Sample viewer

vx.netlux.org/Virus.DOS.HLLP.Doggy_II.6606

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:51:05.521898441Z 53 PC: 1415a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:51:05.524152454Z 53 PC: 1415a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:51:05.52569414Z 53 PC: 1415a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:51:05.527246554Z 53 PC: 1415a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:51:05.529863324Z 53 PC: 1415a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:51:05.531698617Z 53 PC: 1415a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:51:05.53318319Z 53 PC: 1415a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:51:05.544759587Z 53 PC: 1415a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:51:05.54614491Z 53 PC: 1415a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:51:05.547549911Z 53 PC: 1415a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:51:05.549120742Z 53 PC: 1415a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:51:05.550580618Z 53 PC: 1415a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:51:05.551911244Z 53 PC: 1415a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:51:05.553439227Z 53 PC: 1415a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:51:05.554994271Z 53 PC: 1415a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:51:05.556168587Z 53 PC: 1415a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:51:05.558037465Z 53 PC: 1415a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:51:05.5625029Z 53 PC: 1415a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:51:05.563685752Z 53 PC: 1415a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:51:05.573432586Z 37 PC: 1416f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:51:05.577269073Z 37 PC: 14177 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:51:05.578692582Z 37 PC: 1417f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:51:05.580075809Z 37 PC: 14187 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:51:05.582497635Z 68 PC: 14d5d | I/O control for devices (Set for = '')
2018-12-17T22:51:05.643696855Z 37 PC: 138f1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:51:05.645288651Z 42 PC: 13e77 | Get date 0x13e77: xor ah, ah
0x13e79: les di, ptr [bp + 6]
0x13e7c: stosw word ptr es:[di], ax
0x13e7d: mov al, dl
0x13e7f: les di, ptr [bp + 0xa]
0x13e82: stosw word ptr es:[di], ax
0x13e83: mov al, dh
0x13e85: les di, ptr [bp + 0xe]
0x13e88: stosw word ptr es:[di], ax
0x13e89: xchg ax, cx
0x13e8a: les di, ptr [bp + 0x12]
0x13e8d: stosw word ptr es:[di], ax
0x13e8e: pop bp
0x13e8f: retf 0x10
0x13e92: push bp
0x13e93: mov bp, sp
0x13e95: mov cx, word ptr [bp + 0xa]
0x13e98: mov dh, byte ptr [bp + 8]
0x13e9b: mov dl, byte ptr [bp + 6]
0x13e9e: mov ah, 0x2b
2018-12-17T22:51:05.648252111Z 48 PC: 1496e | Get DOS version
2018-12-17T22:51:05.649735688Z 61 PC: 14820 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:51:05.65637147Z 66 PC: 14e5c | Move file pointer
2018-12-17T22:51:05.662129298Z 66 PC: 14e6a | Move file pointer
2018-12-17T22:51:05.663419341Z 66 PC: 14e78 | Move file pointer
2018-12-17T22:51:05.66496211Z 62 PC: 14870 | Close file
2018-12-17T22:51:05.670293425Z 26 PC: 13f07 | Set disk transfer address
2018-12-17T22:51:05.671884988Z 78 PC: 13f13 | Find first file
2018-12-17T22:51:05.67823741Z 26 PC: 13f07 | Set disk transfer address
2018-12-17T22:51:05.68074994Z 78 PC: 13f13 | Find first file
2018-12-17T22:51:05.686075265Z 26 PC: 13f2b | Set disk transfer address
2018-12-17T22:51:05.701951644Z 79 PC: 13f30 | Find next file
2018-12-17T22:51:05.705954082Z 26 PC: 13f2b | Set disk transfer address
2018-12-17T22:51:05.707380146Z 79 PC: 13f30 | Find next file
2018-12-17T22:51:05.709964228Z 26 PC: 13f2b | Set disk transfer address
2018-12-17T22:51:05.712054023Z 79 PC: 13f30 | Find next file
2018-12-17T22:51:05.715335521Z 26 PC: 13f07 | Set disk transfer address
2018-12-17T22:51:05.716499223Z 78 PC: 13f13 | Find first file
2018-12-17T22:51:05.727104966Z 61 PC: 14820 | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:51:05.73429005Z 66 PC: 14e5c | Move file pointer
2018-12-17T22:51:05.736745801Z 66 PC: 14e6a | Move file pointer
2018-12-17T22:51:05.739508154Z 66 PC: 14e78 | Move file pointer
2018-12-17T22:51:05.741160354Z 66 PC: 14e5c | Move file pointer
2018-12-17T22:51:05.742842622Z 66 PC: 14e6a | Move file pointer
2018-12-17T22:51:05.744770692Z 66 PC: 14e78 | Move file pointer
2018-12-17T22:51:05.746665603Z 66 PC: 14e5c | Move file pointer
2018-12-17T22:51:05.748250202Z 66 PC: 14e6a | Move file pointer
2018-12-17T22:51:05.750126369Z 66 PC: 14e78 | Move file pointer
2018-12-17T22:51:05.751727647Z 66 PC: 14952 | Move file pointer
