Sample viewer

vx.netlux.org/Virus.DOS.HLLP.Vircod.4255

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T21:52:18.39768933Z 53 PC: 132f2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T21:52:18.399783517Z 53 PC: 132f2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T21:52:18.400852345Z 53 PC: 132f2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T21:52:18.401961503Z 53 PC: 132f2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T21:52:18.409884415Z 53 PC: 132f2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T21:52:18.411414298Z 53 PC: 132f2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:52:18.412823108Z 53 PC: 132f2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T21:52:18.427489371Z 53 PC: 132f2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T21:52:18.428522834Z 53 PC: 132f2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T21:52:18.429964642Z 53 PC: 132f2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T21:52:18.431739184Z 53 PC: 132f2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T21:52:18.433126889Z 53 PC: 132f2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T21:52:18.434435372Z 53 PC: 132f2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T21:52:18.436208088Z 53 PC: 132f2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T21:52:18.437756498Z 53 PC: 132f2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T21:52:18.439185489Z 53 PC: 132f2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T21:52:18.441259359Z 53 PC: 132f2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T21:52:18.442678766Z 53 PC: 132f2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T21:52:18.444042669Z 53 PC: 132f2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T21:52:18.446156554Z 37 PC: 13307 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T21:52:18.447587891Z 37 PC: 1330f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T21:52:18.448422824Z 37 PC: 13317 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:52:18.450267475Z 37 PC: 1331f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T21:52:18.451455383Z 68 PC: 1368f | I/O control for devices (Set for = '')
2018-12-17T21:52:18.452571783Z 25 PC: 13db1 | Get default drive
2018-12-17T21:52:18.454386566Z 71 PC: 13dc4 | Get current directory
2018-12-17T21:52:18.456604007Z 59 PC: 13e78 | Change current directory
2018-12-17T21:52:18.459373964Z 48 PC: 13d24 | Get DOS version
2018-12-17T21:52:18.461077995Z 67 PC: 1307a | Get or set file attributes
2018-12-17T21:52:18.486847273Z 61 PC: 13ae4 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T21:52:18.49356525Z 66 PC: 13c80 | Move file pointer
2018-12-17T21:52:18.49575865Z 66 PC: 13c8e | Move file pointer
2018-12-17T21:52:18.497321147Z 66 PC: 13c9c | Move file pointer
2018-12-17T21:52:18.498536509Z 62 PC: 13b34 | Close file
2018-12-17T21:52:18.500457855Z 26 PC: 130ab | Set disk transfer address
2018-12-17T21:52:18.502329414Z 78 PC: 130b7 | Find first file
2018-12-17T21:52:18.508204444Z 67 PC: 1307a | Get or set file attributes
2018-12-17T21:52:18.517315125Z 61 PC: 13ae4 | Open file (Filename = 'TEST.EXE')
2018-12-17T21:52:18.526213607Z 66 PC: 13c80 | Move file pointer
2018-12-17T21:52:18.527777116Z 66 PC: 13c8e | Move file pointer
2018-12-17T21:52:18.529971317Z 66 PC: 13c9c | Move file pointer
2018-12-17T21:52:18.531640209Z 66 PC: 13c16 | Move file pointer
2018-12-17T21:52:18.532938532Z 63 PC: 13bb7 | Read file or device (Read 7 bytes on handle 5)
2018-12-17T21:52:18.539017081Z 62 PC: 13b34 | Close file
2018-12-17T21:52:18.54184364Z 54 PC: 1301a | Get free disk space
2018-12-17T21:52:18.55014208Z 67 PC: 1307a | Get or set file attributes
2018-12-17T21:52:18.557544696Z 61 PC: 13ae4 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T21:52:18.561758087Z 60 PC: 13ae4 | Create or truncate file
2018-12-17T21:52:18.568753495Z 63 PC: 13bb7 | Read file or device (Read 4255 bytes on handle 5)
2018-12-17T21:52:18.575219302Z 64 PC: 13bb7 | Write file or device (Write 4255 bytes on handle 6)
2018-12-17T21:52:18.580722547Z 62 PC: 13b34 | Close file
2018-12-17T21:52:18.582080192Z 61 PC: 13ae4 | Open file (Filename = 'TEST.EXE')
2018-12-17T21:52:18.587299412Z 63 PC: 13bb7 | Read file or device (Read 61140 bytes on handle 5)
2018-12-17T21:52:18.593715402Z 64 PC: 13bb7 | Write file or device (Write 34432 bytes on handle 6)
