.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T22:54:59.09402133Z | 26 | PC: 14106 | Set disk transfer address |
| 2018-12-17T22:54:59.09588591Z | 78 | PC: 14157 | Find first file |
| 2018-12-17T22:54:59.102864189Z | 61 | PC: 14169 | Open file (Filename = 'SLEEP.COM') |
| 2018-12-17T22:54:59.109573018Z | 63 | PC: 14178 | Read file or device (Read 4 bytes on handle 5) |
| 2018-12-17T22:54:59.117127419Z | 66 | PC: 14199 | Move file pointer |
| 2018-12-17T22:54:59.119358828Z | 64 | PC: 141ea | Write file or device (Write 4 bytes on handle 5) |
| 2018-12-17T22:54:59.122750967Z | 64 | PC: 141b0 | Write file or device (Write 258 bytes on handle 5) |
| 2018-12-17T22:54:59.147778228Z | 66 | PC: 141b8 | Move file pointer |
| 2018-12-17T22:54:59.149457147Z | 64 | PC: 141ea | Write file or device (Write 4 bytes on handle 5) |
| 2018-12-17T22:54:59.156400341Z | 87 | PC: 14146 | Get or set file date and time |
| 2018-12-17T22:54:59.158589055Z | 62 | PC: 1414a | Close file |
| 2018-12-17T22:54:59.166433726Z | 79 | PC: 14157 | Find next file |
| 2018-12-17T22:54:59.168931861Z | 61 | PC: 14169 | Open file (Filename = 'PRINT.COM') |
| 2018-12-17T22:54:59.176598035Z | 63 | PC: 14178 | Read file or device (Read 4 bytes on handle 5) |
| 2018-12-17T22:54:59.183867519Z | 87 | PC: 14146 | Get or set file date and time |
| 2018-12-17T22:54:59.186296394Z | 62 | PC: 1414a | Close file |
| 2018-12-17T22:54:59.193937635Z | 79 | PC: 14157 | Find next file |
| 2018-12-17T22:54:59.197689104Z | 61 | PC: 14169 | Open file (Filename = 'HELLO.COM') |
| 2018-12-17T22:54:59.204371688Z | 63 | PC: 14178 | Read file or device (Read 4 bytes on handle 5) |
| 2018-12-17T22:54:59.210918952Z | 87 | PC: 14146 | Get or set file date and time |
| 2018-12-17T22:54:59.213398142Z | 62 | PC: 1414a | Close file |
| 2018-12-17T22:54:59.220635731Z | 79 | PC: 14157 | Find next file |
| 2018-12-17T22:54:59.223418223Z | 61 | PC: 14169 | Open file (Filename = 'PHANG.COM') |
| 2018-12-17T22:54:59.23160764Z | 63 | PC: 14178 | Read file or device (Read 4 bytes on handle 5) |
| 2018-12-17T22:54:59.238542641Z | 87 | PC: 14146 | Get or set file date and time |
| 2018-12-17T22:54:59.240309487Z | 62 | PC: 1414a | Close file |
| 2018-12-17T22:54:59.248091474Z | 79 | PC: 14157 | Find next file |
| 2018-12-17T22:54:59.250952662Z | 61 | PC: 14169 | Open file (Filename = 'PRINTA~1.COM') |
| 2018-12-17T22:54:59.257659526Z | 63 | PC: 14178 | Read file or device (Read 4 bytes on handle 5) |
| 2018-12-17T22:54:59.263575848Z | 87 | PC: 14146 | Get or set file date and time |
| 2018-12-17T22:54:59.264705848Z | 62 | PC: 1414a | Close file |
| 2018-12-17T22:54:59.269213002Z | 79 | PC: 14157 | Find next file |
| 2018-12-17T22:54:59.272844154Z | 61 | PC: 14169 | Open file (Filename = 'MANDEL.COM') |
| 2018-12-17T22:54:59.279324831Z | 63 | PC: 14178 | Read file or device (Read 4 bytes on handle 5) |
| 2018-12-17T22:54:59.285449237Z | 66 | PC: 14199 | Move file pointer |
| 2018-12-17T22:54:59.287512098Z | 64 | PC: 141ea | Write file or device (Write 4 bytes on handle 5) |
| 2018-12-17T22:54:59.290149715Z | 64 | PC: 141b0 | Write file or device (Write 258 bytes on handle 5) |
| 2018-12-17T22:54:59.298010257Z | 66 | PC: 141b8 | Move file pointer |
| 2018-12-17T22:54:59.299935356Z | 64 | PC: 141ea | Write file or device (Write 4 bytes on handle 5) |
| 2018-12-17T22:54:59.306825644Z | 87 | PC: 14146 | Get or set file date and time |
| 2018-12-17T22:54:59.308251894Z | 62 | PC: 1414a | Close file |
| 2018-12-17T22:54:59.316450897Z | 79 | PC: 14157 | Find next file |
| 2018-12-17T22:54:59.319141596Z | 61 | PC: 14169 | Open file (Filename = 'PAH.COM') |
| 2018-12-17T22:54:59.32550765Z | 63 | PC: 14178 | Read file or device (Read 4 bytes on handle 5) |
| 2018-12-17T22:54:59.332599997Z | 87 | PC: 14146 | Get or set file date and time |
| 2018-12-17T22:54:59.3343593Z | 62 | PC: 1414a | Close file |
| 2018-12-17T22:54:59.341551504Z | 79 | PC: 14157 | Find next file |
| 2018-12-17T22:54:59.344853379Z | 61 | PC: 14169 | Open file (Filename = 'TEST.COM') |
| 2018-12-17T22:54:59.351430533Z | 63 | PC: 14178 | Read file or device (Read 4 bytes on handle 5) |
| 2018-12-17T22:54:59.353960142Z | 87 | PC: 14146 | Get or set file date and time |
| 2018-12-17T22:54:59.356161279Z | 62 | PC: 1414a | Close file |
| 2018-12-17T22:54:59.365382636Z | 79 | PC: 14157 | Find next file |
| 2018-12-17T22:54:59.368004995Z | 26 | PC: 1411f | Set disk transfer address |
| 2018-12-17T22:54:59.369731118Z | 48 | PC: 12a63 | Get DOS version |
| 2018-12-17T22:54:59.37181193Z | 9 | PC: 12a7a | Display string (String= ' --=[ Selfchecking AntiStealth Goat COM/EXE file, 01/06/01 ]=------------------ (c) 1995-2001 by ROSE SWE, Dipl.-Ing. Ralph Roth - Version 1.18 - Freeware ') |
| 2018-12-17T22:54:59.381766397Z | 61 | PC: 12cb7 | Open file (Filename = '') |
| 2018-12-17T22:54:59.388644653Z | 9 | PC: 12a88 | Display string (String= 'Self test: ') |
| 2018-12-17T22:54:59.391756405Z | 93 | PC: 12b24 | File sharing functions |
| 2018-12-17T22:54:59.393830033Z | 9 | PC: 12b03 | Display string (String= 'Size change=+0106h/00262d. Virus might be activ? ') |
| 2018-12-17T22:54:59.399346891Z | 76 | PC: 12b09 | Terminate with return code (Return code = '1') |