Sample viewer

vx.netlux.org/Virus.DOS.VCL.Genocide.952

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T21:57:56.784794833Z 47 PC: 12a9e | Get disk transfer address
2018-12-17T21:57:56.788303375Z 42 PC: 12c6e | Get date 0x12c6e: cmp dx, 0x801
0x12c72: je 0x12c75
0x12c74: ret
0x12c75: mov word ptr [di + 0x4b9], 0xa
0x12c7b: ret
0x12c7c: call 0x12c7f
0x12c7f: mov ax, 0x600
0x12c82: mov bh, 7
0x12c84: xor cx, cx
0x12c86: mov dx, 0x184f
0x12c89: int 0x10
0x12c8b: mov dx, 0x80c
0x12c8e: call 0x12de7
0x12c91: lea dx, word ptr [di + 0x338]
0x12c95: int 0x21
0x12c97: mov ax, 0xe07
0x12c9a: int 0x10
0x12c9c: int 0x10
0x12c9e: mov dx, 0x1700
0x12ca1: call 0x12de7
2018-12-17T21:57:56.790358667Z 26 PC: 12aa9 | Set disk transfer address
2018-12-17T21:57:56.791244346Z 71 PC: 12ae4 | Get current directory
2018-12-17T21:57:56.794468117Z 59 PC: 12aec | Change current directory
2018-12-17T21:57:56.79846178Z 47 PC: 12b01 | Get disk transfer address
2018-12-17T21:57:56.799801623Z 26 PC: 12b0f | Set disk transfer address
2018-12-17T21:57:56.801772976Z 78 PC: 12b1a | Find first file
2018-12-17T21:57:56.812497Z 79 PC: 12b42 | Find next file
2018-12-17T21:57:56.815235758Z 79 PC: 12b42 | Find next file
2018-12-17T21:57:56.818644735Z 79 PC: 12b42 | Find next file
2018-12-17T21:57:56.821707337Z 79 PC: 12b42 | Find next file
2018-12-17T21:57:56.824416667Z 79 PC: 12b42 | Find next file
2018-12-17T21:57:56.826968688Z 79 PC: 12b42 | Find next file
2018-12-17T21:57:56.829303698Z 79 PC: 12b42 | Find next file
2018-12-17T21:57:56.8320966Z 79 PC: 12b42 | Find next file
2018-12-17T21:57:56.835663573Z 79 PC: 12b42 | Find next file
2018-12-17T21:57:56.837933855Z 47 PC: 12b79 | Get disk transfer address
2018-12-17T21:57:56.839074225Z 26 PC: 12b88 | Set disk transfer address
2018-12-17T21:57:56.840614707Z 78 PC: 12b90 | Find first file
2018-12-17T21:57:56.84716932Z 47 PC: 12ba8 | Get disk transfer address
2018-12-17T21:57:56.848175228Z 61 PC: 12bc8 | Open file (Filename = 'SLEEP.COM')
2018-12-17T21:57:56.854651118Z 63 PC: 12bd4 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T21:57:56.861191268Z 66 PC: 12bdc | Move file pointer
2018-12-17T21:57:56.862460819Z 62 PC: 12be1 | Close file
2018-12-17T21:57:56.864075911Z 67 PC: 12c01 | Get or set file attributes
2018-12-17T21:57:56.88748462Z 61 PC: 12c1e | Open file (Filename = 'SLEEP.COM')
2018-12-17T21:57:56.894031806Z 64 PC: 12c2a | Write file or device (Write 3 bytes on handle 5)
2018-12-17T21:57:56.896617878Z 66 PC: 12c32 | Move file pointer
2018-12-17T21:57:56.898592847Z 44 PC: 12c65 | Get time 0x12c65: or dx, dx
0x12c67: je 0x12c61
0x12c69: ret
0x12c6a: mov ah, 0x2a
0x12c6c: int 0x21
0x12c6e: cmp dx, 0x801
0x12c72: je 0x12c75
0x12c74: ret
0x12c75: mov word ptr [di + 0x4b9], 0xa
0x12c7b: ret
0x12c7c: call 0x12c7f
0x12c7f: mov ax, 0x600
0x12c82: mov bh, 7
0x12c84: xor cx, cx
0x12c86: mov dx, 0x184f
0x12c89: int 0x10
0x12c8b: mov dx, 0x80c
0x12c8e: call 0x12de7
0x12c91: lea dx, word ptr [di + 0x338]
0x12c95: int 0x21
2018-12-17T21:57:56.900943707Z 64 PC: 12e2c | Write file or device (Write 952 bytes on handle 5)
2018-12-17T21:57:56.909524573Z 87 PC: 12c42 | Get or set file date and time
2018-12-17T21:57:56.911488574Z 62 PC: 12c46 | Close file
2018-12-17T21:57:56.91987688Z 67 PC: 12c53 | Get or set file attributes
2018-12-17T21:57:56.930240586Z 26 PC: 12ba2 | Set disk transfer address
2018-12-17T21:57:56.931926165Z 26 PC: 12b5f | Set disk transfer address
2018-12-17T21:57:56.933542879Z 59 PC: 12af6 | Change current directory
2018-12-17T21:57:56.935530957Z 26 PC: 12ac4 | Set disk transfer address
2018-12-17T21:57:56.937844998Z 9 PC: 12a49 | Display string (String= 'VIRSTOP is not installed or not working! ')
2018-12-17T21:57:56.941697598Z 76 PC: 12a4e | Terminate with return code (Return code = '1')

{"DateBased":true,"Day":1,"Month":8,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":878,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:41:56.582526631Z 47 PC: 12a9e | Get disk transfer address
2018-12-25T11:41:56.584574283Z 42 PC: 12c6e | Get date 0x12c6e: cmp dx, 0x801
0x12c72: je 0x12c75
0x12c74: ret
0x12c75: mov word ptr [di + 0x4b9], 0xa
0x12c7b: ret
0x12c7c: call 0x12c7f
0x12c7f: mov ax, 0x600
0x12c82: mov bh, 7
0x12c84: xor cx, cx
0x12c86: mov dx, 0x184f
0x12c89: int 0x10
0x12c8b: mov dx, 0x80c
0x12c8e: call 0x12de7
0x12c91: lea dx, word ptr [di + 0x338]
0x12c95: int 0x21
0x12c97: mov ax, 0xe07
0x12c9a: int 0x10
0x12c9c: int 0x10
0x12c9e: mov dx, 0x1700
0x12ca1: call 0x12de7
2018-12-25T11:41:56.586779025Z 26 PC: 12aa9 | Set disk transfer address
2018-12-25T11:41:56.588138261Z 71 PC: 12ae4 | Get current directory
2018-12-25T11:41:56.591208061Z 59 PC: 12aec | Change current directory
2018-12-25T11:41:56.597225665Z 47 PC: 12b01 | Get disk transfer address
2018-12-25T11:41:56.598550676Z 26 PC: 12b0f | Set disk transfer address
2018-12-25T11:41:56.599922704Z 78 PC: 12b1a | Find first file
2018-12-25T11:41:56.621157741Z 79 PC: 12b42 | Find next file
2018-12-25T11:41:56.623622339Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.625968348Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.63002542Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.632461515Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.634989938Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.638360033Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.640757857Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.643135259Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.645813831Z 47 PC: 12b79 | Get disk transfer address
2018-12-25T11:41:56.646828656Z 26 PC: 12b88 | Set disk transfer address
2018-12-25T11:41:56.647727533Z 78 PC: 12b90 | Find first file
2018-12-25T11:41:56.653747174Z 26 PC: 12ba2 | Set disk transfer address
2018-12-25T11:41:56.656434023Z 26 PC: 12b5f | Set disk transfer address
2018-12-25T11:41:56.657684999Z 59 PC: 12af6 | Change current directory
2018-12-25T11:41:56.659834356Z 14 PC: 12ab9 | Set default drive (Drive = 'C')
2018-12-25T11:41:56.66132371Z 71 PC: 12ae4 | Get current directory (See above)
2018-12-25T11:41:56.663805312Z 59 PC: 12aec | Change current directory (See above)
2018-12-25T11:41:56.667754009Z 47 PC: 12b01 | Get disk transfer address (See above)
2018-12-25T11:41:56.669240054Z 26 PC: 12b0f | Set disk transfer address (See above)
2018-12-25T11:41:56.670538849Z 78 PC: 12b1a | Find first file (See above)
