{"DateBased":false,"Day":0,"Month":0,"Year":0,"Hour":0,"Min":0,"Second":0,"TimeBased":true,"OriginalID":6344,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T11:59:09.845920807Z | 53 | PC: 12af5 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-25T11:59:09.847407257Z | 37 | PC: 12b06 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-25T11:59:09.848346129Z | 37 | PC: 12b0b | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-25T11:59:09.849211783Z | 47 | PC: 12b0f | Get disk transfer address |
| 2018-12-25T11:59:09.850751488Z | 26 | PC: 12b1e | Set disk transfer address |
| 2018-12-25T11:59:09.851693618Z | 78 | PC: 12b34 | Find first file |
| 2018-12-25T11:59:09.855513349Z | 61 | PC: 12b63 | Open file (Filename = '��D��5Jвq2\��st��� ,��qHʃP' ڵk?\D��( x��b{��� ;���o+ϴ^}T��6��� t���(8]????????COM'') |
| 2018-12-25T11:59:09.859783485Z | 63 | PC: 12b71 | Read file or device (Read 2 bytes on handle 5) |
| 2018-12-25T11:59:09.863603125Z | 66 | PC: 12b8d | Move file pointer |
| 2018-12-25T11:59:09.86446449Z | 63 | PC: 12b97 | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-25T11:59:09.86677372Z | 67 | PC: 12dac | Get or set file attributes |
| 2018-12-25T11:59:09.87008381Z | 65 | PC: 12db4 | Delete file (Filename = '') |
| 2018-12-25T11:59:09.873289521Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:09.874981001Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:09.876457493Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:09.87775966Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:09.879414986Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:09.880800437Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:09.882688558Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:09.884591193Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:09.886871075Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:09.888937514Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:09.890898137Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:09.893062191Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:09.894882839Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:09.896695093Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:09.898622983Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:09.900370765Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:09.902892877Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:09.905231557Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:09.907096482Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:09.908903438Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:09.911420724Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:09.913374275Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:09.915222976Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:09.917568631Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:09.919344923Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:09.921003157Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:09.923249213Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:09.925048058Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:09.926779186Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:09.928936043Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:09.930787986Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:09.932474929Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:09.934673644Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:09.936435914Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:09.938283744Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:09.940482347Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:09.942298236Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:09.944088786Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:09.9466014Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:09.948404329Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:09.950325919Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:09.952646203Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:09.954822392Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:09.956966766Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:09.959512587Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:09.96190529Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:09.963952084Z | 87 | PC: 12be9 | Get or set file date and time |
| 2018-12-25T11:59:09.965328668Z | 66 | PC: 12bfa | Move file pointer |
| 2018-12-25T11:59:09.96673325Z | 63 | PC: 12c04 | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-25T11:59:09.968692402Z | 66 | PC: 12c0d | Move file pointer |
| 2018-12-25T11:59:09.97069209Z | 64 | PC: 12c32 | Write file or device (Write 9 bytes on handle 5) |
| 2018-12-25T11:59:09.973332942Z | 64 | PC: 12c3d | Write file or device (Write 966 bytes on handle 5) |
| 2018-12-25T11:59:10.289171778Z | 66 | PC: 12c46 | Move file pointer |
| 2018-12-25T11:59:10.294043508Z | 64 | PC: 12c5c | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-25T11:59:10.300760901Z | 87 | PC: 12c69 | Get or set file date and time |
| 2018-12-25T11:59:10.303227465Z | 62 | PC: 12c6d | Close file |
| 2018-12-25T11:59:10.311832663Z | 44 | PC: 12cac | Get time 0x12cac: cmp dl, 0x24 0x12caf: ja 0x12c70 0x12cb1: cmp dh, 0x38 0x12cb4: jl 0x12c70 0x12cb6: mov si, 0x449 0x12cb9: mov cx, 0x8e 0x12cbc: mov dl, 0xac 0x12cbe: xor byte ptr [si], dl 0x12cc0: add dl, 0x36 0x12cc3: inc si 0x12cc4: loop 0x12cbe 0x12cc6: mov ah, 2 0x12cc8: mov dl, 7 0x12cca: int 0x21 0x12ccc: mov ah, 9 0x12cce: mov dx, 0x451 0x12cd1: int 0x21 0x12cd3: mov dx, 0x47d 0x12cd6: int 0x21 0x12cd8: mov dx, 0x4a5 |
| 2018-12-25T11:59:10.314635678Z | 37 | PC: 12c7f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-25T11:59:10.316057887Z | 26 | PC: 12c9a | Set disk transfer address |
