{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":17551,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:56:02.150130321Z | 26 | PC: 12ac7 | Set disk transfer address |
| 2018-12-25T12:56:02.151841404Z | 71 | PC: 12ad9 | Get current directory |
| 2018-12-25T12:56:02.1559371Z | 42 | PC: 12adf | Get date 0x12adf: cmp dh, 4 0x12ae2: jne 0x12afd 0x12ae4: cmp dl, 0xf 0x12ae7: jne 0x12afd 0x12ae9: mov ax, 0x1010 0x12aec: out 0x70, ax 0x12aee: mov dx, 0x420 0x12af1: mov ah, 9 0x12af3: int 0x21 0x12af5: mov ah, 8 0x12af7: int 0x21 0x12af9: mov al, 0xfe 0x12afb: out 0x64, al 0x12afd: mov dx, 0x40e 0x12b00: mov ah, byte ptr [0x47b] 0x12b04: mov cl, 7 0x12b06: int 0x21 0x12b08: jae 0x12b0d 0x12b0a: jmp 0x12cb8 0x12b0d: mov dx, word ptr [0x443] |
| 2018-12-25T12:56:02.158789166Z | 78 | PC: 12b08 | Find first file |
| 2018-12-25T12:56:02.166438989Z | 67 | PC: 12b24 | Get or set file attributes |
| 2018-12-25T12:56:02.193749591Z | 61 | PC: 12b46 | Open file (Filename = 'SLEEP.COM') |
| 2018-12-25T12:56:02.20357116Z | 63 | PC: 12b62 | Read file or device (Read 950 bytes on handle 5) |
| 2018-12-25T12:56:02.211434351Z | 66 | PC: 12b8a | Move file pointer |
| 2018-12-25T12:56:02.213699657Z | 66 | PC: 12bab | Move file pointer |
| 2018-12-25T12:56:02.21591846Z | 64 | PC: 12bc6 | Write file or device (Write 407 bytes on handle 5) |
| 2018-12-25T12:56:02.225371592Z | 64 | PC: 12bd6 | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-25T12:56:02.232166849Z | 66 | PC: 12c05 | Move file pointer |
| 2018-12-25T12:56:02.234106358Z | 64 | PC: 12c16 | Write file or device (Write 950 bytes on handle 5) |
| 2018-12-25T12:56:02.243675395Z | 87 | PC: 12c27 | Get or set file date and time |
| 2018-12-25T12:56:02.246174933Z | 67 | PC: 12c39 | Get or set file attributes |
| 2018-12-25T12:56:02.259008129Z | 62 | PC: 12c3f | Close file |
| 2018-12-25T12:56:02.270629932Z | 79 | PC: 12b08 | Find next file (See above) |
| 2018-12-25T12:56:02.273957788Z | 67 | PC: 12b24 | Get or set file attributes (See above) |
| 2018-12-25T12:56:02.285971137Z | 61 | PC: 12b46 | Open file (See above) |
| 2018-12-25T12:56:02.293992913Z | 63 | PC: 12b62 | Read file or device (See above) |
| 2018-12-25T12:56:02.301627048Z | 66 | PC: 12b8a | Move file pointer (See above) |
| 2018-12-25T12:56:02.304233258Z | 66 | PC: 12bab | Move file pointer (See above) |
| 2018-12-25T12:56:02.306177305Z | 64 | PC: 12bc6 | Write file or device (See above) |
| 2018-12-25T12:56:02.310708834Z | 64 | PC: 12bd6 | Write file or device (See above) |
| 2018-12-25T12:56:02.314967539Z | 66 | PC: 12c05 | Move file pointer (See above) |
| 2018-12-25T12:56:02.317383034Z | 64 | PC: 12c16 | Write file or device (See above) |
| 2018-12-25T12:56:02.326269604Z | 87 | PC: 12c27 | Get or set file date and time (See above) |
| 2018-12-25T12:56:02.328882775Z | 67 | PC: 12c39 | Get or set file attributes (See above) |
