{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":10851,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:29:22.716474441Z | 78 | PC: 12d42 | Find first file |
| 2018-12-25T12:29:22.724779053Z | 67 | PC: 12d7e | Get or set file attributes |
| 2018-12-25T12:29:22.73141511Z | 67 | PC: 12d89 | Get or set file attributes |
| 2018-12-25T12:29:22.882028251Z | 61 | PC: 12d8e | Open file (Filename = 'SLEEP.COM') |
| 2018-12-25T12:29:22.890033345Z | 87 | PC: 12d97 | Get or set file date and time |
| 2018-12-25T12:29:22.892987802Z | 64 | PC: 12da9 | Write file or device (Write 903 bytes on handle 5) |
| 2018-12-25T12:29:22.902075443Z | 87 | PC: 12db6 | Get or set file date and time |
| 2018-12-25T12:29:22.903966455Z | 62 | PC: 12dba | Close file |
| 2018-12-25T12:29:22.912865881Z | 67 | PC: 12dc6 | Get or set file attributes |
| 2018-12-25T12:29:22.924577358Z | 79 | PC: 12d53 | Find next file |
| 2018-12-25T12:29:22.927396422Z | 67 | PC: 12d7e | Get or set file attributes (See above) |
| 2018-12-25T12:29:22.934125682Z | 67 | PC: 12d89 | Get or set file attributes (See above) |
| 2018-12-25T12:29:22.944778576Z | 61 | PC: 12d8e | Open file (See above) |
| 2018-12-25T12:29:22.951918233Z | 87 | PC: 12d97 | Get or set file date and time (See above) |
| 2018-12-25T12:29:22.953731196Z | 64 | PC: 12da9 | Write file or device (See above) |
| 2018-12-25T12:29:22.962616888Z | 87 | PC: 12db6 | Get or set file date and time (See above) |
| 2018-12-25T12:29:22.964119245Z | 62 | PC: 12dba | Close file (See above) |
| 2018-12-25T12:29:22.97301997Z | 67 | PC: 12dc6 | Get or set file attributes (See above) |
| 2018-12-25T12:29:22.985003061Z | 79 | PC: 12d53 | Find next file (See above) |
| 2018-12-25T12:29:22.987594865Z | 67 | PC: 12d7e | Get or set file attributes (See above) |
| 2018-12-25T12:29:22.993817293Z | 67 | PC: 12d89 | Get or set file attributes (See above) |
| 2018-12-25T12:29:23.005157462Z | 61 | PC: 12d8e | Open file (See above) |
| 2018-12-25T12:29:23.012690811Z | 87 | PC: 12d97 | Get or set file date and time (See above) |
| 2018-12-25T12:29:23.014722178Z | 64 | PC: 12da9 | Write file or device (See above) |
| 2018-12-25T12:29:23.024295459Z | 87 | PC: 12db6 | Get or set file date and time (See above) |
| 2018-12-25T12:29:23.026019603Z | 62 | PC: 12dba | Close file (See above) |
| 2018-12-25T12:29:23.035040812Z | 67 | PC: 12dc6 | Get or set file attributes (See above) |
| 2018-12-25T12:29:23.050043308Z | 79 | PC: 12d53 | Find next file (See above) |
| 2018-12-25T12:29:23.05337674Z | 67 | PC: 12d7e | Get or set file attributes (See above) |
| 2018-12-25T12:29:23.059694991Z | 67 | PC: 12d89 | Get or set file attributes (See above) |
| 2018-12-25T12:29:23.070800029Z | 61 | PC: 12d8e | Open file (See above) |
| 2018-12-25T12:29:23.078701199Z | 87 | PC: 12d97 | Get or set file date and time (See above) |
| 2018-12-25T12:29:23.080354615Z | 64 | PC: 12da9 | Write file or device (See above) |
| 2018-12-25T12:29:23.090672075Z | 87 | PC: 12db6 | Get or set file date and time (See above) |
| 2018-12-25T12:29:23.09247362Z | 62 | PC: 12dba | Close file (See above) |
| 2018-12-25T12:29:23.101377485Z | 67 | PC: 12dc6 | Get or set file attributes (See above) |
| 2018-12-25T12:29:23.11691477Z | 79 | PC: 12d53 | Find next file (See above) |
| 2018-12-25T12:29:23.120594339Z | 67 | PC: 12d7e | Get or set file attributes (See above) |
| 2018-12-25T12:29:23.127555801Z | 67 | PC: 12d89 | Get or set file attributes (See above) |
| 2018-12-25T12:29:23.139377714Z | 61 | PC: 12d8e | Open file (See above) |