2018-12-17T21:52:18.600816241Z 63 PC: 13bb7 | Read file or device (Read 61140 bytes on handle 5)
2018-12-17T21:52:18.603040139Z 62 PC: 13b34 | Close file
2018-12-17T21:52:18.60459125Z 62 PC: 13b34 | Close file
2018-12-17T21:52:18.612762524Z 65 PC: 13cb9 | Delete file (Filename = 'TEST.EXE')
2018-12-17T21:52:18.625349774Z 86 PC: 13cef | Rename file
2018-12-17T21:52:18.636777682Z 14 PC: 13e0a | Set default drive (Drive = 'A')
2018-12-17T21:52:18.638257049Z 25 PC: 13e0e | Get default drive
2018-12-17T21:52:18.639998739Z 59 PC: 13e78 | Change current directory
2018-12-17T21:52:18.644014224Z 54 PC: 1301a | Get free disk space
2018-12-17T21:52:18.64677172Z 61 PC: 13ae4 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T21:52:18.657941039Z 60 PC: 13ae4 | Create or truncate file
2018-12-17T21:52:18.670299513Z 66 PC: 13c16 | Move file pointer
2018-12-17T21:52:18.672283137Z 63 PC: 13bb7 | Read file or device (Read 61140 bytes on handle 5)
2018-12-17T21:52:18.681771534Z 64 PC: 13bb7 | Write file or device (Write 34432 bytes on handle 6)
2018-12-17T21:52:18.692926835Z 63 PC: 13bb7 | Read file or device (Read 61140 bytes on handle 5)
2018-12-17T21:52:18.695358309Z 62 PC: 13b34 | Close file
2018-12-17T21:52:18.6980747Z 62 PC: 13b34 | Close file
2018-12-17T21:52:18.706155699Z 53 PC: 13112 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T21:52:18.707341213Z 37 PC: 1311b | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T21:52:18.709221215Z 53 PC: 13112 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T21:52:18.71044627Z 37 PC: 1311b | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T21:52:18.711473655Z 53 PC: 13112 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T21:52:18.712784615Z 37 PC: 1311b | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T21:52:18.713910851Z 53 PC: 13112 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T21:52:18.714896432Z 37 PC: 1311b | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T21:52:18.716953426Z 53 PC: 13112 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T21:52:18.718014041Z 37 PC: 1311b | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T21:52:18.71924359Z 53 PC: 13112 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:52:18.720919088Z 37 PC: 1311b | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:52:18.72255839Z 53 PC: 13112 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T21:52:18.723791893Z 37 PC: 1311b | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T21:52:18.724978163Z 53 PC: 13112 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T21:52:18.726394684Z 37 PC: 1311b | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T21:52:18.727513548Z 53 PC: 13112 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T21:52:18.72863136Z 37 PC: 1311b | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T21:52:18.73052396Z 53 PC: 13112 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T21:52:18.7315534Z 37 PC: 1311b | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T21:52:18.732704112Z 53 PC: 13112 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T21:52:18.734375647Z 37 PC: 1311b | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T21:52:18.735325896Z 53 PC: 13112 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T21:52:18.736533906Z 37 PC: 1311b | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T21:52:18.737886252Z 53 PC: 13112 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T21:52:18.738855367Z 37 PC: 1311b | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T21:52:18.740087741Z 53 PC: 13112 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T21:52:18.741534081Z 37 PC: 1311b | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T21:52:18.742604292Z 53 PC: 13112 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T21:52:18.743894325Z 37 PC: 1311b | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T21:52:18.745206749Z 53 PC: 13112 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T21:52:18.746224233Z 37 PC: 1311b | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T21:52:18.74731989Z 53 PC: 13112 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T21:52:18.748637274Z 37 PC: 1311b | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T21:52:18.749650761Z 53 PC: 13112 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T21:52:18.750789031Z 37 PC: 1311b | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T21:52:18.752257881Z 53 PC: 13112 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T21:52:18.753200109Z 37 PC: 1311b | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T21:52:18.754731073Z 41 PC: 1319b | Parse filename
