{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":7447,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:01:41.605452573Z | 78 | PC: 12a4a | Find first file |
| 2018-12-25T12:01:41.613065667Z | 67 | PC: 12a9a | Get or set file attributes |
| 2018-12-25T12:01:41.61949318Z | 67 | PC: 12aa6 | Get or set file attributes |
| 2018-12-25T12:01:41.638382306Z | 61 | PC: 12aac | Open file (Filename = 'SLEEP.COM') |
| 2018-12-25T12:01:41.646533586Z | 87 | PC: 12ab6 | Get or set file date and time |
| 2018-12-25T12:01:41.648370134Z | 64 | PC: 12ac9 | Write file or device (Write 185 bytes on handle 5) |
| 2018-12-25T12:01:41.656045749Z | 87 | PC: 12ad7 | Get or set file date and time |
| 2018-12-25T12:01:41.666971828Z | 62 | PC: 12adb | Close file |
| 2018-12-25T12:01:41.676084658Z | 67 | PC: 12ae8 | Get or set file attributes |
| 2018-12-25T12:01:41.687060917Z | 79 | PC: 12a59 | Find next file |
| 2018-12-25T12:01:41.690030336Z | 67 | PC: 12a9a | Get or set file attributes (See above) |
| 2018-12-25T12:01:41.696875267Z | 67 | PC: 12aa6 | Get or set file attributes (See above) |
| 2018-12-25T12:01:41.716628172Z | 61 | PC: 12aac | Open file (See above) |
| 2018-12-25T12:01:41.723997802Z | 87 | PC: 12ab6 | Get or set file date and time (See above) |
| 2018-12-25T12:01:41.733059129Z | 64 | PC: 12ac9 | Write file or device (See above) |
| 2018-12-25T12:01:41.750652061Z | 87 | PC: 12ad7 | Get or set file date and time (See above) |
| 2018-12-25T12:01:41.752554458Z | 62 | PC: 12adb | Close file (See above) |
| 2018-12-25T12:01:41.762155868Z | 67 | PC: 12ae8 | Get or set file attributes (See above) |
| 2018-12-25T12:01:41.773234006Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T12:01:41.776076703Z | 67 | PC: 12a9a | Get or set file attributes (See above) |
| 2018-12-25T12:01:41.782788209Z | 67 | PC: 12aa6 | Get or set file attributes (See above) |
| 2018-12-25T12:01:41.789249653Z | 61 | PC: 12aac | Open file (See above) |
| 2018-12-25T12:01:41.796634028Z | 87 | PC: 12ab6 | Get or set file date and time (See above) |
| 2018-12-25T12:01:41.804615025Z | 64 | PC: 12ac9 | Write file or device (See above) |
| 2018-12-25T12:01:41.809076208Z | 87 | PC: 12ad7 | Get or set file date and time (See above) |
| 2018-12-25T12:01:41.810611971Z | 62 | PC: 12adb | Close file (See above) |
| 2018-12-25T12:01:41.819658934Z | 67 | PC: 12ae8 | Get or set file attributes (See above) |
| 2018-12-25T12:01:41.830992992Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T12:01:41.833855455Z | 67 | PC: 12a9a | Get or set file attributes (See above) |
| 2018-12-25T12:01:41.840450662Z | 67 | PC: 12aa6 | Get or set file attributes (See above) |
| 2018-12-25T12:01:41.851503635Z | 61 | PC: 12aac | Open file (See above) |
| 2018-12-25T12:01:41.855839301Z | 87 | PC: 12ab6 | Get or set file date and time (See above) |
| 2018-12-25T12:01:41.856933312Z | 64 | PC: 12ac9 | Write file or device (See above) |
| 2018-12-25T12:01:41.861607137Z | 87 | PC: 12ad7 | Get or set file date and time (See above) |
| 2018-12-25T12:01:41.862685791Z | 62 | PC: 12adb | Close file (See above) |
| 2018-12-25T12:01:41.867840981Z | 67 | PC: 12ae8 | Get or set file attributes (See above) |
| 2018-12-25T12:01:41.88208025Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T12:01:41.884866935Z | 67 | PC: 12a9a | Get or set file attributes (See above) |
| 2018-12-25T12:01:41.89068291Z | 67 | PC: 12aa6 | Get or set file attributes (See above) |
| 2018-12-25T12:01:41.901649563Z | 61 | PC: 12aac | Open file (See above) |
