.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T22:57:45.82040552Z | 26 | PC: 1410b | Set disk transfer address |
| 2018-12-17T22:57:45.822107405Z | 78 | PC: 14149 | Find first file |
| 2018-12-17T22:57:45.828240857Z | 61 | PC: 14155 | Open file (Filename = 'SLEEP.COM') |
| 2018-12-17T22:57:45.834817534Z | 63 | PC: 14164 | Read file or device (Read 4 bytes on handle 5) |
| 2018-12-17T22:57:45.842325452Z | 66 | PC: 1417b | Move file pointer |
| 2018-12-17T22:57:45.84411154Z | 64 | PC: 1418f | Write file or device (Write 4 bytes on handle 5) |
| 2018-12-17T22:57:45.847096617Z | 64 | PC: 1419a | Write file or device (Write 437 bytes on handle 5) |
| 2018-12-17T22:57:45.86209072Z | 66 | PC: 141a3 | Move file pointer |
| 2018-12-17T22:57:45.863213082Z | 64 | PC: 141c1 | Write file or device (Write 4 bytes on handle 5) |
| 2018-12-17T22:57:45.867385003Z | 62 | PC: 1413d | Close file |
| 2018-12-17T22:57:45.884566844Z | 79 | PC: 14149 | Find next file |
| 2018-12-17T22:57:45.887544745Z | 61 | PC: 14155 | Open file (Filename = 'PRINT.COM') |
| 2018-12-17T22:57:45.893877168Z | 63 | PC: 14164 | Read file or device (Read 4 bytes on handle 5) |
| 2018-12-17T22:57:45.904961194Z | 66 | PC: 1417b | Move file pointer |
| 2018-12-17T22:57:45.906067922Z | 64 | PC: 1418f | Write file or device (Write 4 bytes on handle 5) |
| 2018-12-17T22:57:45.907862135Z | 64 | PC: 1419a | Write file or device (Write 437 bytes on handle 5) |
| 2018-12-17T22:57:45.910495887Z | 66 | PC: 141a3 | Move file pointer |
| 2018-12-17T22:57:45.912354466Z | 64 | PC: 141c1 | Write file or device (Write 4 bytes on handle 5) |
| 2018-12-17T22:57:45.915050564Z | 62 | PC: 1413d | Close file |
| 2018-12-17T22:57:45.922824613Z | 79 | PC: 14149 | Find next file |
| 2018-12-17T22:57:45.926619482Z | 61 | PC: 14155 | Open file (Filename = 'HELLO.COM') |
| 2018-12-17T22:57:45.932858122Z | 63 | PC: 14164 | Read file or device (Read 4 bytes on handle 5) |
| 2018-12-17T22:57:45.940814722Z | 66 | PC: 1417b | Move file pointer |
| 2018-12-17T22:57:45.948303712Z | 64 | PC: 1418f | Write file or device (Write 4 bytes on handle 5) |
| 2018-12-17T22:57:45.950942977Z | 64 | PC: 1419a | Write file or device (Write 437 bytes on handle 5) |
| 2018-12-17T22:57:45.958742733Z | 66 | PC: 141a3 | Move file pointer |
| 2018-12-17T22:57:45.960444674Z | 64 | PC: 141c1 | Write file or device (Write 4 bytes on handle 5) |
| 2018-12-17T22:57:45.967164588Z | 62 | PC: 1413d | Close file |
| 2018-12-17T22:57:45.975541644Z | 79 | PC: 14149 | Find next file |
| 2018-12-17T22:57:45.979553394Z | 61 | PC: 14155 | Open file (Filename = 'PHANG.COM') |
| 2018-12-17T22:57:45.986244331Z | 63 | PC: 14164 | Read file or device (Read 4 bytes on handle 5) |
| 2018-12-17T22:57:45.992770621Z | 66 | PC: 1417b | Move file pointer |
| 2018-12-17T22:57:45.9952812Z | 64 | PC: 1418f | Write file or device (Write 4 bytes on handle 5) |
| 2018-12-17T22:57:45.998685012Z | 64 | PC: 1419a | Write file or device (Write 437 bytes on handle 5) |
| 2018-12-17T22:57:46.001594702Z | 66 | PC: 141a3 | Move file pointer |
| 2018-12-17T22:57:46.003470968Z | 64 | PC: 141c1 | Write file or device (Write 4 bytes on handle 5) |
| 2018-12-17T22:57:46.006653353Z | 62 | PC: 1413d | Close file |
| 2018-12-17T22:57:46.014871715Z | 79 | PC: 14149 | Find next file |
| 2018-12-17T22:57:46.017975333Z | 61 | PC: 14155 | Open file (Filename = 'PRINTA~1.COM') |
