Sample viewer

vx.netlux.org/Virus.DOS.HLLO.TAVC.4282

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:00:32.307731481Z 53 PC: 1302e | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:00:32.310151804Z 53 PC: 1302e | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:00:32.312198169Z 53 PC: 1302e | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:00:32.314883126Z 53 PC: 1302e | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:00:32.317021334Z 53 PC: 1302e | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:00:32.319054397Z 53 PC: 1302e | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:00:32.321223616Z 53 PC: 1302e | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:00:32.323316996Z 53 PC: 1302e | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:00:32.324600791Z 53 PC: 1302e | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:00:32.327831708Z 53 PC: 1302e | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:00:32.329263797Z 53 PC: 1302e | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:00:32.330677383Z 53 PC: 1302e | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:00:32.332810508Z 53 PC: 1302e | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:00:32.334739169Z 53 PC: 1302e | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:00:32.336637891Z 53 PC: 1302e | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:00:32.338966895Z 53 PC: 1302e | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:00:32.343666818Z 53 PC: 1302e | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:00:32.344823719Z 53 PC: 1302e | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:00:32.347155849Z 53 PC: 1302e | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:00:32.348412864Z 37 PC: 13043 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:00:32.350060172Z 37 PC: 1304a | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:00:32.35225201Z 37 PC: 13051 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:00:32.353424157Z 37 PC: 13058 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:00:32.35495386Z 68 PC: 13431 | I/O control for devices (Set for = '��<..u �|')
2018-12-17T22:00:32.35669253Z 64 PC: 13728 | Write file or device (Write 23 bytes on handle 1)
2018-12-17T22:00:32.362777233Z 26 PC: 12e71 | Set disk transfer address
2018-12-17T22:00:32.364694348Z 78 PC: 12e7d | Find first file
2018-12-17T22:00:32.372549893Z 67 PC: 12dcf | Get or set file attributes
2018-12-17T22:00:32.379286963Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:00:32.395255278Z 61 PC: 139e1 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:00:32.404640045Z 87 PC: 12e12 | Get or set file date and time
2018-12-17T22:00:32.406854715Z 48 PC: 13b3b | Get DOS version
2018-12-17T22:00:32.409053295Z 61 PC: 139e1 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:00:32.41577027Z 66 PC: 1353a | Move file pointer
2018-12-17T22:00:32.418954071Z 66 PC: 13548 | Move file pointer
2018-12-17T22:00:32.420633902Z 66 PC: 13556 | Move file pointer
2018-12-17T22:00:32.422119091Z 66 PC: 1353a | Move file pointer
2018-12-17T22:00:32.424197724Z 66 PC: 13548 | Move file pointer
2018-12-17T22:00:32.425898752Z 66 PC: 13556 | Move file pointer
2018-12-17T22:00:32.427565256Z 63 PC: 13ac0 | Read file or device (Read 4282 bytes on handle 6)
2018-12-17T22:00:32.436422621Z 64 PC: 13ac0 | Write file or device (Write 4282 bytes on handle 5)
2018-12-17T22:00:32.444648911Z 62 PC: 13a33 | Close file
2018-12-17T22:00:32.447189867Z 87 PC: 12e40 | Get or set file date and time
2018-12-17T22:00:32.448954326Z 62 PC: 13a33 | Close file
