{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":10965,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:29:43.816278504Z | 75 | PC: 12a5a | Execute program |
| 2018-12-25T12:29:43.817871226Z | 53 | PC: 12a64 | Get interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-25T12:29:43.819763971Z | 74 | PC: 12a81 | Reallocate memory |
| 2018-12-25T12:29:43.821100396Z | 72 | PC: 12a88 | Allocate memory |
| 2018-12-25T12:29:43.822535463Z | 37 | PC: 12ab1 | Set interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-25T12:29:43.824164275Z | 42 | PC: 12ab8 | Get date 0x12ab8: cmp dx, 0x501 0x12abc: je 0x12ac1 0x12abe: jmp 0x12b67 0x12ac1: mov ah, 0xf 0x12ac3: int 0x10 0x12ac5: xor ah, ah 0x12ac7: push ax 0x12ac8: mov ax, 0x13 0x12acb: int 0x10 0x12acd: mov cx, 0x1c 0x12ad0: xor bx, bx 0x12ad2: lea si, word ptr [bp + 0x3cc] 0x12ad6: mov dx, 0x3c8 0x12ad9: mov al, bl 0x12adb: out dx, al 0x12adc: lodsb al, byte ptr [si] 0x12add: mov dx, 0x3c9 0x12ae0: out dx, al 0x12ae1: lodsb al, byte ptr [si] 0x12ae2: out dx, al |
| 2018-12-25T12:29:43.82863633Z | 77 | PC: 11fe0 | Get program return code |
| 2018-12-25T12:29:43.829801374Z | 72 | PC: 12174 | Allocate memory |
| 2018-12-25T12:29:43.832020811Z | 72 | PC: 1218d | Allocate memory |
| 2018-12-25T12:29:43.834319291Z | 37 | PC: 123c4 | Set interrupt vector (Interrupt = '34' AKA 'Random write') |
| 2018-12-25T12:29:43.835450721Z | 37 | PC: 123cb | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records') |
| 2018-12-25T12:29:43.837004971Z | 37 | PC: 123d2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-25T12:29:43.838082304Z | 53 | PC: 9e954 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-25T12:29:43.839060497Z | 37 | PC: 9e968 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-25T12:29:43.847372541Z | 37 | PC: 9ea29 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-25T12:29:43.848355443Z | 62 | PC: 122ab | Close file |
| 2018-12-25T12:29:43.849464732Z | 53 | PC: 9e954 | Get interrupt vector (See above) |
| 2018-12-25T12:29:43.850520206Z | 37 | PC: 9e968 | Set interrupt vector (See above) |
| 2018-12-25T12:29:43.860640907Z | 37 | PC: 9ea29 | Set interrupt vector (See above) |
| 2018-12-25T12:29:43.86183357Z | 62 | PC: 122ab | Close file (See above) |
| 2018-12-25T12:29:43.863419528Z | 53 | PC: 9e954 | Get interrupt vector (See above) |
| 2018-12-25T12:29:43.865660417Z | 37 | PC: 9e968 | Set interrupt vector (See above) |
| 2018-12-25T12:29:43.867402999Z | 37 | PC: 9ea29 | Set interrupt vector (See above) |
| 2018-12-25T12:29:43.868606968Z | 62 | PC: 122ab | Close file (See above) |
| 2018-12-25T12:29:43.870703931Z | 53 | PC: 9e954 | Get interrupt vector (See above) |
| 2018-12-25T12:29:43.871925822Z | 37 | PC: 9e968 | Set interrupt vector (See above) |
| 2018-12-25T12:29:43.873535585Z | 37 | PC: 9ea29 | Set interrupt vector (See above) |
