.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T22:21:49.874638258Z | 26 | PC: 12a59 | Set disk transfer address |
| 2018-12-17T22:21:49.876477229Z | 78 | PC: 12a6a | Find first file |
| 2018-12-17T22:21:49.883357351Z | 61 | PC: 12a76 | Open file (Filename = '') |
| 2018-12-17T22:21:49.891414744Z | 63 | PC: 12a7f | Read file or device (Read 65054 bytes on handle 5) |
| 2018-12-17T22:21:49.899327486Z | 66 | PC: 12a90 | Move file pointer |
| 2018-12-17T22:21:49.90136611Z | 64 | PC: 12a95 | Write file or device (Write 516 bytes on handle 5) |
| 2018-12-17T22:21:49.91817575Z | 62 | PC: 12a64 | Close file |
| 2018-12-17T22:21:49.931429015Z | 79 | PC: 12a6a | Find next file |
| 2018-12-17T22:21:49.935991343Z | 61 | PC: 12a76 | Open file (Filename = '') |
| 2018-12-17T22:21:49.943839522Z | 63 | PC: 12a7f | Read file or device (Read 65054 bytes on handle 5) |
| 2018-12-17T22:21:49.951350872Z | 66 | PC: 12a90 | Move file pointer |
| 2018-12-17T22:21:49.954508917Z | 64 | PC: 12a95 | Write file or device (Write 136 bytes on handle 5) |
| 2018-12-17T22:21:49.959901404Z | 62 | PC: 12a64 | Close file |
| 2018-12-17T22:21:49.97123525Z | 79 | PC: 12a6a | Find next file |
| 2018-12-17T22:21:49.975409976Z | 61 | PC: 12a76 | Open file (Filename = '') |
| 2018-12-17T22:21:49.983206952Z | 63 | PC: 12a7f | Read file or device (Read 65054 bytes on handle 5) |
| 2018-12-17T22:21:49.99068618Z | 66 | PC: 12a90 | Move file pointer |
| 2018-12-17T22:21:49.993904966Z | 64 | PC: 12a95 | Write file or device (Write 201 bytes on handle 5) |
| 2018-12-17T22:21:50.006926888Z | 62 | PC: 12a64 | Close file |
| 2018-12-17T22:21:50.013059165Z | 79 | PC: 12a6a | Find next file |
| 2018-12-17T22:21:50.015594552Z | 61 | PC: 12a76 | Open file (Filename = '') |
| 2018-12-17T22:21:50.020340116Z | 63 | PC: 12a7f | Read file or device (Read 65054 bytes on handle 5) |
| 2018-12-17T22:21:50.025254784Z | 66 | PC: 12a90 | Move file pointer |
| 2018-12-17T22:21:50.02654925Z | 64 | PC: 12a95 | Write file or device (Write 138 bytes on handle 5) |
| 2018-12-17T22:21:50.031599743Z | 62 | PC: 12a64 | Close file |
| 2018-12-17T22:21:50.042001413Z | 79 | PC: 12a6a | Find next file |
| 2018-12-17T22:21:50.045939138Z | 61 | PC: 12a76 | Open file (Filename = '') |
| 2018-12-17T22:21:50.052622016Z | 63 | PC: 12a7f | Read file or device (Read 65054 bytes on handle 5) |
| 2018-12-17T22:21:50.057376783Z | 66 | PC: 12a90 | Move file pointer |
| 2018-12-17T22:21:50.058963817Z | 64 | PC: 12a95 | Write file or device (Write 138 bytes on handle 5) |
| 2018-12-17T22:21:50.062602885Z | 62 | PC: 12a64 | Close file |
| 2018-12-17T22:21:50.069404701Z | 79 | PC: 12a6a | Find next file |
| 2018-12-17T22:21:50.071724556Z | 61 | PC: 12a76 | Open file (Filename = '') |
| 2018-12-17T22:21:50.077426756Z | 63 | PC: 12a7f | Read file or device (Read 65054 bytes on handle 5) |
| 2018-12-17T22:21:50.082829558Z | 66 | PC: 12a90 | Move file pointer |
| 2018-12-17T22:21:50.084958191Z | 64 | PC: 12a95 | Write file or device (Write 610 bytes on handle 5) |
| 2018-12-17T22:21:50.094544959Z | 62 | PC: 12a64 | Close file |
| 2018-12-17T22:21:50.104201409Z | 79 | PC: 12a6a | Find next file |
| 2018-12-17T22:21:50.107551132Z | 61 | PC: 12a76 | Open file (Filename = '') |
| 2018-12-17T22:21:50.115019487Z | 63 | PC: 12a7f | Read file or device (Read 65054 bytes on handle 5) |
| 2018-12-17T22:21:50.122655813Z | 66 | PC: 12a90 | Move file pointer |
| 2018-12-17T22:21:50.124449722Z | 64 | PC: 12a95 | Write file or device (Write 138 bytes on handle 5) |
| 2018-12-17T22:21:50.127559484Z | 62 | PC: 12a64 | Close file |
| 2018-12-17T22:21:50.13681216Z | 79 | PC: 12a6a | Find next file |
| 2018-12-17T22:21:50.140314071Z | 61 | PC: 12a76 | Open file (Filename = '') |
| 2018-12-17T22:21:50.148095139Z | 63 | PC: 12a7f | Read file or device (Read 65054 bytes on handle 5) |
| 2018-12-17T22:21:50.155183158Z | 62 | PC: 12a64 | Close file |
| 2018-12-17T22:21:50.156669217Z | 79 | PC: 12a6a | Find next file |
| 2018-12-17T22:21:50.163812449Z | 48 | PC: 12aa8 | Get DOS version |
| 2018-12-17T22:21:50.16708379Z | 9 | PC: 12ab8 | Display string (String= '--=[ Selfchecking AntiStealth Goat COM/EXE file ]=------------------------ (c) 1995-98 by ROSE SWE, Dipl.-Ing. Ralph Roth - Version 1.00 - Freeware ') |
| 2018-12-17T22:21:50.177110682Z | 61 | PC: 12b94 | Open file (Filename = '') |
| 2018-12-17T22:21:50.184012189Z | 93 | PC: 12b36 | File sharing functions |
| 2018-12-17T22:21:50.186223483Z | 9 | PC: 12b15 | Display string (String= 'Size change=006Dh/00109d. Virus activ? ') |
| 2018-12-17T22:21:50.18990165Z | 76 | PC: 12b1b | Terminate with return code (Return code = '1') |