2018-12-25T11:41:56.676092329Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.679757813Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.682492753Z 59 PC: 12b2f | Change current directory
2018-12-25T11:41:56.688311859Z 47 PC: 12b01 | Get disk transfer address (See above)
2018-12-25T11:41:56.690689145Z 26 PC: 12b0f | Set disk transfer address (See above)
2018-12-25T11:41:56.691997001Z 78 PC: 12b1a | Find first file (See above)
2018-12-25T11:41:56.700292178Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.704626449Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.707817976Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.711001647Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.714808596Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.718964615Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.721949915Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.725980414Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.728906103Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.731712852Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.735550984Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.738406125Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.741277603Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.74433859Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.747838222Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.751033504Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.757177079Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.760476071Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.763263549Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.766308727Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.769726774Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.773253212Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.776231132Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.779869928Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.782880339Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.785912799Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.790703254Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.793850183Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.797320235Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.809347466Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.812564689Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.815748518Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.822149498Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.825165908Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.828062973Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.831872163Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.834965533Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.837931586Z 47 PC: 12b79 | Get disk transfer address (See above)
2018-12-25T11:41:56.84048213Z 26 PC: 12b88 | Set disk transfer address (See above)
2018-12-25T11:41:56.841506676Z 78 PC: 12b90 | Find first file (See above)
2018-12-25T11:41:56.847185978Z 47 PC: 12ba8 | Get disk transfer address
2018-12-25T11:41:56.849381877Z 67 PC: 12c01 | Get or set file attributes
2018-12-25T11:41:57.180413746Z 60 PC: 12c12 | Create or truncate file
2018-12-25T11:41:57.192384346Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:57.19645549Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:57.198245513Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:57.208006423Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:57.215667545Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:57.218851026Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:57.220310573Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:57.231025818Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:57.243584208Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:57.246393062Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:57.247401899Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:57.257922056Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:57.269269956Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:57.272089896Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:57.273742779Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:57.283195055Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:57.295839744Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:57.29984348Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:57.301365643Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:57.310493219Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:57.32234899Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:57.325555861Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:57.326764951Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:57.336917922Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:57.348507632Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:57.351404064Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:57.353514254Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:57.364508122Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:57.376721971Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:57.380460983Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:57.381594725Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:57.390603597Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:57.402943338Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:57.406110066Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:57.407470079Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:57.4177719Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:57.429650225Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:57.432781858Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:57.434323752Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:57.443995448Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:57.456244576Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:57.459431937Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:57.461748214Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:57.470854203Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:57.482365246Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:57.48625126Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:57.487272552Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:57.497215864Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:57.509471666Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:57.511858618Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:57.512941893Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:57.521929233Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:57.534786Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:57.537783274Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:57.539481633Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:57.548856749Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:57.560893791Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:57.564544956Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:57.565604143Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:57.575737403Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:57.578276646Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:57.580997006Z 26 PC: 12ba2 | Set disk transfer address (See above)
