Sample viewer

vx.netlux.org/Virus.DOS.Jerusalem.Hack.2064.c

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:21:41.283553173Z 251 PC: 1308d | UNKNOWN!
2018-12-17T22:21:41.284559398Z 251 PC: 12b1f | UNKNOWN!
2018-12-17T22:21:41.300570024Z 74 PC: 12b6e | Reallocate memory
2018-12-17T22:21:41.302035427Z 53 PC: 130ae | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:41.303245039Z 37 PC: 130c3 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:41.30527303Z 42 PC: 12bc1 | Get date 0x12bc1: cmp cx, 0x7c8
0x12bc5: jne 0x12bd4
0x12bc7: cmp dh, 7
0x12bca: jne 0x12bd4
0x12bcc: cmp dl, 0x14
0x12bcf: jae 0x12bd4
0x12bd1: jmp 0x12be6
0x12bd3: nop
0x12bd4: cmp dl, 4
0x12bd7: jne 0x12bde
0x12bd9: inc byte ptr cs:[0xe]
0x12bde: cmp al, 1
0x12be0: je 0x12c26
0x12be2: cmp al, 5
0x12be4: je 0x12c26
0x12be6: pop dx
0x12be7: pop cx
0x12be8: pop bx
0x12be9: pop ax
0x12bea: pop es
2018-12-17T22:21:41.307590561Z 53 PC: 12c2c | Get interrupt vector (Interrupt = '8' AKA 'Console input without echo')
2018-12-17T22:21:41.308706021Z 37 PC: 12c41 | Set interrupt vector (Interrupt = '8' AKA 'Console input without echo')
2018-12-17T22:21:41.310378555Z 75 PC: 12bf2 | Execute program
2018-12-17T22:21:41.326183655Z 76 PC: 1344b | Terminate with return code (Return code = '1')
2018-12-17T22:21:41.329361192Z 73 PC: 12bf8 | Release memory
2018-12-17T22:21:41.331308468Z 77 PC: 12bfc | Get program return code
2018-12-17T22:21:41.333393943Z 49 PC: 12c26 | Terminate and stay resident (Return code = '2' | Memory size = '146')

{"DateBased":true,"Day":3,"Month":1,"Year":1992,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":3778,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:50:03.133347658Z 251 PC: 1308d | UNKNOWN!
2018-12-25T11:50:03.135215189Z 251 PC: 12b1f | UNKNOWN!
2018-12-25T11:50:03.136283261Z 74 PC: 12b6e | Reallocate memory
2018-12-25T11:50:03.137530008Z 53 PC: 130ae | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:50:03.140176671Z 37 PC: 130c3 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:50:03.142061517Z 42 PC: 12bc1 | Get date 0x12bc1: cmp cx, 0x7c8
0x12bc5: jne 0x12bd4
0x12bc7: cmp dh, 7
0x12bca: jne 0x12bd4
0x12bcc: cmp dl, 0x14
0x12bcf: jae 0x12bd4
0x12bd1: jmp 0x12be6
0x12bd3: nop
0x12bd4: cmp dl, 4
0x12bd7: jne 0x12bde
0x12bd9: inc byte ptr cs:[0xe]
0x12bde: cmp al, 1
0x12be0: je 0x12c26
0x12be2: cmp al, 5
0x12be4: je 0x12c26
0x12be6: pop dx
0x12be7: pop cx
0x12be8: pop bx
0x12be9: pop ax
0x12bea: pop es
2018-12-25T11:50:03.144224318Z 53 PC: 12c2c | Get interrupt vector (Interrupt = '8' AKA 'Console input without echo')
2018-12-25T11:50:03.146285605Z 37 PC: 12c41 | Set interrupt vector (Interrupt = '8' AKA 'Console input without echo')
2018-12-25T11:50:03.147423007Z 75 PC: 12bf2 | Execute program
2018-12-25T11:50:03.161350228Z 76 PC: 1344b | Terminate with return code (Return code = '1')
2018-12-25T11:50:03.164674407Z 73 PC: 12bf8 | Release memory
2018-12-25T11:50:03.166675014Z 77 PC: 12bfc | Get program return code
2018-12-25T11:50:03.168385856Z 49 PC: 12c26 | Terminate and stay resident (Return code = '2' | Memory size = '146')

{"DateBased":true,"Day":4,"Month":1,"Year":1992,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":3778,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:50:03.814909519Z 251 PC: 1308d | UNKNOWN!