2018-12-17T22:00:32.461162805Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:00:32.471229249Z 26 PC: 12e97 | Set disk transfer address
2018-12-17T22:00:32.472338367Z 79 PC: 12e9c | Find next file
2018-12-17T22:00:32.47496411Z 25 PC: 13bcd | Get default drive
2018-12-17T22:00:32.475996027Z 71 PC: 13be0 | Get current directory
2018-12-17T22:00:32.479586298Z 14 PC: 13c2c | Set default drive (Drive = 'C')
2018-12-17T22:00:32.488266008Z 25 PC: 13c30 | Get default drive
2018-12-17T22:00:32.489891874Z 59 PC: 13c9c | Change current directory
2018-12-17T22:00:32.495973323Z 26 PC: 12e71 | Set disk transfer address
2018-12-17T22:00:32.49787015Z 78 PC: 12e7d | Find first file
2018-12-17T22:00:32.506729942Z 67 PC: 12dcf | Get or set file attributes
2018-12-17T22:00:32.512510744Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:00:32.851620234Z 61 PC: 139e1 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:00:32.859469026Z 87 PC: 12e12 | Get or set file date and time
2018-12-17T22:00:32.861273634Z 48 PC: 13b3b | Get DOS version
2018-12-17T22:00:32.864125288Z 61 PC: 139e1 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:00:32.870989529Z 66 PC: 1353a | Move file pointer
2018-12-17T22:00:32.872616503Z 66 PC: 13548 | Move file pointer
2018-12-17T22:00:32.875230119Z 66 PC: 13556 | Move file pointer
2018-12-17T22:00:32.87690963Z 66 PC: 1353a | Move file pointer
2018-12-17T22:00:32.878320931Z 66 PC: 13548 | Move file pointer
2018-12-17T22:00:32.880430853Z 66 PC: 13556 | Move file pointer
2018-12-17T22:00:32.881939557Z 63 PC: 13ac0 | Read file or device (Read 4282 bytes on handle 6)
2018-12-17T22:00:32.889014927Z 64 PC: 13ac0 | Write file or device (Write 4282 bytes on handle 5)
2018-12-17T22:00:32.897260569Z 62 PC: 13a33 | Close file
2018-12-17T22:00:32.899107933Z 87 PC: 12e40 | Get or set file date and time
2018-12-17T22:00:32.900676901Z 62 PC: 13a33 | Close file
2018-12-17T22:00:32.907965226Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:00:32.917549477Z 26 PC: 12e97 | Set disk transfer address
2018-12-17T22:00:32.91869597Z 79 PC: 12e9c | Find next file
2018-12-17T22:00:32.923641422Z 67 PC: 12dcf | Get or set file attributes
2018-12-17T22:00:32.929276718Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:00:32.938974923Z 61 PC: 139e1 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:00:32.946716201Z 87 PC: 12e12 | Get or set file date and time
2018-12-17T22:00:32.948208794Z 48 PC: 13b3b | Get DOS version
2018-12-17T22:00:32.949997703Z 61 PC: 139e1 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:00:32.957656107Z 66 PC: 1353a | Move file pointer
2018-12-17T22:00:32.958954491Z 66 PC: 13548 | Move file pointer
2018-12-17T22:00:32.960812693Z 66 PC: 13556 | Move file pointer
2018-12-17T22:00:32.963260516Z 66 PC: 1353a | Move file pointer
2018-12-17T22:00:32.965152599Z 66 PC: 13548 | Move file pointer
2018-12-17T22:00:32.966964608Z 66 PC: 13556 | Move file pointer
2018-12-17T22:00:32.96962018Z 63 PC: 13ac0 | Read file or device (Read 4282 bytes on handle 6)
2018-12-17T22:00:32.97689464Z 64 PC: 13ac0 | Write file or device (Write 4282 bytes on handle 5)
2018-12-17T22:00:32.984860796Z 62 PC: 13a33 | Close file
2018-12-17T22:00:32.98809006Z 87 PC: 12e40 | Get or set file date and time
2018-12-17T22:00:32.989762674Z 62 PC: 13a33 | Close file
2018-12-17T22:00:32.997177164Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:00:33.007265552Z 26 PC: 12e97 | Set disk transfer address
2018-12-17T22:00:33.00837103Z 79 PC: 12e9c | Find next file
2018-12-17T22:00:33.011888762Z 67 PC: 12dcf | Get or set file attributes
