Sample viewer

vx.netlux.org/Virus.DOS.Spanska.1008

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:35:08.763971008Z 71 PC: 12a94 | Get current directory
2018-12-17T22:35:08.766986224Z 26 PC: 12aa5 | Set disk transfer address
2018-12-17T22:35:08.769489145Z 78 PC: 12ab1 | Find first file
2018-12-17T22:35:08.775902422Z 67 PC: 12af5 | Get or set file attributes
2018-12-17T22:35:08.792301967Z 61 PC: 12afe | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:35:08.79991949Z 63 PC: 12b14 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:35:08.807414609Z 66 PC: 12b5d | Move file pointer
2018-12-17T22:35:08.809256526Z 64 PC: 12b69 | Write file or device (Write 49 bytes on handle 5)
2018-12-17T22:35:08.813699652Z 64 PC: 12b90 | Write file or device (Write 953 bytes on handle 5)
2018-12-17T22:35:08.822758953Z 66 PC: 12b9f | Move file pointer
2018-12-17T22:35:08.824406857Z 64 PC: 12bb3 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:35:08.829537516Z 66 PC: 12bbc | Move file pointer
2018-12-17T22:35:08.83144174Z 64 PC: 12bde | Write file or device (Write 5 bytes on handle 5)
2018-12-17T22:35:08.83827931Z 87 PC: 12bf3 | Get or set file date and time
2018-12-17T22:35:08.84059699Z 62 PC: 12bf7 | Close file
2018-12-17T22:35:08.848570069Z 67 PC: 12c0e | Get or set file attributes
2018-12-17T22:35:08.858986146Z 79 PC: 12ac2 | Find next file
2018-12-17T22:35:08.862207218Z 67 PC: 12af5 | Get or set file attributes
2018-12-17T22:35:08.877704889Z 61 PC: 12afe | Open file (Filename = 'PRINT.COM')
2018-12-17T22:35:08.884111532Z 63 PC: 12b14 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:35:08.891087918Z 62 PC: 12b3a | Close file
2018-12-17T22:35:08.893564812Z 67 PC: 12b51 | Get or set file attributes
2018-12-17T22:35:08.903314639Z 79 PC: 12ac2 | Find next file
2018-12-17T22:35:08.906223794Z 67 PC: 12af5 | Get or set file attributes
2018-12-17T22:35:08.916687458Z 61 PC: 12afe | Open file (Filename = 'HELLO.COM')
2018-12-17T22:35:08.923098964Z 63 PC: 12b14 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:35:08.929248594Z 62 PC: 12b3a | Close file
2018-12-17T22:35:08.931527906Z 67 PC: 12b51 | Get or set file attributes
2018-12-17T22:35:08.941456307Z 79 PC: 12ac2 | Find next file
2018-12-17T22:35:08.944273424Z 67 PC: 12af5 | Get or set file attributes
2018-12-17T22:35:08.957353729Z 61 PC: 12afe | Open file (Filename = 'PHANG.COM')
2018-12-17T22:35:08.963993972Z 63 PC: 12b14 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:35:08.970550327Z 62 PC: 12b3a | Close file
2018-12-17T22:35:08.973601361Z 67 PC: 12b51 | Get or set file attributes
2018-12-17T22:35:08.98362756Z 79 PC: 12ac2 | Find next file
2018-12-17T22:35:08.986352811Z 67 PC: 12af5 | Get or set file attributes
2018-12-17T22:35:08.996559683Z 61 PC: 12afe | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:35:09.00304614Z 63 PC: 12b14 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:35:09.009168014Z 62 PC: 12b3a | Close file
2018-12-17T22:35:09.011847029Z 67 PC: 12b51 | Get or set file attributes
2018-12-17T22:35:09.0245631Z 79 PC: 12ac2 | Find next file
2018-12-17T22:35:09.027567305Z 67 PC: 12af5 | Get or set file attributes
2018-12-17T22:35:09.037637121Z 61 PC: 12afe | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:35:09.044536972Z 63 PC: 12b14 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:35:09.051227549Z 66 PC: 12b5d | Move file pointer
2018-12-17T22:35:09.052694089Z 64 PC: 12b69 | Write file or device (Write 49 bytes on handle 5)
2018-12-17T22:35:09.061544203Z 64 PC: 12b90 | Write file or device (Write 953 bytes on handle 5)
2018-12-17T22:35:09.069437764Z 66 PC: 12b9f | Move file pointer
2018-12-17T22:35:09.070687747Z 64 PC: 12bb3 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:35:09.074823771Z 66 PC: 12bbc | Move file pointer
2018-12-17T22:35:09.076516855Z 64 PC: 12bde | Write file or device (Write 5 bytes on handle 5)
2018-12-17T22:35:09.083681025Z 87 PC: 12bf3 | Get or set file date and time
2018-12-17T22:35:09.091636021Z 62 PC: 12bf7 | Close file
2018-12-17T22:35:09.099430418Z 67 PC: 12c0e | Get or set file attributes
2018-12-17T22:35:09.108932548Z 79 PC: 12ac2 | Find next file
2018-12-17T22:35:09.112066384Z 67 PC: 12af5 | Get or set file attributes
2018-12-17T22:35:09.122046912Z 61 PC: 12afe | Open file (Filename = 'PAH.COM')
2018-12-17T22:35:09.129065485Z 63 PC: 12b14 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:35:09.136695373Z 62 PC: 12b3a | Close file
2018-12-17T22:35:09.139135755Z 67 PC: 12b51 | Get or set file attributes
2018-12-17T22:35:09.149518676Z 79 PC: 12ac2 | Find next file
2018-12-17T22:35:09.152981543Z 67 PC: 12af5 | Get or set file attributes
2018-12-17T22:35:09.162889915Z 61 PC: 12afe | Open file (Filename = 'TEST.COM')
2018-12-17T22:35:09.169326722Z 63 PC: 12b14 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:35:09.176472889Z 62 PC: 12b3a | Close file
2018-12-17T22:35:09.17813547Z 67 PC: 12b51 | Get or set file attributes
2018-12-17T22:35:09.187827079Z 79 PC: 12ac2 | Find next file
2018-12-17T22:35:09.190985348Z 59 PC: 12c28 | Change current directory
