.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T23:11:03.668798796Z | 78 | PC: 12a79 | Find first file |
| 2018-12-17T23:11:03.676501274Z | 67 | PC: 12a86 | Get or set file attributes |
| 2018-12-17T23:11:03.698698418Z | 61 | PC: 12a8b | Open file (Filename = 'SLEEP.COM') |
| 2018-12-17T23:11:03.706913747Z | 63 | PC: 12a96 | Read file or device (Read 64685 bytes on handle 5) |
| 2018-12-17T23:11:03.714564241Z | 66 | PC: 12ab4 | Move file pointer |
| 2018-12-17T23:11:03.716748667Z | 64 | PC: 12abc | Write file or device (Write 205 bytes on handle 5) |
| 2018-12-17T23:11:03.720364795Z | 64 | PC: 12ac6 | Write file or device (Write 407 bytes on handle 5) |
| 2018-12-17T23:11:03.729862278Z | 87 | PC: 12ad3 | Get or set file date and time |
| 2018-12-17T23:11:03.742255486Z | 62 | PC: 12ad7 | Close file |
| 2018-12-17T23:11:03.752363407Z | 67 | PC: 12ae2 | Get or set file attributes |
| 2018-12-17T23:11:03.764659112Z | 79 | PC: 12a79 | Find next file |
| 2018-12-17T23:11:03.768809213Z | 67 | PC: 12a86 | Get or set file attributes |
| 2018-12-17T23:11:03.7810939Z | 61 | PC: 12a8b | Open file (Filename = 'PRINT.COM') |
| 2018-12-17T23:11:03.789128996Z | 63 | PC: 12a96 | Read file or device (Read 64685 bytes on handle 5) |
| 2018-12-17T23:11:03.796720445Z | 66 | PC: 12ab4 | Move file pointer |
| 2018-12-17T23:11:03.799116534Z | 64 | PC: 12abc | Write file or device (Write 205 bytes on handle 5) |
| 2018-12-17T23:11:03.802576994Z | 64 | PC: 12ac6 | Write file or device (Write 27 bytes on handle 5) |
| 2018-12-17T23:11:03.805626404Z | 87 | PC: 12ad3 | Get or set file date and time |
| 2018-12-17T23:11:03.808449985Z | 62 | PC: 12ad7 | Close file |
| 2018-12-17T23:11:03.817032076Z | 67 | PC: 12ae2 | Get or set file attributes |
| 2018-12-17T23:11:03.828649665Z | 79 | PC: 12a79 | Find next file |
| 2018-12-17T23:11:03.832521558Z | 67 | PC: 12a86 | Get or set file attributes |
| 2018-12-17T23:11:03.844236905Z | 61 | PC: 12a8b | Open file (Filename = 'HELLO.COM') |
| 2018-12-17T23:11:03.852442487Z | 63 | PC: 12a96 | Read file or device (Read 64685 bytes on handle 5) |
| 2018-12-17T23:11:03.860802021Z | 66 | PC: 12ab4 | Move file pointer |
| 2018-12-17T23:11:03.862665594Z | 64 | PC: 12abc | Write file or device (Write 205 bytes on handle 5) |
| 2018-12-17T23:11:03.866068161Z | 64 | PC: 12ac6 | Write file or device (Write 92 bytes on handle 5) |
| 2018-12-17T23:11:03.869951262Z | 87 | PC: 12ad3 | Get or set file date and time |
| 2018-12-17T23:11:03.874761433Z | 62 | PC: 12ad7 | Close file |
| 2018-12-17T23:11:03.883206969Z | 67 | PC: 12ae2 | Get or set file attributes |
| 2018-12-17T23:11:03.897171558Z | 79 | PC: 12a79 | Find next file |
| 2018-12-17T23:11:03.901341498Z | 67 | PC: 12a86 | Get or set file attributes |
| 2018-12-17T23:11:03.912535092Z | 61 | PC: 12a8b | Open file (Filename = 'PHANG.COM') |
| 2018-12-17T23:11:03.923244349Z | 63 | PC: 12a96 | Read file or device (Read 64685 bytes on handle 5) |
| 2018-12-17T23:11:03.933920026Z | 66 | PC: 12ab4 | Move file pointer |
| 2018-12-17T23:11:03.93592094Z | 64 | PC: 12abc | Write file or device (Write 205 bytes on handle 5) |
| 2018-12-17T23:11:03.939561654Z | 64 | PC: 12ac6 | Write file or device (Write 29 bytes on handle 5) |
| 2018-12-17T23:11:03.942968106Z | 87 | PC: 12ad3 | Get or set file date and time |
| 2018-12-17T23:11:03.945652735Z | 62 | PC: 12ad7 | Close file |
