Sample viewer

vx.netlux.org/Virus.DOS.HLLP.TurnOff.5326

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:01:36.648290435Z 53 PC: 135ba | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:01:36.650871292Z 53 PC: 135ba | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:01:36.652363987Z 53 PC: 135ba | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:01:36.65386439Z 53 PC: 135ba | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:01:36.656999571Z 53 PC: 135ba | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:01:36.658232259Z 53 PC: 135ba | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:01:36.65928077Z 53 PC: 135ba | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:01:36.660917228Z 53 PC: 135ba | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:01:36.662050191Z 53 PC: 135ba | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:01:36.663802191Z 53 PC: 135ba | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:01:36.66531003Z 53 PC: 135ba | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:01:36.666508737Z 53 PC: 135ba | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:01:36.667588225Z 53 PC: 135ba | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:01:36.66943065Z 53 PC: 135ba | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:01:36.671427606Z 53 PC: 135ba | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:01:36.673411093Z 53 PC: 135ba | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:01:36.679783012Z 53 PC: 135ba | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:01:36.681283394Z 53 PC: 135ba | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:01:36.682692741Z 53 PC: 135ba | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:01:36.684853749Z 37 PC: 135cf | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:01:36.685918268Z 37 PC: 135d7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:01:36.686867652Z 37 PC: 135df | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:01:36.68842027Z 37 PC: 135e7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:01:36.690199391Z 68 PC: 142a3 | I/O control for devices (Set for = '')
2018-12-17T23:01:36.691840613Z 51 PC: 1324f | Get or set Ctrl-Break
2018-12-17T23:01:36.69342058Z 48 PC: 13dce | Get DOS version
2018-12-17T23:01:36.695417153Z 42 PC: 131c7 | Get date 0x131c7: xor ah, ah
0x131c9: les di, ptr [bp + 6]
0x131cc: stosw word ptr es:[di], ax
0x131cd: mov al, dl
0x131cf: les di, ptr [bp + 0xa]
0x131d2: stosw word ptr es:[di], ax
0x131d3: mov al, dh
0x131d5: les di, ptr [bp + 0xe]
0x131d8: stosw word ptr es:[di], ax
0x131d9: xchg ax, cx
0x131da: les di, ptr [bp + 0x12]
0x131dd: stosw word ptr es:[di], ax
0x131de: pop bp
0x131df: retf 0x10
0x131e2: push bp
0x131e3: mov bp, sp
0x131e5: mov cx, word ptr [bp + 0xa]
0x131e8: mov dh, byte ptr [bp + 8]
0x131eb: mov dl, byte ptr [bp + 6]
0x131ee: mov ah, 0x2b
2018-12-17T23:01:36.697809846Z 48 PC: 13dce | Get DOS version
2018-12-17T23:01:36.699991361Z 67 PC: 13262 | Get or set file attributes
2018-12-17T23:01:36.705647427Z 67 PC: 13289 | Get or set file attributes
2018-12-17T23:01:36.720928928Z 61 PC: 13c80 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:01:36.727983152Z 87 PC: 132a3 | Get or set file date and time
2018-12-17T23:01:36.729605871Z 63 PC: 13d53 | Read file or device (Read 5325 bytes on handle 5)
2018-12-17T23:01:36.736182806Z 66 PC: 143a2 | Move file pointer
2018-12-17T23:01:36.737618417Z 66 PC: 143b0 | Move file pointer
2018-12-17T23:01:36.738746719Z 66 PC: 143be | Move file pointer
2018-12-17T23:01:36.739882845Z 66 PC: 13db2 | Move file pointer
2018-12-17T23:01:36.742305782Z 63 PC: 13d53 | Read file or device (Read 5325 bytes on handle 5)
2018-12-17T23:01:36.747328497Z 66 PC: 13db2 | Move file pointer
2018-12-17T23:01:36.748449449Z 64 PC: 13d53 | Write file or device (Write 5325 bytes on handle 5)
2018-12-17T23:01:36.754573425Z 66 PC: 143a2 | Move file pointer
2018-12-17T23:01:36.755719232Z 66 PC: 143b0 | Move file pointer
2018-12-17T23:01:36.756773546Z 66 PC: 143be | Move file pointer
2018-12-17T23:01:36.758337261Z 66 PC: 13db2 | Move file pointer
2018-12-17T23:01:36.759513574Z 64 PC: 13cb1 | Write file or device (Write 0 bytes on handle 5)
