.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T22:12:44.120267376Z | 26 | PC: 1410e | Set disk transfer address |
| 2018-12-17T22:12:44.12214602Z | 78 | PC: 14122 | Find first file |
| 2018-12-17T22:12:44.128040246Z | 61 | PC: 14157 | Open file (Filename = 'SLEEP.COM') |
| 2018-12-17T22:12:44.134403126Z | 63 | PC: 14167 | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-17T22:12:44.140556658Z | 66 | PC: 141c7 | Move file pointer |
| 2018-12-17T22:12:44.142917951Z | 64 | PC: 1419b | Write file or device (Write 268 bytes on handle 5) |
| 2018-12-17T22:12:44.156681738Z | 66 | PC: 141c7 | Move file pointer |
| 2018-12-17T22:12:44.158162399Z | 64 | PC: 141ac | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T22:12:44.166183723Z | 87 | PC: 141b3 | Get or set file date and time |
| 2018-12-17T22:12:44.168045316Z | 62 | PC: 141b7 | Close file |
| 2018-12-17T22:12:44.17576059Z | 79 | PC: 14122 | Find next file |
| 2018-12-17T22:12:44.178964326Z | 79 | PC: 14122 | Find next file |
| 2018-12-17T22:12:44.181858486Z | 79 | PC: 14122 | Find next file |
| 2018-12-17T22:12:44.185551377Z | 79 | PC: 14122 | Find next file |
| 2018-12-17T22:12:44.188667177Z | 79 | PC: 14122 | Find next file |
| 2018-12-17T22:12:44.191770874Z | 61 | PC: 14157 | Open file (Filename = 'MANDEL.COM') |
| 2018-12-17T22:12:44.198688378Z | 63 | PC: 14167 | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-17T22:12:44.205234638Z | 66 | PC: 141c7 | Move file pointer |
| 2018-12-17T22:12:44.207398462Z | 64 | PC: 1419b | Write file or device (Write 268 bytes on handle 5) |
| 2018-12-17T22:12:44.215374162Z | 66 | PC: 141c7 | Move file pointer |
| 2018-12-17T22:12:44.216669501Z | 64 | PC: 141ac | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T22:12:44.231636839Z | 87 | PC: 141b3 | Get or set file date and time |
| 2018-12-17T22:12:44.232879017Z | 62 | PC: 141b7 | Close file |
| 2018-12-17T22:12:44.238188705Z | 79 | PC: 14122 | Find next file |
| 2018-12-17T22:12:44.240709216Z | 79 | PC: 14122 | Find next file |
| 2018-12-17T22:12:44.24245545Z | 61 | PC: 14157 | Open file (Filename = 'TEST.COM') |
| 2018-12-17T22:12:44.249873727Z | 63 | PC: 14167 | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-17T22:12:44.253819966Z | 66 | PC: 141c7 | Move file pointer |
| 2018-12-17T22:12:44.256271124Z | 64 | PC: 1419b | Write file or device (Write 268 bytes on handle 5) |
| 2018-12-17T22:12:44.264557129Z | 66 | PC: 141c7 | Move file pointer |
| 2018-12-17T22:12:44.267309174Z | 64 | PC: 141ac | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T22:12:44.269981696Z | 87 | PC: 141b3 | Get or set file date and time |
| 2018-12-17T22:12:44.271335001Z | 62 | PC: 141b7 | Close file |
| 2018-12-17T22:12:44.279183914Z | 79 | PC: 14122 | Find next file |
| 2018-12-17T22:12:44.281774389Z | 26 | PC: 141c0 | Set disk transfer address |
| 2018-12-17T22:12:44.282953189Z | 48 | PC: 12a63 | Get DOS version |
| 2018-12-17T22:12:44.284263863Z | 9 | PC: 12a7a | Display string (String= ' --=[ Selfchecking AntiStealth Goat COM/EXE file, 01/06/01 ]=------------------ (c) 1995-2001 by ROSE SWE, Dipl.-Ing. Ralph Roth - Version 1.18 - Freeware ') |
| 2018-12-17T22:12:44.294507285Z | 61 | PC: 12cb7 | Open file (Filename = '') |
| 2018-12-17T22:12:44.300921391Z | 9 | PC: 12a88 | Display string (String= 'Self test: ') |
| 2018-12-17T22:12:44.303284204Z | 93 | PC: 12b24 | File sharing functions |
| 2018-12-17T22:12:44.305084901Z | 9 | PC: 12b03 | Display string (String= 'Size change=+0218h/00536d. Virus might be activ? ') |
| 2018-12-17T22:12:44.310267203Z | 76 | PC: 12b09 | Terminate with return code (Return code = '1') |