{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":11251,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:30:14.279743527Z | 78 | PC: 12a68 | Find first file |
| 2018-12-25T12:30:14.286208612Z | 67 | PC: 12aa6 | Get or set file attributes |
| 2018-12-25T12:30:14.291806186Z | 67 | PC: 12ab1 | Get or set file attributes |
| 2018-12-25T12:30:14.311821269Z | 61 | PC: 12ab6 | Open file (Filename = 'SLEEP.COM') |
| 2018-12-25T12:30:14.319314946Z | 87 | PC: 12abf | Get or set file date and time |
| 2018-12-25T12:30:14.32060283Z | 64 | PC: 12ad1 | Write file or device (Write 175 bytes on handle 5) |
| 2018-12-25T12:30:14.339118475Z | 87 | PC: 12ade | Get or set file date and time |
| 2018-12-25T12:30:14.34192349Z | 62 | PC: 12ae2 | Close file |
| 2018-12-25T12:30:14.349286819Z | 67 | PC: 12aee | Get or set file attributes |
| 2018-12-25T12:30:14.358967963Z | 79 | PC: 12a76 | Find next file |
| 2018-12-25T12:30:14.361995634Z | 67 | PC: 12aa6 | Get or set file attributes (See above) |
| 2018-12-25T12:30:14.366067714Z | 67 | PC: 12ab1 | Get or set file attributes (See above) |
| 2018-12-25T12:30:14.378023923Z | 61 | PC: 12ab6 | Open file (See above) |
| 2018-12-25T12:30:14.389135589Z | 87 | PC: 12abf | Get or set file date and time (See above) |
| 2018-12-25T12:30:14.390835927Z | 64 | PC: 12ad1 | Write file or device (See above) |
| 2018-12-25T12:30:14.397154338Z | 87 | PC: 12ade | Get or set file date and time (See above) |
| 2018-12-25T12:30:14.398788559Z | 62 | PC: 12ae2 | Close file (See above) |
| 2018-12-25T12:30:14.406024241Z | 67 | PC: 12aee | Get or set file attributes (See above) |
| 2018-12-25T12:30:14.412202925Z | 79 | PC: 12a76 | Find next file (See above) |
| 2018-12-25T12:30:14.413897866Z | 67 | PC: 12aa6 | Get or set file attributes (See above) |
| 2018-12-25T12:30:14.419972519Z | 67 | PC: 12ab1 | Get or set file attributes (See above) |
| 2018-12-25T12:30:14.428498808Z | 61 | PC: 12ab6 | Open file (See above) |
| 2018-12-25T12:30:14.438689039Z | 87 | PC: 12abf | Get or set file date and time (See above) |
| 2018-12-25T12:30:14.44020501Z | 64 | PC: 12ad1 | Write file or device (See above) |
| 2018-12-25T12:30:14.445253957Z | 87 | PC: 12ade | Get or set file date and time (See above) |
| 2018-12-25T12:30:14.446563937Z | 62 | PC: 12ae2 | Close file (See above) |
| 2018-12-25T12:30:14.457729598Z | 67 | PC: 12aee | Get or set file attributes (See above) |
| 2018-12-25T12:30:14.467453672Z | 79 | PC: 12a76 | Find next file (See above) |
| 2018-12-25T12:30:14.469984648Z | 67 | PC: 12aa6 | Get or set file attributes (See above) |
| 2018-12-25T12:30:14.476847633Z | 67 | PC: 12ab1 | Get or set file attributes (See above) |
| 2018-12-25T12:30:14.48646281Z | 61 | PC: 12ab6 | Open file (See above) |
| 2018-12-25T12:30:14.490859572Z | 87 | PC: 12abf | Get or set file date and time (See above) |
| 2018-12-25T12:30:14.492884108Z | 64 | PC: 12ad1 | Write file or device (See above) |
