Sample viewer

{"DateBased":true,"Day":8,"Month":10,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":816,"SideJobID":0}

.

GIF

Syscalls:

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":816,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:41:55.488782464Z	42	PC: 160ff | Get date 0x160ff: cmp dx, 0xa08 0x16103: jne 0x16159 0x16105: mov ax, 0x3d02 0x16108: lea dx, word ptr [bp + 0x291] 0x1610c: int 0x21 0x1610e: mov bx, ax 0x16110: mov ax, 0x4200 0x16113: xor cx, cx 0x16115: mov dx, cx 0x16117: int 0x21 0x16119: mov ah, 0x40 0x1611b: mov cx, 3 0x1611e: lea dx, word ptr [bp + 0x28e] 0x16122: int 0x21 0x16124: mov ax, 0x4202 0x16127: xor cx, cx 0x16129: mov dx, cx 0x1612b: int 0x21 0x1612d: sub ax, 0x19b 0x16130: mov dx, ax
2018-12-25T11:41:55.491298821Z	78	PC: 1617b | Find first file
2018-12-25T11:41:55.496974324Z	61	PC: 16194 | Open file (Filename = 'SLEEP.COM')
2018-12-25T11:41:55.503097168Z	66	PC: 1619b | Move file pointer
2018-12-25T11:41:55.50525986Z	66	PC: 161a0 | Move file pointer
2018-12-25T11:41:55.506480873Z	66	PC: 161aa | Move file pointer
2018-12-25T11:41:55.507649902Z	63	PC: 161b6 | Read file or device (Read 3 bytes on handle 5)
2018-12-25T11:41:55.509661027Z	66	PC: 161e3 | Move file pointer
2018-12-25T11:41:55.510877035Z	63	PC: 161ef | Read file or device (Read 3 bytes on handle 5)
2018-12-25T11:41:55.516857569Z	66	PC: 16202 | Move file pointer
2018-12-25T11:41:55.518473639Z	64	PC: 1620d | Write file or device (Write 3 bytes on handle 5)
2018-12-25T11:41:55.521099798Z	66	PC: 16216 | Move file pointer
2018-12-25T11:41:55.522360219Z	64	PC: 16221 | Write file or device (Write 411 bytes on handle 5)
2018-12-25T11:41:55.537549454Z	62	PC: 16225 | Close file
2018-12-25T11:41:55.545606621Z	9	PC: 12a47 | Display string (String= '�THIS IS A GOAT FILE�-D11nmdc-  [13.03.2002] D11N009.COM > 14.000 (36B0h) ... ')