Sample viewer

vx.netlux.org/Virus.DOS.HLLP.Teterin.7999

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:11:55.669538199Z 53 PC: 13e1a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:11:55.671316193Z 53 PC: 13e1a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:11:55.672292277Z 53 PC: 13e1a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:11:55.673252659Z 53 PC: 13e1a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:11:55.674802965Z 53 PC: 13e1a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:11:55.675795994Z 53 PC: 13e1a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:11:55.676767916Z 53 PC: 13e1a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:11:55.678298484Z 53 PC: 13e1a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:11:55.67937126Z 53 PC: 13e1a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:11:55.680365197Z 53 PC: 13e1a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:11:55.682126813Z 53 PC: 13e1a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:11:55.683313813Z 53 PC: 13e1a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:11:55.684487251Z 53 PC: 13e1a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:11:55.686712665Z 53 PC: 13e1a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:11:55.688044178Z 53 PC: 13e1a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:11:55.689307888Z 53 PC: 13e1a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:11:55.691071538Z 53 PC: 13e1a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:11:55.69269269Z 53 PC: 13e1a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:11:55.694147152Z 53 PC: 13e1a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:11:55.696070222Z 37 PC: 13e2f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:11:55.697379252Z 37 PC: 13e37 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:11:55.698568224Z 37 PC: 13e3f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:11:55.700463893Z 37 PC: 13e47 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:11:55.701988208Z 68 PC: 14dda | I/O control for devices (Set for = 'S�2�[����')
2018-12-17T23:11:55.703166476Z 44 PC: 15272 | Get time 0x15272: mov word ptr [0x46], cx
0x15276: mov word ptr [0x48], dx
0x1527a: retf
0x1527b: call 0x152c2
0x1527e: jb 0x1528f
0x15280: mov cx, word ptr es:[di + 4]
0x15284: cmp cx, 1
0x15287: je 0x1528f
0x15289: xor bx, bx
0x1528b: push cs
0x1528c: call 0x24a9d
0x1528f: retf 4
0x15292: call 0x152c2
0x15295: jb 0x152aa
0x15297: mov ax, cx
0x15299: mov dx, bx
0x1529b: mov cx, word ptr es:[di + 4]
0x1529f: cmp cx, 1
0x152a2: je 0x152aa
0x152a4: xor bx, bx
2018-12-17T23:11:55.709789572Z 48 PC: 14905 | Get DOS version
2018-12-17T23:11:55.711177276Z 61 PC: 14743 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:11:55.715477174Z 66 PC: 14875 | Move file pointer
2018-12-17T23:11:55.717309401Z 63 PC: 14816 | Read file or device (Read 6 bytes on handle 5)
2018-12-17T23:11:55.719577565Z 62 PC: 14793 | Close file
2018-12-17T23:11:55.721238332Z 25 PC: 14992 | Get default drive
2018-12-17T23:11:55.722952939Z 71 PC: 149a5 | Get current directory
2018-12-17T23:11:55.726413185Z 26 PC: 13b4f | Set disk transfer address
2018-12-17T23:11:55.72741257Z 78 PC: 13b5b | Find first file
2018-12-17T23:11:55.733913871Z 48 PC: 14905 | Get DOS version
2018-12-17T23:11:55.736067807Z 61 PC: 14743 | Open file (Filename = 'TEST.EXE')
2018-12-17T23:11:55.742660421Z 66 PC: 14875 | Move file pointer
2018-12-17T23:11:55.744421307Z 63 PC: 14816 | Read file or device (Read 6 bytes on handle 5)
2018-12-17T23:11:55.746951607Z 62 PC: 14793 | Close file
2018-12-17T23:11:55.748899344Z 26 PC: 13b73 | Set disk transfer address
2018-12-17T23:11:55.751160511Z 79 PC: 13b78 | Find next file
2018-12-17T23:11:55.753547405Z 59 PC: 14a59 | Change current directory
2018-12-17T23:11:55.7579796Z 14 PC: 149eb | Set default drive (Drive = 'A')
2018-12-17T23:11:55.759721057Z 25 PC: 149ef | Get default drive
