{"DateBased":true,"Day":1,"Month":4,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":1005,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T11:42:23.9207107Z | 26 | PC: 12aa0 | Set disk transfer address |
| 2018-12-25T11:42:23.922308375Z | 71 | PC: 12ab2 | Get current directory |
| 2018-12-25T11:42:23.925343908Z | 42 | PC: 12ab8 | Get date 0x12ab8: cmp dh, 4 0x12abb: jne 0x12ad6 0x12abd: cmp dl, 0xf 0x12ac0: jne 0x12ad6 0x12ac2: mov ax, 0x1010 0x12ac5: out 0x70, ax 0x12ac7: mov dx, 0x349 0x12aca: mov ah, 9 0x12acc: int 0x21 0x12ace: mov ah, 8 0x12ad0: int 0x21 0x12ad2: mov al, 0xfe 0x12ad4: out 0x64, al 0x12ad6: mov ah, byte ptr [0x378] 0x12ada: mov cl, 7 0x12adc: mov dx, 0x33d 0x12adf: int 0x21 0x12ae1: jae 0x12ae6 0x12ae3: jmp 0x12c22 0x12ae6: mov dx, word ptr [0x36c] |
| 2018-12-25T11:42:23.927398887Z | 78 | PC: 12ae1 | Find first file |
| 2018-12-25T11:42:23.93354233Z | 67 | PC: 12afd | Get or set file attributes |
| 2018-12-25T11:42:24.260381677Z | 61 | PC: 12b11 | Open file (Filename = 'SLEEP.COM') |
| 2018-12-25T11:42:24.266967451Z | 63 | PC: 12b2e | Read file or device (Read 691 bytes on handle 5) |
| 2018-12-25T11:42:24.273940518Z | 66 | PC: 12b4d | Move file pointer |
| 2018-12-25T11:42:24.275775687Z | 66 | PC: 12b6f | Move file pointer |
| 2018-12-25T11:42:24.277656373Z | 64 | PC: 12b8a | Write file or device (Write 407 bytes on handle 5) |
| 2018-12-25T11:42:24.28571605Z | 64 | PC: 12b9a | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-25T11:42:24.289687764Z | 66 | PC: 12bca | Move file pointer |
| 2018-12-25T11:42:24.29115234Z | 64 | PC: 12bdc | Write file or device (Write 691 bytes on handle 5) |
| 2018-12-25T11:42:24.299261974Z | 87 | PC: 12bed | Get or set file date and time |
| 2018-12-25T11:42:24.302095286Z | 62 | PC: 12bf3 | Close file |
| 2018-12-25T11:42:24.309936951Z | 67 | PC: 12c05 | Get or set file attributes |
| 2018-12-25T11:42:24.319759282Z | 79 | PC: 12ae1 | Find next file (See above) |
| 2018-12-25T11:42:24.323050544Z | 67 | PC: 12afd | Get or set file attributes (See above) |
| 2018-12-25T11:42:24.332503878Z | 61 | PC: 12b11 | Open file (See above) |
| 2018-12-25T11:42:24.339130251Z | 63 | PC: 12b2e | Read file or device (See above) |
| 2018-12-25T11:42:24.346185343Z | 66 | PC: 12b4d | Move file pointer (See above) |
| 2018-12-25T11:42:24.34755208Z | 66 | PC: 12b6f | Move file pointer (See above) |
| 2018-12-25T11:42:24.34888796Z | 64 | PC: 12b8a | Write file or device (See above) |
| 2018-12-25T11:42:24.352988044Z | 64 | PC: 12b9a | Write file or device (See above) |
| 2018-12-25T11:42:24.356459841Z | 66 | PC: 12bca | Move file pointer (See above) |
| 2018-12-25T11:42:24.357713685Z | 64 | PC: 12bdc | Write file or device (See above) |
| 2018-12-25T11:42:24.365275312Z | 87 | PC: 12bed | Get or set file date and time (See above) |
| 2018-12-25T11:42:24.367289887Z | 62 | PC: 12bf3 | Close file (See above) |
| 2018-12-25T11:42:24.372495168Z | 67 | PC: 12c05 | Get or set file attributes (See above) |
| 2018-12-25T11:42:24.380951144Z | 79 | PC: 12ae1 | Find next file (See above) |
| 2018-12-25T11:42:24.385498937Z | 67 | PC: 12afd | Get or set file attributes (See above) |
| 2018-12-25T11:42:24.392114657Z | 61 | PC: 12b11 | Open file (See above) |
| 2018-12-25T11:42:24.396821843Z | 63 | PC: 12b2e | Read file or device (See above) |
| 2018-12-25T11:42:24.401284852Z | 66 | PC: 12b4d | Move file pointer (See above) |
| 2018-12-25T11:42:24.402962376Z | 66 | PC: 12b6f | Move file pointer (See above) |