| 2018-12-25T12:29:43.875253675Z | 62 | PC: 122ab | Close file (See above) |
| 2018-12-25T12:29:43.876951692Z | 53 | PC: 9e954 | Get interrupt vector (See above) |
| 2018-12-25T12:29:43.878195939Z | 37 | PC: 9e968 | Set interrupt vector (See above) |
| 2018-12-25T12:29:43.880312603Z | 37 | PC: 9ea29 | Set interrupt vector (See above) |
| 2018-12-25T12:29:43.881536531Z | 62 | PC: 122ab | Close file (See above) |
| 2018-12-25T12:29:43.883244339Z | 53 | PC: 9e954 | Get interrupt vector (See above) |
| 2018-12-25T12:29:43.885433986Z | 37 | PC: 9e968 | Set interrupt vector (See above) |
| 2018-12-25T12:29:43.887278898Z | 37 | PC: 9ea29 | Set interrupt vector (See above) |
| 2018-12-25T12:29:43.888636636Z | 62 | PC: 122ab | Close file (See above) |
| 2018-12-25T12:29:43.890332031Z | 53 | PC: 9e954 | Get interrupt vector (See above) |
| 2018-12-25T12:29:43.892328017Z | 37 | PC: 9e968 | Set interrupt vector (See above) |
| 2018-12-25T12:29:43.8944334Z | 37 | PC: 9ea29 | Set interrupt vector (See above) |
| 2018-12-25T12:29:43.896107729Z | 62 | PC: 122ab | Close file (See above) |
| 2018-12-25T12:29:43.898534056Z | 53 | PC: 9e954 | Get interrupt vector (See above) |
| 2018-12-25T12:29:43.899773539Z | 37 | PC: 9e968 | Set interrupt vector (See above) |
| 2018-12-25T12:29:43.901356478Z | 37 | PC: 9ea29 | Set interrupt vector (See above) |
| 2018-12-25T12:29:43.903787223Z | 62 | PC: 122ab | Close file (See above) |
| 2018-12-25T12:29:43.905426107Z | 53 | PC: 9e954 | Get interrupt vector (See above) |
| 2018-12-25T12:29:43.906627995Z | 37 | PC: 9e968 | Set interrupt vector (See above) |
| 2018-12-25T12:29:43.908643226Z | 37 | PC: 9ea29 | Set interrupt vector (See above) |
| 2018-12-25T12:29:43.910089094Z | 62 | PC: 122ab | Close file (See above) |
| 2018-12-25T12:29:43.911710842Z | 53 | PC: 9e954 | Get interrupt vector (See above) |
| 2018-12-25T12:29:43.913294148Z | 37 | PC: 9e968 | Set interrupt vector (See above) |
| 2018-12-25T12:29:43.914951467Z | 37 | PC: 9ea29 | Set interrupt vector (See above) |
| 2018-12-25T12:29:43.916156643Z | 62 | PC: 122ab | Close file (See above) |
| 2018-12-25T12:29:43.918617708Z | 53 | PC: 9e954 | Get interrupt vector (See above) |
| 2018-12-25T12:29:43.920034382Z | 37 | PC: 9e968 | Set interrupt vector (See above) |
| 2018-12-25T12:29:43.921781251Z | 37 | PC: 9ea29 | Set interrupt vector (See above) |
| 2018-12-25T12:29:43.923498852Z | 62 | PC: 122ab | Close file (See above) |
| 2018-12-25T12:29:43.925613689Z | 53 | PC: 9e954 | Get interrupt vector (See above) |
| 2018-12-25T12:29:43.927331802Z | 37 | PC: 9e968 | Set interrupt vector (See above) |
| 2018-12-25T12:29:43.929501494Z | 37 | PC: 9ea29 | Set interrupt vector (See above) |
| 2018-12-25T12:29:43.931283651Z | 62 | PC: 122ab | Close file (See above) |
| 2018-12-25T12:29:43.933386458Z | 53 | PC: 9e954 | Get interrupt vector (See above) |