2018-12-17T22:51:05.753443653Z 63 PC: 148b2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:51:05.759686684Z 63 PC: 148b2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:51:05.762792451Z 63 PC: 148b2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:51:05.765937138Z 63 PC: 148b2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:51:05.770457355Z 62 PC: 14870 | Close file
2018-12-17T22:51:05.773076926Z 26 PC: 14097 | Set disk transfer address
2018-12-17T22:51:05.774269881Z 26 PC: 13f2b | Set disk transfer address
2018-12-17T22:51:05.775754344Z 79 PC: 13f30 | Find next file
2018-12-17T22:51:05.779480525Z 26 PC: 13f2b | Set disk transfer address
2018-12-17T22:51:05.780827637Z 79 PC: 13f30 | Find next file
2018-12-17T22:51:05.784142261Z 26 PC: 13f07 | Set disk transfer address
2018-12-17T22:51:05.785923681Z 78 PC: 13f13 | Find first file
2018-12-17T22:51:05.795824092Z 61 PC: 14820 | Open file (Filename = 'C:\WINDOWS\SETUP.EXE')
2018-12-17T22:51:05.802577712Z 66 PC: 14e5c | Move file pointer
2018-12-17T22:51:05.804310602Z 66 PC: 14e6a | Move file pointer
2018-12-17T22:51:05.806040819Z 66 PC: 14e78 | Move file pointer
2018-12-17T22:51:05.808327441Z 66 PC: 14e5c | Move file pointer
2018-12-17T22:51:05.810426227Z 66 PC: 14e6a | Move file pointer
2018-12-17T22:51:05.812477514Z 66 PC: 14e78 | Move file pointer
2018-12-17T22:51:05.813916003Z 66 PC: 14e5c | Move file pointer
2018-12-17T22:51:05.815408877Z 66 PC: 14e6a | Move file pointer
2018-12-17T22:51:05.81674733Z 66 PC: 14e78 | Move file pointer
2018-12-17T22:51:05.818287524Z 66 PC: 14952 | Move file pointer
2018-12-17T22:51:05.820109754Z 63 PC: 148b2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:51:05.826567804Z 63 PC: 148b2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:51:05.829312205Z 63 PC: 148b2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:51:05.832783861Z 63 PC: 148b2 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:51:05.836566888Z 62 PC: 14870 | Close file
2018-12-17T22:51:05.838928299Z 26 PC: 14097 | Set disk transfer address
2018-12-17T22:51:05.841520503Z 26 PC: 13f2b | Set disk transfer address
2018-12-17T22:51:05.843050585Z 79 PC: 13f30 | Find next file
2018-12-17T22:51:05.846181694Z 26 PC: 13f2b | Set disk transfer address
2018-12-17T22:51:05.848941375Z 79 PC: 13f30 | Find next file
2018-12-17T22:51:05.851495732Z 26 PC: 13f2b | Set disk transfer address
2018-12-17T22:51:05.852462773Z 79 PC: 13f30 | Find next file
2018-12-17T22:51:05.855406973Z 48 PC: 1496e | Get DOS version
2018-12-17T22:51:05.856805596Z 61 PC: 14820 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:51:05.863456109Z 63 PC: 148f3 | Read file or device (Read 6602 bytes on handle 5)
2018-12-17T22:51:05.87224934Z 62 PC: 14870 | Close file
2018-12-17T22:51:05.874142907Z 61 PC: 14820 | Open file (Filename = 'C:\WINDOWS\SETUP.EXE')
2018-12-17T22:51:05.880861265Z 63 PC: 148f3 | Read file or device (Read 6602 bytes on handle 5)
2018-12-17T22:51:05.889214575Z 66 PC: 14952 | Move file pointer
2018-12-17T22:51:05.891078534Z 64 PC: 148f3 | Write file or device (Write 6602 bytes on handle 5)
2018-12-17T22:51:06.236674773Z 66 PC: 14e5c | Move file pointer
2018-12-17T22:51:06.239431387Z 66 PC: 14e6a | Move file pointer
2018-12-17T22:51:06.241766027Z 66 PC: 14e78 | Move file pointer
2018-12-17T22:51:06.243595108Z 66 PC: 14952 | Move file pointer
2018-12-17T22:51:06.246351815Z 64 PC: 148f3 | Write file or device (Write 6602 bytes on handle 5)
2018-12-17T22:51:06.257760546Z 64 PC: 148f3 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:51:06.260894131Z 62 PC: 14870 | Close file
2018-12-17T22:51:06.269240039Z 48 PC: 1496e | Get DOS version
2018-12-17T22:51:06.271679698Z 61 PC: 14820 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:51:06.278344104Z 63 PC: 148f3 | Read file or device (Read 6602 bytes on handle 5)
2018-12-17T22:51:06.285453077Z 66 PC: 14e5c | Move file pointer
2018-12-17T22:51:06.287546803Z 66 PC: 14e6a | Move file pointer
2018-12-17T22:51:06.289242258Z 66 PC: 14e78 | Move file pointer
2018-12-17T22:51:06.291764401Z 66 PC: 14952 | Move file pointer
2018-12-17T22:51:06.294589002Z 63 PC: 148f3 | Read file or device (Read 6602 bytes on handle 5)
2018-12-17T22:51:06.30235213Z 66 PC: 14e5c | Move file pointer
2018-12-17T22:51:06.303835523Z 66 PC: 14e6a | Move file pointer
2018-12-17T22:51:06.306355816Z 66 PC: 14e78 | Move file pointer
2018-12-17T22:51:06.311236704Z 66 PC: 14952 | Move file pointer
2018-12-17T22:51:06.313199879Z 64 PC: 14851 | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:51:06.327523654Z 66 PC: 14952 | Move file pointer
2018-12-17T22:51:06.329327687Z 64 PC: 148f3 | Write file or device (Write 6602 bytes on handle 5)