2018-12-17T23:01:36.770610599Z 62 PC: 13cd0 | Close file
2018-12-17T23:01:36.776362237Z 53 PC: 1352e | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:01:36.788292237Z 37 PC: 13537 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:01:36.789352131Z 53 PC: 1352e | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:01:36.790528465Z 37 PC: 13537 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:01:36.791807954Z 53 PC: 1352e | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:01:36.792779325Z 37 PC: 13537 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:01:36.793945383Z 53 PC: 1352e | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:01:36.795098526Z 37 PC: 13537 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:01:36.796251139Z 53 PC: 1352e | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:01:36.797435897Z 37 PC: 13537 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:01:36.798802616Z 53 PC: 1352e | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:01:36.79977489Z 37 PC: 13537 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:01:36.801123266Z 53 PC: 1352e | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:01:36.802755506Z 37 PC: 13537 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:01:36.81380409Z 53 PC: 1352e | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:01:36.815629311Z 37 PC: 13537 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:01:36.817739293Z 53 PC: 1352e | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:01:36.819211965Z 37 PC: 13537 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:01:36.820619796Z 53 PC: 1352e | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:01:36.82296462Z 37 PC: 13537 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:01:36.825032434Z 53 PC: 1352e | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:01:36.826437422Z 37 PC: 13537 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:01:36.829065586Z 53 PC: 1352e | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:01:36.841909717Z 37 PC: 13537 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:01:36.843080472Z 53 PC: 1352e | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:01:36.845576767Z 37 PC: 13537 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:01:36.846856964Z 53 PC: 1352e | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:01:36.848009595Z 37 PC: 13537 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:01:36.849835468Z 53 PC: 1352e | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:01:36.851017786Z 37 PC: 13537 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:01:36.852100498Z 53 PC: 1352e | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:01:36.853983582Z 37 PC: 13537 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:01:36.855286263Z 53 PC: 1352e | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:01:36.856540169Z 37 PC: 13537 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:01:36.858832475Z 53 PC: 1352e | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:01:36.861161199Z 37 PC: 13537 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:01:36.86235826Z 53 PC: 1352e | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:01:36.865663064Z 37 PC: 13537 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:01:36.867416452Z 48 PC: 13dce | Get DOS version
2018-12-17T23:01:36.868790515Z 41 PC: 134e5 | Parse filename
2018-12-17T23:01:36.871298095Z 41 PC: 134f3 | Parse filename
2018-12-17T23:01:36.872767399Z 75 PC: 134fe | Execute program
2018-12-17T23:01:36.889383841Z 9 PC: 1c386 | Display string (String= 'Goat file (EXE/....). Size=000044C0h/0000017600d bytes. ')
2018-12-17T23:01:36.896193763Z 48 PC: 1c38f | Get DOS version
2018-12-17T23:01:36.897663397Z 61 PC: 1c45c | Open file (Filename = '')
2018-12-17T23:01:36.905217755Z 93 PC: 1c3fe | File sharing functions
2018-12-17T23:01:36.908024232Z 9 PC: 1c386 | Display string (String= 'Size change=0713h/01811d. ')
2018-12-17T23:01:36.912219433Z 76 PC: 1c3e3 | Terminate with return code (Return code = '1')
