{"DateBased":true,"Day":15,"Month":4,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":630,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T11:41:22.984374146Z | 26 | PC: 12a9f | Set disk transfer address |
| 2018-12-25T11:41:22.985562079Z | 71 | PC: 12ab1 | Get current directory |
| 2018-12-25T11:41:22.988219012Z | 42 | PC: 12ab7 | Get date 0x12ab7: cmp dh, 4 0x12aba: jne 0x12ad5 0x12abc: cmp dl, 0xf 0x12abf: jne 0x12ad5 0x12ac1: mov ax, 0x1010 0x12ac4: out 0x70, ax 0x12ac6: mov dx, 0x346 0x12ac9: mov ah, 9 0x12acb: int 0x21 0x12acd: mov ah, 8 0x12acf: int 0x21 0x12ad1: mov al, 0xfe 0x12ad3: out 0x64, al 0x12ad5: mov ah, byte ptr [0x375] 0x12ad9: mov cl, 7 0x12adb: mov dx, 0x33a 0x12ade: int 0x21 0x12ae0: jae 0x12ae5 0x12ae2: jmp 0x12c1f 0x12ae5: mov dx, word ptr [0x369] |
| 2018-12-25T11:41:22.990106495Z | 9 | PC: 12acd | Display string (String= '��ࠡ���� - rulez forever ! ') |
| 2018-12-25T11:41:22.993964866Z | 8 | PC: 12ad1 | Console input without echo |
{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":630,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T11:41:23.368084321Z | 26 | PC: 12a9f | Set disk transfer address |
| 2018-12-25T11:41:23.369391996Z | 71 | PC: 12ab1 | Get current directory |
| 2018-12-25T11:41:23.372088521Z | 42 | PC: 12ab7 | Get date 0x12ab7: cmp dh, 4 0x12aba: jne 0x12ad5 0x12abc: cmp dl, 0xf 0x12abf: jne 0x12ad5 0x12ac1: mov ax, 0x1010 0x12ac4: out 0x70, ax 0x12ac6: mov dx, 0x346 0x12ac9: mov ah, 9 0x12acb: int 0x21 0x12acd: mov ah, 8 0x12acf: int 0x21 0x12ad1: mov al, 0xfe 0x12ad3: out 0x64, al 0x12ad5: mov ah, byte ptr [0x375] 0x12ad9: mov cl, 7 0x12adb: mov dx, 0x33a 0x12ade: int 0x21 0x12ae0: jae 0x12ae5 0x12ae2: jmp 0x12c1f 0x12ae5: mov dx, word ptr [0x369] |
| 2018-12-25T11:41:23.374003562Z | 78 | PC: 12ae0 | Find first file |
| 2018-12-25T11:41:23.380229237Z | 67 | PC: 12afc | Get or set file attributes |
| 2018-12-25T11:41:23.398001106Z | 61 | PC: 12b10 | Open file (Filename = 'SLEEP.COM') |
| 2018-12-25T11:41:23.404383573Z | 63 | PC: 12b2c | Read file or device (Read 688 bytes on handle 5) |
| 2018-12-25T11:41:23.426504869Z | 66 | PC: 12b4b | Move file pointer |
| 2018-12-25T11:41:23.427988092Z | 66 | PC: 12b6e | Move file pointer |
| 2018-12-25T11:41:23.429483361Z | 64 | PC: 12b89 | Write file or device (Write 407 bytes on handle 5) |
| 2018-12-25T11:41:23.437856912Z | 64 | PC: 12b99 | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-25T11:41:23.440666628Z | 66 | PC: 12bc8 | Move file pointer |
| 2018-12-25T11:41:23.441918227Z | 64 | PC: 12bd9 | Write file or device (Write 688 bytes on handle 5) |
| 2018-12-25T11:41:23.450314867Z | 87 | PC: 12bea | Get or set file date and time |
| 2018-12-25T11:41:23.451853144Z | 62 | PC: 12bf0 | Close file |
| 2018-12-25T11:41:23.459131237Z | 67 | PC: 12c02 | Get or set file attributes |
| 2018-12-25T11:41:23.468738628Z | 79 | PC: 12ae0 | Find next file (See above) |
| 2018-12-25T11:41:23.471716549Z | 67 | PC: 12afc | Get or set file attributes (See above) |
| 2018-12-25T11:41:23.481090551Z | 61 | PC: 12b10 | Open file (See above) |
| 2018-12-25T11:41:23.487451868Z | 63 | PC: 12b2c | Read file or device (See above) |
| 2018-12-25T11:41:23.493841987Z | 66 | PC: 12b4b | Move file pointer (See above) |
| 2018-12-25T11:41:23.495194031Z | 66 | PC: 12b6e | Move file pointer (See above) |
| 2018-12-25T11:41:23.496536163Z | 64 | PC: 12b89 | Write file or device (See above) |
| 2018-12-25T11:41:23.50106825Z | 64 | PC: 12b99 | Write file or device (See above) |