2018-12-25T11:50:03.816570571Z 251 PC: 12b1f | UNKNOWN!
2018-12-25T11:50:03.81758347Z 74 PC: 12b6e | Reallocate memory
2018-12-25T11:50:03.818775934Z 53 PC: 130ae | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:50:03.820221966Z 37 PC: 130c3 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:50:03.82160568Z 42 PC: 12bc1 | Get date 0x12bc1: cmp cx, 0x7c8
0x12bc5: jne 0x12bd4
0x12bc7: cmp dh, 7
0x12bca: jne 0x12bd4
0x12bcc: cmp dl, 0x14
0x12bcf: jae 0x12bd4
0x12bd1: jmp 0x12be6
0x12bd3: nop
0x12bd4: cmp dl, 4
0x12bd7: jne 0x12bde
0x12bd9: inc byte ptr cs:[0xe]
0x12bde: cmp al, 1
0x12be0: je 0x12c26
0x12be2: cmp al, 5
0x12be4: je 0x12c26
0x12be6: pop dx
0x12be7: pop cx
0x12be8: pop bx
0x12be9: pop ax
0x12bea: pop es
2018-12-25T11:50:03.823770149Z 75 PC: 12bf2 | Execute program
2018-12-25T11:50:03.838145731Z 76 PC: 1344b | Terminate with return code (Return code = '1')
2018-12-25T11:50:03.841211971Z 73 PC: 12bf8 | Release memory
2018-12-25T11:50:03.842463247Z 77 PC: 12bfc | Get program return code
2018-12-25T11:50:03.844781234Z 49 PC: 12c26 | Terminate and stay resident (Return code = '2' | Memory size = '146')

{"DateBased":true,"Day":1,"Month":7,"Year":1992,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":3778,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:50:03.834963164Z 251 PC: 1308d | UNKNOWN!
2018-12-25T11:50:03.837207855Z 251 PC: 12b1f | UNKNOWN!
2018-12-25T11:50:03.838353559Z 74 PC: 12b6e | Reallocate memory
2018-12-25T11:50:03.839556815Z 53 PC: 130ae | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:50:03.842902143Z 37 PC: 130c3 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:50:03.844429969Z 42 PC: 12bc1 | Get date 0x12bc1: cmp cx, 0x7c8
0x12bc5: jne 0x12bd4
0x12bc7: cmp dh, 7
0x12bca: jne 0x12bd4
0x12bcc: cmp dl, 0x14
0x12bcf: jae 0x12bd4
0x12bd1: jmp 0x12be6
0x12bd3: nop
0x12bd4: cmp dl, 4
0x12bd7: jne 0x12bde
0x12bd9: inc byte ptr cs:[0xe]
0x12bde: cmp al, 1
0x12be0: je 0x12c26
0x12be2: cmp al, 5
0x12be4: je 0x12c26
0x12be6: pop dx
0x12be7: pop cx
0x12be8: pop bx
0x12be9: pop ax
0x12bea: pop es
2018-12-25T11:50:03.846778586Z 75 PC: 12bf2 | Execute program
2018-12-25T11:50:03.861255735Z 76 PC: 1344b | Terminate with return code (Return code = '1')
2018-12-25T11:50:03.864355652Z 73 PC: 12bf8 | Release memory
2018-12-25T11:50:03.865590912Z 77 PC: 12bfc | Get program return code
2018-12-25T11:50:03.867367633Z 49 PC: 12c26 | Terminate and stay resident (Return code = '2' | Memory size = '146')

{"DateBased":true,"Day":3,"Month":7,"Year":1992,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":3778,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:50:04.338700067Z 251 PC: 1308d | UNKNOWN!