2018-12-17T22:35:09.194883081Z 78 PC: 12c38 | Find first file
2018-12-17T22:35:09.200533048Z 59 PC: 12c6e | Change current directory
2018-12-17T22:35:09.210997731Z 78 PC: 12ab1 | Find first file
2018-12-17T22:35:09.222085946Z 67 PC: 12af5 | Get or set file attributes
2018-12-17T22:35:09.231527653Z 61 PC: 12afe | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:35:09.238132478Z 63 PC: 12b14 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:35:09.244836122Z 62 PC: 12b3a | Close file
2018-12-17T22:35:09.246577773Z 67 PC: 12b51 | Get or set file attributes
2018-12-17T22:35:09.256289112Z 79 PC: 12ac2 | Find next file
2018-12-17T22:35:09.259575733Z 67 PC: 12af5 | Get or set file attributes
2018-12-17T22:35:09.269069801Z 61 PC: 12afe | Open file (Filename = 'PRINT.COM')
2018-12-17T22:35:09.280580008Z 63 PC: 12b14 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:35:09.287942971Z 62 PC: 12b3a | Close file
2018-12-17T22:35:09.289764062Z 67 PC: 12b51 | Get or set file attributes
2018-12-17T22:35:09.299564591Z 79 PC: 12ac2 | Find next file
2018-12-17T22:35:09.303361173Z 67 PC: 12af5 | Get or set file attributes
2018-12-17T22:35:09.312939724Z 61 PC: 12afe | Open file (Filename = 'HELLO.COM')
2018-12-17T22:35:09.319629058Z 63 PC: 12b14 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:35:09.326888101Z 62 PC: 12b3a | Close file
2018-12-17T22:35:09.329125272Z 67 PC: 12b51 | Get or set file attributes
2018-12-17T22:35:09.338841363Z 79 PC: 12ac2 | Find next file
2018-12-17T22:35:09.342133532Z 67 PC: 12af5 | Get or set file attributes
2018-12-17T22:35:09.352231277Z 61 PC: 12afe | Open file (Filename = 'PHANG.COM')
2018-12-17T22:35:09.359081188Z 63 PC: 12b14 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:35:09.36626722Z 62 PC: 12b3a | Close file
2018-12-17T22:35:09.368005529Z 67 PC: 12b51 | Get or set file attributes
2018-12-17T22:35:09.377703474Z 79 PC: 12ac2 | Find next file
2018-12-17T22:35:09.380744591Z 67 PC: 12af5 | Get or set file attributes
2018-12-17T22:35:09.390565758Z 61 PC: 12afe | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:35:09.396949832Z 63 PC: 12b14 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:35:09.403657856Z 62 PC: 12b3a | Close file
2018-12-17T22:35:09.405406173Z 67 PC: 12b51 | Get or set file attributes
2018-12-17T22:35:09.415306459Z 79 PC: 12ac2 | Find next file
2018-12-17T22:35:09.418599096Z 67 PC: 12af5 | Get or set file attributes
2018-12-17T22:35:09.428043893Z 61 PC: 12afe | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:35:09.434450343Z 63 PC: 12b14 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:35:09.441400304Z 62 PC: 12b3a | Close file
2018-12-17T22:35:09.444214424Z 67 PC: 12b51 | Get or set file attributes
2018-12-17T22:35:09.454082339Z 79 PC: 12ac2 | Find next file
2018-12-17T22:35:09.4581274Z 67 PC: 12af5 | Get or set file attributes
2018-12-17T22:35:09.467832327Z 61 PC: 12afe | Open file (Filename = 'PAH.COM')
2018-12-17T22:35:09.474845935Z 63 PC: 12b14 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:35:09.481597471Z 62 PC: 12b3a | Close file
2018-12-17T22:35:09.483334718Z 67 PC: 12b51 | Get or set file attributes
2018-12-17T22:35:09.492997135Z 79 PC: 12ac2 | Find next file
2018-12-17T22:35:09.495983645Z 67 PC: 12af5 | Get or set file attributes
2018-12-17T22:35:09.505589766Z 61 PC: 12afe | Open file (Filename = 'TEST.COM')
2018-12-17T22:35:09.512392755Z 63 PC: 12b14 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:35:09.519280546Z 62 PC: 12b3a | Close file
2018-12-17T22:35:09.521505972Z 67 PC: 12b51 | Get or set file attributes
2018-12-17T22:35:09.531626422Z 79 PC: 12ac2 | Find next file
2018-12-17T22:35:09.53548939Z 59 PC: 12c28 | Change current directory
2018-12-17T22:35:09.539827841Z 78 PC: 12c38 | Find first file
2018-12-17T22:35:09.545918429Z 79 PC: 12c52 | Find next file
2018-12-17T22:35:09.548897617Z 79 PC: 12c52 | Find next file
2018-12-17T22:35:09.552493032Z 79 PC: 12c52 | Find next file
2018-12-17T22:35:09.555273874Z 79 PC: 12c52 | Find next file
2018-12-17T22:35:09.557997194Z 79 PC: 12c52 | Find next file
2018-12-17T22:35:09.561684219Z 79 PC: 12c52 | Find next file
2018-12-17T22:35:09.564564012Z 79 PC: 12c52 | Find next file
2018-12-17T22:35:09.567302974Z 79 PC: 12c52 | Find next file
2018-12-17T22:35:09.571017172Z 79 PC: 12c52 | Find next file
2018-12-17T22:35:09.573522851Z 26 PC: 12c81 | Set disk transfer address
2018-12-17T22:35:09.574671552Z 59 PC: 12c89 | Change current directory
2018-12-17T22:35:09.579503448Z 59 PC: 12c94 | Change current directory
2018-12-17T22:35:09.581219421Z 44 PC: 12ca7 | Get time 0x12ca7: cmp cl, 0x16
0x12caa: jne 0x12cb1
0x12cac: cmp dh, 0x1e
0x12caf: jb 0x12cc2
0x12cb1: pop ax
0x12cb2: sub ax, 3
0x12cb5: push ax
0x12cb6: xor ax, ax
0x12cb8: xor bx, bx
0x12cba: xor cx, cx
0x12cbc: xor dx, dx
0x12cbe: ret
0x12cbf: nop
0x12cc0: nop
0x12cc1: nop
0x12cc2: mov ax, 0x13
0x12cc5: int 0x10
0x12cc7: mov dx, 0x3c8
0x12cca: xor al, al
0x12ccc: out dx, al
2018-12-17T22:35:09.58325473Z 76 PC: 12a4f | Terminate with return code (Return code = '0')

