Sample viewer

vx.netlux.org/Virus.DOS.HLLO.Moon.5424

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:53:37.600170242Z 53 PC: 12ffa | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:53:37.602168266Z 53 PC: 12ffa | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:53:37.604223776Z 53 PC: 12ffa | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:53:37.6057857Z 53 PC: 12ffa | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:53:37.607289445Z 53 PC: 12ffa | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:53:37.609491893Z 53 PC: 12ffa | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:53:37.610841417Z 53 PC: 12ffa | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:53:37.612281883Z 53 PC: 12ffa | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:53:37.614448964Z 53 PC: 12ffa | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:53:37.615914417Z 53 PC: 12ffa | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:53:37.617392002Z 53 PC: 12ffa | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:53:37.619519017Z 53 PC: 12ffa | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:53:37.621009327Z 53 PC: 12ffa | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:53:37.622470732Z 53 PC: 12ffa | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:53:37.62504095Z 53 PC: 12ffa | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:53:37.626416624Z 53 PC: 12ffa | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:53:37.62766576Z 53 PC: 12ffa | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:53:37.628960522Z 53 PC: 12ffa | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:53:37.631307541Z 53 PC: 12ffa | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:53:37.632635265Z 37 PC: 1300f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:53:37.633918175Z 37 PC: 13017 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:53:37.640759767Z 37 PC: 1301f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:53:37.642796763Z 37 PC: 13027 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:53:37.644966919Z 68 PC: 13ce3 | I/O control for devices (Set for = '&���&�G &�f %:��&�G&:F�������')
2018-12-17T22:53:37.649376883Z 64 PC: 13418 | Write file or device (Write 23 bytes on handle 1)
2018-12-17T22:53:37.654982132Z 26 PC: 12e6d | Set disk transfer address
2018-12-17T22:53:37.656860671Z 78 PC: 12e79 | Find first file
2018-12-17T22:53:37.667434844Z 67 PC: 12dcf | Get or set file attributes
2018-12-17T22:53:37.674770433Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:53:37.693884717Z 61 PC: 136c0 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:53:37.701993158Z 87 PC: 12e10 | Get or set file date and time
2018-12-17T22:53:37.704068637Z 48 PC: 1380e | Get DOS version
2018-12-17T22:53:37.706055349Z 61 PC: 136c0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:53:37.713674642Z 66 PC: 13de2 | Move file pointer
2018-12-17T22:53:37.716112741Z 66 PC: 13df0 | Move file pointer
2018-12-17T22:53:37.718184683Z 66 PC: 13dfe | Move file pointer
2018-12-17T22:53:37.719942064Z 66 PC: 13de2 | Move file pointer
2018-12-17T22:53:37.722729701Z 66 PC: 13df0 | Move file pointer
2018-12-17T22:53:37.729938552Z 66 PC: 13dfe | Move file pointer
2018-12-17T22:53:37.735807917Z 63 PC: 13793 | Read file or device (Read 4282 bytes on handle 6)
2018-12-17T22:53:37.750266396Z 64 PC: 13793 | Write file or device (Write 4282 bytes on handle 5)
2018-12-17T22:53:37.760425269Z 62 PC: 13710 | Close file
2018-12-17T22:53:37.762749094Z 87 PC: 12e3d | Get or set file date and time
2018-12-17T22:53:37.766261171Z 62 PC: 13710 | Close file