| 2018-12-25T11:42:24.405019736Z | 64 | PC: 12b8a | Write file or device (See above) |
| 2018-12-25T11:42:24.408924112Z | 64 | PC: 12b9a | Write file or device (See above) |
| 2018-12-25T11:42:24.411085066Z | 66 | PC: 12bca | Move file pointer (See above) |
| 2018-12-25T11:42:24.4124019Z | 64 | PC: 12bdc | Write file or device (See above) |
| 2018-12-25T11:42:24.417763441Z | 87 | PC: 12bed | Get or set file date and time (See above) |
| 2018-12-25T11:42:24.4188441Z | 62 | PC: 12bf3 | Close file (See above) |
| 2018-12-25T11:42:24.423817575Z | 67 | PC: 12c05 | Get or set file attributes (See above) |
| 2018-12-25T11:42:24.432357967Z | 79 | PC: 12ae1 | Find next file (See above) |
| 2018-12-25T11:42:24.435097176Z | 67 | PC: 12afd | Get or set file attributes (See above) |
| 2018-12-25T11:42:24.44412763Z | 61 | PC: 12b11 | Open file (See above) |
| 2018-12-25T11:42:24.449440261Z | 63 | PC: 12b2e | Read file or device (See above) |
| 2018-12-25T11:42:24.454049496Z | 66 | PC: 12b4d | Move file pointer (See above) |
| 2018-12-25T11:42:24.456162686Z | 66 | PC: 12b6f | Move file pointer (See above) |
| 2018-12-25T11:42:24.458198431Z | 64 | PC: 12b8a | Write file or device (See above) |
| 2018-12-25T11:42:24.461936505Z | 64 | PC: 12b9a | Write file or device (See above) |
| 2018-12-25T11:42:24.465593918Z | 66 | PC: 12bca | Move file pointer (See above) |
| 2018-12-25T11:42:24.467947505Z | 64 | PC: 12bdc | Write file or device (See above) |
| 2018-12-25T11:42:24.47548829Z | 87 | PC: 12bed | Get or set file date and time (See above) |
| 2018-12-25T11:42:24.477233372Z | 62 | PC: 12bf3 | Close file (See above) |
| 2018-12-25T11:42:24.485493385Z | 67 | PC: 12c05 | Get or set file attributes (See above) |
| 2018-12-25T11:42:24.495620117Z | 79 | PC: 12ae1 | Find next file (See above) |
| 2018-12-25T11:42:24.498456439Z | 67 | PC: 12afd | Get or set file attributes (See above) |
| 2018-12-25T11:42:24.507372753Z | 61 | PC: 12b11 | Open file (See above) |
| 2018-12-25T11:42:24.511618871Z | 63 | PC: 12b2e | Read file or device (See above) |
| 2018-12-25T11:42:24.515759923Z | 66 | PC: 12b4d | Move file pointer (See above) |
| 2018-12-25T11:42:24.517720309Z | 66 | PC: 12b6f | Move file pointer (See above) |
| 2018-12-25T11:42:24.519018393Z | 64 | PC: 12b8a | Write file or device (See above) |
| 2018-12-25T11:42:24.522510853Z | 64 | PC: 12b9a | Write file or device (See above) |
| 2018-12-25T11:42:24.525747079Z | 66 | PC: 12bca | Move file pointer (See above) |
| 2018-12-25T11:42:24.526960431Z | 64 | PC: 12bdc | Write file or device (See above) |
| 2018-12-25T11:42:24.534143025Z | 87 | PC: 12bed | Get or set file date and time (See above) |
| 2018-12-25T11:42:24.536805767Z | 62 | PC: 12bf3 | Close file (See above) |
| 2018-12-25T11:42:24.543999348Z | 67 | PC: 12c05 | Get or set file attributes (See above) |
| 2018-12-25T11:42:24.553412422Z | 59 | PC: 12c2b | Change current directory |
| 2018-12-25T11:42:24.56265147Z | 26 | PC: 12c48 | Set disk transfer address |
| 2018-12-25T11:42:24.565529378Z | 59 | PC: 12c53 | Change current directory |
{"DateBased":true,"Day":15,"Month":4,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":1005,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T11:42:24.313292644Z | 26 | PC: 12aa0 | Set disk transfer address |
| 2018-12-25T11:42:24.315175426Z | 71 | PC: 12ab2 | Get current directory |
