{"DateBased":false,"Day":0,"Month":0,"Year":0,"Hour":23,"Min":0,"Second":0,"TimeBased":true,"OriginalID":10690,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:28:50.099098635Z | 26 | PC: 12a62 | Set disk transfer address |
| 2018-12-25T12:28:50.100766003Z | 71 | PC: 12a6c | Get current directory |
| 2018-12-25T12:28:50.103685194Z | 78 | PC: 12a77 | Find first file |
| 2018-12-25T12:28:50.109962942Z | 67 | PC: 12a95 | Get or set file attributes |
| 2018-12-25T12:28:51.238208261Z | 61 | PC: 12a9a | Open file (Filename = 'S�') |
| 2018-12-25T12:28:51.250001009Z | 63 | PC: 12aa6 | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-25T12:28:51.256208334Z | 66 | PC: 12ab6 | Move file pointer |
| 2018-12-25T12:28:51.258128912Z | 64 | PC: 12abf | Write file or device (Write 378 bytes on handle 5) |
| 2018-12-25T12:28:51.439034838Z | 66 | PC: 12ac7 | Move file pointer |
| 2018-12-25T12:28:51.440298783Z | 64 | PC: 12add | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-25T12:28:51.447278201Z | 87 | PC: 12aec | Get or set file date and time |
| 2018-12-25T12:28:51.448985717Z | 62 | PC: 12af0 | Close file |
| 2018-12-25T12:28:51.744004155Z | 67 | PC: 12afc | Get or set file attributes |
| 2018-12-25T12:28:51.745635774Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:28:51.750824707Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:28:51.753425883Z | 67 | PC: 12a95 | Get or set file attributes (See above) |
| 2018-12-25T12:28:51.886503593Z | 61 | PC: 12a9a | Open file (See above) |
| 2018-12-25T12:28:51.894023496Z | 63 | PC: 12aa6 | Read file or device (See above) |
| 2018-12-25T12:28:51.901967148Z | 66 | PC: 12ab6 | Move file pointer (See above) |
| 2018-12-25T12:28:51.903630422Z | 64 | PC: 12abf | Write file or device (See above) |
| 2018-12-25T12:28:51.908236246Z | 66 | PC: 12ac7 | Move file pointer (See above) |
| 2018-12-25T12:28:51.909679835Z | 64 | PC: 12add | Write file or device (See above) |
| 2018-12-25T12:28:51.912335461Z | 87 | PC: 12aec | Get or set file date and time (See above) |
| 2018-12-25T12:28:51.914512573Z | 62 | PC: 12af0 | Close file (See above) |
| 2018-12-25T12:28:51.951242989Z | 67 | PC: 12afc | Get or set file attributes (See above) |
| 2018-12-25T12:28:51.953257263Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:28:51.95636264Z | 67 | PC: 12a95 | Get or set file attributes (See above) |
| 2018-12-25T12:28:51.96927658Z | 61 | PC: 12a9a | Open file (See above) |
| 2018-12-25T12:28:51.976081735Z | 63 | PC: 12aa6 | Read file or device (See above) |
| 2018-12-25T12:28:51.982774789Z | 66 | PC: 12ab6 | Move file pointer (See above) |
| 2018-12-25T12:28:51.986022544Z | 64 | PC: 12abf | Write file or device (See above) |
| 2018-12-25T12:28:51.989046553Z | 66 | PC: 12ac7 | Move file pointer (See above) |
| 2018-12-25T12:28:51.990516417Z | 64 | PC: 12add | Write file or device (See above) |
| 2018-12-25T12:28:51.993800146Z | 87 | PC: 12aec | Get or set file date and time (See above) |
| 2018-12-25T12:28:51.995378594Z | 62 | PC: 12af0 | Close file (See above) |
| 2018-12-25T12:28:52.00276826Z | 67 | PC: 12afc | Get or set file attributes (See above) |
| 2018-12-25T12:28:52.005697629Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:28:52.00833544Z | 67 | PC: 12a95 | Get or set file attributes (See above) |