2018-12-17T23:11:55.760743047Z 59 PC: 14a59 | Change current directory
2018-12-17T23:11:55.765497858Z 48 PC: 14905 | Get DOS version
2018-12-17T23:11:55.767967812Z 67 PC: 13ab1 | Get or set file attributes
2018-12-17T23:11:55.773308843Z 67 PC: 13ad8 | Get or set file attributes
2018-12-17T23:11:55.786309752Z 61 PC: 14743 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:11:55.791040055Z 66 PC: 14875 | Move file pointer
2018-12-17T23:11:55.792263252Z 63 PC: 14816 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T23:11:55.794092028Z 66 PC: 152dc | Move file pointer
2018-12-17T23:11:55.801267341Z 66 PC: 152ea | Move file pointer
2018-12-17T23:11:55.802425829Z 66 PC: 152f8 | Move file pointer
2018-12-17T23:11:55.803753285Z 62 PC: 14793 | Close file
2018-12-17T23:11:55.806074072Z 67 PC: 13ad8 | Get or set file attributes
2018-12-17T23:11:55.812697315Z 42 PC: 13a37 | Get date 0x13a37: xor ah, ah
0x13a39: les di, ptr [bp + 6]
0x13a3c: stosw word ptr es:[di], ax
0x13a3d: mov al, dl
0x13a3f: les di, ptr [bp + 0xa]
0x13a42: stosw word ptr es:[di], ax
0x13a43: mov al, dh
0x13a45: les di, ptr [bp + 0xe]
0x13a48: stosw word ptr es:[di], ax
0x13a49: xchg ax, cx
0x13a4a: les di, ptr [bp + 0x12]
0x13a4d: stosw word ptr es:[di], ax
0x13a4e: pop bp
0x13a4f: retf 0x10
0x13a52: push bp
0x13a53: mov bp, sp
0x13a55: mov cx, word ptr [bp + 0xa]
0x13a58: mov dh, byte ptr [bp + 8]
0x13a5b: mov dl, byte ptr [bp + 6]
0x13a5e: mov ah, 0x2b
2018-12-17T23:11:55.814220345Z 44 PC: 13a6d | Get time 0x13a6d: xor ah, ah
0x13a6f: mov al, dl
0x13a71: les di, ptr [bp + 6]
0x13a74: stosw word ptr es:[di], ax
0x13a75: mov al, dh
0x13a77: les di, ptr [bp + 0xa]
0x13a7a: stosw word ptr es:[di], ax
0x13a7b: mov al, cl
0x13a7d: les di, ptr [bp + 0xe]
0x13a80: stosw word ptr es:[di], ax
0x13a81: mov al, ch
0x13a83: les di, ptr [bp + 0x12]
0x13a86: stosw word ptr es:[di], ax
0x13a87: pop bp
0x13a88: retf 0x10
0x13a8b: push bp
0x13a8c: mov bp, sp
0x13a8e: mov ch, byte ptr [bp + 0xc]
0x13a91: mov cl, byte ptr [bp + 0xa]
0x13a94: mov dh, byte ptr [bp + 8]
2018-12-17T23:11:55.816411173Z 48 PC: 14905 | Get DOS version
2018-12-17T23:11:55.817704409Z 26 PC: 13b4f | Set disk transfer address
2018-12-17T23:11:55.818498587Z 78 PC: 13b5b | Find first file
2018-12-17T23:11:55.822375807Z 48 PC: 14905 | Get DOS version
2018-12-17T23:11:55.824020914Z 67 PC: 13ab1 | Get or set file attributes
2018-12-17T23:11:55.827697894Z 67 PC: 13ad8 | Get or set file attributes
2018-12-17T23:11:55.835868197Z 61 PC: 14743 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:11:55.840245345Z 63 PC: 14816 | Read file or device (Read 4034 bytes on handle 5)
2018-12-17T23:11:55.844930383Z 63 PC: 14816 | Read file or device (Read 4034 bytes on handle 5)
2018-12-17T23:11:55.850227123Z 66 PC: 152dc | Move file pointer
2018-12-17T23:11:55.851424976Z 66 PC: 152ea | Move file pointer
2018-12-17T23:11:55.852621527Z 66 PC: 152f8 | Move file pointer
2018-12-17T23:11:55.854222832Z 66 PC: 14875 | Move file pointer
2018-12-17T23:11:55.855773083Z 66 PC: 152dc | Move file pointer
2018-12-17T23:11:55.856902116Z 66 PC: 152ea | Move file pointer
2018-12-17T23:11:55.858133576Z 66 PC: 152f8 | Move file pointer
2018-12-17T23:11:55.859445479Z 66 PC: 14875 | Move file pointer
2018-12-17T23:11:55.860414196Z 63 PC: 14816 | Read file or device (Read 4034 bytes on handle 5)
2018-12-17T23:11:55.865337453Z 63 PC: 14816 | Read file or device (Read 4034 bytes on handle 5)
2018-12-17T23:11:55.872925367Z 66 PC: 14875 | Move file pointer
2018-12-17T23:11:55.874069194Z 64 PC: 14816 | Write file or device (Write 4034 bytes on handle 5)
2018-12-17T23:11:55.880951407Z 64 PC: 14816 | Write file or device (Write 4034 bytes on handle 5)
2018-12-17T23:11:55.886607285Z 66 PC: 152dc | Move file pointer
2018-12-17T23:11:55.887870605Z 66 PC: 152ea | Move file pointer
2018-12-17T23:11:55.889539003Z 66 PC: 152f8 | Move file pointer
2018-12-17T23:11:55.89199473Z 66 PC: 14875 | Move file pointer
