{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":15707,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:44:13.37069217Z | 78 | PC: 12a68 | Find first file |
| 2018-12-25T12:44:13.374484321Z | 67 | PC: 12aa5 | Get or set file attributes |
| 2018-12-25T12:44:13.378820668Z | 67 | PC: 12ab0 | Get or set file attributes |
| 2018-12-25T12:44:13.392910439Z | 61 | PC: 12ab5 | Open file (Filename = 'SLEEP.COM') |
| 2018-12-25T12:44:13.40015623Z | 87 | PC: 12abd | Get or set file date and time |
| 2018-12-25T12:44:13.401962961Z | 64 | PC: 12acf | Write file or device (Write 173 bytes on handle 5) |
| 2018-12-25T12:44:13.406252637Z | 87 | PC: 12adc | Get or set file date and time |
| 2018-12-25T12:44:13.407285975Z | 62 | PC: 12ae0 | Close file |
| 2018-12-25T12:44:13.42530489Z | 67 | PC: 12aec | Get or set file attributes |
| 2018-12-25T12:44:13.434646543Z | 79 | PC: 12a74 | Find next file |
| 2018-12-25T12:44:13.437654248Z | 67 | PC: 12aa5 | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.444722538Z | 67 | PC: 12ab0 | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.455852886Z | 61 | PC: 12ab5 | Open file (See above) |
| 2018-12-25T12:44:13.463071682Z | 87 | PC: 12abd | Get or set file date and time (See above) |
| 2018-12-25T12:44:13.476180805Z | 64 | PC: 12acf | Write file or device (See above) |
| 2018-12-25T12:44:13.48342535Z | 87 | PC: 12adc | Get or set file date and time (See above) |
| 2018-12-25T12:44:13.484965749Z | 62 | PC: 12ae0 | Close file (See above) |
| 2018-12-25T12:44:13.493232612Z | 67 | PC: 12aec | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.506326987Z | 79 | PC: 12a74 | Find next file (See above) |
| 2018-12-25T12:44:13.50973827Z | 67 | PC: 12aa5 | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.516693375Z | 67 | PC: 12ab0 | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.72892393Z | 61 | PC: 12ab5 | Open file (See above) |
| 2018-12-25T12:44:13.739115748Z | 87 | PC: 12abd | Get or set file date and time (See above) |
| 2018-12-25T12:44:13.741284Z | 64 | PC: 12acf | Write file or device (See above) |
| 2018-12-25T12:44:13.751056107Z | 87 | PC: 12adc | Get or set file date and time (See above) |
| 2018-12-25T12:44:13.752627226Z | 62 | PC: 12ae0 | Close file (See above) |
| 2018-12-25T12:44:14.155271552Z | 67 | PC: 12aec | Get or set file attributes (See above) |
| 2018-12-25T12:44:14.185683514Z | 79 | PC: 12a74 | Find next file (See above) |
| 2018-12-25T12:44:14.188791199Z | 67 | PC: 12aa5 | Get or set file attributes (See above) |
| 2018-12-25T12:44:14.195721656Z | 67 | PC: 12ab0 | Get or set file attributes (See above) |
| 2018-12-25T12:44:14.208239769Z | 61 | PC: 12ab5 | Open file (See above) |
| 2018-12-25T12:44:14.215994284Z | 87 | PC: 12abd | Get or set file date and time (See above) |
| 2018-12-25T12:44:14.217991021Z | 64 | PC: 12acf | Write file or device (See above) |
| 2018-12-25T12:44:14.229266478Z | 87 | PC: 12adc | Get or set file date and time (See above) |
| 2018-12-25T12:44:14.230882702Z | 62 | PC: 12ae0 | Close file (See above) |
| 2018-12-25T12:44:14.239515768Z | 67 | PC: 12aec | Get or set file attributes (See above) |
| 2018-12-25T12:44:14.251473153Z | 79 | PC: 12a74 | Find next file (See above) |
| 2018-12-25T12:44:14.25455393Z | 67 | PC: 12aa5 | Get or set file attributes (See above) |
| 2018-12-25T12:44:14.260924372Z | 67 | PC: 12ab0 | Get or set file attributes (See above) |
| 2018-12-25T12:44:14.272609992Z | 61 | PC: 12ab5 | Open file (See above) |
| 2018-12-25T12:44:14.280406679Z | 87 | PC: 12abd | Get or set file date and time (See above) |
