Z	61	PC: 12d50 \| Open file (Filename = 'PAH.COM')
2018-12-17T22:33:25.276287723Z	63	PC: 12bf4 \| Read file or device (Read 26 bytes on handle 5)
2018-12-17T22:33:25.283484845Z	62	PC: 12bf8 \| Close file
2018-12-17T22:33:25.285931728Z	79	PC: 12be2 \| Find next file
2018-12-17T22:33:25.288894901Z	61	PC: 12d50 \| Open file (Filename = 'TEST.COM')
2018-12-17T22:33:25.295616197Z	63	PC: 12bf4 \| Read file or device (Read 26 bytes on handle 5)
2018-12-17T22:33:25.30331338Z	62	PC: 12bf8 \| Close file
2018-12-17T22:33:25.305423764Z	79	PC: 12be2 \| Find next file
2018-12-17T22:33:25.30793977Z	59	PC: 12ac8 \| Change current directory
2018-12-17T22:33:25.313683036Z	42	PC: 12ace \| Get date 0x12ace: cmp dh, 6 0x12ad1: je 0x12b2c 0x12ad3: cmp dl, 0xf 0x12ad6: je 0x12b2c 0x12ad8: cmp cx, 0x7c9 0x12adc: jae 0x12b2c 0x12ade: mov ax, 0x2524 0x12ae1: lds dx, ptr [bp + 0x46f] 0x12ae5: int 0x21 0x12ae7: push cs 0x12ae8: pop ds 0x12ae9: mov ah, 0x3b 0x12aeb: lea dx, word ptr [bp + 0x473] 0x12aef: int 0x21 0x12af1: mov ah, 0x1a 0x12af3: mov dx, 0x80 0x12af6: cmp sp, 0x4153 0x12afa: je 0x12aff 0x12afc: int 0x21 0x12afe: ret
2018-12-17T22:33:25.316098216Z	9	PC: 12b34 \| Display string (String= 'Long Live The ARCV. MUFC for the League! (c) Apache Warrior, ARCV Pres. 92 Welcome to the REAL World. And the ARCV 1 Virus! ')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":5978,"SideJobID":0}

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:58:10.154403563Z	26	PC: 12a8c \| Set disk transfer address
2018-12-25T11:58:10.159227652Z	71	PC: 12a96 \| Get current directory
2018-12-25T11:58:10.162184385Z	53	PC: 12aa0 \| Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:58:10.163172829Z	37	PC: 12ab0 \| Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:58:10.164759404Z	78	PC: 12be2 \| Find first file
2018-12-25T11:58:10.170358621Z	78	PC: 12be2 \| Find first file (See above)
2018-12-25T11:58:10.17586841Z	61	PC: 12d50 \| Open file (Filename = 'SLEEP.COM')
2018-12-25T11:58:10.182801323Z	63	PC: 12bf4 \| Read file or device (Read 26 bytes on handle 5)
2018-12-25T11:58:10.189016543Z	62	PC: 12bf8 \| Close file
2018-12-25T11:58:10.190951477Z	79	PC: 12be2 \| Find next file (See above)
2018-12-25T11:58:10.193971937Z	61	PC: 12d50 \| Open file (See above)
2018-12-25T11:58:10.20509554Z	63	PC: 12bf4 \| Read file or device (See above)
2018-12-25T11:58:10.211096346Z	62	PC: 12bf8 \| Close file (See above)
2018-12-25T11:58:10.214208081Z	79	PC: 12be2 \| Find next file (See above)
2018-12-25T11:58:10.217709722Z	61	PC: 12d50 \| Open file (See above)
2018-12-25T11:58:10.22435503Z	63	PC: 12bf4 \| Read file or device (See above)
2018-12-25T11:58:10.228784727Z	62	PC: 12bf8 \| Close file (See above)
2018-12-25T11:58:10.230100642Z	79	PC: 12be2 \| Find next file (See above)
2018-12-25T11:58:10.231758257Z	61	PC: 12d50 \| Open file (See above)
2018-12-25T11:58:10.237839739Z	63	PC: 12bf4 \| Read file or device (See above)
2018-12-25T11:58:10.244046549Z	62	PC: 12bf8 \| Close file (See above)
2018-12-25T11:58:10.245709965Z	79	PC: 12be2 \| Find next file (See above)
2018-12-25T11:58:10.248140286Z	61	PC: 12d50 \| Open file (See above)
2018-12-25T11:58:10.254762944Z	63	PC: 12bf4 \| Read file or device (See above)