| 2018-12-25T12:28:52.01796283Z | 61 | PC: 12a9a | Open file (See above) |
| 2018-12-25T12:28:52.024926834Z | 63 | PC: 12aa6 | Read file or device (See above) |
| 2018-12-25T12:28:52.029861236Z | 66 | PC: 12ab6 | Move file pointer (See above) |
| 2018-12-25T12:28:52.031252734Z | 64 | PC: 12abf | Write file or device (See above) |
| 2018-12-25T12:28:52.034467333Z | 66 | PC: 12ac7 | Move file pointer (See above) |
| 2018-12-25T12:28:52.036182148Z | 64 | PC: 12add | Write file or device (See above) |
| 2018-12-25T12:28:52.038980544Z | 87 | PC: 12aec | Get or set file date and time (See above) |
| 2018-12-25T12:28:52.041366747Z | 62 | PC: 12af0 | Close file (See above) |
| 2018-12-25T12:28:52.051047852Z | 67 | PC: 12afc | Get or set file attributes (See above) |
| 2018-12-25T12:28:52.053144599Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:28:52.055816825Z | 67 | PC: 12a95 | Get or set file attributes (See above) |
| 2018-12-25T12:28:52.065945227Z | 61 | PC: 12a9a | Open file (See above) |
| 2018-12-25T12:28:52.072417465Z | 63 | PC: 12aa6 | Read file or device (See above) |
| 2018-12-25T12:28:52.078615199Z | 66 | PC: 12ab6 | Move file pointer (See above) |
| 2018-12-25T12:28:52.081091106Z | 64 | PC: 12abf | Write file or device (See above) |
| 2018-12-25T12:28:52.089096263Z | 66 | PC: 12ac7 | Move file pointer (See above) |
| 2018-12-25T12:28:52.090544114Z | 64 | PC: 12add | Write file or device (See above) |
| 2018-12-25T12:28:52.098343164Z | 87 | PC: 12aec | Get or set file date and time (See above) |
| 2018-12-25T12:28:52.100095899Z | 62 | PC: 12af0 | Close file (See above) |
| 2018-12-25T12:28:52.108719117Z | 67 | PC: 12afc | Get or set file attributes (See above) |
| 2018-12-25T12:28:52.111709953Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:28:52.115064048Z | 67 | PC: 12a95 | Get or set file attributes (See above) |
| 2018-12-25T12:28:52.125563072Z | 61 | PC: 12a9a | Open file (See above) |
| 2018-12-25T12:28:52.132877461Z | 63 | PC: 12aa6 | Read file or device (See above) |
| 2018-12-25T12:28:52.139393208Z | 66 | PC: 12ab6 | Move file pointer (See above) |
| 2018-12-25T12:28:52.14106431Z | 64 | PC: 12abf | Write file or device (See above) |
| 2018-12-25T12:28:52.144721569Z | 66 | PC: 12ac7 | Move file pointer (See above) |
| 2018-12-25T12:28:52.146536618Z | 64 | PC: 12add | Write file or device (See above) |
| 2018-12-25T12:28:52.149154669Z | 87 | PC: 12aec | Get or set file date and time (See above) |
| 2018-12-25T12:28:52.151206127Z | 62 | PC: 12af0 | Close file (See above) |
| 2018-12-25T12:28:52.158751609Z | 67 | PC: 12afc | Get or set file attributes (See above) |
| 2018-12-25T12:28:52.160835981Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:28:52.16441469Z | 67 | PC: 12a95 | Get or set file attributes (See above) |
| 2018-12-25T12:28:52.174403773Z | 61 | PC: 12a9a | Open file (See above) |
| 2018-12-25T12:28:52.181268949Z | 63 | PC: 12aa6 | Read file or device (See above) |
| 2018-12-25T12:28:52.189681765Z | 66 | PC: 12ab6 | Move file pointer (See above) |
| 2018-12-25T12:28:52.191547789Z | 64 | PC: 12abf | Write file or device (See above) |
| 2018-12-25T12:28:52.199773323Z | 66 | PC: 12ac7 | Move file pointer (See above) |
| 2018-12-25T12:28:52.204875078Z | 64 | PC: 12add | Write file or device (See above) |
