Sample viewer

vx.netlux.org/Virus.DOS.VCL.Olympic.1442

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:47:40.809391764Z 47 PC: 12a6b | Get disk transfer address
2018-12-17T22:47:40.810585705Z 26 PC: 12a73 | Set disk transfer address
2018-12-17T22:47:40.812133273Z 71 PC: 12b41 | Get current directory
2018-12-17T22:47:40.814907263Z 59 PC: 12b49 | Change current directory
2018-12-17T22:47:40.819153714Z 47 PC: 12b5e | Get disk transfer address
2018-12-17T22:47:40.821024964Z 26 PC: 12b6c | Set disk transfer address
2018-12-17T22:47:40.822459496Z 78 PC: 12b77 | Find first file
2018-12-17T22:47:40.828800161Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:40.83257164Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:40.835251922Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:40.838154263Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:40.857458393Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:40.85972229Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:40.862129834Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:40.864690026Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:40.866501764Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:40.8682185Z 47 PC: 12bc3 | Get disk transfer address
2018-12-17T22:47:40.869576987Z 26 PC: 12bd2 | Set disk transfer address
2018-12-17T22:47:40.870804286Z 78 PC: 12bda | Find first file
2018-12-17T22:47:40.874811286Z 47 PC: 12bf2 | Get disk transfer address
2018-12-17T22:47:40.876211689Z 61 PC: 12c0b | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:47:40.884960684Z 63 PC: 12c17 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:47:40.889291784Z 66 PC: 12c1f | Move file pointer
2018-12-17T22:47:40.890749892Z 62 PC: 12c24 | Close file
2018-12-17T22:47:40.897137543Z 67 PC: 12c44 | Get or set file attributes
2018-12-17T22:47:40.916113479Z 61 PC: 12c49 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:47:40.924367809Z 64 PC: 12c55 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:47:40.931646371Z 66 PC: 12c5d | Move file pointer
2018-12-17T22:47:40.934141069Z 64 PC: 12ff9 | Write file or device (Write 1442 bytes on handle 5)
2018-12-17T22:47:40.943479369Z 87 PC: 12c6d | Get or set file date and time
2018-12-17T22:47:40.945417818Z 62 PC: 12c71 | Close file
2018-12-17T22:47:40.953311292Z 67 PC: 12c7e | Get or set file attributes
2018-12-17T22:47:40.962999288Z 26 PC: 12bec | Set disk transfer address
2018-12-17T22:47:40.96472904Z 26 PC: 12baf | Set disk transfer address
2018-12-17T22:47:40.965793641Z 59 PC: 12b53 | Change current directory
2018-12-17T22:47:40.96746777Z 71 PC: 12b41 | Get current directory
2018-12-17T22:47:40.97130396Z 59 PC: 12b49 | Change current directory
2018-12-17T22:47:40.975729534Z 47 PC: 12b5e | Get disk transfer address
2018-12-17T22:47:40.976745735Z 26 PC: 12b6c | Set disk transfer address
2018-12-17T22:47:40.978704219Z 78 PC: 12b77 | Find first file
2018-12-17T22:47:40.984322787Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:40.986687463Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:40.99052831Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:40.992993307Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:40.995394236Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:40.998358397Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:41.000703215Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:41.003029462Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:41.006268503Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:41.00842988Z 47 PC: 12bc3 | Get disk transfer address
2018-12-17T22:47:41.009451937Z 26 PC: 12bd2 | Set disk transfer address
2018-12-17T22:47:41.011701145Z 78 PC: 12bda | Find first file
2018-12-17T22:47:41.018213491Z 47 PC: 12bf2 | Get disk transfer address
2018-12-17T22:47:41.01924797Z 61 PC: 12c0b | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:47:41.025599241Z 63 PC: 12c17 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:47:41.031826703Z 66 PC: 12c1f | Move file pointer
2018-12-17T22:47:41.03317301Z 62 PC: 12c24 | Close file
2018-12-17T22:47:41.035084545Z 79 PC: 12bda | Find next file
2018-12-17T22:47:41.037821106Z 47 PC: 12bf2 | Get disk transfer address
2018-12-17T22:47:41.038869054Z 61 PC: 12c0b | Open file (Filename = 'PRINT.COM')
2018-12-17T22:47:41.045317874Z 63 PC: 12c17 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:47:41.052047901Z 66 PC: 12c1f | Move file pointer
2018-12-17T22:47:41.053342704Z 62 PC: 12c24 | Close file
2018-12-17T22:47:41.055255624Z 67 PC: 12c44 | Get or set file attributes
2018-12-17T22:47:41.065360113Z 61 PC: 12c49 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:47:41.071993533Z 64 PC: 12c55 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:47:41.075168714Z 66 PC: 12c5d | Move file pointer
2018-12-17T22:47:41.078636684Z 64 PC: 12ff9 | Write file or device (Write 1442 bytes on handle 5)
2018-12-17T22:47:41.087691324Z 87 PC: 12c6d | Get or set file date and time
2018-12-17T22:47:41.0894816Z 62 PC: 12c71 | Close file
2018-12-17T22:47:41.098385894Z 67 PC: 12c7e | Get or set file attributes
2018-12-17T22:47:41.108099394Z 26 PC: 12bec | Set disk transfer address
2018-12-17T22:47:41.10951077Z 26 PC: 12baf | Set disk transfer address
2018-12-17T22:47:41.111843861Z 59 PC: 12b53 | Change current directory
2018-12-17T22:47:41.113927193Z 71 PC: 12b41 | Get current directory
2018-12-17T22:47:41.117574313Z 59 PC: 12b49 | Change current directory
2018-12-17T22:47:41.122636119Z 47 PC: 12b5e | Get disk transfer address
2018-12-17T22:47:41.124033141Z 26 PC: 12b6c | Set disk transfer address
2018-12-17T22:47:41.125405209Z 78 PC: 12b77 | Find first file
2018-12-17T22:47:41.132323967Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:41.135439751Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:41.138219237Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:41.141623581Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:41.144687756Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:41.147482767Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:41.151280654Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:41.154010502Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:41.156563904Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:41.159111832Z 47 PC: 12bc3 | Get disk transfer address
2018-12-17T22:47:41.16060104Z 26 PC: 12bd2 | Set disk transfer address
2018-12-17T22:47:41.161772689Z 78 PC: 12bda | Find first file
2018-12-17T22:47:41.167663269Z 47 PC: 12bf2 | Get disk transfer address
2018-12-17T22:47:41.169087168Z 61 PC: 12c0b | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:47:41.175512189Z 63 PC: 12c17 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:47:41.1793968Z 66 PC: 12c1f | Move file pointer
2018-12-17T22:47:41.180699652Z 62 PC: 12c24 | Close file
2018-12-17T22:47:41.182370458Z 79 PC: 12bda | Find next file
2018-12-17T22:47:41.18489904Z 47 PC: 12bf2 | Get disk transfer address
2018-12-17T22:47:41.186348966Z 61 PC: 12c0b | Open file (Filename = 'PRINT.COM')
2018-12-17T22:47:41.193407766Z 63 PC: 12c17 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:47:41.199772499Z 66 PC: 12c1f | Move file pointer
2018-12-17T22:47:41.2019954Z 62 PC: 12c24 | Close file
2018-12-17T22:47:41.203841258Z 79 PC: 12bda | Find next file
2018-12-17T22:47:41.2066806Z 47 PC: 12bf2 | Get disk transfer address
2018-12-17T22:47:41.208677922Z 61 PC: 12c0b | Open file (Filename = 'HELLO.COM')
2018-12-17T22:47:41.215373496Z 63 PC: 12c17 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:47:41.222240399Z 66 PC: 12c1f | Move file pointer
2018-12-17T22:47:41.224546446Z 62 PC: 12c24 | Close file
2018-12-17T22:47:41.226287833Z 67 PC: 12c44 | Get or set file attributes
2018-12-17T22:47:41.236142841Z 61 PC: 12c49 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:47:41.243613925Z 64 PC: 12c55 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:47:41.246205427Z 66 PC: 12c5d | Move file pointer
2018-12-17T22:47:41.248537928Z 64 PC: 12ff9 | Write file or device (Write 1442 bytes on handle 5)
2018-12-17T22:47:41.258452291Z 87 PC: 12c6d | Get or set file date and time
2018-12-17T22:47:41.259999592Z 62 PC: 12c71 | Close file
2018-12-17T22:47:41.267631676Z 67 PC: 12c7e | Get or set file attributes
2018-12-17T22:47:41.278230531Z 26 PC: 12bec | Set disk transfer address
2018-12-17T22:47:41.279410933Z 26 PC: 12baf | Set disk transfer address
2018-12-17T22:47:41.280825714Z 59 PC: 12b53 | Change current directory
2018-12-17T22:47:41.283320321Z 71 PC: 12b41 | Get current directory
2018-12-17T22:47:41.28600288Z 59 PC: 12b49 | Change current directory
2018-12-17T22:47:41.289684566Z 47 PC: 12b5e | Get disk transfer address
2018-12-17T22:47:41.291425467Z 26 PC: 12b6c | Set disk transfer address
2018-12-17T22:47:41.293683052Z 78 PC: 12b77 | Find first file
2018-12-17T22:47:41.303726285Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:41.307613511Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:41.310122147Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:41.312002054Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:41.315392618Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:41.317975818Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:41.320898977Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:41.324342606Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:41.326328488Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:41.328557159Z 47 PC: 12bc3 | Get disk transfer address
2018-12-17T22:47:41.33086111Z 26 PC: 12bd2 | Set disk transfer address
2018-12-17T22:47:41.33222677Z 78 PC: 12bda | Find first file
2018-12-17T22:47:41.337932405Z 47 PC: 12bf2 | Get disk transfer address
2018-12-17T22:47:41.33963555Z 61 PC: 12c0b | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:47:41.346977689Z 63 PC: 12c17 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:47:41.353437182Z 66 PC: 12c1f | Move file pointer
2018-12-17T22:47:41.355443913Z 62 PC: 12c24 | Close file
2018-12-17T22:47:41.357314367Z 79 PC: 12bda | Find next file
2018-12-17T22:47:41.360103786Z 47 PC: 12bf2 | Get disk transfer address
2018-12-17T22:47:41.362191013Z 61 PC: 12c0b | Open file (Filename = 'PRINT.COM')
2018-12-17T22:47:41.368531367Z 63 PC: 12c17 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:47:41.374921471Z 66 PC: 12c1f | Move file pointer
2018-12-17T22:47:41.376624388Z 62 PC: 12c24 | Close file
2018-12-17T22:47:41.378383958Z 79 PC: 12bda | Find next file
2018-12-17T22:47:41.380780641Z 47 PC: 12bf2 | Get disk transfer address
2018-12-17T22:47:41.382543607Z 61 PC: 12c0b | Open file (Filename = 'HELLO.COM')
2018-12-17T22:47:41.3887415Z 63 PC: 12c17 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:47:41.394753424Z 66 PC: 12c1f | Move file pointer
2018-12-17T22:47:41.396263811Z 62 PC: 12c24 | Close file
2018-12-17T22:47:41.397896164Z 79 PC: 12bda | Find next file
2018-12-17T22:47:41.400349807Z 47 PC: 12bf2 | Get disk transfer address
2018-12-17T22:47:41.401678027Z 61 PC: 12c0b | Open file (Filename = 'PHANG.COM')
2018-12-17T22:47:41.40862426Z 63 PC: 12c17 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:47:41.41461739Z 66 PC: 12c1f | Move file pointer
2018-12-17T22:47:41.416332159Z 62 PC: 12c24 | Close file
2018-12-17T22:47:41.41813507Z 67 PC: 12c44 | Get or set file attributes
2018-12-17T22:47:41.427911791Z 61 PC: 12c49 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:47:41.434979566Z 64 PC: 12c55 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:47:41.438047546Z 66 PC: 12c5d | Move file pointer
2018-12-17T22:47:41.441209994Z 64 PC: 12ff9 | Write file or device (Write 1442 bytes on handle 5)
2018-12-17T22:47:41.450878948Z 87 PC: 12c6d | Get or set file date and time
2018-12-17T22:47:41.45231296Z 62 PC: 12c71 | Close file
2018-12-17T22:47:41.460212905Z 67 PC: 12c7e | Get or set file attributes
2018-12-17T22:47:41.471567647Z 26 PC: 12bec | Set disk transfer address
2018-12-17T22:47:41.473118617Z 26 PC: 12baf | Set disk transfer address
2018-12-17T22:47:41.47467288Z 59 PC: 12b53 | Change current directory
2018-12-17T22:47:41.478474661Z 71 PC: 12b41 | Get current directory
2018-12-17T22:47:41.485751525Z 59 PC: 12b49 | Change current directory
2018-12-17T22:47:41.490758688Z 47 PC: 12b5e | Get disk transfer address
2018-12-17T22:47:41.49291727Z 26 PC: 12b6c | Set disk transfer address
2018-12-17T22:47:41.49459671Z 78 PC: 12b77 | Find first file
2018-12-17T22:47:41.500608677Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:41.503950721Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:41.506941849Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:41.510058306Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:41.513545958Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:41.516313586Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:41.519257384Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:41.522790125Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:41.525525739Z 79 PC: 12b9f | Find next file
2018-12-17T22:47:41.528251204Z 47 PC: 12bc3 | Get disk transfer address
2018-12-17T22:47:41.530457393Z 26 PC: 12bd2 | Set disk transfer address
2018-12-17T22:47:41.531761938Z 78 PC: 12bda | Find first file
2018-12-17T22:47:41.537970725Z 47 PC: 12bf2 | Get disk transfer address
2018-12-17T22:47:41.540138793Z 61 PC: 12c0b | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:47:41.55327846Z 63 PC: 12c17 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:47:41.560103686Z 66 PC: 12c1f | Move file pointer
2018-12-17T22:47:41.56219232Z 62 PC: 12c24 | Close file
2018-12-17T22:47:41.564280711Z 79 PC: 12bda | Find next file
2018-12-17T22:47:41.567994247Z 47 PC: 12bf2 | Get disk transfer address
2018-12-17T22:47:41.569875278Z 61 PC: 12c0b | Open file (Filename = 'PRINT.COM')
2018-12-17T22:47:41.576553395Z 63 PC: 12c17 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:47:41.583800183Z 66 PC: 12c1f | Move file pointer
2018-12-17T22:47:41.585939066Z 62 PC: 12c24 | Close file
2018-12-17T22:47:41.588019536Z 79 PC: 12bda | Find next file
2018-12-17T22:47:41.591767642Z 47 PC: 12bf2 | Get disk transfer address
2018-12-17T22:47:41.593603165Z 61 PC: 12c0b | Open file (Filename = 'HELLO.COM')
2018-12-17T22:47:41.600248073Z 63 PC: 12c17 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:47:41.607276177Z 66 PC: 12c1f | Move file pointer
2018-12-17T22:47:41.608720525Z 62 PC: 12c24 | Close file
2018-12-17T22:47:41.610465384Z 79 PC: 12bda | Find next file
2018-12-17T22:47:41.613714103Z 47 PC: 12bf2 | Get disk transfer address
2018-12-17T22:47:41.614918583Z 61 PC: 12c0b | Open file (Filename = 'PHANG.COM')
2018-12-17T22:47:41.621883147Z 63 PC: 12c17 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:47:41.628864Z 66 PC: 12c1f | Move file pointer
2018-12-17T22:47:41.630268619Z 62 PC: 12c24 | Close file