2018-12-17T22:53:37.775311702Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:53:37.787701886Z 26 PC: 12e91 | Set disk transfer address
2018-12-17T22:53:37.792040486Z 79 PC: 12e96 | Find next file
2018-12-17T22:53:37.795216342Z 25 PC: 1389b | Get default drive
2018-12-17T22:53:37.797231698Z 71 PC: 138ae | Get current directory
2018-12-17T22:53:37.802345794Z 14 PC: 138f4 | Set default drive (Drive = 'C')
2018-12-17T22:53:37.804272683Z 25 PC: 138f8 | Get default drive
2018-12-17T22:53:37.806325139Z 59 PC: 13962 | Change current directory
2018-12-17T22:53:37.813285604Z 26 PC: 12e6d | Set disk transfer address
2018-12-17T22:53:37.815108618Z 78 PC: 12e79 | Find first file
2018-12-17T22:53:37.825957316Z 67 PC: 12dcf | Get or set file attributes
2018-12-17T22:53:37.832615423Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:53:38.179155732Z 61 PC: 136c0 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:53:38.187148395Z 87 PC: 12e10 | Get or set file date and time
2018-12-17T22:53:38.189133044Z 48 PC: 1380e | Get DOS version
2018-12-17T22:53:38.192311524Z 61 PC: 136c0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:53:38.199957977Z 66 PC: 13de2 | Move file pointer
2018-12-17T22:53:38.206071812Z 66 PC: 13df0 | Move file pointer
2018-12-17T22:53:38.211148898Z 66 PC: 13dfe | Move file pointer
2018-12-17T22:53:38.213496308Z 66 PC: 13de2 | Move file pointer
2018-12-17T22:53:38.215378273Z 66 PC: 13df0 | Move file pointer
2018-12-17T22:53:38.217638448Z 66 PC: 13dfe | Move file pointer
2018-12-17T22:53:38.220407991Z 63 PC: 13793 | Read file or device (Read 4282 bytes on handle 6)
2018-12-17T22:53:38.228686321Z 64 PC: 13793 | Write file or device (Write 4282 bytes on handle 5)
2018-12-17T22:53:38.252110482Z 62 PC: 13710 | Close file
2018-12-17T22:53:38.255785064Z 87 PC: 12e3d | Get or set file date and time
2018-12-17T22:53:38.257509974Z 62 PC: 13710 | Close file
2018-12-17T22:53:38.265712171Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:53:38.279083338Z 26 PC: 12e91 | Set disk transfer address
2018-12-17T22:53:38.2804102Z 79 PC: 12e96 | Find next file
2018-12-17T22:53:38.285638401Z 67 PC: 12dcf | Get or set file attributes
2018-12-17T22:53:38.294055612Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:53:38.304589068Z 61 PC: 136c0 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:53:38.312359835Z 87 PC: 12e10 | Get or set file date and time
2018-12-17T22:53:38.315346946Z 48 PC: 1380e | Get DOS version
2018-12-17T22:53:38.317408399Z 61 PC: 136c0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:53:38.325070922Z 66 PC: 13de2 | Move file pointer
2018-12-17T22:53:38.328150807Z 66 PC: 13df0 | Move file pointer
2018-12-17T22:53:38.330135004Z 66 PC: 13dfe | Move file pointer
2018-12-17T22:53:38.332092061Z 66 PC: 13de2 | Move file pointer
2018-12-17T22:53:38.334019101Z 66 PC: 13df0 | Move file pointer
2018-12-17T22:53:38.337482426Z 66 PC: 13dfe | Move file pointer
2018-12-17T22:53:38.339574967Z 63 PC: 13793 | Read file or device (Read 4282 bytes on handle 6)
2018-12-17T22:53:38.347992218Z 64 PC: 13793 | Write file or device (Write 4282 bytes on handle 5)
2018-12-17T22:53:38.361475034Z 62 PC: 13710 | Close file
2018-12-17T22:53:38.363918464Z 87 PC: 12e3d | Get or set file date and time
2018-12-17T22:53:38.366035832Z 62 PC: 13710 | Close file
2018-12-17T22:53:38.374706218Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:53:38.385262858Z 26 PC: 12e91 | Set disk transfer address
2018-12-17T22:53:38.387033584Z 79 PC: 12e96 | Find next file
2018-12-17T22:53:38.392344711Z 67 PC: 12dcf | Get or set file attributes