2018-12-17T22:00:33.018183287Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:00:33.027893089Z 61 PC: 139e1 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:00:33.034421707Z 87 PC: 12e12 | Get or set file date and time
2018-12-17T22:00:33.035903534Z 48 PC: 13b3b | Get DOS version
2018-12-17T22:00:33.037819804Z 61 PC: 139e1 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:00:33.044639889Z 66 PC: 1353a | Move file pointer
2018-12-17T22:00:33.046041918Z 66 PC: 13548 | Move file pointer
2018-12-17T22:00:33.047785558Z 66 PC: 13556 | Move file pointer
2018-12-17T22:00:33.049141186Z 66 PC: 1353a | Move file pointer
2018-12-17T22:00:33.050416318Z 66 PC: 13548 | Move file pointer
2018-12-17T22:00:33.05229969Z 66 PC: 13556 | Move file pointer
2018-12-17T22:00:33.053706212Z 63 PC: 13ac0 | Read file or device (Read 4282 bytes on handle 6)
2018-12-17T22:00:33.06227223Z 64 PC: 13ac0 | Write file or device (Write 4282 bytes on handle 5)
2018-12-17T22:00:33.071366531Z 62 PC: 13a33 | Close file
2018-12-17T22:00:33.073183287Z 87 PC: 12e40 | Get or set file date and time
2018-12-17T22:00:33.074729727Z 62 PC: 13a33 | Close file
2018-12-17T22:00:33.081623886Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:00:33.097952204Z 26 PC: 12e97 | Set disk transfer address
2018-12-17T22:00:33.099326969Z 79 PC: 12e9c | Find next file
2018-12-17T22:00:33.105035891Z 67 PC: 12dcf | Get or set file attributes
2018-12-17T22:00:33.111226612Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:00:33.121417243Z 61 PC: 139e1 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:00:33.129025086Z 87 PC: 12e12 | Get or set file date and time
2018-12-17T22:00:33.130132307Z 48 PC: 13b3b | Get DOS version
2018-12-17T22:00:33.13124456Z 61 PC: 139e1 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:00:33.139073815Z 66 PC: 1353a | Move file pointer
2018-12-17T22:00:33.140361969Z 66 PC: 13548 | Move file pointer
2018-12-17T22:00:33.141681924Z 66 PC: 13556 | Move file pointer
2018-12-17T22:00:33.143559415Z 66 PC: 1353a | Move file pointer
2018-12-17T22:00:33.145335357Z 66 PC: 13548 | Move file pointer
2018-12-17T22:00:33.14700073Z 66 PC: 13556 | Move file pointer
2018-12-17T22:00:33.149920722Z 63 PC: 13ac0 | Read file or device (Read 4282 bytes on handle 6)
2018-12-17T22:00:33.157340858Z 64 PC: 13ac0 | Write file or device (Write 4282 bytes on handle 5)
2018-12-17T22:00:33.163954171Z 62 PC: 13a33 | Close file
2018-12-17T22:00:33.165777426Z 87 PC: 12e40 | Get or set file date and time
2018-12-17T22:00:33.166943464Z 62 PC: 13a33 | Close file
2018-12-17T22:00:33.171139021Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:00:33.179471862Z 26 PC: 12e97 | Set disk transfer address
2018-12-17T22:00:33.18049291Z 79 PC: 12e9c | Find next file
2018-12-17T22:00:33.182949656Z 67 PC: 12dcf | Get or set file attributes
2018-12-17T22:00:33.187267058Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:00:33.196364476Z 61 PC: 139e1 | Open file (Filename = 'FDISK.EXE')
2018-12-17T22:00:33.203475443Z 87 PC: 12e12 | Get or set file date and time
2018-12-17T22:00:33.205530284Z 48 PC: 13b3b | Get DOS version
2018-12-17T22:00:33.207020174Z 61 PC: 139e1 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:00:33.213695212Z 66 PC: 1353a | Move file pointer
2018-12-17T22:00:33.215471812Z 66 PC: 13548 | Move file pointer
2018-12-17T22:00:33.216710959Z 66 PC: 13556 | Move file pointer
2018-12-17T22:00:33.21790916Z 66 PC: 1353a | Move file pointer
2018-12-17T22:00:33.219577924Z 66 PC: 13548 | Move file pointer
2018-12-17T22:00:33.220848072Z 66 PC: 13556 | Move file pointer