2018-12-17T23:01:36.915520445Z 53 PC: 1352e | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:01:36.917492862Z 37 PC: 13537 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:01:36.918926978Z 53 PC: 1352e | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:01:36.920356113Z 37 PC: 13537 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:01:36.922544988Z 53 PC: 1352e | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:01:36.924162145Z 37 PC: 13537 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:01:36.925554719Z 53 PC: 1352e | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:01:36.928055047Z 37 PC: 13537 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:01:36.929611266Z 53 PC: 1352e | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:01:36.930996178Z 37 PC: 13537 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:01:36.933182095Z 53 PC: 1352e | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:01:36.934732966Z 37 PC: 13537 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:01:36.936125533Z 53 PC: 1352e | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:01:36.938190116Z 37 PC: 13537 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:01:36.939721969Z 53 PC: 1352e | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:01:36.941090739Z 37 PC: 13537 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:01:36.943631393Z 53 PC: 1352e | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:01:36.9453417Z 37 PC: 13537 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:01:36.946703077Z 53 PC: 1352e | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:01:36.948281894Z 37 PC: 13537 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:01:36.949949183Z 53 PC: 1352e | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:01:36.951279282Z 37 PC: 13537 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:01:36.952754313Z 53 PC: 1352e | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:01:36.95449574Z 37 PC: 13537 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:01:36.956273483Z 53 PC: 1352e | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:01:36.957811484Z 37 PC: 13537 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:01:36.959980288Z 53 PC: 1352e | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:01:36.961472778Z 37 PC: 13537 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:01:36.963133647Z 53 PC: 1352e | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:01:36.964952009Z 37 PC: 13537 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:01:36.966091357Z 53 PC: 1352e | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:01:36.967118872Z 37 PC: 13537 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:01:36.968827156Z 53 PC: 1352e | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:01:36.970092741Z 37 PC: 13537 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:01:36.971104751Z 53 PC: 1352e | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:01:36.973237757Z 37 PC: 13537 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:01:36.974396417Z 53 PC: 1352e | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:01:36.975434826Z 37 PC: 13537 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:01:36.977779528Z 61 PC: 13c80 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:01:36.985050301Z 64 PC: 13d53 | Write file or device (Write 5325 bytes on handle 5)
2018-12-17T23:01:36.994533576Z 66 PC: 143a2 | Move file pointer
2018-12-17T23:01:36.99762666Z 66 PC: 143b0 | Move file pointer
2018-12-17T23:01:36.999225036Z 66 PC: 143be | Move file pointer
2018-12-17T23:01:37.000867891Z 66 PC: 13db2 | Move file pointer
2018-12-17T23:01:37.003299162Z 64 PC: 13d53 | Write file or device (Write 5325 bytes on handle 5)
2018-12-17T23:01:37.012335215Z 64 PC: 13d53 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:01:37.01532467Z 87 PC: 132d0 | Get or set file date and time
2018-12-17T23:01:37.01785578Z 62 PC: 13cd0 | Close file
2018-12-17T23:01:37.026407624Z 67 PC: 13289 | Get or set file attributes
2018-12-17T23:01:37.036211907Z 25 PC: 13e5b | Get default drive
2018-12-17T23:01:37.038421441Z 71 PC: 13e6e | Get current directory
2018-12-17T23:01:37.042396298Z 14 PC: 13eb4 | Set default drive (Drive = 'A')
