.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T23:07:18.125693315Z | 78 | PC: 12e4a | Find first file |
| 2018-12-17T23:07:18.13044912Z | 67 | PC: 12e57 | Get or set file attributes |
| 2018-12-17T23:07:18.133581725Z | 61 | PC: 12e5c | Open file (Filename = 'SLEEP.COM') |
| 2018-12-17T23:07:18.142842441Z | 63 | PC: 12ead | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-17T23:07:18.162272179Z | 66 | PC: 12eb6 | Move file pointer |
| 2018-12-17T23:07:18.163853462Z | 66 | PC: 12ecd | Move file pointer |
| 2018-12-17T23:07:18.165293077Z | 64 | PC: 12ed9 | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T23:07:18.177998307Z | 66 | PC: 12ee2 | Move file pointer |
| 2018-12-17T23:07:18.179840259Z | 64 | PC: 12eeb | Write file or device (Write 200 bytes on handle 5) |
| 2018-12-17T23:07:18.196188156Z | 62 | PC: 12eef | Close file |
| 2018-12-17T23:07:18.204567294Z | 79 | PC: 12e67 | Find next file |
| 2018-12-17T23:07:18.207689934Z | 67 | PC: 12e74 | Get or set file attributes |
| 2018-12-17T23:07:18.223340041Z | 61 | PC: 12e79 | Open file (Filename = 'PRINT.COM') |
| 2018-12-17T23:07:18.231956977Z | 63 | PC: 12ead | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-17T23:07:18.240311985Z | 66 | PC: 12eb6 | Move file pointer |
| 2018-12-17T23:07:18.24245666Z | 66 | PC: 12ecd | Move file pointer |
| 2018-12-17T23:07:18.243988934Z | 64 | PC: 12ed9 | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T23:07:18.24723148Z | 66 | PC: 12ee2 | Move file pointer |
| 2018-12-17T23:07:18.248929709Z | 64 | PC: 12eeb | Write file or device (Write 200 bytes on handle 5) |
| 2018-12-17T23:07:18.251137741Z | 62 | PC: 12eef | Close file |
| 2018-12-17T23:07:18.259108497Z | 79 | PC: 12e67 | Find next file |
| 2018-12-17T23:07:18.262252784Z | 67 | PC: 12e74 | Get or set file attributes |
| 2018-12-17T23:07:18.271816924Z | 61 | PC: 12e79 | Open file (Filename = 'HELLO.COM') |
| 2018-12-17T23:07:18.277949809Z | 63 | PC: 12ead | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-17T23:07:18.282046008Z | 66 | PC: 12eb6 | Move file pointer |
| 2018-12-17T23:07:18.283172295Z | 66 | PC: 12ecd | Move file pointer |
| 2018-12-17T23:07:18.285263172Z | 64 | PC: 12ed9 | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T23:07:18.287098394Z | 66 | PC: 12ee2 | Move file pointer |
| 2018-12-17T23:07:18.288200876Z | 64 | PC: 12eeb | Write file or device (Write 200 bytes on handle 5) |
| 2018-12-17T23:07:18.292629624Z | 62 | PC: 12eef | Close file |
| 2018-12-17T23:07:18.297928782Z | 79 | PC: 12e67 | Find next file |
| 2018-12-17T23:07:18.29980403Z | 67 | PC: 12e74 | Get or set file attributes |
| 2018-12-17T23:07:18.307861019Z | 61 | PC: 12e79 | Open file (Filename = 'PHANG.COM') |
| 2018-12-17T23:07:18.313325076Z | 63 | PC: 12ead | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-17T23:07:18.319545548Z | 66 | PC: 12eb6 | Move file pointer |
| 2018-12-17T23:07:18.321267498Z | 66 | PC: 12ecd | Move file pointer |
| 2018-12-17T23:07:18.323174678Z | 64 | PC: 12ed9 | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T23:07:18.325955318Z | 66 | PC: 12ee2 | Move file pointer |
