{"DateBased":false,"Day":0,"Month":0,"Year":0,"Hour":23,"Min":0,"Second":0,"TimeBased":true,"OriginalID":17658,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:56:15.487288918Z | 26 | PC: 12a62 | Set disk transfer address |
| 2018-12-25T12:56:15.489267817Z | 71 | PC: 12a6c | Get current directory |
| 2018-12-25T12:56:15.492537259Z | 78 | PC: 12a77 | Find first file |
| 2018-12-25T12:56:15.499742204Z | 67 | PC: 12a95 | Get or set file attributes |
| 2018-12-25T12:56:15.516172696Z | 61 | PC: 12a9a | Open file (Filename = '�') |
| 2018-12-25T12:56:15.527494124Z | 63 | PC: 12aa6 | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-25T12:56:15.53481772Z | 66 | PC: 12ab6 | Move file pointer |
| 2018-12-25T12:56:15.536444395Z | 64 | PC: 12ac0 | Write file or device (Write 379 bytes on handle 5) |
| 2018-12-25T12:56:15.548667622Z | 66 | PC: 12ac8 | Move file pointer |
| 2018-12-25T12:56:15.550239617Z | 64 | PC: 12ade | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-25T12:56:15.55845329Z | 87 | PC: 12aed | Get or set file date and time |
| 2018-12-25T12:56:15.560691739Z | 62 | PC: 12af1 | Close file |
| 2018-12-25T12:56:15.569716195Z | 67 | PC: 12afd | Get or set file attributes |
| 2018-12-25T12:56:15.572053Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:56:15.575861805Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:56:15.579136589Z | 67 | PC: 12a95 | Get or set file attributes (See above) |
| 2018-12-25T12:56:15.590338827Z | 61 | PC: 12a9a | Open file (See above) |
| 2018-12-25T12:56:15.598145131Z | 63 | PC: 12aa6 | Read file or device (See above) |
| 2018-12-25T12:56:15.605957984Z | 66 | PC: 12ab6 | Move file pointer (See above) |
| 2018-12-25T12:56:15.607674294Z | 64 | PC: 12ac0 | Write file or device (See above) |
| 2018-12-25T12:56:15.610764692Z | 66 | PC: 12ac8 | Move file pointer (See above) |
| 2018-12-25T12:56:15.613235854Z | 64 | PC: 12ade | Write file or device (See above) |
| 2018-12-25T12:56:15.617039334Z | 87 | PC: 12aed | Get or set file date and time (See above) |
| 2018-12-25T12:56:15.61907988Z | 62 | PC: 12af1 | Close file (See above) |
| 2018-12-25T12:56:15.628598731Z | 67 | PC: 12afd | Get or set file attributes (See above) |
| 2018-12-25T12:56:15.630522595Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:56:15.633297322Z | 67 | PC: 12a95 | Get or set file attributes (See above) |
| 2018-12-25T12:56:15.645136059Z | 61 | PC: 12a9a | Open file (See above) |
| 2018-12-25T12:56:15.652542916Z | 63 | PC: 12aa6 | Read file or device (See above) |
| 2018-12-25T12:56:15.659684838Z | 66 | PC: 12ab6 | Move file pointer (See above) |
| 2018-12-25T12:56:15.661755764Z | 64 | PC: 12ac0 | Write file or device (See above) |
| 2018-12-25T12:56:15.664902212Z | 66 | PC: 12ac8 | Move file pointer (See above) |
| 2018-12-25T12:56:15.666506923Z | 64 | PC: 12ade | Write file or device (See above) |
| 2018-12-25T12:56:15.669824319Z | 87 | PC: 12aed | Get or set file date and time (See above) |
| 2018-12-25T12:56:15.671851706Z | 62 | PC: 12af1 | Close file (See above) |
| 2018-12-25T12:56:15.680410502Z | 67 | PC: 12afd | Get or set file attributes (See above) |
| 2018-12-25T12:56:15.68218468Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:56:15.688647663Z | 67 | PC: 12a95 | Get or set file attributes (See above) |