2018-12-25T11:58:10.260993396Z	62	PC: 12bf8 \| Close file (See above)
2018-12-25T11:58:10.262853969Z	79	PC: 12be2 \| Find next file (See above)
2018-12-25T11:58:10.266110176Z	61	PC: 12d50 \| Open file (See above)
2018-12-25T11:58:10.272285629Z	63	PC: 12bf4 \| Read file or device (See above)
2018-12-25T11:58:10.278421594Z	62	PC: 12bf8 \| Close file (See above)
2018-12-25T11:58:10.285681364Z	79	PC: 12be2 \| Find next file (See above)
2018-12-25T11:58:10.288695619Z	61	PC: 12d50 \| Open file (See above)
2018-12-25T11:58:10.295120022Z	63	PC: 12bf4 \| Read file or device (See above)
2018-12-25T11:58:10.302427762Z	62	PC: 12bf8 \| Close file (See above)
2018-12-25T11:58:10.30415038Z	79	PC: 12be2 \| Find next file (See above)
2018-12-25T11:58:10.306671632Z	61	PC: 12d50 \| Open file (See above)
2018-12-25T11:58:10.313751024Z	63	PC: 12bf4 \| Read file or device (See above)
2018-12-25T11:58:10.319759277Z	62	PC: 12bf8 \| Close file (See above)
2018-12-25T11:58:10.321343474Z	79	PC: 12be2 \| Find next file (See above)
2018-12-25T11:58:10.323937936Z	59	PC: 12ac8 \| Change current directory
2018-12-25T11:58:10.327822053Z	42	PC: 12ace \| Get date 0x12ace: cmp dh, 6 0x12ad1: je 0x12b2c 0x12ad3: cmp dl, 0xf 0x12ad6: je 0x12b2c 0x12ad8: cmp cx, 0x7c9 0x12adc: jae 0x12b2c 0x12ade: mov ax, 0x2524 0x12ae1: lds dx, ptr [bp + 0x46f] 0x12ae5: int 0x21 0x12ae7: push cs 0x12ae8: pop ds 0x12ae9: mov ah, 0x3b 0x12aeb: lea dx, word ptr [bp + 0x473] 0x12aef: int 0x21 0x12af1: mov ah, 0x1a 0x12af3: mov dx, 0x80 0x12af6: cmp sp, 0x4153 0x12afa: je 0x12aff 0x12afc: int 0x21 0x12afe: ret
2018-12-25T11:58:10.329834399Z	37	PC: 12ae7 \| Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:58:10.331530548Z	59	PC: 12af1 \| Change current directory
2018-12-25T11:58:10.335669943Z	26	PC: 12afe \| Set disk transfer address

{"DateBased":true,"Day":15,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":5978,"SideJobID":0}

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:58:10.239387433Z	26	PC: 12a8c \| Set disk transfer address
2018-12-25T11:58:10.241297649Z	71	PC: 12a96 \| Get current directory
2018-12-25T11:58:10.243152595Z	53	PC: 12aa0 \| Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:58:10.244057317Z	37	PC: 12ab0 \| Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:58:10.245665324Z	78	PC: 12be2 \| Find first file
2018-12-25T11:58:10.249808445Z	78	PC: 12be2 \| Find first file (See above)
2018-12-25T11:58:10.253463024Z	61	PC: 12d50 \| Open file (Filename = 'SLEEP.COM')
2018-12-25T11:58:10.258023906Z	63	PC: 12bf4 \| Read file or device (Read 26 bytes on handle 5)
2018-12-25T11:58:10.264377303Z	62	PC: 12bf8 \| Close file
2018-12-25T11:58:10.266041305Z	79	PC: 12be2 \| Find next file (See above)
2018-12-25T11:58:10.269018005Z	61	PC: 12d50 \| Open file (See above)
2018-12-25T11:58:10.276987015Z	63	PC: 12bf4 \| Read file or device (See above)
2018-12-25T11:58:10.281117253Z	62	PC: 12bf8 \| Close file (See above)
2018-12-25T11:58:10.282942856Z	79	PC: 12be2 \| Find next file (See above)
2018-12-25T11:58:10.284862238Z	61	PC: 12d50 \| Open file (See above)
2018-12-25T11:58:10.292938806Z	63	PC: 12bf4 \| Read file or device (See above)
2018-12-25T11:58:10.298030781Z	62	PC: 12bf8 \| Close file (See above)