| 2018-12-25T12:56:02.341970141Z | 62 | PC: 12c3f | Close file (See above) |
| 2018-12-25T12:56:02.350060321Z | 79 | PC: 12b08 | Find next file (See above) |
| 2018-12-25T12:56:02.35430073Z | 67 | PC: 12b24 | Get or set file attributes (See above) |
| 2018-12-25T12:56:02.36527129Z | 61 | PC: 12b46 | Open file (See above) |
| 2018-12-25T12:56:02.373238577Z | 63 | PC: 12b62 | Read file or device (See above) |
| 2018-12-25T12:56:02.380916621Z | 66 | PC: 12b8a | Move file pointer (See above) |
| 2018-12-25T12:56:02.382646547Z | 66 | PC: 12bab | Move file pointer (See above) |
| 2018-12-25T12:56:02.38422743Z | 64 | PC: 12bc6 | Write file or device (See above) |
| 2018-12-25T12:56:02.393141424Z | 64 | PC: 12bd6 | Write file or device (See above) |
| 2018-12-25T12:56:02.395849098Z | 66 | PC: 12c05 | Move file pointer (See above) |
| 2018-12-25T12:56:02.397071776Z | 64 | PC: 12c16 | Write file or device (See above) |
| 2018-12-25T12:56:02.402848247Z | 87 | PC: 12c27 | Get or set file date and time (See above) |
| 2018-12-25T12:56:02.404869317Z | 67 | PC: 12c39 | Get or set file attributes (See above) |
| 2018-12-25T12:56:02.420303286Z | 62 | PC: 12c3f | Close file (See above) |
| 2018-12-25T12:56:02.429218208Z | 79 | PC: 12b08 | Find next file (See above) |
| 2018-12-25T12:56:02.433503622Z | 67 | PC: 12b24 | Get or set file attributes (See above) |
| 2018-12-25T12:56:02.444732385Z | 61 | PC: 12b46 | Open file (See above) |
| 2018-12-25T12:56:02.452555008Z | 63 | PC: 12b62 | Read file or device (See above) |
| 2018-12-25T12:56:02.460494991Z | 66 | PC: 12b8a | Move file pointer (See above) |
| 2018-12-25T12:56:02.462015515Z | 66 | PC: 12bab | Move file pointer (See above) |
| 2018-12-25T12:56:02.46348864Z | 64 | PC: 12bc6 | Write file or device (See above) |
| 2018-12-25T12:56:02.469241768Z | 64 | PC: 12bd6 | Write file or device (See above) |
| 2018-12-25T12:56:02.472510709Z | 66 | PC: 12c05 | Move file pointer (See above) |
| 2018-12-25T12:56:02.474492523Z | 64 | PC: 12c16 | Write file or device (See above) |
| 2018-12-25T12:56:02.484116081Z | 87 | PC: 12c27 | Get or set file date and time (See above) |
| 2018-12-25T12:56:02.48624872Z | 67 | PC: 12c39 | Get or set file attributes (See above) |
| 2018-12-25T12:56:02.498961547Z | 62 | PC: 12c3f | Close file (See above) |
| 2018-12-25T12:56:02.507223772Z | 79 | PC: 12b08 | Find next file (See above) |
| 2018-12-25T12:56:02.510542331Z | 67 | PC: 12b24 | Get or set file attributes (See above) |
| 2018-12-25T12:56:02.521648277Z | 61 | PC: 12b46 | Open file (See above) |
| 2018-12-25T12:56:02.529092143Z | 63 | PC: 12b62 | Read file or device (See above) |
| 2018-12-25T12:56:02.538234048Z | 66 | PC: 12b8a | Move file pointer (See above) |
| 2018-12-25T12:56:02.540337842Z | 66 | PC: 12bab | Move file pointer (See above) |
