.
Time | Syscall Op | Syscall Name |
---|---|---|
2018-12-17T22:40:28.037237469Z | 26 | PC: 12ae2 | Set disk transfer address |
2018-12-17T22:40:28.039677029Z | 78 | PC: 12aed | Find first file |
2018-12-17T22:40:28.045559259Z | 67 | PC: 12b33 | Get or set file attributes |
2018-12-17T22:40:28.060974414Z | 61 | PC: 12b50 | Open file (Filename = 'SLEEP.COM') |
2018-12-17T22:40:28.072955635Z | 66 | PC: 12b63 | Move file pointer |
2018-12-17T22:40:28.074805779Z | 63 | PC: 12b70 | Read file or device (Read 6 bytes on handle 5) |
2018-12-17T22:40:28.081494221Z | 66 | PC: 12b97 | Move file pointer |
2018-12-17T22:40:28.082963299Z | 64 | PC: 12ba4 | Write file or device (Write 6 bytes on handle 5) |
2018-12-17T22:40:28.086762458Z | 66 | PC: 12bb1 | Move file pointer |
2018-12-17T22:40:28.089149684Z | 64 | PC: 12bc5 | Write file or device (Write 581 bytes on handle 5) |
2018-12-17T22:40:28.09765412Z | 87 | PC: 12bde | Get or set file date and time |
2018-12-17T22:40:28.100163798Z | 62 | PC: 12be6 | Close file |
2018-12-17T22:40:28.10827676Z | 67 | PC: 12bff | Get or set file attributes |
2018-12-17T22:40:28.118364752Z | 79 | PC: 12af6 | Find next file |
2018-12-17T22:40:28.122033215Z | 79 | PC: 12af6 | Find next file |
2018-12-17T22:40:28.124966419Z | 67 | PC: 12b33 | Get or set file attributes |
2018-12-17T22:40:28.135284281Z | 61 | PC: 12b50 | Open file (Filename = 'HELLO.COM') |
2018-12-17T22:40:28.143163922Z | 66 | PC: 12b63 | Move file pointer |
2018-12-17T22:40:28.144809415Z | 63 | PC: 12b70 | Read file or device (Read 6 bytes on handle 5) |
2018-12-17T22:40:28.15143942Z | 66 | PC: 12b97 | Move file pointer |
2018-12-17T22:40:28.154281462Z | 64 | PC: 12ba4 | Write file or device (Write 6 bytes on handle 5) |
2018-12-17T22:40:28.157089295Z | 66 | PC: 12bb1 | Move file pointer |
2018-12-17T22:40:28.158298906Z | 64 | PC: 12bc5 | Write file or device (Write 581 bytes on handle 5) |
2018-12-17T22:40:28.165702226Z | 87 | PC: 12bde | Get or set file date and time |
2018-12-17T22:40:28.166971994Z | 62 | PC: 12be6 | Close file |
2018-12-17T22:40:28.172201675Z | 67 | PC: 12bff | Get or set file attributes |
2018-12-17T22:40:28.178998283Z | 79 | PC: 12af6 | Find next file |
2018-12-17T22:40:28.181380307Z | 79 | PC: 12af6 | Find next file |
2018-12-17T22:40:28.183195021Z | 79 | PC: 12af6 | Find next file |
2018-12-17T22:40:28.185081196Z | 67 | PC: 12b33 | Get or set file attributes |
2018-12-17T22:40:28.192438239Z | 61 | PC: 12b50 | Open file (Filename = 'MANDEL.COM') |
2018-12-17T22:40:28.204703756Z | 66 | PC: 12b63 | Move file pointer |
2018-12-17T22:40:28.20646798Z | 63 | PC: 12b70 | Read file or device (Read 6 bytes on handle 5) |
2018-12-17T22:40:28.214645378Z | 66 | PC: 12b97 | Move file pointer |
2018-12-17T22:40:28.215960739Z | 64 | PC: 12ba4 | Write file or device (Write 6 bytes on handle 5) |
2018-12-17T22:40:28.218567331Z | 66 | PC: 12bb1 | Move file pointer |
2018-12-17T22:40:28.220890649Z | 64 | PC: 12bc5 | Write file or device (Write 581 bytes on handle 5) |
2018-12-17T22:40:28.229860073Z | 87 | PC: 12bde | Get or set file date and time |
2018-12-17T22:40:28.231456643Z | 62 | PC: 12be6 | Close file |
2018-12-17T22:40:28.239465687Z | 67 | PC: 12bff | Get or set file attributes |
2018-12-17T22:40:28.249395233Z | 79 | PC: 12af6 | Find next file |
2018-12-17T22:40:28.251876531Z | 79 | PC: 12af6 | Find next file |
2018-12-17T22:40:28.254902921Z | 67 | PC: 12b33 | Get or set file attributes |
2018-12-17T22:40:28.264389909Z | 61 | PC: 12b50 | Open file (Filename = 'TEST.COM') |
2018-12-17T22:40:28.2714813Z | 66 | PC: 12b63 | Move file pointer |
2018-12-17T22:40:28.273716223Z | 63 | PC: 12b70 | Read file or device (Read 6 bytes on handle 5) |
2018-12-17T22:40:28.283829006Z | 87 | PC: 12bde | Get or set file date and time |
2018-12-17T22:40:28.285364524Z | 62 | PC: 12be6 | Close file |
2018-12-17T22:40:28.292796411Z | 67 | PC: 12bff | Get or set file attributes |
2018-12-17T22:40:28.302409303Z | 79 | PC: 12af6 | Find next file |
2018-12-17T22:40:28.304690452Z | 26 | PC: 12c0e | Set disk transfer address |
2018-12-17T22:40:28.320571506Z | 9 | PC: 12a4c | Display string (String= ' This file infected by King.581 ') |