2018-12-17T22:00:33.222236903Z 63 PC: 13ac0 | Read file or device (Read 4282 bytes on handle 6)
2018-12-17T22:00:33.229800277Z 64 PC: 13ac0 | Write file or device (Write 4282 bytes on handle 5)
2018-12-17T22:00:33.237810101Z 62 PC: 13a33 | Close file
2018-12-17T22:00:33.239919978Z 87 PC: 12e40 | Get or set file date and time
2018-12-17T22:00:33.242258315Z 62 PC: 13a33 | Close file
2018-12-17T22:00:33.248870314Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:00:33.255593284Z 26 PC: 12e97 | Set disk transfer address
2018-12-17T22:00:33.257042077Z 79 PC: 12e9c | Find next file
2018-12-17T22:00:33.260438853Z 67 PC: 12dcf | Get or set file attributes
2018-12-17T22:00:33.266043384Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:00:33.276518595Z 61 PC: 139e1 | Open file (Filename = 'MEM.EXE')
2018-12-17T22:00:33.282858213Z 87 PC: 12e12 | Get or set file date and time
2018-12-17T22:00:33.284182113Z 48 PC: 13b3b | Get DOS version
2018-12-17T22:00:33.286164162Z 61 PC: 139e1 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:00:33.292666088Z 66 PC: 1353a | Move file pointer
2018-12-17T22:00:33.293921015Z 66 PC: 13548 | Move file pointer
2018-12-17T22:00:33.296186965Z 66 PC: 13556 | Move file pointer
2018-12-17T22:00:33.297504481Z 66 PC: 1353a | Move file pointer
2018-12-17T22:00:33.298761921Z 66 PC: 13548 | Move file pointer
2018-12-17T22:00:33.300929686Z 66 PC: 13556 | Move file pointer
2018-12-17T22:00:33.302359055Z 63 PC: 13ac0 | Read file or device (Read 4282 bytes on handle 6)
2018-12-17T22:00:33.308835188Z 64 PC: 13ac0 | Write file or device (Write 4282 bytes on handle 5)
2018-12-17T22:00:33.317065153Z 62 PC: 13a33 | Close file
2018-12-17T22:00:33.318648374Z 87 PC: 12e40 | Get or set file date and time
2018-12-17T22:00:33.319955191Z 62 PC: 13a33 | Close file
2018-12-17T22:00:33.326199709Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:00:33.335685307Z 26 PC: 12e97 | Set disk transfer address
2018-12-17T22:00:33.336761659Z 79 PC: 12e9c | Find next file
2018-12-17T22:00:33.3436664Z 67 PC: 12dcf | Get or set file attributes
2018-12-17T22:00:33.349731958Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:00:33.358624947Z 61 PC: 139e1 | Open file (Filename = 'NLSFUNC.EXE')
2018-12-17T22:00:33.364820984Z 87 PC: 12e12 | Get or set file date and time
2018-12-17T22:00:33.366162514Z 48 PC: 13b3b | Get DOS version
2018-12-17T22:00:33.367386307Z 61 PC: 139e1 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:00:33.373602747Z 66 PC: 1353a | Move file pointer
2018-12-17T22:00:33.374882369Z 66 PC: 13548 | Move file pointer
2018-12-17T22:00:33.376058602Z 66 PC: 13556 | Move file pointer
2018-12-17T22:00:33.377363639Z 66 PC: 1353a | Move file pointer
2018-12-17T22:00:33.378922122Z 66 PC: 13548 | Move file pointer
2018-12-17T22:00:33.380124173Z 66 PC: 13556 | Move file pointer
2018-12-17T22:00:33.381449166Z 63 PC: 13ac0 | Read file or device (Read 4282 bytes on handle 6)
2018-12-17T22:00:33.388416155Z 64 PC: 13ac0 | Write file or device (Write 4282 bytes on handle 5)
2018-12-17T22:00:33.395844088Z 62 PC: 13a33 | Close file
2018-12-17T22:00:33.397651247Z 87 PC: 12e40 | Get or set file date and time
2018-12-17T22:00:33.399191375Z 62 PC: 13a33 | Close file
2018-12-17T22:00:33.406037689Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:00:33.415363934Z 26 PC: 12e97 | Set disk transfer address
2018-12-17T22:00:33.416376129Z 79 PC: 12e9c | Find next file
2018-12-17T22:00:33.419759669Z 67 PC: 12dcf | Get or set file attributes
2018-12-17T22:00:33.424135736Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:00:33.430319983Z 61 PC: 139e1 | Open file (Filename = 'QBASIC.EXE')