2018-12-17T22:53:38.399038494Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:53:38.409584634Z 61 PC: 136c0 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:53:38.417391719Z 87 PC: 12e10 | Get or set file date and time
2018-12-17T22:53:38.42005906Z 48 PC: 1380e | Get DOS version
2018-12-17T22:53:38.423317691Z 61 PC: 136c0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:53:38.43116413Z 66 PC: 13de2 | Move file pointer
2018-12-17T22:53:38.433597731Z 66 PC: 13df0 | Move file pointer
2018-12-17T22:53:38.436714586Z 66 PC: 13dfe | Move file pointer
2018-12-17T22:53:38.439738206Z 66 PC: 13de2 | Move file pointer
2018-12-17T22:53:38.445561605Z 66 PC: 13df0 | Move file pointer
2018-12-17T22:53:38.455544657Z 66 PC: 13dfe | Move file pointer
2018-12-17T22:53:38.457752304Z 63 PC: 13793 | Read file or device (Read 4282 bytes on handle 6)
2018-12-17T22:53:38.467850543Z 64 PC: 13793 | Write file or device (Write 4282 bytes on handle 5)
2018-12-17T22:53:38.479136923Z 62 PC: 13710 | Close file
2018-12-17T22:53:38.481800055Z 87 PC: 12e3d | Get or set file date and time
2018-12-17T22:53:38.485221713Z 62 PC: 13710 | Close file
2018-12-17T22:53:38.493282986Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:53:38.505408943Z 26 PC: 12e91 | Set disk transfer address
2018-12-17T22:53:38.507249741Z 79 PC: 12e96 | Find next file
2018-12-17T22:53:38.51398373Z 67 PC: 12dcf | Get or set file attributes
2018-12-17T22:53:38.520939836Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:53:38.531775521Z 61 PC: 136c0 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:53:38.540524014Z 87 PC: 12e10 | Get or set file date and time
2018-12-17T22:53:38.542514623Z 48 PC: 1380e | Get DOS version
2018-12-17T22:53:38.544494823Z 61 PC: 136c0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:53:38.553397115Z 66 PC: 13de2 | Move file pointer
2018-12-17T22:53:38.555302514Z 66 PC: 13df0 | Move file pointer
2018-12-17T22:53:38.557187916Z 66 PC: 13dfe | Move file pointer
2018-12-17T22:53:38.559903797Z 66 PC: 13de2 | Move file pointer
2018-12-17T22:53:38.561811571Z 66 PC: 13df0 | Move file pointer
2018-12-17T22:53:38.563758759Z 66 PC: 13dfe | Move file pointer
2018-12-17T22:53:38.56661814Z 63 PC: 13793 | Read file or device (Read 4282 bytes on handle 6)
2018-12-17T22:53:38.575844901Z 64 PC: 13793 | Write file or device (Write 4282 bytes on handle 5)
2018-12-17T22:53:38.585073056Z 62 PC: 13710 | Close file
2018-12-17T22:53:38.588183709Z 87 PC: 12e3d | Get or set file date and time
2018-12-17T22:53:38.590279035Z 62 PC: 13710 | Close file
2018-12-17T22:53:38.597769575Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:53:38.609218982Z 26 PC: 12e91 | Set disk transfer address
2018-12-17T22:53:38.610639911Z 79 PC: 12e96 | Find next file
2018-12-17T22:53:38.614869606Z 67 PC: 12dcf | Get or set file attributes
2018-12-17T22:53:38.622591762Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:53:38.634297029Z 61 PC: 136c0 | Open file (Filename = 'FDISK.EXE')
2018-12-17T22:53:38.642094636Z 87 PC: 12e10 | Get or set file date and time
2018-12-17T22:53:38.644883335Z 48 PC: 1380e | Get DOS version
2018-12-17T22:53:38.646995823Z 61 PC: 136c0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:53:38.654829468Z 66 PC: 13de2 | Move file pointer
2018-12-17T22:53:38.65743403Z 66 PC: 13df0 | Move file pointer
2018-12-17T22:53:38.659516722Z 66 PC: 13dfe | Move file pointer
2018-12-17T22:53:38.661409779Z 66 PC: 13de2 | Move file pointer
2018-12-17T22:53:38.663475469Z 66 PC: 13df0 | Move file pointer
2018-12-17T22:53:38.666006102Z 66 PC: 13dfe | Move file pointer
