{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":16687,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:53:36.137112393Z | 78 | PC: 12a4a | Find first file |
| 2018-12-25T12:53:36.141383783Z | 67 | PC: 12abf | Get or set file attributes |
| 2018-12-25T12:53:36.147557382Z | 67 | PC: 12acb | Get or set file attributes |
| 2018-12-25T12:53:36.162135554Z | 61 | PC: 12ad1 | Open file (Filename = 'SLEEP.COM') |
| 2018-12-25T12:53:36.169040507Z | 87 | PC: 12adb | Get or set file date and time |
| 2018-12-25T12:53:36.170290587Z | 64 | PC: 12aee | Write file or device (Write 284 bytes on handle 5) |
| 2018-12-25T12:53:36.176625269Z | 87 | PC: 12afc | Get or set file date and time |
| 2018-12-25T12:53:36.178354819Z | 62 | PC: 12b00 | Close file |
| 2018-12-25T12:53:36.185397523Z | 67 | PC: 12b0d | Get or set file attributes |
| 2018-12-25T12:53:36.197604042Z | 79 | PC: 12a59 | Find next file |
| 2018-12-25T12:53:36.200473489Z | 67 | PC: 12abf | Get or set file attributes (See above) |
| 2018-12-25T12:53:36.205913402Z | 67 | PC: 12acb | Get or set file attributes (See above) |
| 2018-12-25T12:53:36.215242434Z | 61 | PC: 12ad1 | Open file (See above) |
| 2018-12-25T12:53:36.222641691Z | 87 | PC: 12adb | Get or set file date and time (See above) |
| 2018-12-25T12:53:36.223941116Z | 64 | PC: 12aee | Write file or device (See above) |
| 2018-12-25T12:53:36.230269855Z | 87 | PC: 12afc | Get or set file date and time (See above) |
| 2018-12-25T12:53:36.23182551Z | 62 | PC: 12b00 | Close file (See above) |
| 2018-12-25T12:53:36.238800046Z | 67 | PC: 12b0d | Get or set file attributes (See above) |
| 2018-12-25T12:53:36.250525448Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T12:53:36.252899332Z | 67 | PC: 12abf | Get or set file attributes (See above) |
| 2018-12-25T12:53:36.258907649Z | 67 | PC: 12acb | Get or set file attributes (See above) |
| 2018-12-25T12:53:36.268182279Z | 61 | PC: 12ad1 | Open file (See above) |
| 2018-12-25T12:53:36.274419175Z | 87 | PC: 12adb | Get or set file date and time (See above) |
| 2018-12-25T12:53:36.276284966Z | 64 | PC: 12aee | Write file or device (See above) |
| 2018-12-25T12:53:36.282585946Z | 87 | PC: 12afc | Get or set file date and time (See above) |
| 2018-12-25T12:53:36.283897534Z | 62 | PC: 12b00 | Close file (See above) |
| 2018-12-25T12:53:36.291368528Z | 67 | PC: 12b0d | Get or set file attributes (See above) |
| 2018-12-25T12:53:36.300743123Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T12:53:36.303127885Z | 67 | PC: 12abf | Get or set file attributes (See above) |
| 2018-12-25T12:53:36.308873965Z | 67 | PC: 12acb | Get or set file attributes (See above) |
| 2018-12-25T12:53:36.321006759Z | 61 | PC: 12ad1 | Open file (See above) |
| 2018-12-25T12:53:36.327318782Z | 87 | PC: 12adb | Get or set file date and time (See above) |
| 2018-12-25T12:53:36.329439004Z | 64 | PC: 12aee | Write file or device (See above) |
| 2018-12-25T12:53:36.335957947Z | 87 | PC: 12afc | Get or set file date and time (See above) |
| 2018-12-25T12:53:36.337317955Z | 62 | PC: 12b00 | Close file (See above) |
| 2018-12-25T12:53:36.345005894Z | 67 | PC: 12b0d | Get or set file attributes (See above) |
| 2018-12-25T12:53:36.354960985Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T12:53:36.357876038Z | 67 | PC: 12abf | Get or set file attributes (See above) |
| 2018-12-25T12:53:36.36427331Z | 67 | PC: 12acb | Get or set file attributes (See above) |
| 2018-12-25T12:53:36.376119181Z | 61 | PC: 12ad1 | Open file (See above) |