2018-12-17T22:00:33.436961073Z 87 PC: 12e12 | Get or set file date and time
2018-12-17T22:00:33.438778814Z 48 PC: 13b3b | Get DOS version
2018-12-17T22:00:33.440102776Z 61 PC: 139e1 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:00:33.446598428Z 66 PC: 1353a | Move file pointer
2018-12-17T22:00:33.448375401Z 66 PC: 13548 | Move file pointer
2018-12-17T22:00:33.449681966Z 66 PC: 13556 | Move file pointer
2018-12-17T22:00:33.450849853Z 66 PC: 1353a | Move file pointer
2018-12-17T22:00:33.452378026Z 66 PC: 13548 | Move file pointer
2018-12-17T22:00:33.453617961Z 66 PC: 13556 | Move file pointer
2018-12-17T22:00:33.454760017Z 62 PC: 13a33 | Close file
2018-12-17T22:00:33.456697854Z 87 PC: 12e40 | Get or set file date and time
2018-12-17T22:00:33.458022351Z 62 PC: 13a33 | Close file
2018-12-17T22:00:33.463932784Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:00:33.475264225Z 26 PC: 12e97 | Set disk transfer address
2018-12-17T22:00:33.476383971Z 79 PC: 12e9c | Find next file
2018-12-17T22:00:33.480853709Z 67 PC: 12dcf | Get or set file attributes
2018-12-17T22:00:33.487306284Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:00:33.498419017Z 61 PC: 139e1 | Open file (Filename = 'REPLACE.EXE')
2018-12-17T22:00:33.5059145Z 87 PC: 12e12 | Get or set file date and time
2018-12-17T22:00:33.507342545Z 48 PC: 13b3b | Get DOS version
2018-12-17T22:00:33.50868126Z 61 PC: 139e1 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:00:33.515734354Z 66 PC: 1353a | Move file pointer
2018-12-17T22:00:33.517137132Z 66 PC: 13548 | Move file pointer
2018-12-17T22:00:33.518369955Z 66 PC: 13556 | Move file pointer
2018-12-17T22:00:33.519746409Z 66 PC: 1353a | Move file pointer
2018-12-17T22:00:33.523104295Z 66 PC: 13548 | Move file pointer
2018-12-17T22:00:33.524787714Z 66 PC: 13556 | Move file pointer
2018-12-17T22:00:33.526848572Z 63 PC: 13ac0 | Read file or device (Read 4282 bytes on handle 6)
2018-12-17T22:00:33.533982189Z 64 PC: 13ac0 | Write file or device (Write 4282 bytes on handle 5)
2018-12-17T22:00:33.542604667Z 62 PC: 13a33 | Close file
2018-12-17T22:00:33.545127357Z 87 PC: 12e40 | Get or set file date and time
2018-12-17T22:00:33.546560959Z 62 PC: 13a33 | Close file
2018-12-17T22:00:33.552888605Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:00:33.564579435Z 26 PC: 12e97 | Set disk transfer address
2018-12-17T22:00:33.566017019Z 79 PC: 12e9c | Find next file
2018-12-17T22:00:33.56988132Z 67 PC: 12dcf | Get or set file attributes
2018-12-17T22:00:33.577218408Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:00:33.586797759Z 61 PC: 139e1 | Open file (Filename = 'RESTORE.EXE')
2018-12-17T22:00:33.593794105Z 87 PC: 12e12 | Get or set file date and time
2018-12-17T22:00:33.596494074Z 48 PC: 13b3b | Get DOS version
2018-12-17T22:00:33.598119091Z 61 PC: 139e1 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:00:33.605815868Z 66 PC: 1353a | Move file pointer
2018-12-17T22:00:33.607750985Z 66 PC: 13548 | Move file pointer
2018-12-17T22:00:33.6090334Z 66 PC: 13556 | Move file pointer
2018-12-17T22:00:33.610052555Z 66 PC: 1353a | Move file pointer
2018-12-17T22:00:33.611576277Z 66 PC: 13548 | Move file pointer
2018-12-17T22:00:33.61289233Z 66 PC: 13556 | Move file pointer
2018-12-17T22:00:33.614249747Z 63 PC: 13ac0 | Read file or device (Read 4282 bytes on handle 6)
2018-12-17T22:00:33.621757566Z 64 PC: 13ac0 | Write file or device (Write 4282 bytes on handle 5)
2018-12-17T22:00:33.629457385Z 62 PC: 13a33 | Close file
2018-12-17T22:00:33.631116175Z 87 PC: 12e40 | Get or set file date and time
2018-12-17T22:00:33.633062096Z 62 PC: 13a33 | Close file