2018-12-17T22:53:38.667982304Z 63 PC: 13793 | Read file or device (Read 4282 bytes on handle 6)
2018-12-17T22:53:38.676313664Z 64 PC: 13793 | Write file or device (Write 4282 bytes on handle 5)
2018-12-17T22:53:38.685863012Z 62 PC: 13710 | Close file
2018-12-17T22:53:38.688269542Z 87 PC: 12e3d | Get or set file date and time
2018-12-17T22:53:38.690360099Z 62 PC: 13710 | Close file
2018-12-17T22:53:38.698978288Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:53:38.710374134Z 26 PC: 12e91 | Set disk transfer address
2018-12-17T22:53:38.711910199Z 79 PC: 12e96 | Find next file
2018-12-17T22:53:38.717181562Z 67 PC: 12dcf | Get or set file attributes
2018-12-17T22:53:38.724077846Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:53:38.734877742Z 61 PC: 136c0 | Open file (Filename = 'MEM.EXE')
2018-12-17T22:53:38.743786487Z 87 PC: 12e10 | Get or set file date and time
2018-12-17T22:53:38.745760344Z 48 PC: 1380e | Get DOS version
2018-12-17T22:53:38.747707843Z 61 PC: 136c0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:53:38.756546896Z 66 PC: 13de2 | Move file pointer
2018-12-17T22:53:38.75888087Z 66 PC: 13df0 | Move file pointer
2018-12-17T22:53:38.760780268Z 66 PC: 13dfe | Move file pointer
2018-12-17T22:53:38.763612999Z 66 PC: 13de2 | Move file pointer
2018-12-17T22:53:38.765802462Z 66 PC: 13df0 | Move file pointer
2018-12-17T22:53:38.767656775Z 66 PC: 13dfe | Move file pointer
2018-12-17T22:53:38.770376744Z 63 PC: 13793 | Read file or device (Read 4282 bytes on handle 6)
2018-12-17T22:53:38.77975448Z 64 PC: 13793 | Write file or device (Write 4282 bytes on handle 5)
2018-12-17T22:53:38.788966885Z 62 PC: 13710 | Close file
2018-12-17T22:53:38.79216958Z 87 PC: 12e3d | Get or set file date and time
2018-12-17T22:53:38.794301405Z 62 PC: 13710 | Close file
2018-12-17T22:53:38.801789511Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:53:38.812637508Z 26 PC: 12e91 | Set disk transfer address
2018-12-17T22:53:38.814550471Z 79 PC: 12e96 | Find next file
2018-12-17T22:53:38.82225823Z 67 PC: 12dcf | Get or set file attributes
2018-12-17T22:53:38.829107736Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:53:38.841984063Z 61 PC: 136c0 | Open file (Filename = 'NLSFUNC.EXE')
2018-12-17T22:53:38.854019741Z 87 PC: 12e10 | Get or set file date and time
2018-12-17T22:53:38.855973621Z 48 PC: 1380e | Get DOS version
2018-12-17T22:53:38.859086809Z 61 PC: 136c0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:53:38.866910305Z 66 PC: 13de2 | Move file pointer
2018-12-17T22:53:38.868597154Z 66 PC: 13df0 | Move file pointer
2018-12-17T22:53:38.871468237Z 66 PC: 13dfe | Move file pointer
2018-12-17T22:53:38.873395697Z 66 PC: 13de2 | Move file pointer
2018-12-17T22:53:38.875241655Z 66 PC: 13df0 | Move file pointer
2018-12-17T22:53:38.877973487Z 66 PC: 13dfe | Move file pointer
2018-12-17T22:53:38.88036583Z 63 PC: 13793 | Read file or device (Read 4282 bytes on handle 6)
2018-12-17T22:53:38.888973809Z 64 PC: 13793 | Write file or device (Write 4282 bytes on handle 5)
2018-12-17T22:53:38.898909122Z 62 PC: 13710 | Close file
2018-12-17T22:53:38.901588776Z 87 PC: 12e3d | Get or set file date and time
2018-12-17T22:53:38.903613008Z 62 PC: 13710 | Close file
2018-12-17T22:53:38.912729934Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:53:38.923837939Z 26 PC: 12e91 | Set disk transfer address
2018-12-17T22:53:38.925346924Z 79 PC: 12e96 | Find next file
2018-12-17T22:53:38.93032263Z 67 PC: 12dcf | Get or set file attributes
2018-12-17T22:53:38.93761615Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:53:38.948657651Z 61 PC: 136c0 | Open file (Filename = 'QBASIC.EXE')
