Sample viewer

vx.netlux.org/Virus.DOS.HLLP.Doggy.6685

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:50:11.539197217Z 53 PC: 141aa | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:50:11.541361681Z 53 PC: 141aa | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:50:11.542766091Z 53 PC: 141aa | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:50:11.544122461Z 53 PC: 141aa | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:50:11.546026507Z 53 PC: 141aa | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:50:11.548806162Z 53 PC: 141aa | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:50:11.551474966Z 53 PC: 141aa | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:50:11.554156285Z 53 PC: 141aa | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:50:11.557243376Z 53 PC: 141aa | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:50:11.559100752Z 53 PC: 141aa | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:50:11.561003955Z 53 PC: 141aa | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:50:11.562410285Z 53 PC: 141aa | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:50:11.563780749Z 53 PC: 141aa | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:50:11.566353175Z 53 PC: 141aa | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:50:11.568028912Z 53 PC: 141aa | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:50:11.569711715Z 53 PC: 141aa | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:50:11.577479206Z 53 PC: 141aa | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:50:11.579080484Z 53 PC: 141aa | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:50:11.581286793Z 53 PC: 141aa | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:50:11.584088076Z 37 PC: 141bf | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:50:11.585841865Z 37 PC: 141c7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:50:11.587179012Z 37 PC: 141cf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:50:11.588594744Z 37 PC: 141d7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:50:11.590787165Z 68 PC: 14dad | I/O control for devices (Set for = '')
2018-12-17T22:50:11.663381882Z 37 PC: 13941 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:50:11.66592442Z 42 PC: 13ec7 | Get date 0x13ec7: xor ah, ah
0x13ec9: les di, ptr [bp + 6]
0x13ecc: stosw word ptr es:[di], ax
0x13ecd: mov al, dl
0x13ecf: les di, ptr [bp + 0xa]
0x13ed2: stosw word ptr es:[di], ax
0x13ed3: mov al, dh
0x13ed5: les di, ptr [bp + 0xe]
0x13ed8: stosw word ptr es:[di], ax
0x13ed9: xchg ax, cx
0x13eda: les di, ptr [bp + 0x12]
0x13edd: stosw word ptr es:[di], ax
0x13ede: pop bp
0x13edf: retf 0x10
0x13ee2: push bp
0x13ee3: mov bp, sp
0x13ee5: mov cx, word ptr [bp + 0xa]
0x13ee8: mov dh, byte ptr [bp + 8]
0x13eeb: mov dl, byte ptr [bp + 6]
0x13eee: mov ah, 0x2b
2018-12-17T22:50:11.668887038Z 48 PC: 149be | Get DOS version
2018-12-17T22:50:11.670901947Z 61 PC: 14870 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:50:11.678934096Z 66 PC: 14f4e | Move file pointer
2018-12-17T22:50:11.681380596Z 66 PC: 14f5c | Move file pointer
2018-12-17T22:50:11.683094661Z 66 PC: 14f6a | Move file pointer
2018-12-17T22:50:11.684874391Z 62 PC: 148c0 | Close file
2018-12-17T22:50:11.701220768Z 26 PC: 13f57 | Set disk transfer address
2018-12-17T22:50:11.703112652Z 78 PC: 13f63 | Find first file
2018-12-17T22:50:11.710138937Z 26 PC: 13f57 | Set disk transfer address
2018-12-17T22:50:11.712826148Z 78 PC: 13f63 | Find first file
2018-12-17T22:50:11.718905727Z 26 PC: 13f7b | Set disk transfer address
2018-12-17T22:50:11.720143716Z 79 PC: 13f80 | Find next file
2018-12-17T22:50:11.7241211Z 26 PC: 13f7b | Set disk transfer address
2018-12-17T22:50:11.725607686Z 79 PC: 13f80 | Find next file
2018-12-17T22:50:11.728915818Z 26 PC: 13f7b | Set disk transfer address
2018-12-17T22:50:11.731304731Z 79 PC: 13f80 | Find next file
2018-12-17T22:50:11.735503088Z 26 PC: 13f57 | Set disk transfer address
2018-12-17T22:50:11.737098939Z 78 PC: 13f63 | Find first file
