.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T22:16:27.165129177Z | 25 | PC: 12a7d | Get default drive |
| 2018-12-17T22:16:27.16753871Z | 14 | PC: 12a83 | Set default drive (Drive = 'C') |
| 2018-12-17T22:16:27.168827118Z | 9 | PC: 12a92 | Display string (String= 'Welexee to Twin Peaks..Your PC now has the Twin Peaks virus') |
| 2018-12-17T22:16:27.172430778Z | 71 | PC: 12aa4 | Get current directory |
| 2018-12-17T22:16:27.174836334Z | 14 | PC: 12add | Set default drive (Drive = '¦') |
| 2018-12-17T22:16:27.17606376Z | 59 | PC: 12ae5 | Change current directory |
| 2018-12-17T22:16:27.179387187Z | 78 | PC: 12b46 | Find first file |
| 2018-12-17T22:16:27.185319136Z | 23 | PC: 12af0 | Rename file |
| 2018-12-17T22:16:27.186936295Z | 59 | PC: 12af8 | Change current directory |
| 2018-12-17T22:16:27.190290123Z | 78 | PC: 12b03 | Find first file |
| 2018-12-17T22:16:27.196455486Z | 47 | PC: 12b1b | Get disk transfer address |
| 2018-12-17T22:16:27.197724147Z | 59 | PC: 12b2f | Change current directory |
| 2018-12-17T22:16:27.203681893Z | 78 | PC: 12b46 | Find first file |
| 2018-12-17T22:16:27.21217952Z | 61 | PC: 12b5a | Open file (Filename = 'ATTRIB.EXE') |
| 2018-12-17T22:16:27.219677096Z | 63 | PC: 12b68 | Read file or device (Read 1310 bytes on handle 5) |
| 2018-12-17T22:16:27.22413469Z | 62 | PC: 12b6c | Close file |
| 2018-12-17T22:16:27.225329827Z | 67 | PC: 12bb0 | Get or set file attributes |
| 2018-12-17T22:16:27.229377764Z | 67 | PC: 12bba | Get or set file attributes |
| 2018-12-17T22:16:27.569200722Z | 61 | PC: 12bc3 | Open file (Filename = 'ATTRIB.EXE') |
| 2018-12-17T22:16:27.576475249Z | 87 | PC: 12bcb | Get or set file date and time |
| 2018-12-17T22:16:27.578618954Z | 64 | PC: 12bf3 | Write file or device (Write 1310 bytes on handle 5) |
| 2018-12-17T22:16:27.585733312Z | 87 | PC: 12bfb | Get or set file date and time |
| 2018-12-17T22:16:27.587378376Z | 62 | PC: 12bff | Close file |
| 2018-12-17T22:16:27.595460692Z | 14 | PC: 12c25 | Set default drive (Drive = 'e') |
| 2018-12-17T22:16:27.596642858Z | 59 | PC: 12c2d | Change current directory |