{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":589,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T11:41:21.594914116Z | 78 | PC: 12a4a | Find first file |
| 2018-12-25T11:41:21.601792964Z | 67 | PC: 12aa1 | Get or set file attributes |
| 2018-12-25T11:41:21.609216753Z | 67 | PC: 12aad | Get or set file attributes |
| 2018-12-25T11:41:21.669449266Z | 61 | PC: 12ab3 | Open file (Filename = 'SLEEP.COM') |
| 2018-12-25T11:41:21.67661991Z | 87 | PC: 12abd | Get or set file date and time |
| 2018-12-25T11:41:21.679154706Z | 64 | PC: 12ad0 | Write file or device (Write 270 bytes on handle 5) |
| 2018-12-25T11:41:21.686457018Z | 87 | PC: 12ade | Get or set file date and time |
| 2018-12-25T11:41:21.688345311Z | 62 | PC: 12ae2 | Close file |
| 2018-12-25T11:41:21.697170031Z | 67 | PC: 12aef | Get or set file attributes |
| 2018-12-25T11:41:21.711330318Z | 79 | PC: 12a59 | Find next file |
| 2018-12-25T11:41:21.716655413Z | 67 | PC: 12aa1 | Get or set file attributes (See above) |
| 2018-12-25T11:41:21.722868773Z | 67 | PC: 12aad | Get or set file attributes (See above) |
| 2018-12-25T11:41:21.733770346Z | 61 | PC: 12ab3 | Open file (See above) |
| 2018-12-25T11:41:21.740971167Z | 87 | PC: 12abd | Get or set file date and time (See above) |
| 2018-12-25T11:41:21.742366248Z | 64 | PC: 12ad0 | Write file or device (See above) |
| 2018-12-25T11:41:21.749840406Z | 87 | PC: 12ade | Get or set file date and time (See above) |
| 2018-12-25T11:41:21.753127815Z | 62 | PC: 12ae2 | Close file (See above) |
| 2018-12-25T11:41:21.761118995Z | 67 | PC: 12aef | Get or set file attributes (See above) |
| 2018-12-25T11:41:21.775387873Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T11:41:21.778713252Z | 67 | PC: 12aa1 | Get or set file attributes (See above) |
| 2018-12-25T11:41:21.785103623Z | 67 | PC: 12aad | Get or set file attributes (See above) |
| 2018-12-25T11:41:21.797137219Z | 61 | PC: 12ab3 | Open file (See above) |
| 2018-12-25T11:41:21.804831641Z | 87 | PC: 12abd | Get or set file date and time (See above) |
| 2018-12-25T11:41:21.806458788Z | 64 | PC: 12ad0 | Write file or device (See above) |
| 2018-12-25T11:41:21.813970435Z | 87 | PC: 12ade | Get or set file date and time (See above) |
| 2018-12-25T11:41:21.815639914Z | 62 | PC: 12ae2 | Close file (See above) |
| 2018-12-25T11:41:21.823497785Z | 67 | PC: 12aef | Get or set file attributes (See above) |
| 2018-12-25T11:41:21.835804274Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T11:41:21.838294104Z | 67 | PC: 12aa1 | Get or set file attributes (See above) |
| 2018-12-25T11:41:21.852613357Z | 67 | PC: 12aad | Get or set file attributes (See above) |
| 2018-12-25T11:41:21.859927275Z | 61 | PC: 12ab3 | Open file (See above) |
| 2018-12-25T11:41:21.864364653Z | 87 | PC: 12abd | Get or set file date and time (See above) |
| 2018-12-25T11:41:21.865468549Z | 64 | PC: 12ad0 | Write file or device (See above) |
| 2018-12-25T11:41:21.869771298Z | 87 | PC: 12ade | Get or set file date and time (See above) |
| 2018-12-25T11:41:21.871126786Z | 62 | PC: 12ae2 | Close file (See above) |
| 2018-12-25T11:41:21.876405101Z | 67 | PC: 12aef | Get or set file attributes (See above) |
| 2018-12-25T11:41:21.890017718Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T11:41:21.893071828Z | 67 | PC: 12aa1 | Get or set file attributes (See above) |
| 2018-12-25T11:41:21.904947415Z | 67 | PC: 12aad | Get or set file attributes (See above) |
| 2018-12-25T11:41:21.915324722Z | 61 | PC: 12ab3 | Open file (See above) |