| 2018-12-25T12:29:43.935236648Z | 37 | PC: 9e968 | Set interrupt vector (See above) |
| 2018-12-25T12:29:43.937581596Z | 37 | PC: 9ea29 | Set interrupt vector (See above) |
| 2018-12-25T12:29:43.938759448Z | 62 | PC: 122ab | Close file (See above) |
| 2018-12-25T12:29:43.940379937Z | 53 | PC: 9e954 | Get interrupt vector (See above) |
| 2018-12-25T12:29:43.942219353Z | 37 | PC: 9e968 | Set interrupt vector (See above) |
| 2018-12-25T12:29:43.943762928Z | 37 | PC: 9ea29 | Set interrupt vector (See above) |
| 2018-12-25T12:29:43.944873416Z | 62 | PC: 122ab | Close file (See above) |
| 2018-12-25T12:29:43.946810036Z | 53 | PC: 9e954 | Get interrupt vector (See above) |
| 2018-12-25T12:29:43.94802839Z | 37 | PC: 9e968 | Set interrupt vector (See above) |
| 2018-12-25T12:29:43.949598441Z | 37 | PC: 9ea29 | Set interrupt vector (See above) |
| 2018-12-25T12:29:43.951147244Z | 62 | PC: 122ab | Close file (See above) |
| 2018-12-25T12:29:43.953821341Z | 61 | PC: 12354 | Open file (Filename = 'C:\COMMAND.COM') |
| 2018-12-25T12:29:43.960401028Z | 66 | PC: 12372 | Move file pointer |
| 2018-12-25T12:29:43.962324315Z | 63 | PC: 12383 | Read file or device (Read 44693 bytes on handle 5) |
| 2018-12-25T12:29:43.976717928Z | 53 | PC: 9e954 | Get interrupt vector (See above) |
| 2018-12-25T12:29:43.977894508Z | 37 | PC: 9e968 | Set interrupt vector (See above) |
| 2018-12-25T12:29:43.979887186Z | 87 | PC: 9e9a6 | Get or set file date and time |
| 2018-12-25T12:29:43.98211207Z | 63 | PC: 9e9c4 | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-25T12:29:43.984668374Z | 66 | PC: 9e9da | Move file pointer |
| 2018-12-25T12:29:43.986427984Z | 64 | PC: 9e9f7 | Write file or device (Write 5238 bytes on handle 5) |
| 2018-12-25T12:29:45.016443149Z | 66 | PC: 9e9ff | Move file pointer |
| 2018-12-25T12:29:45.018468091Z | 64 | PC: 9ea09 | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-25T12:29:45.02251619Z | 87 | PC: 9ea1e | Get or set file date and time |
| 2018-12-25T12:29:45.023680587Z | 37 | PC: 9ea29 | Set interrupt vector (See above) |
| 2018-12-25T12:29:45.024578827Z | 62 | PC: 1238a | Close file |
| 2018-12-25T12:29:45.034640884Z | 99 | PC: 99147 | Get DBCS lead byte table pointer |
| 2018-12-25T12:29:45.036258247Z | 56 | PC: 93969 | Get or set country info |
| 2018-12-25T12:29:45.038588686Z | 64 | PC: 993b8 | Write file or device (Write 2 bytes on handle 1) |
| 2018-12-25T12:29:45.044490911Z | 25 | PC: 939d2 | Get default drive |
| 2018-12-25T12:29:45.046487765Z | 71 | PC: 95c4d | Get current directory |
| 2018-12-25T12:29:45.051346308Z | 64 | PC: 993b8 | Write file or device (See above) |
| 2018-12-25T12:29:45.056074899Z | 2 | PC: 95c22 | Character output (Char = '3e') |
| 2018-12-25T12:29:45.058825868Z | 93 | PC: 93a90 | File sharing functions |
| 2018-12-25T12:29:45.060629732Z | 93 | PC: 93a97 | File sharing functions |
| 2018-12-25T12:29:45.063400495Z | 10 | PC: 93aa9 | Buffered keyboard input |