{"DateBased":false,"Day":0,"Month":0,"Year":0,"Hour":0,"Min":0,"Second":56,"TimeBased":true,"OriginalID":6344,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T11:59:10.320490081Z | 53 | PC: 12af5 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-25T11:59:10.322652769Z | 37 | PC: 12b06 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-25T11:59:10.323897103Z | 37 | PC: 12b0b | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-25T11:59:10.32554671Z | 47 | PC: 12b0f | Get disk transfer address |
| 2018-12-25T11:59:10.328343472Z | 26 | PC: 12b1e | Set disk transfer address |
| 2018-12-25T11:59:10.330296806Z | 78 | PC: 12b34 | Find first file |
| 2018-12-25T11:59:10.33695545Z | 61 | PC: 12b63 | Open file (Filename = '��D��5Jвq2\��st��� ,��qHʃP' ڵk?\D��( x��b{��� ;���o+ϴ^}T��6��� t���(8]????????COM'') |
| 2018-12-25T11:59:10.344426088Z | 63 | PC: 12b71 | Read file or device (Read 2 bytes on handle 5) |
| 2018-12-25T11:59:10.351056846Z | 66 | PC: 12b8d | Move file pointer |
| 2018-12-25T11:59:10.352353915Z | 63 | PC: 12b97 | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-25T11:59:10.355720888Z | 67 | PC: 12dac | Get or set file attributes |
| 2018-12-25T11:59:10.361391189Z | 65 | PC: 12db4 | Delete file (Filename = '') |
| 2018-12-25T11:59:10.366855691Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:10.369370711Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:10.372559866Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:10.374729602Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:10.376974207Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:10.380316074Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:10.382293734Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:10.384125662Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:10.386628291Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:10.388420565Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:10.390477924Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:10.392753519Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:10.395452687Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:10.398018387Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:10.400864756Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:10.402842469Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:10.405395207Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:10.408247114Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:10.410937477Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:10.412839599Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:10.415352149Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:10.417237494Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:10.41936646Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:10.421971016Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:10.423963767Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:10.425824087Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:10.428366554Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:10.430162158Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:10.431964542Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:10.434274423Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:10.436189553Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:10.438114318Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:10.446426386Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:10.44860015Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:10.450385669Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:10.452466442Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:10.454043545Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:10.45576551Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:10.458075779Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:10.460005357Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:10.461772462Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:10.464022307Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:10.465810087Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:10.467340269Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:10.469039354Z | 67 | PC: 12dac | Get or set file attributes (See above) |
| 2018-12-25T11:59:10.47038163Z | 65 | PC: 12db4 | Delete file (See above) |
| 2018-12-25T11:59:10.471697427Z | 87 | PC: 12be9 | Get or set file date and time |
| 2018-12-25T11:59:10.473076407Z | 66 | PC: 12bfa | Move file pointer |
| 2018-12-25T11:59:10.474083911Z | 63 | PC: 12c04 | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-25T11:59:10.475769104Z | 66 | PC: 12c0d | Move file pointer |
| 2018-12-25T11:59:10.477189401Z | 64 | PC: 12c32 | Write file or device (Write 9 bytes on handle 5) |
| 2018-12-25T11:59:10.479591592Z | 64 | PC: 12c3d | Write file or device (Write 966 bytes on handle 5) |
| 2018-12-25T11:59:10.495891711Z | 66 | PC: 12c46 | Move file pointer |
| 2018-12-25T11:59:10.497583467Z | 64 | PC: 12c5c | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-25T11:59:10.503994459Z | 87 | PC: 12c69 | Get or set file date and time |
| 2018-12-25T11:59:10.505538191Z | 62 | PC: 12c6d | Close file |
| 2018-12-25T11:59:10.513306247Z | 44 | PC: 12cac | Get time 0x12cac: cmp dl, 0x24 0x12caf: ja 0x12c70 0x12cb1: cmp dh, 0x38 0x12cb4: jl 0x12c70 0x12cb6: mov si, 0x449 0x12cb9: mov cx, 0x8e 0x12cbc: mov dl, 0xac 0x12cbe: xor byte ptr [si], dl 0x12cc0: add dl, 0x36 0x12cc3: inc si 0x12cc4: loop 0x12cbe 0x12cc6: mov ah, 2 0x12cc8: mov dl, 7 0x12cca: int 0x21 0x12ccc: mov ah, 9 0x12cce: mov dx, 0x451 0x12cd1: int 0x21 0x12cd3: mov dx, 0x47d 0x12cd6: int 0x21 0x12cd8: mov dx, 0x4a5 |
| 2018-12-25T11:59:10.515050825Z | 2 | PC: 12ccc | Character output (Char = '07') |
| 2018-12-25T11:59:10.517010122Z | 9 | PC: 12cd3 | Display string (Could not find end pointer) |
| 2018-12-25T11:59:10.521354284Z | 9 | PC: 12cd8 | Display string (Could not find end pointer) |
| 2018-12-25T11:59:10.526512921Z | 9 | PC: 12cdd | Display string (Could not find end pointer) |
| 2018-12-25T11:59:10.530547591Z | 2 | PC: 12ce3 | Character output (Char = '07') |