| 2018-12-25T12:44:14.282395926Z | 64 | PC: 12acf | Write file or device (See above) |
| 2018-12-25T12:44:14.289784129Z | 87 | PC: 12adc | Get or set file date and time (See above) |
| 2018-12-25T12:44:14.292017123Z | 62 | PC: 12ae0 | Close file (See above) |
| 2018-12-25T12:44:14.300102353Z | 67 | PC: 12aec | Get or set file attributes (See above) |
| 2018-12-25T12:44:14.311536459Z | 79 | PC: 12a74 | Find next file (See above) |
| 2018-12-25T12:44:14.315173311Z | 67 | PC: 12aa5 | Get or set file attributes (See above) |
| 2018-12-25T12:44:14.321678342Z | 67 | PC: 12ab0 | Get or set file attributes (See above) |
| 2018-12-25T12:44:14.332629871Z | 61 | PC: 12ab5 | Open file (See above) |
| 2018-12-25T12:44:14.340620119Z | 87 | PC: 12abd | Get or set file date and time (See above) |
| 2018-12-25T12:44:14.342222069Z | 64 | PC: 12acf | Write file or device (See above) |
| 2018-12-25T12:44:14.349671236Z | 87 | PC: 12adc | Get or set file date and time (See above) |
| 2018-12-25T12:44:14.352436174Z | 62 | PC: 12ae0 | Close file (See above) |
| 2018-12-25T12:44:14.360536136Z | 67 | PC: 12aec | Get or set file attributes (See above) |
| 2018-12-25T12:44:14.374483113Z | 79 | PC: 12a74 | Find next file (See above) |
| 2018-12-25T12:44:14.378467074Z | 67 | PC: 12aa5 | Get or set file attributes (See above) |
| 2018-12-25T12:44:14.384795673Z | 67 | PC: 12ab0 | Get or set file attributes (See above) |
| 2018-12-25T12:44:14.39615212Z | 61 | PC: 12ab5 | Open file (See above) |
| 2018-12-25T12:44:14.404294244Z | 87 | PC: 12abd | Get or set file date and time (See above) |
| 2018-12-25T12:44:14.406402805Z | 64 | PC: 12acf | Write file or device (See above) |
| 2018-12-25T12:44:14.415354252Z | 87 | PC: 12adc | Get or set file date and time (See above) |
| 2018-12-25T12:44:14.417104604Z | 62 | PC: 12ae0 | Close file (See above) |
| 2018-12-25T12:44:14.425838025Z | 67 | PC: 12aec | Get or set file attributes (See above) |
| 2018-12-25T12:44:14.436702469Z | 79 | PC: 12a74 | Find next file (See above) |
| 2018-12-25T12:44:14.439313952Z | 67 | PC: 12aa5 | Get or set file attributes (See above) |
| 2018-12-25T12:44:14.444202451Z | 67 | PC: 12ab0 | Get or set file attributes (See above) |
| 2018-12-25T12:44:14.4514415Z | 61 | PC: 12ab5 | Open file (See above) |
| 2018-12-25T12:44:14.456319118Z | 87 | PC: 12abd | Get or set file date and time (See above) |
| 2018-12-25T12:44:14.457975968Z | 64 | PC: 12acf | Write file or device (See above) |
| 2018-12-25T12:44:14.462586219Z | 87 | PC: 12adc | Get or set file date and time (See above) |
| 2018-12-25T12:44:14.464291474Z | 62 | PC: 12ae0 | Close file (See above) |
| 2018-12-25T12:44:14.472954319Z | 67 | PC: 12aec | Get or set file attributes (See above) |
| 2018-12-25T12:44:14.496608698Z | 79 | PC: 12a74 | Find next file (See above) |
| 2018-12-25T12:44:14.499274252Z | 42 | PC: 12a7a | Get date 0x12a7a: cmp al, 3 0x12a7c: jne 0x12a99 0x12a7e: mov ah, 0x2c 0x12a80: int 0x21 0x12a82: cmp dx, 0x32 0x12a85: jne 0x12a99 0x12a87: mov byte ptr [0x10f], dh 0x12a8b: mov ah, 5 0x12a8d: mov dh, 0 0x12a8f: mov dl, 0x80 0x12a91: mov cl, 1 0x12a93: mov ch, byte ptr [0x10f] 0x12a97: int 0x13 0x12a99: mov ah, 0x4c 0x12a9b: int 0x21 0x12a9d: mov dx, 0x9e 0x12aa0: mov ax, 0x4300 0x12aa3: int 0x21 0x12aa5: mov word ptr [0x10c], cx 0x12aa9: xor cx, cx |
| 2018-12-25T12:44:14.502567343Z | 76 | PC: 12a9d | Terminate with return code (Return code = '2') |
{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":15707,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:44:13.433509562Z | 78 | PC: 12a68 | Find first file |
| 2018-12-25T12:44:13.440708224Z | 67 | PC: 12aa5 | Get or set file attributes |