| 2018-12-25T12:56:15.700608561Z | 61 | PC: 12a9a | Open file (See above) |
| 2018-12-25T12:56:15.708403895Z | 63 | PC: 12aa6 | Read file or device (See above) |
| 2018-12-25T12:56:15.71700299Z | 66 | PC: 12ab6 | Move file pointer (See above) |
| 2018-12-25T12:56:15.718996391Z | 64 | PC: 12ac0 | Write file or device (See above) |
| 2018-12-25T12:56:15.72976895Z | 66 | PC: 12ac8 | Move file pointer (See above) |
| 2018-12-25T12:56:15.7330682Z | 64 | PC: 12ade | Write file or device (See above) |
| 2018-12-25T12:56:15.736248265Z | 87 | PC: 12aed | Get or set file date and time (See above) |
| 2018-12-25T12:56:15.73878963Z | 62 | PC: 12af1 | Close file (See above) |
| 2018-12-25T12:56:15.74776376Z | 67 | PC: 12afd | Get or set file attributes (See above) |
| 2018-12-25T12:56:15.750546918Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:56:15.754282231Z | 67 | PC: 12a95 | Get or set file attributes (See above) |
| 2018-12-25T12:56:15.766598047Z | 61 | PC: 12a9a | Open file (See above) |
| 2018-12-25T12:56:15.774378058Z | 63 | PC: 12aa6 | Read file or device (See above) |
| 2018-12-25T12:56:15.782105449Z | 66 | PC: 12ab6 | Move file pointer (See above) |
| 2018-12-25T12:56:15.784776535Z | 64 | PC: 12ac0 | Write file or device (See above) |
| 2018-12-25T12:56:15.79405384Z | 66 | PC: 12ac8 | Move file pointer (See above) |
| 2018-12-25T12:56:15.79604343Z | 64 | PC: 12ade | Write file or device (See above) |
| 2018-12-25T12:56:15.803984417Z | 87 | PC: 12aed | Get or set file date and time (See above) |
| 2018-12-25T12:56:15.806275043Z | 62 | PC: 12af1 | Close file (See above) |
| 2018-12-25T12:56:15.815396316Z | 67 | PC: 12afd | Get or set file attributes (See above) |
| 2018-12-25T12:56:15.8177854Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:56:15.822288802Z | 67 | PC: 12a95 | Get or set file attributes (See above) |
| 2018-12-25T12:56:15.833796613Z | 61 | PC: 12a9a | Open file (See above) |
| 2018-12-25T12:56:15.841561809Z | 63 | PC: 12aa6 | Read file or device (See above) |
| 2018-12-25T12:56:15.850073792Z | 66 | PC: 12ab6 | Move file pointer (See above) |
| 2018-12-25T12:56:15.852009823Z | 64 | PC: 12ac0 | Write file or device (See above) |
| 2018-12-25T12:56:15.855345974Z | 66 | PC: 12ac8 | Move file pointer (See above) |
| 2018-12-25T12:56:15.857969419Z | 64 | PC: 12ade | Write file or device (See above) |
| 2018-12-25T12:56:15.86092575Z | 87 | PC: 12aed | Get or set file date and time (See above) |
| 2018-12-25T12:56:15.862899111Z | 62 | PC: 12af1 | Close file (See above) |
| 2018-12-25T12:56:15.872210704Z | 67 | PC: 12afd | Get or set file attributes (See above) |
| 2018-12-25T12:56:15.874673896Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:56:15.877645952Z | 67 | PC: 12a95 | Get or set file attributes (See above) |
| 2018-12-25T12:56:15.888878435Z | 61 | PC: 12a9a | Open file (See above) |
| 2018-12-25T12:56:15.897735145Z | 63 | PC: 12aa6 | Read file or device (See above) |
| 2018-12-25T12:56:15.900675462Z | 66 | PC: 12ab6 | Move file pointer (See above) |
| 2018-12-25T12:56:15.902602673Z | 64 | PC: 12ac0 | Write file or device (See above) |
| 2018-12-25T12:56:15.913487793Z | 66 | PC: 12ac8 | Move file pointer (See above) |
| 2018-12-25T12:56:15.915083626Z | 64 | PC: 12ade | Write file or device (See above) |