| 2018-12-25T12:29:58.799985413Z | 0 | PC: 0 | Program terminate |
| 2018-12-25T12:30:00.155362177Z | 0 | PC: 0 | Program terminate (See above) |
| 2018-12-25T12:30:00.258344814Z | 64 | PC: 993b8 | Write file or device (See above) |
| 2018-12-25T12:30:00.26553854Z | 41 | PC: 93b1e | Parse filename |
| 2018-12-25T12:30:00.26919427Z | 41 | PC: 93b9f | Parse filename |
| 2018-12-25T12:30:00.27296225Z | 41 | PC: 93bbc | Parse filename |
| 2018-12-25T12:30:00.276468739Z | 26 | PC: 97067 | Set disk transfer address |
| 2018-12-25T12:30:00.278849158Z | 71 | PC: 97263 | Get current directory |
| 2018-12-25T12:30:00.289504649Z | 78 | PC: 9726e | Find first file |
| 2018-12-25T12:30:00.302110762Z | 71 | PC: 970dc | Get current directory |
| 2018-12-25T12:30:00.30647996Z | 73 | PC: 96779 | Release memory |
| 2018-12-25T12:30:00.309765176Z | 75 | PC: 11821 | Execute program |
| 2018-12-25T12:30:00.3257692Z | 9 | PC: 12a47 | Display string (String= 'Hello, World! ') |
| 2018-12-25T12:30:00.331535984Z | 76 | PC: 12a4b | Terminate with return code (Return code = '36') |
| 2018-12-25T12:30:00.339356341Z | 77 | PC: 11fe0 | Get program return code (See above) |
| 2018-12-25T12:30:00.340925303Z | 72 | PC: 12174 | Allocate memory (See above) |
| 2018-12-25T12:30:00.343092851Z | 72 | PC: 1218d | Allocate memory (See above) |
| 2018-12-25T12:30:00.34690486Z | 37 | PC: 123c4 | Set interrupt vector (See above) |
| 2018-12-25T12:30:00.348555895Z | 37 | PC: 123cb | Set interrupt vector (See above) |
| 2018-12-25T12:30:00.350226727Z | 37 | PC: 123d2 | Set interrupt vector (See above) |
| 2018-12-25T12:30:00.352761507Z | 53 | PC: 9e954 | Get interrupt vector (See above) |
| 2018-12-25T12:30:00.354451908Z | 37 | PC: 9e968 | Set interrupt vector (See above) |
| 2018-12-25T12:30:00.356655904Z | 37 | PC: 9ea29 | Set interrupt vector (See above) |
| 2018-12-25T12:30:00.359057147Z | 62 | PC: 122ab | Close file (See above) |
| 2018-12-25T12:30:00.360888113Z | 53 | PC: 9e954 | Get interrupt vector (See above) |
| 2018-12-25T12:30:00.362635947Z | 37 | PC: 9e968 | Set interrupt vector (See above) |
| 2018-12-25T12:30:00.365493463Z | 37 | PC: 9ea29 | Set interrupt vector (See above) |
| 2018-12-25T12:30:00.366840515Z | 62 | PC: 122ab | Close file (See above) |
| 2018-12-25T12:30:00.369427273Z | 53 | PC: 9e954 | Get interrupt vector (See above) |
| 2018-12-25T12:30:00.371598754Z | 37 | PC: 9e968 | Set interrupt vector (See above) |
| 2018-12-25T12:30:00.373378976Z | 37 | PC: 9ea29 | Set interrupt vector (See above) |
| 2018-12-25T12:30:00.374682207Z | 62 | PC: 122ab | Close file (See above) |
| 2018-12-25T12:30:00.377819398Z | 53 | PC: 9e954 | Get interrupt vector (See above) |
| 2018-12-25T12:30:00.387262526Z | 37 | PC: 9e968 | Set interrupt vector (See above) |
| 2018-12-25T12:30:00.389261709Z | 37 | PC: 9ea29 | Set interrupt vector (See above) |
