{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":5001,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T11:53:22.651372672Z | 78 | PC: 12a4a | Find first file |
| 2018-12-25T11:53:22.659183838Z | 67 | PC: 12aa3 | Get or set file attributes |
| 2018-12-25T11:53:22.665585603Z | 67 | PC: 12aaf | Get or set file attributes |
| 2018-12-25T11:53:22.691450714Z | 61 | PC: 12ab5 | Open file (Filename = 'SLEEP.COM') |
| 2018-12-25T11:53:22.699291594Z | 87 | PC: 12abf | Get or set file date and time |
| 2018-12-25T11:53:22.701589871Z | 64 | PC: 12ad2 | Write file or device (Write 272 bytes on handle 5) |
| 2018-12-25T11:53:22.709345744Z | 87 | PC: 12ae0 | Get or set file date and time |
| 2018-12-25T11:53:22.711443464Z | 62 | PC: 12ae4 | Close file |
| 2018-12-25T11:53:22.720348284Z | 67 | PC: 12af1 | Get or set file attributes |
| 2018-12-25T11:53:22.727170119Z | 79 | PC: 12a59 | Find next file |
| 2018-12-25T11:53:22.729058545Z | 67 | PC: 12aa3 | Get or set file attributes (See above) |
| 2018-12-25T11:53:22.733261069Z | 67 | PC: 12aaf | Get or set file attributes (See above) |
| 2018-12-25T11:53:22.743359244Z | 61 | PC: 12ab5 | Open file (See above) |
| 2018-12-25T11:53:22.747957778Z | 87 | PC: 12abf | Get or set file date and time (See above) |
| 2018-12-25T11:53:22.749698752Z | 64 | PC: 12ad2 | Write file or device (See above) |
| 2018-12-25T11:53:22.754867498Z | 87 | PC: 12ae0 | Get or set file date and time (See above) |
| 2018-12-25T11:53:22.756238067Z | 62 | PC: 12ae4 | Close file (See above) |
| 2018-12-25T11:53:22.764453057Z | 67 | PC: 12af1 | Get or set file attributes (See above) |
| 2018-12-25T11:53:22.778361867Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T11:53:22.782159158Z | 67 | PC: 12aa3 | Get or set file attributes (See above) |
| 2018-12-25T11:53:22.790427643Z | 67 | PC: 12aaf | Get or set file attributes (See above) |
| 2018-12-25T11:53:22.801404088Z | 61 | PC: 12ab5 | Open file (See above) |
| 2018-12-25T11:53:22.808785184Z | 87 | PC: 12abf | Get or set file date and time (See above) |
| 2018-12-25T11:53:22.816199741Z | 64 | PC: 12ad2 | Write file or device (See above) |
| 2018-12-25T11:53:22.823676714Z | 87 | PC: 12ae0 | Get or set file date and time (See above) |
| 2018-12-25T11:53:22.82532267Z | 62 | PC: 12ae4 | Close file (See above) |
| 2018-12-25T11:53:22.833616155Z | 67 | PC: 12af1 | Get or set file attributes (See above) |
| 2018-12-25T11:53:22.860521112Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T11:53:22.864410383Z | 67 | PC: 12aa3 | Get or set file attributes (See above) |
| 2018-12-25T11:53:22.883002977Z | 67 | PC: 12aaf | Get or set file attributes (See above) |
| 2018-12-25T11:53:22.895648588Z | 61 | PC: 12ab5 | Open file (See above) |
| 2018-12-25T11:53:22.900140928Z | 87 | PC: 12abf | Get or set file date and time (See above) |
| 2018-12-25T11:53:22.901601426Z | 64 | PC: 12ad2 | Write file or device (See above) |
| 2018-12-25T11:53:22.906700016Z | 87 | PC: 12ae0 | Get or set file date and time (See above) |
| 2018-12-25T11:53:22.908229337Z | 62 | PC: 12ae4 | Close file (See above) |
| 2018-12-25T11:53:22.913661887Z | 67 | PC: 12af1 | Get or set file attributes (See above) |
| 2018-12-25T11:53:22.920863521Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T11:53:22.922973492Z | 67 | PC: 12aa3 | Get or set file attributes (See above) |
| 2018-12-25T11:53:22.926909298Z | 67 | PC: 12aaf | Get or set file attributes (See above) |
| 2018-12-25T11:53:22.934482017Z | 61 | PC: 12ab5 | Open file (See above) |