| 2018-12-25T12:56:15.922367072Z | 87 | PC: 12aed | Get or set file date and time (See above) |
| 2018-12-25T12:56:15.924887027Z | 62 | PC: 12af1 | Close file (See above) |
| 2018-12-25T12:56:15.933762785Z | 67 | PC: 12afd | Get or set file attributes (See above) |
| 2018-12-25T12:56:15.935763232Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:56:15.939208068Z | 78 | PC: 12b12 | Find first file |
| 2018-12-25T12:56:15.945796694Z | 79 | PC: 12b12 | Find next file (See above) |
| 2018-12-25T12:56:15.948617695Z | 79 | PC: 12b12 | Find next file (See above) |
| 2018-12-25T12:56:15.952400867Z | 79 | PC: 12b12 | Find next file (See above) |
| 2018-12-25T12:56:15.960279714Z | 79 | PC: 12b12 | Find next file (See above) |
| 2018-12-25T12:56:15.962943607Z | 79 | PC: 12b12 | Find next file (See above) |
| 2018-12-25T12:56:15.965854138Z | 79 | PC: 12b12 | Find next file (See above) |
| 2018-12-25T12:56:15.969456873Z | 79 | PC: 12b12 | Find next file (See above) |
| 2018-12-25T12:56:15.972152371Z | 79 | PC: 12b12 | Find next file (See above) |
| 2018-12-25T12:56:15.974675172Z | 79 | PC: 12b12 | Find next file (See above) |
| 2018-12-25T12:56:15.977493697Z | 59 | PC: 12b44 | Change current directory |
| 2018-12-25T12:56:15.9797138Z | 44 | PC: 12b4d | Get time 0x12b4d: cmp cx, 0x1700 0x12b51: jne 0x12b7d 0x12b53: push cs 0x12b54: pop es 0x12b55: mov ax, 0x1300 0x12b58: mov bx, 0xc 0x12b5b: mov dx, 0x41a 0x12b5e: mov cx, 5 0x12b61: add bp, 0x170 0x12b65: int 0x10 0x12b67: sub bp, 0x11 0x12b6a: nop 0x12b6b: mov bx, 0xa 0x12b6e: mov dl, 0x1f 0x12b70: mov cx, 8 0x12b73: int 0x10 0x12b75: xor ax, ax 0x12b77: int 0x16 0x12b79: sub bp, 0x170 0x12b7d: pop es |
{"DateBased":false,"Day":0,"Month":0,"Year":0,"Hour":0,"Min":0,"Second":0,"TimeBased":true,"OriginalID":17658,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:56:15.740386162Z | 26 | PC: 12a62 | Set disk transfer address |
| 2018-12-25T12:56:15.741846315Z | 71 | PC: 12a6c | Get current directory |
| 2018-12-25T12:56:15.752083072Z | 78 | PC: 12a77 | Find first file |
| 2018-12-25T12:56:15.75952201Z | 67 | PC: 12a95 | Get or set file attributes |
| 2018-12-25T12:56:15.779300136Z | 61 | PC: 12a9a | Open file (Filename = '�') |
| 2018-12-25T12:56:15.788242135Z | 63 | PC: 12aa6 | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-25T12:56:15.795971809Z | 66 | PC: 12ab6 | Move file pointer |
| 2018-12-25T12:56:15.798071385Z | 64 | PC: 12ac0 | Write file or device (Write 379 bytes on handle 5) |
| 2018-12-25T12:56:15.808172622Z | 66 | PC: 12ac8 | Move file pointer |
| 2018-12-25T12:56:15.810027093Z | 64 | PC: 12ade | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-25T12:56:15.817629195Z | 87 | PC: 12aed | Get or set file date and time |
| 2018-12-25T12:56:15.820152555Z | 62 | PC: 12af1 | Close file |
| 2018-12-25T12:56:15.828913237Z | 67 | PC: 12afd | Get or set file attributes |
| 2018-12-25T12:56:15.830907582Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:56:15.834701131Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:56:15.837617955Z | 67 | PC: 12a95 | Get or set file attributes (See above) |
| 2018-12-25T12:56:15.849787951Z | 61 | PC: 12a9a | Open file (See above) |
| 2018-12-25T12:56:15.859622647Z | 63 | PC: 12aa6 | Read file or device (See above) |
| 2018-12-25T12:56:15.867640392Z | 66 | PC: 12ab6 | Move file pointer (See above) |
