.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T23:01:42.679856663Z | 42 | PC: 12a5d | Get date 0x12a5d: cmp dh, 0xd 0x12a60: or dh, byte ptr [bp + si + 0x74] 0x12a63: cmp dh, 0xc 0x12a66: jb 0x12ada 0x12a68: push dx 0x12a69: push si 0x12a6a: lea si, word ptr [si + 0x16e] 0x12a6e: cld 0x12a6f: lodsb al, byte ptr [si] 0x12a70: cmp al, 0x24 0x12a72: je 0x12a87 0x12a74: mov dl, al 0x12a76: mov ah, 2 0x12a78: int 0x21 0x12a7a: mov ah, 2 0x12a7c: mov dl, 7 0x12a7e: int 0x21 0x12a80: mov cx, 0x6fff 0x12a83: loop 0x12a83 0x12a85: jmp 0x12a6f |
| 2018-12-17T23:01:42.683824539Z | 2 | PC: 12a7a | Character output (Char = '00') |
| 2018-12-17T23:01:42.686424875Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.689991867Z | 2 | PC: 12a7a | Character output (Char = '0d') |
| 2018-12-17T23:01:42.692580972Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.697253121Z | 2 | PC: 12a7a | Character output (Char = '0d') |
| 2018-12-17T23:01:42.699544998Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.702955256Z | 2 | PC: 12a7a | Character output (Char = '0a') |
| 2018-12-17T23:01:42.708229536Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.711704205Z | 2 | PC: 12a7a | Character output (Char = '0d') |
| 2018-12-17T23:01:42.714171962Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.718671727Z | 2 | PC: 12a7a | Character output (Char = '0a') |
| 2018-12-17T23:01:42.723668325Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.72726891Z | 2 | PC: 12a7a | Character output (Char = '3c') |
| 2018-12-17T23:01:42.730980825Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.734773051Z | 2 | PC: 12a7a | Character output (Char = '2d') |
| 2018-12-17T23:01:42.737473806Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.741819652Z | 2 | PC: 12a7a | Character output (Char = '3a') |
| 2018-12-17T23:01:42.744594385Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.74814684Z | 2 | PC: 12a7a | Character output (Char = '20') |
| 2018-12-17T23:01:42.751415963Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.756320208Z | 2 | PC: 12a7a | Character output (Char = '20') |
| 2018-12-17T23:01:42.758617695Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.762261773Z | 2 | PC: 12a7a | Character output (Char = '20') |
| 2018-12-17T23:01:42.765530304Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.769272967Z | 2 | PC: 12a7a | Character output (Char = '54') |
| 2018-12-17T23:01:42.77219625Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.779222912Z | 2 | PC: 12a7a | Character output (Char = '69') |
| 2018-12-17T23:01:42.782241053Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.786089825Z | 2 | PC: 12a7a | Character output (Char = '70') |
| 2018-12-17T23:01:42.789358677Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.792867049Z | 2 | PC: 12a7a | Character output (Char = '20') |
| 2018-12-17T23:01:42.79536873Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.799733712Z | 2 | PC: 12a7a | Character output (Char = '76') |
| 2018-12-17T23:01:42.80227649Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.805489607Z | 2 | PC: 12a7a | Character output (Char = '6f') |
| 2018-12-17T23:01:42.808511826Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.812467349Z | 2 | PC: 12a7a | Character output (Char = '6e') |
| 2018-12-17T23:01:42.815158525Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.818728654Z | 2 | PC: 12a7a | Character output (Char = '20') |
| 2018-12-17T23:01:42.822328418Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.825903265Z | 2 | PC: 12a7a | Character output (Char = '56') |
| 2018-12-17T23:01:42.828517958Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.833097253Z | 2 | PC: 12a7a | Character output (Char = '69') |
| 2018-12-17T23:01:42.836979407Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.840867924Z | 2 | PC: 12a7a | Character output (Char = '72') |
| 2018-12-17T23:01:42.844243696Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.847773448Z | 2 | PC: 12a7a | Character output (Char = '75') |
| 2018-12-17T23:01:42.850427846Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.854859383Z | 2 | PC: 12a7a | Character output (Char = '73') |
| 2018-12-17T23:01:42.857414584Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.862183575Z | 2 | PC: 12a7a | Character output (Char = '20') |
| 2018-12-17T23:01:42.865978316Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.869481899Z | 2 | PC: 12a7a | Character output (Char = '45') |
| 2018-12-17T23:01:42.87225511Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.875734888Z | 2 | PC: 12a7a | Character output (Char = '4c') |
| 2018-12-17T23:01:42.879092037Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.882594498Z | 2 | PC: 12a7a | Character output (Char = '56') |
| 2018-12-17T23:01:42.886495959Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.893909589Z | 2 | PC: 12a7a | Character output (Char = '49') |
| 2018-12-17T23:01:42.896323114Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.899540029Z | 2 | PC: 12a7a | Character output (Char = '52') |