| 2018-12-25T11:42:24.317816043Z | 42 | PC: 12ab8 | Get date 0x12ab8: cmp dh, 4 0x12abb: jne 0x12ad6 0x12abd: cmp dl, 0xf 0x12ac0: jne 0x12ad6 0x12ac2: mov ax, 0x1010 0x12ac5: out 0x70, ax 0x12ac7: mov dx, 0x349 0x12aca: mov ah, 9 0x12acc: int 0x21 0x12ace: mov ah, 8 0x12ad0: int 0x21 0x12ad2: mov al, 0xfe 0x12ad4: out 0x64, al 0x12ad6: mov ah, byte ptr [0x378] 0x12ada: mov cl, 7 0x12adc: mov dx, 0x33d 0x12adf: int 0x21 0x12ae1: jae 0x12ae6 0x12ae3: jmp 0x12c22 0x12ae6: mov dx, word ptr [0x36c] |
| 2018-12-25T11:42:24.319770272Z | 9 | PC: 12ace | Display string (String= '��ࠡ���� - rulez forever ! ') |
| 2018-12-25T11:42:24.324460932Z | 8 | PC: 12ad2 | Console input without echo |
{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":1005,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T11:42:24.312378295Z | 26 | PC: 12aa0 | Set disk transfer address |
| 2018-12-25T11:42:24.313689619Z | 71 | PC: 12ab2 | Get current directory |
| 2018-12-25T11:42:24.315485438Z | 42 | PC: 12ab8 | Get date 0x12ab8: cmp dh, 4 0x12abb: jne 0x12ad6 0x12abd: cmp dl, 0xf 0x12ac0: jne 0x12ad6 0x12ac2: mov ax, 0x1010 0x12ac5: out 0x70, ax 0x12ac7: mov dx, 0x349 0x12aca: mov ah, 9 0x12acc: int 0x21 0x12ace: mov ah, 8 0x12ad0: int 0x21 0x12ad2: mov al, 0xfe 0x12ad4: out 0x64, al 0x12ad6: mov ah, byte ptr [0x378] 0x12ada: mov cl, 7 0x12adc: mov dx, 0x33d 0x12adf: int 0x21 0x12ae1: jae 0x12ae6 0x12ae3: jmp 0x12c22 0x12ae6: mov dx, word ptr [0x36c] |
| 2018-12-25T11:42:24.317176444Z | 78 | PC: 12ae1 | Find first file |
| 2018-12-25T11:42:24.321411952Z | 67 | PC: 12afd | Get or set file attributes |
| 2018-12-25T11:42:24.344708626Z | 61 | PC: 12b11 | Open file (Filename = 'SLEEP.COM') |
| 2018-12-25T11:42:24.351288423Z | 63 | PC: 12b2e | Read file or device (Read 691 bytes on handle 5) |
| 2018-12-25T11:42:24.362256173Z | 66 | PC: 12b4d | Move file pointer |
| 2018-12-25T11:42:24.364365592Z | 66 | PC: 12b6f | Move file pointer |
| 2018-12-25T11:42:24.36646933Z | 64 | PC: 12b8a | Write file or device (Write 407 bytes on handle 5) |
| 2018-12-25T11:42:24.375020037Z | 64 | PC: 12b9a | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-25T11:42:24.378226262Z | 66 | PC: 12bca | Move file pointer |
| 2018-12-25T11:42:24.379712773Z | 64 | PC: 12bdc | Write file or device (Write 691 bytes on handle 5) |
| 2018-12-25T11:42:24.388549125Z | 87 | PC: 12bed | Get or set file date and time |
| 2018-12-25T11:42:24.390724316Z | 62 | PC: 12bf3 | Close file |
| 2018-12-25T11:42:24.399271102Z | 67 | PC: 12c05 | Get or set file attributes |
| 2018-12-25T11:42:24.408536658Z | 79 | PC: 12ae1 | Find next file (See above) |
| 2018-12-25T11:42:24.411487742Z | 67 | PC: 12afd | Get or set file attributes (See above) |
| 2018-12-25T11:42:24.42106566Z | 61 | PC: 12b11 | Open file (See above) |
| 2018-12-25T11:42:24.427386662Z | 63 | PC: 12b2e | Read file or device (See above) |
| 2018-12-25T11:42:24.434414616Z | 66 | PC: 12b4d | Move file pointer (See above) |
| 2018-12-25T11:42:24.435727556Z | 66 | PC: 12b6f | Move file pointer (See above) |
| 2018-12-25T11:42:24.437003771Z | 64 | PC: 12b8a | Write file or device (See above) |
| 2018-12-25T11:42:24.441175553Z | 64 | PC: 12b9a | Write file or device (See above) |
| 2018-12-25T11:42:24.444303669Z | 66 | PC: 12bca | Move file pointer (See above) |
| 2018-12-25T11:42:24.445883382Z | 64 | PC: 12bdc | Write file or device (See above) |
| 2018-12-25T11:42:24.455266073Z | 87 | PC: 12bed | Get or set file date and time (See above) |
| 2018-12-25T11:42:24.456704292Z | 62 | PC: 12bf3 | Close file (See above) |
| 2018-12-25T11:42:24.464103096Z | 67 | PC: 12c05 | Get or set file attributes (See above) |
| 2018-12-25T11:42:24.474884044Z | 79 | PC: 12ae1 | Find next file (See above) |