2018-12-17T22:53:38.956729814Z 87 PC: 12e10 | Get or set file date and time
2018-12-17T22:53:38.959548549Z 48 PC: 1380e | Get DOS version
2018-12-17T22:53:38.961507578Z 61 PC: 136c0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:53:38.969356332Z 66 PC: 13de2 | Move file pointer
2018-12-17T22:53:38.972300232Z 66 PC: 13df0 | Move file pointer
2018-12-17T22:53:38.974986227Z 66 PC: 13dfe | Move file pointer
2018-12-17T22:53:38.976887609Z 66 PC: 13de2 | Move file pointer
2018-12-17T22:53:38.979751879Z 66 PC: 13df0 | Move file pointer
2018-12-17T22:53:38.98161025Z 66 PC: 13dfe | Move file pointer
2018-12-17T22:53:38.983514607Z 62 PC: 13710 | Close file
2018-12-17T22:53:38.986856895Z 87 PC: 12e3d | Get or set file date and time
2018-12-17T22:53:38.988952522Z 62 PC: 13710 | Close file
2018-12-17T22:53:38.99623939Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:53:39.008151435Z 26 PC: 12e91 | Set disk transfer address
2018-12-17T22:53:39.010047958Z 79 PC: 12e96 | Find next file
2018-12-17T22:53:39.01429728Z 67 PC: 12dcf | Get or set file attributes
2018-12-17T22:53:39.021951889Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:53:39.033288503Z 61 PC: 136c0 | Open file (Filename = 'REPLACE.EXE')
2018-12-17T22:53:39.042067394Z 87 PC: 12e10 | Get or set file date and time
2018-12-17T22:53:39.044842166Z 48 PC: 1380e | Get DOS version
2018-12-17T22:53:39.047166272Z 61 PC: 136c0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:53:39.055000688Z 66 PC: 13de2 | Move file pointer
2018-12-17T22:53:39.057624386Z 66 PC: 13df0 | Move file pointer
2018-12-17T22:53:39.059864344Z 66 PC: 13dfe | Move file pointer
2018-12-17T22:53:39.061796133Z 66 PC: 13de2 | Move file pointer
2018-12-17T22:53:39.063820105Z 66 PC: 13df0 | Move file pointer
2018-12-17T22:53:39.066461316Z 66 PC: 13dfe | Move file pointer
2018-12-17T22:53:39.068413233Z 63 PC: 13793 | Read file or device (Read 4282 bytes on handle 6)
2018-12-17T22:53:39.076957312Z 64 PC: 13793 | Write file or device (Write 4282 bytes on handle 5)
2018-12-17T22:53:39.091695897Z 62 PC: 13710 | Close file
2018-12-17T22:53:39.093814397Z 87 PC: 12e3d | Get or set file date and time
2018-12-17T22:53:39.095585984Z 62 PC: 13710 | Close file
2018-12-17T22:53:39.119907901Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:53:39.134388182Z 26 PC: 12e91 | Set disk transfer address
2018-12-17T22:53:39.136244057Z 79 PC: 12e96 | Find next file
2018-12-17T22:53:39.141322617Z 67 PC: 12dcf | Get or set file attributes
2018-12-17T22:53:39.150285724Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:53:39.160795105Z 61 PC: 136c0 | Open file (Filename = 'RESTORE.EXE')
2018-12-17T22:53:39.171828139Z 87 PC: 12e10 | Get or set file date and time
2018-12-17T22:53:39.174738416Z 48 PC: 1380e | Get DOS version
2018-12-17T22:53:39.176995125Z 61 PC: 136c0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:53:39.186518234Z 66 PC: 13de2 | Move file pointer
2018-12-17T22:53:39.188843151Z 66 PC: 13df0 | Move file pointer
2018-12-17T22:53:39.190864859Z 66 PC: 13dfe | Move file pointer
2018-12-17T22:53:39.193786406Z 66 PC: 13de2 | Move file pointer
2018-12-17T22:53:39.195692837Z 66 PC: 13df0 | Move file pointer
2018-12-17T22:53:39.197548183Z 66 PC: 13dfe | Move file pointer
2018-12-17T22:53:39.2005812Z 63 PC: 13793 | Read file or device (Read 4282 bytes on handle 6)
2018-12-17T22:53:39.209655084Z 64 PC: 13793 | Write file or device (Write 4282 bytes on handle 5)
2018-12-17T22:53:39.219374662Z 62 PC: 13710 | Close file
2018-12-17T22:53:39.222918318Z 87 PC: 12e3d | Get or set file date and time