2018-12-25T11:58:10.300098138Z	79	PC: 12be2 \| Find next file (See above)
2018-12-25T11:58:10.303937033Z	61	PC: 12d50 \| Open file (See above)
2018-12-25T11:58:10.310763307Z	63	PC: 12bf4 \| Read file or device (See above)
2018-12-25T11:58:10.317013811Z	62	PC: 12bf8 \| Close file (See above)
2018-12-25T11:58:10.318652179Z	79	PC: 12be2 \| Find next file (See above)
2018-12-25T11:58:10.321090544Z	61	PC: 12d50 \| Open file (See above)
2018-12-25T11:58:10.327895837Z	63	PC: 12bf4 \| Read file or device (See above)
2018-12-25T11:58:10.334373506Z	62	PC: 12bf8 \| Close file (See above)
2018-12-25T11:58:10.336449631Z	79	PC: 12be2 \| Find next file (See above)
2018-12-25T11:58:10.339776194Z	61	PC: 12d50 \| Open file (See above)
2018-12-25T11:58:10.346287839Z	63	PC: 12bf4 \| Read file or device (See above)
2018-12-25T11:58:10.353287872Z	62	PC: 12bf8 \| Close file (See above)
2018-12-25T11:58:10.356009651Z	79	PC: 12be2 \| Find next file (See above)
2018-12-25T11:58:10.358764589Z	61	PC: 12d50 \| Open file (See above)
2018-12-25T11:58:10.365016705Z	63	PC: 12bf4 \| Read file or device (See above)
2018-12-25T11:58:10.371882164Z	62	PC: 12bf8 \| Close file (See above)
2018-12-25T11:58:10.37366944Z	79	PC: 12be2 \| Find next file (See above)
2018-12-25T11:58:10.376234685Z	61	PC: 12d50 \| Open file (See above)
2018-12-25T11:58:10.389919354Z	63	PC: 12bf4 \| Read file or device (See above)
2018-12-25T11:58:10.396220581Z	62	PC: 12bf8 \| Close file (See above)
2018-12-25T11:58:10.397956958Z	79	PC: 12be2 \| Find next file (See above)
2018-12-25T11:58:10.401068783Z	59	PC: 12ac8 \| Change current directory
2018-12-25T11:58:10.405154646Z	42	PC: 12ace \| Get date 0x12ace: cmp dh, 6 0x12ad1: je 0x12b2c 0x12ad3: cmp dl, 0xf 0x12ad6: je 0x12b2c 0x12ad8: cmp cx, 0x7c9 0x12adc: jae 0x12b2c 0x12ade: mov ax, 0x2524 0x12ae1: lds dx, ptr [bp + 0x46f] 0x12ae5: int 0x21 0x12ae7: push cs 0x12ae8: pop ds 0x12ae9: mov ah, 0x3b 0x12aeb: lea dx, word ptr [bp + 0x473] 0x12aef: int 0x21 0x12af1: mov ah, 0x1a 0x12af3: mov dx, 0x80 0x12af6: cmp sp, 0x4153 0x12afa: je 0x12aff 0x12afc: int 0x21 0x12afe: ret
2018-12-25T11:58:10.407266357Z	9	PC: 12b34 \| Display string (String= 'Long Live The ARCV. MUFC for the League! (c) Apache Warrior, ARCV Pres. 92 Welcome to the REAL World. And the ARCV 1 Virus! ')

{"DateBased":true,"Day":1,"Month":6,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":5978,"SideJobID":0}

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:58:10.453319853Z	26	PC: 12a8c \| Set disk transfer address
2018-12-25T11:58:10.459869238Z	71	PC: 12a96 \| Get current directory
2018-12-25T11:58:10.461758814Z	53	PC: 12aa0 \| Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:58:10.462597847Z	37	PC: 12ab0 \| Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:58:10.465676273Z	78	PC: 12be2 \| Find first file
2018-12-25T11:58:10.469483668Z	78	PC: 12be2 \| Find first file (See above)
2018-12-25T11:58:10.476400189Z	61	PC: 12d50 \| Open file (Filename = 'SLEEP.COM')
2018-12-25T11:58:10.484351541Z	63	PC: 12bf4 \| Read file or device (Read 26 bytes on handle 5)
2018-12-25T11:58:10.489522648Z	62	PC: 12bf8 \| Close file
2018-12-25T11:58:10.491029299Z	79	PC: 12be2 \| Find next file (See above)
2018-12-25T11:58:10.493934381Z	61	PC: 12d50 \| Open file (See above)