2018-12-25T11:50:04.340340277Z 251 PC: 12b1f | UNKNOWN!
2018-12-25T11:50:04.341946616Z 74 PC: 12b6e | Reallocate memory
2018-12-25T11:50:04.343521569Z 53 PC: 130ae | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:50:04.344907064Z 37 PC: 130c3 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:50:04.349531142Z 42 PC: 12bc1 | Get date 0x12bc1: cmp cx, 0x7c8
0x12bc5: jne 0x12bd4
0x12bc7: cmp dh, 7
0x12bca: jne 0x12bd4
0x12bcc: cmp dl, 0x14
0x12bcf: jae 0x12bd4
0x12bd1: jmp 0x12be6
0x12bd3: nop
0x12bd4: cmp dl, 4
0x12bd7: jne 0x12bde
0x12bd9: inc byte ptr cs:[0xe]
0x12bde: cmp al, 1
0x12be0: je 0x12c26
0x12be2: cmp al, 5
0x12be4: je 0x12c26
0x12be6: pop dx
0x12be7: pop cx
0x12be8: pop bx
0x12be9: pop ax
0x12bea: pop es
2018-12-25T11:50:04.352407179Z 75 PC: 12bf2 | Execute program
2018-12-25T11:50:04.363794362Z 76 PC: 1344b | Terminate with return code (Return code = '1')
2018-12-25T11:50:04.3708973Z 73 PC: 12bf8 | Release memory
2018-12-25T11:50:04.372780007Z 77 PC: 12bfc | Get program return code
2018-12-25T11:50:04.375020476Z 49 PC: 12c26 | Terminate and stay resident (Return code = '2' | Memory size = '146')

{"DateBased":true,"Day":4,"Month":7,"Year":1992,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":3778,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:50:04.449209138Z 251 PC: 1308d | UNKNOWN!
2018-12-25T11:50:04.450235537Z 251 PC: 12b1f | UNKNOWN!
2018-12-25T11:50:04.452527014Z 74 PC: 12b6e | Reallocate memory
2018-12-25T11:50:04.454207899Z 53 PC: 130ae | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:50:04.455785727Z 37 PC: 130c3 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:50:04.458148502Z 42 PC: 12bc1 | Get date 0x12bc1: cmp cx, 0x7c8
0x12bc5: jne 0x12bd4
0x12bc7: cmp dh, 7
0x12bca: jne 0x12bd4
0x12bcc: cmp dl, 0x14
0x12bcf: jae 0x12bd4
0x12bd1: jmp 0x12be6
0x12bd3: nop
0x12bd4: cmp dl, 4
0x12bd7: jne 0x12bde
0x12bd9: inc byte ptr cs:[0xe]
0x12bde: cmp al, 1
0x12be0: je 0x12c26
0x12be2: cmp al, 5
0x12be4: je 0x12c26
0x12be6: pop dx
0x12be7: pop cx
0x12be8: pop bx
0x12be9: pop ax
0x12bea: pop es
2018-12-25T11:50:04.460717971Z 75 PC: 12bf2 | Execute program
2018-12-25T11:50:04.477851799Z 76 PC: 1344b | Terminate with return code (Return code = '1')
2018-12-25T11:50:04.481882829Z 73 PC: 12bf8 | Release memory
2018-12-25T11:50:04.483416702Z 77 PC: 12bfc | Get program return code
2018-12-25T11:50:04.485615706Z 49 PC: 12c26 | Terminate and stay resident (Return code = '2' | Memory size = '146')

{"DateBased":true,"Day":21,"Month":7,"Year":1992,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":3778,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:50:04.687669115Z 251 PC: 1308d | UNKNOWN!