| 2018-12-25T12:30:14.497327421Z | 87 | PC: 12ade | Get or set file date and time (See above) |
| 2018-12-25T12:30:14.498549488Z | 62 | PC: 12ae2 | Close file (See above) |
| 2018-12-25T12:30:14.50624404Z | 67 | PC: 12aee | Get or set file attributes (See above) |
| 2018-12-25T12:30:14.514320421Z | 79 | PC: 12a76 | Find next file (See above) |
| 2018-12-25T12:30:14.51697849Z | 67 | PC: 12aa6 | Get or set file attributes (See above) |
| 2018-12-25T12:30:14.523544437Z | 67 | PC: 12ab1 | Get or set file attributes (See above) |
| 2018-12-25T12:30:14.534941401Z | 61 | PC: 12ab6 | Open file (See above) |
| 2018-12-25T12:30:14.541249071Z | 87 | PC: 12abf | Get or set file date and time (See above) |
| 2018-12-25T12:30:14.543090352Z | 64 | PC: 12ad1 | Write file or device (See above) |
| 2018-12-25T12:30:14.549829866Z | 87 | PC: 12ade | Get or set file date and time (See above) |
| 2018-12-25T12:30:14.551572532Z | 62 | PC: 12ae2 | Close file (See above) |
| 2018-12-25T12:30:14.559550241Z | 67 | PC: 12aee | Get or set file attributes (See above) |
| 2018-12-25T12:30:14.569711659Z | 79 | PC: 12a76 | Find next file (See above) |
| 2018-12-25T12:30:14.572528143Z | 67 | PC: 12aa6 | Get or set file attributes (See above) |
| 2018-12-25T12:30:14.578294743Z | 67 | PC: 12ab1 | Get or set file attributes (See above) |
| 2018-12-25T12:30:14.591850411Z | 61 | PC: 12ab6 | Open file (See above) |
| 2018-12-25T12:30:14.598609769Z | 87 | PC: 12abf | Get or set file date and time (See above) |
| 2018-12-25T12:30:14.600236913Z | 64 | PC: 12ad1 | Write file or device (See above) |
| 2018-12-25T12:30:14.607903928Z | 87 | PC: 12ade | Get or set file date and time (See above) |
| 2018-12-25T12:30:14.609644377Z | 62 | PC: 12ae2 | Close file (See above) |
| 2018-12-25T12:30:14.615530174Z | 67 | PC: 12aee | Get or set file attributes (See above) |
| 2018-12-25T12:30:14.626321409Z | 79 | PC: 12a76 | Find next file (See above) |
| 2018-12-25T12:30:14.629125049Z | 67 | PC: 12aa6 | Get or set file attributes (See above) |
| 2018-12-25T12:30:14.634863119Z | 67 | PC: 12ab1 | Get or set file attributes (See above) |
| 2018-12-25T12:30:14.648278227Z | 61 | PC: 12ab6 | Open file (See above) |
| 2018-12-25T12:30:14.655089101Z | 87 | PC: 12abf | Get or set file date and time (See above) |
| 2018-12-25T12:30:14.656369046Z | 64 | PC: 12ad1 | Write file or device (See above) |
| 2018-12-25T12:30:14.663797164Z | 87 | PC: 12ade | Get or set file date and time (See above) |
| 2018-12-25T12:30:14.665540493Z | 62 | PC: 12ae2 | Close file (See above) |
| 2018-12-25T12:30:14.67230443Z | 67 | PC: 12aee | Get or set file attributes (See above) |
| 2018-12-25T12:30:14.680110483Z | 79 | PC: 12a76 | Find next file (See above) |
| 2018-12-25T12:30:14.682627034Z | 67 | PC: 12aa6 | Get or set file attributes (See above) |
| 2018-12-25T12:30:14.687089341Z | 67 | PC: 12ab1 | Get or set file attributes (See above) |
