{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":13732,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:38:50.053149249Z | 26 | PC: 12a9f | Set disk transfer address |
| 2018-12-25T12:38:50.054957487Z | 71 | PC: 12ab1 | Get current directory |
| 2018-12-25T12:38:50.058062586Z | 42 | PC: 12ab7 | Get date 0x12ab7: cmp dh, 4 0x12aba: jne 0x12ad5 0x12abc: cmp dl, 0xf 0x12abf: jne 0x12ad5 0x12ac1: mov ax, 0x1010 0x12ac4: out 0x70, ax 0x12ac6: mov dx, 0x344 0x12ac9: mov ah, 9 0x12acb: int 0x21 0x12acd: mov ah, 8 0x12acf: int 0x21 0x12ad1: mov al, 0xfe 0x12ad3: out 0x64, al 0x12ad5: mov ah, byte ptr [0x373] 0x12ad9: mov cl, 7 0x12adb: mov dx, 0x338 0x12ade: int 0x21 0x12ae0: jae 0x12ae5 0x12ae2: jmp 0x12c1d 0x12ae5: mov dx, word ptr [0x367] |
| 2018-12-25T12:38:50.072697461Z | 78 | PC: 12ae0 | Find first file |
| 2018-12-25T12:38:50.079931106Z | 67 | PC: 12afc | Get or set file attributes |
| 2018-12-25T12:38:50.100225452Z | 61 | PC: 12b10 | Open file (Filename = 'SLEEP.COM') |
| 2018-12-25T12:38:50.107929877Z | 63 | PC: 12b2c | Read file or device (Read 686 bytes on handle 5) |
| 2018-12-25T12:38:50.115562157Z | 66 | PC: 12b4b | Move file pointer |
| 2018-12-25T12:38:50.119588089Z | 66 | PC: 12b6c | Move file pointer |
| 2018-12-25T12:38:50.121497704Z | 64 | PC: 12b87 | Write file or device (Write 407 bytes on handle 5) |
| 2018-12-25T12:38:50.130833304Z | 64 | PC: 12b97 | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-25T12:38:50.143456481Z | 66 | PC: 12bc6 | Move file pointer |
| 2018-12-25T12:38:50.145332026Z | 64 | PC: 12bd7 | Write file or device (Write 686 bytes on handle 5) |
| 2018-12-25T12:38:50.155962374Z | 87 | PC: 12be8 | Get or set file date and time |
| 2018-12-25T12:38:50.158699784Z | 62 | PC: 12bee | Close file |
| 2018-12-25T12:38:50.167784781Z | 67 | PC: 12c00 | Get or set file attributes |
| 2018-12-25T12:38:50.179114753Z | 79 | PC: 12ae0 | Find next file (See above) |
| 2018-12-25T12:38:50.183133576Z | 67 | PC: 12afc | Get or set file attributes (See above) |
| 2018-12-25T12:38:50.194316052Z | 61 | PC: 12b10 | Open file (See above) |
| 2018-12-25T12:38:50.202878282Z | 63 | PC: 12b2c | Read file or device (See above) |
| 2018-12-25T12:38:50.210626213Z | 66 | PC: 12b4b | Move file pointer (See above) |
| 2018-12-25T12:38:50.212613721Z | 66 | PC: 12b6c | Move file pointer (See above) |
| 2018-12-25T12:38:50.214587578Z | 64 | PC: 12b87 | Write file or device (See above) |
| 2018-12-25T12:38:50.21898987Z | 64 | PC: 12b97 | Write file or device (See above) |
| 2018-12-25T12:38:50.223996779Z | 66 | PC: 12bc6 | Move file pointer (See above) |
| 2018-12-25T12:38:50.225841417Z | 64 | PC: 12bd7 | Write file or device (See above) |
| 2018-12-25T12:38:50.23435079Z | 87 | PC: 12be8 | Get or set file date and time (See above) |
| 2018-12-25T12:38:50.236767145Z | 62 | PC: 12bee | Close file (See above) |
| 2018-12-25T12:38:50.245346273Z | 67 | PC: 12c00 | Get or set file attributes (See above) |
| 2018-12-25T12:38:50.256538571Z | 79 | PC: 12ae0 | Find next file (See above) |
| 2018-12-25T12:38:50.262029261Z | 67 | PC: 12afc | Get or set file attributes (See above) |
| 2018-12-25T12:38:50.273345499Z | 61 | PC: 12b10 | Open file (See above) |
| 2018-12-25T12:38:50.280798077Z | 63 | PC: 12b2c | Read file or device (See above) |
| 2018-12-25T12:38:50.289575642Z | 66 | PC: 12b4b | Move file pointer (See above) |
| 2018-12-25T12:38:50.2913563Z | 66 | PC: 12b6c | Move file pointer (See above) |
| 2018-12-25T12:38:50.292989748Z | 64 | PC: 12b87 | Write file or device (See above) |