2018-12-17T22:50:11.749556106Z 61 PC: 14870 | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:50:11.758139825Z 66 PC: 14f4e | Move file pointer
2018-12-17T22:50:11.760073158Z 66 PC: 14f5c | Move file pointer
2018-12-17T22:50:11.762036096Z 66 PC: 14f6a | Move file pointer
2018-12-17T22:50:11.764525574Z 66 PC: 14f4e | Move file pointer
2018-12-17T22:50:11.766045079Z 66 PC: 14f5c | Move file pointer
2018-12-17T22:50:11.767574783Z 66 PC: 14f6a | Move file pointer
2018-12-17T22:50:11.769739669Z 66 PC: 14f4e | Move file pointer
2018-12-17T22:50:11.771606477Z 66 PC: 14f5c | Move file pointer
2018-12-17T22:50:11.773467961Z 66 PC: 14f6a | Move file pointer
2018-12-17T22:50:11.776420351Z 66 PC: 149a2 | Move file pointer
2018-12-17T22:50:11.778384994Z 63 PC: 14902 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:50:11.785508537Z 63 PC: 14902 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:50:11.789465854Z 63 PC: 14902 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:50:11.793120951Z 63 PC: 14902 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:50:11.797776222Z 62 PC: 148c0 | Close file
2018-12-17T22:50:11.801300005Z 26 PC: 140e7 | Set disk transfer address
2018-12-17T22:50:11.803323561Z 26 PC: 13f7b | Set disk transfer address
2018-12-17T22:50:11.805185551Z 79 PC: 13f80 | Find next file
2018-12-17T22:50:11.809186915Z 26 PC: 13f7b | Set disk transfer address
2018-12-17T22:50:11.811051645Z 79 PC: 13f80 | Find next file
2018-12-17T22:50:11.815198097Z 26 PC: 13f57 | Set disk transfer address
2018-12-17T22:50:11.818144517Z 78 PC: 13f63 | Find first file
2018-12-17T22:50:11.830182031Z 61 PC: 14870 | Open file (Filename = 'C:\WINDOWS\SETUP.EXE')
2018-12-17T22:50:11.83851799Z 66 PC: 14f4e | Move file pointer
2018-12-17T22:50:11.841166141Z 66 PC: 14f5c | Move file pointer
2018-12-17T22:50:11.843359278Z 66 PC: 14f6a | Move file pointer
2018-12-17T22:50:11.845627551Z 66 PC: 14f4e | Move file pointer
2018-12-17T22:50:11.847794053Z 66 PC: 14f5c | Move file pointer
2018-12-17T22:50:11.849496617Z 66 PC: 14f6a | Move file pointer
2018-12-17T22:50:11.851285542Z 66 PC: 14f4e | Move file pointer
2018-12-17T22:50:11.862441613Z 66 PC: 14f5c | Move file pointer
2018-12-17T22:50:11.864137462Z 66 PC: 14f6a | Move file pointer
2018-12-17T22:50:11.86588764Z 66 PC: 149a2 | Move file pointer
2018-12-17T22:50:11.868274239Z 63 PC: 14902 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:50:11.87604147Z 63 PC: 14902 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:50:11.879608603Z 63 PC: 14902 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:50:11.883599813Z 63 PC: 14902 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:50:11.887824925Z 62 PC: 148c0 | Close file
2018-12-17T22:50:11.890752891Z 26 PC: 140e7 | Set disk transfer address
2018-12-17T22:50:11.893044687Z 26 PC: 13f7b | Set disk transfer address
2018-12-17T22:50:11.894479218Z 79 PC: 13f80 | Find next file
2018-12-17T22:50:11.897978515Z 26 PC: 13f7b | Set disk transfer address
2018-12-17T22:50:11.900136899Z 79 PC: 13f80 | Find next file
2018-12-17T22:50:11.904616142Z 26 PC: 13f7b | Set disk transfer address
2018-12-17T22:50:11.906215231Z 79 PC: 13f80 | Find next file
2018-12-17T22:50:11.910411125Z 48 PC: 149be | Get DOS version
2018-12-17T22:50:11.912585767Z 61 PC: 14870 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:50:11.92055201Z 63 PC: 14943 | Read file or device (Read 6681 bytes on handle 5)
2018-12-17T22:50:11.931075916Z 62 PC: 148c0 | Close file
2018-12-17T22:50:11.933695222Z 61 PC: 14870 | Open file (Filename = 'C:\WINDOWS\SETUP.EXE')
2018-12-17T22:50:11.941964023Z 63 PC: 14943 | Read file or device (Read 6681 bytes on handle 5)
2018-12-17T22:50:11.951028667Z 66 PC: 149a2 | Move file pointer
2018-12-17T22:50:11.952932697Z 64 PC: 14943 | Write file or device (Write 6681 bytes on handle 5)
2018-12-17T22:50:12.288993507Z 66 PC: 14f4e | Move file pointer
2018-12-17T22:50:12.29164966Z 66 PC: 14f5c | Move file pointer
2018-12-17T22:50:12.293697427Z 66 PC: 14f6a | Move file pointer
2018-12-17T22:50:12.295743906Z 66 PC: 149a2 | Move file pointer