2018-12-17T21:52:18.757030854Z 41 PC: 131a9 | Parse filename
2018-12-17T21:52:18.758111808Z 75 PC: 131b4 | Execute program
2018-12-17T21:52:18.77829212Z 53 PC: 33992 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T21:52:18.779795313Z 53 PC: 33992 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T21:52:18.781113821Z 53 PC: 33992 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T21:52:18.782430199Z 53 PC: 33992 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T21:52:18.786100029Z 53 PC: 33992 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T21:52:18.787195628Z 53 PC: 33992 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:52:18.78878591Z 53 PC: 33992 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T21:52:18.789869478Z 53 PC: 33992 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T21:52:18.790867802Z 53 PC: 33992 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T21:52:18.792161829Z 53 PC: 33992 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T21:52:18.793136434Z 53 PC: 33992 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T21:52:18.793880487Z 53 PC: 33992 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T21:52:18.795194562Z 53 PC: 33992 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T21:52:18.796073494Z 53 PC: 33992 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T21:52:18.796826647Z 53 PC: 33992 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T21:52:18.797879856Z 53 PC: 33992 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T21:52:18.79869249Z 53 PC: 33992 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T21:52:18.799503953Z 53 PC: 33992 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T21:52:18.800784419Z 53 PC: 33992 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T21:52:18.801985305Z 37 PC: 339a7 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T21:52:18.803102832Z 37 PC: 339af | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T21:52:18.804652622Z 37 PC: 339b7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:52:18.805629472Z 37 PC: 339bf | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T21:52:18.807078928Z 68 PC: 33d2f | I/O control for devices (Set for = '')
2018-12-17T21:52:18.809038081Z 25 PC: 34451 | Get default drive
2018-12-17T21:52:18.809985408Z 71 PC: 34464 | Get current directory
2018-12-17T21:52:18.813038274Z 59 PC: 34518 | Change current directory
2018-12-17T21:52:18.817832235Z 48 PC: 343c4 | Get DOS version
2018-12-17T21:52:18.819088906Z 25 PC: 338a2 | Get default drive
2018-12-17T21:52:18.820269598Z 71 PC: 338c1 | Get current directory
2018-12-17T21:52:18.823809076Z 67 PC: 3371a | Get or set file attributes
2018-12-17T21:52:18.833506268Z 61 PC: 34184 | Open file (Filename = 'A:\!VIRCOD!.EXE')
2018-12-17T21:52:18.844328854Z 66 PC: 34320 | Move file pointer
2018-12-17T21:52:18.845789776Z 66 PC: 3432e | Move file pointer
2018-12-17T21:52:18.847651012Z 66 PC: 3433c | Move file pointer
2018-12-17T21:52:18.848835844Z 62 PC: 341d4 | Close file
2018-12-17T21:52:18.851132215Z 26 PC: 3374b | Set disk transfer address
2018-12-17T21:52:18.85214588Z 78 PC: 33757 | Find first file
2018-12-17T21:52:18.858303059Z 67 PC: 3371a | Get or set file attributes
2018-12-17T21:52:18.867974394Z 61 PC: 34184 | Open file (Filename = '!VIRCOD!.EXE')
2018-12-17T21:52:18.874249018Z 66 PC: 34320 | Move file pointer
2018-12-17T21:52:18.875608653Z 66 PC: 3432e | Move file pointer
2018-12-17T21:52:18.877095798Z 66 PC: 3433c | Move file pointer
2018-12-17T21:52:18.878447444Z 66 PC: 342b6 | Move file pointer
2018-12-17T21:52:18.880183991Z 63 PC: 34257 | Read file or device (Read 7 bytes on handle 5)
2018-12-17T21:52:18.886689674Z 62 PC: 341d4 | Close file
2018-12-17T21:52:18.888411423Z 54 PC: 336ba | Get free disk space
2018-12-17T21:52:18.897827185Z 67 PC: 3371a | Get or set file attributes
2018-12-17T21:52:18.907819504Z 61 PC: 34184 | Open file (Filename = 'A:\!VIRCOD!.EXE')
2018-12-17T21:52:18.915232609Z 60 PC: 34184 | Create or truncate file
2018-12-17T21:52:18.927072594Z 63 PC: 34257 | Read file or device (Read 4255 bytes on handle 5)
2018-12-17T21:52:18.934130233Z 64 PC: 34257 | Write file or device (Write 4255 bytes on handle 6)