| 2018-12-25T11:42:24.477767623Z | 67 | PC: 12afd | Get or set file attributes (See above) |
| 2018-12-25T11:42:24.487257118Z | 61 | PC: 12b11 | Open file (See above) |
| 2018-12-25T11:42:24.494184563Z | 63 | PC: 12b2e | Read file or device (See above) |
| 2018-12-25T11:42:24.500412894Z | 66 | PC: 12b4d | Move file pointer (See above) |
| 2018-12-25T11:42:24.501728252Z | 66 | PC: 12b6f | Move file pointer (See above) |
| 2018-12-25T11:42:24.503625654Z | 64 | PC: 12b8a | Write file or device (See above) |
| 2018-12-25T11:42:24.507197644Z | 64 | PC: 12b9a | Write file or device (See above) |
| 2018-12-25T11:42:24.50995311Z | 66 | PC: 12bca | Move file pointer (See above) |
| 2018-12-25T11:42:24.512157681Z | 64 | PC: 12bdc | Write file or device (See above) |
| 2018-12-25T11:42:24.519337564Z | 87 | PC: 12bed | Get or set file date and time (See above) |
| 2018-12-25T11:42:24.520883406Z | 62 | PC: 12bf3 | Close file (See above) |
| 2018-12-25T11:42:24.529411517Z | 67 | PC: 12c05 | Get or set file attributes (See above) |
| 2018-12-25T11:42:24.539519686Z | 79 | PC: 12ae1 | Find next file (See above) |
| 2018-12-25T11:42:24.542056245Z | 67 | PC: 12afd | Get or set file attributes (See above) |
| 2018-12-25T11:42:24.552041397Z | 61 | PC: 12b11 | Open file (See above) |
| 2018-12-25T11:42:24.558589218Z | 63 | PC: 12b2e | Read file or device (See above) |
| 2018-12-25T11:42:24.564844742Z | 66 | PC: 12b4d | Move file pointer (See above) |
| 2018-12-25T11:42:24.567428554Z | 66 | PC: 12b6f | Move file pointer (See above) |
| 2018-12-25T11:42:24.569551767Z | 64 | PC: 12b8a | Write file or device (See above) |
| 2018-12-25T11:42:24.573608477Z | 64 | PC: 12b9a | Write file or device (See above) |
| 2018-12-25T11:42:24.576608223Z | 66 | PC: 12bca | Move file pointer (See above) |
| 2018-12-25T11:42:24.579092885Z | 64 | PC: 12bdc | Write file or device (See above) |
| 2018-12-25T11:42:24.5863153Z | 87 | PC: 12bed | Get or set file date and time (See above) |
| 2018-12-25T11:42:24.588067593Z | 62 | PC: 12bf3 | Close file (See above) |
| 2018-12-25T11:42:24.596792818Z | 67 | PC: 12c05 | Get or set file attributes (See above) |
| 2018-12-25T11:42:24.615677868Z | 79 | PC: 12ae1 | Find next file (See above) |
| 2018-12-25T11:42:24.618648258Z | 67 | PC: 12afd | Get or set file attributes (See above) |
| 2018-12-25T11:42:24.630019854Z | 61 | PC: 12b11 | Open file (See above) |
| 2018-12-25T11:42:24.636852073Z | 63 | PC: 12b2e | Read file or device (See above) |
| 2018-12-25T11:42:24.643133901Z | 66 | PC: 12b4d | Move file pointer (See above) |
| 2018-12-25T11:42:24.645759512Z | 66 | PC: 12b6f | Move file pointer (See above) |
| 2018-12-25T11:42:24.647867355Z | 64 | PC: 12b8a | Write file or device (See above) |
| 2018-12-25T11:42:24.651838369Z | 64 | PC: 12b9a | Write file or device (See above) |
| 2018-12-25T11:42:24.655778354Z | 66 | PC: 12bca | Move file pointer (See above) |
| 2018-12-25T11:42:24.656988365Z | 64 | PC: 12bdc | Write file or device (See above) |
| 2018-12-25T11:42:24.662376712Z | 87 | PC: 12bed | Get or set file date and time (See above) |
| 2018-12-25T11:42:24.664486251Z | 62 | PC: 12bf3 | Close file (See above) |
| 2018-12-25T11:42:24.670062418Z | 67 | PC: 12c05 | Get or set file attributes (See above) |
| 2018-12-25T11:42:24.676674647Z | 59 | PC: 12c2b | Change current directory |
| 2018-12-25T11:42:24.681083861Z | 26 | PC: 12c48 | Set disk transfer address |
| 2018-12-25T11:42:24.682075406Z | 59 | PC: 12c53 | Change current directory |