2018-12-17T23:11:55.893694766Z 64 PC: 14816 | Write file or device (Write 4034 bytes on handle 5)
2018-12-17T23:11:55.903155108Z 64 PC: 14816 | Write file or device (Write 4034 bytes on handle 5)
2018-12-17T23:11:55.913162296Z 66 PC: 152dc | Move file pointer
2018-12-17T23:11:55.914563869Z 66 PC: 152ea | Move file pointer
2018-12-17T23:11:55.915908645Z 66 PC: 152f8 | Move file pointer
2018-12-17T23:11:55.918301778Z 66 PC: 14875 | Move file pointer
2018-12-17T23:11:55.920629701Z 87 PC: 13b1f | Get or set file date and time
2018-12-17T23:11:55.922127156Z 62 PC: 14793 | Close file
2018-12-17T23:11:55.930313918Z 67 PC: 13ad8 | Get or set file attributes
2018-12-17T23:11:55.939926468Z 53 PC: 13d8b | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:11:55.941063447Z 37 PC: 13d94 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:11:55.943216808Z 53 PC: 13d8b | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:11:55.945683694Z 37 PC: 13d94 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:11:55.946736676Z 53 PC: 13d8b | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:11:55.950432302Z 37 PC: 13d94 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:11:55.951520532Z 53 PC: 13d8b | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:11:55.952696939Z 37 PC: 13d94 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:11:55.954181488Z 53 PC: 13d8b | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:11:55.95564305Z 37 PC: 13d94 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:11:55.957047Z 53 PC: 13d8b | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:11:55.95884318Z 37 PC: 13d94 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:11:55.96000313Z 53 PC: 13d8b | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:11:55.961178573Z 37 PC: 13d94 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:11:55.963384238Z 53 PC: 13d8b | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:11:55.964775264Z 37 PC: 13d94 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:11:55.966117704Z 53 PC: 13d8b | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:11:55.968428719Z 37 PC: 13d94 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:11:55.969724573Z 53 PC: 13d8b | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:11:55.97103982Z 37 PC: 13d94 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:11:55.973322797Z 53 PC: 13d8b | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:11:55.974670629Z 37 PC: 13d94 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:11:55.975988893Z 53 PC: 13d8b | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:11:55.978446878Z 37 PC: 13d94 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:11:55.979932589Z 53 PC: 13d8b | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:11:55.981397131Z 37 PC: 13d94 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:11:55.983635031Z 53 PC: 13d8b | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:11:55.985088363Z 37 PC: 13d94 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:11:55.986521353Z 53 PC: 13d8b | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:11:55.989535636Z 37 PC: 13d94 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:11:55.99090177Z 53 PC: 13d8b | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:11:55.99226989Z 37 PC: 13d94 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:11:55.993991444Z 53 PC: 13d8b | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:11:55.99507403Z 37 PC: 13d94 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:11:55.99619482Z 53 PC: 13d8b | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:11:55.998187195Z 37 PC: 13d94 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:11:55.999958266Z 53 PC: 13d8b | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:11:56.001031866Z 37 PC: 13d94 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:11:56.010319121Z 48 PC: 14905 | Get DOS version
2018-12-17T23:11:56.012032427Z 41 PC: 13d42 | Parse filename