2018-12-25T11:50:04.68962491Z 251 PC: 12b1f | UNKNOWN!
2018-12-25T11:50:04.691038688Z 74 PC: 12b6e | Reallocate memory
2018-12-25T11:50:04.692671658Z 53 PC: 130ae | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:50:04.694568084Z 37 PC: 130c3 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:50:04.696898227Z 42 PC: 12bc1 | Get date 0x12bc1: cmp cx, 0x7c8
0x12bc5: jne 0x12bd4
0x12bc7: cmp dh, 7
0x12bca: jne 0x12bd4
0x12bcc: cmp dl, 0x14
0x12bcf: jae 0x12bd4
0x12bd1: jmp 0x12be6
0x12bd3: nop
0x12bd4: cmp dl, 4
0x12bd7: jne 0x12bde
0x12bd9: inc byte ptr cs:[0xe]
0x12bde: cmp al, 1
0x12be0: je 0x12c26
0x12be2: cmp al, 5
0x12be4: je 0x12c26
0x12be6: pop dx
0x12be7: pop cx
0x12be8: pop bx
0x12be9: pop ax
0x12bea: pop es
2018-12-25T11:50:04.699318272Z 75 PC: 12bf2 | Execute program
2018-12-25T11:50:04.715204042Z 76 PC: 1344b | Terminate with return code (Return code = '1')
2018-12-25T11:50:04.719035155Z 73 PC: 12bf8 | Release memory
2018-12-25T11:50:04.720572508Z 77 PC: 12bfc | Get program return code
2018-12-25T11:50:04.722478642Z 49 PC: 12c26 | Terminate and stay resident (Return code = '2' | Memory size = '146')

{"DateBased":true,"Day":1,"Month":1,"Year":1992,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":3778,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:50:04.939972987Z 251 PC: 1308d | UNKNOWN!
2018-12-25T11:50:04.941034974Z 251 PC: 12b1f | UNKNOWN!
2018-12-25T11:50:04.954057954Z 74 PC: 12b6e | Reallocate memory
2018-12-25T11:50:04.955398606Z 53 PC: 130ae | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:50:04.956652539Z 37 PC: 130c3 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:50:04.958319912Z 42 PC: 12bc1 | Get date 0x12bc1: cmp cx, 0x7c8
0x12bc5: jne 0x12bd4
0x12bc7: cmp dh, 7
0x12bca: jne 0x12bd4
0x12bcc: cmp dl, 0x14
0x12bcf: jae 0x12bd4
0x12bd1: jmp 0x12be6
0x12bd3: nop
0x12bd4: cmp dl, 4
0x12bd7: jne 0x12bde
0x12bd9: inc byte ptr cs:[0xe]
0x12bde: cmp al, 1
0x12be0: je 0x12c26
0x12be2: cmp al, 5
0x12be4: je 0x12c26
0x12be6: pop dx
0x12be7: pop cx
0x12be8: pop bx
0x12be9: pop ax
0x12bea: pop es
2018-12-25T11:50:04.960957494Z 75 PC: 12bf2 | Execute program
2018-12-25T11:50:04.974618948Z 76 PC: 1344b | Terminate with return code (Return code = '1')
2018-12-25T11:50:04.977629514Z 73 PC: 12bf8 | Release memory
2018-12-25T11:50:04.978887592Z 77 PC: 12bfc | Get program return code
2018-12-25T11:50:04.980501328Z 49 PC: 12c26 | Terminate and stay resident (Return code = '2' | Memory size = '146')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":3778,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:50:06.441816283Z 251 PC: 1308d | UNKNOWN!
2018-12-25T11:50:06.443041158Z 251 PC: 12b1f | UNKNOWN!