| 2018-12-25T12:56:15.869663889Z | 64 | PC: 12ac0 | Write file or device (See above) |
| 2018-12-25T12:56:15.873395897Z | 66 | PC: 12ac8 | Move file pointer (See above) |
| 2018-12-25T12:56:15.875679135Z | 64 | PC: 12ade | Write file or device (See above) |
| 2018-12-25T12:56:15.878655312Z | 87 | PC: 12aed | Get or set file date and time (See above) |
| 2018-12-25T12:56:15.88035009Z | 62 | PC: 12af1 | Close file (See above) |
| 2018-12-25T12:56:15.890602728Z | 67 | PC: 12afd | Get or set file attributes (See above) |
| 2018-12-25T12:56:15.900666734Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:56:15.9036367Z | 67 | PC: 12a95 | Get or set file attributes (See above) |
| 2018-12-25T12:56:15.916007806Z | 61 | PC: 12a9a | Open file (See above) |
| 2018-12-25T12:56:15.924341504Z | 63 | PC: 12aa6 | Read file or device (See above) |
| 2018-12-25T12:56:15.932070167Z | 66 | PC: 12ab6 | Move file pointer (See above) |
| 2018-12-25T12:56:15.934530117Z | 64 | PC: 12ac0 | Write file or device (See above) |
| 2018-12-25T12:56:15.937722169Z | 66 | PC: 12ac8 | Move file pointer (See above) |
| 2018-12-25T12:56:15.939566723Z | 64 | PC: 12ade | Write file or device (See above) |
| 2018-12-25T12:56:15.943404155Z | 87 | PC: 12aed | Get or set file date and time (See above) |
| 2018-12-25T12:56:15.945131472Z | 62 | PC: 12af1 | Close file (See above) |
| 2018-12-25T12:56:15.95360858Z | 67 | PC: 12afd | Get or set file attributes (See above) |
| 2018-12-25T12:56:15.956113033Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:56:15.959455673Z | 67 | PC: 12a95 | Get or set file attributes (See above) |
| 2018-12-25T12:56:15.970854614Z | 61 | PC: 12a9a | Open file (See above) |
| 2018-12-25T12:56:15.98058639Z | 63 | PC: 12aa6 | Read file or device (See above) |
| 2018-12-25T12:56:15.987998332Z | 66 | PC: 12ab6 | Move file pointer (See above) |
| 2018-12-25T12:56:15.990460227Z | 64 | PC: 12ac0 | Write file or device (See above) |
| 2018-12-25T12:56:15.994006401Z | 66 | PC: 12ac8 | Move file pointer (See above) |
| 2018-12-25T12:56:15.995857639Z | 64 | PC: 12ade | Write file or device (See above) |
| 2018-12-25T12:56:15.999059404Z | 87 | PC: 12aed | Get or set file date and time (See above) |
| 2018-12-25T12:56:16.000735003Z | 62 | PC: 12af1 | Close file (See above) |
| 2018-12-25T12:56:16.009753497Z | 67 | PC: 12afd | Get or set file attributes (See above) |
| 2018-12-25T12:56:16.012318787Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:56:16.015877248Z | 67 | PC: 12a95 | Get or set file attributes (See above) |
| 2018-12-25T12:56:16.028220298Z | 61 | PC: 12a9a | Open file (See above) |
| 2018-12-25T12:56:16.036091586Z | 63 | PC: 12aa6 | Read file or device (See above) |
| 2018-12-25T12:56:16.043635108Z | 66 | PC: 12ab6 | Move file pointer (See above) |
| 2018-12-25T12:56:16.047010202Z | 64 | PC: 12ac0 | Write file or device (See above) |
| 2018-12-25T12:56:16.057087254Z | 66 | PC: 12ac8 | Move file pointer (See above) |
| 2018-12-25T12:56:16.058791391Z | 64 | PC: 12ade | Write file or device (See above) |
| 2018-12-25T12:56:16.066619955Z | 87 | PC: 12aed | Get or set file date and time (See above) |
| 2018-12-25T12:56:16.068327649Z | 62 | PC: 12af1 | Close file (See above) |
| 2018-12-25T12:56:16.077251601Z | 67 | PC: 12afd | Get or set file attributes (See above) |