| 2018-12-25T12:56:02.542422339Z | 64 | PC: 12bc6 | Write file or device (See above) |
| 2018-12-25T12:56:02.547876089Z | 64 | PC: 12bd6 | Write file or device (See above) |
| 2018-12-25T12:56:02.551293656Z | 66 | PC: 12c05 | Move file pointer (See above) |
| 2018-12-25T12:56:02.55311814Z | 64 | PC: 12c16 | Write file or device (See above) |
| 2018-12-25T12:56:02.561921386Z | 87 | PC: 12c27 | Get or set file date and time (See above) |
| 2018-12-25T12:56:02.563553451Z | 67 | PC: 12c39 | Get or set file attributes (See above) |
| 2018-12-25T12:56:02.575868305Z | 62 | PC: 12c3f | Close file (See above) |
| 2018-12-25T12:56:02.584236907Z | 78 | PC: 12b08 | Find first file (See above) |
| 2018-12-25T12:56:02.59090231Z | 59 | PC: 12cda | Change current directory |
| 2018-12-25T12:56:02.595680727Z | 26 | PC: 12cf7 | Set disk transfer address |
| 2018-12-25T12:56:02.597231453Z | 59 | PC: 12d02 | Change current directory |
{"DateBased":true,"Day":1,"Month":4,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":17551,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:56:03.540832585Z | 26 | PC: 12ac7 | Set disk transfer address |
| 2018-12-25T12:56:03.542424273Z | 71 | PC: 12ad9 | Get current directory |
| 2018-12-25T12:56:03.545871847Z | 42 | PC: 12adf | Get date 0x12adf: cmp dh, 4 0x12ae2: jne 0x12afd 0x12ae4: cmp dl, 0xf 0x12ae7: jne 0x12afd 0x12ae9: mov ax, 0x1010 0x12aec: out 0x70, ax 0x12aee: mov dx, 0x420 0x12af1: mov ah, 9 0x12af3: int 0x21 0x12af5: mov ah, 8 0x12af7: int 0x21 0x12af9: mov al, 0xfe 0x12afb: out 0x64, al 0x12afd: mov dx, 0x40e 0x12b00: mov ah, byte ptr [0x47b] 0x12b04: mov cl, 7 0x12b06: int 0x21 0x12b08: jae 0x12b0d 0x12b0a: jmp 0x12cb8 0x12b0d: mov dx, word ptr [0x443] |
| 2018-12-25T12:56:03.54904078Z | 78 | PC: 12b08 | Find first file |
| 2018-12-25T12:56:03.555713844Z | 67 | PC: 12b24 | Get or set file attributes |
| 2018-12-25T12:56:03.972966778Z | 61 | PC: 12b46 | Open file (Filename = 'SLEEP.COM') |
| 2018-12-25T12:56:03.98064442Z | 63 | PC: 12b62 | Read file or device (Read 950 bytes on handle 5) |
| 2018-12-25T12:56:03.988220159Z | 66 | PC: 12b8a | Move file pointer |
| 2018-12-25T12:56:03.990673187Z | 66 | PC: 12bab | Move file pointer |
| 2018-12-25T12:56:03.992403413Z | 64 | PC: 12bc6 | Write file or device (Write 407 bytes on handle 5) |
| 2018-12-25T12:56:04.001453564Z | 64 | PC: 12bd6 | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-25T12:56:04.006359027Z | 66 | PC: 12c05 | Move file pointer |
| 2018-12-25T12:56:04.007911476Z | 64 | PC: 12c16 | Write file or device (Write 950 bytes on handle 5) |
| 2018-12-25T12:56:04.016916781Z | 87 | PC: 12c27 | Get or set file date and time |
| 2018-12-25T12:56:04.01990523Z | 67 | PC: 12c39 | Get or set file attributes |
| 2018-12-25T12:56:04.031929591Z | 62 | PC: 12c3f | Close file |
| 2018-12-25T12:56:04.038633134Z | 79 | PC: 12b08 | Find next file (See above) |