2018-12-17T22:47:41.631987434Z 79 PC: 12bda | Find next file
2018-12-17T22:47:41.635203415Z 47 PC: 12bf2 | Get disk transfer address
2018-12-17T22:47:41.636406102Z 61 PC: 12c0b | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:47:41.644080677Z 63 PC: 12c17 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:47:41.651499991Z 66 PC: 12c1f | Move file pointer
2018-12-17T22:47:41.653542259Z 62 PC: 12c24 | Close file
2018-12-17T22:47:41.655590999Z 67 PC: 12c44 | Get or set file attributes
2018-12-17T22:47:41.666369967Z 61 PC: 12c49 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:47:41.673461394Z 64 PC: 12c55 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:47:41.676481678Z 66 PC: 12c5d | Move file pointer
2018-12-17T22:47:41.680010367Z 64 PC: 12ff9 | Write file or device (Write 1442 bytes on handle 5)
2018-12-17T22:47:41.69002329Z 87 PC: 12c6d | Get or set file date and time
2018-12-17T22:47:41.691804776Z 62 PC: 12c71 | Close file
2018-12-17T22:47:41.700429056Z 67 PC: 12c7e | Get or set file attributes
2018-12-17T22:47:41.707095402Z 26 PC: 12bec | Set disk transfer address
2018-12-17T22:47:41.708185397Z 26 PC: 12baf | Set disk transfer address
2018-12-17T22:47:41.709747531Z 59 PC: 12b53 | Change current directory
2018-12-17T22:47:41.712114793Z 42 PC: 12a86 | Get date 0x12a86: cmp dh, 2
0x12a89: jb 0x12a9c
0x12a8b: cmp dl, 0xc
0x12a8e: jb 0x12a9c
0x12a90: mov ah, 0x2c
0x12a92: int 0x21
0x12a94: cmp dl, 0xa
0x12a97: ja 0x12a9c
0x12a99: jmp 0x12ab2
0x12a9b: nop
0x12a9c: pop dx
0x12a9d: mov ah, 0x1a
0x12a9f: int 0x21
0x12aa1: mov sp, bp
0x12aa3: xor ax, ax
0x12aa5: mov bx, ax
0x12aa7: mov cx, ax
0x12aa9: mov dx, ax
0x12aab: mov si, ax
0x12aad: mov di, ax
2018-12-17T22:47:41.713938365Z 44 PC: 12a94 | Get time 0x12a94: cmp dl, 0xa
0x12a97: ja 0x12a9c
0x12a99: jmp 0x12ab2
0x12a9b: nop
0x12a9c: pop dx
0x12a9d: mov ah, 0x1a
0x12a9f: int 0x21
0x12aa1: mov sp, bp
0x12aa3: xor ax, ax
0x12aa5: mov bx, ax
0x12aa7: mov cx, ax
0x12aa9: mov dx, ax
0x12aab: mov si, ax
0x12aad: mov di, ax
0x12aaf: mov bp, ax
0x12ab1: ret
0x12ab2: mov ah, 0xf
0x12ab4: int 0x10
0x12ab6: xor ah, ah
0x12ab8: int 0x10
2018-12-17T22:47:41.715974512Z 26 PC: 12aa1 | Set disk transfer address

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":9296,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:22:47.840766853Z 47 PC: 12a6b | Get disk transfer address
2018-12-25T12:22:47.842372146Z 26 PC: 12a73 | Set disk transfer address
2018-12-25T12:22:47.843506171Z 71 PC: 12b41 | Get current directory
2018-12-25T12:22:47.846519142Z 59 PC: 12b49 | Change current directory
2018-12-25T12:22:47.851107Z 47 PC: 12b5e | Get disk transfer address
2018-12-25T12:22:47.852289919Z 26 PC: 12b6c | Set disk transfer address
2018-12-25T12:22:47.853352663Z 78 PC: 12b77 | Find first file
2018-12-25T12:22:47.865873286Z 79 PC: 12b9f | Find next file
2018-12-25T12:22:47.86868554Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:47.871257663Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:47.873900859Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:47.876856081Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:47.879644007Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:47.88234049Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:47.885940214Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:47.889083785Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:47.891956794Z 47 PC: 12bc3 | Get disk transfer address
2018-12-25T12:22:47.894389333Z 26 PC: 12bd2 | Set disk transfer address
2018-12-25T12:22:47.895831805Z 78 PC: 12bda | Find first file
2018-12-25T12:22:47.902217535Z 47 PC: 12bf2 | Get disk transfer address
2018-12-25T12:22:47.904055864Z 61 PC: 12c0b | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:22:47.911449478Z 63 PC: 12c17 | Read file or device (Read 3 bytes on handle 5)
2018-12-25T12:22:47.918382069Z 66 PC: 12c1f | Move file pointer
2018-12-25T12:22:47.920459178Z 62 PC: 12c24 | Close file
2018-12-25T12:22:47.922476301Z 67 PC: 12c44 | Get or set file attributes
2018-12-25T12:22:47.94095114Z 61 PC: 12c49 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:22:47.949718293Z 64 PC: 12c55 | Write file or device (Write 3 bytes on handle 5)
2018-12-25T12:22:47.953803718Z 66 PC: 12c5d | Move file pointer
2018-12-25T12:22:47.957106066Z 64 PC: 12ff9 | Write file or device (Write 1442 bytes on handle 5)
2018-12-25T12:22:47.968055444Z 87 PC: 12c6d | Get or set file date and time
2018-12-25T12:22:47.970954931Z 62 PC: 12c71 | Close file
2018-12-25T12:22:47.979933708Z 67 PC: 12c7e | Get or set file attributes
2018-12-25T12:22:47.992519982Z 26 PC: 12bec | Set disk transfer address
2018-12-25T12:22:47.99549755Z 26 PC: 12baf | Set disk transfer address
2018-12-25T12:22:47.99731677Z 59 PC: 12b53 | Change current directory
2018-12-25T12:22:47.999925184Z 71 PC: 12b41 | Get current directory (See above)
2018-12-25T12:22:48.016077193Z 59 PC: 12b49 | Change current directory (See above)
2018-12-25T12:22:48.020577831Z 47 PC: 12b5e | Get disk transfer address (See above)
2018-12-25T12:22:48.021880507Z 26 PC: 12b6c | Set disk transfer address (See above)
2018-12-25T12:22:48.024786137Z 78 PC: 12b77 | Find first file (See above)
2018-12-25T12:22:48.031397773Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.03398039Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.037266786Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.040509401Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.043070823Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.045706679Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.048898547Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.051836293Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.05458154Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.057402797Z 47 PC: 12bc3 | Get disk transfer address (See above)
2018-12-25T12:22:48.059092548Z 26 PC: 12bd2 | Set disk transfer address (See above)
2018-12-25T12:22:48.060832307Z 78 PC: 12bda | Find first file (See above)
2018-12-25T12:22:48.068165153Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:48.070568468Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:48.080107886Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:48.08945692Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:48.092596872Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:48.095032114Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:48.099044359Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:48.101028962Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:48.108852363Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:48.119597377Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:48.121844115Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:48.123854587Z 67 PC: 12c44 | Get or set file attributes (See above)
2018-12-25T12:22:48.135492217Z 61 PC: 12c49 | Open file (See above)
2018-12-25T12:22:48.144384916Z 64 PC: 12c55 | Write file or device (See above)
2018-12-25T12:22:48.147465789Z 66 PC: 12c5d | Move file pointer (See above)
2018-12-25T12:22:48.150748157Z 64 PC: 12ff9 | Write file or device (See above)
2018-12-25T12:22:48.168378971Z 87 PC: 12c6d | Get or set file date and time (See above)
2018-12-25T12:22:48.17012302Z 62 PC: 12c71 | Close file (See above)
2018-12-25T12:22:48.178918787Z 67 PC: 12c7e | Get or set file attributes (See above)
2018-12-25T12:22:48.190913858Z 26 PC: 12bec | Set disk transfer address (See above)
2018-12-25T12:22:48.192665146Z 26 PC: 12baf | Set disk transfer address (See above)
2018-12-25T12:22:48.194008347Z 59 PC: 12b53 | Change current directory (See above)
2018-12-25T12:22:48.19628609Z 71 PC: 12b41 | Get current directory (See above)
2018-12-25T12:22:48.199835177Z 59 PC: 12b49 | Change current directory (See above)
2018-12-25T12:22:48.205318133Z 47 PC: 12b5e | Get disk transfer address (See above)
2018-12-25T12:22:48.206985362Z 26 PC: 12b6c | Set disk transfer address (See above)
2018-12-25T12:22:48.209499838Z 78 PC: 12b77 | Find first file (See above)
2018-12-25T12:22:48.222442707Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.226190836Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.229822189Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.23368464Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.236889905Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.240912157Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.244429195Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.247591791Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.251492184Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.254765425Z 47 PC: 12bc3 | Get disk transfer address (See above)
2018-12-25T12:22:48.256411726Z 26 PC: 12bd2 | Set disk transfer address (See above)
2018-12-25T12:22:48.258010956Z 78 PC: 12bda | Find first file (See above)
2018-12-25T12:22:48.266060122Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:48.267407805Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:48.274676799Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:48.283008406Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:48.284573826Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:48.286602672Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:48.291880556Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:48.293209282Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:48.300545644Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:48.30850719Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:48.310143661Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:48.312104879Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:48.315825354Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:48.317525473Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:48.325116775Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:48.332407637Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:48.335291502Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:48.337639936Z 67 PC: 12c44 | Get or set file attributes (See above)
2018-12-25T12:22:48.349286054Z 61 PC: 12c49 | Open file (See above)
2018-12-25T12:22:48.358418457Z 64 PC: 12c55 | Write file or device (See above)
2018-12-25T12:22:48.362085655Z 66 PC: 12c5d | Move file pointer (See above)
2018-12-25T12:22:48.3650203Z 64 PC: 12ff9 | Write file or device (See above)
2018-12-25T12:22:48.376138023Z 87 PC: 12c6d | Get or set file date and time (See above)
2018-12-25T12:22:48.377831719Z 62 PC: 12c71 | Close file (See above)
2018-12-25T12:22:48.386368888Z 67 PC: 12c7e | Get or set file attributes (See above)
2018-12-25T12:22:48.398834175Z 26 PC: 12bec | Set disk transfer address (See above)
2018-12-25T12:22:48.400250513Z 26 PC: 12baf | Set disk transfer address (See above)
2018-12-25T12:22:48.401648589Z 59 PC: 12b53 | Change current directory (See above)
2018-12-25T12:22:48.404006413Z 71 PC: 12b41 | Get current directory (See above)
2018-12-25T12:22:48.408168926Z 59 PC: 12b49 | Change current directory (See above)
2018-12-25T12:22:48.412866164Z 47 PC: 12b5e | Get disk transfer address (See above)
2018-12-25T12:22:48.414237219Z 26 PC: 12b6c | Set disk transfer address (See above)
2018-12-25T12:22:48.416820351Z 78 PC: 12b77 | Find first file (See above)
2018-12-25T12:22:48.429573173Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.432900157Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.436928243Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.440083173Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.44319121Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.447537212Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.450638984Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.453712672Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.457602294Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.46062609Z 47 PC: 12bc3 | Get disk transfer address (See above)
2018-12-25T12:22:48.462178419Z 26 PC: 12bd2 | Set disk transfer address (See above)
2018-12-25T12:22:48.464101335Z 78 PC: 12bda | Find first file (See above)
2018-12-25T12:22:48.470886631Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:48.472473669Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:48.480481521Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:48.488249041Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:48.490173287Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:48.493139626Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:48.496271731Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:48.497640652Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:48.506515548Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:48.513643205Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:48.515324401Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:48.517482875Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:48.521347967Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:48.52274062Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:48.530598918Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:48.537764258Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:48.539262929Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:48.541199867Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:48.545225686Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:48.546590352Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:48.553762307Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:48.561669574Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:48.563329379Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:48.565257742Z 67 PC: 12c44 | Get or set file attributes (See above)
2018-12-25T12:22:48.578086305Z 61 PC: 12c49 | Open file (See above)
2018-12-25T12:22:48.586010472Z 64 PC: 12c55 | Write file or device (See above)
2018-12-25T12:22:48.590151976Z 66 PC: 12c5d | Move file pointer (See above)
2018-12-25T12:22:48.593488603Z 64 PC: 12ff9 | Write file or device (See above)
2018-12-25T12:22:48.603794248Z 87 PC: 12c6d | Get or set file date and time (See above)
2018-12-25T12:22:48.60590781Z 62 PC: 12c71 | Close file (See above)
2018-12-25T12:22:48.615767775Z 67 PC: 12c7e | Get or set file attributes (See above)
2018-12-25T12:22:48.627596304Z 26 PC: 12bec | Set disk transfer address (See above)
2018-12-25T12:22:48.628919696Z 26 PC: 12baf | Set disk transfer address (See above)
2018-12-25T12:22:48.631309739Z 59 PC: 12b53 | Change current directory (See above)
2018-12-25T12:22:48.633333187Z 71 PC: 12b41 | Get current directory (See above)
2018-12-25T12:22:48.637365881Z 59 PC: 12b49 | Change current directory (See above)
2018-12-25T12:22:48.643871646Z 47 PC: 12b5e | Get disk transfer address (See above)
2018-12-25T12:22:48.645229937Z 26 PC: 12b6c | Set disk transfer address (See above)
2018-12-25T12:22:48.646492861Z 78 PC: 12b77 | Find first file (See above)