2018-12-17T23:11:56.013983178Z 41 PC: 13d50 | Parse filename
2018-12-17T23:11:56.016048336Z 75 PC: 13d5b | Execute program
2018-12-17T23:11:56.031692733Z 9 PC: 21f3c | Display string (Could not find end pointer)
2018-12-17T23:11:56.03743841Z 76 PC: 21f41 | Terminate with return code (Return code = '0')
2018-12-17T23:11:56.040521791Z 53 PC: 13d8b | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:11:56.042086688Z 37 PC: 13d94 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:11:56.043937473Z 53 PC: 13d8b | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:11:56.04497429Z 37 PC: 13d94 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:11:56.046001361Z 53 PC: 13d8b | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:11:56.047464584Z 37 PC: 13d94 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:11:56.048518334Z 53 PC: 13d8b | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:11:56.049619047Z 37 PC: 13d94 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:11:56.051123474Z 53 PC: 13d8b | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:11:56.052475776Z 37 PC: 13d94 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:11:56.053318789Z 53 PC: 13d8b | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:11:56.054591844Z 37 PC: 13d94 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:11:56.055502897Z 53 PC: 13d8b | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:11:56.05646708Z 37 PC: 13d94 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:11:56.058228953Z 53 PC: 13d8b | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:11:56.059237724Z 37 PC: 13d94 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:11:56.060228862Z 53 PC: 13d8b | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:11:56.06177116Z 37 PC: 13d94 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:11:56.062771302Z 53 PC: 13d8b | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:11:56.064159Z 37 PC: 13d94 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:11:56.065440133Z 53 PC: 13d8b | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:11:56.066394805Z 37 PC: 13d94 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:11:56.068139575Z 53 PC: 13d8b | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:11:56.069468999Z 37 PC: 13d94 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:11:56.070411861Z 53 PC: 13d8b | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:11:56.071816617Z 37 PC: 13d94 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:11:56.07285637Z 53 PC: 13d8b | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:11:56.073853232Z 37 PC: 13d94 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:11:56.075278075Z 53 PC: 13d8b | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:11:56.076227676Z 37 PC: 13d94 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:11:56.077179352Z 53 PC: 13d8b | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:11:56.07873629Z 37 PC: 13d94 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:11:56.079705099Z 53 PC: 13d8b | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:11:56.082913601Z 37 PC: 13d94 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:11:56.084398092Z 53 PC: 13d8b | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:11:56.085479435Z 37 PC: 13d94 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:11:56.087135318Z 53 PC: 13d8b | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:11:56.088934005Z 37 PC: 13d94 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:11:56.090069562Z 48 PC: 14905 | Get DOS version
2018-12-17T23:11:56.091208922Z 26 PC: 13b4f | Set disk transfer address
2018-12-17T23:11:56.092742168Z 78 PC: 13b5b | Find first file
2018-12-17T23:11:56.098623556Z 48 PC: 14905 | Get DOS version
2018-12-17T23:11:56.099987873Z 67 PC: 13ab1 | Get or set file attributes
2018-12-17T23:11:56.105722847Z 67 PC: 13ad8 | Get or set file attributes