2018-12-17T22:00:33.639396973Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:00:33.646373856Z 26 PC: 12e97 | Set disk transfer address
2018-12-17T22:00:33.648140466Z 79 PC: 12e9c | Find next file
2018-12-17T22:00:33.651493602Z 67 PC: 12dcf | Get or set file attributes
2018-12-17T22:00:33.657067257Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:00:33.666438003Z 61 PC: 139e1 | Open file (Filename = 'SCANDISK.EXE')
2018-12-17T22:00:33.673735877Z 87 PC: 12e12 | Get or set file date and time
2018-12-17T22:00:33.675060497Z 48 PC: 13b3b | Get DOS version
2018-12-17T22:00:33.67671765Z 61 PC: 139e1 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:00:33.683347139Z 66 PC: 1353a | Move file pointer
2018-12-17T22:00:33.685242237Z 66 PC: 13548 | Move file pointer
2018-12-17T22:00:33.687250022Z 66 PC: 13556 | Move file pointer
2018-12-17T22:00:33.688945224Z 66 PC: 1353a | Move file pointer
2018-12-17T22:00:33.691140288Z 66 PC: 13548 | Move file pointer
2018-12-17T22:00:33.692863896Z 66 PC: 13556 | Move file pointer
2018-12-17T22:00:33.694114255Z 63 PC: 13ac0 | Read file or device (Read 4282 bytes on handle 6)
2018-12-17T22:00:33.701452156Z 64 PC: 13ac0 | Write file or device (Write 4282 bytes on handle 5)
2018-12-17T22:00:33.708986672Z 62 PC: 13a33 | Close file
2018-12-17T22:00:33.710589817Z 87 PC: 12e40 | Get or set file date and time
2018-12-17T22:00:33.712451899Z 62 PC: 13a33 | Close file
2018-12-17T22:00:33.718760241Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:00:33.727983412Z 26 PC: 12e97 | Set disk transfer address
2018-12-17T22:00:33.729571574Z 79 PC: 12e9c | Find next file
2018-12-17T22:00:33.743675004Z 67 PC: 12dcf | Get or set file attributes
2018-12-17T22:00:33.751412072Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:00:33.761356539Z 61 PC: 139e1 | Open file (Filename = 'SETUP.EXE')
2018-12-17T22:00:33.767921613Z 87 PC: 12e12 | Get or set file date and time
2018-12-17T22:00:33.769430173Z 48 PC: 13b3b | Get DOS version
2018-12-17T22:00:33.772027679Z 61 PC: 139e1 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:00:33.779066168Z 66 PC: 1353a | Move file pointer
2018-12-17T22:00:33.781566428Z 66 PC: 13548 | Move file pointer
2018-12-17T22:00:33.783585344Z 66 PC: 13556 | Move file pointer
2018-12-17T22:00:33.785340285Z 66 PC: 1353a | Move file pointer
2018-12-17T22:00:33.787243596Z 66 PC: 13548 | Move file pointer
2018-12-17T22:00:33.789794987Z 66 PC: 13556 | Move file pointer
2018-12-17T22:00:33.791637208Z 63 PC: 13ac0 | Read file or device (Read 4282 bytes on handle 6)
2018-12-17T22:00:33.799102593Z 64 PC: 13ac0 | Write file or device (Write 4282 bytes on handle 5)
2018-12-17T22:00:33.808462711Z 62 PC: 13a33 | Close file
2018-12-17T22:00:33.810392357Z 87 PC: 12e40 | Get or set file date and time
2018-12-17T22:00:33.81226009Z 62 PC: 13a33 | Close file
2018-12-17T22:00:33.819419959Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:00:33.82761938Z 26 PC: 12e97 | Set disk transfer address
2018-12-17T22:00:33.828824686Z 79 PC: 12e9c | Find next file
2018-12-17T22:00:33.831663632Z 67 PC: 12dcf | Get or set file attributes
2018-12-17T22:00:33.83528944Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:00:33.84429105Z 61 PC: 139e1 | Open file (Filename = 'XCOPY.EXE')
2018-12-17T22:00:33.850695612Z 87 PC: 12e12 | Get or set file date and time
2018-12-17T22:00:33.853537068Z 48 PC: 13b3b | Get DOS version
2018-12-17T22:00:33.855659344Z 61 PC: 139e1 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:00:33.860191973Z 66 PC: 1353a | Move file pointer
2018-12-17T22:00:33.861130347Z 66 PC: 13548 | Move file pointer