| 2018-12-25T12:56:04.040537609Z | 67 | PC: 12b24 | Get or set file attributes (See above) |
| 2018-12-25T12:56:04.048405044Z | 61 | PC: 12b46 | Open file (See above) |
| 2018-12-25T12:56:04.053017379Z | 63 | PC: 12b62 | Read file or device (See above) |
| 2018-12-25T12:56:04.057592723Z | 66 | PC: 12b8a | Move file pointer (See above) |
| 2018-12-25T12:56:04.059567434Z | 66 | PC: 12bab | Move file pointer (See above) |
| 2018-12-25T12:56:04.060757278Z | 64 | PC: 12bc6 | Write file or device (See above) |
| 2018-12-25T12:56:04.063516879Z | 64 | PC: 12bd6 | Write file or device (See above) |
| 2018-12-25T12:56:04.068121017Z | 66 | PC: 12c05 | Move file pointer (See above) |
| 2018-12-25T12:56:04.070102688Z | 64 | PC: 12c16 | Write file or device (See above) |
| 2018-12-25T12:56:04.077220461Z | 87 | PC: 12c27 | Get or set file date and time (See above) |
| 2018-12-25T12:56:04.079125042Z | 67 | PC: 12c39 | Get or set file attributes (See above) |
| 2018-12-25T12:56:04.08693711Z | 62 | PC: 12c3f | Close file (See above) |
| 2018-12-25T12:56:04.094908979Z | 79 | PC: 12b08 | Find next file (See above) |
| 2018-12-25T12:56:04.098896977Z | 67 | PC: 12b24 | Get or set file attributes (See above) |
| 2018-12-25T12:56:04.109989538Z | 61 | PC: 12b46 | Open file (See above) |
| 2018-12-25T12:56:04.114549485Z | 63 | PC: 12b62 | Read file or device (See above) |
| 2018-12-25T12:56:04.12016978Z | 66 | PC: 12b8a | Move file pointer (See above) |
| 2018-12-25T12:56:04.123235189Z | 66 | PC: 12bab | Move file pointer (See above) |
| 2018-12-25T12:56:04.124760694Z | 64 | PC: 12bc6 | Write file or device (See above) |
| 2018-12-25T12:56:04.134591016Z | 64 | PC: 12bd6 | Write file or device (See above) |
| 2018-12-25T12:56:04.138451334Z | 66 | PC: 12c05 | Move file pointer (See above) |
| 2018-12-25T12:56:04.140031879Z | 64 | PC: 12c16 | Write file or device (See above) |
| 2018-12-25T12:56:04.148757726Z | 87 | PC: 12c27 | Get or set file date and time (See above) |
| 2018-12-25T12:56:04.150944628Z | 67 | PC: 12c39 | Get or set file attributes (See above) |
| 2018-12-25T12:56:04.163924311Z | 62 | PC: 12c3f | Close file (See above) |
| 2018-12-25T12:56:04.171968005Z | 79 | PC: 12b08 | Find next file (See above) |
| 2018-12-25T12:56:04.175916672Z | 67 | PC: 12b24 | Get or set file attributes (See above) |
| 2018-12-25T12:56:04.186615844Z | 61 | PC: 12b46 | Open file (See above) |
| 2018-12-25T12:56:04.19388225Z | 63 | PC: 12b62 | Read file or device (See above) |
| 2018-12-25T12:56:04.202175468Z | 66 | PC: 12b8a | Move file pointer (See above) |
| 2018-12-25T12:56:04.204468921Z | 66 | PC: 12bab | Move file pointer (See above) |
| 2018-12-25T12:56:04.206062955Z | 64 | PC: 12bc6 | Write file or device (See above) |
| 2018-12-25T12:56:04.21024107Z | 64 | PC: 12bd6 | Write file or device (See above) |