2018-12-25T11:50:06.444395983Z 74 PC: 12b6e | Reallocate memory
2018-12-25T11:50:06.445952134Z 53 PC: 130ae | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:50:06.447804186Z 37 PC: 130c3 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:50:06.449221537Z 42 PC: 12bc1 | Get date 0x12bc1: cmp cx, 0x7c8
0x12bc5: jne 0x12bd4
0x12bc7: cmp dh, 7
0x12bca: jne 0x12bd4
0x12bcc: cmp dl, 0x14
0x12bcf: jae 0x12bd4
0x12bd1: jmp 0x12be6
0x12bd3: nop
0x12bd4: cmp dl, 4
0x12bd7: jne 0x12bde
0x12bd9: inc byte ptr cs:[0xe]
0x12bde: cmp al, 1
0x12be0: je 0x12c26
0x12be2: cmp al, 5
0x12be4: je 0x12c26
0x12be6: pop dx
0x12be7: pop cx
0x12be8: pop bx
0x12be9: pop ax
0x12bea: pop es
2018-12-25T11:50:06.451381069Z 53 PC: 12c2c | Get interrupt vector (Interrupt = '8' AKA 'Console input without echo')
2018-12-25T11:50:06.462601555Z 37 PC: 12c41 | Set interrupt vector (Interrupt = '8' AKA 'Console input without echo')
2018-12-25T11:50:06.463980286Z 75 PC: 12bf2 | Execute program
2018-12-25T11:50:06.478129904Z 76 PC: 1344b | Terminate with return code (Return code = '1')
2018-12-25T11:50:06.481732395Z 73 PC: 12bf8 | Release memory
2018-12-25T11:50:06.483043104Z 77 PC: 12bfc | Get program return code
2018-12-25T11:50:06.484630159Z 49 PC: 12c26 | Terminate and stay resident (Return code = '2' | Memory size = '146')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":3778,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:50:07.382912957Z 251 PC: 1308d | UNKNOWN!
2018-12-25T11:50:07.384060299Z 251 PC: 12b1f | UNKNOWN!
2018-12-25T11:50:07.384955055Z 74 PC: 12b6e | Reallocate memory
2018-12-25T11:50:07.385947976Z 53 PC: 130ae | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:50:07.387126888Z 37 PC: 130c3 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:50:07.388427488Z 42 PC: 12bc1 | Get date 0x12bc1: cmp cx, 0x7c8
0x12bc5: jne 0x12bd4
0x12bc7: cmp dh, 7
0x12bca: jne 0x12bd4
0x12bcc: cmp dl, 0x14
0x12bcf: jae 0x12bd4
0x12bd1: jmp 0x12be6
0x12bd3: nop
0x12bd4: cmp dl, 4
0x12bd7: jne 0x12bde
0x12bd9: inc byte ptr cs:[0xe]
0x12bde: cmp al, 1
0x12be0: je 0x12c26
0x12be2: cmp al, 5
0x12be4: je 0x12c26
0x12be6: pop dx
0x12be7: pop cx
0x12be8: pop bx
0x12be9: pop ax
0x12bea: pop es
2018-12-25T11:50:07.389937651Z 53 PC: 12c2c | Get interrupt vector (Interrupt = '8' AKA 'Console input without echo')
2018-12-25T11:50:07.39131438Z 37 PC: 12c41 | Set interrupt vector (Interrupt = '8' AKA 'Console input without echo')
2018-12-25T11:50:07.392352966Z 75 PC: 12bf2 | Execute program
2018-12-25T11:50:07.406015663Z 76 PC: 1344b | Terminate with return code (Return code = '1')
2018-12-25T11:50:07.408692081Z 73 PC: 12bf8 | Release memory
2018-12-25T11:50:07.409905462Z 77 PC: 12bfc | Get program return code
2018-12-25T11:50:07.411422519Z 49 PC: 12c26 | Terminate and stay resident (Return code = '2' | Memory size = '146')

{"DateBased":true,"Day":11,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":3778,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:50:13.524575456Z 251 PC: 1308d | UNKNOWN!