2018-12-25T12:22:48.653301424Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.657399771Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.660307214Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.663380439Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.666739796Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.669588354Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.673792034Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.677148917Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.680290251Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.683410144Z 47 PC: 12bc3 | Get disk transfer address (See above)
2018-12-25T12:22:48.685403612Z 26 PC: 12bd2 | Set disk transfer address (See above)
2018-12-25T12:22:48.686630895Z 78 PC: 12bda | Find first file (See above)
2018-12-25T12:22:48.692955437Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:48.694842493Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:48.702099104Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:48.70503941Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:48.706957778Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:48.708906591Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:48.712639531Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:48.71411982Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:48.721264465Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:48.724232352Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:48.727579401Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:48.73000826Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:48.733257731Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:48.735381854Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:48.743817175Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:48.746785209Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:48.749616871Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:48.751981015Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:48.755283794Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:48.757464335Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:48.765264944Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:48.772549871Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:48.775723431Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:48.778072178Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:48.781303491Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:48.78354305Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:48.79141814Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:48.798569889Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:48.801376864Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:48.80371975Z 67 PC: 12c44 | Get or set file attributes (See above)
2018-12-25T12:22:48.814577136Z 61 PC: 12c49 | Open file (See above)
2018-12-25T12:22:48.822825928Z 64 PC: 12c55 | Write file or device (See above)
2018-12-25T12:22:48.826151401Z 66 PC: 12c5d | Move file pointer (See above)
2018-12-25T12:22:48.829120282Z 64 PC: 12ff9 | Write file or device (See above)
2018-12-25T12:22:48.840389647Z 87 PC: 12c6d | Get or set file date and time (See above)
2018-12-25T12:22:48.842022617Z 62 PC: 12c71 | Close file (See above)
2018-12-25T12:22:48.85045573Z 67 PC: 12c7e | Get or set file attributes (See above)
2018-12-25T12:22:48.862454403Z 26 PC: 12bec | Set disk transfer address (See above)
2018-12-25T12:22:48.863920462Z 26 PC: 12baf | Set disk transfer address (See above)
2018-12-25T12:22:48.865305833Z 59 PC: 12b53 | Change current directory (See above)
2018-12-25T12:22:48.86811996Z 42 PC: 12a86 | Get date 0x12a86: cmp dh, 2
0x12a89: jb 0x12a9c
0x12a8b: cmp dl, 0xc
0x12a8e: jb 0x12a9c
0x12a90: mov ah, 0x2c
0x12a92: int 0x21
0x12a94: cmp dl, 0xa
0x12a97: ja 0x12a9c
0x12a99: jmp 0x12ab2
0x12a9b: nop
0x12a9c: pop dx
0x12a9d: mov ah, 0x1a
0x12a9f: int 0x21
0x12aa1: mov sp, bp
0x12aa3: xor ax, ax
0x12aa5: mov bx, ax
0x12aa7: mov cx, ax
0x12aa9: mov dx, ax
0x12aab: mov si, ax
0x12aad: mov di, ax
2018-12-25T12:22:48.87118693Z 26 PC: 12aa1 | Set disk transfer address

{"DateBased":true,"Day":1,"Month":2,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":9296,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:22:47.928384807Z 47 PC: 12a6b | Get disk transfer address
2018-12-25T12:22:47.930620506Z 26 PC: 12a73 | Set disk transfer address
2018-12-25T12:22:47.932256337Z 71 PC: 12b41 | Get current directory
2018-12-25T12:22:47.935825275Z 59 PC: 12b49 | Change current directory
2018-12-25T12:22:47.941368091Z 47 PC: 12b5e | Get disk transfer address
2018-12-25T12:22:47.948280455Z 26 PC: 12b6c | Set disk transfer address
2018-12-25T12:22:47.949841157Z 78 PC: 12b77 | Find first file
2018-12-25T12:22:47.956622824Z 79 PC: 12b9f | Find next file
2018-12-25T12:22:47.960491401Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:47.963712356Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:47.966921633Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:47.971079265Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:47.974092761Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:47.977110128Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:47.980881393Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:47.983671416Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:47.986172482Z 47 PC: 12bc3 | Get disk transfer address
2018-12-25T12:22:47.987798694Z 26 PC: 12bd2 | Set disk transfer address
2018-12-25T12:22:47.989591224Z 78 PC: 12bda | Find first file
2018-12-25T12:22:47.996200349Z 47 PC: 12bf2 | Get disk transfer address
2018-12-25T12:22:47.99781987Z 61 PC: 12c0b | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:22:48.005924329Z 63 PC: 12c17 | Read file or device (Read 3 bytes on handle 5)
2018-12-25T12:22:48.013174176Z 66 PC: 12c1f | Move file pointer
2018-12-25T12:22:48.015099529Z 62 PC: 12c24 | Close file
2018-12-25T12:22:48.025172003Z 67 PC: 12c44 | Get or set file attributes
2018-12-25T12:22:48.042248685Z 61 PC: 12c49 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:22:48.049561995Z 64 PC: 12c55 | Write file or device (Write 3 bytes on handle 5)
2018-12-25T12:22:48.068412738Z 66 PC: 12c5d | Move file pointer
2018-12-25T12:22:48.071676114Z 64 PC: 12ff9 | Write file or device (Write 1442 bytes on handle 5)
2018-12-25T12:22:48.082553978Z 87 PC: 12c6d | Get or set file date and time
2018-12-25T12:22:48.085419705Z 62 PC: 12c71 | Close file
2018-12-25T12:22:48.093978037Z 67 PC: 12c7e | Get or set file attributes
2018-12-25T12:22:48.10487252Z 26 PC: 12bec | Set disk transfer address
2018-12-25T12:22:48.107246302Z 26 PC: 12baf | Set disk transfer address
2018-12-25T12:22:48.110800893Z 59 PC: 12b53 | Change current directory
2018-12-25T12:22:48.113461254Z 71 PC: 12b41 | Get current directory (See above)
2018-12-25T12:22:48.118833998Z 59 PC: 12b49 | Change current directory (See above)
2018-12-25T12:22:48.123922261Z 47 PC: 12b5e | Get disk transfer address (See above)
2018-12-25T12:22:48.125534525Z 26 PC: 12b6c | Set disk transfer address (See above)
2018-12-25T12:22:48.127306296Z 78 PC: 12b77 | Find first file (See above)
2018-12-25T12:22:48.13476379Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.138341483Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.14165703Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.148133501Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.151426743Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.154723037Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.158807755Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.162386523Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.165636908Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.169366659Z 47 PC: 12bc3 | Get disk transfer address (See above)
2018-12-25T12:22:48.171393293Z 26 PC: 12bd2 | Set disk transfer address (See above)
2018-12-25T12:22:48.173047623Z 78 PC: 12bda | Find first file (See above)
2018-12-25T12:22:48.180177624Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:48.182721056Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:48.191139685Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:48.19945118Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:48.202482942Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:48.204956448Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:48.208364075Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:48.210851687Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:48.218918657Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:48.226359156Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:48.229081586Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:48.231493836Z 67 PC: 12c44 | Get or set file attributes (See above)
2018-12-25T12:22:48.242857918Z 61 PC: 12c49 | Open file (See above)
2018-12-25T12:22:48.250821268Z 64 PC: 12c55 | Write file or device (See above)
2018-12-25T12:22:48.255350247Z 66 PC: 12c5d | Move file pointer (See above)
2018-12-25T12:22:48.258493407Z 64 PC: 12ff9 | Write file or device (See above)
2018-12-25T12:22:48.268754599Z 87 PC: 12c6d | Get or set file date and time (See above)
2018-12-25T12:22:48.271174689Z 62 PC: 12c71 | Close file (See above)
2018-12-25T12:22:48.280283114Z 67 PC: 12c7e | Get or set file attributes (See above)
2018-12-25T12:22:48.291273027Z 26 PC: 12bec | Set disk transfer address (See above)
2018-12-25T12:22:48.293775267Z 26 PC: 12baf | Set disk transfer address (See above)
2018-12-25T12:22:48.295420422Z 59 PC: 12b53 | Change current directory (See above)
2018-12-25T12:22:48.297782899Z 71 PC: 12b41 | Get current directory (See above)
2018-12-25T12:22:48.302054801Z 59 PC: 12b49 | Change current directory (See above)
2018-12-25T12:22:48.306881329Z 47 PC: 12b5e | Get disk transfer address (See above)
2018-12-25T12:22:48.308460083Z 26 PC: 12b6c | Set disk transfer address (See above)
2018-12-25T12:22:48.310348005Z 78 PC: 12b77 | Find first file (See above)
2018-12-25T12:22:48.322901235Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.325636286Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.329078328Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.332091464Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.334847453Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.337598788Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.340853621Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.343556998Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.346248916Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.349782321Z 47 PC: 12bc3 | Get disk transfer address (See above)
2018-12-25T12:22:48.350992138Z 26 PC: 12bd2 | Set disk transfer address (See above)
2018-12-25T12:22:48.352534767Z 78 PC: 12bda | Find first file (See above)
2018-12-25T12:22:48.360987263Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:48.362283665Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:48.369361644Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:48.377272167Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:48.378852348Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:48.380840688Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:48.38375411Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:48.386194346Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:48.393314811Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:48.4008881Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:48.403739276Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:48.406123599Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:48.409366386Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:48.411997545Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:48.419441543Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:48.426601708Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:48.42917086Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:48.431616766Z 67 PC: 12c44 | Get or set file attributes (See above)
2018-12-25T12:22:48.442947427Z 61 PC: 12c49 | Open file (See above)
2018-12-25T12:22:48.450418667Z 64 PC: 12c55 | Write file or device (See above)
2018-12-25T12:22:48.454528394Z 66 PC: 12c5d | Move file pointer (See above)
2018-12-25T12:22:48.457394196Z 64 PC: 12ff9 | Write file or device (See above)
2018-12-25T12:22:48.468185184Z 87 PC: 12c6d | Get or set file date and time (See above)
2018-12-25T12:22:48.470676439Z 62 PC: 12c71 | Close file (See above)
2018-12-25T12:22:48.479066824Z 67 PC: 12c7e | Get or set file attributes (See above)
2018-12-25T12:22:48.48979672Z 26 PC: 12bec | Set disk transfer address (See above)
2018-12-25T12:22:48.491923042Z 26 PC: 12baf | Set disk transfer address (See above)
2018-12-25T12:22:48.493223662Z 59 PC: 12b53 | Change current directory (See above)
2018-12-25T12:22:48.495290228Z 71 PC: 12b41 | Get current directory (See above)
2018-12-25T12:22:48.499228946Z 59 PC: 12b49 | Change current directory (See above)
2018-12-25T12:22:48.503715153Z 47 PC: 12b5e | Get disk transfer address (See above)
2018-12-25T12:22:48.505109673Z 26 PC: 12b6c | Set disk transfer address (See above)
2018-12-25T12:22:48.506634783Z 78 PC: 12b77 | Find first file (See above)
2018-12-25T12:22:48.519357652Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.522395065Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.525594397Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.528788827Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.532575908Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.535317757Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.538732817Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.541373828Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.544050397Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.546738373Z 47 PC: 12bc3 | Get disk transfer address (See above)
2018-12-25T12:22:48.548240846Z 26 PC: 12bd2 | Set disk transfer address (See above)
2018-12-25T12:22:48.549691728Z 78 PC: 12bda | Find first file (See above)
2018-12-25T12:22:48.556739717Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:48.558076548Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:48.565785047Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:48.573779279Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:48.57559275Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:48.577845725Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:48.581437076Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:48.582770968Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:48.58978957Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:48.597084356Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:48.598760461Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:48.601525951Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:48.6052194Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:48.606502587Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:48.614339374Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:48.621767176Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:48.623287738Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:48.6252044Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:48.629204969Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:48.630861806Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:48.63793169Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:48.645116282Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:48.646618071Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:48.648319666Z 67 PC: 12c44 | Get or set file attributes (See above)
