{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":15693,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:44:12.715298218Z | 78 | PC: 12a4a | Find first file |
| 2018-12-25T12:44:12.728037643Z | 67 | PC: 12a98 | Get or set file attributes |
| 2018-12-25T12:44:12.734244284Z | 67 | PC: 12aa4 | Get or set file attributes |
| 2018-12-25T12:44:12.751898087Z | 61 | PC: 12aaa | Open file (Filename = 'SLEEP.COM') |
| 2018-12-25T12:44:12.759661603Z | 87 | PC: 12ab4 | Get or set file date and time |
| 2018-12-25T12:44:12.762127171Z | 64 | PC: 12ac7 | Write file or device (Write 264 bytes on handle 5) |
| 2018-12-25T12:44:12.783107534Z | 87 | PC: 12ad5 | Get or set file date and time |
| 2018-12-25T12:44:12.784863246Z | 62 | PC: 12ad9 | Close file |
| 2018-12-25T12:44:12.793848944Z | 67 | PC: 12ae6 | Get or set file attributes |
| 2018-12-25T12:44:12.804371379Z | 79 | PC: 12a59 | Find next file |
| 2018-12-25T12:44:12.807089562Z | 67 | PC: 12a98 | Get or set file attributes (See above) |
| 2018-12-25T12:44:12.813989393Z | 67 | PC: 12aa4 | Get or set file attributes (See above) |
| 2018-12-25T12:44:12.824300537Z | 61 | PC: 12aaa | Open file (See above) |
| 2018-12-25T12:44:12.831365653Z | 87 | PC: 12ab4 | Get or set file date and time (See above) |
| 2018-12-25T12:44:12.833801871Z | 64 | PC: 12ac7 | Write file or device (See above) |
| 2018-12-25T12:44:12.840946061Z | 87 | PC: 12ad5 | Get or set file date and time (See above) |
| 2018-12-25T12:44:12.842473428Z | 62 | PC: 12ad9 | Close file (See above) |
| 2018-12-25T12:44:12.851497812Z | 67 | PC: 12ae6 | Get or set file attributes (See above) |
| 2018-12-25T12:44:12.861912501Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T12:44:12.864590443Z | 67 | PC: 12a98 | Get or set file attributes (See above) |
| 2018-12-25T12:44:12.870559588Z | 67 | PC: 12aa4 | Get or set file attributes (See above) |
| 2018-12-25T12:44:12.881536937Z | 61 | PC: 12aaa | Open file (See above) |
| 2018-12-25T12:44:12.8887258Z | 87 | PC: 12ab4 | Get or set file date and time (See above) |
| 2018-12-25T12:44:12.890116333Z | 64 | PC: 12ac7 | Write file or device (See above) |
| 2018-12-25T12:44:12.897870386Z | 87 | PC: 12ad5 | Get or set file date and time (See above) |
| 2018-12-25T12:44:12.899374105Z | 62 | PC: 12ad9 | Close file (See above) |
| 2018-12-25T12:44:12.907403882Z | 67 | PC: 12ae6 | Get or set file attributes (See above) |
| 2018-12-25T12:44:12.918999143Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T12:44:12.921931267Z | 67 | PC: 12a98 | Get or set file attributes (See above) |
| 2018-12-25T12:44:12.928217539Z | 67 | PC: 12aa4 | Get or set file attributes (See above) |
| 2018-12-25T12:44:12.939329068Z | 61 | PC: 12aaa | Open file (See above) |
| 2018-12-25T12:44:12.947346285Z | 87 | PC: 12ab4 | Get or set file date and time (See above) |
| 2018-12-25T12:44:12.949346411Z | 64 | PC: 12ac7 | Write file or device (See above) |
| 2018-12-25T12:44:12.957354024Z | 87 | PC: 12ad5 | Get or set file date and time (See above) |
| 2018-12-25T12:44:12.958940021Z | 62 | PC: 12ad9 | Close file (See above) |
| 2018-12-25T12:44:12.96684416Z | 67 | PC: 12ae6 | Get or set file attributes (See above) |
| 2018-12-25T12:44:12.981595604Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T12:44:12.984564909Z | 67 | PC: 12a98 | Get or set file attributes (See above) |
| 2018-12-25T12:44:12.990796916Z | 67 | PC: 12aa4 | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.003106209Z | 61 | PC: 12aaa | Open file (See above) |