| 2018-12-25T12:29:23.146909787Z | 87 | PC: 12d97 | Get or set file date and time (See above) |
| 2018-12-25T12:29:23.148497264Z | 64 | PC: 12da9 | Write file or device (See above) |
| 2018-12-25T12:29:23.158320565Z | 87 | PC: 12db6 | Get or set file date and time (See above) |
| 2018-12-25T12:29:23.159939175Z | 62 | PC: 12dba | Close file (See above) |
| 2018-12-25T12:29:23.168246535Z | 67 | PC: 12dc6 | Get or set file attributes (See above) |
| 2018-12-25T12:29:23.179620918Z | 79 | PC: 12d53 | Find next file (See above) |
| 2018-12-25T12:29:23.182942707Z | 67 | PC: 12d7e | Get or set file attributes (See above) |
| 2018-12-25T12:29:23.189169783Z | 67 | PC: 12d89 | Get or set file attributes (See above) |
| 2018-12-25T12:29:23.19984451Z | 61 | PC: 12d8e | Open file (See above) |
| 2018-12-25T12:29:23.208215123Z | 87 | PC: 12d97 | Get or set file date and time (See above) |
| 2018-12-25T12:29:23.209601391Z | 64 | PC: 12da9 | Write file or device (See above) |
| 2018-12-25T12:29:23.218355371Z | 87 | PC: 12db6 | Get or set file date and time (See above) |
| 2018-12-25T12:29:23.221302195Z | 62 | PC: 12dba | Close file (See above) |
| 2018-12-25T12:29:23.229351856Z | 67 | PC: 12dc6 | Get or set file attributes (See above) |
| 2018-12-25T12:29:23.24250029Z | 79 | PC: 12d53 | Find next file (See above) |
| 2018-12-25T12:29:23.24568266Z | 67 | PC: 12d7e | Get or set file attributes (See above) |
| 2018-12-25T12:29:23.25168029Z | 67 | PC: 12d89 | Get or set file attributes (See above) |
| 2018-12-25T12:29:23.261990629Z | 61 | PC: 12d8e | Open file (See above) |
| 2018-12-25T12:29:23.269365813Z | 87 | PC: 12d97 | Get or set file date and time (See above) |
| 2018-12-25T12:29:23.270898527Z | 64 | PC: 12da9 | Write file or device (See above) |
| 2018-12-25T12:29:23.279444743Z | 87 | PC: 12db6 | Get or set file date and time (See above) |
| 2018-12-25T12:29:23.281180173Z | 62 | PC: 12dba | Close file (See above) |
| 2018-12-25T12:29:23.286862704Z | 67 | PC: 12dc6 | Get or set file attributes (See above) |
| 2018-12-25T12:29:23.300874045Z | 79 | PC: 12d53 | Find next file (See above) |
| 2018-12-25T12:29:23.303582699Z | 67 | PC: 12d7e | Get or set file attributes (See above) |
| 2018-12-25T12:29:23.310975599Z | 67 | PC: 12d89 | Get or set file attributes (See above) |
| 2018-12-25T12:29:23.322133831Z | 61 | PC: 12d8e | Open file (See above) |
| 2018-12-25T12:29:23.33001027Z | 87 | PC: 12d97 | Get or set file date and time (See above) |
| 2018-12-25T12:29:23.33240034Z | 64 | PC: 12da9 | Write file or device (See above) |
| 2018-12-25T12:29:23.341957267Z | 87 | PC: 12db6 | Get or set file date and time (See above) |
| 2018-12-25T12:29:23.344045382Z | 62 | PC: 12dba | Close file (See above) |
| 2018-12-25T12:29:23.353256235Z | 67 | PC: 12dc6 | Get or set file attributes (See above) |
| 2018-12-25T12:29:23.367314008Z | 79 | PC: 12d53 | Find next file (See above) |
| 2018-12-25T12:29:23.369779554Z | 42 | PC: 12d5d | Get date 0x12d5d: cmp al, 3 0x12d5f: je 0x12d65 0x12d61: mov ah, 0x4c 0x12d63: int 0x21 0x12d65: mov al, 0x50 0x12d67: mov bx, 0x173 0x12d6a: mov cx, 0x40 0x12d6d: mov dx, 0 0x12d70: int 0x26 0x12d72: mov ah, 0x4c 0x12d74: int 0x21 0x12d76: mov dx, 0x9e 0x12d79: mov ax, 0x4300 0x12d7c: int 0x21 0x12d7e: mov word ptr [0x10d], cx 0x12d82: xor cx, cx 0x12d84: mov ax, 0x4301 0x12d87: int 0x21 0x12d89: mov ax, 0x3d02 0x12d8c: int 0x21 |
| 2018-12-25T12:29:23.372651556Z | 76 | PC: 12d65 | Terminate with return code (Return code = '2') |