| 2018-12-17T22:57:46.025159998Z | 63 | PC: 14164 | Read file or device (Read 4 bytes on handle 5) |
| 2018-12-17T22:57:46.031993696Z | 66 | PC: 1417b | Move file pointer |
| 2018-12-17T22:57:46.033768918Z | 64 | PC: 1418f | Write file or device (Write 4 bytes on handle 5) |
| 2018-12-17T22:57:46.051548388Z | 64 | PC: 1419a | Write file or device (Write 437 bytes on handle 5) |
| 2018-12-17T22:57:46.054128007Z | 66 | PC: 141a3 | Move file pointer |
| 2018-12-17T22:57:46.055416052Z | 64 | PC: 141c1 | Write file or device (Write 4 bytes on handle 5) |
| 2018-12-17T22:57:46.058441436Z | 62 | PC: 1413d | Close file |
| 2018-12-17T22:57:46.079862371Z | 79 | PC: 14149 | Find next file |
| 2018-12-17T22:57:46.082519418Z | 61 | PC: 14155 | Open file (Filename = 'MANDEL.COM') |
| 2018-12-17T22:57:46.089896867Z | 63 | PC: 14164 | Read file or device (Read 4 bytes on handle 5) |
| 2018-12-17T22:57:46.109970635Z | 66 | PC: 1417b | Move file pointer |
| 2018-12-17T22:57:46.111731955Z | 64 | PC: 1418f | Write file or device (Write 4 bytes on handle 5) |
| 2018-12-17T22:57:46.115961906Z | 64 | PC: 1419a | Write file or device (Write 437 bytes on handle 5) |
| 2018-12-17T22:57:46.12443091Z | 66 | PC: 141a3 | Move file pointer |
| 2018-12-17T22:57:46.126187571Z | 64 | PC: 141c1 | Write file or device (Write 4 bytes on handle 5) |
| 2018-12-17T22:57:46.134066712Z | 62 | PC: 1413d | Close file |
| 2018-12-17T22:57:46.142280771Z | 79 | PC: 14149 | Find next file |
| 2018-12-17T22:57:46.144766312Z | 61 | PC: 14155 | Open file (Filename = 'PAH.COM') |
| 2018-12-17T22:57:46.152713081Z | 63 | PC: 14164 | Read file or device (Read 4 bytes on handle 5) |
| 2018-12-17T22:57:46.159521944Z | 66 | PC: 1417b | Move file pointer |
| 2018-12-17T22:57:46.161404261Z | 64 | PC: 1418f | Write file or device (Write 4 bytes on handle 5) |
| 2018-12-17T22:57:46.165469347Z | 64 | PC: 1419a | Write file or device (Write 437 bytes on handle 5) |
| 2018-12-17T22:57:46.168826133Z | 66 | PC: 141a3 | Move file pointer |
| 2018-12-17T22:57:46.170738921Z | 64 | PC: 141c1 | Write file or device (Write 4 bytes on handle 5) |
| 2018-12-17T22:57:46.175133084Z | 62 | PC: 1413d | Close file |
| 2018-12-17T22:57:46.184285661Z | 79 | PC: 14149 | Find next file |
| 2018-12-17T22:57:46.187506429Z | 61 | PC: 14155 | Open file (Filename = 'TEST.COM') |
| 2018-12-17T22:57:46.195805768Z | 63 | PC: 14164 | Read file or device (Read 4 bytes on handle 5) |
| 2018-12-17T22:57:46.198949845Z | 62 | PC: 1413d | Close file |
| 2018-12-17T22:57:46.20120207Z | 79 | PC: 14149 | Find next file |
| 2018-12-17T22:57:46.205247729Z | 26 | PC: 1411f | Set disk transfer address |
| 2018-12-17T22:57:46.206808133Z | 48 | PC: 12a63 | Get DOS version |
| 2018-12-17T22:57:46.20827878Z | 9 | PC: 12a7a | Display string (String= ' --=[ Selfchecking AntiStealth Goat COM/EXE file, 01/06/01 ]=------------------ (c) 1995-2001 by ROSE SWE, Dipl.-Ing. Ralph Roth - Version 1.18 - Freeware ') |
| 2018-12-17T22:57:46.218717329Z | 61 | PC: 12cb7 | Open file (Filename = '') |
| 2018-12-17T22:57:46.225551394Z | 9 | PC: 12a88 | Display string (String= 'Self test: ') |
| 2018-12-17T22:57:46.230225668Z | 93 | PC: 12b24 | File sharing functions |
| 2018-12-17T22:57:46.23292714Z | 9 | PC: 12b03 | Display string (String= 'Size change=+01B9h/00441d. Virus might be activ? ') |
| 2018-12-17T22:57:46.238923649Z | 76 | PC: 12b09 | Terminate with return code (Return code = '1') |