| 2018-12-25T12:28:52.211252669Z | 87 | PC: 12aec | Get or set file date and time (See above) |
| 2018-12-25T12:28:52.212640541Z | 62 | PC: 12af0 | Close file (See above) |
| 2018-12-25T12:28:52.220981532Z | 67 | PC: 12afc | Get or set file attributes (See above) |
| 2018-12-25T12:28:52.222843208Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:28:52.225131297Z | 78 | PC: 12b11 | Find first file |
| 2018-12-25T12:28:52.230958487Z | 79 | PC: 12b11 | Find next file (See above) |
| 2018-12-25T12:28:52.234091976Z | 79 | PC: 12b11 | Find next file (See above) |
| 2018-12-25T12:28:52.236758718Z | 79 | PC: 12b11 | Find next file (See above) |
| 2018-12-25T12:28:52.239418187Z | 79 | PC: 12b11 | Find next file (See above) |
| 2018-12-25T12:28:52.242886179Z | 79 | PC: 12b11 | Find next file (See above) |
| 2018-12-25T12:28:52.245523325Z | 79 | PC: 12b11 | Find next file (See above) |
| 2018-12-25T12:28:52.248156491Z | 79 | PC: 12b11 | Find next file (See above) |
| 2018-12-25T12:28:52.251594369Z | 79 | PC: 12b11 | Find next file (See above) |
| 2018-12-25T12:28:52.254216233Z | 79 | PC: 12b11 | Find next file (See above) |
| 2018-12-25T12:28:52.256609305Z | 59 | PC: 12b43 | Change current directory |
| 2018-12-25T12:28:52.259324401Z | 44 | PC: 12b4c | Get time 0x12b4c: cmp cx, 0x1700 0x12b50: jne 0x12b7c 0x12b52: push cs 0x12b53: pop es 0x12b54: mov ax, 0x1300 0x12b57: mov bx, 0x12 0x12b5a: mov dx, 0x41a 0x12b5d: mov cx, 5 0x12b60: add bp, 0x16f 0x12b64: int 0x10 0x12b66: sub bp, 0x11 0x12b6a: mov bx, 0x10 0x12b6d: mov dl, 0x1f 0x12b6f: mov cx, 8 0x12b72: int 0x10 0x12b74: xor ax, ax 0x12b76: int 0x16 0x12b78: sub bp, 0x16f 0x12b7c: pop es 0x12b7d: pop ds |
{"DateBased":false,"Day":0,"Month":0,"Year":0,"Hour":0,"Min":0,"Second":0,"TimeBased":true,"OriginalID":10690,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:28:50.137713572Z | 26 | PC: 12a62 | Set disk transfer address |
| 2018-12-25T12:28:50.139866028Z | 71 | PC: 12a6c | Get current directory |
| 2018-12-25T12:28:50.142128562Z | 78 | PC: 12a77 | Find first file |
| 2018-12-25T12:28:50.146049514Z | 67 | PC: 12a95 | Get or set file attributes |
| 2018-12-25T12:28:50.163399838Z | 61 | PC: 12a9a | Open file (Filename = 'S�') |
| 2018-12-25T12:28:50.176064264Z | 63 | PC: 12aa6 | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-25T12:28:50.183032632Z | 66 | PC: 12ab6 | Move file pointer |
| 2018-12-25T12:28:50.184448611Z | 64 | PC: 12abf | Write file or device (Write 378 bytes on handle 5) |
| 2018-12-25T12:28:50.357633919Z | 66 | PC: 12ac7 | Move file pointer |
| 2018-12-25T12:28:50.359112489Z | 64 | PC: 12add | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-25T12:28:50.366334741Z | 87 | PC: 12aec | Get or set file date and time |
| 2018-12-25T12:28:50.368930419Z | 62 | PC: 12af0 | Close file |
| 2018-12-25T12:28:50.511954693Z | 67 | PC: 12afc | Get or set file attributes |
| 2018-12-25T12:28:50.514419536Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:28:50.518513706Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:28:50.521279568Z | 67 | PC: 12a95 | Get or set file attributes (See above) |
| 2018-12-25T12:28:50.84130343Z | 61 | PC: 12a9a | Open file (See above) |
| 2018-12-25T12:28:50.850711339Z | 63 | PC: 12aa6 | Read file or device (See above) |
| 2018-12-25T12:28:50.857828116Z | 66 | PC: 12ab6 | Move file pointer (See above) |