| 2018-12-25T11:53:22.939153737Z | 87 | PC: 12abf | Get or set file date and time (See above) |
| 2018-12-25T11:53:22.940437036Z | 64 | PC: 12ad2 | Write file or device (See above) |
| 2018-12-25T11:53:22.945658147Z | 87 | PC: 12ae0 | Get or set file date and time (See above) |
| 2018-12-25T11:53:22.94689007Z | 62 | PC: 12ae4 | Close file (See above) |
| 2018-12-25T11:53:22.956056543Z | 67 | PC: 12af1 | Get or set file attributes (See above) |
| 2018-12-25T11:53:22.966055798Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T11:53:22.968117969Z | 67 | PC: 12aa3 | Get or set file attributes (See above) |
| 2018-12-25T11:53:22.975393752Z | 67 | PC: 12aaf | Get or set file attributes (See above) |
| 2018-12-25T11:53:22.982516338Z | 61 | PC: 12ab5 | Open file (See above) |
| 2018-12-25T11:53:22.990261225Z | 87 | PC: 12abf | Get or set file date and time (See above) |
| 2018-12-25T11:53:22.992424551Z | 64 | PC: 12ad2 | Write file or device (See above) |
| 2018-12-25T11:53:23.000290094Z | 87 | PC: 12ae0 | Get or set file date and time (See above) |
| 2018-12-25T11:53:23.003511756Z | 62 | PC: 12ae4 | Close file (See above) |
| 2018-12-25T11:53:23.011759668Z | 67 | PC: 12af1 | Get or set file attributes (See above) |
| 2018-12-25T11:53:23.022213924Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T11:53:23.026410593Z | 67 | PC: 12aa3 | Get or set file attributes (See above) |
| 2018-12-25T11:53:23.038711348Z | 67 | PC: 12aaf | Get or set file attributes (See above) |
| 2018-12-25T11:53:23.050027251Z | 61 | PC: 12ab5 | Open file (See above) |
| 2018-12-25T11:53:23.058343915Z | 87 | PC: 12abf | Get or set file date and time (See above) |
| 2018-12-25T11:53:23.060331947Z | 64 | PC: 12ad2 | Write file or device (See above) |
| 2018-12-25T11:53:23.068175072Z | 87 | PC: 12ae0 | Get or set file date and time (See above) |
| 2018-12-25T11:53:23.070781113Z | 62 | PC: 12ae4 | Close file (See above) |
| 2018-12-25T11:53:23.079366723Z | 67 | PC: 12af1 | Get or set file attributes (See above) |
| 2018-12-25T11:53:23.090679843Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T11:53:23.094248652Z | 67 | PC: 12aa3 | Get or set file attributes (See above) |
| 2018-12-25T11:53:23.101632428Z | 67 | PC: 12aaf | Get or set file attributes (See above) |
| 2018-12-25T11:53:23.115984862Z | 61 | PC: 12ab5 | Open file (See above) |
| 2018-12-25T11:53:23.123792763Z | 87 | PC: 12abf | Get or set file date and time (See above) |
| 2018-12-25T11:53:23.126666948Z | 64 | PC: 12ad2 | Write file or device (See above) |
| 2018-12-25T11:53:23.134472693Z | 87 | PC: 12ae0 | Get or set file date and time (See above) |
| 2018-12-25T11:53:23.136526656Z | 62 | PC: 12ae4 | Close file (See above) |
| 2018-12-25T11:53:23.145746488Z | 67 | PC: 12af1 | Get or set file attributes (See above) |
| 2018-12-25T11:53:23.156987196Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T11:53:23.160014888Z | 42 | PC: 12a64 | Get date 0x12a64: cmp al, 2 0x12a66: je 0x12a6c 0x12a68: mov ah, 0x4c 0x12a6a: int 0x21 0x12a6c: mov byte ptr [0x1be], 0 0x12a71: nop 0x12a72: jmp 0x12a75 0x12a74: nop 0x12a75: mov al, byte ptr [0x1bf] 0x12a78: mov cx, 0xa0 0x12a7b: mov dx, 0 0x12a7e: mov bx, 0 0x12a81: int 0x26 0x12a83: inc byte ptr [0x1be] 0x12a87: cmp byte ptr [0x1be], 0xa 0x12a8c: je 0x12a90 0x12a8e: jne 0x12a75 0x12a90: mov ah, 9 0x12a92: mov dx, 0x1f6 0x12a95: int 0x21 |
| 2018-12-25T11:53:23.164232997Z | 9 | PC: 12a97 | Display string (String= ' Error eating drive C: ') |