| 2018-12-25T12:56:16.079424687Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:56:16.082788122Z | 67 | PC: 12a95 | Get or set file attributes (See above) |
| 2018-12-25T12:56:16.093837376Z | 61 | PC: 12a9a | Open file (See above) |
| 2018-12-25T12:56:16.101468602Z | 63 | PC: 12aa6 | Read file or device (See above) |
| 2018-12-25T12:56:16.106206189Z | 66 | PC: 12ab6 | Move file pointer (See above) |
| 2018-12-25T12:56:16.107370394Z | 64 | PC: 12ac0 | Write file or device (See above) |
| 2018-12-25T12:56:16.109396538Z | 66 | PC: 12ac8 | Move file pointer (See above) |
| 2018-12-25T12:56:16.111040118Z | 64 | PC: 12ade | Write file or device (See above) |
| 2018-12-25T12:56:16.113011437Z | 87 | PC: 12aed | Get or set file date and time (See above) |
| 2018-12-25T12:56:16.114270975Z | 62 | PC: 12af1 | Close file (See above) |
| 2018-12-25T12:56:16.120223229Z | 67 | PC: 12afd | Get or set file attributes (See above) |
| 2018-12-25T12:56:16.121683097Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:56:16.123620973Z | 67 | PC: 12a95 | Get or set file attributes (See above) |
| 2018-12-25T12:56:16.133815913Z | 61 | PC: 12a9a | Open file (See above) |
| 2018-12-25T12:56:16.141561351Z | 63 | PC: 12aa6 | Read file or device (See above) |
| 2018-12-25T12:56:16.148653226Z | 66 | PC: 12ab6 | Move file pointer (See above) |
| 2018-12-25T12:56:16.150392436Z | 64 | PC: 12ac0 | Write file or device (See above) |
| 2018-12-25T12:56:16.159497873Z | 66 | PC: 12ac8 | Move file pointer (See above) |
| 2018-12-25T12:56:16.161069403Z | 64 | PC: 12ade | Write file or device (See above) |
| 2018-12-25T12:56:16.16830148Z | 87 | PC: 12aed | Get or set file date and time (See above) |
| 2018-12-25T12:56:16.171297397Z | 62 | PC: 12af1 | Close file (See above) |
| 2018-12-25T12:56:16.180293754Z | 67 | PC: 12afd | Get or set file attributes (See above) |
| 2018-12-25T12:56:16.182647296Z | 79 | PC: 12a77 | Find next file (See above) |
| 2018-12-25T12:56:16.187426485Z | 78 | PC: 12b12 | Find first file |
| 2018-12-25T12:56:16.194232009Z | 79 | PC: 12b12 | Find next file (See above) |
| 2018-12-25T12:56:16.197341986Z | 79 | PC: 12b12 | Find next file (See above) |
| 2018-12-25T12:56:16.201377239Z | 79 | PC: 12b12 | Find next file (See above) |
| 2018-12-25T12:56:16.204355338Z | 79 | PC: 12b12 | Find next file (See above) |
| 2018-12-25T12:56:16.207153543Z | 79 | PC: 12b12 | Find next file (See above) |
| 2018-12-25T12:56:16.210367066Z | 79 | PC: 12b12 | Find next file (See above) |
| 2018-12-25T12:56:16.213511459Z | 79 | PC: 12b12 | Find next file (See above) |
| 2018-12-25T12:56:16.216407806Z | 79 | PC: 12b12 | Find next file (See above) |
| 2018-12-25T12:56:16.220067881Z | 79 | PC: 12b12 | Find next file (See above) |
| 2018-12-25T12:56:16.22306166Z | 59 | PC: 12b44 | Change current directory |
| 2018-12-25T12:56:16.224961178Z | 44 | PC: 12b4d | Get time 0x12b4d: cmp cx, 0x1700 0x12b51: jne 0x12b7d 0x12b53: push cs 0x12b54: pop es 0x12b55: mov ax, 0x1300 0x12b58: mov bx, 0xc 0x12b5b: mov dx, 0x41a 0x12b5e: mov cx, 5 0x12b61: add bp, 0x170 0x12b65: int 0x10 0x12b67: sub bp, 0x11 0x12b6a: nop 0x12b6b: mov bx, 0xa 0x12b6e: mov dl, 0x1f 0x12b70: mov cx, 8 0x12b73: int 0x10 0x12b75: xor ax, ax 0x12b77: int 0x16 0x12b79: sub bp, 0x170 0x12b7d: pop es |