| 2018-12-25T12:56:04.215359685Z | 66 | PC: 12c05 | Move file pointer (See above) |
| 2018-12-25T12:56:04.216890513Z | 64 | PC: 12c16 | Write file or device (See above) |
| 2018-12-25T12:56:04.224951877Z | 87 | PC: 12c27 | Get or set file date and time (See above) |
| 2018-12-25T12:56:04.227719558Z | 67 | PC: 12c39 | Get or set file attributes (See above) |
| 2018-12-25T12:56:04.239599408Z | 62 | PC: 12c3f | Close file (See above) |
| 2018-12-25T12:56:04.247102231Z | 79 | PC: 12b08 | Find next file (See above) |
| 2018-12-25T12:56:04.250914044Z | 67 | PC: 12b24 | Get or set file attributes (See above) |
| 2018-12-25T12:56:04.261682785Z | 61 | PC: 12b46 | Open file (See above) |
| 2018-12-25T12:56:04.270031102Z | 63 | PC: 12b62 | Read file or device (See above) |
| 2018-12-25T12:56:04.278120028Z | 66 | PC: 12b8a | Move file pointer (See above) |
| 2018-12-25T12:56:04.280559341Z | 66 | PC: 12bab | Move file pointer (See above) |
| 2018-12-25T12:56:04.282556988Z | 64 | PC: 12bc6 | Write file or device (See above) |
| 2018-12-25T12:56:04.287051638Z | 64 | PC: 12bd6 | Write file or device (See above) |
| 2018-12-25T12:56:04.291420875Z | 66 | PC: 12c05 | Move file pointer (See above) |
| 2018-12-25T12:56:04.29305396Z | 64 | PC: 12c16 | Write file or device (See above) |
| 2018-12-25T12:56:04.301978353Z | 87 | PC: 12c27 | Get or set file date and time (See above) |
| 2018-12-25T12:56:04.30473657Z | 67 | PC: 12c39 | Get or set file attributes (See above) |
| 2018-12-25T12:56:04.317353695Z | 62 | PC: 12c3f | Close file (See above) |
| 2018-12-25T12:56:04.325634136Z | 78 | PC: 12b08 | Find first file (See above) |
| 2018-12-25T12:56:04.334311509Z | 59 | PC: 12cda | Change current directory |
| 2018-12-25T12:56:04.339701868Z | 26 | PC: 12cf7 | Set disk transfer address |
| 2018-12-25T12:56:04.342111414Z | 59 | PC: 12d02 | Change current directory |
{"DateBased":true,"Day":15,"Month":4,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":17551,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:56:04.655789402Z | 26 | PC: 12ac7 | Set disk transfer address |
| 2018-12-25T12:56:04.660182362Z | 71 | PC: 12ad9 | Get current directory |
| 2018-12-25T12:56:04.663341312Z | 42 | PC: 12adf | Get date 0x12adf: cmp dh, 4 0x12ae2: jne 0x12afd 0x12ae4: cmp dl, 0xf 0x12ae7: jne 0x12afd 0x12ae9: mov ax, 0x1010 0x12aec: out 0x70, ax 0x12aee: mov dx, 0x420 0x12af1: mov ah, 9 0x12af3: int 0x21 0x12af5: mov ah, 8 0x12af7: int 0x21 0x12af9: mov al, 0xfe 0x12afb: out 0x64, al 0x12afd: mov dx, 0x40e 0x12b00: mov ah, byte ptr [0x47b] 0x12b04: mov cl, 7 0x12b06: int 0x21 0x12b08: jae 0x12b0d 0x12b0a: jmp 0x12cb8 0x12b0d: mov dx, word ptr [0x443] |
| 2018-12-25T12:56:04.665895548Z | 9 | PC: 12af5 | Display string (String= '��ࠡ���� - rulez forever ! ') |
| 2018-12-25T12:56:04.671210968Z | 8 | PC: 12af9 | Console input without echo |