| 2018-12-25T11:41:21.922661769Z | 87 | PC: 12abd | Get or set file date and time (See above) |
| 2018-12-25T11:41:21.924397286Z | 64 | PC: 12ad0 | Write file or device (See above) |
| 2018-12-25T11:41:21.93135242Z | 87 | PC: 12ade | Get or set file date and time (See above) |
| 2018-12-25T11:41:21.93288163Z | 62 | PC: 12ae2 | Close file (See above) |
| 2018-12-25T11:41:21.93763191Z | 67 | PC: 12aef | Get or set file attributes (See above) |
| 2018-12-25T11:41:21.944345551Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T11:41:21.947739458Z | 67 | PC: 12aa1 | Get or set file attributes (See above) |
| 2018-12-25T11:41:21.959294752Z | 67 | PC: 12aad | Get or set file attributes (See above) |
| 2018-12-25T11:41:21.97022401Z | 61 | PC: 12ab3 | Open file (See above) |
| 2018-12-25T11:41:21.978136032Z | 87 | PC: 12abd | Get or set file date and time (See above) |
| 2018-12-25T11:41:21.980105409Z | 64 | PC: 12ad0 | Write file or device (See above) |
| 2018-12-25T11:41:21.987255101Z | 87 | PC: 12ade | Get or set file date and time (See above) |
| 2018-12-25T11:41:21.99210957Z | 62 | PC: 12ae2 | Close file (See above) |
| 2018-12-25T11:41:22.000538692Z | 67 | PC: 12aef | Get or set file attributes (See above) |
| 2018-12-25T11:41:22.011280143Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T11:41:22.014397643Z | 67 | PC: 12aa1 | Get or set file attributes (See above) |
| 2018-12-25T11:41:22.020434479Z | 67 | PC: 12aad | Get or set file attributes (See above) |
| 2018-12-25T11:41:22.033960931Z | 61 | PC: 12ab3 | Open file (See above) |
| 2018-12-25T11:41:22.041465353Z | 87 | PC: 12abd | Get or set file date and time (See above) |
| 2018-12-25T11:41:22.043066206Z | 64 | PC: 12ad0 | Write file or device (See above) |
| 2018-12-25T11:41:22.050616899Z | 87 | PC: 12ade | Get or set file date and time (See above) |
| 2018-12-25T11:41:22.052220594Z | 62 | PC: 12ae2 | Close file (See above) |
| 2018-12-25T11:41:22.060412331Z | 67 | PC: 12aef | Get or set file attributes (See above) |
| 2018-12-25T11:41:22.071331978Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T11:41:22.074117874Z | 67 | PC: 12aa1 | Get or set file attributes (See above) |
| 2018-12-25T11:41:22.080377191Z | 67 | PC: 12aad | Get or set file attributes (See above) |
| 2018-12-25T11:41:22.094450493Z | 61 | PC: 12ab3 | Open file (See above) |
| 2018-12-25T11:41:22.101635297Z | 87 | PC: 12abd | Get or set file date and time (See above) |
| 2018-12-25T11:41:22.103357755Z | 64 | PC: 12ad0 | Write file or device (See above) |
| 2018-12-25T11:41:22.110382347Z | 87 | PC: 12ade | Get or set file date and time (See above) |
| 2018-12-25T11:41:22.11173721Z | 62 | PC: 12ae2 | Close file (See above) |
| 2018-12-25T11:41:22.119856568Z | 67 | PC: 12aef | Get or set file attributes (See above) |
| 2018-12-25T11:41:22.130484989Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T11:41:22.132957964Z | 42 | PC: 12a64 | Get date 0x12a64: cmp al, 2 0x12a66: je 0x12a6c 0x12a68: mov ah, 0x4c 0x12a6a: int 0x21 0x12a6c: mov byte ptr [0x1bc], 0 0x12a71: jmp 0x12a73 0x12a73: mov al, byte ptr [0x1bd] 0x12a76: mov cx, 0xa0 0x12a79: mov dx, 0 0x12a7c: mov bx, 0 0x12a7f: int 0x26 0x12a81: inc byte ptr [0x1bc] 0x12a85: cmp byte ptr [0x1bc], 0xa 0x12a8a: je 0x12a8e 0x12a8c: jne 0x12a73 0x12a8e: mov ah, 9 0x12a90: mov dx, 0x1f4 0x12a93: int 0x21 0x12a95: mov ah, 0x4c 0x12a97: int 0x21 |
| 2018-12-25T11:41:22.136144003Z | 9 | PC: 12a95 | Display string (String= ' Error eating drive C: ') |