2018-12-17T22:50:12.299651368Z 64 PC: 14943 | Write file or device (Write 6681 bytes on handle 5)
2018-12-17T22:50:12.312291816Z 64 PC: 14943 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:50:12.316414068Z 62 PC: 148c0 | Close file
2018-12-17T22:50:12.326434397Z 48 PC: 149be | Get DOS version
2018-12-17T22:50:12.329121009Z 61 PC: 14870 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:50:12.337345835Z 63 PC: 14943 | Read file or device (Read 6681 bytes on handle 5)
2018-12-17T22:50:12.347432099Z 66 PC: 14f4e | Move file pointer
2018-12-17T22:50:12.349691587Z 66 PC: 14f5c | Move file pointer
2018-12-17T22:50:12.351925928Z 66 PC: 14f6a | Move file pointer
2018-12-17T22:50:12.355297336Z 66 PC: 149a2 | Move file pointer
2018-12-17T22:50:12.357734234Z 63 PC: 14943 | Read file or device (Read 6681 bytes on handle 5)
2018-12-17T22:50:12.367626561Z 66 PC: 14f4e | Move file pointer
2018-12-17T22:50:12.369836884Z 66 PC: 14f5c | Move file pointer
2018-12-17T22:50:12.373082067Z 66 PC: 14f6a | Move file pointer
2018-12-17T22:50:12.37545229Z 66 PC: 149a2 | Move file pointer
2018-12-17T22:50:12.377703312Z 64 PC: 148a1 | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:50:12.39475613Z 66 PC: 149a2 | Move file pointer
2018-12-17T22:50:12.3974999Z 64 PC: 14943 | Write file or device (Write 6681 bytes on handle 5)
2018-12-17T22:50:12.407333108Z 62 PC: 148c0 | Close file
2018-12-17T22:50:12.417572147Z 53 PC: 14124 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:50:12.419565921Z 37 PC: 1412d | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:50:12.4214997Z 53 PC: 14124 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:50:12.424310744Z 37 PC: 1412d | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:50:12.426575479Z 53 PC: 14124 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:50:12.428558413Z 37 PC: 1412d | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:50:12.431319769Z 53 PC: 14124 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:50:12.43247814Z 37 PC: 1412d | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:50:12.433517842Z 53 PC: 14124 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:50:12.435286597Z 37 PC: 1412d | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:50:12.43640225Z 53 PC: 14124 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:50:12.437493843Z 37 PC: 1412d | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:50:12.439228862Z 53 PC: 14124 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:50:12.440328837Z 37 PC: 1412d | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:50:12.441582045Z 53 PC: 14124 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:50:12.443363647Z 37 PC: 1412d | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:50:12.44446224Z 53 PC: 14124 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:50:12.445557114Z 37 PC: 1412d | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:50:12.447327047Z 53 PC: 14124 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:50:12.448547508Z 37 PC: 1412d | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:50:12.449770132Z 53 PC: 14124 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:50:12.451512306Z 37 PC: 1412d | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:50:12.452590648Z 53 PC: 14124 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:50:12.453667228Z 37 PC: 1412d | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:50:12.455339371Z 53 PC: 14124 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:50:12.456435696Z 37 PC: 1412d | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:50:12.457496443Z 53 PC: 14124 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:50:12.458885703Z 37 PC: 1412d | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:50:12.460211286Z 53 PC: 14124 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:50:12.461262297Z 37 PC: 1412d | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:50:12.462945206Z 53 PC: 14124 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:50:12.464644857Z 37 PC: 1412d | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:50:12.465709514Z 53 PC: 14124 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:50:12.467469731Z 37 PC: 1412d | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:50:12.46866574Z 53 PC: 14124 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:50:12.469774809Z 37 PC: 1412d | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:50:12.471696956Z 53 PC: 14124 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:50:12.472975497Z 37 PC: 1412d | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:50:12.474242121Z 48 PC: 149be | Get DOS version