2018-12-17T23:01:37.043844971Z 25 PC: 13eb8 | Get default drive
2018-12-17T23:01:37.045717214Z 59 PC: 13f22 | Change current directory
2018-12-17T23:01:37.055133741Z 25 PC: 13386 | Get default drive
2018-12-17T23:01:37.057025916Z 26 PC: 13300 | Set disk transfer address
2018-12-17T23:01:37.058417218Z 78 PC: 1330c | Find first file
2018-12-17T23:01:37.076608588Z 26 PC: 13324 | Set disk transfer address
2018-12-17T23:01:37.078359159Z 79 PC: 13329 | Find next file
2018-12-17T23:01:37.082430637Z 26 PC: 13324 | Set disk transfer address
2018-12-17T23:01:37.083868405Z 79 PC: 13329 | Find next file
2018-12-17T23:01:37.087362536Z 26 PC: 13324 | Set disk transfer address
2018-12-17T23:01:37.089528542Z 79 PC: 13329 | Find next file
2018-12-17T23:01:37.092667594Z 26 PC: 13324 | Set disk transfer address
2018-12-17T23:01:37.093988173Z 79 PC: 13329 | Find next file
2018-12-17T23:01:37.097518905Z 26 PC: 13324 | Set disk transfer address
2018-12-17T23:01:37.098902793Z 79 PC: 13329 | Find next file
2018-12-17T23:01:37.102851694Z 26 PC: 13324 | Set disk transfer address
2018-12-17T23:01:37.104468426Z 79 PC: 13329 | Find next file
2018-12-17T23:01:37.107707581Z 26 PC: 13324 | Set disk transfer address
2018-12-17T23:01:37.109816124Z 79 PC: 13329 | Find next file
2018-12-17T23:01:37.113134639Z 26 PC: 13324 | Set disk transfer address
2018-12-17T23:01:37.114535738Z 79 PC: 13329 | Find next file
2018-12-17T23:01:37.118542475Z 61 PC: 13c80 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:01:37.125231305Z 66 PC: 143a2 | Move file pointer
2018-12-17T23:01:37.126747856Z 66 PC: 143b0 | Move file pointer
2018-12-17T23:01:37.128845734Z 66 PC: 143be | Move file pointer
2018-12-17T23:01:37.130481679Z 66 PC: 143a2 | Move file pointer
2018-12-17T23:01:37.132197925Z 66 PC: 143b0 | Move file pointer
2018-12-17T23:01:37.134630896Z 66 PC: 143be | Move file pointer
2018-12-17T23:01:37.136364608Z 48 PC: 13dce | Get DOS version
2018-12-17T23:01:37.13817537Z 61 PC: 13c80 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:01:37.146125247Z 66 PC: 143a2 | Move file pointer
2018-12-17T23:01:37.147832778Z 66 PC: 143b0 | Move file pointer
2018-12-17T23:01:37.149544326Z 66 PC: 143be | Move file pointer
2018-12-17T23:01:37.152232109Z 66 PC: 13db2 | Move file pointer
2018-12-17T23:01:37.153982431Z 63 PC: 13d53 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:01:37.160997937Z 62 PC: 13cd0 | Close file
2018-12-17T23:01:37.163638891Z 62 PC: 13cd0 | Close file
2018-12-17T23:01:37.16551217Z 26 PC: 13324 | Set disk transfer address
2018-12-17T23:01:37.166711932Z 79 PC: 13329 | Find next file
2018-12-17T23:01:37.169176597Z 26 PC: 13300 | Set disk transfer address
2018-12-17T23:01:37.170105734Z 78 PC: 1330c | Find first file
2018-12-17T23:01:37.176189548Z 26 PC: 13324 | Set disk transfer address
2018-12-17T23:01:37.177602992Z 79 PC: 13329 | Find next file
2018-12-17T23:01:37.180265125Z 26 PC: 13324 | Set disk transfer address
2018-12-17T23:01:37.182155093Z 79 PC: 13329 | Find next file
2018-12-17T23:01:37.18420947Z 26 PC: 13324 | Set disk transfer address
2018-12-17T23:01:37.185172307Z 79 PC: 13329 | Find next file
2018-12-17T23:01:37.188449145Z 26 PC: 13324 | Set disk transfer address
2018-12-17T23:01:37.199286151Z 79 PC: 13329 | Find next file
2018-12-17T23:01:37.201498038Z 26 PC: 13324 | Set disk transfer address
2018-12-17T23:01:37.203110831Z 79 PC: 13329 | Find next file
2018-12-17T23:01:37.205052064Z 26 PC: 13324 | Set disk transfer address
2018-12-17T23:01:37.206221486Z 79 PC: 13329 | Find next file
2018-12-17T23:01:37.209927481Z 26 PC: 13324 | Set disk transfer address
2018-12-17T23:01:37.211534702Z 79 PC: 13329 | Find next file
2018-12-17T23:01:37.221882761Z 26 PC: 13324 | Set disk transfer address
2018-12-17T23:01:37.224700048Z 79 PC: 13329 | Find next file
2018-12-17T23:01:37.227811461Z 26 PC: 13324 | Set disk transfer address
2018-12-17T23:01:37.229118065Z 79 PC: 13329 | Find next file
2018-12-17T23:01:37.232505424Z 14 PC: 13eb4 | Set default drive (Drive = 'A')
2018-12-17T23:01:37.234245074Z 25 PC: 13eb8 | Get default drive
2018-12-17T23:01:37.241874043Z 59 PC: 13f22 | Change current directory