| 2018-12-25T11:41:22.141878944Z | 76 | PC: 12a99 | Terminate with return code (Return code = '36') |
{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":589,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T11:41:21.932208355Z | 78 | PC: 12a4a | Find first file |
| 2018-12-25T11:41:21.939160533Z | 67 | PC: 12aa1 | Get or set file attributes |
| 2018-12-25T11:41:21.945383021Z | 67 | PC: 12aad | Get or set file attributes |
| 2018-12-25T11:41:21.961872541Z | 61 | PC: 12ab3 | Open file (Filename = 'SLEEP.COM') |
| 2018-12-25T11:41:21.96744781Z | 87 | PC: 12abd | Get or set file date and time |
| 2018-12-25T11:41:21.968553747Z | 64 | PC: 12ad0 | Write file or device (Write 270 bytes on handle 5) |
| 2018-12-25T11:41:21.972716712Z | 87 | PC: 12ade | Get or set file date and time |
| 2018-12-25T11:41:21.974074016Z | 62 | PC: 12ae2 | Close file |
| 2018-12-25T11:41:21.979418981Z | 67 | PC: 12aef | Get or set file attributes |
| 2018-12-25T11:41:21.990624331Z | 79 | PC: 12a59 | Find next file |
| 2018-12-25T11:41:21.994216388Z | 67 | PC: 12aa1 | Get or set file attributes (See above) |
| 2018-12-25T11:41:22.000508511Z | 67 | PC: 12aad | Get or set file attributes (See above) |
| 2018-12-25T11:41:22.011060147Z | 61 | PC: 12ab3 | Open file (See above) |
| 2018-12-25T11:41:22.018290892Z | 87 | PC: 12abd | Get or set file date and time (See above) |
| 2018-12-25T11:41:22.020478116Z | 64 | PC: 12ad0 | Write file or device (See above) |
| 2018-12-25T11:41:22.028330334Z | 87 | PC: 12ade | Get or set file date and time (See above) |
| 2018-12-25T11:41:22.030398498Z | 62 | PC: 12ae2 | Close file (See above) |
| 2018-12-25T11:41:22.038836457Z | 67 | PC: 12aef | Get or set file attributes (See above) |
| 2018-12-25T11:41:22.050014286Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T11:41:22.052766451Z | 67 | PC: 12aa1 | Get or set file attributes (See above) |
| 2018-12-25T11:41:22.059752141Z | 67 | PC: 12aad | Get or set file attributes (See above) |
| 2018-12-25T11:41:22.070036384Z | 61 | PC: 12ab3 | Open file (See above) |
| 2018-12-25T11:41:22.076811352Z | 87 | PC: 12abd | Get or set file date and time (See above) |
| 2018-12-25T11:41:22.078596514Z | 64 | PC: 12ad0 | Write file or device (See above) |
| 2018-12-25T11:41:22.085595183Z | 87 | PC: 12ade | Get or set file date and time (See above) |
| 2018-12-25T11:41:22.086898822Z | 62 | PC: 12ae2 | Close file (See above) |
| 2018-12-25T11:41:22.094890613Z | 67 | PC: 12aef | Get or set file attributes (See above) |
| 2018-12-25T11:41:22.105377926Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T11:41:22.108098196Z | 67 | PC: 12aa1 | Get or set file attributes (See above) |
| 2018-12-25T11:41:22.114676111Z | 67 | PC: 12aad | Get or set file attributes (See above) |
| 2018-12-25T11:41:22.123225085Z | 61 | PC: 12ab3 | Open file (See above) |
| 2018-12-25T11:41:22.127397231Z | 87 | PC: 12abd | Get or set file date and time (See above) |
| 2018-12-25T11:41:22.128601733Z | 64 | PC: 12ad0 | Write file or device (See above) |
| 2018-12-25T11:41:22.133721971Z | 87 | PC: 12ade | Get or set file date and time (See above) |
| 2018-12-25T11:41:22.134875595Z | 62 | PC: 12ae2 | Close file (See above) |
| 2018-12-25T11:41:22.139823018Z | 67 | PC: 12aef | Get or set file attributes (See above) |
| 2018-12-25T11:41:22.15168014Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T11:41:22.154958589Z | 67 | PC: 12aa1 | Get or set file attributes (See above) |
| 2018-12-25T11:41:22.161477316Z | 67 | PC: 12aad | Get or set file attributes (See above) |