2018-12-25T12:22:48.659753095Z 61 PC: 12c49 | Open file (See above)
2018-12-25T12:22:48.668620021Z 64 PC: 12c55 | Write file or device (See above)
2018-12-25T12:22:48.671648648Z 66 PC: 12c5d | Move file pointer (See above)
2018-12-25T12:22:48.67432342Z 64 PC: 12ff9 | Write file or device (See above)
2018-12-25T12:22:48.684949307Z 87 PC: 12c6d | Get or set file date and time (See above)
2018-12-25T12:22:48.686864871Z 62 PC: 12c71 | Close file (See above)
2018-12-25T12:22:48.696265094Z 67 PC: 12c7e | Get or set file attributes (See above)
2018-12-25T12:22:48.708781716Z 26 PC: 12bec | Set disk transfer address (See above)
2018-12-25T12:22:48.710513379Z 26 PC: 12baf | Set disk transfer address (See above)
2018-12-25T12:22:48.712437023Z 59 PC: 12b53 | Change current directory (See above)
2018-12-25T12:22:48.71609475Z 71 PC: 12b41 | Get current directory (See above)
2018-12-25T12:22:48.719564242Z 59 PC: 12b49 | Change current directory (See above)
2018-12-25T12:22:48.724378902Z 47 PC: 12b5e | Get disk transfer address (See above)
2018-12-25T12:22:48.727442444Z 26 PC: 12b6c | Set disk transfer address (See above)
2018-12-25T12:22:48.729089357Z 78 PC: 12b77 | Find first file (See above)
2018-12-25T12:22:48.742500068Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.746503197Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.749517612Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.752701227Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.756397508Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.759564315Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.762653155Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.766990752Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.769962158Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.772615669Z 47 PC: 12bc3 | Get disk transfer address (See above)
2018-12-25T12:22:48.775745149Z 26 PC: 12bd2 | Set disk transfer address (See above)
2018-12-25T12:22:48.777285125Z 78 PC: 12bda | Find first file (See above)
2018-12-25T12:22:48.784165966Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:48.78641988Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:48.793912188Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:48.801318792Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:48.803891557Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:48.806563449Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:48.809690676Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:48.812048943Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:48.820144015Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:48.827277456Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:48.829346601Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:48.832290672Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:48.835457963Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:48.836842325Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:48.845202556Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:48.852407021Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:48.85408329Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:48.857634659Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:48.861239094Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:48.862785661Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:48.871081963Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:48.878509686Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:48.880476174Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:48.884026743Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:48.888321643Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:48.889744527Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:48.897777345Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:48.90498763Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:48.906834158Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:48.910067601Z 67 PC: 12c44 | Get or set file attributes (See above)
2018-12-25T12:22:48.921263556Z 61 PC: 12c49 | Open file (See above)
2018-12-25T12:22:48.929097333Z 64 PC: 12c55 | Write file or device (See above)
2018-12-25T12:22:48.933402441Z 66 PC: 12c5d | Move file pointer (See above)
2018-12-25T12:22:48.936535344Z 64 PC: 12ff9 | Write file or device (See above)
2018-12-25T12:22:48.947489837Z 87 PC: 12c6d | Get or set file date and time (See above)
2018-12-25T12:22:48.950342012Z 62 PC: 12c71 | Close file (See above)
2018-12-25T12:22:48.959428348Z 67 PC: 12c7e | Get or set file attributes (See above)
2018-12-25T12:22:48.970856569Z 26 PC: 12bec | Set disk transfer address (See above)
2018-12-25T12:22:48.973184395Z 26 PC: 12baf | Set disk transfer address (See above)
2018-12-25T12:22:48.974420753Z 59 PC: 12b53 | Change current directory (See above)
2018-12-25T12:22:48.976493546Z 42 PC: 12a86 | Get date 0x12a86: cmp dh, 2
0x12a89: jb 0x12a9c
0x12a8b: cmp dl, 0xc
0x12a8e: jb 0x12a9c
0x12a90: mov ah, 0x2c
0x12a92: int 0x21
0x12a94: cmp dl, 0xa
0x12a97: ja 0x12a9c
0x12a99: jmp 0x12ab2
0x12a9b: nop
0x12a9c: pop dx
0x12a9d: mov ah, 0x1a
0x12a9f: int 0x21
0x12aa1: mov sp, bp
0x12aa3: xor ax, ax
0x12aa5: mov bx, ax
0x12aa7: mov cx, ax
0x12aa9: mov dx, ax
0x12aab: mov si, ax
0x12aad: mov di, ax
2018-12-25T12:22:48.980063087Z 26 PC: 12aa1 | Set disk transfer address

{"DateBased":true,"Day":12,"Month":2,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":9296,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:22:48.066114219Z 47 PC: 12a6b | Get disk transfer address
2018-12-25T12:22:48.067406712Z 26 PC: 12a73 | Set disk transfer address
2018-12-25T12:22:48.069825521Z 71 PC: 12b41 | Get current directory
2018-12-25T12:22:48.072958766Z 59 PC: 12b49 | Change current directory
2018-12-25T12:22:48.07809489Z 47 PC: 12b5e | Get disk transfer address
2018-12-25T12:22:48.080078473Z 26 PC: 12b6c | Set disk transfer address
2018-12-25T12:22:48.081327254Z 78 PC: 12b77 | Find first file
2018-12-25T12:22:48.087901401Z 79 PC: 12b9f | Find next file
2018-12-25T12:22:48.091604017Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.094376807Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.097170369Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.099826772Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.102815777Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.105935227Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.110868102Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.114414756Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.11716229Z 47 PC: 12bc3 | Get disk transfer address
2018-12-25T12:22:48.118391097Z 26 PC: 12bd2 | Set disk transfer address
2018-12-25T12:22:48.120592343Z 78 PC: 12bda | Find first file
2018-12-25T12:22:48.127557623Z 47 PC: 12bf2 | Get disk transfer address
2018-12-25T12:22:48.129133042Z 61 PC: 12c0b | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:22:48.136924048Z 63 PC: 12c17 | Read file or device (Read 3 bytes on handle 5)
2018-12-25T12:22:48.145268888Z 66 PC: 12c1f | Move file pointer
2018-12-25T12:22:48.147154643Z 62 PC: 12c24 | Close file
2018-12-25T12:22:48.1503405Z 67 PC: 12c44 | Get or set file attributes
2018-12-25T12:22:48.167964232Z 61 PC: 12c49 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:22:48.175464861Z 64 PC: 12c55 | Write file or device (Write 3 bytes on handle 5)
2018-12-25T12:22:48.178496916Z 66 PC: 12c5d | Move file pointer
2018-12-25T12:22:48.182635883Z 64 PC: 12ff9 | Write file or device (Write 1442 bytes on handle 5)
2018-12-25T12:22:48.193263168Z 87 PC: 12c6d | Get or set file date and time
2018-12-25T12:22:48.195427426Z 62 PC: 12c71 | Close file
2018-12-25T12:22:48.20493196Z 67 PC: 12c7e | Get or set file attributes
2018-12-25T12:22:48.215875082Z 26 PC: 12bec | Set disk transfer address
2018-12-25T12:22:48.217132004Z 26 PC: 12baf | Set disk transfer address
2018-12-25T12:22:48.218933969Z 59 PC: 12b53 | Change current directory
2018-12-25T12:22:48.22204177Z 71 PC: 12b41 | Get current directory (See above)
2018-12-25T12:22:48.225390488Z 59 PC: 12b49 | Change current directory (See above)
2018-12-25T12:22:48.230740956Z 47 PC: 12b5e | Get disk transfer address (See above)
2018-12-25T12:22:48.232641328Z 26 PC: 12b6c | Set disk transfer address (See above)
2018-12-25T12:22:48.233957302Z 78 PC: 12b77 | Find first file (See above)
2018-12-25T12:22:48.240874477Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.245340455Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.248187433Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.251072151Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.255149231Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.258477649Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.261722158Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.266605347Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.270580261Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.273455563Z 47 PC: 12bc3 | Get disk transfer address (See above)
2018-12-25T12:22:48.276514231Z 26 PC: 12bd2 | Set disk transfer address (See above)
2018-12-25T12:22:48.278081794Z 78 PC: 12bda | Find first file (See above)
2018-12-25T12:22:48.285211377Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:48.287675689Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:48.295381016Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:48.303381661Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:48.305601532Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:48.308138554Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:48.311532591Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:48.313204448Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:48.321364992Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:48.332647243Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:48.334350511Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:48.337236887Z 67 PC: 12c44 | Get or set file attributes (See above)
2018-12-25T12:22:48.349290392Z 61 PC: 12c49 | Open file (See above)
2018-12-25T12:22:48.357120591Z 64 PC: 12c55 | Write file or device (See above)
2018-12-25T12:22:48.361651182Z 66 PC: 12c5d | Move file pointer (See above)
2018-12-25T12:22:48.36482497Z 64 PC: 12ff9 | Write file or device (See above)
2018-12-25T12:22:48.375858126Z 87 PC: 12c6d | Get or set file date and time (See above)
2018-12-25T12:22:48.378863313Z 62 PC: 12c71 | Close file (See above)
2018-12-25T12:22:48.388071035Z 67 PC: 12c7e | Get or set file attributes (See above)
2018-12-25T12:22:48.399309116Z 26 PC: 12bec | Set disk transfer address (See above)
2018-12-25T12:22:48.401646928Z 26 PC: 12baf | Set disk transfer address (See above)
2018-12-25T12:22:48.403538366Z 59 PC: 12b53 | Change current directory (See above)
2018-12-25T12:22:48.405894837Z 71 PC: 12b41 | Get current directory (See above)
2018-12-25T12:22:48.41030156Z 59 PC: 12b49 | Change current directory (See above)
2018-12-25T12:22:48.416036597Z 47 PC: 12b5e | Get disk transfer address (See above)
2018-12-25T12:22:48.417646641Z 26 PC: 12b6c | Set disk transfer address (See above)
2018-12-25T12:22:48.419163448Z 78 PC: 12b77 | Find first file (See above)
2018-12-25T12:22:48.432388975Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.436305479Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.439268415Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.442828676Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.445853495Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.449065433Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.452993745Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.456389304Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.45946066Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.462519104Z 47 PC: 12bc3 | Get disk transfer address (See above)
2018-12-25T12:22:48.464092138Z 26 PC: 12bd2 | Set disk transfer address (See above)
2018-12-25T12:22:48.465274891Z 78 PC: 12bda | Find first file (See above)
2018-12-25T12:22:48.47186181Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:48.473350579Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:48.480668827Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:48.487843392Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:48.492557052Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:48.49502924Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:48.498431315Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:48.500766199Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:48.509147722Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:48.516874966Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:48.519233545Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:48.521365725Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:48.524704493Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:48.527259124Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:48.535013179Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:48.542388864Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:48.544971694Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:48.547318598Z 67 PC: 12c44 | Get or set file attributes (See above)
2018-12-25T12:22:48.558696234Z 61 PC: 12c49 | Open file (See above)
2018-12-25T12:22:48.566878256Z 64 PC: 12c55 | Write file or device (See above)
2018-12-25T12:22:48.570369102Z 66 PC: 12c5d | Move file pointer (See above)
2018-12-25T12:22:48.57434502Z 64 PC: 12ff9 | Write file or device (See above)
2018-12-25T12:22:48.584685503Z 87 PC: 12c6d | Get or set file date and time (See above)
2018-12-25T12:22:48.587214488Z 62 PC: 12c71 | Close file (See above)
2018-12-25T12:22:48.595731056Z 67 PC: 12c7e | Get or set file attributes (See above)
2018-12-25T12:22:48.607186422Z 26 PC: 12bec | Set disk transfer address (See above)
2018-12-25T12:22:48.609355005Z 26 PC: 12baf | Set disk transfer address (See above)
2018-12-25T12:22:48.610596692Z 59 PC: 12b53 | Change current directory (See above)
2018-12-25T12:22:48.612605005Z 71 PC: 12b41 | Get current directory (See above)
2018-12-25T12:22:48.616586243Z 59 PC: 12b49 | Change current directory (See above)
