.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T23:11:27.122542535Z | 78 | PC: 12ae5 | Find first file |
| 2018-12-17T23:11:27.130826805Z | 61 | PC: 12af6 | Open file (Filename = 'SLEEP.COM') |
| 2018-12-17T23:11:27.139241582Z | 63 | PC: 12b01 | Read file or device (Read 2 bytes on handle 5) |
| 2018-12-17T23:11:27.147379788Z | 66 | PC: 12b21 | Move file pointer |
| 2018-12-17T23:11:27.150236981Z | 44 | PC: 12cba | Get time 0x12cba: pop ax 0x12cbb: xor cx, bx 0x12cbd: push cx 0x12cbe: xor dx, bx 0x12cc0: xor bx, ax 0x12cc2: not bx 0x12cc4: add bx, dx 0x12cc6: neg bx 0x12cc8: xor bx, dx 0x12cca: loop 0x12cbe 0x12ccc: pop cx 0x12ccd: xor cx, bx 0x12ccf: xor ch, cl 0x12cd1: add ch, dh 0x12cd3: sub ch, dl 0x12cd5: mov cl, dl 0x12cd7: rol cx, 1 0x12cd9: xor cx, dx 0x12cdb: xchg ax, bx 0x12cdc: pop bx |
| 2018-12-17T23:11:27.155338997Z | 64 | PC: 12b4e | Write file or device (Write 155 bytes on handle 5) |
| 2018-12-17T23:11:27.15920587Z | 64 | PC: 12b56 | Write file or device (Write 819 bytes on handle 5) |
| 2018-12-17T23:11:27.175867155Z | 62 | PC: 12b14 | Close file |
| 2018-12-17T23:11:27.1852326Z | 79 | PC: 12ae5 | Find next file |
| 2018-12-17T23:11:27.188718085Z | 61 | PC: 12af6 | Open file (Filename = 'PRINT.COM') |
| 2018-12-17T23:11:27.196135375Z | 63 | PC: 12b01 | Read file or device (Read 2 bytes on handle 5) |
| 2018-12-17T23:11:27.203901702Z | 66 | PC: 12b21 | Move file pointer |
| 2018-12-17T23:11:27.207435518Z | 44 | PC: 12cba | Get time 0x12cba: pop ax 0x12cbb: xor cx, bx 0x12cbd: push cx 0x12cbe: xor dx, bx 0x12cc0: xor bx, ax 0x12cc2: not bx 0x12cc4: add bx, dx 0x12cc6: neg bx 0x12cc8: xor bx, dx 0x12cca: loop 0x12cbe 0x12ccc: pop cx 0x12ccd: xor cx, bx 0x12ccf: xor ch, cl 0x12cd1: add ch, dh 0x12cd3: sub ch, dl 0x12cd5: mov cl, dl 0x12cd7: rol cx, 1 0x12cd9: xor cx, dx 0x12cdb: xchg ax, bx 0x12cdc: pop bx |
| 2018-12-17T23:11:27.212420694Z | 64 | PC: 12b4e | Write file or device (Write 155 bytes on handle 5) |
| 2018-12-17T23:11:27.215544098Z | 64 | PC: 12b56 | Write file or device (Write 810 bytes on handle 5) |
| 2018-12-17T23:11:27.22982655Z | 62 | PC: 12b14 | Close file |
| 2018-12-17T23:11:27.238814564Z | 79 | PC: 12ae5 | Find next file |
| 2018-12-17T23:11:27.241770614Z | 61 | PC: 12af6 | Open file (Filename = 'HELLO.COM') |
| 2018-12-17T23:11:27.250046008Z | 63 | PC: 12b01 | Read file or device (Read 2 bytes on handle 5) |
| 2018-12-17T23:11:27.257893647Z | 66 | PC: 12b21 | Move file pointer |