| 2018-12-17T23:01:42.903211868Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.906713778Z | 2 | PC: 12a7a | Character output (Char = '41') |
| 2018-12-17T23:01:42.909099921Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.915085017Z | 2 | PC: 12a7a | Character output (Char = '20') |
| 2018-12-17T23:01:42.917488754Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.920671905Z | 2 | PC: 12a7a | Character output (Char = '32') |
| 2018-12-17T23:01:42.923930929Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.927362136Z | 2 | PC: 12a7a | Character output (Char = '2e') |
| 2018-12-17T23:01:42.929531382Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.933230072Z | 2 | PC: 12a7a | Character output (Char = '31') |
| 2018-12-17T23:01:42.936082632Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.93989222Z | 2 | PC: 12a7a | Character output (Char = '20') |
| 2018-12-17T23:01:42.942362412Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.945773521Z | 2 | PC: 12a7a | Character output (Char = '52') |
| 2018-12-17T23:01:42.948401469Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.951594719Z | 2 | PC: 12a7a | Character output (Char = '3a') |
| 2018-12-17T23:01:42.955140692Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.958568263Z | 2 | PC: 12a7a | Character output (Char = '20') |
| 2018-12-17T23:01:42.96116376Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.965768953Z | 2 | PC: 12a7a | Character output (Char = '20') |
| 2018-12-17T23:01:42.968258501Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.971668889Z | 2 | PC: 12a7a | Character output (Char = '20') |
| 2018-12-17T23:01:42.975269524Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.979034198Z | 2 | PC: 12a7a | Character output (Char = '3a') |
| 2018-12-17T23:01:42.981878011Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.985594765Z | 2 | PC: 12a7a | Character output (Char = '2d') |
| 2018-12-17T23:01:42.989367674Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:42.994307867Z | 2 | PC: 12a7a | Character output (Char = '3e') |
| 2018-12-17T23:01:42.996389188Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.000508919Z | 2 | PC: 12a7a | Character output (Char = '0d') |
| 2018-12-17T23:01:43.00271276Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.005983396Z | 2 | PC: 12a7a | Character output (Char = '0a') |
| 2018-12-17T23:01:43.010902529Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.014606168Z | 2 | PC: 12a7a | Character output (Char = '0d') |
| 2018-12-17T23:01:43.017011818Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.02434637Z | 2 | PC: 12a7a | Character output (Char = '3c') |
| 2018-12-17T23:01:43.026926227Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.03074367Z | 2 | PC: 12a7a | Character output (Char = '2d') |
| 2018-12-17T23:01:43.034235691Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.038189621Z | 2 | PC: 12a7a | Character output (Char = '3a') |
| 2018-12-17T23:01:43.040886769Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.04438415Z | 2 | PC: 12a7a | Character output (Char = '20') |
| 2018-12-17T23:01:43.047860813Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.051400945Z | 2 | PC: 12a7a | Character output (Char = '54') |
| 2018-12-17T23:01:43.054132127Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.058391079Z | 2 | PC: 12a7a | Character output (Char = '72') |
| 2018-12-17T23:01:43.061037202Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.064511029Z | 2 | PC: 12a7a | Character output (Char = '61') |
| 2018-12-17T23:01:43.068065628Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.072352924Z | 2 | PC: 12a7a | Character output (Char = '75') |
| 2018-12-17T23:01:43.074722056Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.079252959Z | 2 | PC: 12a7a | Character output (Char = '65') |
| 2018-12-17T23:01:43.081522484Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.085044652Z | 2 | PC: 12a7a | Character output (Char = '20') |
| 2018-12-17T23:01:43.088337849Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.091546749Z | 2 | PC: 12a7a | Character output (Char = '6e') |
| 2018-12-17T23:01:43.094266449Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.097468355Z | 2 | PC: 12a7a | Character output (Char = '69') |
| 2018-12-17T23:01:43.100366431Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.104286537Z | 2 | PC: 12a7a | Character output (Char = '65') |
| 2018-12-17T23:01:43.108773217Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.113092734Z | 2 | PC: 12a7a | Character output (Char = '20') |
| 2018-12-17T23:01:43.11588491Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.119058524Z | 2 | PC: 12a7a | Character output (Char = '44') |
| 2018-12-17T23:01:43.12217512Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.128234095Z | 2 | PC: 12a7a | Character output (Char = '65') |
| 2018-12-17T23:01:43.13129157Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.135974188Z | 2 | PC: 12a7a | Character output (Char = '69') |
