Sample viewer

vx.netlux.org/Virus.DOS.HLLP.6624

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:11:16.979317365Z 53 PC: 1340a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:11:16.98084971Z 53 PC: 1340a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:11:16.981878098Z 53 PC: 1340a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:11:16.982904054Z 53 PC: 1340a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:11:16.984639454Z 53 PC: 1340a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:11:16.985684664Z 53 PC: 1340a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:11:16.986694794Z 53 PC: 1340a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:11:16.988314312Z 53 PC: 1340a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:11:16.989878941Z 53 PC: 1340a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:11:16.991158016Z 53 PC: 1340a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:11:16.992968184Z 53 PC: 1340a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:11:16.994099011Z 53 PC: 1340a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:11:16.995831254Z 53 PC: 1340a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:11:16.997740911Z 53 PC: 1340a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:11:16.999553247Z 53 PC: 1340a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:11:17.000907932Z 53 PC: 1340a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:11:17.002082957Z 53 PC: 1340a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:11:17.003409241Z 53 PC: 1340a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:11:17.004391422Z 53 PC: 1340a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:11:17.005354414Z 37 PC: 1341f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:11:17.013882532Z 37 PC: 13427 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:11:17.01495382Z 37 PC: 1342f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:11:17.015908058Z 37 PC: 13437 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:11:17.017651088Z 68 PC: 13fd9 | I/O control for devices (Set for = '')
2018-12-17T22:11:17.019430346Z 48 PC: 13a8f | Get DOS version
2018-12-17T22:11:17.021088175Z 67 PC: 131a3 | Get or set file attributes
2018-12-17T22:11:17.028844662Z 87 PC: 131e4 | Get or set file date and time
2018-12-17T22:11:17.030818025Z 61 PC: 138cd | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:11:17.037295662Z 63 PC: 139a0 | Read file or device (Read 6624 bytes on handle 5)
2018-12-17T22:11:17.047544142Z 62 PC: 1391d | Close file
2018-12-17T22:11:17.04984681Z 44 PC: 14110 | Get time 0x14110: mov word ptr [0x4e], cx
0x14114: mov word ptr [0x50], dx
0x14118: retf
0x14119: call 0x14160
0x1411c: jb 0x1412d
0x1411e: mov cx, word ptr es:[di + 4]
0x14122: cmp cx, 1
0x14125: je 0x1412d
0x14127: xor bx, bx
0x14129: push cs
0x1412a: call 0x23b41
0x1412d: retf 4
0x14130: call 0x14160
0x14133: jb 0x14148
0x14135: mov ax, cx
0x14137: mov dx, bx
0x14139: mov cx, word ptr es:[di + 4]
0x1413d: cmp cx, 1
0x14140: je 0x14148
0x14142: xor bx, bx
2018-12-17T22:11:17.052530956Z 54 PC: 1316a | Get free disk space
2018-12-17T22:11:17.094888867Z 60 PC: 138cd | Create or truncate file
2018-12-17T22:11:17.447073695Z 62 PC: 1391d | Close file
2018-12-17T22:11:17.448958995Z 65 PC: 13a16 | Delete file (Filename = 'C:\TMP.TMP')
2018-12-17T22:11:17.458099516Z 54 PC: 1316a | Get free disk space
2018-12-17T22:11:17.459545759Z 54 PC: 1316a | Get free disk space