2018-12-25T11:50:13.526172458Z 251 PC: 12b1f | UNKNOWN!
2018-12-25T11:50:13.541214205Z 74 PC: 12b6e | Reallocate memory
2018-12-25T11:50:13.542743579Z 53 PC: 130ae | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:50:13.544069454Z 37 PC: 130c3 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:50:13.546645827Z 42 PC: 12bc1 | Get date 0x12bc1: cmp cx, 0x7c8
0x12bc5: jne 0x12bd4
0x12bc7: cmp dh, 7
0x12bca: jne 0x12bd4
0x12bcc: cmp dl, 0x14
0x12bcf: jae 0x12bd4
0x12bd1: jmp 0x12be6
0x12bd3: nop
0x12bd4: cmp dl, 4
0x12bd7: jne 0x12bde
0x12bd9: inc byte ptr cs:[0xe]
0x12bde: cmp al, 1
0x12be0: je 0x12c26
0x12be2: cmp al, 5
0x12be4: je 0x12c26
0x12be6: pop dx
0x12be7: pop cx
0x12be8: pop bx
0x12be9: pop ax
0x12bea: pop es
2018-12-25T11:50:13.549114864Z 53 PC: 12c2c | Get interrupt vector (Interrupt = '8' AKA 'Console input without echo')
2018-12-25T11:50:13.550561428Z 37 PC: 12c41 | Set interrupt vector (Interrupt = '8' AKA 'Console input without echo')
2018-12-25T11:50:13.552873127Z 75 PC: 12bf2 | Execute program
2018-12-25T11:50:13.56897305Z 76 PC: 1344b | Terminate with return code (Return code = '1')
2018-12-25T11:50:13.573683384Z 73 PC: 12bf8 | Release memory
2018-12-25T11:50:13.575983516Z 77 PC: 12bfc | Get program return code
2018-12-25T11:50:13.57783982Z 49 PC: 12c26 | Terminate and stay resident (Return code = '2' | Memory size = '146')

{"DateBased":true,"Day":6,"Month":1,"Year":1992,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":3778,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:50:13.54298979Z 251 PC: 1308d | UNKNOWN!
2018-12-25T11:50:13.545484629Z 251 PC: 12b1f | UNKNOWN!
2018-12-25T11:50:13.54737611Z 74 PC: 12b6e | Reallocate memory
2018-12-25T11:50:13.549039359Z 53 PC: 130ae | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:50:13.550708717Z 37 PC: 130c3 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:50:13.55290108Z 42 PC: 12bc1 | Get date 0x12bc1: cmp cx, 0x7c8
0x12bc5: jne 0x12bd4
0x12bc7: cmp dh, 7
0x12bca: jne 0x12bd4
0x12bcc: cmp dl, 0x14
0x12bcf: jae 0x12bd4
0x12bd1: jmp 0x12be6
0x12bd3: nop
0x12bd4: cmp dl, 4
0x12bd7: jne 0x12bde
0x12bd9: inc byte ptr cs:[0xe]
0x12bde: cmp al, 1
0x12be0: je 0x12c26
0x12be2: cmp al, 5
0x12be4: je 0x12c26
0x12be6: pop dx
0x12be7: pop cx
0x12be8: pop bx
0x12be9: pop ax
0x12bea: pop es
2018-12-25T11:50:13.555398449Z 53 PC: 12c2c | Get interrupt vector (Interrupt = '8' AKA 'Console input without echo')
2018-12-25T11:50:13.556922101Z 37 PC: 12c41 | Set interrupt vector (Interrupt = '8' AKA 'Console input without echo')
2018-12-25T11:50:13.558367554Z 75 PC: 12bf2 | Execute program
2018-12-25T11:50:13.572677311Z 76 PC: 1344b | Terminate with return code (Return code = '1')
2018-12-25T11:50:13.575281385Z 73 PC: 12bf8 | Release memory
2018-12-25T11:50:13.576610575Z 77 PC: 12bfc | Get program return code
2018-12-25T11:50:13.578150316Z 49 PC: 12c26 | Terminate and stay resident (Return code = '2' | Memory size = '146')

{"DateBased":true,"Day":6,"Month":7,"Year":1992,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":3778,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:50:13.684473919Z 251 PC: 1308d | UNKNOWN!