2018-12-25T11:58:10.50098331Z	63	PC: 12bf4 \| Read file or device (See above)
2018-12-25T11:58:10.507646547Z	62	PC: 12bf8 \| Close file (See above)
2018-12-25T11:58:10.510181705Z	79	PC: 12be2 \| Find next file (See above)
2018-12-25T11:58:10.512889467Z	61	PC: 12d50 \| Open file (See above)
2018-12-25T11:58:10.52093275Z	63	PC: 12bf4 \| Read file or device (See above)
2018-12-25T11:58:10.525670983Z	62	PC: 12bf8 \| Close file (See above)
2018-12-25T11:58:10.527008066Z	79	PC: 12be2 \| Find next file (See above)
2018-12-25T11:58:10.52870564Z	61	PC: 12d50 \| Open file (See above)
2018-12-25T11:58:10.53331965Z	63	PC: 12bf4 \| Read file or device (See above)
2018-12-25T11:58:10.537970683Z	62	PC: 12bf8 \| Close file (See above)
2018-12-25T11:58:10.539384083Z	79	PC: 12be2 \| Find next file (See above)
2018-12-25T11:58:10.542774002Z	61	PC: 12d50 \| Open file (See above)
2018-12-25T11:58:10.548423239Z	63	PC: 12bf4 \| Read file or device (See above)
2018-12-25T11:58:10.552535497Z	62	PC: 12bf8 \| Close file (See above)
2018-12-25T11:58:10.554411317Z	79	PC: 12be2 \| Find next file (See above)
2018-12-25T11:58:10.556492711Z	61	PC: 12d50 \| Open file (See above)
2018-12-25T11:58:10.561188908Z	63	PC: 12bf4 \| Read file or device (See above)
2018-12-25T11:58:10.565730029Z	62	PC: 12bf8 \| Close file (See above)
2018-12-25T11:58:10.568097796Z	79	PC: 12be2 \| Find next file (See above)
2018-12-25T11:58:10.5708834Z	61	PC: 12d50 \| Open file (See above)
2018-12-25T11:58:10.578184044Z	63	PC: 12bf4 \| Read file or device (See above)
2018-12-25T11:58:10.584842454Z	62	PC: 12bf8 \| Close file (See above)
2018-12-25T11:58:10.58654044Z	79	PC: 12be2 \| Find next file (See above)
2018-12-25T11:58:10.58969067Z	61	PC: 12d50 \| Open file (See above)
2018-12-25T11:58:10.596358698Z	63	PC: 12bf4 \| Read file or device (See above)
2018-12-25T11:58:10.602680322Z	62	PC: 12bf8 \| Close file (See above)
2018-12-25T11:58:10.604963203Z	79	PC: 12be2 \| Find next file (See above)
2018-12-25T11:58:10.606618111Z	59	PC: 12ac8 \| Change current directory
2018-12-25T11:58:10.609120799Z	42	PC: 12ace \| Get date 0x12ace: cmp dh, 6 0x12ad1: je 0x12b2c 0x12ad3: cmp dl, 0xf 0x12ad6: je 0x12b2c 0x12ad8: cmp cx, 0x7c9 0x12adc: jae 0x12b2c 0x12ade: mov ax, 0x2524 0x12ae1: lds dx, ptr [bp + 0x46f] 0x12ae5: int 0x21 0x12ae7: push cs 0x12ae8: pop ds 0x12ae9: mov ah, 0x3b 0x12aeb: lea dx, word ptr [bp + 0x473] 0x12aef: int 0x21 0x12af1: mov ah, 0x1a 0x12af3: mov dx, 0x80 0x12af6: cmp sp, 0x4153 0x12afa: je 0x12aff 0x12afc: int 0x21 0x12afe: ret
2018-12-25T11:58:10.612248064Z	9	PC: 12b34 \| Display string (String= 'Long Live The ARCV. MUFC for the League! (c) Apache Warrior, ARCV Pres. 92 Welcome to the REAL World. And the ARCV 1 Virus! ')

{"DateBased":true,"Day":1,"Month":1,"Year":1994,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":5978,"SideJobID":0}

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:58:10.987471327Z	26	PC: 12a8c \| Set disk transfer address
2018-12-25T11:58:10.9894485Z	71	PC: 12a96 \| Get current directory
2018-12-25T11:58:10.992434057Z	53	PC: 12aa0 \| Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:58:10.99346047Z	37	PC: 12ab0 \| Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:58:10.995234124Z	78	PC: 12be2 \| Find first file