{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":10851,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:29:22.782849921Z | 78 | PC: 12d42 | Find first file |
| 2018-12-25T12:29:22.789482103Z | 67 | PC: 12d7e | Get or set file attributes |
| 2018-12-25T12:29:22.79606492Z | 67 | PC: 12d89 | Get or set file attributes |
| 2018-12-25T12:29:22.881566568Z | 61 | PC: 12d8e | Open file (Filename = 'SLEEP.COM') |
| 2018-12-25T12:29:22.88989785Z | 87 | PC: 12d97 | Get or set file date and time |
| 2018-12-25T12:29:22.893226112Z | 64 | PC: 12da9 | Write file or device (Write 903 bytes on handle 5) |
| 2018-12-25T12:29:22.902974857Z | 87 | PC: 12db6 | Get or set file date and time |
| 2018-12-25T12:29:22.9044315Z | 62 | PC: 12dba | Close file |
| 2018-12-25T12:29:22.91084822Z | 67 | PC: 12dc6 | Get or set file attributes |
| 2018-12-25T12:29:22.921986668Z | 79 | PC: 12d53 | Find next file |
| 2018-12-25T12:29:22.924832189Z | 67 | PC: 12d7e | Get or set file attributes (See above) |
| 2018-12-25T12:29:22.932873036Z | 67 | PC: 12d89 | Get or set file attributes (See above) |
| 2018-12-25T12:29:22.944000706Z | 61 | PC: 12d8e | Open file (See above) |
| 2018-12-25T12:29:22.957240684Z | 87 | PC: 12d97 | Get or set file date and time (See above) |
| 2018-12-25T12:29:22.959246716Z | 64 | PC: 12da9 | Write file or device (See above) |
| 2018-12-25T12:29:22.969269116Z | 87 | PC: 12db6 | Get or set file date and time (See above) |
| 2018-12-25T12:29:22.971668122Z | 62 | PC: 12dba | Close file (See above) |
| 2018-12-25T12:29:22.980298138Z | 67 | PC: 12dc6 | Get or set file attributes (See above) |
| 2018-12-25T12:29:22.992007068Z | 79 | PC: 12d53 | Find next file (See above) |
| 2018-12-25T12:29:22.994057506Z | 67 | PC: 12d7e | Get or set file attributes (See above) |
| 2018-12-25T12:29:23.007298969Z | 67 | PC: 12d89 | Get or set file attributes (See above) |
| 2018-12-25T12:29:23.019249783Z | 61 | PC: 12d8e | Open file (See above) |
| 2018-12-25T12:29:23.033487517Z | 87 | PC: 12d97 | Get or set file date and time (See above) |
| 2018-12-25T12:29:23.035512465Z | 64 | PC: 12da9 | Write file or device (See above) |
| 2018-12-25T12:29:23.045598384Z | 87 | PC: 12db6 | Get or set file date and time (See above) |
| 2018-12-25T12:29:23.047570468Z | 62 | PC: 12dba | Close file (See above) |
| 2018-12-25T12:29:23.05656526Z | 67 | PC: 12dc6 | Get or set file attributes (See above) |
| 2018-12-25T12:29:23.069345182Z | 79 | PC: 12d53 | Find next file (See above) |
| 2018-12-25T12:29:23.072690975Z | 67 | PC: 12d7e | Get or set file attributes (See above) |
| 2018-12-25T12:29:23.079534599Z | 67 | PC: 12d89 | Get or set file attributes (See above) |
| 2018-12-25T12:29:23.092107837Z | 61 | PC: 12d8e | Open file (See above) |
| 2018-12-25T12:29:23.100824934Z | 87 | PC: 12d97 | Get or set file date and time (See above) |
| 2018-12-25T12:29:23.102552164Z | 64 | PC: 12da9 | Write file or device (See above) |
| 2018-12-25T12:29:23.111907971Z | 87 | PC: 12db6 | Get or set file date and time (See above) |
| 2018-12-25T12:29:23.119847826Z | 62 | PC: 12dba | Close file (See above) |
| 2018-12-25T12:29:23.129291973Z | 67 | PC: 12dc6 | Get or set file attributes (See above) |
| 2018-12-25T12:29:23.140418921Z | 79 | PC: 12d53 | Find next file (See above) |
| 2018-12-25T12:29:23.144150259Z | 67 | PC: 12d7e | Get or set file attributes (See above) |
| 2018-12-25T12:29:23.150806959Z | 67 | PC: 12d89 | Get or set file attributes (See above) |
| 2018-12-25T12:29:23.174680664Z | 61 | PC: 12d8e | Open file (See above) |