| 2018-12-25T11:41:23.50404096Z | 66 | PC: 12bc8 | Move file pointer (See above) |
| 2018-12-25T11:41:23.505444544Z | 64 | PC: 12bd9 | Write file or device (See above) |
| 2018-12-25T11:41:23.513875102Z | 87 | PC: 12bea | Get or set file date and time (See above) |
| 2018-12-25T11:41:23.515197671Z | 62 | PC: 12bf0 | Close file (See above) |
| 2018-12-25T11:41:23.522600178Z | 67 | PC: 12c02 | Get or set file attributes (See above) |
| 2018-12-25T11:41:23.532350572Z | 79 | PC: 12ae0 | Find next file (See above) |
| 2018-12-25T11:41:23.534924062Z | 67 | PC: 12afc | Get or set file attributes (See above) |
| 2018-12-25T11:41:23.544227456Z | 61 | PC: 12b10 | Open file (See above) |
| 2018-12-25T11:41:23.551354797Z | 63 | PC: 12b2c | Read file or device (See above) |
| 2018-12-25T11:41:23.557551919Z | 66 | PC: 12b4b | Move file pointer (See above) |
| 2018-12-25T11:41:23.558880034Z | 66 | PC: 12b6e | Move file pointer (See above) |
| 2018-12-25T11:41:23.560794761Z | 64 | PC: 12b89 | Write file or device (See above) |
| 2018-12-25T11:41:23.564425061Z | 64 | PC: 12b99 | Write file or device (See above) |
| 2018-12-25T11:41:23.567183185Z | 66 | PC: 12bc8 | Move file pointer (See above) |
| 2018-12-25T11:41:23.569020175Z | 64 | PC: 12bd9 | Write file or device (See above) |
| 2018-12-25T11:41:23.577179278Z | 87 | PC: 12bea | Get or set file date and time (See above) |
| 2018-12-25T11:41:23.578529543Z | 62 | PC: 12bf0 | Close file (See above) |
| 2018-12-25T11:41:23.586274572Z | 67 | PC: 12c02 | Get or set file attributes (See above) |
| 2018-12-25T11:41:23.595616031Z | 79 | PC: 12ae0 | Find next file (See above) |
| 2018-12-25T11:41:23.598012216Z | 67 | PC: 12afc | Get or set file attributes (See above) |
| 2018-12-25T11:41:23.60759657Z | 61 | PC: 12b10 | Open file (See above) |
| 2018-12-25T11:41:23.613913866Z | 63 | PC: 12b2c | Read file or device (See above) |
| 2018-12-25T11:41:23.619965145Z | 66 | PC: 12b4b | Move file pointer (See above) |
| 2018-12-25T11:41:23.621636613Z | 66 | PC: 12b6e | Move file pointer (See above) |
| 2018-12-25T11:41:23.622867618Z | 64 | PC: 12b89 | Write file or device (See above) |
| 2018-12-25T11:41:23.626923732Z | 64 | PC: 12b99 | Write file or device (See above) |
| 2018-12-25T11:41:23.630411912Z | 66 | PC: 12bc8 | Move file pointer (See above) |
| 2018-12-25T11:41:23.631655744Z | 64 | PC: 12bd9 | Write file or device (See above) |
| 2018-12-25T11:41:23.63993589Z | 87 | PC: 12bea | Get or set file date and time (See above) |
| 2018-12-25T11:41:23.641882791Z | 62 | PC: 12bf0 | Close file (See above) |
| 2018-12-25T11:41:23.64951974Z | 67 | PC: 12c02 | Get or set file attributes (See above) |
| 2018-12-25T11:41:23.65899941Z | 79 | PC: 12ae0 | Find next file (See above) |
| 2018-12-25T11:41:23.662029305Z | 67 | PC: 12afc | Get or set file attributes (See above) |
| 2018-12-25T11:41:23.671617797Z | 61 | PC: 12b10 | Open file (See above) |
| 2018-12-25T11:41:23.677958071Z | 63 | PC: 12b2c | Read file or device (See above) |
| 2018-12-25T11:41:23.684576568Z | 66 | PC: 12b4b | Move file pointer (See above) |
| 2018-12-25T11:41:23.685906919Z | 66 | PC: 12b6e | Move file pointer (See above) |
| 2018-12-25T11:41:23.687212343Z | 64 | PC: 12b89 | Write file or device (See above) |
| 2018-12-25T11:41:23.691651701Z | 64 | PC: 12b99 | Write file or device (See above) |
| 2018-12-25T11:41:23.694396174Z | 66 | PC: 12bc8 | Move file pointer (See above) |
| 2018-12-25T11:41:23.69562194Z | 64 | PC: 12bd9 | Write file or device (See above) |