| 2018-12-25T12:01:41.908269839Z | 87 | PC: 12ab6 | Get or set file date and time (See above) |
| 2018-12-25T12:01:41.90946822Z | 64 | PC: 12ac9 | Write file or device (See above) |
| 2018-12-25T12:01:41.916266922Z | 87 | PC: 12ad7 | Get or set file date and time (See above) |
| 2018-12-25T12:01:41.918034341Z | 62 | PC: 12adb | Close file (See above) |
| 2018-12-25T12:01:41.925932474Z | 67 | PC: 12ae8 | Get or set file attributes (See above) |
| 2018-12-25T12:01:41.940177999Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T12:01:41.943821538Z | 67 | PC: 12a9a | Get or set file attributes (See above) |
| 2018-12-25T12:01:41.94838287Z | 67 | PC: 12aa6 | Get or set file attributes (See above) |
| 2018-12-25T12:01:41.955010195Z | 61 | PC: 12aac | Open file (See above) |
| 2018-12-25T12:01:41.959228234Z | 87 | PC: 12ab6 | Get or set file date and time (See above) |
| 2018-12-25T12:01:41.960258626Z | 64 | PC: 12ac9 | Write file or device (See above) |
| 2018-12-25T12:01:41.965326891Z | 87 | PC: 12ad7 | Get or set file date and time (See above) |
| 2018-12-25T12:01:41.966883573Z | 62 | PC: 12adb | Close file (See above) |
| 2018-12-25T12:01:41.974652143Z | 67 | PC: 12ae8 | Get or set file attributes (See above) |
| 2018-12-25T12:01:41.985167642Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T12:01:41.989644773Z | 67 | PC: 12a9a | Get or set file attributes (See above) |
| 2018-12-25T12:01:41.995733865Z | 67 | PC: 12aa6 | Get or set file attributes (See above) |
| 2018-12-25T12:01:42.009983642Z | 61 | PC: 12aac | Open file (See above) |
| 2018-12-25T12:01:42.017788724Z | 87 | PC: 12ab6 | Get or set file date and time (See above) |
| 2018-12-25T12:01:42.019224326Z | 64 | PC: 12ac9 | Write file or device (See above) |
| 2018-12-25T12:01:42.026498388Z | 87 | PC: 12ad7 | Get or set file date and time (See above) |
| 2018-12-25T12:01:42.028541642Z | 62 | PC: 12adb | Close file (See above) |
| 2018-12-25T12:01:42.036667502Z | 67 | PC: 12ae8 | Get or set file attributes (See above) |
| 2018-12-25T12:01:42.047460881Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T12:01:42.051028341Z | 67 | PC: 12a9a | Get or set file attributes (See above) |
| 2018-12-25T12:01:42.057332051Z | 67 | PC: 12aa6 | Get or set file attributes (See above) |
| 2018-12-25T12:01:42.071466014Z | 61 | PC: 12aac | Open file (See above) |
| 2018-12-25T12:01:42.079291289Z | 87 | PC: 12ab6 | Get or set file date and time (See above) |
| 2018-12-25T12:01:42.08116045Z | 64 | PC: 12ac9 | Write file or device (See above) |
| 2018-12-25T12:01:42.088477541Z | 87 | PC: 12ad7 | Get or set file date and time (See above) |
| 2018-12-25T12:01:42.090339327Z | 62 | PC: 12adb | Close file (See above) |
| 2018-12-25T12:01:42.098233704Z | 67 | PC: 12ae8 | Get or set file attributes (See above) |
| 2018-12-25T12:01:42.108658991Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T12:01:42.111619648Z | 42 | PC: 12a64 | Get date 0x12a64: cmp al, 2 0x12a66: je 0x12a6c 0x12a68: mov ah, 0x4c 0x12a6a: int 0x21 0x12a6c: mov byte ptr [0x1b5], 0 0x12a71: jmp 0x12a73 0x12a73: mov al, byte ptr [0x1b6] 0x12a76: mov cx, 0xa0 0x12a79: mov dx, 0 0x12a7c: mov bx, 0 0x12a7f: int 0x26 0x12a81: inc byte ptr [0x1b5] 0x12a85: cmp byte ptr [0x1b5], 0xa 0x12a8a: je 0x12a8e 0x12a8c: jne 0x12a73 0x12a8e: mov ah, 0x4c 0x12a90: int 0x21 0x12a92: mov dx, 0x9e 0x12a95: mov ax, 0x4300 0x12a98: int 0x21 |
| 2018-12-25T12:01:42.114498853Z | 76 | PC: 12a92 | Terminate with return code (Return code = '7') |