2018-12-17T22:50:12.476165457Z 41 PC: 14073 | Parse filename
2018-12-17T22:50:12.47759393Z 41 PC: 14081 | Parse filename
2018-12-17T22:50:12.479284151Z 75 PC: 1408c | Execute program
2018-12-17T22:50:12.493329712Z 48 PC: 28076 | Get DOS version
2018-12-17T22:50:12.494683165Z 74 PC: 280d0 | Reallocate memory
2018-12-17T22:50:12.495998368Z 48 PC: 28128 | Get DOS version
2018-12-17T22:50:12.497719595Z 53 PC: 28130 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:50:12.49900839Z 37 PC: 28142 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:50:12.500152047Z 68 PC: 281c6 | I/O control for devices (Set for = '��')
2018-12-17T22:50:12.501973671Z 68 PC: 281c6 | I/O control for devices (Set for = '�Ӿ���}�=U�uNj��')
2018-12-17T22:50:12.503400517Z 68 PC: 281c6 | I/O control for devices (Set for = '�>�X+��>�X')
2018-12-17T22:50:12.504810467Z 68 PC: 281c6 | I/O control for devices (Set for = '�V�v��v��o���>�X')
2018-12-17T22:50:12.50690239Z 68 PC: 281c6 | I/O control for devices (Set for = '�V�v��v��o���>�X')
2018-12-17T22:50:12.508722812Z 53 PC: 29997 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:50:12.509946406Z 37 PC: 299ac | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:50:12.511916624Z 99 PC: 2c2dc | Get DBCS lead byte table pointer
2018-12-17T22:50:12.513093066Z 68 PC: 2c2f6 | I/O control for devices (Set for = '')
2018-12-17T22:50:12.514487283Z 68 PC: 2c301 | I/O control for devices (Set for = '')
2018-12-17T22:50:12.517664679Z 68 PC: 2c30c | I/O control for devices (Set for = '')
2018-12-17T22:50:12.519583483Z 68 PC: 2c314 | I/O control for devices (Set for = '��b���g�t�S3����[r�2��W�<t�<u�6�u����>��>W')
2018-12-17T22:50:12.521744872Z 48 PC: 2c319 | Get DOS version
2018-12-17T22:50:12.525042101Z 64 PC: 2c594 | Write file or device (Write 23 bytes on handle 2)
2018-12-17T22:50:12.531202253Z 37 PC: 2825b | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:50:12.532859688Z 76 PC: 28244 | Terminate with return code (Return code = '0')
2018-12-17T22:50:12.537385549Z 53 PC: 14124 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:50:12.539361672Z 37 PC: 1412d | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:50:12.5410157Z 53 PC: 14124 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:50:12.543535121Z 37 PC: 1412d | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:50:12.545472147Z 53 PC: 14124 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:50:12.547123138Z 37 PC: 1412d | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:50:12.549419241Z 53 PC: 14124 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:50:12.550796758Z 37 PC: 1412d | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:50:12.552092777Z 53 PC: 14124 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:50:12.555629579Z 37 PC: 1412d | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:50:12.55693659Z 53 PC: 14124 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:50:12.558253267Z 37 PC: 1412d | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:50:12.560529956Z 53 PC: 14124 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:50:12.562121847Z 37 PC: 1412d | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:50:12.563755071Z 53 PC: 14124 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:50:12.566072158Z 37 PC: 1412d | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:50:12.567385528Z 53 PC: 14124 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:50:12.56869895Z 37 PC: 1412d | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:50:12.571111978Z 53 