{"DateBased":false,"Day":0,"Month":0,"Year":0,"Hour":0,"Min":0,"Second":0,"TimeBased":true,"OriginalID":6313,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:59:04.535192794Z 71 PC: 12a94 | Get current directory
2018-12-25T11:59:04.539268476Z 26 PC: 12aa5 | Set disk transfer address
2018-12-25T11:59:04.542883492Z 78 PC: 12ab1 | Find first file
2018-12-25T11:59:04.548920754Z 67 PC: 12af5 | Get or set file attributes
2018-12-25T11:59:04.565334713Z 61 PC: 12afe | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:59:04.572413516Z 63 PC: 12b14 | Read file or device (Read 5 bytes on handle 5)
2018-12-25T11:59:04.579332503Z 66 PC: 12b5d | Move file pointer
2018-12-25T11:59:04.581007013Z 64 PC: 12b69 | Write file or device (Write 49 bytes on handle 5)
2018-12-25T11:59:04.595044823Z 64 PC: 12b90 | Write file or device (Write 953 bytes on handle 5)
2018-12-25T11:59:04.603333611Z 66 PC: 12b9f | Move file pointer
2018-12-25T11:59:04.60457147Z 64 PC: 12bb3 | Write file or device (Write 6 bytes on handle 5)
2018-12-25T11:59:04.607850775Z 66 PC: 12bbc | Move file pointer
2018-12-25T11:59:04.609177998Z 64 PC: 12bde | Write file or device (Write 5 bytes on handle 5)
2018-12-25T11:59:04.615759435Z 87 PC: 12bf3 | Get or set file date and time
2018-12-25T11:59:04.617982634Z 62 PC: 12bf7 | Close file
2018-12-25T11:59:04.625501886Z 67 PC: 12c0e | Get or set file attributes
2018-12-25T11:59:04.634988733Z 79 PC: 12ac2 | Find next file
2018-12-25T11:59:04.638280436Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:04.657512894Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:04.664563259Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:04.67145449Z 62 PC: 12b3a | Close file
2018-12-25T11:59:04.673300139Z 67 PC: 12b51 | Get or set file attributes
2018-12-25T11:59:04.68339312Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:04.68681425Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:04.696755547Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:04.7033532Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:04.710881429Z 62 PC: 12b3a | Close file (See above)
2018-12-25T11:59:04.712708464Z 67 PC: 12b51 | Get or set file attributes (See above)
2018-12-25T11:59:04.725693212Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:04.729010379Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:04.738876033Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:04.745726574Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:04.752742369Z 62 PC: 12b3a | Close file (See above)
2018-12-25T11:59:04.75510805Z 67 PC: 12b51 | Get or set file attributes (See above)
2018-12-25T11:59:04.764897592Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:04.768245503Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:04.778173942Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:04.789964391Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:04.796813856Z 62 PC: 12b3a | Close file (See above)
2018-12-25T11:59:04.799327961Z 67 PC: 12b51 | Get or set file attributes (See above)
2018-12-25T11:59:04.805543722Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:04.807345567Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:04.814683942Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:04.821109495Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:04.827635814Z 66 PC: 12b5d | Move file pointer (See above)
2018-12-25T11:59:04.82976635Z 64 PC: 12b69 | Write file or device (See above)
2018-12-25T11:59:04.835307016Z 64 PC: 12b90 | Write file or device (See above)
2018-12-25T11:59:04.842799254Z 66 PC: 12b9f | Move file pointer (See above)
2018-12-25T11:59:04.845630939Z 64 PC: 12bb3 | Write file or device (See above)
2018-12-25T11:59:04.848028087Z 66 PC: 12bbc | Move file pointer (See above)
2018-12-25T11:59:04.849430158Z 64 PC: 12bde | Write file or device (See above)
2018-12-25T11:59:04.857454372Z 87 PC: 12bf3 | Get or set file date and time (See above)
2018-12-25T11:59:04.859846671Z 62 PC: 12bf7 | Close file (See above)
2018-12-25T11:59:04.867817066Z 67 PC: 12c0e | Get or set file attributes (See above)
2018-12-25T11:59:04.878039547Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:04.880596637Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:04.890030129Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:04.897424865Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:04.903646671Z 62 PC: 12b3a | Close file (See above)
2018-12-25T11:59:04.905596372Z 67 PC: 12b51 | Get or set file attributes (See above)
2018-12-25T11:59:04.918950172Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:04.921594453Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:04.931091618Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:04.938312421Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:04.944871076Z 62 PC: 12b3a | Close file (See above)
2018-12-25T11:59:04.94680965Z 67 PC: 12b51 | Get or set file attributes (See above)
2018-12-25T11:59:04.957703435Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:04.96008882Z 59 PC: 12c28 | Change current directory