| 2018-12-17T23:11:27.259658456Z | 44 | PC: 12cba | Get time 0x12cba: pop ax 0x12cbb: xor cx, bx 0x12cbd: push cx 0x12cbe: xor dx, bx 0x12cc0: xor bx, ax 0x12cc2: not bx 0x12cc4: add bx, dx 0x12cc6: neg bx 0x12cc8: xor bx, dx 0x12cca: loop 0x12cbe 0x12ccc: pop cx 0x12ccd: xor cx, bx 0x12ccf: xor ch, cl 0x12cd1: add ch, dh 0x12cd3: sub ch, dl 0x12cd5: mov cl, dl 0x12cd7: rol cx, 1 0x12cd9: xor cx, dx 0x12cdb: xchg ax, bx 0x12cdc: pop bx |
| 2018-12-17T23:11:27.264329281Z | 64 | PC: 12b4e | Write file or device (Write 155 bytes on handle 5) |
| 2018-12-17T23:11:27.2676623Z | 64 | PC: 12b56 | Write file or device (Write 819 bytes on handle 5) |
| 2018-12-17T23:11:27.276388251Z | 62 | PC: 12b14 | Close file |
| 2018-12-17T23:11:27.286179266Z | 79 | PC: 12ae5 | Find next file |
| 2018-12-17T23:11:27.289443676Z | 61 | PC: 12af6 | Open file (Filename = 'PHANG.COM') |
| 2018-12-17T23:11:27.29694882Z | 63 | PC: 12b01 | Read file or device (Read 2 bytes on handle 5) |
| 2018-12-17T23:11:27.30492376Z | 66 | PC: 12b21 | Move file pointer |
| 2018-12-17T23:11:27.307197496Z | 44 | PC: 12cba | Get time 0x12cba: pop ax 0x12cbb: xor cx, bx 0x12cbd: push cx 0x12cbe: xor dx, bx 0x12cc0: xor bx, ax 0x12cc2: not bx 0x12cc4: add bx, dx 0x12cc6: neg bx 0x12cc8: xor bx, dx 0x12cca: loop 0x12cbe 0x12ccc: pop cx 0x12ccd: xor cx, bx 0x12ccf: xor ch, cl 0x12cd1: add ch, dh 0x12cd3: sub ch, dl 0x12cd5: mov cl, dl 0x12cd7: rol cx, 1 0x12cd9: xor cx, dx 0x12cdb: xchg ax, bx 0x12cdc: pop bx |
| 2018-12-17T23:11:27.311788391Z | 64 | PC: 12b4e | Write file or device (Write 155 bytes on handle 5) |
| 2018-12-17T23:11:27.315307028Z | 64 | PC: 12b56 | Write file or device (Write 819 bytes on handle 5) |
| 2018-12-17T23:11:27.324935658Z | 62 | PC: 12b14 | Close file |
| 2018-12-17T23:11:27.334025143Z | 79 | PC: 12ae5 | Find next file |
| 2018-12-17T23:11:27.337219601Z | 61 | PC: 12af6 | Open file (Filename = 'PRINTA~1.COM') |
| 2018-12-17T23:11:27.347033819Z | 63 | PC: 12b01 | Read file or device (Read 2 bytes on handle 5) |
| 2018-12-17T23:11:27.354213121Z | 66 | PC: 12b21 | Move file pointer |
| 2018-12-17T23:11:27.356180001Z | 44 | PC: 12cba | Get time 0x12cba: pop ax 0x12cbb: xor cx, bx 0x12cbd: push cx 0x12cbe: xor dx, bx 0x12cc0: xor bx, ax 0x12cc2: not bx 0x12cc4: add bx, dx 0x12cc6: neg bx 0x12cc8: xor bx, dx 0x12cca: loop 0x12cbe 0x12ccc: pop cx 0x12ccd: xor cx, bx 0x12ccf: xor ch, cl 0x12cd1: add ch, dh 0x12cd3: sub ch, dl 0x12cd5: mov cl, dl 0x12cd7: rol cx, 1 0x12cd9: xor cx, dx 0x12cdb: xchg ax, bx 0x12cdc: pop bx |
| 2018-12-17T23:11:27.361857599Z | 64 | PC: 12b4e | Write file or device (Write 155 bytes on handle 5) |
| 2018-12-17T23:11:27.364894851Z | 64 | PC: 12b56 | Write file or device (Write 819 bytes on handle 5) |