2018-12-17T21:52:18.942442754Z 62 PC: 341d4 | Close file
2018-12-17T21:52:18.944777807Z 61 PC: 34184 | Open file (Filename = '!VIRCOD!.EXE')
2018-12-17T21:52:18.951285902Z 63 PC: 34257 | Read file or device (Read 61140 bytes on handle 5)
2018-12-17T21:52:18.961219438Z 64 PC: 34257 | Write file or device (Write 34432 bytes on handle 6)
2018-12-17T21:52:18.971969402Z 63 PC: 34257 | Read file or device (Read 61140 bytes on handle 5)
2018-12-17T21:52:18.974629818Z 62 PC: 341d4 | Close file
2018-12-17T21:52:18.976420535Z 62 PC: 341d4 | Close file
2018-12-17T21:52:18.986958197Z 65 PC: 34359 | Delete file (Filename = '!VIRCOD!.EXE')
2018-12-17T21:52:18.997890365Z 86 PC: 3438f | Rename file
2018-12-17T21:52:19.008921843Z 14 PC: 344aa | Set default drive (Drive = 'A')
2018-12-17T21:52:19.01095305Z 25 PC: 344ae | Get default drive
2018-12-17T21:52:19.012250597Z 59 PC: 34518 | Change current directory
2018-12-17T21:52:19.016712284Z 54 PC: 336ba | Get free disk space
2018-12-17T21:52:19.025144512Z 61 PC: 34184 | Open file (Filename = 'A:\!VIRCOD!.EXE')
2018-12-17T21:52:19.033320785Z 60 PC: 34184 | Create or truncate file
2018-12-17T21:52:19.047226441Z 66 PC: 342b6 | Move file pointer
2018-12-17T21:52:19.049327228Z 63 PC: 34257 | Read file or device (Read 61140 bytes on handle 5)
2018-12-17T21:52:19.051973584Z 62 PC: 341d4 | Close file
2018-12-17T21:52:19.054402487Z 62 PC: 341d4 | Close file
2018-12-17T21:52:19.056182086Z 53 PC: 337b2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T21:52:19.057375095Z 37 PC: 337bb | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T21:52:19.059142866Z 53 PC: 337b2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T21:52:19.060427288Z 37 PC: 337bb | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T21:52:19.06157707Z 53 PC: 337b2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T21:52:19.063379375Z 37 PC: 337bb | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T21:52:19.06475694Z 53 PC: 337b2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T21:52:19.066044093Z 37 PC: 337bb | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T21:52:19.067668448Z 53 PC: 337b2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T21:52:19.068674578Z 37 PC: 337bb | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T21:52:19.06975916Z 53 PC: 337b2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:52:19.071373665Z 37 PC: 337bb | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:52:19.072303165Z 53 PC: 337b2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T21:52:19.073262612Z 37 PC: 337bb | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T21:52:19.074774406Z 53 PC: 337b2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T21:52:19.075857973Z 37 PC: 337bb | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T21:52:19.076740879Z 53 PC: 337b2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T21:52:19.078423754Z 37 PC: 337bb | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T21:52:19.079612707Z 53 PC: 337b2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T21:52:19.080568919Z 37 PC: 337bb | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T21:52:19.082092213Z 53 PC: 337b2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T21:52:19.083254285Z 37 PC: 337bb | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T21:52:19.084167644Z 53 PC: 337b2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T21:52:19.0859536Z 37 PC: 337bb | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T21:52:19.087238069Z 53 PC: 337b2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T21:52:19.088174481Z 37 PC: 337bb | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T21:52:19.089582818Z 53 PC: 337b2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T21:52:19.090501599Z 37 PC: 337bb | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T21:52:19.09170374Z 53 PC: 337b2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T21:52:19.093094761Z 37 PC: 337bb | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T21:52:19.094108041Z 53 PC: 337b2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T21:52:19.095557604Z 37 PC: 337bb | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T21:52:19.096600851Z 53 PC: 337b2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T21:52:19.097529625Z 37 PC: 337bb | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T21:52:19.099219744Z 53 PC: 337b2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T21:52:19.100282142Z 37 PC: 337bb | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T21:52:19.101279021Z 53 PC: 337b2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T21:52:19.105399993Z 37 PC: 337bb | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T21:52:19.107153596Z 41 PC: 3383b | Parse filename