| 2018-12-25T12:38:50.298064391Z | 64 | PC: 12b97 | Write file or device (See above) |
| 2018-12-25T12:38:50.303566659Z | 66 | PC: 12bc6 | Move file pointer (See above) |
| 2018-12-25T12:38:50.304902701Z | 64 | PC: 12bd7 | Write file or device (See above) |
| 2018-12-25T12:38:50.311068307Z | 87 | PC: 12be8 | Get or set file date and time (See above) |
| 2018-12-25T12:38:50.312724272Z | 62 | PC: 12bee | Close file (See above) |
| 2018-12-25T12:38:50.318864831Z | 67 | PC: 12c00 | Get or set file attributes (See above) |
| 2018-12-25T12:38:50.326508943Z | 79 | PC: 12ae0 | Find next file (See above) |
| 2018-12-25T12:38:50.32887857Z | 67 | PC: 12afc | Get or set file attributes (See above) |
| 2018-12-25T12:38:50.335421231Z | 61 | PC: 12b10 | Open file (See above) |
| 2018-12-25T12:38:50.340334665Z | 63 | PC: 12b2c | Read file or device (See above) |
| 2018-12-25T12:38:50.34551538Z | 66 | PC: 12b4b | Move file pointer (See above) |
| 2018-12-25T12:38:50.346582938Z | 66 | PC: 12b6c | Move file pointer (See above) |
| 2018-12-25T12:38:50.347640433Z | 64 | PC: 12b87 | Write file or device (See above) |
| 2018-12-25T12:38:50.351500243Z | 64 | PC: 12b97 | Write file or device (See above) |
| 2018-12-25T12:38:50.353536796Z | 66 | PC: 12bc6 | Move file pointer (See above) |
| 2018-12-25T12:38:50.354939247Z | 64 | PC: 12bd7 | Write file or device (See above) |
| 2018-12-25T12:38:50.360429184Z | 87 | PC: 12be8 | Get or set file date and time (See above) |
| 2018-12-25T12:38:50.361683641Z | 62 | PC: 12bee | Close file (See above) |
| 2018-12-25T12:38:50.367722793Z | 67 | PC: 12c00 | Get or set file attributes (See above) |
| 2018-12-25T12:38:50.374765124Z | 79 | PC: 12ae0 | Find next file (See above) |
| 2018-12-25T12:38:50.376713129Z | 67 | PC: 12afc | Get or set file attributes (See above) |
| 2018-12-25T12:38:50.383897248Z | 61 | PC: 12b10 | Open file (See above) |
| 2018-12-25T12:38:50.388749168Z | 63 | PC: 12b2c | Read file or device (See above) |
| 2018-12-25T12:38:50.395816924Z | 66 | PC: 12b4b | Move file pointer (See above) |
| 2018-12-25T12:38:50.39740932Z | 66 | PC: 12b6c | Move file pointer (See above) |
| 2018-12-25T12:38:50.399068363Z | 64 | PC: 12b87 | Write file or device (See above) |
| 2018-12-25T12:38:50.405564928Z | 64 | PC: 12b97 | Write file or device (See above) |
| 2018-12-25T12:38:50.409753596Z | 66 | PC: 12bc6 | Move file pointer (See above) |
| 2018-12-25T12:38:50.412788583Z | 64 | PC: 12bd7 | Write file or device (See above) |
| 2018-12-25T12:38:50.422476729Z | 87 | PC: 12be8 | Get or set file date and time (See above) |
| 2018-12-25T12:38:50.424612122Z | 62 | PC: 12bee | Close file (See above) |
| 2018-12-25T12:38:50.433942685Z | 67 | PC: 12c00 | Get or set file attributes (See above) |
| 2018-12-25T12:38:50.446579119Z | 59 | PC: 12c26 | Change current directory |
| 2018-12-25T12:38:50.451754856Z | 26 | PC: 12c43 | Set disk transfer address |
| 2018-12-25T12:38:50.453485576Z | 59 | PC: 12c4e | Change current directory |
{"DateBased":true,"Day":1,"Month":4,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":13732,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:38:50.528121244Z | 26 | PC: 12a9f | Set disk transfer address |
| 2018-12-25T12:38:50.5292657Z | 71 | PC: 12ab1 | Get current directory |