| 2018-12-25T12:30:14.694389241Z | 61 | PC: 12ab6 | Open file (See above) |
| 2018-12-25T12:30:14.703052861Z | 87 | PC: 12abf | Get or set file date and time (See above) |
| 2018-12-25T12:30:14.704716855Z | 64 | PC: 12ad1 | Write file or device (See above) |
| 2018-12-25T12:30:14.711857675Z | 87 | PC: 12ade | Get or set file date and time (See above) |
| 2018-12-25T12:30:14.714262512Z | 62 | PC: 12ae2 | Close file (See above) |
| 2018-12-25T12:30:14.721470244Z | 67 | PC: 12aee | Get or set file attributes (See above) |
| 2018-12-25T12:30:14.731160937Z | 79 | PC: 12a76 | Find next file (See above) |
| 2018-12-25T12:30:14.734049343Z | 42 | PC: 12a80 | Get date 0x12a80: cmp al, 3 0x12a82: jne 0x12a9a 0x12a84: mov ah, 0x2c 0x12a86: int 0x21 0x12a88: mov byte ptr [0x10f], dh 0x12a8c: mov ah, 5 0x12a8e: mov dh, 0 0x12a90: mov dl, 0 0x12a92: mov cl, 1 0x12a94: mov ch, byte ptr [0x10f] 0x12a98: int 0x13 0x12a9a: mov ah, 0x4c 0x12a9c: int 0x21 0x12a9e: mov dx, 0x9e 0x12aa1: mov ax, 0x4300 0x12aa4: int 0x21 0x12aa6: mov word ptr [0x10d], cx 0x12aaa: xor cx, cx 0x12aac: mov ax, 0x4301 0x12aaf: int 0x21 |
| 2018-12-25T12:30:14.736010478Z | 76 | PC: 12a9e | Terminate with return code (Return code = '2') |
{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":11251,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:30:14.916814225Z | 78 | PC: 12a68 | Find first file |
| 2018-12-25T12:30:14.924108128Z | 67 | PC: 12aa6 | Get or set file attributes |
| 2018-12-25T12:30:14.929394362Z | 67 | PC: 12ab1 | Get or set file attributes |
| 2018-12-25T12:30:14.94299243Z | 61 | PC: 12ab6 | Open file (Filename = 'SLEEP.COM') |
| 2018-12-25T12:30:14.948433813Z | 87 | PC: 12abf | Get or set file date and time |
| 2018-12-25T12:30:14.95008248Z | 64 | PC: 12ad1 | Write file or device (Write 175 bytes on handle 5) |
| 2018-12-25T12:30:14.957413118Z | 87 | PC: 12ade | Get or set file date and time |
| 2018-12-25T12:30:14.959170515Z | 62 | PC: 12ae2 | Close file |
| 2018-12-25T12:30:14.968011236Z | 67 | PC: 12aee | Get or set file attributes |
| 2018-12-25T12:30:14.978731626Z | 79 | PC: 12a76 | Find next file |
| 2018-12-25T12:30:14.981532396Z | 67 | PC: 12aa6 | Get or set file attributes (See above) |
| 2018-12-25T12:30:14.988238776Z | 67 | PC: 12ab1 | Get or set file attributes (See above) |
| 2018-12-25T12:30:14.998564801Z | 61 | PC: 12ab6 | Open file (See above) |
| 2018-12-25T12:30:15.005697009Z | 87 | PC: 12abf | Get or set file date and time (See above) |
| 2018-12-25T12:30:15.007914878Z | 64 | PC: 12ad1 | Write file or device (See above) |
| 2018-12-25T12:30:15.015283753Z | 87 | PC: 12ade | Get or set file date and time (See above) |
| 2018-12-25T12:30:15.016743458Z | 62 | PC: 12ae2 | Close file (See above) |
| 2018-12-25T12:30:15.026707043Z | 67 | PC: 12aee | Get or set file attributes (See above) |
| 2018-12-25T12:30:15.037503955Z | 79 | PC: 12a76 | Find next file (See above) |