2018-12-25T11:41:57.581939251Z 26 PC: 12b5f | Set disk transfer address (See above)
2018-12-25T11:41:57.583640553Z 59 PC: 12b3b | Change current directory
2018-12-25T11:41:57.587339449Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.589798804Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.592722208Z 59 PC: 12b2f | Change current directory (See above)
2018-12-25T11:41:57.598225817Z 47 PC: 12b01 | Get disk transfer address (See above)
2018-12-25T11:41:57.599271097Z 26 PC: 12b0f | Set disk transfer address (See above)
2018-12-25T11:41:57.602089516Z 78 PC: 12b1a | Find first file (See above)
2018-12-25T11:41:57.610273501Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.613680489Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.617948374Z 59 PC: 12b2f | Change current directory (See above)
2018-12-25T11:41:57.624463086Z 47 PC: 12b01 | Get disk transfer address (See above)
2018-12-25T11:41:57.62563698Z 26 PC: 12b0f | Set disk transfer address (See above)
2018-12-25T11:41:57.627777338Z 78 PC: 12b1a | Find first file (See above)
2018-12-25T11:41:57.635787295Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.644635854Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.648301221Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.652274849Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.655438995Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.65915755Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.662119093Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.66514919Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.672708839Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.675929181Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.679744968Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.683405913Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.686157324Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.689305738Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.692593995Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.695429703Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.701874134Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.706484826Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.709423093Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.712302456Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.716044059Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.719015391Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.721990438Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.726104608Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.729091Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.742126015Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.746832535Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.749690971Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.752751159Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.756250099Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.759095122Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.761806501Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.768346317Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.771989275Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.77583785Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.779114721Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.790742399Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.793850656Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.797506501Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.800238894Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.803212359Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.806306508Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.809068583Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.812240503Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.815657762Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.81847251Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.821625522Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.824362108Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.830031642Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.833310436Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.836846558Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.839573057Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.843021329Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.845874601Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.848701645Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.852412232Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.855154131Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.857799484Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.86080967Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.862716405Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.864814707Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.868014364Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.870718936Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.873378208Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.879451237Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.882270192Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.885216674Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.888475513Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.891333524Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.894395312Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.89738002Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.900137429Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.904255217Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.907044787Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.909830061Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.91328496Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.916222474Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.919494273Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.924143514Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.927230795Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.932950958Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.937129617Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.940205751Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.943207202Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.947069509Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.950359177Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.95330198Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.967454278Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.971180608Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.974061747Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.97845292Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.981765489Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.984722826Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.988288466Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.99109608Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:57.993851481Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.000344508Z 47 PC: 12b79 | Get disk transfer address (See above)
2018-12-25T11:41:58.001653094Z 26 PC: 12b88 | Set disk transfer address (See above)
2018-12-25T11:41:58.002842932Z 78 PC: 12b90 | Find first file (See above)
2018-12-25T11:41:58.009165368Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:58.010344611Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:58.020369484Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:58.022567832Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:58.025435158Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:58.026561148Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:58.036942698Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:58.038583962Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:58.04167582Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:58.043201986Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:58.052814984Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:58.054817559Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:58.058779552Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:58.059814604Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:58.072514833Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:58.075358333Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:58.080503616Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:58.083245933Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:58.09574397Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:58.098199532Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:58.104931187Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:58.107081335Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:58.116430284Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:58.119261173Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:58.122777778Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:58.124143196Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:58.134257793Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:58.137158603Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:58.140399141Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:58.142218207Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:58.15135125Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:58.152993345Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:58.156395009Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:58.157364827Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:58.166229747Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:58.171274783Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:58.174916502Z 26 PC: 12ba2 | Set disk transfer address (See above)
2018-12-25T11:41:58.176332214Z 26 PC: 12b5f | Set disk transfer address (See above)
2018-12-25T11:41:58.178281883Z 59 PC: 12b3b | Change current directory (See above)
2018-12-25T11:41:58.183822978Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.186789103Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.190169659Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.193338923Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.196667204Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.201026354Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.204209204Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.207379049Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.210723344Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.213768916Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.217888287Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.220962335Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.223952289Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.227960322Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.233816118Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.237312381Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.241535111Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.245385589Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.248251411Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.251892292Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.254695204Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.257482648Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.261245434Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.264121948Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.267404907Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.270395965Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.273269557Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.277168311Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.29342811Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.296329151Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.303677314Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.306743417Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.309628514Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.314177899Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.317355991Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