.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T22:39:38.819675361Z | 48 | PC: 12a4b | Get DOS version |
| 2018-12-17T22:39:38.821193314Z | 47 | PC: 12a53 | Get disk transfer address |
| 2018-12-17T22:39:38.823314866Z | 26 | PC: 12a62 | Set disk transfer address |
| 2018-12-17T22:39:38.824941683Z | 78 | PC: 12a6c | Find first file |
| 2018-12-17T22:39:38.832030633Z | 61 | PC: 12a85 | Open file (Filename = 'in TEMP=C:\WINDOWS\TEMP ') |
| 2018-12-17T22:39:38.842669503Z | 64 | PC: 12a93 | Write file or device (Write 628 bytes on handle 5) |
| 2018-12-17T22:39:38.858386048Z | 62 | PC: 12a97 | Close file |
| 2018-12-17T22:39:38.868162889Z | 76 | PC: 12a9b | Terminate with return code (Return code = '5') |