2018-12-17T23:01:37.250363972Z 26 PC: 13300 | Set disk transfer address
2018-12-17T23:01:37.253471841Z 78 PC: 1330c | Find first file
2018-12-17T23:01:37.259817001Z 26 PC: 13324 | Set disk transfer address
2018-12-17T23:01:37.261628963Z 79 PC: 13329 | Find next file
2018-12-17T23:01:37.264819647Z 26 PC: 13324 | Set disk transfer address
2018-12-17T23:01:37.266163204Z 79 PC: 13329 | Find next file
2018-12-17T23:01:37.270383533Z 26 PC: 13324 | Set disk transfer address
2018-12-17T23:01:37.271722029Z 79 PC: 13329 | Find next file
2018-12-17T23:01:37.274942327Z 26 PC: 13324 | Set disk transfer address
2018-12-17T23:01:37.277299323Z 79 PC: 13329 | Find next file
2018-12-17T23:01:37.28050753Z 26 PC: 13324 | Set disk transfer address
2018-12-17T23:01:37.285913122Z 79 PC: 13329 | Find next file
2018-12-17T23:01:37.290500796Z 26 PC: 13324 | Set disk transfer address
2018-12-17T23:01:37.291795563Z 79 PC: 13329 | Find next file
2018-12-17T23:01:37.294976335Z 26 PC: 13324 | Set disk transfer address
2018-12-17T23:01:37.296729027Z 79 PC: 13329 | Find next file
2018-12-17T23:01:37.29990004Z 26 PC: 13324 | Set disk transfer address
2018-12-17T23:01:37.301227952Z 79 PC: 13329 | Find next file
2018-12-17T23:01:37.305366804Z 61 PC: 13c80 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:01:37.312052936Z 66 PC: 143a2 | Move file pointer
2018-12-17T23:01:37.313687878Z 66 PC: 143b0 | Move file pointer
2018-12-17T23:01:37.3156893Z 66 PC: 143be | Move file pointer
2018-12-17T23:01:37.317312145Z 66 PC: 143a2 | Move file pointer
2018-12-17T23:01:37.319119253Z 66 PC: 143b0 | Move file pointer
2018-12-17T23:01:37.321398737Z 66 PC: 143be | Move file pointer
2018-12-17T23:01:37.323052569Z 48 PC: 13dce | Get DOS version
2018-12-17T23:01:37.325152571Z 61 PC: 13c80 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:01:37.332064567Z 66 PC: 143a2 | Move file pointer
2018-12-17T23:01:37.333678518Z 66 PC: 143b0 | Move file pointer
2018-12-17T23:01:37.335612722Z 66 PC: 143be | Move file pointer
2018-12-17T23:01:37.337524454Z 66 PC: 13db2 | Move file pointer
2018-12-17T23:01:37.339185615Z 63 PC: 13d53 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:01:37.343110196Z 62 PC: 13cd0 | Close file
2018-12-17T23:01:37.345414709Z 62 PC: 13cd0 | Close file
2018-12-17T23:01:37.347382555Z 26 PC: 13324 | Set disk transfer address
2018-12-17T23:01:37.349402073Z 79 PC: 13329 | Find next file
2018-12-17T23:01:37.352514623Z 64 PC: 139d8 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T23:01:37.3543972Z 37 PC: 13711 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:01:37.356463839Z 37 PC: 13711 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:01:37.35806988Z 37 PC: 13711 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:01:37.35936495Z 37 PC: 13711 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:01:37.361437404Z 37 PC: 13711 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:01:37.363011058Z 37 PC: 13711 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:01:37.364318469Z 37 PC: 13711 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:01:37.367120655Z 37 PC: 13711 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:01:37.368718424Z 37 PC: 13711 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:01:37.370045804Z 37 PC: 13711 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:01:37.372114226Z 37 PC: 13711 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:01:37.373713828Z 37 PC: 13711 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:01:37.375016584Z 37 PC: 13711 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:01:37.377062527Z 37 PC: 13711 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:01:37.378653046Z 37 PC: 13711 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:01:37.379961469Z 37 PC: 13711 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:01:37.382025612Z 37 PC: 13711 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:01:37.383610954Z 37 PC: 13711 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:01:37.384907828Z 37 PC: 13711 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:01:37.386960756Z 76 PC: 13750 | Terminate with return code (Return code = '0')