2018-12-25T11:50:13.68663892Z 251 PC: 12b1f | UNKNOWN!
2018-12-25T11:50:13.688022135Z 74 PC: 12b6e | Reallocate memory
2018-12-25T11:50:13.689453302Z 53 PC: 130ae | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:50:13.691206642Z 37 PC: 130c3 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:50:13.693104505Z 42 PC: 12bc1 | Get date 0x12bc1: cmp cx, 0x7c8
0x12bc5: jne 0x12bd4
0x12bc7: cmp dh, 7
0x12bca: jne 0x12bd4
0x12bcc: cmp dl, 0x14
0x12bcf: jae 0x12bd4
0x12bd1: jmp 0x12be6
0x12bd3: nop
0x12bd4: cmp dl, 4
0x12bd7: jne 0x12bde
0x12bd9: inc byte ptr cs:[0xe]
0x12bde: cmp al, 1
0x12be0: je 0x12c26
0x12be2: cmp al, 5
0x12be4: je 0x12c26
0x12be6: pop dx
0x12be7: pop cx
0x12be8: pop bx
0x12be9: pop ax
0x12bea: pop es
2018-12-25T11:50:13.69548999Z 75 PC: 12bf2 | Execute program
2018-12-25T11:50:13.710453129Z 76 PC: 1344b | Terminate with return code (Return code = '1')
2018-12-25T11:50:13.726723953Z 73 PC: 12bf8 | Release memory
2018-12-25T11:50:13.728150135Z 77 PC: 12bfc | Get program return code
2018-12-25T11:50:13.730069013Z 49 PC: 12c26 | Terminate and stay resident (Return code = '2' | Memory size = '146')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":3778,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:50:14.433840505Z 251 PC: 1308d | UNKNOWN!
2018-12-25T11:50:14.445211789Z 251 PC: 12b1f | UNKNOWN!
2018-12-25T11:50:14.446782452Z 74 PC: 12b6e | Reallocate memory
2018-12-25T11:50:14.448233147Z 53 PC: 130ae | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:50:14.449537228Z 37 PC: 130c3 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:50:14.452387461Z 42 PC: 12bc1 | Get date 0x12bc1: cmp cx, 0x7c8
0x12bc5: jne 0x12bd4
0x12bc7: cmp dh, 7
0x12bca: jne 0x12bd4
0x12bcc: cmp dl, 0x14
0x12bcf: jae 0x12bd4
0x12bd1: jmp 0x12be6
0x12bd3: nop
0x12bd4: cmp dl, 4
0x12bd7: jne 0x12bde
0x12bd9: inc byte ptr cs:[0xe]
0x12bde: cmp al, 1
0x12be0: je 0x12c26
0x12be2: cmp al, 5
0x12be4: je 0x12c26
0x12be6: pop dx
0x12be7: pop cx
0x12be8: pop bx
0x12be9: pop ax
0x12bea: pop es
2018-12-25T11:50:14.455893486Z 75 PC: 12bf2 | Execute program
2018-12-25T11:50:14.474231921Z 76 PC: 1344b | Terminate with return code (Return code = '1')
2018-12-25T11:50:14.478773723Z 73 PC: 12bf8 | Release memory
2018-12-25T11:50:14.480705639Z 77 PC: 12bfc | Get program return code
2018-12-25T11:50:14.483049183Z 49 PC: 12c26 | Terminate and stay resident (Return code = '2' | Memory size = '146')