| 2018-12-17T23:11:03.954854407Z | 67 | PC: 12ae2 | Get or set file attributes |
| 2018-12-17T23:11:03.966803827Z | 79 | PC: 12a79 | Find next file |
| 2018-12-17T23:11:03.970126016Z | 67 | PC: 12a86 | Get or set file attributes |
| 2018-12-17T23:11:03.981301809Z | 61 | PC: 12a8b | Open file (Filename = 'PRINTA~1.COM') |
| 2018-12-17T23:11:03.990174189Z | 63 | PC: 12a96 | Read file or device (Read 64685 bytes on handle 5) |
| 2018-12-17T23:11:03.997362978Z | 66 | PC: 12ab4 | Move file pointer |
| 2018-12-17T23:11:03.998977953Z | 64 | PC: 12abc | Write file or device (Write 205 bytes on handle 5) |
| 2018-12-17T23:11:04.002837205Z | 64 | PC: 12ac6 | Write file or device (Write 29 bytes on handle 5) |
| 2018-12-17T23:11:04.005835205Z | 87 | PC: 12ad3 | Get or set file date and time |
| 2018-12-17T23:11:04.007539414Z | 62 | PC: 12ad7 | Close file |
| 2018-12-17T23:11:04.016695336Z | 67 | PC: 12ae2 | Get or set file attributes |
| 2018-12-17T23:11:04.028612629Z | 79 | PC: 12a79 | Find next file |
| 2018-12-17T23:11:04.032038197Z | 67 | PC: 12a86 | Get or set file attributes |
| 2018-12-17T23:11:04.044414555Z | 61 | PC: 12a8b | Open file (Filename = 'MANDEL.COM') |
| 2018-12-17T23:11:04.052254398Z | 63 | PC: 12a96 | Read file or device (Read 64685 bytes on handle 5) |
| 2018-12-17T23:11:04.059694237Z | 66 | PC: 12ab4 | Move file pointer |
| 2018-12-17T23:11:04.061349008Z | 64 | PC: 12abc | Write file or device (Write 205 bytes on handle 5) |
| 2018-12-17T23:11:04.065623592Z | 64 | PC: 12ac6 | Write file or device (Write 501 bytes on handle 5) |
| 2018-12-17T23:11:04.074849122Z | 87 | PC: 12ad3 | Get or set file date and time |
| 2018-12-17T23:11:04.077092443Z | 62 | PC: 12ad7 | Close file |
| 2018-12-17T23:11:04.086926963Z | 67 | PC: 12ae2 | Get or set file attributes |
| 2018-12-17T23:11:04.09815363Z | 79 | PC: 12a79 | Find next file |
| 2018-12-17T23:11:04.100966401Z | 67 | PC: 12a86 | Get or set file attributes |
| 2018-12-17T23:11:04.112532517Z | 61 | PC: 12a8b | Open file (Filename = 'PAH.COM') |
| 2018-12-17T23:11:04.12000135Z | 63 | PC: 12a96 | Read file or device (Read 64685 bytes on handle 5) |
| 2018-12-17T23:11:04.127279118Z | 66 | PC: 12ab4 | Move file pointer |
| 2018-12-17T23:11:04.129551487Z | 64 | PC: 12abc | Write file or device (Write 205 bytes on handle 5) |
| 2018-12-17T23:11:04.132781497Z | 64 | PC: 12ac6 | Write file or device (Write 29 bytes on handle 5) |
| 2018-12-17T23:11:04.135831081Z | 87 | PC: 12ad3 | Get or set file date and time |
| 2018-12-17T23:11:04.138259738Z | 62 | PC: 12ad7 | Close file |
| 2018-12-17T23:11:04.146442705Z | 67 | PC: 12ae2 | Get or set file attributes |
| 2018-12-17T23:11:04.160372008Z | 79 | PC: 12a79 | Find next file |
| 2018-12-17T23:11:04.163690416Z | 67 | PC: 12a86 | Get or set file attributes |
| 2018-12-17T23:11:04.174338314Z | 61 | PC: 12a8b | Open file (Filename = 'TEST.COM') |
| 2018-12-17T23:11:04.181697554Z | 63 | PC: 12a96 | Read file or device (Read 64685 bytes on handle 5) |
| 2018-12-17T23:11:04.186591849Z | 62 | PC: 12ad7 | Close file |
| 2018-12-17T23:11:04.187966322Z | 67 | PC: 12ae2 | Get or set file attributes |
| 2018-12-17T23:11:04.194495949Z | 79 | PC: 12a79 | Find next file |
| 2018-12-17T23:11:04.197747672Z | 9 | PC: 12a47 | Display string (String= 'Warning! This file infected by Qwerty.Small-205, [v] 1996, Lord Qwerty. ') |