| 2018-12-25T12:44:13.446333795Z | 67 | PC: 12ab0 | Get or set file attributes |
| 2018-12-25T12:44:13.461928508Z | 61 | PC: 12ab5 | Open file (Filename = 'SLEEP.COM') |
| 2018-12-25T12:44:13.469375587Z | 87 | PC: 12abd | Get or set file date and time |
| 2018-12-25T12:44:13.471339659Z | 64 | PC: 12acf | Write file or device (Write 173 bytes on handle 5) |
| 2018-12-25T12:44:13.477937235Z | 87 | PC: 12adc | Get or set file date and time |
| 2018-12-25T12:44:13.48003892Z | 62 | PC: 12ae0 | Close file |
| 2018-12-25T12:44:13.488941213Z | 67 | PC: 12aec | Get or set file attributes |
| 2018-12-25T12:44:13.499313585Z | 79 | PC: 12a74 | Find next file |
| 2018-12-25T12:44:13.501980841Z | 67 | PC: 12aa5 | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.50856832Z | 67 | PC: 12ab0 | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.518595752Z | 61 | PC: 12ab5 | Open file (See above) |
| 2018-12-25T12:44:13.525549596Z | 87 | PC: 12abd | Get or set file date and time (See above) |
| 2018-12-25T12:44:13.527701794Z | 64 | PC: 12acf | Write file or device (See above) |
| 2018-12-25T12:44:13.534524255Z | 87 | PC: 12adc | Get or set file date and time (See above) |
| 2018-12-25T12:44:13.53631346Z | 62 | PC: 12ae0 | Close file (See above) |
| 2018-12-25T12:44:13.544578801Z | 67 | PC: 12aec | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.74094307Z | 79 | PC: 12a74 | Find next file (See above) |
| 2018-12-25T12:44:13.743900589Z | 67 | PC: 12aa5 | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.750900752Z | 67 | PC: 12ab0 | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.855829576Z | 61 | PC: 12ab5 | Open file (See above) |
| 2018-12-25T12:44:13.862686068Z | 87 | PC: 12abd | Get or set file date and time (See above) |
| 2018-12-25T12:44:13.865161852Z | 64 | PC: 12acf | Write file or device (See above) |
| 2018-12-25T12:44:13.872317505Z | 87 | PC: 12adc | Get or set file date and time (See above) |
| 2018-12-25T12:44:13.874103888Z | 62 | PC: 12ae0 | Close file (See above) |
| 2018-12-25T12:44:13.881641141Z | 67 | PC: 12aec | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.894469533Z | 79 | PC: 12a74 | Find next file (See above) |
| 2018-12-25T12:44:13.897315429Z | 67 | PC: 12aa5 | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.903668002Z | 67 | PC: 12ab0 | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.914190103Z | 61 | PC: 12ab5 | Open file (See above) |
| 2018-12-25T12:44:13.921486936Z | 87 | PC: 12abd | Get or set file date and time (See above) |
| 2018-12-25T12:44:13.92300414Z | 64 | PC: 12acf | Write file or device (See above) |
| 2018-12-25T12:44:13.934803609Z | 87 | PC: 12adc | Get or set file date and time (See above) |
| 2018-12-25T12:44:13.936584711Z | 62 | PC: 12ae0 | Close file (See above) |
| 2018-12-25T12:44:13.944726424Z | 67 | PC: 12aec | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.955809526Z | 79 | PC: 12a74 | Find next file (See above) |
| 2018-12-25T12:44:13.958694805Z | 67 | PC: 12aa5 | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.965265232Z | 67 | PC: 12ab0 | Get or set file attributes (See above) |
| 2018-12-25T12:44:13.976136679Z | 61 | PC: 12ab5 | Open file (See above) |
| 2018-12-25T12:44:13.9828725Z | 87 | PC: 12abd | Get or set file date and time (See above) |
| 2018-12-25T12:44:13.984263367Z | 64 | PC: 12acf | Write file or device (See above) |
| 2018-12-25T12:44:13.992029304Z | 87 | PC: 12adc | Get or set file date and time (See above) |
| 2018-12-25T12:44:13.993477705Z | 62 | PC: 12ae0 | Close file (See above) |
| 2018-12-25T12:44:14.000663566Z | 67 | PC: 12aec | Get or set file attributes (See above) |