2018-12-25T12:22:48.620911132Z 47 PC: 12b5e | Get disk transfer address (See above)
2018-12-25T12:22:48.622164167Z 26 PC: 12b6c | Set disk transfer address (See above)
2018-12-25T12:22:48.624138044Z 78 PC: 12b77 | Find first file (See above)
2018-12-25T12:22:48.636252903Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.640130057Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.644275626Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.647444539Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.650569538Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.653863028Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.658079123Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.661324192Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.664541762Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.668150169Z 47 PC: 12bc3 | Get disk transfer address (See above)
2018-12-25T12:22:48.66979289Z 26 PC: 12bd2 | Set disk transfer address (See above)
2018-12-25T12:22:48.671484999Z 78 PC: 12bda | Find first file (See above)
2018-12-25T12:22:48.679015815Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:48.680520221Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:48.687972078Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:48.695716695Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:48.697026613Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:48.69877445Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:48.702448815Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:48.703714251Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:48.711089812Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:48.719216096Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:48.720870726Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:48.723042182Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:48.72687362Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:48.728245299Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:48.735649622Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:48.743520935Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:48.745144377Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:48.747185642Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:48.751165689Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:48.752469325Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:48.759626856Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:48.767416057Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:48.770262633Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:48.77306487Z 67 PC: 12c44 | Get or set file attributes (See above)
2018-12-25T12:22:48.798504745Z 61 PC: 12c49 | Open file (See above)
2018-12-25T12:22:48.806218494Z 64 PC: 12c55 | Write file or device (See above)
2018-12-25T12:22:48.809971696Z 66 PC: 12c5d | Move file pointer (See above)
2018-12-25T12:22:48.813669049Z 64 PC: 12ff9 | Write file or device (See above)
2018-12-25T12:22:48.823741117Z 87 PC: 12c6d | Get or set file date and time (See above)
2018-12-25T12:22:48.825176691Z 62 PC: 12c71 | Close file (See above)
2018-12-25T12:22:48.8343635Z 67 PC: 12c7e | Get or set file attributes (See above)
2018-12-25T12:22:48.846056122Z 26 PC: 12bec | Set disk transfer address (See above)
2018-12-25T12:22:48.847667467Z 26 PC: 12baf | Set disk transfer address (See above)
2018-12-25T12:22:48.850024303Z 59 PC: 12b53 | Change current directory (See above)
2018-12-25T12:22:48.852501056Z 71 PC: 12b41 | Get current directory (See above)
2018-12-25T12:22:48.855831806Z 59 PC: 12b49 | Change current directory (See above)
2018-12-25T12:22:48.8628473Z 47 PC: 12b5e | Get disk transfer address (See above)
2018-12-25T12:22:48.864671506Z 26 PC: 12b6c | Set disk transfer address (See above)
2018-12-25T12:22:48.866408646Z 78 PC: 12b77 | Find first file (See above)
2018-12-25T12:22:48.87388069Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.877183271Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.880115622Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.884171092Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.887290397Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.890198605Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.894735209Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.897511418Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.900734144Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:48.904706551Z 47 PC: 12bc3 | Get disk transfer address (See above)
2018-12-25T12:22:48.906077126Z 26 PC: 12bd2 | Set disk transfer address (See above)
2018-12-25T12:22:48.907304121Z 78 PC: 12bda | Find first file (See above)
2018-12-25T12:22:48.915081503Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:48.91660185Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:48.929950769Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:48.938089062Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:48.939691478Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:48.942191186Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:48.946315404Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:48.947766952Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:48.955808383Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:48.963455536Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:48.965195645Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:48.967326555Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:48.970975704Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:48.972322456Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:48.979537498Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:48.987990137Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:48.990535684Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:48.992738486Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:48.996385841Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:48.997941996Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:49.006524672Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:49.014732101Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:49.016882067Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:49.01925095Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:49.023121886Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:49.024781162Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:49.032511203Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:49.041309456Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:49.043641226Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:49.046103428Z 67 PC: 12c44 | Get or set file attributes (See above)
2018-12-25T12:22:49.057552199Z 61 PC: 12c49 | Open file (See above)
2018-12-25T12:22:49.066817586Z 64 PC: 12c55 | Write file or device (See above)
2018-12-25T12:22:49.070267267Z 66 PC: 12c5d | Move file pointer (See above)
2018-12-25T12:22:49.073439176Z 64 PC: 12ff9 | Write file or device (See above)
2018-12-25T12:22:49.084919683Z 87 PC: 12c6d | Get or set file date and time (See above)
2018-12-25T12:22:49.086611797Z 62 PC: 12c71 | Close file (See above)
2018-12-25T12:22:49.095107674Z 67 PC: 12c7e | Get or set file attributes (See above)
2018-12-25T12:22:49.106813856Z 26 PC: 12bec | Set disk transfer address (See above)
2018-12-25T12:22:49.107974317Z 26 PC: 12baf | Set disk transfer address (See above)
2018-12-25T12:22:49.109155791Z 59 PC: 12b53 | Change current directory (See above)
2018-12-25T12:22:49.111893157Z 42 PC: 12a86 | Get date 0x12a86: cmp dh, 2
0x12a89: jb 0x12a9c
0x12a8b: cmp dl, 0xc
0x12a8e: jb 0x12a9c
0x12a90: mov ah, 0x2c
0x12a92: int 0x21
0x12a94: cmp dl, 0xa
0x12a97: ja 0x12a9c
0x12a99: jmp 0x12ab2
0x12a9b: nop
0x12a9c: pop dx
0x12a9d: mov ah, 0x1a
0x12a9f: int 0x21
0x12aa1: mov sp, bp
0x12aa3: xor ax, ax
0x12aa5: mov bx, ax
0x12aa7: mov cx, ax
0x12aa9: mov dx, ax
0x12aab: mov si, ax
0x12aad: mov di, ax
2018-12-25T12:22:49.11427683Z 44 PC: 12a94 | Get time 0x12a94: cmp dl, 0xa
0x12a97: ja 0x12a9c
0x12a99: jmp 0x12ab2
0x12a9b: nop
0x12a9c: pop dx
0x12a9d: mov ah, 0x1a
0x12a9f: int 0x21
0x12aa1: mov sp, bp
0x12aa3: xor ax, ax
0x12aa5: mov bx, ax
0x12aa7: mov cx, ax
0x12aa9: mov dx, ax
0x12aab: mov si, ax
0x12aad: mov di, ax
0x12aaf: mov bp, ax
0x12ab1: ret
0x12ab2: mov ah, 0xf
0x12ab4: int 0x10
0x12ab6: xor ah, ah
0x12ab8: int 0x10
2018-12-25T12:22:49.116618594Z 26 PC: 12aa1 | Set disk transfer address

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":9296,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:22:49.733553858Z 47 PC: 12a6b | Get disk transfer address
2018-12-25T12:22:49.73514223Z 26 PC: 12a73 | Set disk transfer address
2018-12-25T12:22:49.740122893Z 71 PC: 12b41 | Get current directory
2018-12-25T12:22:49.743261133Z 59 PC: 12b49 | Change current directory
2018-12-25T12:22:49.747609059Z 47 PC: 12b5e | Get disk transfer address
2018-12-25T12:22:49.749331605Z 26 PC: 12b6c | Set disk transfer address
2018-12-25T12:22:49.750401035Z 78 PC: 12b77 | Find first file
2018-12-25T12:22:49.762804276Z 79 PC: 12b9f | Find next file
2018-12-25T12:22:49.765989891Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:49.768857146Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:49.771885341Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:49.77484793Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:49.777534866Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:49.780198819Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:49.783292649Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:49.786388088Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:49.788738618Z 47 PC: 12bc3 | Get disk transfer address
2018-12-25T12:22:49.790268423Z 26 PC: 12bd2 | Set disk transfer address
2018-12-25T12:22:49.791553003Z 78 PC: 12bda | Find first file
2018-12-25T12:22:49.797908479Z 47 PC: 12bf2 | Get disk transfer address
2018-12-25T12:22:49.799326343Z 61 PC: 12c0b | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:22:49.807090513Z 63 PC: 12c17 | Read file or device (Read 3 bytes on handle 5)
2018-12-25T12:22:49.814018214Z 66 PC: 12c1f | Move file pointer
2018-12-25T12:22:49.815645211Z 62 PC: 12c24 | Close file
2018-12-25T12:22:49.825750372Z 67 PC: 12c44 | Get or set file attributes
2018-12-25T12:22:49.84454796Z 61 PC: 12c49 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:22:49.851575216Z 64 PC: 12c55 | Write file or device (Write 3 bytes on handle 5)
2018-12-25T12:22:49.855291639Z 66 PC: 12c5d | Move file pointer
2018-12-25T12:22:49.873075796Z 64 PC: 12ff9 | Write file or device (Write 1442 bytes on handle 5)
2018-12-25T12:22:49.883325264Z 87 PC: 12c6d | Get or set file date and time
2018-12-25T12:22:49.885291709Z 62 PC: 12c71 | Close file
2018-12-25T12:22:49.893809429Z 67 PC: 12c7e | Get or set file attributes
2018-12-25T12:22:49.905328832Z 26 PC: 12bec | Set disk transfer address
2018-12-25T12:22:49.907631703Z 26 PC: 12baf | Set disk transfer address
2018-12-25T12:22:49.908931076Z 59 PC: 12b53 | Change current directory
2018-12-25T12:22:49.910933098Z 71 PC: 12b41 | Get current directory (See above)
2018-12-25T12:22:49.914906603Z 59 PC: 12b49 | Change current directory (See above)
2018-12-25T12:22:49.919288025Z 47 PC: 12b5e | Get disk transfer address (See above)
2018-12-25T12:22:49.920416064Z 26 PC: 12b6c | Set disk transfer address (See above)
2018-12-25T12:22:49.921690944Z 78 PC: 12b77 | Find first file (See above)
2018-12-25T12:22:49.928177402Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:49.930853764Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:49.933358204Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:49.936121094Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:49.938759701Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:49.941395954Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:49.944730509Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:49.947460002Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:49.950132176Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:49.952906483Z 47 PC: 12bc3 | Get disk transfer address (See above)
2018-12-25T12:22:49.954015Z 26 PC: 12bd2 | Set disk transfer address (See above)
2018-12-25T12:22:49.955022245Z 78 PC: 12bda | Find first file (See above)
2018-12-25T12:22:49.961832633Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:49.963410278Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:49.971477008Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:49.979469763Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:49.981348926Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:49.983674535Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:49.987418953Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:49.988721891Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:49.995923135Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:50.003125911Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:50.004825968Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:50.006904776Z 67 PC: 12c44 | Get or set file attributes (See above)
2018-12-25T12:22:50.018055522Z 61 PC: 12c49 | Open file (See above)
2018-12-25T12:22:50.025801576Z 64 PC: 12c55 | Write file or device (See above)
2018-12-25T12:22:50.028946334Z 66 PC: 12c5d | Move file pointer (See above)
2018-12-25T12:22:50.032962546Z 64 PC: 12ff9 | Write file or device (See above)
2018-12-25T12:22:50.044126015Z 87 PC: 12c6d | Get or set file date and time (See above)
2018-12-25T12:22:50.045794033Z 62 PC: 12c71 | Close file (See above)
2018-12-25T12:22:50.054156411Z 67 PC: 12c7e | Get or set file attributes (See above)
2018-12-25T12:22:50.065531074Z 26 PC: 12bec | Set disk transfer address (See above)
2018-12-25T12:22:50.066515087Z 26 PC: 12baf | Set disk transfer address (See above)
2018-12-25T12:22:50.06746805Z 59 PC: 12b53 | Change current directory (See above)
2018-12-25T12:22:50.069517458Z 71 PC: 12b41 | Get current directory (See above)
2018-12-25T12:22:50.072589459Z 59 PC: 12b49 | Change current directory (See above)
2018-12-25T12:22:50.076855121Z 47 PC: 12b5e | Get disk transfer address (See above)
2018-12-25T12:22:50.079186445Z 26 PC: 12b6c | Set disk transfer address (See above)
2018-12-25T12:22:50.080492451Z 78 PC: 12b77 | Find first file (See above)
2018-12-25T12:22:50.092267177Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.096145106Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.098907852Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.10134155Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.104046594Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.107457492Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.109235917Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.111915986Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.11460834Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.116878252Z 47 PC: 12bc3 | Get disk transfer address (See above)
