{"DateBased":false,"Day":0,"Month":0,"Year":0,"Hour":0,"Min":0,"Second":0,"TimeBased":true,"OriginalID":16069,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:45:16.087066063Z | 26 | PC: 12a62 | Set disk transfer address |
| 2018-12-25T12:45:16.089104246Z | 71 | PC: 12a6c | Get current directory |
| 2018-12-25T12:45:16.092262502Z | 78 | PC: 12a77 | Find first file |
| 2018-12-25T12:45:16.098801183Z | 67 | PC: 12a95 | Get or set file attributes |
| 2018-12-25T12:45:17.429179413Z | 61 | PC: 12a9a | Open file (Filename = '�S�') |
| 2018-12-25T12:45:17.436630056Z | 63 | PC: 12aa6 | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-25T12:45:17.443594776Z | 66 | PC: 12ab6 | Move file pointer |
| 2018-12-25T12:45:17.445218159Z | 64 | PC: 12abf | Write file or device (Write 377 bytes on handle 5) |
| 2018-12-25T12:45:17.454259679Z | 66 | PC: 12ac7 | Move file pointer |
| 2018-12-25T12:45:17.455627909Z | 64 | PC: 12add | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-25T12:45:17.463268957Z | 87 | PC: 12aec | Get or set file date and time |
| 2018-12-25T12:45:17.465359643Z | 62 | PC: 12af0 | Close file |
| 2018-12-25T12:45:17.474042893Z | 67 | PC: 12afc | Get or set file attributes |
| 2018-12-25T12:45:17.475893407Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:45:17.47997608Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:45:17.483219398Z | 67 | PC: 12a95 | Get or set file attributes (See above) |
| 2018-12-25T12:45:17.494038254Z | 61 | PC: 12a9a | Open file (See above) |
| 2018-12-25T12:45:17.501732398Z | 63 | PC: 12aa6 | Read file or device (See above) |
| 2018-12-25T12:45:17.508794698Z | 66 | PC: 12ab6 | Move file pointer (See above) |
| 2018-12-25T12:45:17.51044996Z | 64 | PC: 12abf | Write file or device (See above) |
| 2018-12-25T12:45:17.513790329Z | 66 | PC: 12ac7 | Move file pointer (See above) |
| 2018-12-25T12:45:17.51529017Z | 64 | PC: 12add | Write file or device (See above) |
| 2018-12-25T12:45:17.518081606Z | 87 | PC: 12aec | Get or set file date and time (See above) |
| 2018-12-25T12:45:17.520149807Z | 62 | PC: 12af0 | Close file (See above) |
| 2018-12-25T12:45:17.5287909Z | 67 | PC: 12afc | Get or set file attributes (See above) |
| 2018-12-25T12:45:17.530533773Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:45:17.533474145Z | 67 | PC: 12a95 | Get or set file attributes (See above) |
| 2018-12-25T12:45:17.540594424Z | 61 | PC: 12a9a | Open file (See above) |
| 2018-12-25T12:45:17.547886266Z | 63 | PC: 12aa6 | Read file or device (See above) |
| 2018-12-25T12:45:17.554841846Z | 66 | PC: 12ab6 | Move file pointer (See above) |
| 2018-12-25T12:45:17.556376343Z | 64 | PC: 12abf | Write file or device (See above) |
| 2018-12-25T12:45:17.559073389Z | 66 | PC: 12ac7 | Move file pointer (See above) |
| 2018-12-25T12:45:17.560381149Z | 64 | PC: 12add | Write file or device (See above) |
| 2018-12-25T12:45:17.56369965Z | 87 | PC: 12aec | Get or set file date and time (See above) |
| 2018-12-25T12:45:17.564984283Z | 62 | PC: 12af0 | Close file (See above) |
| 2018-12-25T12:45:17.573080838Z | 67 | PC: 12afc | Get or set file attributes (See above) |
| 2018-12-25T12:45:17.575303062Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:45:17.57820399Z | 67 | PC: 12a95 | Get or set file attributes (See above) |