| 2018-12-25T12:30:00.390919654Z | 62 | PC: 122ab | Close file (See above) |
| 2018-12-25T12:30:00.39354429Z | 53 | PC: 9e954 | Get interrupt vector (See above) |
| 2018-12-25T12:30:00.395032994Z | 37 | PC: 9e968 | Set interrupt vector (See above) |
| 2018-12-25T12:30:00.396958207Z | 37 | PC: 9ea29 | Set interrupt vector (See above) |
| 2018-12-25T12:30:00.399056132Z | 62 | PC: 122ab | Close file (See above) |
| 2018-12-25T12:30:00.400913027Z | 53 | PC: 9e954 | Get interrupt vector (See above) |
| 2018-12-25T12:30:00.402379386Z | 37 | PC: 9e968 | Set interrupt vector (See above) |
| 2018-12-25T12:30:00.405563545Z | 37 | PC: 9ea29 | Set interrupt vector (See above) |
| 2018-12-25T12:30:00.408752776Z | 62 | PC: 122ab | Close file (See above) |
| 2018-12-25T12:30:00.410651335Z | 53 | PC: 9e954 | Get interrupt vector (See above) |
| 2018-12-25T12:30:00.413673198Z | 37 | PC: 9e968 | Set interrupt vector (See above) |
| 2018-12-25T12:30:00.415865308Z | 37 | PC: 9ea29 | Set interrupt vector (See above) |
| 2018-12-25T12:30:00.417676404Z | 62 | PC: 122ab | Close file (See above) |
| 2018-12-25T12:30:00.420900049Z | 53 | PC: 9e954 | Get interrupt vector (See above) |
| 2018-12-25T12:30:00.422697522Z | 37 | PC: 9e968 | Set interrupt vector (See above) |
| 2018-12-25T12:30:00.425112281Z | 37 | PC: 9ea29 | Set interrupt vector (See above) |
| 2018-12-25T12:30:00.427266734Z | 62 | PC: 122ab | Close file (See above) |
| 2018-12-25T12:30:00.42954787Z | 53 | PC: 9e954 | Get interrupt vector (See above) |
| 2018-12-25T12:30:00.431449792Z | 37 | PC: 9e968 | Set interrupt vector (See above) |
| 2018-12-25T12:30:00.434729512Z | 37 | PC: 9ea29 | Set interrupt vector (See above) |
| 2018-12-25T12:30:00.436585134Z | 62 | PC: 122ab | Close file (See above) |
| 2018-12-25T12:30:00.438858133Z | 53 | PC: 9e954 | Get interrupt vector (See above) |
| 2018-12-25T12:30:00.441351347Z | 37 | PC: 9e968 | Set interrupt vector (See above) |
| 2018-12-25T12:30:00.443278854Z | 37 | PC: 9ea29 | Set interrupt vector (See above) |
| 2018-12-25T12:30:00.444594086Z | 62 | PC: 122ab | Close file (See above) |
| 2018-12-25T12:30:00.447284752Z | 53 | PC: 9e954 | Get interrupt vector (See above) |
| 2018-12-25T12:30:00.448690788Z | 37 | PC: 9e968 | Set interrupt vector (See above) |
| 2018-12-25T12:30:00.450681903Z | 37 | PC: 9ea29 | Set interrupt vector (See above) |
| 2018-12-25T12:30:00.453413811Z | 62 | PC: 122ab | Close file (See above) |
| 2018-12-25T12:30:00.455023133Z | 53 | PC: 9e954 | Get interrupt vector (See above) |
| 2018-12-25T12:30:00.456419393Z | 37 | PC: 9e968 | Set interrupt vector (See above) |
| 2018-12-25T12:30:00.45984057Z | 37 | PC: 9ea29 | Set interrupt vector (See above) |
| 2018-12-25T12:30:00.461588076Z | 62 | PC: 122ab | Close file (See above) |
| 2018-12-25T12:30:00.463257904Z | 53 | PC: 9e954 | Get interrupt vector (See above) |