| 2018-12-17T23:01:43.138909714Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.143332183Z | 2 | PC: 12a7a | Character output (Char = '6e') |
| 2018-12-17T23:01:43.146261337Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.150859076Z | 2 | PC: 12a7a | Character output (Char = '65') |
| 2018-12-17T23:01:43.153369674Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.157797794Z | 2 | PC: 12a7a | Character output (Char = '6d') |
| 2018-12-17T23:01:43.160135888Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.16380907Z | 2 | PC: 12a7a | Character output (Char = '20') |
| 2018-12-17T23:01:43.166156821Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.16972201Z | 2 | PC: 12a7a | Character output (Char = '56') |
| 2018-12-17T23:01:43.172511572Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.176071972Z | 2 | PC: 12a7a | Character output (Char = '69') |
| 2018-12-17T23:01:43.179224766Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.183072736Z | 2 | PC: 12a7a | Character output (Char = '72') |
| 2018-12-17T23:01:43.186005517Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.189963334Z | 2 | PC: 12a7a | Character output (Char = '65') |
| 2018-12-17T23:01:43.19294134Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.196570378Z | 2 | PC: 12a7a | Character output (Char = '6e') |
| 2018-12-17T23:01:43.199553543Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.203379141Z | 2 | PC: 12a7a | Character output (Char = '2d') |
| 2018-12-17T23:01:43.206030263Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.210120909Z | 2 | PC: 12a7a | Character output (Char = '53') |
| 2018-12-17T23:01:43.212666122Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.216147143Z | 2 | PC: 12a7a | Character output (Char = '63') |
| 2018-12-17T23:01:43.219193727Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.221820313Z | 2 | PC: 12a7a | Character output (Char = '61') |
| 2018-12-17T23:01:43.223778943Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.22719944Z | 2 | PC: 12a7a | Character output (Char = '6e') |
| 2018-12-17T23:01:43.229130919Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.23154213Z | 2 | PC: 12a7a | Character output (Char = '6e') |
| 2018-12-17T23:01:43.234782499Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.237159495Z | 2 | PC: 12a7a | Character output (Char = '65') |
| 2018-12-17T23:01:43.239054145Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.241890795Z | 2 | PC: 12a7a | Character output (Char = '72') |
| 2018-12-17T23:01:43.243772662Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.246069948Z | 2 | PC: 12a7a | Character output (Char = '21') |
| 2018-12-17T23:01:43.24849213Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.250878143Z | 2 | PC: 12a7a | Character output (Char = '20') |
| 2018-12-17T23:01:43.253193042Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.256116335Z | 2 | PC: 12a7a | Character output (Char = '3a') |
| 2018-12-17T23:01:43.257992089Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.260347375Z | 2 | PC: 12a7a | Character output (Char = '2d') |
| 2018-12-17T23:01:43.262924738Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.265211294Z | 2 | PC: 12a7a | Character output (Char = '3e') |
| 2018-12-17T23:01:43.267036333Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.269873124Z | 2 | PC: 12a7a | Character output (Char = '0d') |
| 2018-12-17T23:01:43.271581344Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.273884682Z | 2 | PC: 12a7a | Character output (Char = '0d') |
| 2018-12-17T23:01:43.2761351Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.278420514Z | 2 | PC: 12a7a | Character output (Char = '0a') |
| 2018-12-17T23:01:43.281094489Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.283896103Z | 2 | PC: 12a7a | Character output (Char = '0d') |
| 2018-12-17T23:01:43.285598342Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.287854992Z | 2 | PC: 12a7a | Character output (Char = '0a') |
| 2018-12-17T23:01:43.291042441Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.298256186Z | 2 | PC: 12a7a | Character output (Char = '0d') |
| 2018-12-17T23:01:43.304691688Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.307834153Z | 2 | PC: 12a7a | Character output (Char = '0a') |
| 2018-12-17T23:01:43.310815404Z | 2 | PC: 12a80 | Character output (Char = '07') |
| 2018-12-17T23:01:43.313501121Z | 78 | PC: 12aa9 | Find first file |
| 2018-12-17T23:01:43.319120329Z | 67 | PC: 12b91 | Get or set file attributes |
| 2018-12-17T23:01:43.338240326Z | 61 | PC: 12ab3 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T23:01:43.343548881Z | 64 | PC: 12ac1 | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T23:01:43.346692077Z | 66 | PC: 12acc | Move file pointer |
| 2018-12-17T23:01:43.348397111Z | 64 | PC: 12ad0 | Write file or device (Write 0 bytes on handle 5) |
| 2018-12-17T23:01:43.351016683Z | 62 | PC: 12b82 | Close file |
| 2018-12-17T23:01:43.358756566Z | 67 | PC: 12b91 | Get or set file attributes |