2018-12-17T22:11:17.460791606Z 54 PC: 1316a | Get free disk space
2018-12-17T22:11:17.46253002Z 54 PC: 1316a | Get free disk space
2018-12-17T22:11:17.464061744Z 54 PC: 1316a | Get free disk space
2018-12-17T22:11:17.465259332Z 54 PC: 1316a | Get free disk space
2018-12-17T22:11:17.46711993Z 54 PC: 1316a | Get free disk space
2018-12-17T22:11:17.468221038Z 54 PC: 1316a | Get free disk space
2018-12-17T22:11:17.469344138Z 54 PC: 1316a | Get free disk space
2018-12-17T22:11:17.47110779Z 54 PC: 1316a | Get free disk space
2018-12-17T22:11:17.47219893Z 54 PC: 1316a | Get free disk space
2018-12-17T22:11:17.473392878Z 54 PC: 1316a | Get free disk space
2018-12-17T22:11:17.475062835Z 54 PC: 1316a | Get free disk space
2018-12-17T22:11:17.4762902Z 54 PC: 1316a | Get free disk space
2018-12-17T22:11:17.477573376Z 54 PC: 1316a | Get free disk space
2018-12-17T22:11:17.479316186Z 54 PC: 1316a | Get free disk space
2018-12-17T22:11:17.481496608Z 54 PC: 1316a | Get free disk space
2018-12-17T22:11:17.483632548Z 54 PC: 1316a | Get free disk space
2018-12-17T22:11:17.48681335Z 54 PC: 1316a | Get free disk space
2018-12-17T22:11:17.488678601Z 54 PC: 1316a | Get free disk space
2018-12-17T22:11:17.490509861Z 54 PC: 1316a | Get free disk space
2018-12-17T22:11:17.493430721Z 54 PC: 1316a | Get free disk space
2018-12-17T22:11:17.495591475Z 26 PC: 13241 | Set disk transfer address
2018-12-17T22:11:17.497022322Z 78 PC: 1324d | Find first file
2018-12-17T22:11:17.504573013Z 26 PC: 13241 | Set disk transfer address
2018-12-17T22:11:17.506497199Z 78 PC: 1324d | Find first file
2018-12-17T22:11:17.512878936Z 26 PC: 13265 | Set disk transfer address
2018-12-17T22:11:17.515202024Z 79 PC: 1326a | Find next file
2018-12-17T22:11:17.518524067Z 26 PC: 13265 | Set disk transfer address
2018-12-17T22:11:17.519886771Z 79 PC: 1326a | Find next file
2018-12-17T22:11:17.523656728Z 26 PC: 13265 | Set disk transfer address
2018-12-17T22:11:17.524800523Z 79 PC: 1326a | Find next file
2018-12-17T22:11:17.527685776Z 26 PC: 13241 | Set disk transfer address
2018-12-17T22:11:17.529721437Z 78 PC: 1324d | Find first file
2018-12-17T22:11:17.539664304Z 61 PC: 138cd | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:11:17.546923678Z 63 PC: 139a0 | Read file or device (Read 10 bytes on handle 5)
2018-12-17T22:11:17.553310852Z 62 PC: 1391d | Close file
2018-12-17T22:11:17.55610073Z 61 PC: 138cd | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:11:17.56341767Z 63 PC: 139a0 | Read file or device (Read 6624 bytes on handle 5)
2018-12-17T22:11:17.572103423Z 66 PC: 139ff | Move file pointer
2018-12-17T22:11:17.57396488Z 64 PC: 139a0 | Write file or device (Write 6624 bytes on handle 5)
2018-12-17T22:11:17.581673375Z 66 PC: 1417a | Move file pointer
2018-12-17T22:11:17.584120007Z 66 PC: 14188 | Move file pointer
2018-12-17T22:11:17.585539742Z 66 PC: 14196 | Move file pointer
2018-12-17T22:11:17.586967927Z 66 PC: 139ff | Move file pointer
2018-12-17T22:11:17.589536755Z 64 PC: 139a0 | Write file or device (Write 6624 bytes on handle 5)
2018-12-17T22:11:17.601921895Z 62 PC: 1391d | Close file
2018-12-17T22:11:17.610057822Z 87 PC: 13211 | Get or set file date and time
2018-12-17T22:11:17.612137492Z 67 PC: 131ca | Get or set file attributes
2018-12-17T22:11:17.623009952Z 26 PC: 13265 | Set disk transfer address
2018-12-17T22:11:17.624439279Z 79 PC: 1326a | Find next file
2018-12-17T22:11:17.628337209Z 61 PC: 138cd | Open file (Filename = 'C:\DOS\CHKDSK.EXE')