2018-12-25T11:59:04.964147932Z 78 PC: 12c38 | Find first file
2018-12-25T11:59:04.975851727Z 59 PC: 12c6e | Change current directory
2018-12-25T11:59:04.982528608Z 78 PC: 12ab1 | Find first file (See above)
2018-12-25T11:59:04.989248875Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:04.999802768Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:05.006719283Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:05.01431841Z 62 PC: 12b3a | Close file (See above)
2018-12-25T11:59:05.015964266Z 67 PC: 12b51 | Get or set file attributes (See above)
2018-12-25T11:59:05.02740146Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:05.030033018Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:05.040030094Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:05.047515209Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:05.053936587Z 62 PC: 12b3a | Close file (See above)
2018-12-25T11:59:05.055970102Z 67 PC: 12b51 | Get or set file attributes (See above)
2018-12-25T11:59:05.066307802Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:05.068865073Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:05.078485858Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:05.085537198Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:05.089697124Z 62 PC: 12b3a | Close file (See above)
2018-12-25T11:59:05.090841047Z 67 PC: 12b51 | Get or set file attributes (See above)
2018-12-25T11:59:05.097223128Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:05.098862756Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:05.106792243Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:05.111500216Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:05.115569411Z 62 PC: 12b3a | Close file (See above)
2018-12-25T11:59:05.116919935Z 67 PC: 12b51 | Get or set file attributes (See above)
2018-12-25T11:59:05.124142941Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:05.126322993Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:05.14197365Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:05.148995143Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:05.155204192Z 62 PC: 12b3a | Close file (See above)
2018-12-25T11:59:05.156815832Z 67 PC: 12b51 | Get or set file attributes (See above)
2018-12-25T11:59:05.16902454Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:05.172327065Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:05.182121273Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:05.189238428Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:05.195367867Z 62 PC: 12b3a | Close file (See above)
2018-12-25T11:59:05.197115273Z 67 PC: 12b51 | Get or set file attributes (See above)
2018-12-25T11:59:05.206930132Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:05.209730303Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:05.219466502Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:05.226925685Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:05.232999568Z 62 PC: 12b3a | Close file (See above)
2018-12-25T11:59:05.235438895Z 67 PC: 12b51 | Get or set file attributes (See above)
2018-12-25T11:59:05.245362771Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:05.247812847Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:05.257073013Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:05.263881061Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:05.269966952Z 62 PC: 12b3a | Close file (See above)
2018-12-25T11:59:05.271584205Z 67 PC: 12b51 | Get or set file attributes (See above)
2018-12-25T11:59:05.281769876Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:05.28405038Z 59 PC: 12c28 | Change current directory (See above)
2018-12-25T11:59:05.288149664Z 78 PC: 12c38 | Find first file (See above)
2018-12-25T11:59:05.2999216Z 79 PC: 12c52 | Find next file
2018-12-25T11:59:05.30236437Z 79 PC: 12c52 | Find next file (See above)
2018-12-25T11:59:05.304915224Z 79 PC: 12c52 | Find next file (See above)
2018-12-25T11:59:05.307919132Z 79 PC: 12c52 | Find next file (See above)
2018-12-25T11:59:05.310292087Z 79 PC: 12c52 | Find next file (See above)
2018-12-25T11:59:05.312622Z 79 PC: 12c52 | Find next file (See above)
2018-12-25T11:59:05.315597883Z 79 PC: 12c52 | Find next file (See above)
2018-12-25T11:59:05.318269144Z 79 PC: 12c52 | Find next file (See above)
2018-12-25T11:59:05.320984653Z 79 PC: 12c52 | Find next file (See above)
2018-12-25T11:59:05.323752603Z 26 PC: 12c81 | Set disk transfer address
2018-12-25T11:59:05.324982624Z 59 PC: 12c89 | Change current directory
2018-12-25T11:59:05.329222022Z 59 PC: 12c94 | Change current directory
2018-12-25T11:59:05.331669169Z 44 PC: 12ca7 | Get time 0x12ca7: cmp cl, 0x16
0x12caa: jne 0x12cb1
0x12cac: cmp dh, 0x1e
0x12caf: jb 0x12cc2
0x12cb1: pop ax
0x12cb2: sub ax, 3
0x12cb5: push ax
0x12cb6: xor ax, ax
0x12cb8: xor bx, bx
0x12cba: xor cx, cx
0x12cbc: xor dx, dx
0x12cbe: ret
0x12cbf: nop
0x12cc0: nop
0x12cc1: nop
0x12cc2: mov ax, 0x13
0x12cc5: int 0x10
0x12cc7: mov dx, 0x3c8
0x12cca: xor al, al
0x12ccc: out dx, al
2018-12-25T11:59:05.333570103Z 76 PC: 12a4f | Terminate with return code (Return code = '0')