| 2018-12-25T12:45:17.589431899Z | 61 | PC: 12a9a | Open file (See above) |
| 2018-12-25T12:45:17.597004676Z | 63 | PC: 12aa6 | Read file or device (See above) |
| 2018-12-25T12:45:17.60398794Z | 66 | PC: 12ab6 | Move file pointer (See above) |
| 2018-12-25T12:45:17.605342237Z | 64 | PC: 12abf | Write file or device (See above) |
| 2018-12-25T12:45:17.608651447Z | 66 | PC: 12ac7 | Move file pointer (See above) |
| 2018-12-25T12:45:17.610056328Z | 64 | PC: 12add | Write file or device (See above) |
| 2018-12-25T12:45:17.612815748Z | 87 | PC: 12aec | Get or set file date and time (See above) |
| 2018-12-25T12:45:17.614649673Z | 62 | PC: 12af0 | Close file (See above) |
| 2018-12-25T12:45:17.622772961Z | 67 | PC: 12afc | Get or set file attributes (See above) |
| 2018-12-25T12:45:17.624622622Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:45:17.627686672Z | 67 | PC: 12a95 | Get or set file attributes (See above) |
| 2018-12-25T12:45:17.638923076Z | 61 | PC: 12a9a | Open file (See above) |
| 2018-12-25T12:45:17.646104252Z | 63 | PC: 12aa6 | Read file or device (See above) |
| 2018-12-25T12:45:17.653556863Z | 66 | PC: 12ab6 | Move file pointer (See above) |
| 2018-12-25T12:45:17.655380327Z | 64 | PC: 12abf | Write file or device (See above) |
| 2018-12-25T12:45:17.664058221Z | 66 | PC: 12ac7 | Move file pointer (See above) |
| 2018-12-25T12:45:17.665357385Z | 64 | PC: 12add | Write file or device (See above) |
| 2018-12-25T12:45:17.672817582Z | 87 | PC: 12aec | Get or set file date and time (See above) |
| 2018-12-25T12:45:17.674342245Z | 62 | PC: 12af0 | Close file (See above) |
| 2018-12-25T12:45:17.682779618Z | 67 | PC: 12afc | Get or set file attributes (See above) |
| 2018-12-25T12:45:17.684790876Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:45:17.687539175Z | 67 | PC: 12a95 | Get or set file attributes (See above) |
| 2018-12-25T12:45:17.698192914Z | 61 | PC: 12a9a | Open file (See above) |
| 2018-12-25T12:45:17.705609226Z | 63 | PC: 12aa6 | Read file or device (See above) |
| 2018-12-25T12:45:17.712965919Z | 66 | PC: 12ab6 | Move file pointer (See above) |
| 2018-12-25T12:45:17.714226095Z | 64 | PC: 12abf | Write file or device (See above) |
| 2018-12-25T12:45:17.71750536Z | 66 | PC: 12ac7 | Move file pointer (See above) |
| 2018-12-25T12:45:17.719026353Z | 64 | PC: 12add | Write file or device (See above) |
| 2018-12-25T12:45:17.721650076Z | 87 | PC: 12aec | Get or set file date and time (See above) |
| 2018-12-25T12:45:17.723469916Z | 62 | PC: 12af0 | Close file (See above) |
| 2018-12-25T12:45:17.731525744Z | 67 | PC: 12afc | Get or set file attributes (See above) |
| 2018-12-25T12:45:17.733297671Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:45:17.736268431Z | 67 | PC: 12a95 | Get or set file attributes (See above) |
| 2018-12-25T12:45:17.746958364Z | 61 | PC: 12a9a | Open file (See above) |
| 2018-12-25T12:45:17.753948316Z | 63 | PC: 12aa6 | Read file or device (See above) |
| 2018-12-25T12:45:17.756948403Z | 66 | PC: 12ab6 | Move file pointer (See above) |
| 2018-12-25T12:45:17.758390364Z | 64 | PC: 12abf | Write file or device (See above) |
| 2018-12-25T12:45:17.767034551Z | 66 | PC: 12ac7 | Move file pointer (See above) |
| 2018-12-25T12:45:17.768559198Z | 64 | PC: 12add | Write file or device (See above) |