| 2018-12-25T11:53:23.171080051Z | 76 | PC: 12a9b | Terminate with return code (Return code = '36') |
{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":5001,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T11:53:22.655154552Z | 78 | PC: 12a4a | Find first file |
| 2018-12-25T11:53:22.66222566Z | 67 | PC: 12aa3 | Get or set file attributes |
| 2018-12-25T11:53:22.668936352Z | 67 | PC: 12aaf | Get or set file attributes |
| 2018-12-25T11:53:22.691336683Z | 61 | PC: 12ab5 | Open file (Filename = 'SLEEP.COM') |
| 2018-12-25T11:53:22.698672555Z | 87 | PC: 12abf | Get or set file date and time |
| 2018-12-25T11:53:22.701319342Z | 64 | PC: 12ad2 | Write file or device (Write 272 bytes on handle 5) |
| 2018-12-25T11:53:22.709450855Z | 87 | PC: 12ae0 | Get or set file date and time |
| 2018-12-25T11:53:22.711512185Z | 62 | PC: 12ae4 | Close file |
| 2018-12-25T11:53:22.724321315Z | 67 | PC: 12af1 | Get or set file attributes |
| 2018-12-25T11:53:22.735660369Z | 79 | PC: 12a59 | Find next file |
| 2018-12-25T11:53:22.738681731Z | 67 | PC: 12aa3 | Get or set file attributes (See above) |
| 2018-12-25T11:53:22.746488603Z | 67 | PC: 12aaf | Get or set file attributes (See above) |
| 2018-12-25T11:53:22.757853027Z | 61 | PC: 12ab5 | Open file (See above) |
| 2018-12-25T11:53:22.765432862Z | 87 | PC: 12abf | Get or set file date and time (See above) |
| 2018-12-25T11:53:22.767112713Z | 64 | PC: 12ad2 | Write file or device (See above) |
| 2018-12-25T11:53:22.775027496Z | 87 | PC: 12ae0 | Get or set file date and time (See above) |
| 2018-12-25T11:53:22.776773868Z | 62 | PC: 12ae4 | Close file (See above) |
| 2018-12-25T11:53:22.785165694Z | 67 | PC: 12af1 | Get or set file attributes (See above) |
| 2018-12-25T11:53:22.79669828Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T11:53:22.79957856Z | 67 | PC: 12aa3 | Get or set file attributes (See above) |
| 2018-12-25T11:53:22.805920157Z | 67 | PC: 12aaf | Get or set file attributes (See above) |
| 2018-12-25T11:53:22.828475995Z | 61 | PC: 12ab5 | Open file (See above) |
| 2018-12-25T11:53:22.836737819Z | 87 | PC: 12abf | Get or set file date and time (See above) |
| 2018-12-25T11:53:22.838817953Z | 64 | PC: 12ad2 | Write file or device (See above) |
| 2018-12-25T11:53:22.847714761Z | 87 | PC: 12ae0 | Get or set file date and time (See above) |
| 2018-12-25T11:53:22.849576058Z | 62 | PC: 12ae4 | Close file (See above) |
| 2018-12-25T11:53:22.857973629Z | 67 | PC: 12af1 | Get or set file attributes (See above) |
| 2018-12-25T11:53:22.872943358Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T11:53:22.879219495Z | 67 | PC: 12aa3 | Get or set file attributes (See above) |
| 2018-12-25T11:53:22.88380307Z | 67 | PC: 12aaf | Get or set file attributes (See above) |
| 2018-12-25T11:53:22.89071226Z | 61 | PC: 12ab5 | Open file (See above) |
| 2018-12-25T11:53:22.895285616Z | 87 | PC: 12abf | Get or set file date and time (See above) |
| 2018-12-25T11:53:22.896412134Z | 64 | PC: 12ad2 | Write file or device (See above) |
| 2018-12-25T11:53:22.901057284Z | 87 | PC: 12ae0 | Get or set file date and time (See above) |
| 2018-12-25T11:53:22.902665813Z | 62 | PC: 12ae4 | Close file (See above) |
| 2018-12-25T11:53:22.908043605Z | 67 | PC: 12af1 | Get or set file attributes (See above) |
| 2018-12-25T11:53:22.919217094Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T11:53:22.923954524Z | 67 | PC: 12aa3 | Get or set file attributes (See above) |
| 2018-12-25T11:53:22.931620237Z | 67 | PC: 12aaf | Get or set file attributes (See above) |