2018-12-17T23:11:56.116082399Z 61 PC: 14743 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T23:11:56.123268831Z 63 PC: 14816 | Read file or device (Read 4034 bytes on handle 5)
2018-12-17T23:11:56.131472198Z 63 PC: 14816 | Read file or device (Read 4034 bytes on handle 5)
2018-12-17T23:11:56.13925534Z 66 PC: 152dc | Move file pointer
2018-12-17T23:11:56.141222705Z 66 PC: 152ea | Move file pointer
2018-12-17T23:11:56.142585339Z 66 PC: 152f8 | Move file pointer
2018-12-17T23:11:56.143975641Z 66 PC: 14875 | Move file pointer
2018-12-17T23:11:56.146570044Z 66 PC: 152dc | Move file pointer
2018-12-17T23:11:56.148404541Z 66 PC: 152ea | Move file pointer
2018-12-17T23:11:56.150124653Z 66 PC: 152f8 | Move file pointer
2018-12-17T23:11:56.152959432Z 66 PC: 14875 | Move file pointer
2018-12-17T23:11:56.154731814Z 63 PC: 14816 | Read file or device (Read 4034 bytes on handle 5)
2018-12-17T23:11:56.163121599Z 63 PC: 14816 | Read file or device (Read 4034 bytes on handle 5)
2018-12-17T23:11:56.172480633Z 66 PC: 14875 | Move file pointer
2018-12-17T23:11:56.173970571Z 64 PC: 14816 | Write file or device (Write 4034 bytes on handle 5)
2018-12-17T23:11:56.183072217Z 64 PC: 14816 | Write file or device (Write 4034 bytes on handle 5)
2018-12-17T23:11:56.191548015Z 66 PC: 152dc | Move file pointer
2018-12-17T23:11:56.193369491Z 66 PC: 152ea | Move file pointer
2018-12-17T23:11:56.194774194Z 66 PC: 152f8 | Move file pointer
2018-12-17T23:11:56.196965945Z 66 PC: 14875 | Move file pointer
2018-12-17T23:11:56.198631701Z 64 PC: 14816 | Write file or device (Write 4034 bytes on handle 5)
2018-12-17T23:11:56.206874576Z 64 PC: 14816 | Write file or device (Write 4034 bytes on handle 5)
2018-12-17T23:11:56.215340892Z 66 PC: 152dc | Move file pointer
2018-12-17T23:11:56.216587974Z 66 PC: 152ea | Move file pointer
2018-12-17T23:11:56.21781212Z 66 PC: 152f8 | Move file pointer
2018-12-17T23:11:56.219351528Z 66 PC: 14875 | Move file pointer
2018-12-17T23:11:56.221262444Z 87 PC: 13b1f | Get or set file date and time
2018-12-17T23:11:56.223565319Z 62 PC: 14793 | Close file
2018-12-17T23:11:56.237238276Z 67 PC: 13ad8 | Get or set file attributes
2018-12-17T23:11:56.246768556Z 64 PC: 1449b | Write file or device (Write 0 bytes on handle 1)
2018-12-17T23:11:56.248807519Z 37 PC: 13f71 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T23:11:56.249837283Z 37 PC: 13f71 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T23:11:56.250779737Z 37 PC: 13f71 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:11:56.252337682Z 37 PC: 13f71 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:11:56.253713721Z 37 PC: 13f71 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:11:56.254637861Z 37 PC: 13f71 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:11:56.255986068Z 37 PC: 13f71 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T23:11:56.256906126Z 37 PC: 13f71 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T23:11:56.257839498Z 37 PC: 13f71 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T23:11:56.259031367Z 37 PC: 13f71 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T23:11:56.259956816Z 37 PC: 13f71 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T23:11:56.260908501Z 37 PC: 13f71 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T23:11:56.262251618Z 37 PC: 13f71 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T23:11:56.263163728Z 37 PC: 13f71 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T23:11:56.263951698Z 37 PC: 13f71 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T23:11:56.264899121Z 37 PC: 13f71 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T23:11:56.265703328Z 37 PC: 13f71 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T23:11:56.266632141Z 37 PC: 13f71 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T23:11:56.267753452Z 37 PC: 13f71 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T23:11:56.26862288Z 76 PC: 13fb0 | Terminate with return code (Return code = '0')