| 2018-12-25T12:53:36.383068463Z | 87 | PC: 12adb | Get or set file date and time (See above) |
| 2018-12-25T12:53:36.387770167Z | 64 | PC: 12aee | Write file or device (See above) |
| 2018-12-25T12:53:36.394489313Z | 87 | PC: 12afc | Get or set file date and time (See above) |
| 2018-12-25T12:53:36.396130036Z | 62 | PC: 12b00 | Close file (See above) |
| 2018-12-25T12:53:36.404119902Z | 67 | PC: 12b0d | Get or set file attributes (See above) |
| 2018-12-25T12:53:36.413483072Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T12:53:36.416172451Z | 67 | PC: 12abf | Get or set file attributes (See above) |
| 2018-12-25T12:53:36.421905246Z | 67 | PC: 12acb | Get or set file attributes (See above) |
| 2018-12-25T12:53:36.43137739Z | 61 | PC: 12ad1 | Open file (See above) |
| 2018-12-25T12:53:36.442362674Z | 87 | PC: 12adb | Get or set file date and time (See above) |
| 2018-12-25T12:53:36.443975641Z | 64 | PC: 12aee | Write file or device (See above) |
| 2018-12-25T12:53:36.450524296Z | 87 | PC: 12afc | Get or set file date and time (See above) |
| 2018-12-25T12:53:36.451883666Z | 62 | PC: 12b00 | Close file (See above) |
| 2018-12-25T12:53:36.459199021Z | 67 | PC: 12b0d | Get or set file attributes (See above) |
| 2018-12-25T12:53:36.468777332Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T12:53:36.471155565Z | 67 | PC: 12abf | Get or set file attributes (See above) |
| 2018-12-25T12:53:36.476849782Z | 67 | PC: 12acb | Get or set file attributes (See above) |
| 2018-12-25T12:53:36.486313814Z | 61 | PC: 12ad1 | Open file (See above) |
| 2018-12-25T12:53:36.497607779Z | 87 | PC: 12adb | Get or set file date and time (See above) |
| 2018-12-25T12:53:36.499026105Z | 64 | PC: 12aee | Write file or device (See above) |
| 2018-12-25T12:53:36.506334555Z | 87 | PC: 12afc | Get or set file date and time (See above) |
| 2018-12-25T12:53:36.507611555Z | 62 | PC: 12b00 | Close file (See above) |
| 2018-12-25T12:53:36.515530197Z | 67 | PC: 12b0d | Get or set file attributes (See above) |
| 2018-12-25T12:53:36.524958311Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T12:53:36.527350805Z | 67 | PC: 12abf | Get or set file attributes (See above) |
| 2018-12-25T12:53:36.532907478Z | 67 | PC: 12acb | Get or set file attributes (See above) |
| 2018-12-25T12:53:36.542221856Z | 61 | PC: 12ad1 | Open file (See above) |
| 2018-12-25T12:53:36.54772187Z | 87 | PC: 12adb | Get or set file date and time (See above) |
| 2018-12-25T12:53:36.549111001Z | 64 | PC: 12aee | Write file or device (See above) |
| 2018-12-25T12:53:36.55316996Z | 87 | PC: 12afc | Get or set file date and time (See above) |
| 2018-12-25T12:53:36.55411231Z | 62 | PC: 12b00 | Close file (See above) |
| 2018-12-25T12:53:36.559043859Z | 67 | PC: 12b0d | Get or set file attributes (See above) |
| 2018-12-25T12:53:36.566359606Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T12:53:36.567850307Z | 42 | PC: 12a64 | Get date 0x12a64: cmp al, 2 0x12a66: je 0x12a6c 0x12a68: mov ah, 0x4c 0x12a6a: int 0x21 0x12a6c: mov byte ptr [0x1da], 0 0x12a71: nop 0x12a72: jmp 0x12a75 0x12a74: nop 0x12a75: mov al, byte ptr [0x1db] 0x12a78: mov cx, 0xa0 0x12a7b: mov dx, 0 0x12a7e: mov bx, 0 0x12a81: int 0x26 0x12a83: inc byte ptr [0x1da] 0x12a87: cmp byte ptr [0x1da], 0xa 0x12a8c: je 0x12a90 0x12a8e: jne 0x12a75 0x12a90: mov ah, 9 0x12a92: mov dx, 0x206 0x12a95: int 0x21 |
| 2018-12-25T12:53:36.570259521Z | 9 | PC: 12a97 | Display string (String= ' Error on drive C: ') |