.320507311Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.323638295Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.326529585Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.332246008Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.3357107Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.338767492Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.342654992Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.346074982Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.348873955Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.352514039Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.355812002Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.361758741Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.365597923Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.36901793Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.371926307Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.376541936Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.379844493Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.383783424Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.387735978Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.390889475Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.39450852Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.3988848Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.402137011Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.40560173Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.40978905Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.41299856Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.416540152Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.423066263Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.424986654Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.428707848Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.432307869Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.435654958Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.439684502Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.443433806Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.446413525Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.449985419Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.453023852Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.457272209Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.461572988Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.464870834Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.468804902Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.472432851Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.475568109Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.482215752Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.485365419Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.488506056Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.492061668Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.49548152Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.498673649Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.503417585Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.506558929Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.510039975Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.514111151Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.517137956Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.520554264Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.524764385Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.529043094Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.533043093Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.536693239Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.544757463Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.548902259Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.552993152Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.556248197Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.560963483Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.564221695Z 59 PC: 12b2f | Change current directory (See above)
2018-12-25T11:41:58.572705846Z 47 PC: 12b01 | Get disk transfer address (See above)
2018-12-25T11:41:58.575251968Z 26 PC: 12b0f | Set disk transfer address (See above)
2018-12-25T11:41:58.576433731Z 78 PC: 12b1a | Find first file (See above)
2018-12-25T11:41:58.585476425Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.589683454Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.592775155Z 47 PC: 12b79 | Get disk transfer address (See above)
2018-12-25T11:41:58.594135198Z 26 PC: 12b88 | Set disk transfer address (See above)
2018-12-25T11:41:58.595884003Z 78 PC: 12b90 | Find first file (See above)
2018-12-25T11:41:58.602717546Z 26 PC: 12ba2 | Set disk transfer address (See above)
2018-12-25T11:41:58.605005998Z 26 PC: 12b5f | Set disk transfer address (See above)
2018-12-25T11:41:58.606805089Z 59 PC: 12b3b | Change current directory (See above)
2018-12-25T11:41:58.61236376Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.616010138Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.61895098Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.621980157Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.625582965Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.629004633Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.632320443Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.637573694Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.641310615Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.64481561Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.652112365Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.655406283Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:58.659451713Z 47 PC: 12b79 | Get disk transfer address (See above)
2018-12-25T11:41:58.661403271Z 26 PC: 12b88 | Set disk transfer address (See above)
2018-12-25T11:41:58.662821744Z 78 PC: 12b90 | Find first file (See above)