| 2018-12-17T23:07:18.327746136Z | 64 | PC: 12eeb | Write file or device (Write 200 bytes on handle 5) |
| 2018-12-17T23:07:18.331830332Z | 62 | PC: 12eef | Close file |
| 2018-12-17T23:07:18.337789563Z | 79 | PC: 12e67 | Find next file |
| 2018-12-17T23:07:18.339510748Z | 67 | PC: 12e74 | Get or set file attributes |
| 2018-12-17T23:07:18.346266043Z | 61 | PC: 12e79 | Open file (Filename = 'PRINTA~1.COM') |
| 2018-12-17T23:07:18.352697104Z | 63 | PC: 12ead | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-17T23:07:18.358860842Z | 66 | PC: 12eb6 | Move file pointer |
| 2018-12-17T23:07:18.360774149Z | 66 | PC: 12ecd | Move file pointer |
| 2018-12-17T23:07:18.362190989Z | 64 | PC: 12ed9 | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T23:07:18.36476142Z | 66 | PC: 12ee2 | Move file pointer |
| 2018-12-17T23:07:18.367245895Z | 64 | PC: 12eeb | Write file or device (Write 200 bytes on handle 5) |
| 2018-12-17T23:07:18.369953087Z | 62 | PC: 12eef | Close file |
| 2018-12-17T23:07:18.377717543Z | 79 | PC: 12e67 | Find next file |
| 2018-12-17T23:07:18.380397588Z | 67 | PC: 12e74 | Get or set file attributes |
| 2018-12-17T23:07:18.389823957Z | 61 | PC: 12e79 | Open file (Filename = 'MANDEL.COM') |
| 2018-12-17T23:07:18.39622641Z | 63 | PC: 12ead | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-17T23:07:18.403205204Z | 66 | PC: 12eb6 | Move file pointer |
| 2018-12-17T23:07:18.404517153Z | 66 | PC: 12ecd | Move file pointer |
| 2018-12-17T23:07:18.405771586Z | 64 | PC: 12ed9 | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T23:07:18.409237016Z | 66 | PC: 12ee2 | Move file pointer |
| 2018-12-17T23:07:18.410519059Z | 64 | PC: 12eeb | Write file or device (Write 200 bytes on handle 5) |
| 2018-12-17T23:07:18.418203541Z | 62 | PC: 12eef | Close file |
| 2018-12-17T23:07:18.426782495Z | 79 | PC: 12e67 | Find next file |
| 2018-12-17T23:07:18.429398085Z | 67 | PC: 12e74 | Get or set file attributes |
| 2018-12-17T23:07:18.439128487Z | 61 | PC: 12e79 | Open file (Filename = 'PAH.COM') |
| 2018-12-17T23:07:18.448109637Z | 63 | PC: 12ead | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-17T23:07:18.454914398Z | 66 | PC: 12eb6 | Move file pointer |
| 2018-12-17T23:07:18.456539622Z | 66 | PC: 12ecd | Move file pointer |
| 2018-12-17T23:07:18.458326216Z | 64 | PC: 12ed9 | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T23:07:18.467717295Z | 66 | PC: 12ee2 | Move file pointer |
| 2018-12-17T23:07:18.46934607Z | 64 | PC: 12eeb | Write file or device (Write 200 bytes on handle 5) |
| 2018-12-17T23:07:18.472194163Z | 62 | PC: 12eef | Close file |
| 2018-12-17T23:07:18.481260436Z | 79 | PC: 12e67 | Find next file |
| 2018-12-17T23:07:18.483754562Z | 9 | PC: 12b36 | Display string (String= ' YOU HAVE JUST RELEASED A VIRUS! Entry=3h, Size=1000, Stack=0, Overlay(0)=0 not loaded, Fill=FFFF* COM file, code at start, JMP at start, SS:SP != CS:IP ') |
| 2018-12-17T23:07:18.49454545Z | 76 | PC: 12b3a | Terminate with return code (Return code = '36') |