2018-12-17T21:52:19.108733789Z 41 PC: 33849 | Parse filename
2018-12-17T21:52:19.111172827Z 75 PC: 33854 | Execute program
2018-12-17T21:52:19.120339392Z 53 PC: 337b2 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T21:52:19.121617328Z 37 PC: 337bb | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T21:52:19.123183617Z 53 PC: 337b2 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T21:52:19.124179512Z 37 PC: 337bb | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T21:52:19.125537285Z 53 PC: 337b2 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T21:52:19.127524516Z 37 PC: 337bb | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T21:52:19.12838014Z 53 PC: 337b2 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T21:52:19.129316223Z 37 PC: 337bb | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T21:52:19.130794395Z 53 PC: 337b2 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T21:52:19.131721441Z 37 PC: 337bb | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T21:52:19.132609501Z 53 PC: 337b2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:52:19.133972143Z 37 PC: 337bb | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:52:19.134871694Z 53 PC: 337b2 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T21:52:19.136315867Z 37 PC: 337bb | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T21:52:19.138441709Z 53 PC: 337b2 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T21:52:19.140028939Z 37 PC: 337bb | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T21:52:19.142497737Z 53 PC: 337b2 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T21:52:19.144110214Z 37 PC: 337bb | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T21:52:19.14556058Z 53 PC: 337b2 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T21:52:19.148154205Z 37 PC: 337bb | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T21:52:19.149597598Z 53 PC: 337b2 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T21:52:19.150976908Z 37 PC: 337bb | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T21:52:19.153171513Z 53 PC: 337b2 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T21:52:19.155044064Z 37 PC: 337bb | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T21:52:19.156494747Z 53 PC: 337b2 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T21:52:19.158640311Z 37 PC: 337bb | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T21:52:19.160128834Z 53 PC: 337b2 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T21:52:19.161875765Z 37 PC: 337bb | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T21:52:19.164385782Z 53 PC: 337b2 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T21:52:19.165730389Z 37 PC: 337bb | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T21:52:19.166892183Z 53 PC: 337b2 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T21:52:19.169574854Z 37 PC: 337bb | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T21:52:19.170700073Z 53 PC: 337b2 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T21:52:19.171947642Z 37 PC: 337bb | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T21:52:19.173731281Z 53 PC: 337b2 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T21:52:19.174743257Z 37 PC: 337bb | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T21:52:19.175698831Z 53 PC: 337b2 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T21:52:19.177404148Z 37 PC: 337bb | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T21:52:19.179064414Z 65 PC: 34359 | Delete file (Filename = '!VIRCOD!.EXE')