2018-12-17T22:00:33.862621795Z 66 PC: 13556 | Move file pointer
2018-12-17T22:00:33.863657658Z 66 PC: 1353a | Move file pointer
2018-12-17T22:00:33.864621421Z 66 PC: 13548 | Move file pointer
2018-12-17T22:00:33.866203636Z 66 PC: 13556 | Move file pointer
2018-12-17T22:00:33.86724457Z 63 PC: 13ac0 | Read file or device (Read 4282 bytes on handle 6)
2018-12-17T22:00:33.871913012Z 64 PC: 13ac0 | Write file or device (Write 4282 bytes on handle 5)
2018-12-17T22:00:33.878497776Z 62 PC: 13a33 | Close file
2018-12-17T22:00:33.88015826Z 87 PC: 12e40 | Get or set file date and time
2018-12-17T22:00:33.88253455Z 62 PC: 13a33 | Close file
2018-12-17T22:00:33.892651596Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:00:33.901894073Z 26 PC: 12e97 | Set disk transfer address
2018-12-17T22:00:33.904094328Z 79 PC: 12e9c | Find next file
2018-12-17T22:00:33.907743705Z 67 PC: 12dcf | Get or set file attributes
2018-12-17T22:00:33.913543079Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:00:33.923657893Z 61 PC: 139e1 | Open file (Filename = 'DEFRAG.EXE')
2018-12-17T22:00:33.930263961Z 87 PC: 12e12 | Get or set file date and time
2018-12-17T22:00:33.931623568Z 48 PC: 13b3b | Get DOS version
2018-12-17T22:00:33.933483012Z 61 PC: 139e1 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:00:33.940221297Z 66 PC: 1353a | Move file pointer
2018-12-17T22:00:33.942781029Z 66 PC: 13548 | Move file pointer
2018-12-17T22:00:33.944666183Z 66 PC: 13556 | Move file pointer
2018-12-17T22:00:33.945997101Z 66 PC: 1353a | Move file pointer
2018-12-17T22:00:33.947974496Z 66 PC: 13548 | Move file pointer
2018-12-17T22:00:33.949311313Z 66 PC: 13556 | Move file pointer
2018-12-17T22:00:33.950774223Z 63 PC: 13ac0 | Read file or device (Read 4282 bytes on handle 6)
2018-12-17T22:00:33.95854399Z 64 PC: 13ac0 | Write file or device (Write 4282 bytes on handle 5)
2018-12-17T22:00:33.966464973Z 62 PC: 13a33 | Close file
2018-12-17T22:00:33.968202414Z 87 PC: 12e40 | Get or set file date and time
2018-12-17T22:00:33.970121526Z 62 PC: 13a33 | Close file
2018-12-17T22:00:33.976485442Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:00:33.986128781Z 26 PC: 12e97 | Set disk transfer address
2018-12-17T22:00:33.987842964Z 79 PC: 12e9c | Find next file
2018-12-17T22:00:33.994262126Z 67 PC: 12dcf | Get or set file attributes
2018-12-17T22:00:34.00038009Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:00:34.010838128Z 61 PC: 139e1 | Open file (Filename = 'EMM386.EXE')
2018-12-17T22:00:34.017412273Z 87 PC: 12e12 | Get or set file date and time
2018-12-17T22:00:34.019345851Z 48 PC: 13b3b | Get DOS version
2018-12-17T22:00:34.020828558Z 61 PC: 139e1 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:00:34.027720572Z 66 PC: 1353a | Move file pointer
2018-12-17T22:00:34.029529462Z 66 PC: 13548 | Move file pointer
2018-12-17T22:00:34.031606612Z 66 PC: 13556 | Move file pointer
2018-12-17T22:00:34.033492085Z 66 PC: 1353a | Move file pointer
2018-12-17T22:00:34.035901793Z 66 PC: 13548 | Move file pointer
2018-12-17T22:00:34.037680082Z 66 PC: 13556 | Move file pointer
2018-12-17T22:00:34.040061955Z 63 PC: 13ac0 | Read file or device (Read 4282 bytes on handle 6)
2018-12-17T22:00:34.047490158Z 64 PC: 13ac0 | Write file or device (Write 4282 bytes on handle 5)
2018-12-17T22:00:34.055356482Z 62 PC: 13a33 | Close file
2018-12-17T22:00:34.057628639Z 87 PC: 12e40 | Get or set file date and time
2018-12-17T22:00:34.059258035Z 62 PC: 13a33 | Close file
2018-12-17T22:00:34.065529896Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:00:34.07520215Z 26 PC: 12e97 | Set disk transfer address