| 2018-12-25T12:45:17.776154201Z | 87 | PC: 12aec | Get or set file date and time (See above) |
| 2018-12-25T12:45:17.777620244Z | 62 | PC: 12af0 | Close file (See above) |
| 2018-12-25T12:45:17.786156907Z | 67 | PC: 12afc | Get or set file attributes (See above) |
| 2018-12-25T12:45:17.788133793Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:45:17.79054437Z | 78 | PC: 12b11 | Find first file |
| 2018-12-25T12:45:17.796624197Z | 79 | PC: 12b11 | Find next file (See above) |
| 2018-12-25T12:45:17.799358352Z | 79 | PC: 12b11 | Find next file (See above) |
| 2018-12-25T12:45:17.801916191Z | 79 | PC: 12b11 | Find next file (See above) |
| 2018-12-25T12:45:17.804419756Z | 79 | PC: 12b11 | Find next file (See above) |
| 2018-12-25T12:45:17.807345224Z | 79 | PC: 12b11 | Find next file (See above) |
| 2018-12-25T12:45:17.80997971Z | 79 | PC: 12b11 | Find next file (See above) |
| 2018-12-25T12:45:17.812679565Z | 79 | PC: 12b11 | Find next file (See above) |
| 2018-12-25T12:45:17.815677725Z | 79 | PC: 12b11 | Find next file (See above) |
| 2018-12-25T12:45:17.81832338Z | 79 | PC: 12b11 | Find next file (See above) |
| 2018-12-25T12:45:17.820700903Z | 59 | PC: 12b43 | Change current directory |
| 2018-12-25T12:45:17.82286747Z | 44 | PC: 12b4c | Get time 0x12b4c: cmp cx, 0x1700 0x12b50: jne 0x12b7b 0x12b52: push cs 0x12b53: pop es 0x12b54: mov ax, 0x1300 0x12b57: mov bx, 0xc 0x12b5a: mov dx, 0x41a 0x12b5d: mov cx, 5 0x12b60: add bp, 0x16e 0x12b64: int 0x10 0x12b66: sub bp, 0x11 0x12b69: mov bx, 0xa 0x12b6c: mov dl, 0x1f 0x12b6e: mov cx, 8 0x12b71: int 0x10 0x12b73: xor ax, ax 0x12b75: int 0x16 0x12b77: sub bp, 0x16e 0x12b7b: pop es 0x12b7c: pop ds |
{"DateBased":false,"Day":0,"Month":0,"Year":0,"Hour":23,"Min":0,"Second":0,"TimeBased":true,"OriginalID":16069,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:45:16.084570221Z | 26 | PC: 12a62 | Set disk transfer address |
| 2018-12-25T12:45:16.086038435Z | 71 | PC: 12a6c | Get current directory |
| 2018-12-25T12:45:16.088806816Z | 78 | PC: 12a77 | Find first file |
| 2018-12-25T12:45:16.094506716Z | 67 | PC: 12a95 | Get or set file attributes |
| 2018-12-25T12:45:16.11112611Z | 61 | PC: 12a9a | Open file (Filename = '�S�') |
| 2018-12-25T12:45:16.117407182Z | 63 | PC: 12aa6 | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-25T12:45:16.123455416Z | 66 | PC: 12ab6 | Move file pointer |
| 2018-12-25T12:45:16.125619245Z | 64 | PC: 12abf | Write file or device (Write 377 bytes on handle 5) |
| 2018-12-25T12:45:16.133366417Z | 66 | PC: 12ac7 | Move file pointer |
| 2018-12-25T12:45:16.134508251Z | 64 | PC: 12add | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-25T12:45:16.140678045Z | 87 | PC: 12aec | Get or set file date and time |
| 2018-12-25T12:45:16.142465396Z | 62 | PC: 12af0 | Close file |
| 2018-12-25T12:45:16.149945819Z | 67 | PC: 12afc | Get or set file attributes |
| 2018-12-25T12:45:16.151036214Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:45:16.153105725Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:45:16.154656648Z | 67 | PC: 12a95 | Get or set file attributes (See above) |
| 2018-12-25T12:45:16.160469764Z | 61 | PC: 12a9a | Open file (See above) |
| 2018-12-25T12:45:16.164879701Z | 63 | PC: 12aa6 | Read file or device (See above) |
| 2018-12-25T12:45:16.171092134Z | 66 | PC: 12ab6 | Move file pointer (See above) |