| 2018-12-25T12:38:50.533128739Z | 42 | PC: 12ab7 | Get date 0x12ab7: cmp dh, 4 0x12aba: jne 0x12ad5 0x12abc: cmp dl, 0xf 0x12abf: jne 0x12ad5 0x12ac1: mov ax, 0x1010 0x12ac4: out 0x70, ax 0x12ac6: mov dx, 0x344 0x12ac9: mov ah, 9 0x12acb: int 0x21 0x12acd: mov ah, 8 0x12acf: int 0x21 0x12ad1: mov al, 0xfe 0x12ad3: out 0x64, al 0x12ad5: mov ah, byte ptr [0x373] 0x12ad9: mov cl, 7 0x12adb: mov dx, 0x338 0x12ade: int 0x21 0x12ae0: jae 0x12ae5 0x12ae2: jmp 0x12c1d 0x12ae5: mov dx, word ptr [0x367] |
| 2018-12-25T12:38:50.537028544Z | 78 | PC: 12ae0 | Find first file |
| 2018-12-25T12:38:50.543495359Z | 67 | PC: 12afc | Get or set file attributes |
| 2018-12-25T12:38:50.573206933Z | 61 | PC: 12b10 | Open file (Filename = 'SLEEP.COM') |
| 2018-12-25T12:38:50.583367114Z | 63 | PC: 12b2c | Read file or device (Read 686 bytes on handle 5) |
| 2018-12-25T12:38:50.58964823Z | 66 | PC: 12b4b | Move file pointer |
| 2018-12-25T12:38:50.592247161Z | 66 | PC: 12b6c | Move file pointer |
| 2018-12-25T12:38:50.593891855Z | 64 | PC: 12b87 | Write file or device (Write 407 bytes on handle 5) |
| 2018-12-25T12:38:50.601681624Z | 64 | PC: 12b97 | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-25T12:38:50.605122032Z | 66 | PC: 12bc6 | Move file pointer |
| 2018-12-25T12:38:50.606502518Z | 64 | PC: 12bd7 | Write file or device (Write 686 bytes on handle 5) |
| 2018-12-25T12:38:50.614883563Z | 87 | PC: 12be8 | Get or set file date and time |
| 2018-12-25T12:38:50.61665706Z | 62 | PC: 12bee | Close file |
| 2018-12-25T12:38:50.626594636Z | 67 | PC: 12c00 | Get or set file attributes |
| 2018-12-25T12:38:50.636185201Z | 79 | PC: 12ae0 | Find next file (See above) |
| 2018-12-25T12:38:50.638813771Z | 67 | PC: 12afc | Get or set file attributes (See above) |
| 2018-12-25T12:38:50.649653472Z | 61 | PC: 12b10 | Open file (See above) |
| 2018-12-25T12:38:50.656402575Z | 63 | PC: 12b2c | Read file or device (See above) |
| 2018-12-25T12:38:50.662978509Z | 66 | PC: 12b4b | Move file pointer (See above) |
| 2018-12-25T12:38:50.665824617Z | 66 | PC: 12b6c | Move file pointer (See above) |
| 2018-12-25T12:38:50.667262142Z | 64 | PC: 12b87 | Write file or device (See above) |
| 2018-12-25T12:38:50.670985087Z | 64 | PC: 12b97 | Write file or device (See above) |
| 2018-12-25T12:38:50.674848767Z | 66 | PC: 12bc6 | Move file pointer (See above) |
| 2018-12-25T12:38:50.688050104Z | 64 | PC: 12bd7 | Write file or device (See above) |
| 2018-12-25T12:38:50.695664625Z | 87 | PC: 12be8 | Get or set file date and time (See above) |
| 2018-12-25T12:38:50.698273852Z | 62 | PC: 12bee | Close file (See above) |
| 2018-12-25T12:38:50.70636385Z | 67 | PC: 12c00 | Get or set file attributes (See above) |
| 2018-12-25T12:38:50.716251944Z | 79 | PC: 12ae0 | Find next file (See above) |
| 2018-12-25T12:38:50.719345409Z | 67 | PC: 12afc | Get or set file attributes (See above) |
| 2018-12-25T12:38:50.729815977Z | 61 | PC: 12b10 | Open file (See above) |
| 2018-12-25T12:38:50.736716602Z | 63 | PC: 12b2c | Read file or device (See above) |
| 2018-12-25T12:38:50.743340605Z | 66 | PC: 12b4b | Move file pointer (See above) |
| 2018-12-25T12:38:50.745963574Z | 66 | PC: 12b6c | Move file pointer (See above) |
| 2018-12-25T12:38:50.747516251Z | 64 | PC: 12b87 | Write file or device (See above) |
| 2018-12-25T12:38:50.751557779Z | 64 | PC: 12b97 | Write file or device (See above) |
| 2018-12-25T12:38:50.755109827Z | 66 | PC: 12bc6 | Move file pointer (See above) |
| 2018-12-25T12:38:50.75723668Z | 64 | PC: 12bd7 | Write file or device (See above) |
| 2018-12-25T12:38:50.764930536Z | 87 | PC: 12be8 | Get or set file date and time (See above) |
| 2018-12-25T12:38:50.767469928Z | 62 | PC: 12bee | Close file (See above) |