2018-12-25T11:58:10.999099269Z	78	PC: 12be2 \| Find first file (See above)
2018-12-25T11:58:11.002756084Z	61	PC: 12d50 \| Open file (Filename = 'SLEEP.COM')
2018-12-25T11:58:11.010754741Z	63	PC: 12bf4 \| Read file or device (Read 26 bytes on handle 5)
2018-12-25T11:58:11.01766081Z	62	PC: 12bf8 \| Close file
2018-12-25T11:58:11.0195104Z	79	PC: 12be2 \| Find next file (See above)
2018-12-25T11:58:11.022942574Z	61	PC: 12d50 \| Open file (See above)
2018-12-25T11:58:11.034778225Z	63	PC: 12bf4 \| Read file or device (See above)
2018-12-25T11:58:11.04101531Z	62	PC: 12bf8 \| Close file (See above)
2018-12-25T11:58:11.044264287Z	79	PC: 12be2 \| Find next file (See above)
2018-12-25T11:58:11.047136326Z	61	PC: 12d50 \| Open file (See above)
2018-12-25T11:58:11.054100903Z	63	PC: 12bf4 \| Read file or device (See above)
2018-12-25T11:58:11.061384851Z	62	PC: 12bf8 \| Close file (See above)
2018-12-25T11:58:11.06316538Z	79	PC: 12be2 \| Find next file (See above)
2018-12-25T11:58:11.071021097Z	61	PC: 12d50 \| Open file (See above)
2018-12-25T11:58:11.078569449Z	63	PC: 12bf4 \| Read file or device (See above)
2018-12-25T11:58:11.082978157Z	62	PC: 12bf8 \| Close file (See above)
2018-12-25T11:58:11.084396Z	79	PC: 12be2 \| Find next file (See above)
2018-12-25T11:58:11.086602798Z	61	PC: 12d50 \| Open file (See above)
2018-12-25T11:58:11.091513076Z	63	PC: 12bf4 \| Read file or device (See above)
2018-12-25T11:58:11.096309534Z	62	PC: 12bf8 \| Close file (See above)
2018-12-25T11:58:11.097578084Z	79	PC: 12be2 \| Find next file (See above)
2018-12-25T11:58:11.100881482Z	61	PC: 12d50 \| Open file (See above)
2018-12-25T11:58:11.114539376Z	63	PC: 12bf4 \| Read file or device (See above)
2018-12-25T11:58:11.121235841Z	62	PC: 12bf8 \| Close file (See above)
2018-12-25T11:58:11.124346735Z	79	PC: 12be2 \| Find next file (See above)
2018-12-25T11:58:11.127020826Z	61	PC: 12d50 \| Open file (See above)
2018-12-25T11:58:11.133329712Z	63	PC: 12bf4 \| Read file or device (See above)
2018-12-25T11:58:11.1403868Z	62	PC: 12bf8 \| Close file (See above)
2018-12-25T11:58:11.142788345Z	79	PC: 12be2 \| Find next file (See above)
2018-12-25T11:58:11.145675319Z	61	PC: 12d50 \| Open file (See above)
2018-12-25T11:58:11.152986837Z	63	PC: 12bf4 \| Read file or device (See above)
2018-12-25T11:58:11.159105124Z	62	PC: 12bf8 \| Close file (See above)
2018-12-25T11:58:11.161041925Z	79	PC: 12be2 \| Find next file (See above)
2018-12-25T11:58:11.1638914Z	59	PC: 12ac8 \| Change current directory
2018-12-25T11:58:11.167813584Z	42	PC: 12ace \| Get date 0x12ace: cmp dh, 6 0x12ad1: je 0x12b2c 0x12ad3: cmp dl, 0xf 0x12ad6: je 0x12b2c 0x12ad8: cmp cx, 0x7c9 0x12adc: jae 0x12b2c 0x12ade: mov ax, 0x2524 0x12ae1: lds dx, ptr [bp + 0x46f] 0x12ae5: int 0x21 0x12ae7: push cs 0x12ae8: pop ds 0x12ae9: mov ah, 0x3b 0x12aeb: lea dx, word ptr [bp + 0x473] 0x12aef: int 0x21 0x12af1: mov ah, 0x1a 0x12af3: mov dx, 0x80 0x12af6: cmp sp, 0x4153 0x12afa: je 0x12aff 0x12afc: int 0x21 0x12afe: ret
2018-12-25T11:58:11.169786199Z	9	PC: 12b34 \| Display string (String= 'Long Live The ARCV. MUFC for the League! (c) Apache Warrior, ARCV Pres. 92 Welcome to the REAL World. And the ARCV 1 Virus! ')