2018-12-17T22:00:34.076213314Z 79 PC: 12e9c | Find next file
2018-12-17T22:00:34.08023156Z 67 PC: 12dcf | Get or set file attributes
2018-12-17T22:00:34.086150315Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:00:34.095406497Z 61 PC: 139e1 | Open file (Filename = 'MSCDEX.EXE')
2018-12-17T22:00:34.103161335Z 87 PC: 12e12 | Get or set file date and time
2018-12-17T22:00:34.104552764Z 48 PC: 13b3b | Get DOS version
2018-12-17T22:00:34.10583908Z 61 PC: 139e1 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:00:34.116147379Z 66 PC: 1353a | Move file pointer
2018-12-17T22:00:34.117470288Z 66 PC: 13548 | Move file pointer
2018-12-17T22:00:34.118841574Z 66 PC: 13556 | Move file pointer
2018-12-17T22:00:34.120594187Z 66 PC: 1353a | Move file pointer
2018-12-17T22:00:34.121821832Z 66 PC: 13548 | Move file pointer
2018-12-17T22:00:34.123029108Z 66 PC: 13556 | Move file pointer
2018-12-17T22:00:34.125262512Z 63 PC: 13ac0 | Read file or device (Read 4282 bytes on handle 6)
2018-12-17T22:00:34.132156263Z 64 PC: 13ac0 | Write file or device (Write 4282 bytes on handle 5)
2018-12-17T22:00:34.139813101Z 62 PC: 13a33 | Close file
2018-12-17T22:00:34.141610054Z 87 PC: 12e40 | Get or set file date and time
2018-12-17T22:00:34.143003176Z 62 PC: 13a33 | Close file
2018-12-17T22:00:34.149266973Z 67 PC: 12df6 | Get or set file attributes
2018-12-17T22:00:34.159476053Z 26 PC: 12e97 | Set disk transfer address
2018-12-17T22:00:34.161045256Z 79 PC: 12e9c | Find next file
2018-12-17T22:00:34.165009168Z 14 PC: 13c2c | Set default drive (Drive = 'A')
2018-12-17T22:00:34.166223272Z 25 PC: 13c30 | Get default drive
2018-12-17T22:00:34.167244904Z 59 PC: 13c9c | Change current directory
2018-12-17T22:00:34.171827075Z 64 PC: 13728 | Write file or device (Write 33 bytes on handle 1)
2018-12-17T22:00:34.176350661Z 64 PC: 13728 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:00:34.177924083Z 37 PC: 13197 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:00:34.179609266Z 37 PC: 13197 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:00:34.180726758Z 37 PC: 13197 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:00:34.184977771Z 37 PC: 13197 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:00:34.186777976Z 37 PC: 13197 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:00:34.187819834Z 37 PC: 13197 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:00:34.189229235Z 37 PC: 13197 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:00:34.19090462Z 37 PC: 13197 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:00:34.192362098Z 37 PC: 13197 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:00:34.194367512Z 37 PC: 13197 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:00:34.195733913Z 37 PC: 13197 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:00:34.196624706Z 37 PC: 13197 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:00:34.198474956Z 37 PC: 13197 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:00:34.19947944Z 37 PC: 13197 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:00:34.200456303Z 37 PC: 13197 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:00:34.201769071Z 37 PC: 13197 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:00:34.202768491Z 37 PC: 13197 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:00:34.204374229Z 37 PC: 13197 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:00:34.205381514Z 37 PC: 13197 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:00:34.206370497Z 76 PC: 131d6 | Terminate with return code (Return code = '0')