| 2018-12-25T12:30:15.040509725Z | 67 | PC: 12aa6 | Get or set file attributes (See above) |
| 2018-12-25T12:30:15.047103738Z | 67 | PC: 12ab1 | Get or set file attributes (See above) |
| 2018-12-25T12:30:15.057614967Z | 61 | PC: 12ab6 | Open file (See above) |
| 2018-12-25T12:30:15.064931268Z | 87 | PC: 12abf | Get or set file date and time (See above) |
| 2018-12-25T12:30:15.067067732Z | 64 | PC: 12ad1 | Write file or device (See above) |
| 2018-12-25T12:30:15.074184547Z | 87 | PC: 12ade | Get or set file date and time (See above) |
| 2018-12-25T12:30:15.075641379Z | 62 | PC: 12ae2 | Close file (See above) |
| 2018-12-25T12:30:15.083883178Z | 67 | PC: 12aee | Get or set file attributes (See above) |
| 2018-12-25T12:30:15.097378195Z | 79 | PC: 12a76 | Find next file (See above) |
| 2018-12-25T12:30:15.10012873Z | 67 | PC: 12aa6 | Get or set file attributes (See above) |
| 2018-12-25T12:30:15.106994271Z | 67 | PC: 12ab1 | Get or set file attributes (See above) |
| 2018-12-25T12:30:15.117575745Z | 61 | PC: 12ab6 | Open file (See above) |
| 2018-12-25T12:30:15.124691773Z | 87 | PC: 12abf | Get or set file date and time (See above) |
| 2018-12-25T12:30:15.126330116Z | 64 | PC: 12ad1 | Write file or device (See above) |
| 2018-12-25T12:30:15.133847137Z | 87 | PC: 12ade | Get or set file date and time (See above) |
| 2018-12-25T12:30:15.135454144Z | 62 | PC: 12ae2 | Close file (See above) |
| 2018-12-25T12:30:15.143609712Z | 67 | PC: 12aee | Get or set file attributes (See above) |
| 2018-12-25T12:30:15.15843023Z | 79 | PC: 12a76 | Find next file (See above) |
| 2018-12-25T12:30:15.161443148Z | 67 | PC: 12aa6 | Get or set file attributes (See above) |
| 2018-12-25T12:30:15.167607258Z | 67 | PC: 12ab1 | Get or set file attributes (See above) |
| 2018-12-25T12:30:15.17840878Z | 61 | PC: 12ab6 | Open file (See above) |
| 2018-12-25T12:30:15.18546207Z | 87 | PC: 12abf | Get or set file date and time (See above) |
| 2018-12-25T12:30:15.186851681Z | 64 | PC: 12ad1 | Write file or device (See above) |
| 2018-12-25T12:30:15.194315032Z | 87 | PC: 12ade | Get or set file date and time (See above) |
| 2018-12-25T12:30:15.195877695Z | 62 | PC: 12ae2 | Close file (See above) |
| 2018-12-25T12:30:15.203568981Z | 67 | PC: 12aee | Get or set file attributes (See above) |
| 2018-12-25T12:30:15.218041246Z | 79 | PC: 12a76 | Find next file (See above) |
| 2018-12-25T12:30:15.220941637Z | 67 | PC: 12aa6 | Get or set file attributes (See above) |
| 2018-12-25T12:30:15.227187907Z | 67 | PC: 12ab1 | Get or set file attributes (See above) |
| 2018-12-25T12:30:15.238970134Z | 61 | PC: 12ab6 | Open file (See above) |
| 2018-12-25T12:30:15.246913628Z | 87 | PC: 12abf | Get or set file date and time (See above) |
| 2018-12-25T12:30:15.248610985Z | 64 | PC: 12ad1 | Write file or device (See above) |
| 2018-12-25T12:30:15.255848547Z | 87 | PC: 12ade | Get or set file date and time (See above) |