| 2018-12-25T11:41:23.704631745Z | 87 | PC: 12bea | Get or set file date and time (See above) |
| 2018-12-25T11:41:23.70603755Z | 62 | PC: 12bf0 | Close file (See above) |
| 2018-12-25T11:41:23.713626407Z | 67 | PC: 12c02 | Get or set file attributes (See above) |
| 2018-12-25T11:41:23.723807641Z | 59 | PC: 12c28 | Change current directory |
| 2018-12-25T11:41:23.72806142Z | 26 | PC: 12c45 | Set disk transfer address |
| 2018-12-25T11:41:23.729157713Z | 59 | PC: 12c50 | Change current directory |
{"DateBased":true,"Day":1,"Month":4,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":630,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T11:41:23.771825371Z | 26 | PC: 12a9f | Set disk transfer address |
| 2018-12-25T11:41:23.773630421Z | 71 | PC: 12ab1 | Get current directory |
| 2018-12-25T11:41:23.77638315Z | 42 | PC: 12ab7 | Get date 0x12ab7: cmp dh, 4 0x12aba: jne 0x12ad5 0x12abc: cmp dl, 0xf 0x12abf: jne 0x12ad5 0x12ac1: mov ax, 0x1010 0x12ac4: out 0x70, ax 0x12ac6: mov dx, 0x346 0x12ac9: mov ah, 9 0x12acb: int 0x21 0x12acd: mov ah, 8 0x12acf: int 0x21 0x12ad1: mov al, 0xfe 0x12ad3: out 0x64, al 0x12ad5: mov ah, byte ptr [0x375] 0x12ad9: mov cl, 7 0x12adb: mov dx, 0x33a 0x12ade: int 0x21 0x12ae0: jae 0x12ae5 0x12ae2: jmp 0x12c1f 0x12ae5: mov dx, word ptr [0x369] |
| 2018-12-25T11:41:23.778492256Z | 78 | PC: 12ae0 | Find first file |
| 2018-12-25T11:41:23.785110861Z | 67 | PC: 12afc | Get or set file attributes |
| 2018-12-25T11:41:23.801385882Z | 61 | PC: 12b10 | Open file (Filename = 'SLEEP.COM') |
| 2018-12-25T11:41:23.807999018Z | 63 | PC: 12b2c | Read file or device (Read 688 bytes on handle 5) |
| 2018-12-25T11:41:23.814515337Z | 66 | PC: 12b4b | Move file pointer |
| 2018-12-25T11:41:23.816956898Z | 66 | PC: 12b6e | Move file pointer |
| 2018-12-25T11:41:23.818771867Z | 64 | PC: 12b89 | Write file or device (Write 407 bytes on handle 5) |
| 2018-12-25T11:41:23.827376238Z | 64 | PC: 12b99 | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-25T11:41:23.831889963Z | 66 | PC: 12bc8 | Move file pointer |
| 2018-12-25T11:41:23.834087271Z | 64 | PC: 12bd9 | Write file or device (Write 688 bytes on handle 5) |
| 2018-12-25T11:41:23.842186977Z | 87 | PC: 12bea | Get or set file date and time |
| 2018-12-25T11:41:23.844636523Z | 62 | PC: 12bf0 | Close file |
| 2018-12-25T11:41:23.853840868Z | 67 | PC: 12c02 | Get or set file attributes |
| 2018-12-25T11:41:23.863499746Z | 79 | PC: 12ae0 | Find next file (See above) |
| 2018-12-25T11:41:23.86653734Z | 67 | PC: 12afc | Get or set file attributes (See above) |
| 2018-12-25T11:41:23.876173855Z | 61 | PC: 12b10 | Open file (See above) |
| 2018-12-25T11:41:23.882705266Z | 63 | PC: 12b2c | Read file or device (See above) |
| 2018-12-25T11:41:23.889851303Z | 66 | PC: 12b4b | Move file pointer (See above) |
| 2018-12-25T11:41:23.891159466Z | 66 | PC: 12b6e | Move file pointer (See above) |
| 2018-12-25T11:41:23.892408095Z | 64 | PC: 12b89 | Write file or device (See above) |
| 2018-12-25T11:41:23.897029787Z | 64 | PC: 12b99 | Write file or device (See above) |
| 2018-12-25T11:41:23.899839302Z | 66 | PC: 12bc8 | Move file pointer (See above) |
| 2018-12-25T11:41:23.90153445Z | 64 | PC: 12bd9 | Write file or device (See above) |
| 2018-12-25T11:41:23.910120794Z | 87 | PC: 12bea | Get or set file date and time (See above) |
| 2018-12-25T11:41:23.912528003Z | 62 | PC: 12bf0 | Close file (See above) |
| 2018-12-25T11:41:23.92019934Z | 67 | PC: 12c02 | Get or set file attributes (See above) |
| 2018-12-25T11:41:23.93014876Z | 79 | PC: 12ae0 | Find next file (See above) |