| 2018-12-25T12:29:23.18367803Z | 87 | PC: 12d97 | Get or set file date and time (See above) |
| 2018-12-25T12:29:23.185502125Z | 64 | PC: 12da9 | Write file or device (See above) |
| 2018-12-25T12:29:23.19446603Z | 87 | PC: 12db6 | Get or set file date and time (See above) |
| 2018-12-25T12:29:23.196745425Z | 62 | PC: 12dba | Close file (See above) |
| 2018-12-25T12:29:23.205189373Z | 67 | PC: 12dc6 | Get or set file attributes (See above) |
| 2018-12-25T12:29:23.216391217Z | 79 | PC: 12d53 | Find next file (See above) |
| 2018-12-25T12:29:23.221044166Z | 67 | PC: 12d7e | Get or set file attributes (See above) |
| 2018-12-25T12:29:23.228469155Z | 67 | PC: 12d89 | Get or set file attributes (See above) |
| 2018-12-25T12:29:23.239454364Z | 61 | PC: 12d8e | Open file (See above) |
| 2018-12-25T12:29:23.247178948Z | 87 | PC: 12d97 | Get or set file date and time (See above) |
| 2018-12-25T12:29:23.250107417Z | 64 | PC: 12da9 | Write file or device (See above) |
| 2018-12-25T12:29:23.259240738Z | 87 | PC: 12db6 | Get or set file date and time (See above) |
| 2018-12-25T12:29:23.261399911Z | 62 | PC: 12dba | Close file (See above) |
| 2018-12-25T12:29:23.271071329Z | 67 | PC: 12dc6 | Get or set file attributes (See above) |
| 2018-12-25T12:29:23.282314024Z | 79 | PC: 12d53 | Find next file (See above) |
| 2018-12-25T12:29:23.286480827Z | 67 | PC: 12d7e | Get or set file attributes (See above) |
| 2018-12-25T12:29:23.293989686Z | 67 | PC: 12d89 | Get or set file attributes (See above) |
| 2018-12-25T12:29:23.306351912Z | 61 | PC: 12d8e | Open file (See above) |
| 2018-12-25T12:29:23.314240693Z | 87 | PC: 12d97 | Get or set file date and time (See above) |
| 2018-12-25T12:29:23.316381562Z | 64 | PC: 12da9 | Write file or device (See above) |
| 2018-12-25T12:29:23.32652844Z | 87 | PC: 12db6 | Get or set file date and time (See above) |
| 2018-12-25T12:29:23.328583701Z | 62 | PC: 12dba | Close file (See above) |
| 2018-12-25T12:29:23.33736579Z | 67 | PC: 12dc6 | Get or set file attributes (See above) |
| 2018-12-25T12:29:23.349745565Z | 79 | PC: 12d53 | Find next file (See above) |
| 2018-12-25T12:29:23.352934488Z | 67 | PC: 12d7e | Get or set file attributes (See above) |
| 2018-12-25T12:29:23.35961961Z | 67 | PC: 12d89 | Get or set file attributes (See above) |
| 2018-12-25T12:29:23.3714107Z | 61 | PC: 12d8e | Open file (See above) |
| 2018-12-25T12:29:23.378888766Z | 87 | PC: 12d97 | Get or set file date and time (See above) |
| 2018-12-25T12:29:23.38049168Z | 64 | PC: 12da9 | Write file or device (See above) |
| 2018-12-25T12:29:23.390193155Z | 87 | PC: 12db6 | Get or set file date and time (See above) |
| 2018-12-25T12:29:23.391935537Z | 62 | PC: 12dba | Close file (See above) |
| 2018-12-25T12:29:23.400354215Z | 67 | PC: 12dc6 | Get or set file attributes (See above) |
| 2018-12-25T12:29:23.415233307Z | 79 | PC: 12d53 | Find next file (See above) |
| 2018-12-25T12:29:23.418123132Z | 42 | PC: 12d5d | Get date 0x12d5d: cmp al, 3 0x12d5f: je 0x12d65 0x12d61: mov ah, 0x4c 0x12d63: int 0x21 0x12d65: mov al, 0x50 0x12d67: mov bx, 0x173 0x12d6a: mov cx, 0x40 0x12d6d: mov dx, 0 0x12d70: int 0x26 0x12d72: mov ah, 0x4c 0x12d74: int 0x21 0x12d76: mov dx, 0x9e 0x12d79: mov ax, 0x4300 0x12d7c: int 0x21 0x12d7e: mov word ptr [0x10d], cx 0x12d82: xor cx, cx 0x12d84: mov ax, 0x4301 0x12d87: int 0x21 0x12d89: mov ax, 0x3d02 0x12d8c: int 0x21 |
| 2018-12-25T12:29:23.421139538Z | 76 | PC: 12d76 | Terminate with return code (Return code = '1') |