| 2018-12-17T23:11:27.374038167Z | 62 | PC: 12b14 | Close file |
| 2018-12-17T23:11:27.384637713Z | 79 | PC: 12ae5 | Find next file |
| 2018-12-17T23:11:27.388514544Z | 61 | PC: 12af6 | Open file (Filename = 'MANDEL.COM') |
| 2018-12-17T23:11:27.395887511Z | 63 | PC: 12b01 | Read file or device (Read 2 bytes on handle 5) |
| 2018-12-17T23:11:27.403854194Z | 66 | PC: 12b21 | Move file pointer |
| 2018-12-17T23:11:27.406129013Z | 44 | PC: 12cba | Get time 0x12cba: pop ax 0x12cbb: xor cx, bx 0x12cbd: push cx 0x12cbe: xor dx, bx 0x12cc0: xor bx, ax 0x12cc2: not bx 0x12cc4: add bx, dx 0x12cc6: neg bx 0x12cc8: xor bx, dx 0x12cca: loop 0x12cbe 0x12ccc: pop cx 0x12ccd: xor cx, bx 0x12ccf: xor ch, cl 0x12cd1: add ch, dh 0x12cd3: sub ch, dl 0x12cd5: mov cl, dl 0x12cd7: rol cx, 1 0x12cd9: xor cx, dx 0x12cdb: xchg ax, bx 0x12cdc: pop bx |
| 2018-12-17T23:11:27.410228683Z | 64 | PC: 12b4e | Write file or device (Write 155 bytes on handle 5) |
| 2018-12-17T23:11:27.413973105Z | 64 | PC: 12b56 | Write file or device (Write 819 bytes on handle 5) |
| 2018-12-17T23:11:27.423614959Z | 62 | PC: 12b14 | Close file |
| 2018-12-17T23:11:27.432599637Z | 79 | PC: 12ae5 | Find next file |
| 2018-12-17T23:11:27.436076055Z | 61 | PC: 12af6 | Open file (Filename = 'PAH.COM') |
| 2018-12-17T23:11:27.443844957Z | 63 | PC: 12b01 | Read file or device (Read 2 bytes on handle 5) |
| 2018-12-17T23:11:27.450858237Z | 66 | PC: 12b21 | Move file pointer |
| 2018-12-17T23:11:27.452731831Z | 44 | PC: 12cba | Get time 0x12cba: pop ax 0x12cbb: xor cx, bx 0x12cbd: push cx 0x12cbe: xor dx, bx 0x12cc0: xor bx, ax 0x12cc2: not bx 0x12cc4: add bx, dx 0x12cc6: neg bx 0x12cc8: xor bx, dx 0x12cca: loop 0x12cbe 0x12ccc: pop cx 0x12ccd: xor cx, bx 0x12ccf: xor ch, cl 0x12cd1: add ch, dh 0x12cd3: sub ch, dl 0x12cd5: mov cl, dl 0x12cd7: rol cx, 1 0x12cd9: xor cx, dx 0x12cdb: xchg ax, bx 0x12cdc: pop bx |
| 2018-12-17T23:11:27.458636677Z | 64 | PC: 12b4e | Write file or device (Write 155 bytes on handle 5) |
| 2018-12-17T23:11:27.462144774Z | 64 | PC: 12b56 | Write file or device (Write 819 bytes on handle 5) |
| 2018-12-17T23:11:27.470722818Z | 62 | PC: 12b14 | Close file |
| 2018-12-17T23:11:27.480266227Z | 79 | PC: 12ae5 | Find next file |
| 2018-12-17T23:11:27.484594787Z | 61 | PC: 12af6 | Open file (Filename = 'TEST.COM') |
| 2018-12-17T23:11:27.492089093Z | 63 | PC: 12b01 | Read file or device (Read 2 bytes on handle 5) |
| 2018-12-17T23:11:27.49633058Z | 62 | PC: 12b14 | Close file |
| 2018-12-17T23:11:27.498796447Z | 79 | PC: 12ae5 | Find next file |
| 2018-12-17T23:11:27.501593959Z | 76 | PC: 12aee | Terminate with return code (Return code = '0') |