| 2018-12-25T12:45:16.172159872Z | 64 | PC: 12abf | Write file or device (See above) |
| 2018-12-25T12:45:16.175152665Z | 66 | PC: 12ac7 | Move file pointer (See above) |
| 2018-12-25T12:45:16.176994348Z | 64 | PC: 12add | Write file or device (See above) |
| 2018-12-25T12:45:16.179940657Z | 87 | PC: 12aec | Get or set file date and time (See above) |
| 2018-12-25T12:45:16.182196312Z | 62 | PC: 12af0 | Close file (See above) |
| 2018-12-25T12:45:16.189302599Z | 67 | PC: 12afc | Get or set file attributes (See above) |
| 2018-12-25T12:45:16.190881651Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:45:16.193707826Z | 67 | PC: 12a95 | Get or set file attributes (See above) |
| 2018-12-25T12:45:16.203105851Z | 61 | PC: 12a9a | Open file (See above) |
| 2018-12-25T12:45:16.215057359Z | 63 | PC: 12aa6 | Read file or device (See above) |
| 2018-12-25T12:45:16.222147933Z | 66 | PC: 12ab6 | Move file pointer (See above) |
| 2018-12-25T12:45:16.223398691Z | 64 | PC: 12abf | Write file or device (See above) |
| 2018-12-25T12:45:16.225802584Z | 66 | PC: 12ac7 | Move file pointer (See above) |
| 2018-12-25T12:45:16.227681757Z | 64 | PC: 12add | Write file or device (See above) |
| 2018-12-25T12:45:16.23008559Z | 87 | PC: 12aec | Get or set file date and time (See above) |
| 2018-12-25T12:45:16.231404921Z | 62 | PC: 12af0 | Close file (See above) |
| 2018-12-25T12:45:16.250511414Z | 67 | PC: 12afc | Get or set file attributes (See above) |
| 2018-12-25T12:45:16.252212974Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:45:16.254605037Z | 67 | PC: 12a95 | Get or set file attributes (See above) |
| 2018-12-25T12:45:16.264626679Z | 61 | PC: 12a9a | Open file (See above) |
| 2018-12-25T12:45:16.270979312Z | 63 | PC: 12aa6 | Read file or device (See above) |
| 2018-12-25T12:45:16.277022805Z | 66 | PC: 12ab6 | Move file pointer (See above) |
| 2018-12-25T12:45:16.278953838Z | 64 | PC: 12abf | Write file or device (See above) |
| 2018-12-25T12:45:16.281581552Z | 66 | PC: 12ac7 | Move file pointer (See above) |
| 2018-12-25T12:45:16.282913298Z | 64 | PC: 12add | Write file or device (See above) |
| 2018-12-25T12:45:16.29402262Z | 87 | PC: 12aec | Get or set file date and time (See above) |
| 2018-12-25T12:45:16.295449102Z | 62 | PC: 12af0 | Close file (See above) |
| 2018-12-25T12:45:16.30276711Z | 67 | PC: 12afc | Get or set file attributes (See above) |
| 2018-12-25T12:45:16.305292508Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:45:16.307813768Z | 67 | PC: 12a95 | Get or set file attributes (See above) |
| 2018-12-25T12:45:16.317600185Z | 61 | PC: 12a9a | Open file (See above) |
| 2018-12-25T12:45:16.324930483Z | 63 | PC: 12aa6 | Read file or device (See above) |
| 2018-12-25T12:45:16.331363576Z | 66 | PC: 12ab6 | Move file pointer (See above) |
| 2018-12-25T12:45:16.332615467Z | 64 | PC: 12abf | Write file or device (See above) |
| 2018-12-25T12:45:16.340857876Z | 66 | PC: 12ac7 | Move file pointer (See above) |
| 2018-12-25T12:45:16.342123188Z | 64 | PC: 12add | Write file or device (See above) |
| 2018-12-25T12:45:16.348428652Z | 87 | PC: 12aec | Get or set file date and time (See above) |
| 2018-12-25T12:45:16.350148754Z | 62 | PC: 12af0 | Close file (See above) |
| 2018-12-25T12:45:16.358127069Z | 67 | PC: 12afc | Get or set file attributes (See above) |