| 2018-12-25T12:44:14.011610124Z | 79 | PC: 12a74 | Find next file (See above) |
| 2018-12-25T12:44:14.01412598Z | 67 | PC: 12aa5 | Get or set file attributes (See above) |
| 2018-12-25T12:44:14.020441254Z | 67 | PC: 12ab0 | Get or set file attributes (See above) |
| 2018-12-25T12:44:14.034299625Z | 61 | PC: 12ab5 | Open file (See above) |
| 2018-12-25T12:44:14.041480938Z | 87 | PC: 12abd | Get or set file date and time (See above) |
| 2018-12-25T12:44:14.043135607Z | 64 | PC: 12acf | Write file or device (See above) |
| 2018-12-25T12:44:14.050396817Z | 87 | PC: 12adc | Get or set file date and time (See above) |
| 2018-12-25T12:44:14.052213386Z | 62 | PC: 12ae0 | Close file (See above) |
| 2018-12-25T12:44:14.059536345Z | 67 | PC: 12aec | Get or set file attributes (See above) |
| 2018-12-25T12:44:14.070264918Z | 79 | PC: 12a74 | Find next file (See above) |
| 2018-12-25T12:44:14.072868858Z | 67 | PC: 12aa5 | Get or set file attributes (See above) |
| 2018-12-25T12:44:14.078360331Z | 67 | PC: 12ab0 | Get or set file attributes (See above) |
| 2018-12-25T12:44:14.091601269Z | 61 | PC: 12ab5 | Open file (See above) |
| 2018-12-25T12:44:14.09938577Z | 87 | PC: 12abd | Get or set file date and time (See above) |
| 2018-12-25T12:44:14.101038964Z | 64 | PC: 12acf | Write file or device (See above) |
| 2018-12-25T12:44:14.108104422Z | 87 | PC: 12adc | Get or set file date and time (See above) |
| 2018-12-25T12:44:14.110747141Z | 62 | PC: 12ae0 | Close file (See above) |
| 2018-12-25T12:44:14.118250084Z | 67 | PC: 12aec | Get or set file attributes (See above) |
| 2018-12-25T12:44:14.128146871Z | 79 | PC: 12a74 | Find next file (See above) |
| 2018-12-25T12:44:14.13184861Z | 67 | PC: 12aa5 | Get or set file attributes (See above) |
| 2018-12-25T12:44:14.137589479Z | 67 | PC: 12ab0 | Get or set file attributes (See above) |
| 2018-12-25T12:44:14.147384059Z | 61 | PC: 12ab5 | Open file (See above) |
| 2018-12-25T12:44:14.159696871Z | 87 | PC: 12abd | Get or set file date and time (See above) |
| 2018-12-25T12:44:14.160981199Z | 64 | PC: 12acf | Write file or device (See above) |
| 2018-12-25T12:44:14.167352754Z | 87 | PC: 12adc | Get or set file date and time (See above) |
| 2018-12-25T12:44:14.169285924Z | 62 | PC: 12ae0 | Close file (See above) |
| 2018-12-25T12:44:14.176599303Z | 67 | PC: 12aec | Get or set file attributes (See above) |
| 2018-12-25T12:44:14.186293469Z | 79 | PC: 12a74 | Find next file (See above) |
| 2018-12-25T12:44:14.189757702Z | 42 | PC: 12a7a | Get date 0x12a7a: cmp al, 3 0x12a7c: jne 0x12a99 0x12a7e: mov ah, 0x2c 0x12a80: int 0x21 0x12a82: cmp dx, 0x32 0x12a85: jne 0x12a99 0x12a87: mov byte ptr [0x10f], dh 0x12a8b: mov ah, 5 0x12a8d: mov dh, 0 0x12a8f: mov dl, 0x80 0x12a91: mov cl, 1 0x12a93: mov ch, byte ptr [0x10f] 0x12a97: int 0x13 0x12a99: mov ah, 0x4c 0x12a9b: int 0x21 0x12a9d: mov dx, 0x9e 0x12aa0: mov ax, 0x4300 0x12aa3: int 0x21 0x12aa5: mov word ptr [0x10c], cx 0x12aa9: xor cx, cx |
| 2018-12-25T12:44:14.19206692Z | 44 | PC: 12a82 | Get time 0x12a82: cmp dx, 0x32 0x12a85: jne 0x12a99 0x12a87: mov byte ptr [0x10f], dh 0x12a8b: mov ah, 5 0x12a8d: mov dh, 0 0x12a8f: mov dl, 0x80 0x12a91: mov cl, 1 0x12a93: mov ch, byte ptr [0x10f] 0x12a97: int 0x13 0x12a99: mov ah, 0x4c 0x12a9b: int 0x21 0x12a9d: mov dx, 0x9e 0x12aa0: mov ax, 0x4300 0x12aa3: int 0x21 0x12aa5: mov word ptr [0x10c], cx 0x12aa9: xor cx, cx 0x12aab: mov ax, 0x4301 0x12aae: int 0x21 0x12ab0: mov ax, 0x3d02 0x12ab3: int 0x21 |
| 2018-12-25T12:44:14.194339655Z | 76 | PC: 12a9d | Terminate with return code (Return code = '0') |