| 2018-12-25T12:30:15.258331041Z | 62 | PC: 12ae2 | Close file (See above) |
| 2018-12-25T12:30:15.266240216Z | 67 | PC: 12aee | Get or set file attributes (See above) |
| 2018-12-25T12:30:15.279858025Z | 79 | PC: 12a76 | Find next file (See above) |
| 2018-12-25T12:30:15.283328349Z | 67 | PC: 12aa6 | Get or set file attributes (See above) |
| 2018-12-25T12:30:15.289422894Z | 67 | PC: 12ab1 | Get or set file attributes (See above) |
| 2018-12-25T12:30:15.299765725Z | 61 | PC: 12ab6 | Open file (See above) |
| 2018-12-25T12:30:15.307534483Z | 87 | PC: 12abf | Get or set file date and time (See above) |
| 2018-12-25T12:30:15.308814216Z | 64 | PC: 12ad1 | Write file or device (See above) |
| 2018-12-25T12:30:15.313457077Z | 87 | PC: 12ade | Get or set file date and time (See above) |
| 2018-12-25T12:30:15.315458061Z | 62 | PC: 12ae2 | Close file (See above) |
| 2018-12-25T12:30:15.330569446Z | 67 | PC: 12aee | Get or set file attributes (See above) |
| 2018-12-25T12:30:15.344828497Z | 79 | PC: 12a76 | Find next file (See above) |
| 2018-12-25T12:30:15.348213674Z | 67 | PC: 12aa6 | Get or set file attributes (See above) |
| 2018-12-25T12:30:15.354560521Z | 67 | PC: 12ab1 | Get or set file attributes (See above) |
| 2018-12-25T12:30:15.365405707Z | 61 | PC: 12ab6 | Open file (See above) |
| 2018-12-25T12:30:15.373963436Z | 87 | PC: 12abf | Get or set file date and time (See above) |
| 2018-12-25T12:30:15.375517714Z | 64 | PC: 12ad1 | Write file or device (See above) |
| 2018-12-25T12:30:15.384487682Z | 87 | PC: 12ade | Get or set file date and time (See above) |
| 2018-12-25T12:30:15.387110963Z | 62 | PC: 12ae2 | Close file (See above) |
| 2018-12-25T12:30:15.395475976Z | 67 | PC: 12aee | Get or set file attributes (See above) |
| 2018-12-25T12:30:15.409644414Z | 79 | PC: 12a76 | Find next file (See above) |
| 2018-12-25T12:30:15.41295381Z | 42 | PC: 12a80 | Get date 0x12a80: cmp al, 3 0x12a82: jne 0x12a9a 0x12a84: mov ah, 0x2c 0x12a86: int 0x21 0x12a88: mov byte ptr [0x10f], dh 0x12a8c: mov ah, 5 0x12a8e: mov dh, 0 0x12a90: mov dl, 0 0x12a92: mov cl, 1 0x12a94: mov ch, byte ptr [0x10f] 0x12a98: int 0x13 0x12a9a: mov ah, 0x4c 0x12a9c: int 0x21 0x12a9e: mov dx, 0x9e 0x12aa1: mov ax, 0x4300 0x12aa4: int 0x21 0x12aa6: mov word ptr [0x10d], cx 0x12aaa: xor cx, cx 0x12aac: mov ax, 0x4301 0x12aaf: int 0x21 |
| 2018-12-25T12:30:15.415807074Z | 44 | PC: 12a88 | Get time 0x12a88: mov byte ptr [0x10f], dh 0x12a8c: mov ah, 5 0x12a8e: mov dh, 0 0x12a90: mov dl, 0 0x12a92: mov cl, 1 0x12a94: mov ch, byte ptr [0x10f] 0x12a98: int 0x13 0x12a9a: mov ah, 0x4c 0x12a9c: int 0x21 0x12a9e: mov dx, 0x9e 0x12aa1: mov ax, 0x4300 0x12aa4: int 0x21 0x12aa6: mov word ptr [0x10d], cx 0x12aaa: xor cx, cx 0x12aac: mov ax, 0x4301 0x12aaf: int 0x21 0x12ab1: mov ax, 0x3d02 0x12ab4: int 0x21 0x12ab6: jb 0x12a7c 0x12ab8: mov bx, ax |
| 2018-12-25T12:30:15.419530942Z | 76 | PC: 12a9e | Terminate with return code (Return code = '0') |