| 2018-12-25T12:28:50.859259707Z | 64 | PC: 12abf | Write file or device (See above) |
| 2018-12-25T12:28:50.862142691Z | 66 | PC: 12ac7 | Move file pointer (See above) |
| 2018-12-25T12:28:50.864627445Z | 64 | PC: 12add | Write file or device (See above) |
| 2018-12-25T12:28:50.86763366Z | 87 | PC: 12aec | Get or set file date and time (See above) |
| 2018-12-25T12:28:50.869270973Z | 62 | PC: 12af0 | Close file (See above) |
| 2018-12-25T12:28:51.134186103Z | 67 | PC: 12afc | Get or set file attributes (See above) |
| 2018-12-25T12:28:51.136308654Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:28:51.139720143Z | 67 | PC: 12a95 | Get or set file attributes (See above) |
| 2018-12-25T12:28:51.170280072Z | 61 | PC: 12a9a | Open file (See above) |
| 2018-12-25T12:28:51.178610247Z | 63 | PC: 12aa6 | Read file or device (See above) |
| 2018-12-25T12:28:51.186767094Z | 66 | PC: 12ab6 | Move file pointer (See above) |
| 2018-12-25T12:28:51.189787127Z | 64 | PC: 12abf | Write file or device (See above) |
| 2018-12-25T12:28:51.193788416Z | 66 | PC: 12ac7 | Move file pointer (See above) |
| 2018-12-25T12:28:51.195847875Z | 64 | PC: 12add | Write file or device (See above) |
| 2018-12-25T12:28:51.200151515Z | 87 | PC: 12aec | Get or set file date and time (See above) |
| 2018-12-25T12:28:51.20192641Z | 62 | PC: 12af0 | Close file (See above) |
| 2018-12-25T12:28:51.21039731Z | 67 | PC: 12afc | Get or set file attributes (See above) |
| 2018-12-25T12:28:51.213891819Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:28:51.217640358Z | 67 | PC: 12a95 | Get or set file attributes (See above) |
| 2018-12-25T12:28:51.228874567Z | 61 | PC: 12a9a | Open file (See above) |
| 2018-12-25T12:28:51.236695519Z | 63 | PC: 12aa6 | Read file or device (See above) |
| 2018-12-25T12:28:51.245834495Z | 66 | PC: 12ab6 | Move file pointer (See above) |
| 2018-12-25T12:28:51.247866276Z | 64 | PC: 12abf | Write file or device (See above) |
| 2018-12-25T12:28:51.251257316Z | 66 | PC: 12ac7 | Move file pointer (See above) |
| 2018-12-25T12:28:51.253745267Z | 64 | PC: 12add | Write file or device (See above) |
| 2018-12-25T12:28:51.257860394Z | 87 | PC: 12aec | Get or set file date and time (See above) |
| 2018-12-25T12:28:51.259872331Z | 62 | PC: 12af0 | Close file (See above) |
| 2018-12-25T12:28:51.269043881Z | 67 | PC: 12afc | Get or set file attributes (See above) |
| 2018-12-25T12:28:51.27174049Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:28:51.274712014Z | 67 | PC: 12a95 | Get or set file attributes (See above) |
| 2018-12-25T12:28:51.286305673Z | 61 | PC: 12a9a | Open file (See above) |
| 2018-12-25T12:28:51.294334296Z | 63 | PC: 12aa6 | Read file or device (See above) |
| 2018-12-25T12:28:51.30187331Z | 66 | PC: 12ab6 | Move file pointer (See above) |
| 2018-12-25T12:28:51.304135851Z | 64 | PC: 12abf | Write file or device (See above) |
| 2018-12-25T12:28:51.314461742Z | 66 | PC: 12ac7 | Move file pointer (See above) |
| 2018-12-25T12:28:51.316498799Z | 64 | PC: 12add | Write file or device (See above) |
| 2018-12-25T12:28:51.324736013Z | 87 | PC: 12aec | Get or set file date and time (See above) |
| 2018-12-25T12:28:51.328002141Z | 62 | PC: 12af0 | Close file (See above) |
| 2018-12-25T12:28:51.337362194Z | 67 | PC: 12afc | Get or set file attributes (See above) |