| 2018-12-25T11:41:22.175712947Z | 61 | PC: 12ab3 | Open file (See above) |
| 2018-12-25T11:41:22.183879771Z | 87 | PC: 12abd | Get or set file date and time (See above) |
| 2018-12-25T11:41:22.185333509Z | 64 | PC: 12ad0 | Write file or device (See above) |
| 2018-12-25T11:41:22.193587907Z | 87 | PC: 12ade | Get or set file date and time (See above) |
| 2018-12-25T11:41:22.195273428Z | 62 | PC: 12ae2 | Close file (See above) |
| 2018-12-25T11:41:22.203611393Z | 67 | PC: 12aef | Get or set file attributes (See above) |
| 2018-12-25T11:41:22.224340477Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T11:41:22.22734921Z | 67 | PC: 12aa1 | Get or set file attributes (See above) |
| 2018-12-25T11:41:22.233746553Z | 67 | PC: 12aad | Get or set file attributes (See above) |
| 2018-12-25T11:41:22.245385672Z | 61 | PC: 12ab3 | Open file (See above) |
| 2018-12-25T11:41:22.258484766Z | 87 | PC: 12abd | Get or set file date and time (See above) |
| 2018-12-25T11:41:22.260338484Z | 64 | PC: 12ad0 | Write file or device (See above) |
| 2018-12-25T11:41:22.268140915Z | 87 | PC: 12ade | Get or set file date and time (See above) |
| 2018-12-25T11:41:22.269958848Z | 62 | PC: 12ae2 | Close file (See above) |
| 2018-12-25T11:41:22.277710934Z | 67 | PC: 12aef | Get or set file attributes (See above) |
| 2018-12-25T11:41:22.289026861Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T11:41:22.292564553Z | 67 | PC: 12aa1 | Get or set file attributes (See above) |
| 2018-12-25T11:41:22.298964894Z | 67 | PC: 12aad | Get or set file attributes (See above) |
| 2018-12-25T11:41:22.310613114Z | 61 | PC: 12ab3 | Open file (See above) |
| 2018-12-25T11:41:22.320013382Z | 87 | PC: 12abd | Get or set file date and time (See above) |
| 2018-12-25T11:41:22.322045046Z | 64 | PC: 12ad0 | Write file or device (See above) |
| 2018-12-25T11:41:22.330079648Z | 87 | PC: 12ade | Get or set file date and time (See above) |
| 2018-12-25T11:41:22.333377273Z | 62 | PC: 12ae2 | Close file (See above) |
| 2018-12-25T11:41:22.342127664Z | 67 | PC: 12aef | Get or set file attributes (See above) |
| 2018-12-25T11:41:22.353902029Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T11:41:22.358004296Z | 67 | PC: 12aa1 | Get or set file attributes (See above) |
| 2018-12-25T11:41:22.364276253Z | 67 | PC: 12aad | Get or set file attributes (See above) |
| 2018-12-25T11:41:22.375168529Z | 61 | PC: 12ab3 | Open file (See above) |
| 2018-12-25T11:41:22.383882702Z | 87 | PC: 12abd | Get or set file date and time (See above) |
| 2018-12-25T11:41:22.385901947Z | 64 | PC: 12ad0 | Write file or device (See above) |
| 2018-12-25T11:41:22.393501832Z | 87 | PC: 12ade | Get or set file date and time (See above) |
| 2018-12-25T11:41:22.395396516Z | 62 | PC: 12ae2 | Close file (See above) |
| 2018-12-25T11:41:22.41108929Z | 67 | PC: 12aef | Get or set file attributes (See above) |
| 2018-12-25T11:41:22.422555101Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T11:41:22.42572183Z | 42 | PC: 12a64 | Get date 0x12a64: cmp al, 2 0x12a66: je 0x12a6c 0x12a68: mov ah, 0x4c 0x12a6a: int 0x21 0x12a6c: mov byte ptr [0x1bc], 0 0x12a71: jmp 0x12a73 0x12a73: mov al, byte ptr [0x1bd] 0x12a76: mov cx, 0xa0 0x12a79: mov dx, 0 0x12a7c: mov bx, 0 0x12a7f: int 0x26 0x12a81: inc byte ptr [0x1bc] 0x12a85: cmp byte ptr [0x1bc], 0xa 0x12a8a: je 0x12a8e 0x12a8c: jne 0x12a73 0x12a8e: mov ah, 9 0x12a90: mov dx, 0x1f4 0x12a93: int 0x21 0x12a95: mov ah, 0x4c 0x12a97: int 0x21 |
| 2018-12-25T11:41:22.42952291Z | 76 | PC: 12a6c | Terminate with return code (Return code = '3') |