PC: 14124 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:50:12.572425443Z 37 PC: 1412d | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:50:12.573699799Z 53 PC: 14124 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:50:12.576177608Z 37 PC: 1412d | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:50:12.577674517Z 53 PC: 14124 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:50:12.579189832Z 37 PC: 1412d | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:50:12.582021852Z 53 PC: 14124 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:50:12.583585288Z 37 PC: 1412d | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:50:12.585097082Z 53 PC: 14124 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:50:12.587917967Z 37 PC: 1412d | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:50:12.589801095Z 53 PC: 14124 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:50:12.591367749Z 37 PC: 1412d | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:50:12.594435802Z 53 PC: 14124 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:50:12.596283432Z 37 PC: 1412d | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:50:12.598104921Z 53 PC: 14124 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:50:12.60087269Z 37 PC: 1412d | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:50:12.602555649Z 53 PC: 14124 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:50:12.604201214Z 37 PC: 1412d | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:50:12.606870436Z 53 PC: 14124 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:50:12.608811908Z 37 PC: 1412d | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:50:12.610807451Z 48 PC: 149be | Get DOS version
2018-12-17T22:50:12.61309773Z 61 PC: 14870 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:50:12.62107788Z 64 PC: 14943 | Write file or device (Write 6681 bytes on handle 5)
2018-12-17T22:50:12.637595944Z 66 PC: 14f4e | Move file pointer
2018-12-17T22:50:12.63972238Z 66 PC: 14f5c | Move file pointer
2018-12-17T22:50:12.641717665Z 66 PC: 14f6a | Move file pointer
2018-12-17T22:50:12.645163421Z 66 PC: 149a2 | Move file pointer
2018-12-17T22:50:12.64730077Z 64 PC: 14943 | Write file or device (Write 6681 bytes on handle 5)
2018-12-17T22:50:12.657820136Z 64 PC: 14943 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:50:12.662274601Z 62 PC: 148c0 | Close file
2018-12-17T22:50:12.668282382Z 37 PC: 14301 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:50:12.669268183Z 37 PC: 14301 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:50:12.670934029Z 37 PC: 14301 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:50:12.671962592Z 37 PC: 14301 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:50:12.672955721Z 37 PC: 14301 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:50:12.674588656Z 37 PC: 14301 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:50:12.675619412Z 37 PC: 14301 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:50:12.676624079Z 37 PC: 14301 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:50:12.678298055Z 37 PC: 14301 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:50:12.679320369Z 37 PC: 14301 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:50:12.680297142Z 37 PC: 14301 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:50:12.68230491Z 37 PC: 14301 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:50:12.683554122Z 37 PC: 14301 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:50:12.685003567Z 37 PC: 14301 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:50:12.68697647Z 37 PC: 14301 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:50:12.68887572Z 37 PC: 14301 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:50:12.690166036Z 37 PC: 14301 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:50:12.691652129Z 37 PC: 14301 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:50:12.692714086Z 37 PC: 14301 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:50:12.693712972Z 76 PC: 14340 | Terminate with return code (Return code = '0')