2018-12-17T22:53:39.225377307Z 62 PC: 13710 | Close file
2018-12-17T22:53:39.233306201Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:53:39.246672158Z 26 PC: 12e91 | Set disk transfer address
2018-12-17T22:53:39.248409501Z 79 PC: 12e96 | Find next file
2018-12-17T22:53:39.25283232Z 67 PC: 12dcf | Get or set file attributes
2018-12-17T22:53:39.261055707Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:53:39.272291572Z 61 PC: 136c0 | Open file (Filename = 'SCANDISK.EXE')
2018-12-17T22:53:39.280332787Z 87 PC: 12e10 | Get or set file date and time
2018-12-17T22:53:39.282911441Z 48 PC: 1380e | Get DOS version
2018-12-17T22:53:39.284947365Z 61 PC: 136c0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:53:39.29318539Z 66 PC: 13de2 | Move file pointer
2018-12-17T22:53:39.299624204Z 66 PC: 13df0 | Move file pointer
2018-12-17T22:53:39.301947288Z 66 PC: 13dfe | Move file pointer
2018-12-17T22:53:39.303984294Z 66 PC: 13de2 | Move file pointer
2018-12-17T22:53:39.306141276Z 66 PC: 13df0 | Move file pointer
2018-12-17T22:53:39.308926037Z 66 PC: 13dfe | Move file pointer
2018-12-17T22:53:39.310979424Z 63 PC: 13793 | Read file or device (Read 4282 bytes on handle 6)
2018-12-17T22:53:39.320615635Z 64 PC: 13793 | Write file or device (Write 4282 bytes on handle 5)
2018-12-17T22:53:39.331515369Z 62 PC: 13710 | Close file
2018-12-17T22:53:39.333989367Z 87 PC: 12e3d | Get or set file date and time
2018-12-17T22:53:39.336186644Z 62 PC: 13710 | Close file
2018-12-17T22:53:39.34459589Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:53:39.35547722Z 26 PC: 12e91 | Set disk transfer address
2018-12-17T22:53:39.357110548Z 79 PC: 12e96 | Find next file
2018-12-17T22:53:39.362385466Z 67 PC: 12dcf | Get or set file attributes
2018-12-17T22:53:39.369895383Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:53:39.382025609Z 61 PC: 136c0 | Open file (Filename = 'SETUP.EXE')
2018-12-17T22:53:39.391025925Z 87 PC: 12e10 | Get or set file date and time
2018-12-17T22:53:39.393281753Z 48 PC: 1380e | Get DOS version
2018-12-17T22:53:39.39603804Z 61 PC: 136c0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:53:39.404597298Z 66 PC: 13de2 | Move file pointer
2018-12-17T22:53:39.406680521Z 66 PC: 13df0 | Move file pointer
2018-12-17T22:53:39.408856549Z 66 PC: 13dfe | Move file pointer
2018-12-17T22:53:39.411117776Z 66 PC: 13de2 | Move file pointer
2018-12-17T22:53:39.413154082Z 66 PC: 13df0 | Move file pointer
2018-12-17T22:53:39.415993966Z 66 PC: 13dfe | Move file pointer
2018-12-17T22:53:39.418218564Z 63 PC: 13793 | Read file or device (Read 4282 bytes on handle 6)
2018-12-17T22:53:39.427048411Z 64 PC: 13793 | Write file or device (Write 4282 bytes on handle 5)
2018-12-17T22:53:39.436429322Z 62 PC: 13710 | Close file
2018-12-17T22:53:39.43881821Z 87 PC: 12e3d | Get or set file date and time
2018-12-17T22:53:39.456463214Z 62 PC: 13710 | Close file
2018-12-17T22:53:39.464658458Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:53:39.475079493Z 26 PC: 12e91 | Set disk transfer address
2018-12-17T22:53:39.476587446Z 79 PC: 12e96 | Find next file
2018-12-17T22:53:39.481498681Z 67 PC: 12dcf | Get or set file attributes
2018-12-17T22:53:39.488521854Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:53:39.498935916Z 61 PC: 136c0 | Open file (Filename = 'XCOPY.EXE')
2018-12-17T22:53:39.507810757Z 87 PC: 12e10 | Get or set file date and time
2018-12-17T22:53:39.510126196Z 48 PC: 1380e | Get DOS version
2018-12-17T22:53:39.512845965Z 61 PC: 136c0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:53:39.521254139Z 66 PC: 13de2 | Move file pointer