| 2018-12-25T12:28:51.339830008Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:28:51.343932049Z | 67 | PC: 12a95 | Get or set file attributes (See above) |
| 2018-12-25T12:28:51.355378165Z | 61 | PC: 12a9a | Open file (See above) |
| 2018-12-25T12:28:51.363226085Z | 63 | PC: 12aa6 | Read file or device (See above) |
| 2018-12-25T12:28:51.377602995Z | 66 | PC: 12ab6 | Move file pointer (See above) |
| 2018-12-25T12:28:51.385997963Z | 64 | PC: 12abf | Write file or device (See above) |
| 2018-12-25T12:28:51.39015272Z | 66 | PC: 12ac7 | Move file pointer (See above) |
| 2018-12-25T12:28:51.393055151Z | 64 | PC: 12add | Write file or device (See above) |
| 2018-12-25T12:28:51.397340926Z | 87 | PC: 12aec | Get or set file date and time (See above) |
| 2018-12-25T12:28:51.399202339Z | 62 | PC: 12af0 | Close file (See above) |
| 2018-12-25T12:28:51.408300278Z | 67 | PC: 12afc | Get or set file attributes (See above) |
| 2018-12-25T12:28:51.411099836Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:28:51.414323673Z | 67 | PC: 12a95 | Get or set file attributes (See above) |
| 2018-12-25T12:28:51.425478363Z | 61 | PC: 12a9a | Open file (See above) |
| 2018-12-25T12:28:51.434164456Z | 63 | PC: 12aa6 | Read file or device (See above) |
| 2018-12-25T12:28:51.441509467Z | 66 | PC: 12ab6 | Move file pointer (See above) |
| 2018-12-25T12:28:51.443470819Z | 64 | PC: 12abf | Write file or device (See above) |
| 2018-12-25T12:28:51.458456142Z | 66 | PC: 12ac7 | Move file pointer (See above) |
| 2018-12-25T12:28:51.460064085Z | 64 | PC: 12add | Write file or device (See above) |
| 2018-12-25T12:28:51.467604027Z | 87 | PC: 12aec | Get or set file date and time (See above) |
| 2018-12-25T12:28:51.470250248Z | 62 | PC: 12af0 | Close file (See above) |
| 2018-12-25T12:28:51.47913909Z | 67 | PC: 12afc | Get or set file attributes (See above) |
| 2018-12-25T12:28:51.481434783Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:28:51.485366278Z | 78 | PC: 12b11 | Find first file |
| 2018-12-25T12:28:51.492594754Z | 79 | PC: 12b11 | Find next file (See above) |
| 2018-12-25T12:28:51.495895104Z | 79 | PC: 12b11 | Find next file (See above) |
| 2018-12-25T12:28:51.499450667Z | 79 | PC: 12b11 | Find next file (See above) |
| 2018-12-25T12:28:51.50280941Z | 79 | PC: 12b11 | Find next file (See above) |
| 2018-12-25T12:28:51.505656315Z | 79 | PC: 12b11 | Find next file (See above) |
| 2018-12-25T12:28:51.508757196Z | 79 | PC: 12b11 | Find next file (See above) |
| 2018-12-25T12:28:51.512384783Z | 79 | PC: 12b11 | Find next file (See above) |
| 2018-12-25T12:28:51.515389604Z | 79 | PC: 12b11 | Find next file (See above) |
| 2018-12-25T12:28:51.51950392Z | 79 | PC: 12b11 | Find next file (See above) |
| 2018-12-25T12:28:51.524741879Z | 59 | PC: 12b43 | Change current directory |
| 2018-12-25T12:28:51.528870763Z | 44 | PC: 12b4c | Get time 0x12b4c: cmp cx, 0x1700 0x12b50: jne 0x12b7c 0x12b52: push cs 0x12b53: pop es 0x12b54: mov ax, 0x1300 0x12b57: mov bx, 0x12 0x12b5a: mov dx, 0x41a 0x12b5d: mov cx, 5 0x12b60: add bp, 0x16f 0x12b64: int 0x10 0x12b66: sub bp, 0x11 0x12b6a: mov bx, 0x10 0x12b6d: mov dl, 0x1f 0x12b6f: mov cx, 8 0x12b72: int 0x10 0x12b74: xor ax, ax 0x12b76: int 0x16 0x12b78: sub bp, 0x16f 0x12b7c: pop es 0x12b7d: pop ds |