| 2018-12-25T12:38:50.775370589Z | 67 | PC: 12c00 | Get or set file attributes (See above) |
| 2018-12-25T12:38:50.785691891Z | 79 | PC: 12ae0 | Find next file (See above) |
| 2018-12-25T12:38:50.790086715Z | 67 | PC: 12afc | Get or set file attributes (See above) |
| 2018-12-25T12:38:50.982346208Z | 61 | PC: 12b10 | Open file (See above) |
| 2018-12-25T12:38:50.989667198Z | 63 | PC: 12b2c | Read file or device (See above) |
| 2018-12-25T12:38:50.997492187Z | 66 | PC: 12b4b | Move file pointer (See above) |
| 2018-12-25T12:38:50.999817085Z | 66 | PC: 12b6c | Move file pointer (See above) |
| 2018-12-25T12:38:51.001755559Z | 64 | PC: 12b87 | Write file or device (See above) |
| 2018-12-25T12:38:51.014767889Z | 64 | PC: 12b97 | Write file or device (See above) |
| 2018-12-25T12:38:51.019046803Z | 66 | PC: 12bc6 | Move file pointer (See above) |
| 2018-12-25T12:38:51.020709786Z | 64 | PC: 12bd7 | Write file or device (See above) |
| 2018-12-25T12:38:51.035483906Z | 87 | PC: 12be8 | Get or set file date and time (See above) |
| 2018-12-25T12:38:51.039001091Z | 62 | PC: 12bee | Close file (See above) |
| 2018-12-25T12:38:51.082453515Z | 67 | PC: 12c00 | Get or set file attributes (See above) |
| 2018-12-25T12:38:51.105820197Z | 79 | PC: 12ae0 | Find next file (See above) |
| 2018-12-25T12:38:51.109808593Z | 67 | PC: 12afc | Get or set file attributes (See above) |
| 2018-12-25T12:38:51.125889847Z | 61 | PC: 12b10 | Open file (See above) |
| 2018-12-25T12:38:51.134569461Z | 63 | PC: 12b2c | Read file or device (See above) |
| 2018-12-25T12:38:51.143087935Z | 66 | PC: 12b4b | Move file pointer (See above) |
| 2018-12-25T12:38:51.14564918Z | 66 | PC: 12b6c | Move file pointer (See above) |
| 2018-12-25T12:38:51.147802302Z | 64 | PC: 12b87 | Write file or device (See above) |
| 2018-12-25T12:38:51.153308486Z | 64 | PC: 12b97 | Write file or device (See above) |
| 2018-12-25T12:38:51.157203373Z | 66 | PC: 12bc6 | Move file pointer (See above) |
| 2018-12-25T12:38:51.160242059Z | 64 | PC: 12bd7 | Write file or device (See above) |
| 2018-12-25T12:38:51.175435659Z | 87 | PC: 12be8 | Get or set file date and time (See above) |
| 2018-12-25T12:38:51.177593504Z | 62 | PC: 12bee | Close file (See above) |
| 2018-12-25T12:38:51.207944366Z | 67 | PC: 12c00 | Get or set file attributes (See above) |
| 2018-12-25T12:38:51.23433742Z | 59 | PC: 12c26 | Change current directory |
| 2018-12-25T12:38:51.239078549Z | 26 | PC: 12c43 | Set disk transfer address |
| 2018-12-25T12:38:51.241983935Z | 59 | PC: 12c4e | Change current directory |
{"DateBased":true,"Day":15,"Month":4,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":13732,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:38:53.772884134Z | 26 | PC: 12a9f | Set disk transfer address |
| 2018-12-25T12:38:53.777061378Z | 71 | PC: 12ab1 | Get current directory |
| 2018-12-25T12:38:53.780509884Z | 42 | PC: 12ab7 | Get date 0x12ab7: cmp dh, 4 0x12aba: jne 0x12ad5 0x12abc: cmp dl, 0xf 0x12abf: jne 0x12ad5 0x12ac1: mov ax, 0x1010 0x12ac4: out 0x70, ax 0x12ac6: mov dx, 0x344 0x12ac9: mov ah, 9 0x12acb: int 0x21 0x12acd: mov ah, 8 0x12acf: int 0x21 0x12ad1: mov al, 0xfe 0x12ad3: out 0x64, al 0x12ad5: mov ah, byte ptr [0x373] 0x12ad9: mov cl, 7 0x12adb: mov dx, 0x338 0x12ade: int 0x21 0x12ae0: jae 0x12ae5 0x12ae2: jmp 0x12c1d 0x12ae5: mov dx, word ptr [0x367] |
| 2018-12-25T12:38:53.783001264Z | 9 | PC: 12acd | Display string (String= '��ࠡ���� - rulez forever ! ') |
| 2018-12-25T12:38:53.787506537Z | 8 | PC: 12ad1 | Console input without echo |