2018-12-17T22:53:39.523382797Z 66 PC: 13df0 | Move file pointer
2018-12-17T22:53:39.525471Z 66 PC: 13dfe | Move file pointer
2018-12-17T22:53:39.528011803Z 66 PC: 13de2 | Move file pointer
2018-12-17T22:53:39.529674446Z 66 PC: 13df0 | Move file pointer
2018-12-17T22:53:39.531218476Z 66 PC: 13dfe | Move file pointer
2018-12-17T22:53:39.537546843Z 63 PC: 13793 | Read file or device (Read 4282 bytes on handle 6)
2018-12-17T22:53:39.545666896Z 64 PC: 13793 | Write file or device (Write 4282 bytes on handle 5)
2018-12-17T22:53:39.558565285Z 62 PC: 13710 | Close file
2018-12-17T22:53:39.561729268Z 87 PC: 12e3d | Get or set file date and time
2018-12-17T22:53:39.563611243Z 62 PC: 13710 | Close file
2018-12-17T22:53:39.569516416Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:53:39.577843537Z 26 PC: 12e91 | Set disk transfer address
2018-12-17T22:53:39.578967769Z 79 PC: 12e96 | Find next file
2018-12-17T22:53:39.581968416Z 67 PC: 12dcf | Get or set file attributes
2018-12-17T22:53:39.587976782Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:53:39.596405525Z 61 PC: 136c0 | Open file (Filename = 'DEFRAG.EXE')
2018-12-17T22:53:39.602440942Z 87 PC: 12e10 | Get or set file date and time
2018-12-17T22:53:39.605600267Z 48 PC: 1380e | Get DOS version
2018-12-17T22:53:39.607510645Z 61 PC: 136c0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:53:39.615171455Z 66 PC: 13de2 | Move file pointer
2018-12-17T22:53:39.618132136Z 66 PC: 13df0 | Move file pointer
2018-12-17T22:53:39.619958127Z 66 PC: 13dfe | Move file pointer
2018-12-17T22:53:39.621805667Z 66 PC: 13de2 | Move file pointer
2018-12-17T22:53:39.624545093Z 66 PC: 13df0 | Move file pointer
2018-12-17T22:53:39.626247711Z 66 PC: 13dfe | Move file pointer
2018-12-17T22:53:39.628092697Z 63 PC: 13793 | Read file or device (Read 4282 bytes on handle 6)
2018-12-17T22:53:39.637406202Z 64 PC: 13793 | Write file or device (Write 4282 bytes on handle 5)
2018-12-17T22:53:39.646034459Z 62 PC: 13710 | Close file
2018-12-17T22:53:39.648289725Z 87 PC: 12e3d | Get or set file date and time
2018-12-17T22:53:39.651466443Z 62 PC: 13710 | Close file
2018-12-17T22:53:39.659382282Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:53:39.669844234Z 26 PC: 12e91 | Set disk transfer address
2018-12-17T22:53:39.672556058Z 79 PC: 12e96 | Find next file
2018-12-17T22:53:39.679916844Z 67 PC: 12dcf | Get or set file attributes
2018-12-17T22:53:39.686530287Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:53:39.698179429Z 61 PC: 136c0 | Open file (Filename = 'EMM386.EXE')
2018-12-17T22:53:39.705771961Z 87 PC: 12e10 | Get or set file date and time
2018-12-17T22:53:39.707638537Z 48 PC: 1380e | Get DOS version
2018-12-17T22:53:39.710693616Z 61 PC: 136c0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:53:39.718290877Z 66 PC: 13de2 | Move file pointer
2018-12-17T22:53:39.720475781Z 66 PC: 13df0 | Move file pointer
2018-12-17T22:53:39.723882811Z 66 PC: 13dfe | Move file pointer
2018-12-17T22:53:39.725712087Z 66 PC: 13de2 | Move file pointer
2018-12-17T22:53:39.727430475Z 66 PC: 13df0 | Move file pointer
2018-12-17T22:53:39.729792712Z 66 PC: 13dfe | Move file pointer
2018-12-17T22:53:39.73144166Z 63 PC: 13793 | Read file or device (Read 4282 bytes on handle 6)
2018-12-17T22:53:39.739440535Z 64 PC: 13793 | Write file or device (Write 4282 bytes on handle 5)
2018-12-17T22:53:39.748597676Z 62 PC: 13710 | Close file
2018-12-17T22:53:39.750930558Z 87 PC: 12e3d | Get or set file date and time
2018-12-17T22:53:39.752956814Z 62 PC: 13710 | Close file
2018-12-17T22:53:39.761185531Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:53:39.772543837Z 26 PC: 12e91 | Set disk transfer address