2018-12-25T12:22:50.117979067Z 26 PC: 12bd2 | Set disk transfer address (See above)
2018-12-25T12:22:50.119200572Z 78 PC: 12bda | Find first file (See above)
2018-12-25T12:22:50.125483102Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:50.126387344Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:50.130937397Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:50.138255908Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:50.14011956Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:50.142731349Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:50.145650498Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:50.146818495Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:50.155029223Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:50.162368813Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:50.163792659Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:50.16604279Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:50.168803401Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:50.169792426Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:50.177797461Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:50.185007743Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:50.186869273Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:50.189964645Z 67 PC: 12c44 | Get or set file attributes (See above)
2018-12-25T12:22:50.201668643Z 61 PC: 12c49 | Open file (See above)
2018-12-25T12:22:50.209322475Z 64 PC: 12c55 | Write file or device (See above)
2018-12-25T12:22:50.21291036Z 66 PC: 12c5d | Move file pointer (See above)
2018-12-25T12:22:50.216570652Z 64 PC: 12ff9 | Write file or device (See above)
2018-12-25T12:22:50.22682837Z 87 PC: 12c6d | Get or set file date and time (See above)
2018-12-25T12:22:50.22822263Z 62 PC: 12c71 | Close file (See above)
2018-12-25T12:22:50.237102175Z 67 PC: 12c7e | Get or set file attributes (See above)
2018-12-25T12:22:50.247922979Z 26 PC: 12bec | Set disk transfer address (See above)
2018-12-25T12:22:50.249502377Z 26 PC: 12baf | Set disk transfer address (See above)
2018-12-25T12:22:50.251979142Z 59 PC: 12b53 | Change current directory (See above)
2018-12-25T12:22:50.253967092Z 71 PC: 12b41 | Get current directory (See above)
2018-12-25T12:22:50.25779232Z 59 PC: 12b49 | Change current directory (See above)
2018-12-25T12:22:50.263096862Z 47 PC: 12b5e | Get disk transfer address (See above)
2018-12-25T12:22:50.264639142Z 26 PC: 12b6c | Set disk transfer address (See above)
2018-12-25T12:22:50.266125731Z 78 PC: 12b77 | Find first file (See above)
2018-12-25T12:22:50.273522872Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.276396913Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.279430226Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.282905599Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.28628515Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.289213172Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.292656161Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.295339545Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.298947557Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.303064389Z 47 PC: 12bc3 | Get disk transfer address (See above)
2018-12-25T12:22:50.304233175Z 26 PC: 12bd2 | Set disk transfer address (See above)
2018-12-25T12:22:50.305361568Z 78 PC: 12bda | Find first file (See above)
2018-12-25T12:22:50.311901667Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:50.313628585Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:50.320928459Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:50.325184885Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:50.326763957Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:50.328755275Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:50.331904465Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:50.333774875Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:50.34091174Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:50.34398155Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:50.346578295Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:50.34846494Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:50.351221971Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:50.353785199Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:50.361418785Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:50.369080034Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:50.371628285Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:50.373504134Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:50.376373381Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:50.378295762Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:50.385507724Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:50.392674499Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:50.394572639Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:50.396488715Z 67 PC: 12c44 | Get or set file attributes (See above)
2018-12-25T12:22:50.407562266Z 61 PC: 12c49 | Open file (See above)
2018-12-25T12:22:50.41549955Z 64 PC: 12c55 | Write file or device (See above)
2018-12-25T12:22:50.418576149Z 66 PC: 12c5d | Move file pointer (See above)
2018-12-25T12:22:50.421038577Z 64 PC: 12ff9 | Write file or device (See above)
2018-12-25T12:22:50.431252965Z 87 PC: 12c6d | Get or set file date and time (See above)
2018-12-25T12:22:50.432625022Z 62 PC: 12c71 | Close file (See above)
2018-12-25T12:22:50.441704342Z 67 PC: 12c7e | Get or set file attributes (See above)
2018-12-25T12:22:50.452745498Z 26 PC: 12bec | Set disk transfer address (See above)
2018-12-25T12:22:50.453877638Z 26 PC: 12baf | Set disk transfer address (See above)
2018-12-25T12:22:50.454963341Z 59 PC: 12b53 | Change current directory (See above)
2018-12-25T12:22:50.457004751Z 71 PC: 12b41 | Get current directory (See above)
2018-12-25T12:22:50.459904046Z 59 PC: 12b49 | Change current directory (See above)
2018-12-25T12:22:50.464062324Z 47 PC: 12b5e | Get disk transfer address (See above)
2018-12-25T12:22:50.465309975Z 26 PC: 12b6c | Set disk transfer address (See above)
2018-12-25T12:22:50.466353889Z 78 PC: 12b77 | Find first file (See above)
2018-12-25T12:22:50.472795958Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.475654068Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.47866243Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.481831079Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.485156127Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.487857952Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.490597437Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.493790089Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.496443462Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.498836401Z 47 PC: 12bc3 | Get disk transfer address (See above)
2018-12-25T12:22:50.501149322Z 26 PC: 12bd2 | Set disk transfer address (See above)
2018-12-25T12:22:50.502355964Z 78 PC: 12bda | Find first file (See above)
2018-12-25T12:22:50.509145497Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:50.510909419Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:50.517985192Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:50.520591781Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:50.522790943Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:50.524718279Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:50.527503914Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:50.529332371Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:50.536397073Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:50.539038924Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:50.541184027Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:50.543018565Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:50.545789093Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:50.547336496Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:50.5549525Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:50.557739998Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:50.559749606Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:50.561783597Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:50.564633138Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:50.566441662Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:50.574278256Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:50.580990622Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:50.582754491Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:50.584664466Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:50.587493943Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:50.589099803Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:50.596255185Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:50.603684658Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:50.605732277Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:50.607597158Z 67 PC: 12c44 | Get or set file attributes (See above)
2018-12-25T12:22:50.618329073Z 61 PC: 12c49 | Open file (See above)
2018-12-25T12:22:50.625917287Z 64 PC: 12c55 | Write file or device (See above)
2018-12-25T12:22:50.628989543Z 66 PC: 12c5d | Move file pointer (See above)
2018-12-25T12:22:50.632854994Z 64 PC: 12ff9 | Write file or device (See above)
2018-12-25T12:22:50.643790096Z 87 PC: 12c6d | Get or set file date and time (See above)
2018-12-25T12:22:50.645488801Z 62 PC: 12c71 | Close file (See above)
2018-12-25T12:22:50.653927228Z 67 PC: 12c7e | Get or set file attributes (See above)
2018-12-25T12:22:50.665327531Z 26 PC: 12bec | Set disk transfer address (See above)
2018-12-25T12:22:50.666406113Z 26 PC: 12baf | Set disk transfer address (See above)
2018-12-25T12:22:50.667594711Z 59 PC: 12b53 | Change current directory (See above)
2018-12-25T12:22:50.670054225Z 42 PC: 12a86 | Get date 0x12a86: cmp dh, 2
0x12a89: jb 0x12a9c
0x12a8b: cmp dl, 0xc
0x12a8e: jb 0x12a9c
0x12a90: mov ah, 0x2c
0x12a92: int 0x21
0x12a94: cmp dl, 0xa
0x12a97: ja 0x12a9c
0x12a99: jmp 0x12ab2
0x12a9b: nop
0x12a9c: pop dx
0x12a9d: mov ah, 0x1a
0x12a9f: int 0x21
0x12aa1: mov sp, bp
0x12aa3: xor ax, ax
0x12aa5: mov bx, ax
0x12aa7: mov cx, ax
0x12aa9: mov dx, ax
0x12aab: mov si, ax
0x12aad: mov di, ax
2018-12-25T12:22:50.672372219Z 26 PC: 12aa1 | Set disk transfer address

{"DateBased":true,"Day":1,"Month":2,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":9296,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:22:50.196334588Z 47 PC: 12a6b | Get disk transfer address
2018-12-25T12:22:50.197798247Z 26 PC: 12a73 | Set disk transfer address
2018-12-25T12:22:50.199174712Z 71 PC: 12b41 | Get current directory
2018-12-25T12:22:50.20224539Z 59 PC: 12b49 | Change current directory
2018-12-25T12:22:50.206505764Z 47 PC: 12b5e | Get disk transfer address
2018-12-25T12:22:50.207756197Z 26 PC: 12b6c | Set disk transfer address
2018-12-25T12:22:50.208813983Z 78 PC: 12b77 | Find first file
2018-12-25T12:22:50.221273884Z 79 PC: 12b9f | Find next file
2018-12-25T12:22:50.224520872Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.227467411Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.230130506Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.23317527Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.236911241Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.23982149Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.243362756Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.246497885Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.249465625Z 47 PC: 12bc3 | Get disk transfer address
2018-12-25T12:22:50.251905514Z 26 PC: 12bd2 | Set disk transfer address
2018-12-25T12:22:50.252992639Z 78 PC: 12bda | Find first file
2018-12-25T12:22:50.259878334Z 47 PC: 12bf2 | Get disk transfer address
2018-12-25T12:22:50.261313395Z 61 PC: 12c0b | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:22:50.269109602Z 63 PC: 12c17 | Read file or device (Read 3 bytes on handle 5)
2018-12-25T12:22:50.276591393Z 66 PC: 12c1f | Move file pointer
2018-12-25T12:22:50.278471497Z 62 PC: 12c24 | Close file
2018-12-25T12:22:50.281452891Z 67 PC: 12c44 | Get or set file attributes
2018-12-25T12:22:50.298485364Z 61 PC: 12c49 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:22:50.30587467Z 64 PC: 12c55 | Write file or device (Write 3 bytes on handle 5)
2018-12-25T12:22:50.309569583Z 66 PC: 12c5d | Move file pointer
2018-12-25T12:22:50.312674804Z 64 PC: 12ff9 | Write file or device (Write 1442 bytes on handle 5)
2018-12-25T12:22:50.322928363Z 87 PC: 12c6d | Get or set file date and time
2018-12-25T12:22:50.325349256Z 62 PC: 12c71 | Close file
2018-12-25T12:22:50.333792773Z 67 PC: 12c7e | Get or set file attributes
2018-12-25T12:22:50.34506973Z 26 PC: 12bec | Set disk transfer address
2018-12-25T12:22:50.348055175Z 26 PC: 12baf | Set disk transfer address
2018-12-25T12:22:50.349345433Z 59 PC: 12b53 | Change current directory
2018-12-25T12:22:50.351363002Z 71 PC: 12b41 | Get current directory (See above)
2018-12-25T12:22:50.355516721Z 59 PC: 12b49 | Change current directory (See above)
2018-12-25T12:22:50.359864327Z 47 PC: 12b5e | Get disk transfer address (See above)
2018-12-25T12:22:50.360963385Z 26 PC: 12b6c | Set disk transfer address (See above)
2018-12-25T12:22:50.36222961Z 78 PC: 12b77 | Find first file (See above)
2018-12-25T12:22:50.368990597Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.371682802Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.374571582Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.378461194Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.381713485Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.384949172Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.388520636Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.391233518Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.393879739Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.397294984Z 47 PC: 12bc3 | Get disk transfer address (See above)
2018-12-25T12:22:50.398440389Z 26 PC: 12bd2 | Set disk transfer address (See above)
2018-12-25T12:22:50.399492209Z 78 PC: 12bda | Find first file (See above)
2018-12-25T12:22:50.406351235Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:50.407534561Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:50.414820114Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:50.422893263Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:50.42434332Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:50.426226038Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:50.429228423Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:50.430857533Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:50.438122509Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:50.445050727Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:50.447006846Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:50.448838064Z 67 PC: 12c44 | Get or set file attributes (See above)
