.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T22:26:09.476735082Z | 78 | PC: 12a81 | Find first file |
| 2018-12-17T22:26:09.485801304Z | 47 | PC: 12a8c | Get disk transfer address |
| 2018-12-17T22:26:09.487130025Z | 61 | PC: 12abb | Open file (Filename = 'SLEEP.COM') |
| 2018-12-17T22:26:09.495332194Z | 63 | PC: 12ac9 | Read file or device (Read 407 bytes on handle 5) |
| 2018-12-17T22:26:09.508358413Z | 60 | PC: 12afb | Create or truncate file |
| 2018-12-17T22:26:09.530647543Z | 64 | PC: 12b0d | Write file or device (Write 694 bytes on handle 6) |
| 2018-12-17T22:26:09.540552456Z | 62 | PC: 12b11 | Close file |
| 2018-12-17T22:26:09.549867447Z | 79 | PC: 12b1c | Find next file |
| 2018-12-17T22:26:09.55322105Z | 47 | PC: 12a8c | Get disk transfer address |
| 2018-12-17T22:26:09.554691628Z | 61 | PC: 12abb | Open file (Filename = 'PRINT.COM') |
| 2018-12-17T22:26:09.562189993Z | 63 | PC: 12ac9 | Read file or device (Read 27 bytes on handle 6) |
| 2018-12-17T22:26:09.570579337Z | 60 | PC: 12afb | Create or truncate file |
| 2018-12-17T22:26:09.585029615Z | 64 | PC: 12b0d | Write file or device (Write 314 bytes on handle 7) |
| 2018-12-17T22:26:09.589715675Z | 62 | PC: 12b11 | Close file |
| 2018-12-17T22:26:09.600696123Z | 79 | PC: 12b1c | Find next file |
| 2018-12-17T22:26:09.604385087Z | 47 | PC: 12a8c | Get disk transfer address |
| 2018-12-17T22:26:09.606397664Z | 61 | PC: 12abb | Open file (Filename = 'HELLO.COM') |
| 2018-12-17T22:26:09.620969115Z | 63 | PC: 12ac9 | Read file or device (Read 92 bytes on handle 7) |
| 2018-12-17T22:26:09.629719076Z | 60 | PC: 12afb | Create or truncate file |
| 2018-12-17T22:26:09.644497434Z | 64 | PC: 12b0d | Write file or device (Write 379 bytes on handle 8) |
| 2018-12-17T22:26:09.649353872Z | 62 | PC: 12b11 | Close file |
| 2018-12-17T22:26:09.659701504Z | 9 | PC: 12aca | Display string (String= '(C) 2000 Rising Computer Sci & Tech Inc. Host program for virus, DOSCOM Version. It's original size is 2000H Maybe you've just released a virus! ') |
| 2018-12-17T22:26:09.673585778Z | 76 | PC: 12acf | Terminate with return code (Return code = '0') |