| 2018-12-25T12:45:16.359705119Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:45:16.363648745Z | 67 | PC: 12a95 | Get or set file attributes (See above) |
| 2018-12-25T12:45:16.373103889Z | 61 | PC: 12a9a | Open file (See above) |
| 2018-12-25T12:45:16.379369842Z | 63 | PC: 12aa6 | Read file or device (See above) |
| 2018-12-25T12:45:16.386456238Z | 66 | PC: 12ab6 | Move file pointer (See above) |
| 2018-12-25T12:45:16.387698553Z | 64 | PC: 12abf | Write file or device (See above) |
| 2018-12-25T12:45:16.390152985Z | 66 | PC: 12ac7 | Move file pointer (See above) |
| 2018-12-25T12:45:16.392825396Z | 64 | PC: 12add | Write file or device (See above) |
| 2018-12-25T12:45:16.395243197Z | 87 | PC: 12aec | Get or set file date and time (See above) |
| 2018-12-25T12:45:16.396549067Z | 62 | PC: 12af0 | Close file (See above) |
| 2018-12-25T12:45:16.404657365Z | 67 | PC: 12afc | Get or set file attributes (See above) |
| 2018-12-25T12:45:16.414886586Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:45:16.417970218Z | 67 | PC: 12a95 | Get or set file attributes (See above) |
| 2018-12-25T12:45:16.428141099Z | 61 | PC: 12a9a | Open file (See above) |
| 2018-12-25T12:45:16.435279776Z | 63 | PC: 12aa6 | Read file or device (See above) |
| 2018-12-25T12:45:16.442359574Z | 66 | PC: 12ab6 | Move file pointer (See above) |
| 2018-12-25T12:45:16.44430362Z | 64 | PC: 12abf | Write file or device (See above) |
| 2018-12-25T12:45:16.453168344Z | 66 | PC: 12ac7 | Move file pointer (See above) |
| 2018-12-25T12:45:16.454568516Z | 64 | PC: 12add | Write file or device (See above) |
| 2018-12-25T12:45:16.461374381Z | 87 | PC: 12aec | Get or set file date and time (See above) |
| 2018-12-25T12:45:16.463684048Z | 62 | PC: 12af0 | Close file (See above) |
| 2018-12-25T12:45:16.471213685Z | 67 | PC: 12afc | Get or set file attributes (See above) |
| 2018-12-25T12:45:16.472772909Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:45:16.476504855Z | 78 | PC: 12b11 | Find first file |
| 2018-12-25T12:45:16.482551715Z | 79 | PC: 12b11 | Find next file (See above) |
| 2018-12-25T12:45:16.485315035Z | 79 | PC: 12b11 | Find next file (See above) |
| 2018-12-25T12:45:16.48917427Z | 79 | PC: 12b11 | Find next file (See above) |
| 2018-12-25T12:45:16.491963396Z | 79 | PC: 12b11 | Find next file (See above) |
| 2018-12-25T12:45:16.494760308Z | 79 | PC: 12b11 | Find next file (See above) |
| 2018-12-25T12:45:16.498554801Z | 79 | PC: 12b11 | Find next file (See above) |
| 2018-12-25T12:45:16.501835626Z | 79 | PC: 12b11 | Find next file (See above) |
| 2018-12-25T12:45:16.504578931Z | 79 | PC: 12b11 | Find next file (See above) |
| 2018-12-25T12:45:16.507464316Z | 79 | PC: 12b11 | Find next file (See above) |
| 2018-12-25T12:45:16.509530962Z | 59 | PC: 12b43 | Change current directory |
| 2018-12-25T12:45:16.511797299Z | 44 | PC: 12b4c | Get time 0x12b4c: cmp cx, 0x1700 0x12b50: jne 0x12b7b 0x12b52: push cs 0x12b53: pop es 0x12b54: mov ax, 0x1300 0x12b57: mov bx, 0xc 0x12b5a: mov dx, 0x41a 0x12b5d: mov cx, 5 0x12b60: add bp, 0x16e 0x12b64: int 0x10 0x12b66: sub bp, 0x11 0x12b69: mov bx, 0xa 0x12b6c: mov dl, 0x1f 0x12b6e: mov cx, 8 0x12b71: int 0x10 0x12b73: xor ax, ax 0x12b75: int 0x16 0x12b77: sub bp, 0x16e 0x12b7b: pop es 0x12b7c: pop ds |