2018-12-25T11:41:58.670629845Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:58.67230005Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:58.681498117Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:58.684602822Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:58.688195694Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:58.689615844Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:58.699695594Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:58.701833955Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:58.705123698Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:58.707668599Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:58.716639615Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:58.718521329Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:58.722757807Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:58.724062937Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:58.733602352Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:58.736420078Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:58.74026953Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:58.742562793Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:58.752242977Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:58.754050606Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:58.757744799Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:58.759009687Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:58.768383267Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:58.7712527Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:58.775397126Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:58.776859293Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:58.787038101Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:58.788790554Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:58.791930306Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:58.794305671Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:58.804166441Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:58.806666917Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:58.810335627Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:58.811390468Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:58.821755863Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:58.828214906Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:58.831095852Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:58.833394262Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:58.843428598Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:58.845433249Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:58.849387425Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:58.850450187Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:58.859720083Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:58.861990771Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:58.865133126Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:58.867252777Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:58.876845397Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:58.87888655Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:58.883636095Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:58.885260412Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:58.895022119Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:58.897967505Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:58.901026238Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:58.902063112Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:58.91194482Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:58.913967887Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:58.916886568Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:58.918751235Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:58.928267816Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:58.930556716Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:58.93484801Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:58.93620278Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:58.94643537Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:58.94887328Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:58.952812295Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:58.95503309Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:58.963835306Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:58.965141875Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:58.967553239Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:58.968604541Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:58.974567685Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:58.97656627Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:58.978820818Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:58.980080415Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:58.986833027Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:58.988958974Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:58.99290441Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:58.994228023Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:59.003539059Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:59.006010851Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:59.00917124Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:59.011289788Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:59.020522419Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:59.022996802Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:59.026860922Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:59.027908318Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:59.038035203Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:59.04040812Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:59.043628741Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:59.044887506Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:59.054160658Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:59.055838278Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:59.059408655Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:59.060355466Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:59.069408573Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:59.071720641Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:59.074537242Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:59.075623732Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:59.084701383Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:59.086349733Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:59.09113155Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:59.09212541Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:59.101891726Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:59.104245444Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:59.107025535Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:59.108110311Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:59.117316352Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:59.118961635Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:59.122178093Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:59.123377975Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:59.132314406Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:59.134421635Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:59.137286602Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:59.138747453Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:59.147745371Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:59.149369908Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:59.153798743Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:59.154914101Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:59.164942278Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:59.167774477Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:59.170959357Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:59.17228774Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:59.182086584Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:59.183828094Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:59.195548639Z 47 PC: 12ba8 | Get disk transfer address (See above)
2018-12-25T11:41:59.196607832Z 67 PC: 12c01 | Get or set file attributes (See above)
2018-12-25T11:41:59.206254702Z 60 PC: 12c12 | Create or truncate file (See above)
2018-12-25T11:41:59.208659765Z 79 PC: 12b90 | Find next file (See above)
2018-12-25T11:41:59.211982072Z 26 PC: 12ba2 | Set disk transfer address (See above)
2018-12-25T11:41:59.213452903Z 26 PC: 12b5f | Set disk transfer address (See above)
2018-12-25T11:41:59.217509339Z 59 PC: 12b3b | Change current directory (See above)
2018-12-25T11:41:59.22173575Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:59.230738827Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:59.233862619Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:59.236293784Z 47 PC: 12b79 | Get disk transfer address (See above)
2018-12-25T11:41:59.237974466Z 26 PC: 12b88 | Set disk transfer address (See above)
2018-12-25T11:41:59.238972458Z 78 PC: 12b90 | Find first file (See above)
2018-12-25T11:41:59.244497994Z 26 PC: 12ba2 | Set disk transfer address (See above)
2018-12-25T11:41:59.245962632Z 26 PC: 12b5f | Set disk transfer address (See above)
2018-12-25T11:41:59.247283979Z 59 PC: 12af6 | Change current directory (See above)
2018-12-25T11:41:59.250715408Z 9 PC: 12c97 | Display string (Could not find end pointer)
2018-12-25T11:41:59.255590231Z 8 PC: 12ca8 | Console input without echo

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":878,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:41:56.607663504Z 47 PC: 12a9e | Get disk transfer address
2018-12-25T11:41:56.609095004Z 42 PC: 12c6e | Get date 0x12c6e: cmp dx, 0x801
0x12c72: je 0x12c75
0x12c74: ret
0x12c75: mov word ptr [di + 0x4b9], 0xa
0x12c7b: ret
0x12c7c: call 0x12c7f
0x12c7f: mov ax, 0x600
0x12c82: mov bh, 7
0x12c84: xor cx, cx
0x12c86: mov dx, 0x184f
0x12c89: int 0x10
0x12c8b: mov dx, 0x80c
0x12c8e: call 0x12de7
0x12c91: lea dx, word ptr [di + 0x338]
0x12c95: int 0x21
0x12c97: mov ax, 0xe07
0x12c9a: int 0x10
0x12c9c: int 0x10
0x12c9e: mov dx, 0x1700
0x12ca1: call 0x12de7
2018-12-25T11:41:56.611525325Z 26 PC: 12aa9 | Set disk transfer address
2018-12-25T11:41:56.614116218Z 71 PC: 12ae4 | Get current directory
2018-12-25T11:41:56.617181377Z 59 PC: 12aec | Change current directory
2018-12-25T11:41:56.621716767Z 47 PC: 12b01 | Get disk transfer address
2018-12-25T11:41:56.624269068Z 26 PC: 12b0f | Set disk transfer address
2018-12-25T11:41:56.625941397Z 78 PC: 12b1a | Find first file
2018-12-25T11:41:56.632121725Z 79 PC: 12b42 | Find next file
2018-12-25T11:41:56.635661243Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.638596073Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.641345346Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.64411925Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.647631062Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.650087529Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.652551771Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.655098658Z 79 PC: 12b42 | Find next file (See above)
2018-12-25T11:41:56.656918884Z 47 PC: 12b79 | Get disk transfer address
2018-12-25T11:41:56.65826598Z 26 PC: 12b88 | Set disk transfer address
2018-12-25T11:41:56.660540385Z 78 PC: 12b90 | Find first file
2018-12-25T11:41:56.666559297Z 47 PC: 12ba8 | Get disk transfer address
2018-12-25T11:41:56.667859398Z 61 PC: 12bc8 | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:41:56.675079004Z 63 PC: 12bd4 | Read file or device (Read 3 bytes on handle 5)
2018-12-25T11:41:56.699695612Z 66 PC: 12bdc | Move file pointer
2018-12-25T11:41:56.701437924Z 62 PC: 12be1 | Close file
2018-12-25T11:41:56.704563956Z 67 PC: 12c01 | Get or set file attributes
2018-12-25T11:41:56.720819397Z 61 PC: 12c1e | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:41:56.730277508Z 64 PC: 12c2a | Write file or device (Write 3 bytes on handle 5)
2018-12-25T11:41:56.736166529Z 66 PC: 12c32 | Move file pointer
2018-12-25T11:41:56.738615629Z 44 PC: 12c65 | Get time 0x12c65: or dx, dx
0x12c67: je 0x12c61
0x12c69: ret
0x12c6a: mov ah, 0x2a
0x12c6c: int 0x21
0x12c6e: cmp dx, 0x801
0x12c72: je 0x12c75
0x12c74: ret
0x12c75: mov word ptr [di + 0x4b9], 0xa
0x12c7b: ret
0x12c7c: call 0x12c7f
0x12c7f: mov ax, 0x600
0x12c82: mov bh, 7
0x12c84: xor cx, cx
0x12c86: mov dx, 0x184f
0x12c89: int 0x10
0x12c8b: mov dx, 0x80c
0x12c8e: call 0x12de7
0x12c91: lea dx, word ptr [di + 0x338]
0x12c95: int 0x21
2018-12-25T11:41:56.740972155Z 64 PC: 12e2c | Write file or device (Write 952 bytes on handle 5)
2018-12-25T11:41:56.750914064Z 87 PC: 12c42 | Get or set file date and time
2018-12-25T11:41:56.752516676Z 62 PC: 12c46 | Close file
2018-12-25T11:41:56.759874744Z 67 PC: 12c53 | Get or set file attributes
2018-12-25T11:41:56.769945798Z 26 PC: 12ba2 | Set disk transfer address
2018-12-25T11:41:56.775960694Z 26 PC: 12b5f | Set disk transfer address
2018-12-25T11:41:56.777000239Z 59 PC: 12af6 | Change current directory
2018-12-25T11:41:56.779026456Z 26 PC: 12ac4 | Set disk transfer address
2018-12-25T11:41:56.780529789Z 9 PC: 12a49 | Display string (String= 'VIRSTOP is not installed or not working! ')
2018-12-25T11:41:56.786041158Z 76 PC: 12a4e | Terminate with return code (Return code = '1')