{"DateBased":false,"Day":0,"Month":0,"Year":0,"Hour":0,"Min":22,"Second":0,"TimeBased":true,"OriginalID":6313,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:59:04.93716293Z 71 PC: 12a94 | Get current directory
2018-12-25T11:59:04.939444194Z 26 PC: 12aa5 | Set disk transfer address
2018-12-25T11:59:04.94023543Z 78 PC: 12ab1 | Find first file
2018-12-25T11:59:04.944694136Z 67 PC: 12af5 | Get or set file attributes
2018-12-25T11:59:04.95772612Z 61 PC: 12afe | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:59:04.962222679Z 63 PC: 12b14 | Read file or device (Read 5 bytes on handle 5)
2018-12-25T11:59:04.96660454Z 66 PC: 12b5d | Move file pointer
2018-12-25T11:59:04.968140605Z 64 PC: 12b69 | Write file or device (Write 49 bytes on handle 5)
2018-12-25T11:59:04.970494995Z 64 PC: 12b90 | Write file or device (Write 953 bytes on handle 5)
2018-12-25T11:59:04.976811849Z 66 PC: 12b9f | Move file pointer
2018-12-25T11:59:04.978689228Z 64 PC: 12bb3 | Write file or device (Write 6 bytes on handle 5)
2018-12-25T11:59:04.981218452Z 66 PC: 12bbc | Move file pointer
2018-12-25T11:59:04.982515645Z 64 PC: 12bde | Write file or device (Write 5 bytes on handle 5)
2018-12-25T11:59:04.98902796Z 87 PC: 12bf3 | Get or set file date and time
2018-12-25T11:59:04.991212779Z 62 PC: 12bf7 | Close file
2018-12-25T11:59:04.998810567Z 67 PC: 12c0e | Get or set file attributes
2018-12-25T11:59:05.008269649Z 79 PC: 12ac2 | Find next file
2018-12-25T11:59:05.013209324Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:05.022609131Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:05.029139561Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:05.035856311Z 62 PC: 12b3a | Close file
2018-12-25T11:59:05.03761435Z 67 PC: 12b51 | Get or set file attributes
2018-12-25T11:59:05.047517137Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:05.050780079Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:05.060316943Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:05.066646169Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:05.076203826Z 62 PC: 12b3a | Close file (See above)
2018-12-25T11:59:05.078528644Z 67 PC: 12b51 | Get or set file attributes (See above)
2018-12-25T11:59:05.089112269Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:05.092114862Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:05.101354479Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:05.10765154Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:05.114361838Z 62 PC: 12b3a | Close file (See above)
2018-12-25T11:59:05.11613785Z 67 PC: 12b51 | Get or set file attributes (See above)
2018-12-25T11:59:05.125842461Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:05.128860744Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:05.138485616Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:05.145719652Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:05.152564927Z 62 PC: 12b3a | Close file (See above)
2018-12-25T11:59:05.154305556Z 67 PC: 12b51 | Get or set file attributes (See above)
2018-12-25T11:59:05.163161847Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:05.16550993Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:05.1748529Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:05.181435444Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:05.188449974Z 66 PC: 12b5d | Move file pointer (See above)
2018-12-25T11:59:05.189854733Z 64 PC: 12b69 | Write file or device (See above)
2018-12-25T11:59:05.194777626Z 64 PC: 12b90 | Write file or device (See above)
2018-12-25T11:59:05.200427118Z 66 PC: 12b9f | Move file pointer (See above)
2018-12-25T11:59:05.20138859Z 64 PC: 12bb3 | Write file or device (See above)
2018-12-25T11:59:05.203519787Z 66 PC: 12bbc | Move file pointer (See above)
2018-12-25T11:59:05.20545477Z 64 PC: 12bde | Write file or device (See above)
2018-12-25T11:59:05.210197176Z 87 PC: 12bf3 | Get or set file date and time (See above)
2018-12-25T11:59:05.211578664Z 62 PC: 12bf7 | Close file (See above)
2018-12-25T11:59:05.220904486Z 67 PC: 12c0e | Get or set file attributes (See above)
2018-12-25T11:59:05.227169137Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:05.22880528Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:05.234788201Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:05.239189854Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:05.245331653Z 62 PC: 12b3a | Close file (See above)
2018-12-25T11:59:05.247327237Z 67 PC: 12b51 | Get or set file attributes (See above)
2018-12-25T11:59:05.259125034Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:05.261551805Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:05.273802578Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:05.280091878Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:05.286134583Z 62 PC: 12b3a | Close file (See above)
2018-12-25T11:59:05.28797005Z 67 PC: 12b51 | Get or set file attributes (See above)
2018-12-25T11:59:05.29820865Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:05.300541687Z 59 PC: 12c28 | Change current directory