2018-12-17T22:51:06.337549408Z 62 PC: 14870 | Close file
2018-12-17T22:51:06.346222345Z 53 PC: 140d4 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:51:06.348066246Z 37 PC: 140dd | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:51:06.34953656Z 53 PC: 140d4 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:51:06.351607225Z 37 PC: 140dd | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:51:06.353582327Z 53 PC: 140d4 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:51:06.355141768Z 37 PC: 140dd | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:51:06.357581313Z 53 PC: 140d4 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:51:06.358762859Z 37 PC: 140dd | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:51:06.359888263Z 53 PC: 140d4 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:51:06.361768645Z 37 PC: 140dd | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:51:06.363199167Z 53 PC: 140d4 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:51:06.364564744Z 37 PC: 140dd | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:51:06.366674315Z 53 PC: 140d4 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:51:06.367983975Z 37 PC: 140dd | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:51:06.369303453Z 53 PC: 140d4 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:51:06.371243199Z 37 PC: 140dd | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:51:06.372370761Z 53 PC: 140d4 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:51:06.373417193Z 37 PC: 140dd | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:51:06.37584314Z 53 PC: 140d4 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:51:06.377956803Z 37 PC: 140dd | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:51:06.37927125Z 53 PC: 140d4 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:51:06.381187423Z 37 PC: 140dd | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:51:06.382355285Z 53 PC: 140d4 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:51:06.383692882Z 37 PC: 140dd | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:51:06.38557688Z 53 PC: 140d4 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:51:06.386779897Z 37 PC: 140dd | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:51:06.388070353Z 53 PC: 140d4 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:51:06.390064421Z 37 PC: 140dd | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:51:06.391358896Z 53 PC: 140d4 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:51:06.392726473Z 37 PC: 140dd | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:51:06.394909993Z 53 PC: 140d4 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:51:06.396823459Z 37 PC: 140dd | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:51:06.398209044Z 53 PC: 140d4 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:51:06.400236394Z 37 PC: 140dd | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:51:06.401615013Z 53 PC: 140d4 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:51:06.403006554Z 37 PC: 140dd | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:51:06.404882006Z 53 PC: 140d4 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:51:06.406286042Z 37 PC: 140dd | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:51:06.407665952Z 48 PC: 1496e | Get DOS version
2018-12-17T22:51:06.410183863Z 41 PC: 14023 | Parse filename
2018-12-17T22:51:06.411758084Z 41 PC: 14031 | Parse filename
2018-12-17T22:51:06.413390202Z 75 PC: 1403c | Execute program
2018-12-17T22:51:06.429306878Z 9 PC: 20ad2 | Display string (String= 'Goat file (EXE). Size=00007400h/0000029696d bytes. ')
2018-12-17T22:51:06.440473536Z 76 PC: 20ad6 | Terminate with return code (Return code = '36')
2018-12-17T22:51:06.443637975Z 53 PC: 140d4 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:51:06.445490394Z 37 PC: 140dd | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:51:06.446801891Z 53 PC: 140d4 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:51:06.448899711Z 37 PC: 140dd | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:51:06.45060583Z 53 PC: 140d4 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:51:06.451938853Z 37 PC: 140dd | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:51:06.453979215Z 53 PC: 140d4 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:51:06.455645256Z 37 PC: 140dd | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:51:06.456937819Z 53 PC: 140d4 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:51:06.458489205Z 37 PC: 140dd | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:51:06.460238062Z 53 PC: 140d4 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:51:06.46140841Z 