.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T22:13:19.379339406Z | 53 | PC: 1944f | Get interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-17T22:13:19.381810305Z | 61 | PC: 19616 | Open file (Filename = 'C:\COMMAND.COM') |
| 2018-12-17T22:13:19.388334217Z | 66 | PC: 19616 | Move file pointer |
| 2018-12-17T22:13:19.39061861Z | 66 | PC: 19616 | Move file pointer |
| 2018-12-17T22:13:19.396075811Z | 63 | PC: 19616 | Read file or device (Read 6 bytes on handle 5) |
| 2018-12-17T22:13:19.398978129Z | 62 | PC: 19616 | Close file |
| 2018-12-17T22:13:19.40096703Z | 51 | PC: 19616 | Get or set Ctrl-Break |
| 2018-12-17T22:13:19.402335472Z | 51 | PC: 19616 | Get or set Ctrl-Break |
| 2018-12-17T22:13:19.403391033Z | 67 | PC: 19616 | Get or set file attributes |
| 2018-12-17T22:13:19.409726156Z | 61 | PC: 19616 | Open file (Filename = '�') |
| 2018-12-17T22:13:19.416180466Z | 87 | PC: 19616 | Get or set file date and time |
| 2018-12-17T22:13:19.417935438Z | 63 | PC: 19616 | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-17T22:13:19.420499757Z | 66 | PC: 19616 | Move file pointer |
| 2018-12-17T22:13:19.422758644Z | 64 | PC: 19616 | Write file or device (Write 1752 bytes on handle 5) |
| 2018-12-17T22:13:19.769235075Z | 66 | PC: 19616 | Move file pointer |
| 2018-12-17T22:13:19.771341691Z | 64 | PC: 19616 | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T22:13:19.775152377Z | 87 | PC: 19616 | Get or set file date and time |
| 2018-12-17T22:13:19.777066232Z | 62 | PC: 19616 | Close file |
| 2018-12-17T22:13:19.783979007Z | 51 | PC: 19616 | Get or set Ctrl-Break |
| 2018-12-17T22:13:19.785188082Z | 47 | PC: 19616 | Get disk transfer address |