| 2018-12-25T12:53:36.572993807Z | 76 | PC: 12a9b | Terminate with return code (Return code = '36') |
{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":16687,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:53:36.470215841Z | 78 | PC: 12a4a | Find first file |
| 2018-12-25T12:53:36.47810019Z | 67 | PC: 12abf | Get or set file attributes |
| 2018-12-25T12:53:36.484709452Z | 67 | PC: 12acb | Get or set file attributes |
| 2018-12-25T12:53:36.508120629Z | 61 | PC: 12ad1 | Open file (Filename = 'SLEEP.COM') |
| 2018-12-25T12:53:36.51550834Z | 87 | PC: 12adb | Get or set file date and time |
| 2018-12-25T12:53:36.518574425Z | 64 | PC: 12aee | Write file or device (Write 284 bytes on handle 5) |
| 2018-12-25T12:53:36.526101199Z | 87 | PC: 12afc | Get or set file date and time |
| 2018-12-25T12:53:36.528106948Z | 62 | PC: 12b00 | Close file |
| 2018-12-25T12:53:36.549730694Z | 67 | PC: 12b0d | Get or set file attributes |
| 2018-12-25T12:53:36.561308562Z | 79 | PC: 12a59 | Find next file |
| 2018-12-25T12:53:36.565017717Z | 67 | PC: 12abf | Get or set file attributes (See above) |
| 2018-12-25T12:53:36.572477214Z | 67 | PC: 12acb | Get or set file attributes (See above) |
| 2018-12-25T12:53:36.583560288Z | 61 | PC: 12ad1 | Open file (See above) |
| 2018-12-25T12:53:36.592113348Z | 87 | PC: 12adb | Get or set file date and time (See above) |
| 2018-12-25T12:53:36.595160539Z | 64 | PC: 12aee | Write file or device (See above) |
| 2018-12-25T12:53:36.603455672Z | 87 | PC: 12afc | Get or set file date and time (See above) |
| 2018-12-25T12:53:36.605252905Z | 62 | PC: 12b00 | Close file (See above) |
| 2018-12-25T12:53:36.613496764Z | 67 | PC: 12b0d | Get or set file attributes (See above) |
| 2018-12-25T12:53:36.625438451Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T12:53:36.628859245Z | 67 | PC: 12abf | Get or set file attributes (See above) |
| 2018-12-25T12:53:36.635995043Z | 67 | PC: 12acb | Get or set file attributes (See above) |
| 2018-12-25T12:53:36.648320063Z | 61 | PC: 12ad1 | Open file (See above) |
| 2018-12-25T12:53:36.67626973Z | 87 | PC: 12adb | Get or set file date and time (See above) |
| 2018-12-25T12:53:36.67785601Z | 64 | PC: 12aee | Write file or device (See above) |
| 2018-12-25T12:53:36.686817594Z | 87 | PC: 12afc | Get or set file date and time (See above) |
| 2018-12-25T12:53:36.689321185Z | 62 | PC: 12b00 | Close file (See above) |
| 2018-12-25T12:53:36.697713148Z | 67 | PC: 12b0d | Get or set file attributes (See above) |
| 2018-12-25T12:53:36.70931053Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T12:53:36.712884634Z | 67 | PC: 12abf | Get or set file attributes (See above) |
| 2018-12-25T12:53:36.720352231Z | 67 | PC: 12acb | Get or set file attributes (See above) |
| 2018-12-25T12:53:36.731449695Z | 61 | PC: 12ad1 | Open file (See above) |
| 2018-12-25T12:53:36.738977478Z | 87 | PC: 12adb | Get or set file date and time (See above) |
| 2018-12-25T12:53:36.740381423Z | 64 | PC: 12aee | Write file or device (See above) |
| 2018-12-25T12:53:36.747710268Z | 87 | PC: 12afc | Get or set file date and time (See above) |
| 2018-12-25T12:53:36.749981165Z | 62 | PC: 12b00 | Close file (See above) |
| 2018-12-25T12:53:36.757697809Z | 67 | PC: 12b0d | Get or set file attributes (See above) |
| 2018-12-25T12:53:36.764406419Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T12:53:36.76695372Z | 67 | PC: 12abf | Get or set file attributes (See above) |
| 2018-12-25T12:53:36.773365557Z | 67 | PC: 12acb | Get or set file attributes (See above) |