2018-12-25T12:22:50.459782163Z 61 PC: 12c49 | Open file (See above)
2018-12-25T12:22:50.467512054Z 64 PC: 12c55 | Write file or device (See above)
2018-12-25T12:22:50.470563967Z 66 PC: 12c5d | Move file pointer (See above)
2018-12-25T12:22:50.47319277Z 64 PC: 12ff9 | Write file or device (See above)
2018-12-25T12:22:50.493292558Z 87 PC: 12c6d | Get or set file date and time (See above)
2018-12-25T12:22:50.495098953Z 62 PC: 12c71 | Close file (See above)
2018-12-25T12:22:50.503672782Z 67 PC: 12c7e | Get or set file attributes (See above)
2018-12-25T12:22:50.514929333Z 26 PC: 12bec | Set disk transfer address (See above)
2018-12-25T12:22:50.516127033Z 26 PC: 12baf | Set disk transfer address (See above)
2018-12-25T12:22:50.517277963Z 59 PC: 12b53 | Change current directory (See above)
2018-12-25T12:22:50.519616572Z 71 PC: 12b41 | Get current directory (See above)
2018-12-25T12:22:50.522745524Z 59 PC: 12b49 | Change current directory (See above)
2018-12-25T12:22:50.527105079Z 47 PC: 12b5e | Get disk transfer address (See above)
2018-12-25T12:22:50.528572573Z 26 PC: 12b6c | Set disk transfer address (See above)
2018-12-25T12:22:50.529669296Z 78 PC: 12b77 | Find first file (See above)
2018-12-25T12:22:50.541289205Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.545147788Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.547918486Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.550592101Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.553370435Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.556637533Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.559335543Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.562145169Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.565014676Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.567387401Z 47 PC: 12bc3 | Get disk transfer address (See above)
2018-12-25T12:22:50.56848331Z 26 PC: 12bd2 | Set disk transfer address (See above)
2018-12-25T12:22:50.570102719Z 78 PC: 12bda | Find first file (See above)
2018-12-25T12:22:50.576418297Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:50.577679806Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:50.585198311Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:50.595270637Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:50.59671393Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:50.600086879Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:50.603171341Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:50.604413622Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:50.613055685Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:50.620572461Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:50.6225939Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:50.62543883Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:50.628396694Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:50.629729441Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:50.637540616Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:50.644604185Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:50.645995242Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:50.648167382Z 67 PC: 12c44 | Get or set file attributes (See above)
2018-12-25T12:22:50.660089462Z 61 PC: 12c49 | Open file (See above)
2018-12-25T12:22:50.667633536Z 64 PC: 12c55 | Write file or device (See above)
2018-12-25T12:22:50.671281806Z 66 PC: 12c5d | Move file pointer (See above)
2018-12-25T12:22:50.674753735Z 64 PC: 12ff9 | Write file or device (See above)
2018-12-25T12:22:50.685966469Z 87 PC: 12c6d | Get or set file date and time (See above)
2018-12-25T12:22:50.688272623Z 62 PC: 12c71 | Close file (See above)
2018-12-25T12:22:50.696903111Z 67 PC: 12c7e | Get or set file attributes (See above)
2018-12-25T12:22:50.707824129Z 26 PC: 12bec | Set disk transfer address (See above)
2018-12-25T12:22:50.713719345Z 26 PC: 12baf | Set disk transfer address (See above)
2018-12-25T12:22:50.71500398Z 59 PC: 12b53 | Change current directory (See above)
2018-12-25T12:22:50.717007442Z 71 PC: 12b41 | Get current directory (See above)
2018-12-25T12:22:50.720743929Z 59 PC: 12b49 | Change current directory (See above)
2018-12-25T12:22:50.725883298Z 47 PC: 12b5e | Get disk transfer address (See above)
2018-12-25T12:22:50.727752414Z 26 PC: 12b6c | Set disk transfer address (See above)
2018-12-25T12:22:50.729701415Z 78 PC: 12b77 | Find first file (See above)
2018-12-25T12:22:50.742555783Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.746056312Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.749154699Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.752762641Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.755647932Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.758763554Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.761838031Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.764830893Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.768776598Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.772083253Z 47 PC: 12bc3 | Get disk transfer address (See above)
2018-12-25T12:22:50.773745485Z 26 PC: 12bd2 | Set disk transfer address (See above)
2018-12-25T12:22:50.775555522Z 78 PC: 12bda | Find first file (See above)
2018-12-25T12:22:50.78328954Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:50.784596104Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:50.795162038Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:50.803820503Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:50.805738503Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:50.808102291Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:50.811564408Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:50.812878965Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:50.821068954Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:50.82956765Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:50.831201983Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:50.833591392Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:50.837284128Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:50.838935157Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:50.84737847Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:50.857394485Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:50.869632768Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:50.871709236Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:50.876398419Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:50.877798949Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:50.885944386Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:50.89383856Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:50.895596084Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:50.897622424Z 67 PC: 12c44 | Get or set file attributes (See above)
2018-12-25T12:22:50.90963887Z 61 PC: 12c49 | Open file (See above)
2018-12-25T12:22:50.917607548Z 64 PC: 12c55 | Write file or device (See above)
2018-12-25T12:22:50.920844898Z 66 PC: 12c5d | Move file pointer (See above)
2018-12-25T12:22:50.924500598Z 64 PC: 12ff9 | Write file or device (See above)
2018-12-25T12:22:50.934789341Z 87 PC: 12c6d | Get or set file date and time (See above)
2018-12-25T12:22:50.93659049Z 62 PC: 12c71 | Close file (See above)
2018-12-25T12:22:50.946327799Z 67 PC: 12c7e | Get or set file attributes (See above)
2018-12-25T12:22:50.958061825Z 26 PC: 12bec | Set disk transfer address (See above)
2018-12-25T12:22:50.959610334Z 26 PC: 12baf | Set disk transfer address (See above)
2018-12-25T12:22:50.962001973Z 59 PC: 12b53 | Change current directory (See above)
2018-12-25T12:22:50.964169888Z 71 PC: 12b41 | Get current directory (See above)
2018-12-25T12:22:50.967450734Z 59 PC: 12b49 | Change current directory (See above)
2018-12-25T12:22:50.973127566Z 47 PC: 12b5e | Get disk transfer address (See above)
2018-12-25T12:22:50.974463077Z 26 PC: 12b6c | Set disk transfer address (See above)
2018-12-25T12:22:50.975726776Z 78 PC: 12b77 | Find first file (See above)
2018-12-25T12:22:50.983706151Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.986948308Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.990193631Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.993630491Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.998270681Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:51.001482092Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:51.003819399Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:51.007008626Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:51.009828066Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:51.012295432Z 47 PC: 12bc3 | Get disk transfer address (See above)
2018-12-25T12:22:51.013803897Z 26 PC: 12bd2 | Set disk transfer address (See above)
2018-12-25T12:22:51.014933227Z 78 PC: 12bda | Find first file (See above)
2018-12-25T12:22:51.022143226Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:51.023556592Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:51.03084408Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:51.033706319Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:51.036101126Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:51.03806641Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:51.04106878Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:51.042816808Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:51.049938285Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:51.052636872Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:51.054525061Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:51.056450216Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:51.059621365Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:51.061448452Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:51.068474837Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:51.071269346Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:51.073865013Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:51.075779115Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:51.078435351Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:51.080646251Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:51.08782371Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:51.095291872Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:51.097702119Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:51.099710826Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:51.102677486Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:51.104804049Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:51.112566562Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:51.120532973Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:51.123105727Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:51.125186409Z 67 PC: 12c44 | Get or set file attributes (See above)
2018-12-25T12:22:51.136221795Z 61 PC: 12c49 | Open file (See above)
2018-12-25T12:22:51.143973857Z 64 PC: 12c55 | Write file or device (See above)
2018-12-25T12:22:51.147272314Z 66 PC: 12c5d | Move file pointer (See above)
2018-12-25T12:22:51.150106952Z 64 PC: 12ff9 | Write file or device (See above)
2018-12-25T12:22:51.161253538Z 87 PC: 12c6d | Get or set file date and time (See above)
2018-12-25T12:22:51.162870642Z 62 PC: 12c71 | Close file (See above)
2018-12-25T12:22:51.17801213Z 67 PC: 12c7e | Get or set file attributes (See above)
2018-12-25T12:22:51.190224474Z 26 PC: 12bec | Set disk transfer address (See above)
2018-12-25T12:22:51.191840848Z 26 PC: 12baf | Set disk transfer address (See above)
2018-12-25T12:22:51.193463046Z 59 PC: 12b53 | Change current directory (See above)
2018-12-25T12:22:51.1961703Z 42 PC: 12a86 | Get date 0x12a86: cmp dh, 2
0x12a89: jb 0x12a9c
0x12a8b: cmp dl, 0xc
0x12a8e: jb 0x12a9c
0x12a90: mov ah, 0x2c
0x12a92: int 0x21
0x12a94: cmp dl, 0xa
0x12a97: ja 0x12a9c
0x12a99: jmp 0x12ab2
0x12a9b: nop
0x12a9c: pop dx
0x12a9d: mov ah, 0x1a
0x12a9f: int 0x21
0x12aa1: mov sp, bp
0x12aa3: xor ax, ax
0x12aa5: mov bx, ax
0x12aa7: mov cx, ax
0x12aa9: mov dx, ax
0x12aab: mov si, ax
0x12aad: mov di, ax
2018-12-25T12:22:51.199411362Z 26 PC: 12aa1 | Set disk transfer address

{"DateBased":true,"Day":12,"Month":2,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":9296,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:22:50.657921964Z 47 PC: 12a6b | Get disk transfer address
2018-12-25T12:22:50.659582164Z 26 PC: 12a73 | Set disk transfer address
2018-12-25T12:22:50.661624747Z 71 PC: 12b41 | Get current directory
2018-12-25T12:22:50.664798323Z 59 PC: 12b49 | Change current directory
2018-12-25T12:22:50.676223705Z 47 PC: 12b5e | Get disk transfer address
2018-12-25T12:22:50.678163678Z 26 PC: 12b6c | Set disk transfer address
2018-12-25T12:22:50.679863359Z 78 PC: 12b77 | Find first file
2018-12-25T12:22:50.686837199Z 79 PC: 12b9f | Find next file
2018-12-25T12:22:50.689918197Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.692741533Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.695461377Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.698753969Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.701494303Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.70414993Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.707167432Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.710263688Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.713220009Z 47 PC: 12bc3 | Get disk transfer address
2018-12-25T12:22:50.715990447Z 26 PC: 12bd2 | Set disk transfer address
2018-12-25T12:22:50.717599033Z 78 PC: 12bda | Find first file
2018-12-25T12:22:50.725408505Z 47 PC: 12bf2 | Get disk transfer address
2018-12-25T12:22:50.727509926Z 61 PC: 12c0b | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:22:50.734929009Z 63 PC: 12c17 | Read file or device (Read 3 bytes on handle 5)
2018-12-25T12:22:50.741950476Z 66 PC: 12c1f | Move file pointer
2018-12-25T12:22:50.743962278Z 62 PC: 12c24 | Close file
2018-12-25T12:22:50.746093612Z 67 PC: 12c44 | Get or set file attributes
2018-12-25T12:22:50.762942533Z 61 PC: 12c49 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:22:50.771374277Z 64 PC: 12c55 | Write file or device (Write 3 bytes on handle 5)
2018-12-25T12:22:50.774710501Z 66 PC: 12c5d | Move file pointer
2018-12-25T12:22:50.777870647Z 64 PC: 12ff9 | Write file or device (Write 1442 bytes on handle 5)
2018-12-25T12:22:50.788666979Z 87 PC: 12c6d | Get or set file date and time
2018-12-25T12:22:50.790912473Z 62 PC: 12c71 | Close file
2018-12-25T12:22:50.800095953Z 67 PC: 12c7e | Get or set file attributes
2018-12-25T12:22:50.81128016Z 26 PC: 12bec | Set disk transfer address
2018-12-25T12:22:50.813606718Z 26 PC: 12baf | Set disk transfer address