2018-12-17T21:52:19.190739853Z 64 PC: 33e32 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T21:52:19.192721144Z 37 PC: 33aa6 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T21:52:19.194131964Z 37 PC: 33aa6 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T21:52:19.195289837Z 37 PC: 33aa6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T21:52:19.197942169Z 37 PC: 33aa6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T21:52:19.19893379Z 37 PC: 33aa6 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T21:52:19.201073802Z 37 PC: 33aa6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:52:19.204177935Z 37 PC: 33aa6 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T21:52:19.205382899Z 37 PC: 33aa6 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T21:52:19.206447925Z 37 PC: 33aa6 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T21:52:19.208085842Z 37 PC: 33aa6 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T21:52:19.209199287Z 37 PC: 33aa6 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T21:52:19.21071653Z 37 PC: 33aa6 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T21:52:19.211983724Z 37 PC: 33aa6 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T21:52:19.213082035Z 37 PC: 33aa6 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T21:52:19.214736134Z 37 PC: 33aa6 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T21:52:19.215744827Z 37 PC: 33aa6 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T21:52:19.216981157Z 37 PC: 33aa6 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T21:52:19.218676068Z 37 PC: 33aa6 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T21:52:19.219819906Z 37 PC: 33aa6 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T21:52:19.221155902Z 76 PC: 33ae5 | Terminate with return code (Return code = '0')
2018-12-17T21:52:19.224619661Z 53 PC: 13112 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T21:52:19.22640761Z 37 PC: 1311b | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T21:52:19.227662265Z 53 PC: 13112 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T21:52:19.229491661Z 37 PC: 1311b | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T21:52:19.230732334Z 53 PC: 13112 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T21:52:19.232315055Z 37 PC: 1311b | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T21:52:19.233372308Z 53 PC: 13112 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T21:52:19.234379259Z 37 PC: 1311b | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T21:52:19.242996445Z 53 PC: 13112 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T21:52:19.244057341Z 37 PC: 1311b | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T21:52:19.245265461Z 53 PC: 13112 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:52:19.247747516Z 37 PC: 1311b | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:52:19.24886767Z 53 PC: 13112 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T21:52:19.250077045Z 37 PC: 1311b | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T21:52:19.251499067Z 53 PC: 13112 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T21:52:19.252494692Z 37 PC: 1311b | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T21:52:19.253905515Z 53 PC: 13112 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T21:52:19.255125257Z 37 PC: 1311b | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T21:52:19.25610277Z 53 PC: 13112 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T21:52:19.257601266Z 37 PC: 1311b | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T21:52:19.258727567Z 53 PC: 13112 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T21:52:19.259792638Z 37 PC: 1311b | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T21:52:19.261020595Z 53 PC: 13112 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T21:52:19.262315262Z 37 PC: 1311b | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T21:52:19.263618064Z 53 PC: 13112 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T21:52:19.26594567Z 37 PC: 1311b | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T21:52:19.267251803Z 53 PC: 13112 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T21:52:19.268813214Z 37 PC: 1311b | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T21:52:19.270945033Z 53 PC: 13112 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T21:52:19.272283796Z 37 PC: 1311b | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T21:52:19.274133329Z 53 PC: 13112 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T21:52:19.275369926Z 37 PC: 1311b | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T21:52:19.276234122Z 53 PC: 13112 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T21:52:19.277855591Z 37 PC: 1311b | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T21:52:19.279102198Z 53 PC: 13112 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T21:52:19.280026751Z 37 PC: 1311b | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T21:52:19.281845545Z 53 PC: 13112 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T21:52:19.282918093Z 37 PC: 1311b | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T21:52:19.2840771Z 65 PC: 13cb9 | Delete file (Filename = '!VIRCOD!.EXE')