{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":7447,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:01:42.247033601Z | 78 | PC: 12a4a | Find first file |
| 2018-12-25T12:01:42.252676746Z | 67 | PC: 12a9a | Get or set file attributes |
| 2018-12-25T12:01:42.258858131Z | 67 | PC: 12aa6 | Get or set file attributes |
| 2018-12-25T12:01:42.274877746Z | 61 | PC: 12aac | Open file (Filename = 'SLEEP.COM') |
| 2018-12-25T12:01:42.281860027Z | 87 | PC: 12ab6 | Get or set file date and time |
| 2018-12-25T12:01:42.283812357Z | 64 | PC: 12ac9 | Write file or device (Write 185 bytes on handle 5) |
| 2018-12-25T12:01:42.290157285Z | 87 | PC: 12ad7 | Get or set file date and time |
| 2018-12-25T12:01:42.291844425Z | 62 | PC: 12adb | Close file |
| 2018-12-25T12:01:42.30000901Z | 67 | PC: 12ae8 | Get or set file attributes |
| 2018-12-25T12:01:42.31303355Z | 79 | PC: 12a59 | Find next file |
| 2018-12-25T12:01:42.315507474Z | 67 | PC: 12a9a | Get or set file attributes (See above) |
| 2018-12-25T12:01:42.321313161Z | 67 | PC: 12aa6 | Get or set file attributes (See above) |
| 2018-12-25T12:01:42.330654996Z | 61 | PC: 12aac | Open file (See above) |
| 2018-12-25T12:01:42.337350187Z | 87 | PC: 12ab6 | Get or set file date and time (See above) |
| 2018-12-25T12:01:42.339081646Z | 64 | PC: 12ac9 | Write file or device (See above) |
| 2018-12-25T12:01:42.345383387Z | 87 | PC: 12ad7 | Get or set file date and time (See above) |
| 2018-12-25T12:01:42.346665185Z | 62 | PC: 12adb | Close file (See above) |
| 2018-12-25T12:01:42.354726539Z | 67 | PC: 12ae8 | Get or set file attributes (See above) |
| 2018-12-25T12:01:42.366955794Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T12:01:42.369581014Z | 67 | PC: 12a9a | Get or set file attributes (See above) |
| 2018-12-25T12:01:42.380919764Z | 67 | PC: 12aa6 | Get or set file attributes (See above) |
| 2018-12-25T12:01:42.390648001Z | 61 | PC: 12aac | Open file (See above) |
| 2018-12-25T12:01:42.396974097Z | 87 | PC: 12ab6 | Get or set file date and time (See above) |
| 2018-12-25T12:01:42.398904386Z | 64 | PC: 12ac9 | Write file or device (See above) |
| 2018-12-25T12:01:42.405267672Z | 87 | PC: 12ad7 | Get or set file date and time (See above) |
| 2018-12-25T12:01:42.406555848Z | 62 | PC: 12adb | Close file (See above) |
| 2018-12-25T12:01:42.414374237Z | 67 | PC: 12ae8 | Get or set file attributes (See above) |
| 2018-12-25T12:01:42.423997204Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T12:01:42.426476357Z | 67 | PC: 12a9a | Get or set file attributes (See above) |
| 2018-12-25T12:01:42.437611858Z | 67 | PC: 12aa6 | Get or set file attributes (See above) |
| 2018-12-25T12:01:42.44704471Z | 61 | PC: 12aac | Open file (See above) |
| 2018-12-25T12:01:42.453354003Z | 87 | PC: 12ab6 | Get or set file date and time (See above) |
| 2018-12-25T12:01:42.455608631Z | 64 | PC: 12ac9 | Write file or device (See above) |
| 2018-12-25T12:01:42.461950244Z | 87 | PC: 12ad7 | Get or set file date and time (See above) |
| 2018-12-25T12:01:42.463271017Z | 62 | PC: 12adb | Close file (See above) |
| 2018-12-25T12:01:42.470764238Z | 67 | PC: 12ae8 | Get or set file attributes (See above) |
| 2018-12-25T12:01:42.480363677Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T12:01:42.48273521Z | 67 | PC: 12a9a | Get or set file attributes (See above) |
| 2018-12-25T12:01:42.493288244Z | 67 | PC: 12aa6 | Get or set file attributes (See above) |
| 2018-12-25T12:01:42.505515551Z | 61 | PC: 12aac | Open file (See above) |