| 2018-12-25T12:30:00.464743211Z | 37 | PC: 9e968 | Set interrupt vector (See above) |
| 2018-12-25T12:30:00.478224161Z | 37 | PC: 9ea29 | Set interrupt vector (See above) |
| 2018-12-25T12:30:00.481017548Z | 62 | PC: 122ab | Close file (See above) |
| 2018-12-25T12:30:00.4829019Z | 53 | PC: 9e954 | Get interrupt vector (See above) |
| 2018-12-25T12:30:00.484469861Z | 37 | PC: 9e968 | Set interrupt vector (See above) |
| 2018-12-25T12:30:00.486175039Z | 37 | PC: 9ea29 | Set interrupt vector (See above) |
| 2018-12-25T12:30:00.487613292Z | 62 | PC: 122ab | Close file (See above) |
| 2018-12-25T12:30:00.490605379Z | 53 | PC: 9e954 | Get interrupt vector (See above) |
| 2018-12-25T12:30:00.492001962Z | 37 | PC: 9e968 | Set interrupt vector (See above) |
| 2018-12-25T12:30:00.49394427Z | 37 | PC: 9ea29 | Set interrupt vector (See above) |
| 2018-12-25T12:30:00.495565691Z | 62 | PC: 122ab | Close file (See above) |
| 2018-12-25T12:30:00.498879729Z | 99 | PC: 99147 | Get DBCS lead byte table pointer (See above) |
| 2018-12-25T12:30:00.500584869Z | 56 | PC: 93969 | Get or set country info (See above) |
| 2018-12-25T12:30:00.503549574Z | 64 | PC: 993b8 | Write file or device (See above) |
| 2018-12-25T12:30:00.509195649Z | 25 | PC: 939d2 | Get default drive (See above) |
| 2018-12-25T12:30:00.511150062Z | 71 | PC: 95c4d | Get current directory (See above) |
| 2018-12-25T12:30:00.516642412Z | 64 | PC: 993b8 | Write file or device (See above) |
| 2018-12-25T12:30:00.521906884Z | 2 | PC: 95c22 | Character output (See above) |
| 2018-12-25T12:30:00.524225741Z | 93 | PC: 93a90 | File sharing functions (See above) |
| 2018-12-25T12:30:00.52643137Z | 93 | PC: 93a97 | File sharing functions (See above) |
| 2018-12-25T12:30:00.528393118Z | 10 | PC: 93aa9 | Buffered keyboard input (See above) |
{"DateBased":true,"Day":1,"Month":5,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":10965,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:29:43.974460484Z | 75 | PC: 12a5a | Execute program |
| 2018-12-25T12:29:43.976094368Z | 53 | PC: 12a64 | Get interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-25T12:29:43.977901651Z | 74 | PC: 12a81 | Reallocate memory |
| 2018-12-25T12:29:43.979195207Z | 72 | PC: 12a88 | Allocate memory |
| 2018-12-25T12:29:44.005303944Z | 37 | PC: 12ab1 | Set interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-25T12:29:44.006507326Z | 42 | PC: 12ab8 | Get date 0x12ab8: cmp dx, 0x501 0x12abc: je 0x12ac1 0x12abe: jmp 0x12b67 0x12ac1: mov ah, 0xf 0x12ac3: int 0x10 0x12ac5: xor ah, ah 0x12ac7: push ax 0x12ac8: mov ax, 0x13 0x12acb: int 0x10 0x12acd: mov cx, 0x1c 0x12ad0: xor bx, bx 0x12ad2: lea si, word ptr [bp + 0x3cc] 0x12ad6: mov dx, 0x3c8 0x12ad9: mov al, bl 0x12adb: out dx, al 0x12adc: lodsb al, byte ptr [si] 0x12add: mov dx, 0x3c9 0x12ae0: out dx, al 0x12ae1: lodsb al, byte ptr [si] 0x12ae2: out dx, al |