2018-12-17T21:52:19.290352123Z 64 PC: 13792 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T21:52:19.292026321Z 37 PC: 13406 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T21:52:19.293252152Z 37 PC: 13406 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T21:52:19.294481192Z 37 PC: 13406 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T21:52:19.295423474Z 37 PC: 13406 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T21:52:19.297255584Z 37 PC: 13406 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T21:52:19.298205154Z 37 PC: 13406 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:52:19.29913332Z 37 PC: 13406 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T21:52:19.30081907Z 37 PC: 13406 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T21:52:19.301916027Z 37 PC: 13406 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T21:52:19.303036513Z 37 PC: 13406 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T21:52:19.305081177Z 37 PC: 13406 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T21:52:19.306091023Z 37 PC: 13406 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T21:52:19.307581244Z 37 PC: 13406 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T21:52:19.308634432Z 37 PC: 13406 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T21:52:19.30989837Z 37 PC: 13406 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T21:52:19.312238832Z 37 PC: 13406 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T21:52:19.313577746Z 37 PC: 13406 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T21:52:19.314946953Z 37 PC: 13406 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T21:52:19.317430934Z 37 PC: 13406 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T21:52:19.31885549Z 6 PC: 1348d | Direct console I/O
2018-12-17T21:52:19.321857075Z 6 PC: 1348d | Direct console I/O
2018-12-17T21:52:19.32540234Z 6 PC: 1348d | Direct console I/O
2018-12-17T21:52:19.327644944Z 6 PC: 1348d | Direct console I/O
2018-12-17T21:52:19.33052293Z 6 PC: 1348d | Direct console I/O
2018-12-17T21:52:19.334395254Z 6 PC: 1348d | Direct console I/O
2018-12-17T21:52:19.336675119Z 6 PC: 1348d | Direct console I/O
2018-12-17T21:52:19.338851169Z 6 PC: 1348d | Direct console I/O
2018-12-17T21:52:19.340929562Z 6 PC: 1348d | Direct console I/O
2018-12-17T21:52:19.342357744Z 6 PC: 1348d | Direct console I/O
2018-12-17T21:52:19.344744103Z 6 PC: 1348d | Direct console I/O
2018-12-17T21:52:19.346377223Z 6 PC: 1348d | Direct console I/O
2018-12-17T21:52:19.348253005Z 6 PC: 1348d | Direct console I/O
2018-12-17T21:52:19.35010186Z 6 PC: 1348d | Direct console I/O
2018-12-17T21:52:19.351746191Z 6 PC: 1348d | Direct console I/O
2018-12-17T21:52:19.353406851Z 6 PC: 1348d | Direct console I/O
2018-12-17T21:52:19.355432485Z 6 PC: 1348d | Direct console I/O
2018-12-17T21:52:19.35738581Z 6 PC: 1348d | Direct console I/O
2018-12-17T21:52:19.359240302Z 6 PC: 1348d | Direct console I/O
2018-12-17T21:52:19.361621058Z 6 PC: 1348d | Direct console I/O
2018-12-17T21:52:19.363637408Z 6 PC: 1348d | Direct console I/O
2018-12-17T21:52:19.366246662Z 6 PC: 1348d | Direct console I/O
2018-12-17T21:52:19.368348572Z 6 PC: 1348d | Direct console I/O
2018-12-17T21:52:19.370248834Z 6 PC: 1348d | Direct console I/O
2018-12-17T21:52:19.372658179Z 6 PC: 1348d | Direct console I/O
2018-12-17T21:52:19.374822178Z 6 PC: 1348d | Direct console I/O
2018-12-17T21:52:19.376919941Z 6 PC: 1348d | Direct console I/O
2018-12-17T21:52:19.379624493Z 6 PC: 1348d | Direct console I/O
2018-12-17T21:52:19.381562809Z 6 PC: 1348d | Direct console I/O
2018-12-17T21:52:19.383443293Z 6 PC: 1348d | Direct console I/O
2018-12-17T21:52:19.385774078Z 6 PC: 1348d | Direct console I/O
2018-12-17T21:52:19.387838103Z 6 PC: 1348d | Direct console I/O
2018-12-17T21:52:19.389766586Z 6 PC: 1348d | Direct console I/O
2018-12-17T21:52:19.393691406Z 76 PC: 13445 | Terminate with return code (Return code = '2')