37 PC: 140dd | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:51:06.462829393Z 53 PC: 140d4 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:51:06.464003591Z 37 PC: 140dd | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:51:06.465082131Z 53 PC: 140d4 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:51:06.467011719Z 37 PC: 140dd | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:51:06.468222616Z 53 PC: 140d4 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:51:06.469659839Z 37 PC: 140dd | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:51:06.471692583Z 53 PC: 140d4 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:51:06.473776412Z 37 PC: 140dd | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:51:06.475124806Z 53 PC: 140d4 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:51:06.47719467Z 37 PC: 140dd | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:51:06.478289901Z 53 PC: 140d4 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:51:06.479690315Z 37 PC: 140dd | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:51:06.481685829Z 53 PC: 140d4 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:51:06.482793489Z 37 PC: 140dd | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:51:06.483852403Z 53 PC: 140d4 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:51:06.485683031Z 37 PC: 140dd | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:51:06.486721152Z 53 PC: 140d4 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:51:06.487790148Z 37 PC: 140dd | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:51:06.48957532Z 53 PC: 140d4 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:51:06.49066547Z 37 PC: 140dd | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:51:06.491792552Z 53 PC: 140d4 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:51:06.493770666Z 37 PC: 140dd | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:51:06.494817587Z 53 PC: 140d4 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:51:06.495878921Z 37 PC: 140dd | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:51:06.498150829Z 53 PC: 140d4 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:51:06.499476155Z 37 PC: 140dd | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:51:06.501369367Z 48 PC: 1496e | Get DOS version
2018-12-17T22:51:06.503983042Z 61 PC: 14820 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:51:06.51089126Z 64 PC: 148f3 | Write file or device (Write 6602 bytes on handle 5)
2018-12-17T22:51:06.734324553Z 66 PC: 14e5c | Move file pointer
2018-12-17T22:51:06.736796792Z 66 PC: 14e6a | Move file pointer
2018-12-17T22:51:06.738259506Z 66 PC: 14e78 | Move file pointer
2018-12-17T22:51:06.740225798Z 66 PC: 14952 | Move file pointer
2018-12-17T22:51:06.741659209Z 64 PC: 148f3 | Write file or device (Write 6602 bytes on handle 5)
2018-12-17T22:51:06.750119136Z 64 PC: 148f3 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:51:06.753241223Z 62 PC: 14870 | Close file
2018-12-17T22:51:06.761459476Z 37 PC: 142b1 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:51:06.762537743Z 37 PC: 142b1 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:51:06.764589026Z 37 PC: 142b1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:51:06.765651162Z 37 PC: 142b1 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:51:06.766707247Z 37 PC: 142b1 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:51:06.768735876Z 37 PC: 142b1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:51:06.770696745Z 37 PC: 142b1 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:51:06.77229239Z 37 PC: 142b1 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:51:06.776170103Z 37 PC: 142b1 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:51:06.777818994Z 37 PC: 142b1 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:51:06.779353067Z 37 PC: 142b1 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:51:06.781484943Z 37 PC: 142b1 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:51:06.782781475Z 37 PC: 142b1 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:51:06.784052993Z 37 PC: 142b1 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:51:06.786373345Z 37 PC: 142b1 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:51:06.787790889Z 37 PC: 142b1 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:51:06.789189423Z 37 PC: 142b1 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:51:06.791452312Z 37 PC: 142b1 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:51:06.792444966Z 37 PC: 142b1 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:51:06.793568183Z 76 PC: 142f0 | Terminate with return code (Return code = '0')