2018-12-25T11:59:05.30463465Z 78 PC: 12c38 | Find first file
2018-12-25T11:59:05.315391854Z 59 PC: 12c6e | Change current directory
2018-12-25T11:59:05.325519384Z 78 PC: 12ab1 | Find first file (See above)
2018-12-25T11:59:05.33642834Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:05.34637702Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:05.352724151Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:05.358959304Z 62 PC: 12b3a | Close file (See above)
2018-12-25T11:59:05.361196767Z 67 PC: 12b51 | Get or set file attributes (See above)
2018-12-25T11:59:05.370990912Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:05.373577741Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:05.383304348Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:05.395021107Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:05.401406191Z 62 PC: 12b3a | Close file (See above)
2018-12-25T11:59:05.404145878Z 67 PC: 12b51 | Get or set file attributes (See above)
2018-12-25T11:59:05.413769528Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:05.416263295Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:05.425935065Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:05.432456061Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:05.438713132Z 62 PC: 12b3a | Close file (See above)
2018-12-25T11:59:05.441032116Z 67 PC: 12b51 | Get or set file attributes (See above)
2018-12-25T11:59:05.450735501Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:05.45406696Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:05.463332588Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:05.469593172Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:05.476127686Z 62 PC: 12b3a | Close file (See above)
2018-12-25T11:59:05.478750622Z 67 PC: 12b51 | Get or set file attributes (See above)
2018-12-25T11:59:05.488599613Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:05.491434787Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:05.501424008Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:05.50777616Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:05.514165076Z 62 PC: 12b3a | Close file (See above)
2018-12-25T11:59:05.516160408Z 67 PC: 12b51 | Get or set file attributes (See above)
2018-12-25T11:59:05.525600076Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:05.528008547Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:05.537630176Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:05.543945298Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:05.549926291Z 62 PC: 12b3a | Close file (See above)
2018-12-25T11:59:05.551979412Z 67 PC: 12b51 | Get or set file attributes (See above)
2018-12-25T11:59:05.561331007Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:05.563765682Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:05.575216497Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:05.582514923Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:05.588709214Z 62 PC: 12b3a | Close file (See above)
2018-12-25T11:59:05.591450377Z 67 PC: 12b51 | Get or set file attributes (See above)
2018-12-25T11:59:05.601075458Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:05.603618747Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:05.614034622Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:05.620545248Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:05.626781692Z 62 PC: 12b3a | Close file (See above)
2018-12-25T11:59:05.629055517Z 67 PC: 12b51 | Get or set file attributes (See above)
2018-12-25T11:59:05.647302403Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:05.65036643Z 59 PC: 12c28 | Change current directory (See above)
2018-12-25T11:59:05.655045164Z 78 PC: 12c38 | Find first file (See above)
2018-12-25T11:59:05.660716215Z 79 PC: 12c52 | Find next file
2018-12-25T11:59:05.6630744Z 79 PC: 12c52 | Find next file (See above)
2018-12-25T11:59:05.666429404Z 79 PC: 12c52 | Find next file (See above)
2018-12-25T11:59:05.668789833Z 79 PC: 12c52 | Find next file (See above)
2018-12-25T11:59:05.671123076Z 79 PC: 12c52 | Find next file (See above)
2018-12-25T11:59:05.673898069Z 79 PC: 12c52 | Find next file (See above)
2018-12-25T11:59:05.676273739Z 79 PC: 12c52 | Find next file (See above)
2018-12-25T11:59:05.678599553Z 79 PC: 12c52 | Find next file (See above)
2018-12-25T11:59:05.681668761Z 79 PC: 12c52 | Find next file (See above)
2018-12-25T11:59:05.684125488Z 26 PC: 12c81 | Set disk transfer address
2018-12-25T11:59:05.685126178Z 59 PC: 12c89 | Change current directory
2018-12-25T11:59:05.689176076Z 59 PC: 12c94 | Change current directory
2018-12-25T11:59:05.690819293Z 44 PC: 12ca7 | Get time 0x12ca7: cmp cl, 0x16
0x12caa: jne 0x12cb1
0x12cac: cmp dh, 0x1e
0x12caf: jb 0x12cc2
0x12cb1: pop ax
0x12cb2: sub ax, 3
0x12cb5: push ax
0x12cb6: xor ax, ax
0x12cb8: xor bx, bx
0x12cba: xor cx, cx
0x12cbc: xor dx, dx
0x12cbe: ret
0x12cbf: nop
0x12cc0: nop
0x12cc1: nop
0x12cc2: mov ax, 0x13
0x12cc5: int 0x10
0x12cc7: mov dx, 0x3c8
0x12cca: xor al, al
0x12ccc: out dx, al