| 2018-12-25T12:44:13.010478952Z | 87 | PC: 12ab4 | Get or set file date and time (See above) |
| 2018-12-25T12:44:13.011982939Z | 64 | PC: 12ac7 | Write file or device (See above) |
| 2018-12-25T12:44:13.019376093Z | 87 | PC: 12ad5 | Get or set file date and time (See above) |
| 2018-12-25T12:44:13.021182563Z | 62 | PC: 12ad9 | Close file (See above) |
| 2018-12-25T12:44:13.029067436Z | 67 | PC: 12ae6 | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.040374979Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T12:44:13.043455813Z | 67 | PC: 12a98 | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.049788068Z | 67 | PC: 12aa4 | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.060921934Z | 61 | PC: 12aaa | Open file (See above) |
| 2018-12-25T12:44:13.068898208Z | 87 | PC: 12ab4 | Get or set file date and time (See above) |
| 2018-12-25T12:44:13.070322318Z | 64 | PC: 12ac7 | Write file or device (See above) |
| 2018-12-25T12:44:13.077370353Z | 87 | PC: 12ad5 | Get or set file date and time (See above) |
| 2018-12-25T12:44:13.079610592Z | 62 | PC: 12ad9 | Close file (See above) |
| 2018-12-25T12:44:13.08763081Z | 67 | PC: 12ae6 | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.101318988Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T12:44:13.104324123Z | 67 | PC: 12a98 | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.110457212Z | 67 | PC: 12aa4 | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.121232183Z | 61 | PC: 12aaa | Open file (See above) |
| 2018-12-25T12:44:13.129003028Z | 87 | PC: 12ab4 | Get or set file date and time (See above) |
| 2018-12-25T12:44:13.130480828Z | 64 | PC: 12ac7 | Write file or device (See above) |
| 2018-12-25T12:44:13.137767633Z | 87 | PC: 12ad5 | Get or set file date and time (See above) |
| 2018-12-25T12:44:13.139802821Z | 62 | PC: 12ad9 | Close file (See above) |
| 2018-12-25T12:44:13.147835339Z | 67 | PC: 12ae6 | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.161704498Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T12:44:13.164691812Z | 67 | PC: 12a98 | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.171284669Z | 67 | PC: 12aa4 | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.181719725Z | 61 | PC: 12aaa | Open file (See above) |
| 2018-12-25T12:44:13.188817363Z | 87 | PC: 12ab4 | Get or set file date and time (See above) |
| 2018-12-25T12:44:13.190424678Z | 64 | PC: 12ac7 | Write file or device (See above) |
| 2018-12-25T12:44:13.197638765Z | 87 | PC: 12ad5 | Get or set file date and time (See above) |
| 2018-12-25T12:44:13.199023106Z | 62 | PC: 12ad9 | Close file (See above) |
| 2018-12-25T12:44:13.20726984Z | 67 | PC: 12ae6 | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.221146677Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T12:44:13.2236194Z | 42 | PC: 12a6d | Get date 0x12a6d: cmp al, 2 0x12a6f: je 0x12a60 0x12a71: mov ah, 0x4c 0x12a73: int 0x21 0x12a75: mov al, byte ptr [0x1bf] 0x12a78: mov cx, 0xa0 0x12a7b: mov dx, 0 0x12a7e: mov bx, 0 0x12a81: int 0x26 0x12a83: inc byte ptr [0x1be] 0x12a87: cmp byte ptr [0x1be], 0xa 0x12a8c: je 0x12ae7 0x12a8e: jne 0x12a75 0x12a90: mov dx, 0x9e 0x12a93: mov ax, 0x4300 0x12a96: int 0x21 0x12a98: mov word ptr [0x1bc], cx 0x12a9c: nop 0x12a9d: xor cx, cx 0x12a9f: mov ax, 0x4301 |
| 2018-12-25T12:44:13.227024561Z | 9 | PC: 12aee | Display string (String= ' I Love You, Connie... john 1997 ') |