| 2018-12-25T11:41:23.9327069Z | 67 | PC: 12afc | Get or set file attributes (See above) |
| 2018-12-25T11:41:23.942079871Z | 61 | PC: 12b10 | Open file (See above) |
| 2018-12-25T11:41:23.948856258Z | 63 | PC: 12b2c | Read file or device (See above) |
| 2018-12-25T11:41:23.955055865Z | 66 | PC: 12b4b | Move file pointer (See above) |
| 2018-12-25T11:41:23.956386951Z | 66 | PC: 12b6e | Move file pointer (See above) |
| 2018-12-25T11:41:23.95826642Z | 64 | PC: 12b89 | Write file or device (See above) |
| 2018-12-25T11:41:23.961999943Z | 64 | PC: 12b99 | Write file or device (See above) |
| 2018-12-25T11:41:23.964784926Z | 66 | PC: 12bc8 | Move file pointer (See above) |
| 2018-12-25T11:41:23.966294004Z | 64 | PC: 12bd9 | Write file or device (See above) |
| 2018-12-25T11:41:23.974429338Z | 87 | PC: 12bea | Get or set file date and time (See above) |
| 2018-12-25T11:41:23.97650228Z | 62 | PC: 12bf0 | Close file (See above) |
| 2018-12-25T11:41:23.982894914Z | 67 | PC: 12c02 | Get or set file attributes (See above) |
| 2018-12-25T11:41:23.989149254Z | 79 | PC: 12ae0 | Find next file (See above) |
| 2018-12-25T11:41:23.991140493Z | 67 | PC: 12afc | Get or set file attributes (See above) |
| 2018-12-25T11:41:23.997353779Z | 61 | PC: 12b10 | Open file (See above) |
| 2018-12-25T11:41:24.004189824Z | 63 | PC: 12b2c | Read file or device (See above) |
| 2018-12-25T11:41:24.010287975Z | 66 | PC: 12b4b | Move file pointer (See above) |
| 2018-12-25T11:41:24.011810915Z | 66 | PC: 12b6e | Move file pointer (See above) |
| 2018-12-25T11:41:24.014002181Z | 64 | PC: 12b89 | Write file or device (See above) |
| 2018-12-25T11:41:24.017716383Z | 64 | PC: 12b99 | Write file or device (See above) |
| 2018-12-25T11:41:24.020339114Z | 66 | PC: 12bc8 | Move file pointer (See above) |
| 2018-12-25T11:41:24.021920635Z | 64 | PC: 12bd9 | Write file or device (See above) |
| 2018-12-25T11:41:24.029933779Z | 87 | PC: 12bea | Get or set file date and time (See above) |
| 2018-12-25T11:41:24.031415627Z | 62 | PC: 12bf0 | Close file (See above) |
| 2018-12-25T11:41:24.038933864Z | 67 | PC: 12c02 | Get or set file attributes (See above) |
| 2018-12-25T11:41:24.051103408Z | 79 | PC: 12ae0 | Find next file (See above) |
| 2018-12-25T11:41:24.054050286Z | 67 | PC: 12afc | Get or set file attributes (See above) |
| 2018-12-25T11:41:24.06437333Z | 61 | PC: 12b10 | Open file (See above) |
| 2018-12-25T11:41:24.070832312Z | 63 | PC: 12b2c | Read file or device (See above) |
| 2018-12-25T11:41:24.077042144Z | 66 | PC: 12b4b | Move file pointer (See above) |
| 2018-12-25T11:41:24.078733444Z | 66 | PC: 12b6e | Move file pointer (See above) |
| 2018-12-25T11:41:24.080032528Z | 64 | PC: 12b89 | Write file or device (See above) |
| 2018-12-25T11:41:24.084462274Z | 64 | PC: 12b99 | Write file or device (See above) |
| 2018-12-25T11:41:24.088526353Z | 66 | PC: 12bc8 | Move file pointer (See above) |
| 2018-12-25T11:41:24.090305313Z | 64 | PC: 12bd9 | Write file or device (See above) |
| 2018-12-25T11:41:24.099169871Z | 87 | PC: 12bea | Get or set file date and time (See above) |
| 2018-12-25T11:41:24.10203786Z | 62 | PC: 12bf0 | Close file (See above) |
| 2018-12-25T11:41:24.11083094Z | 67 | PC: 12c02 | Get or set file attributes (See above) |
| 2018-12-25T11:41:24.120801042Z | 59 | PC: 12c28 | Change current directory |
| 2018-12-25T11:41:24.12618812Z | 26 | PC: 12c45 | Set disk transfer address |
| 2018-12-25T11:41:24.127594071Z | 59 | PC: 12c50 | Change current directory |