| 2018-12-25T12:01:42.511869819Z | 87 | PC: 12ab6 | Get or set file date and time (See above) |
| 2018-12-25T12:01:42.513692954Z | 64 | PC: 12ac9 | Write file or device (See above) |
| 2018-12-25T12:01:42.519934944Z | 87 | PC: 12ad7 | Get or set file date and time (See above) |
| 2018-12-25T12:01:42.521103439Z | 62 | PC: 12adb | Close file (See above) |
| 2018-12-25T12:01:42.528497875Z | 67 | PC: 12ae8 | Get or set file attributes (See above) |
| 2018-12-25T12:01:42.537937919Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T12:01:42.540371306Z | 67 | PC: 12a9a | Get or set file attributes (See above) |
| 2018-12-25T12:01:42.546749749Z | 67 | PC: 12aa6 | Get or set file attributes (See above) |
| 2018-12-25T12:01:42.558797919Z | 61 | PC: 12aac | Open file (See above) |
| 2018-12-25T12:01:42.565632241Z | 87 | PC: 12ab6 | Get or set file date and time (See above) |
| 2018-12-25T12:01:42.566941795Z | 64 | PC: 12ac9 | Write file or device (See above) |
| 2018-12-25T12:01:42.573207565Z | 87 | PC: 12ad7 | Get or set file date and time (See above) |
| 2018-12-25T12:01:42.574367575Z | 62 | PC: 12adb | Close file (See above) |
| 2018-12-25T12:01:42.750649861Z | 67 | PC: 12ae8 | Get or set file attributes (See above) |
| 2018-12-25T12:01:42.765529515Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T12:01:42.768418126Z | 67 | PC: 12a9a | Get or set file attributes (See above) |
| 2018-12-25T12:01:42.773973102Z | 67 | PC: 12aa6 | Get or set file attributes (See above) |
| 2018-12-25T12:01:42.786632511Z | 61 | PC: 12aac | Open file (See above) |
| 2018-12-25T12:01:42.798570271Z | 87 | PC: 12ab6 | Get or set file date and time (See above) |
| 2018-12-25T12:01:42.800058345Z | 64 | PC: 12ac9 | Write file or device (See above) |
| 2018-12-25T12:01:42.806988051Z | 87 | PC: 12ad7 | Get or set file date and time (See above) |
| 2018-12-25T12:01:42.808329117Z | 62 | PC: 12adb | Close file (See above) |
| 2018-12-25T12:01:42.853456678Z | 67 | PC: 12ae8 | Get or set file attributes (See above) |
| 2018-12-25T12:01:42.869129531Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T12:01:42.871503278Z | 67 | PC: 12a9a | Get or set file attributes (See above) |
| 2018-12-25T12:01:42.876744068Z | 67 | PC: 12aa6 | Get or set file attributes (See above) |
| 2018-12-25T12:01:42.896295963Z | 61 | PC: 12aac | Open file (See above) |
| 2018-12-25T12:01:42.907234674Z | 87 | PC: 12ab6 | Get or set file date and time (See above) |
| 2018-12-25T12:01:42.908543888Z | 64 | PC: 12ac9 | Write file or device (See above) |
| 2018-12-25T12:01:42.915617699Z | 87 | PC: 12ad7 | Get or set file date and time (See above) |
| 2018-12-25T12:01:42.916992095Z | 62 | PC: 12adb | Close file (See above) |
| 2018-12-25T12:01:42.937841505Z | 67 | PC: 12ae8 | Get or set file attributes (See above) |
| 2018-12-25T12:01:42.95912218Z | 79 | PC: 12a59 | Find next file (See above) |
| 2018-12-25T12:01:42.961797811Z | 42 | PC: 12a64 | Get date 0x12a64: cmp al, 2 0x12a66: je 0x12a6c 0x12a68: mov ah, 0x4c 0x12a6a: int 0x21 0x12a6c: mov byte ptr [0x1b5], 0 0x12a71: jmp 0x12a73 0x12a73: mov al, byte ptr [0x1b6] 0x12a76: mov cx, 0xa0 0x12a79: mov dx, 0 0x12a7c: mov bx, 0 0x12a7f: int 0x26 0x12a81: inc byte ptr [0x1b5] 0x12a85: cmp byte ptr [0x1b5], 0xa 0x12a8a: je 0x12a8e 0x12a8c: jne 0x12a73 0x12a8e: mov ah, 0x4c 0x12a90: int 0x21 0x12a92: mov dx, 0x9e 0x12a95: mov ax, 0x4300 0x12a98: int 0x21 |
| 2018-12-25T12:01:42.964200637Z | 76 | PC: 12a6c | Terminate with return code (Return code = '3') |