| 2018-12-25T12:44:13.233050332Z | 76 | PC: 12af2 | Terminate with return code (Return code = '36') |
{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":15693,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:44:12.815890742Z | 78 | PC: 12a4a | Find first file |
| 2018-12-25T12:44:12.822230761Z | 67 | PC: 12a98 | Get or set file attributes |
| 2018-12-25T12:44:12.827881858Z | 67 | PC: 12aa4 | Get or set file attributes |
| 2018-12-25T12:44:12.843482067Z | 61 | PC: 12aaa | Open file (Filename = 'SLEEP.COM') |
| 2018-12-25T12:44:12.854533768Z | 87 | PC: 12ab4 | Get or set file date and time |
| 2018-12-25T12:44:12.855892634Z | 64 | PC: 12ac7 | Write file or device (Write 264 bytes on handle 5) |
| 2018-12-25T12:44:12.862118738Z | 87 | PC: 12ad5 | Get or set file date and time |
| 2018-12-25T12:44:12.878365448Z | 62 | PC: 12ad9 | Close file |
| 2018-12-25T12:44:12.885538375Z | 67 | PC: 12ae6 | Get or set file attributes |
| 2018-12-25T12:44:12.898245716Z | 79 | PC: 12a59 | Find next file |
| 2018-12-25T12:44:12.901264201Z | 67 | PC: 12a98 | Get or set file attributes (See above) |
| 2018-12-25T12:44:12.906702663Z | 67 | PC: 12aa4 | Get or set file attributes (See above) |
| 2018-12-25T12:44:12.91620126Z | 61 | PC: 12aaa | Open file (See above) |
| 2018-12-25T12:44:12.922786482Z | 87 | PC: 12ab4 | Get or set file date and time (See above) |
| 2018-12-25T12:44:12.92452735Z | 64 | PC: 12ac7 | Write file or device (See above) |
| 2018-12-25T12:44:12.930868288Z | 87 | PC: 12ad5 | Get or set file date and time (See above) |
| 2018-12-25T12:44:12.932237145Z | 62 | PC: 12ad9 | Close file (See above) |
| 2018-12-25T12:44:12.939965994Z | 67 | PC: 12ae6 | Get or set file attributes (See above) |
| 2018-12-25T12:44:12.952848371Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T12:44:12.955477715Z | 67 | PC: 12a98 | Get or set file attributes (See above) |
| 2018-12-25T12:44:12.961493791Z | 67 | PC: 12aa4 | Get or set file attributes (See above) |
| 2018-12-25T12:44:12.970831422Z | 61 | PC: 12aaa | Open file (See above) |
| 2018-12-25T12:44:12.977046326Z | 87 | PC: 12ab4 | Get or set file date and time (See above) |
| 2018-12-25T12:44:12.978654722Z | 64 | PC: 12ac7 | Write file or device (See above) |
| 2018-12-25T12:44:12.98544656Z | 87 | PC: 12ad5 | Get or set file date and time (See above) |
| 2018-12-25T12:44:12.986773491Z | 62 | PC: 12ad9 | Close file (See above) |
| 2018-12-25T12:44:12.99427168Z | 67 | PC: 12ae6 | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.006007745Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T12:44:13.008309609Z | 67 | PC: 12a98 | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.019104425Z | 67 | PC: 12aa4 | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.028402713Z | 61 | PC: 12aaa | Open file (See above) |
| 2018-12-25T12:44:13.034676478Z | 87 | PC: 12ab4 | Get or set file date and time (See above) |
| 2018-12-25T12:44:13.036200883Z | 64 | PC: 12ac7 | Write file or device (See above) |
| 2018-12-25T12:44:13.04275703Z | 87 | PC: 12ad5 | Get or set file date and time (See above) |
| 2018-12-25T12:44:13.044071437Z | 62 | PC: 12ad9 | Close file (See above) |
| 2018-12-25T12:44:13.051663414Z | 67 | PC: 12ae6 | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.061052811Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T12:44:13.063300686Z | 67 | PC: 12a98 | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.073746665Z | 67 | PC: 12aa4 | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.083359613Z | 61 | PC: 12aaa | Open file (See above) |