| 2018-12-25T11:53:22.943049865Z | 61 | PC: 12ab5 | Open file (See above) |
| 2018-12-25T11:53:22.952024768Z | 87 | PC: 12abf | Get or set file date and time (See above) |
| 2018-12-25T11:53:22.953591767Z | 64 | PC: 12ad2 | Write file or device (See above) |
| 2018-12-25T11:53:22.961106774Z | 87 | PC: 12ae0 | Get or set file date and time (See above) |
| 2018-12-25T11:53:22.964239079Z | 62 | PC: 12ae4 | Close file (See above) |
| 2018-12-25T11:53:22.972358863Z | 67 | PC: 12af1 | Get or set file attributes (See above) |
| 2018-12-25T11:53:22.983333274Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T11:53:22.987790719Z | 67 | PC: 12aa3 | Get or set file attributes (See above) |
| 2018-12-25T11:53:22.995032743Z | 67 | PC: 12aaf | Get or set file attributes (See above) |
| 2018-12-25T11:53:23.006348977Z | 61 | PC: 12ab5 | Open file (See above) |
| 2018-12-25T11:53:23.014388508Z | 87 | PC: 12abf | Get or set file date and time (See above) |
| 2018-12-25T11:53:23.016443102Z | 64 | PC: 12ad2 | Write file or device (See above) |
| 2018-12-25T11:53:23.024119556Z | 87 | PC: 12ae0 | Get or set file date and time (See above) |
| 2018-12-25T11:53:23.026211706Z | 62 | PC: 12ae4 | Close file (See above) |
| 2018-12-25T11:53:23.035115791Z | 67 | PC: 12af1 | Get or set file attributes (See above) |
| 2018-12-25T11:53:23.046417524Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T11:53:23.050358921Z | 67 | PC: 12aa3 | Get or set file attributes (See above) |
| 2018-12-25T11:53:23.058305303Z | 67 | PC: 12aaf | Get or set file attributes (See above) |
| 2018-12-25T11:53:23.069354391Z | 61 | PC: 12ab5 | Open file (See above) |
| 2018-12-25T11:53:23.077174655Z | 87 | PC: 12abf | Get or set file date and time (See above) |
| 2018-12-25T11:53:23.08002435Z | 64 | PC: 12ad2 | Write file or device (See above) |
| 2018-12-25T11:53:23.088127609Z | 87 | PC: 12ae0 | Get or set file date and time (See above) |
| 2018-12-25T11:53:23.089779789Z | 62 | PC: 12ae4 | Close file (See above) |
| 2018-12-25T11:53:23.09833596Z | 67 | PC: 12af1 | Get or set file attributes (See above) |
| 2018-12-25T11:53:23.109492142Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T11:53:23.112617667Z | 67 | PC: 12aa3 | Get or set file attributes (See above) |
| 2018-12-25T11:53:23.119288084Z | 67 | PC: 12aaf | Get or set file attributes (See above) |
| 2018-12-25T11:53:23.132300625Z | 61 | PC: 12ab5 | Open file (See above) |
| 2018-12-25T11:53:23.140045284Z | 87 | PC: 12abf | Get or set file date and time (See above) |
| 2018-12-25T11:53:23.141934935Z | 64 | PC: 12ad2 | Write file or device (See above) |
| 2018-12-25T11:53:23.150785719Z | 87 | PC: 12ae0 | Get or set file date and time (See above) |
| 2018-12-25T11:53:23.152781629Z | 62 | PC: 12ae4 | Close file (See above) |
| 2018-12-25T11:53:23.161305215Z | 67 | PC: 12af1 | Get or set file attributes (See above) |
| 2018-12-25T11:53:23.173572483Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T11:53:23.176831507Z | 42 | PC: 12a64 | Get date 0x12a64: cmp al, 2 0x12a66: je 0x12a6c 0x12a68: mov ah, 0x4c 0x12a6a: int 0x21 0x12a6c: mov byte ptr [0x1be], 0 0x12a71: nop 0x12a72: jmp 0x12a75 0x12a74: nop 0x12a75: mov al, byte ptr [0x1bf] 0x12a78: mov cx, 0xa0 0x12a7b: mov dx, 0 0x12a7e: mov bx, 0 0x12a81: int 0x26 0x12a83: inc byte ptr [0x1be] 0x12a87: cmp byte ptr [0x1be], 0xa 0x12a8c: je 0x12a90 0x12a8e: jne 0x12a75 0x12a90: mov ah, 9 0x12a92: mov dx, 0x1f6 0x12a95: int 0x21 |
| 2018-12-25T11:53:23.17923305Z | 76 | PC: 12a6c | Terminate with return code (Return code = '3') |