{"DateBased":false,"Day":0,"Month":0,"Year":0,"Hour":0,"Min":22,"Second":30,"TimeBased":true,"OriginalID":6313,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:59:05.156145102Z 71 PC: 12a94 | Get current directory
2018-12-25T11:59:05.160291231Z 26 PC: 12aa5 | Set disk transfer address
2018-12-25T11:59:05.161758971Z 78 PC: 12ab1 | Find first file
2018-12-25T11:59:05.168247747Z 67 PC: 12af5 | Get or set file attributes
2018-12-25T11:59:05.185585796Z 61 PC: 12afe | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:59:05.199494599Z 63 PC: 12b14 | Read file or device (Read 5 bytes on handle 5)
2018-12-25T11:59:05.207357619Z 66 PC: 12b5d | Move file pointer
2018-12-25T11:59:05.20936353Z 64 PC: 12b69 | Write file or device (Write 49 bytes on handle 5)
2018-12-25T11:59:05.212783167Z 64 PC: 12b90 | Write file or device (Write 953 bytes on handle 5)
2018-12-25T11:59:05.22211272Z 66 PC: 12b9f | Move file pointer
2018-12-25T11:59:05.22453989Z 64 PC: 12bb3 | Write file or device (Write 6 bytes on handle 5)
2018-12-25T11:59:05.228698287Z 66 PC: 12bbc | Move file pointer
2018-12-25T11:59:05.244694503Z 64 PC: 12bde | Write file or device (Write 5 bytes on handle 5)
2018-12-25T11:59:05.251772394Z 87 PC: 12bf3 | Get or set file date and time
2018-12-25T11:59:05.254246485Z 62 PC: 12bf7 | Close file
2018-12-25T11:59:05.263498339Z 67 PC: 12c0e | Get or set file attributes
2018-12-25T11:59:05.277833322Z 79 PC: 12ac2 | Find next file
2018-12-25T11:59:05.2813219Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:05.293132683Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:05.301006278Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:05.309034381Z 62 PC: 12b3a | Close file
2018-12-25T11:59:05.311567579Z 67 PC: 12b51 | Get or set file attributes
2018-12-25T11:59:05.322823112Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:05.326244386Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:05.339462183Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:05.347594054Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:05.35551768Z 62 PC: 12b3a | Close file (See above)
2018-12-25T11:59:05.35997422Z 67 PC: 12b51 | Get or set file attributes (See above)
2018-12-25T11:59:05.370934924Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:05.374138973Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:05.386699791Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:05.394363861Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:05.401998051Z 62 PC: 12b3a | Close file (See above)
2018-12-25T11:59:05.40490955Z 67 PC: 12b51 | Get or set file attributes (See above)
2018-12-25T11:59:05.41618438Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:05.419781948Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:05.433459823Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:05.440807725Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:05.447769064Z 62 PC: 12b3a | Close file (See above)
2018-12-25T11:59:05.44987055Z 67 PC: 12b51 | Get or set file attributes (See above)
2018-12-25T11:59:05.461015554Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:05.464572532Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:05.475195034Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:05.483208294Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:05.490243736Z 66 PC: 12b5d | Move file pointer (See above)
2018-12-25T11:59:05.491755316Z 64 PC: 12b69 | Write file or device (See above)
2018-12-25T11:59:05.501974165Z 64 PC: 12b90 | Write file or device (See above)
2018-12-25T11:59:05.509062388Z 66 PC: 12b9f | Move file pointer (See above)
2018-12-25T11:59:05.510507144Z 64 PC: 12bb3 | Write file or device (See above)
2018-12-25T11:59:05.513850821Z 66 PC: 12bbc | Move file pointer (See above)
2018-12-25T11:59:05.515191959Z 64 PC: 12bde | Write file or device (See above)
2018-12-25T11:59:05.52314366Z 87 PC: 12bf3 | Get or set file date and time (See above)
2018-12-25T11:59:05.52488219Z 62 PC: 12bf7 | Close file (See above)
2018-12-25T11:59:05.534237098Z 67 PC: 12c0e | Get or set file attributes (See above)
2018-12-25T11:59:05.544963707Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:05.548339775Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:05.559965462Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:05.56712937Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:05.574149515Z 62 PC: 12b3a | Close file (See above)
2018-12-25T11:59:05.576830237Z 67 PC: 12b51 | Get or set file attributes (See above)
2018-12-25T11:59:05.588812046Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:05.591482375Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:05.602878173Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:05.610393024Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:05.613228056Z 62 PC: 12b3a | Close file (See above)
2018-12-25T11:59:05.616180436Z 67 PC: 12b51 | Get or set file attributes (See above)
2018-12-25T11:59:05.627016378Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:05.629510491Z 59 PC: 12c28 | Change current directory
2018-12-25T11:59:05.634499623Z 78 PC: 12c38 | Find first file