2018-12-17T22:53:39.773848798Z 79 PC: 12e96 | Find next file
2018-12-17T22:53:39.778538387Z 67 PC: 12dcf | Get or set file attributes
2018-12-17T22:53:39.78499725Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:53:39.79664015Z 61 PC: 136c0 | Open file (Filename = 'MSCDEX.EXE')
2018-12-17T22:53:39.804445281Z 87 PC: 12e10 | Get or set file date and time
2018-12-17T22:53:39.806050156Z 48 PC: 1380e | Get DOS version
2018-12-17T22:53:39.807938082Z 61 PC: 136c0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:53:39.816124891Z 66 PC: 13de2 | Move file pointer
2018-12-17T22:53:39.817660916Z 66 PC: 13df0 | Move file pointer
2018-12-17T22:53:39.819958241Z 66 PC: 13dfe | Move file pointer
2018-12-17T22:53:39.821899358Z 66 PC: 13de2 | Move file pointer
2018-12-17T22:53:39.823707754Z 66 PC: 13df0 | Move file pointer
2018-12-17T22:53:39.826507624Z 66 PC: 13dfe | Move file pointer
2018-12-17T22:53:39.828349774Z 63 PC: 13793 | Read file or device (Read 4282 bytes on handle 6)
2018-12-17T22:53:39.836209749Z 64 PC: 13793 | Write file or device (Write 4282 bytes on handle 5)
2018-12-17T22:53:39.846189715Z 62 PC: 13710 | Close file
2018-12-17T22:53:39.848755685Z 87 PC: 12e3d | Get or set file date and time
2018-12-17T22:53:39.851424478Z 62 PC: 13710 | Close file
2018-12-17T22:53:39.859249998Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:53:39.871215394Z 26 PC: 12e91 | Set disk transfer address
2018-12-17T22:53:39.872992331Z 79 PC: 12e96 | Find next file
2018-12-17T22:53:39.877662595Z 14 PC: 138f4 | Set default drive (Drive = 'A')
2018-12-17T22:53:39.879069307Z 25 PC: 138f8 | Get default drive
2018-12-17T22:53:39.88059876Z 59 PC: 13962 | Change current directory
2018-12-17T22:53:39.886461863Z 64 PC: 13418 | Write file or device (Write 33 bytes on handle 1)
2018-12-17T22:53:39.891990358Z 64 PC: 13418 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:53:39.894283956Z 37 PC: 13151 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:53:39.896625735Z 37 PC: 13151 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:53:39.898749324Z 37 PC: 13151 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:53:39.900409252Z 37 PC: 13151 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:53:39.902555734Z 37 PC: 13151 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:53:39.9039857Z 37 PC: 13151 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:53:39.906549867Z 37 PC: 13151 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:53:39.909365987Z 37 PC: 13151 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:53:39.911121013Z 37 PC: 13151 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:53:39.912953445Z 37 PC: 13151 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:53:39.915611128Z 37 PC: 13151 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:53:39.917167471Z 37 PC: 13151 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:53:39.918834833Z 37 PC: 13151 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:53:39.920587135Z 37 PC: 13151 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:53:39.921837042Z 37 PC: 13151 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:53:39.923276737Z 37 PC: 13151 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:53:39.924661438Z 37 PC: 13151 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:53:39.926068712Z 37 PC: 13151 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:53:39.930521405Z 37 PC: 13151 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:53:39.932156898Z 76 PC: 13190 | Terminate with return code (Return code = '0')