| 2018-12-25T12:44:13.089664883Z | 87 | PC: 12ab4 | Get or set file date and time (See above) |
| 2018-12-25T12:44:13.090985689Z | 64 | PC: 12ac7 | Write file or device (See above) |
| 2018-12-25T12:44:13.097456586Z | 87 | PC: 12ad5 | Get or set file date and time (See above) |
| 2018-12-25T12:44:13.098703355Z | 62 | PC: 12ad9 | Close file (See above) |
| 2018-12-25T12:44:13.105430434Z | 67 | PC: 12ae6 | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.115457481Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T12:44:13.118178048Z | 67 | PC: 12a98 | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.124350993Z | 67 | PC: 12aa4 | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.137637902Z | 61 | PC: 12aaa | Open file (See above) |
| 2018-12-25T12:44:13.144152421Z | 87 | PC: 12ab4 | Get or set file date and time (See above) |
| 2018-12-25T12:44:13.145850551Z | 64 | PC: 12ac7 | Write file or device (See above) |
| 2018-12-25T12:44:13.153826969Z | 87 | PC: 12ad5 | Get or set file date and time (See above) |
| 2018-12-25T12:44:13.155620308Z | 62 | PC: 12ad9 | Close file (See above) |
| 2018-12-25T12:44:13.164695452Z | 67 | PC: 12ae6 | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.174817542Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T12:44:13.177431435Z | 67 | PC: 12a98 | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.182802235Z | 67 | PC: 12aa4 | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.192324938Z | 61 | PC: 12aaa | Open file (See above) |
| 2018-12-25T12:44:13.204116213Z | 87 | PC: 12ab4 | Get or set file date and time (See above) |
| 2018-12-25T12:44:13.205326509Z | 64 | PC: 12ac7 | Write file or device (See above) |
| 2018-12-25T12:44:13.212339829Z | 87 | PC: 12ad5 | Get or set file date and time (See above) |
| 2018-12-25T12:44:13.213936736Z | 62 | PC: 12ad9 | Close file (See above) |
| 2018-12-25T12:44:13.220996134Z | 67 | PC: 12ae6 | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.23116997Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T12:44:13.233658722Z | 67 | PC: 12a98 | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.239001822Z | 67 | PC: 12aa4 | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.248781955Z | 61 | PC: 12aaa | Open file (See above) |
| 2018-12-25T12:44:13.260564452Z | 87 | PC: 12ab4 | Get or set file date and time (See above) |
| 2018-12-25T12:44:13.261777854Z | 64 | PC: 12ac7 | Write file or device (See above) |
| 2018-12-25T12:44:13.269142535Z | 87 | PC: 12ad5 | Get or set file date and time (See above) |
| 2018-12-25T12:44:13.270577264Z | 62 | PC: 12ad9 | Close file (See above) |
| 2018-12-25T12:44:13.277651194Z | 67 | PC: 12ae6 | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.288103217Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T12:44:13.290322989Z | 42 | PC: 12a6d | Get date 0x12a6d: cmp al, 2 0x12a6f: je 0x12a60 0x12a71: mov ah, 0x4c 0x12a73: int 0x21 0x12a75: mov al, byte ptr [0x1bf] 0x12a78: mov cx, 0xa0 0x12a7b: mov dx, 0 0x12a7e: mov bx, 0 0x12a81: int 0x26 0x12a83: inc byte ptr [0x1be] 0x12a87: cmp byte ptr [0x1be], 0xa 0x12a8c: je 0x12ae7 0x12a8e: jne 0x12a75 0x12a90: mov dx, 0x9e 0x12a93: mov ax, 0x4300 0x12a96: int 0x21 0x12a98: mov word ptr [0x1bc], cx 0x12a9c: nop 0x12a9d: xor cx, cx 0x12a9f: mov ax, 0x4301 |
| 2018-12-25T12:44:13.292274279Z | 76 | PC: 12a75 | Terminate with return code (Return code = '3') |