2018-12-25T11:59:05.646302555Z 59 PC: 12c6e | Change current directory
2018-12-25T11:59:05.653415087Z 78 PC: 12ab1 | Find first file (See above)
2018-12-25T11:59:05.660857912Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:05.671552689Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:05.678759155Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:05.686260349Z 62 PC: 12b3a | Close file (See above)
2018-12-25T11:59:05.687646019Z 67 PC: 12b51 | Get or set file attributes (See above)
2018-12-25T11:59:05.698428606Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:05.702190952Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:05.713451189Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:05.717859068Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:05.722207706Z 62 PC: 12b3a | Close file (See above)
2018-12-25T11:59:05.724353154Z 67 PC: 12b51 | Get or set file attributes (See above)
2018-12-25T11:59:05.735229474Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:05.738449366Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:05.749805682Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:05.756847753Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:05.763691838Z 62 PC: 12b3a | Close file (See above)
2018-12-25T11:59:05.767725474Z 67 PC: 12b51 | Get or set file attributes (See above)
2018-12-25T11:59:05.781914302Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:05.785225817Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:05.796830543Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:05.804769078Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:05.811937766Z 62 PC: 12b3a | Close file (See above)
2018-12-25T11:59:05.814925241Z 67 PC: 12b51 | Get or set file attributes (See above)
2018-12-25T11:59:05.826326501Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:05.829249104Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:05.842713778Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:05.850056797Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:05.857271521Z 62 PC: 12b3a | Close file (See above)
2018-12-25T11:59:05.86036463Z 67 PC: 12b51 | Get or set file attributes (See above)
2018-12-25T11:59:05.872198216Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:05.875519365Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:05.887251295Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:05.896186363Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:05.9038538Z 62 PC: 12b3a | Close file (See above)
2018-12-25T11:59:05.905847462Z 67 PC: 12b51 | Get or set file attributes (See above)
2018-12-25T11:59:05.917192272Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:05.920195542Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:05.931203391Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:05.939284823Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:05.946538701Z 62 PC: 12b3a | Close file (See above)
2018-12-25T11:59:05.948688667Z 67 PC: 12b51 | Get or set file attributes (See above)
2018-12-25T11:59:05.960283376Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:05.964339248Z 67 PC: 12af5 | Get or set file attributes (See above)
2018-12-25T11:59:05.97535285Z 61 PC: 12afe | Open file (See above)
2018-12-25T11:59:05.983683408Z 63 PC: 12b14 | Read file or device (See above)
2018-12-25T11:59:05.991000492Z 62 PC: 12b3a | Close file (See above)
2018-12-25T11:59:05.993078887Z 67 PC: 12b51 | Get or set file attributes (See above)
2018-12-25T11:59:06.00465461Z 79 PC: 12ac2 | Find next file (See above)
2018-12-25T11:59:06.007307133Z 59 PC: 12c28 | Change current directory (See above)
2018-12-25T11:59:06.011973921Z 78 PC: 12c38 | Find first file (See above)
2018-12-25T11:59:06.020649401Z 79 PC: 12c52 | Find next file
2018-12-25T11:59:06.02358747Z 79 PC: 12c52 | Find next file (See above)
2018-12-25T11:59:06.026254806Z 79 PC: 12c52 | Find next file (See above)
2018-12-25T11:59:06.03200737Z 79 PC: 12c52 | Find next file (See above)
2018-12-25T11:59:06.0350348Z 79 PC: 12c52 | Find next file (See above)
2018-12-25T11:59:06.038156654Z 79 PC: 12c52 | Find next file (See above)
2018-12-25T11:59:06.042102303Z 79 PC: 12c52 | Find next file (See above)
2018-12-25T11:59:06.044905725Z 79 PC: 12c52 | Find next file (See above)
2018-12-25T11:59:06.047837801Z 79 PC: 12c52 | Find next file (See above)
2018-12-25T11:59:06.051047392Z 26 PC: 12c81 | Set disk transfer address
2018-12-25T11:59:06.052284687Z 59 PC: 12c89 | Change current directory
2018-12-25T11:59:06.056913477Z 59 PC: 12c94 | Change current directory
2018-12-25T11:59:06.059394513Z 44 PC: 12ca7 | Get time 0x12ca7: cmp cl, 0x16
0x12caa: jne 0x12cb1
0x12cac: cmp dh, 0x1e
0x12caf: jb 0x12cc2
0x12cb1: pop ax
0x12cb2: sub ax, 3
0x12cb5: push ax
0x12cb6: xor ax, ax
0x12cb8: xor bx, bx
0x12cba: xor cx, cx
0x12cbc: xor dx, dx
0x12cbe: ret
0x12cbf: nop
0x12cc0: nop
0x12cc1: nop
0x12cc2: mov ax, 0x13
0x12cc5: int 0x10
0x12cc7: mov dx, 0x3c8
0x12cca: xor al, al
0x12ccc: out dx, al
2018-12-25T11:59:06.062156673Z 76 PC: 12a4f | Terminate with return code (Return code = '0')