2018-12-25T12:22:50.815217883Z 59 PC: 12b53 | Change current directory
2018-12-25T12:22:50.817560595Z 71 PC: 12b41 | Get current directory (See above)
2018-12-25T12:22:50.82126998Z 59 PC: 12b49 | Change current directory (See above)
2018-12-25T12:22:50.826085955Z 47 PC: 12b5e | Get disk transfer address (See above)
2018-12-25T12:22:50.827687838Z 26 PC: 12b6c | Set disk transfer address (See above)
2018-12-25T12:22:50.830285972Z 78 PC: 12b77 | Find first file (See above)
2018-12-25T12:22:50.837300076Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.840454267Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.844433249Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.847836871Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.850467944Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.853227525Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.856146945Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.858735938Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.861307117Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:50.864108188Z 47 PC: 12bc3 | Get disk transfer address (See above)
2018-12-25T12:22:50.865800878Z 26 PC: 12bd2 | Set disk transfer address (See above)
2018-12-25T12:22:50.868372708Z 78 PC: 12bda | Find first file (See above)
2018-12-25T12:22:50.875734104Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:50.877311431Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:50.884499045Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:50.891855777Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:50.893474789Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:50.895507347Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:50.899748965Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:50.901416654Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:50.909088956Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:50.917213284Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:50.918950347Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:50.920967616Z 67 PC: 12c44 | Get or set file attributes (See above)
2018-12-25T12:22:50.932143243Z 61 PC: 12c49 | Open file (See above)
2018-12-25T12:22:50.940747848Z 64 PC: 12c55 | Write file or device (See above)
2018-12-25T12:22:50.943778831Z 66 PC: 12c5d | Move file pointer (See above)
2018-12-25T12:22:50.946718958Z 64 PC: 12ff9 | Write file or device (See above)
2018-12-25T12:22:50.957804019Z 87 PC: 12c6d | Get or set file date and time (See above)
2018-12-25T12:22:50.959637631Z 62 PC: 12c71 | Close file (See above)
2018-12-25T12:22:50.968354047Z 67 PC: 12c7e | Get or set file attributes (See above)
2018-12-25T12:22:50.980614941Z 26 PC: 12bec | Set disk transfer address (See above)
2018-12-25T12:22:50.982260862Z 26 PC: 12baf | Set disk transfer address (See above)
2018-12-25T12:22:50.98340231Z 59 PC: 12b53 | Change current directory (See above)
2018-12-25T12:22:50.985448792Z 71 PC: 12b41 | Get current directory (See above)
2018-12-25T12:22:50.987881101Z 59 PC: 12b49 | Change current directory (See above)
2018-12-25T12:22:50.992447139Z 47 PC: 12b5e | Get disk transfer address (See above)
2018-12-25T12:22:50.994010293Z 26 PC: 12b6c | Set disk transfer address (See above)
2018-12-25T12:22:50.995207957Z 78 PC: 12b77 | Find first file (See above)
2018-12-25T12:22:51.003085133Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:51.006427645Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:51.009444119Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:51.012587304Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:51.015578366Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:51.019368026Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:51.022028534Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:51.02467144Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:51.02777468Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:51.030172081Z 47 PC: 12bc3 | Get disk transfer address (See above)
2018-12-25T12:22:51.031148887Z 26 PC: 12bd2 | Set disk transfer address (See above)
2018-12-25T12:22:51.032736979Z 78 PC: 12bda | Find first file (See above)
2018-12-25T12:22:51.039363015Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:51.040591836Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:51.04843708Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:51.055423222Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:51.056732782Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:51.059477307Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:51.062433637Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:51.063754152Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:51.072812146Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:51.081224286Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:51.082884213Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:51.085109434Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:51.08872904Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:51.090326714Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:51.097699679Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:51.105896213Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:51.107590886Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:51.109643516Z 67 PC: 12c44 | Get or set file attributes (See above)
2018-12-25T12:22:51.121523999Z 61 PC: 12c49 | Open file (See above)
2018-12-25T12:22:51.12908413Z 64 PC: 12c55 | Write file or device (See above)
2018-12-25T12:22:51.1321135Z 66 PC: 12c5d | Move file pointer (See above)
2018-12-25T12:22:51.136509355Z 64 PC: 12ff9 | Write file or device (See above)
2018-12-25T12:22:51.148404941Z 87 PC: 12c6d | Get or set file date and time (See above)
2018-12-25T12:22:51.150155104Z 62 PC: 12c71 | Close file (See above)
2018-12-25T12:22:51.160809479Z 67 PC: 12c7e | Get or set file attributes (See above)
2018-12-25T12:22:51.172271707Z 26 PC: 12bec | Set disk transfer address (See above)
2018-12-25T12:22:51.173555725Z 26 PC: 12baf | Set disk transfer address (See above)
2018-12-25T12:22:51.17543623Z 59 PC: 12b53 | Change current directory (See above)
2018-12-25T12:22:51.177595859Z 71 PC: 12b41 | Get current directory (See above)
2018-12-25T12:22:51.18069424Z 59 PC: 12b49 | Change current directory (See above)
2018-12-25T12:22:51.18584672Z 47 PC: 12b5e | Get disk transfer address (See above)
2018-12-25T12:22:51.187399477Z 26 PC: 12b6c | Set disk transfer address (See above)
2018-12-25T12:22:51.18868214Z 78 PC: 12b77 | Find first file (See above)
2018-12-25T12:22:51.203016748Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:51.206116941Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:51.209415434Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:51.213524503Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:51.217283406Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:51.220549981Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:51.224009254Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:51.228081688Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:51.231721391Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:51.23490355Z 47 PC: 12bc3 | Get disk transfer address (See above)
2018-12-25T12:22:51.236978932Z 26 PC: 12bd2 | Set disk transfer address (See above)
2018-12-25T12:22:51.238460969Z 78 PC: 12bda | Find first file (See above)
2018-12-25T12:22:51.245375741Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:51.24741041Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:51.254653625Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:51.261929431Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:51.264857312Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:51.266931838Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:51.270030921Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:51.272433081Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:51.28118353Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:51.288306166Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:51.290474653Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:51.292538278Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:51.295495957Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:51.297558307Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:51.304826833Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:51.31171938Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:51.31422424Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:51.316215417Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:51.319021235Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:51.320610939Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:51.328028595Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:51.335167195Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:51.33743952Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:51.340101038Z 67 PC: 12c44 | Get or set file attributes (See above)
2018-12-25T12:22:51.351841632Z 61 PC: 12c49 | Open file (See above)
2018-12-25T12:22:51.361163526Z 64 PC: 12c55 | Write file or device (See above)
2018-12-25T12:22:51.364683215Z 66 PC: 12c5d | Move file pointer (See above)
2018-12-25T12:22:51.367818378Z 64 PC: 12ff9 | Write file or device (See above)
2018-12-25T12:22:51.378944089Z 87 PC: 12c6d | Get or set file date and time (See above)
2018-12-25T12:22:51.380474804Z 62 PC: 12c71 | Close file (See above)
2018-12-25T12:22:51.38921955Z 67 PC: 12c7e | Get or set file attributes (See above)
2018-12-25T12:22:51.401066602Z 26 PC: 12bec | Set disk transfer address (See above)
2018-12-25T12:22:51.402712469Z 26 PC: 12baf | Set disk transfer address (See above)
2018-12-25T12:22:51.404312335Z 59 PC: 12b53 | Change current directory (See above)
2018-12-25T12:22:51.407145112Z 71 PC: 12b41 | Get current directory (See above)
2018-12-25T12:22:51.411356756Z 59 PC: 12b49 | Change current directory (See above)
2018-12-25T12:22:51.416212196Z 47 PC: 12b5e | Get disk transfer address (See above)
2018-12-25T12:22:51.41847467Z 26 PC: 12b6c | Set disk transfer address (See above)
2018-12-25T12:22:51.419985626Z 78 PC: 12b77 | Find first file (See above)
2018-12-25T12:22:51.426980569Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:51.431143603Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:51.434249805Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:51.43710523Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:51.441029514Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:51.444169903Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:51.44685291Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:51.450030851Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:51.45279698Z 79 PC: 12b9f | Find next file (See above)
2018-12-25T12:22:51.45537458Z 47 PC: 12bc3 | Get disk transfer address (See above)
2018-12-25T12:22:51.457555072Z 26 PC: 12bd2 | Set disk transfer address (See above)
2018-12-25T12:22:51.459244259Z 78 PC: 12bda | Find first file (See above)
2018-12-25T12:22:51.465919025Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:51.46814787Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:51.475602904Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:51.47924847Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:51.481054988Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:51.484804802Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:51.487858375Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:51.489584932Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:51.497584942Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:51.500637384Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:51.502287157Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:51.505068448Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:51.508093817Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:51.50951023Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:51.52342664Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:51.527229182Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:51.529294324Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:51.532405058Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:51.535492631Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:51.536842798Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:51.545172256Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:51.552417926Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:51.554329632Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:51.558260044Z 79 PC: 12bda | Find next file (See above)
2018-12-25T12:22:51.571629187Z 47 PC: 12bf2 | Get disk transfer address (See above)
2018-12-25T12:22:51.573295516Z 61 PC: 12c0b | Open file (See above)
2018-12-25T12:22:51.582403932Z 63 PC: 12c17 | Read file or device (See above)
2018-12-25T12:22:51.589779395Z 66 PC: 12c1f | Move file pointer (See above)
2018-12-25T12:22:51.59176941Z 62 PC: 12c24 | Close file (See above)
2018-12-25T12:22:51.595311483Z 67 PC: 12c44 | Get or set file attributes (See above)
2018-12-25T12:22:52.276840082Z 61 PC: 12c49 | Open file (See above)
2018-12-25T12:22:52.284160067Z 64 PC: 12c55 | Write file or device (See above)
2018-12-25T12:22:52.287703649Z 66 PC: 12c5d | Move file pointer (See above)
2018-12-25T12:22:52.290976092Z 64 PC: 12ff9 | Write file or device (See above)
2018-12-25T12:22:52.562696646Z 87 PC: 12c6d | Get or set file date and time (See above)
2018-12-25T12:22:52.565788458Z 62 PC: 12c71 | Close file (See above)
2018-12-25T12:22:52.87095129Z 67 PC: 12c7e | Get or set file attributes (See above)
2018-12-25T12:22:53.196989371Z 26 PC: 12bec | Set disk transfer address (See above)
2018-12-25T12:22:53.198930375Z 26 PC: 12baf | Set disk transfer address (See above)
2018-12-25T12:22:53.200389147Z 59 PC: 12b53 | Change current directory (See above)
2018-12-25T12:22:53.202398596Z 42 PC: 12a86 | Get date 0x12a86: cmp dh, 2
0x12a89: jb 0x12a9c
0x12a8b: cmp dl, 0xc
0x12a8e: jb 0x12a9c
0x12a90: mov ah, 0x2c
0x12a92: int 0x21
0x12a94: cmp dl, 0xa
0x12a97: ja 0x12a9c
0x12a99: jmp 0x12ab2
0x12a9b: nop
0x12a9c: pop dx
0x12a9d: mov ah, 0x1a
0x12a9f: int 0x21
0x12aa1: mov sp, bp
0x12aa3: xor ax, ax
0x12aa5: mov bx, ax
0x12aa7: mov cx, ax
0x12aa9: mov dx, ax
0x12aab: mov si, ax
0x12aad: mov di, ax
2018-12-25T12:22:53.205739322Z 44 PC: 12a94 | Get time 0x12a94: cmp dl, 0xa
0x12a97: ja 0x12a9c
0x12a99: jmp 0x12ab2
0x12a9b: nop
0x12a9c: pop dx
0x12a9d: mov ah, 0x1a
0x12a9f: int 0x21
0x12aa1: mov sp, bp
0x12aa3: xor ax, ax
0x12aa5: mov bx, ax
0x12aa7: mov cx, ax
0x12aa9: mov dx, ax
0x12aab: mov si, ax
0x12aad: mov di, ax
0x12aaf: mov bp, ax
0x12ab1: ret
0x12ab2: mov ah, 0xf
0x12ab4: int 0x10
0x12ab6: xor ah, ah
0x12ab8: int 0x10
2018-12-25T12:22:53.208389063Z 26 PC: 12aa1 | Set disk transfer address