| 2018-12-25T12:53:36.783092102Z | 61 | PC: 12ad1 | Open file (See above) |
| 2018-12-25T12:53:36.790995872Z | 87 | PC: 12adb | Get or set file date and time (See above) |
| 2018-12-25T12:53:36.792241253Z | 64 | PC: 12aee | Write file or device (See above) |
| 2018-12-25T12:53:36.799404285Z | 87 | PC: 12afc | Get or set file date and time (See above) |
| 2018-12-25T12:53:36.801457268Z | 62 | PC: 12b00 | Close file (See above) |
| 2018-12-25T12:53:36.809608151Z | 67 | PC: 12b0d | Get or set file attributes (See above) |
| 2018-12-25T12:53:36.820852245Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T12:53:36.824628768Z | 67 | PC: 12abf | Get or set file attributes (See above) |
| 2018-12-25T12:53:36.831313014Z | 67 | PC: 12acb | Get or set file attributes (See above) |
| 2018-12-25T12:53:36.845852806Z | 61 | PC: 12ad1 | Open file (See above) |
| 2018-12-25T12:53:36.853778427Z | 87 | PC: 12adb | Get or set file date and time (See above) |
| 2018-12-25T12:53:36.855314032Z | 64 | PC: 12aee | Write file or device (See above) |
| 2018-12-25T12:53:36.862870576Z | 87 | PC: 12afc | Get or set file date and time (See above) |
| 2018-12-25T12:53:36.865188513Z | 62 | PC: 12b00 | Close file (See above) |
| 2018-12-25T12:53:36.873043713Z | 67 | PC: 12b0d | Get or set file attributes (See above) |
| 2018-12-25T12:53:36.883636336Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T12:53:36.887205983Z | 67 | PC: 12abf | Get or set file attributes (See above) |
| 2018-12-25T12:53:36.893655012Z | 67 | PC: 12acb | Get or set file attributes (See above) |
| 2018-12-25T12:53:36.908669083Z | 61 | PC: 12ad1 | Open file (See above) |
| 2018-12-25T12:53:36.916313383Z | 87 | PC: 12adb | Get or set file date and time (See above) |
| 2018-12-25T12:53:36.918597237Z | 64 | PC: 12aee | Write file or device (See above) |
| 2018-12-25T12:53:36.925920598Z | 87 | PC: 12afc | Get or set file date and time (See above) |
| 2018-12-25T12:53:36.927592725Z | 62 | PC: 12b00 | Close file (See above) |
| 2018-12-25T12:53:36.935707504Z | 67 | PC: 12b0d | Get or set file attributes (See above) |
| 2018-12-25T12:53:36.94656416Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T12:53:36.949775399Z | 67 | PC: 12abf | Get or set file attributes (See above) |
| 2018-12-25T12:53:36.957092994Z | 67 | PC: 12acb | Get or set file attributes (See above) |
| 2018-12-25T12:53:36.971060037Z | 61 | PC: 12ad1 | Open file (See above) |
| 2018-12-25T12:53:36.978594191Z | 87 | PC: 12adb | Get or set file date and time (See above) |
| 2018-12-25T12:53:36.98137546Z | 64 | PC: 12aee | Write file or device (See above) |
| 2018-12-25T12:53:36.988859641Z | 87 | PC: 12afc | Get or set file date and time (See above) |
| 2018-12-25T12:53:36.990845619Z | 62 | PC: 12b00 | Close file (See above) |
| 2018-12-25T12:53:36.999862894Z | 67 | PC: 12b0d | Get or set file attributes (See above) |
| 2018-12-25T12:53:37.010955269Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T12:53:37.014153162Z | 42 | PC: 12a64 | Get date 0x12a64: cmp al, 2 0x12a66: je 0x12a6c 0x12a68: mov ah, 0x4c 0x12a6a: int 0x21 0x12a6c: mov byte ptr [0x1da], 0 0x12a71: nop 0x12a72: jmp 0x12a75 0x12a74: nop 0x12a75: mov al, byte ptr [0x1db] 0x12a78: mov cx, 0xa0 0x12a7b: mov dx, 0 0x12a7e: mov bx, 0 0x12a81: int 0x26 0x12a83: inc byte ptr [0x1da] 0x12a87: cmp byte ptr [0x1da], 0xa 0x12a8c: je 0x12a90 0x12a8e: jne 0x12a75 0x12a90: mov ah, 9 0x12a92: mov dx, 0x206 0x12a95: int 0x21 |
| 2018-12-25T12:53:37.016986065Z | 76 | PC: 12a6c | Terminate with return code (Return code = '3') |