2018-12-17T22:11:17.636970395Z 63 PC: 139a0 | Read file or device (Read 10 bytes on handle 5)
2018-12-17T22:11:17.643610658Z 62 PC: 1391d | Close file
2018-12-17T22:11:17.64697413Z 61 PC: 138cd | Open file (Filename = 'C:\DOS\CHKDSK.EXE')
2018-12-17T22:11:17.655357515Z 63 PC: 139a0 | Read file or device (Read 6624 bytes on handle 5)
2018-12-17T22:11:17.663088752Z 66 PC: 139ff | Move file pointer
2018-12-17T22:11:17.664955669Z 64 PC: 139a0 | Write file or device (Write 6624 bytes on handle 5)
2018-12-17T22:11:17.674977234Z 66 PC: 1417a | Move file pointer
2018-12-17T22:11:17.676729752Z 66 PC: 14188 | Move file pointer
2018-12-17T22:11:17.678472405Z 66 PC: 14196 | Move file pointer
2018-12-17T22:11:17.681062663Z 66 PC: 139ff | Move file pointer
2018-12-17T22:11:17.683236124Z 64 PC: 139a0 | Write file or device (Write 6624 bytes on handle 5)
2018-12-17T22:11:17.693478081Z 62 PC: 1391d | Close file
2018-12-17T22:11:17.700757717Z 87 PC: 13211 | Get or set file date and time
2018-12-17T22:11:17.702373367Z 67 PC: 131ca | Get or set file attributes
2018-12-17T22:11:17.710308302Z 26 PC: 13265 | Set disk transfer address
2018-12-17T22:11:17.712124127Z 79 PC: 1326a | Find next file
2018-12-17T22:11:17.714646381Z 61 PC: 138cd | Open file (Filename = 'C:\DOS\DEBUG.EXE')
2018-12-17T22:11:17.719382332Z 63 PC: 139a0 | Read file or device (Read 10 bytes on handle 5)
2018-12-17T22:11:17.7239343Z 62 PC: 1391d | Close file
2018-12-17T22:11:17.72586814Z 61 PC: 138cd | Open file (Filename = 'C:\DOS\DEBUG.EXE')
2018-12-17T22:11:17.730585786Z 63 PC: 139a0 | Read file or device (Read 6624 bytes on handle 5)
2018-12-17T22:11:17.73563891Z 66 PC: 139ff | Move file pointer
2018-12-17T22:11:17.737242913Z 64 PC: 139a0 | Write file or device (Write 6624 bytes on handle 5)
2018-12-17T22:11:17.745645223Z 66 PC: 1417a | Move file pointer
2018-12-17T22:11:17.747204562Z 66 PC: 14188 | Move file pointer
2018-12-17T22:11:17.749456166Z 66 PC: 14196 | Move file pointer
2018-12-17T22:11:17.750825686Z 66 PC: 139ff | Move file pointer
2018-12-17T22:11:17.752321312Z 64 PC: 139a0 | Write file or device (Write 6624 bytes on handle 5)
2018-12-17T22:11:17.76170859Z 62 PC: 1391d | Close file
2018-12-17T22:11:17.769280108Z 87 PC: 13211 | Get or set file date and time
2018-12-17T22:11:17.77094696Z 67 PC: 131ca | Get or set file attributes
2018-12-17T22:11:17.781332015Z 26 PC: 13265 | Set disk transfer address
2018-12-17T22:11:17.782480793Z 79 PC: 1326a | Find next file
2018-12-17T22:11:17.786294078Z 61 PC: 138cd | Open file (Filename = 'C:\DOS\EXPAND.EXE')
2018-12-17T22:11:17.793665806Z 63 PC: 139a0 | Read file or device (Read 10 bytes on handle 5)
2018-12-17T22:11:17.799217808Z 62 PC: 1391d | Close file
2018-12-17T22:11:17.801486412Z 61 PC: 138cd | Open file (Filename = 'C:\DOS\EXPAND.EXE')
2018-12-17T22:11:17.80853768Z 63 PC: 139a0 | Read file or device (Read 6624 bytes on handle 5)
2018-12-17T22:11:17.815897976Z 66 PC: 139ff | Move file pointer
2018-12-17T22:11:17.817539707Z 64 PC: 139a0 | Write file or device (Write 6624 bytes on handle 5)
2018-12-17T22:11:17.826005159Z 66 PC: 1417a | Move file pointer
2018-12-17T22:11:17.827397382Z 66 PC: 14188 | Move file pointer
2018-12-17T22:11:17.828935087Z 66 PC: 14196 | Move file pointer
2018-12-17T22:11:17.830836988Z 66 PC: 139ff | Move file pointer
2018-12-17T22:11:17.832421682Z 64 PC: 139a0 | Write file or device (Write 6624 bytes on handle 5)
2018-12-17T22:11:17.842180268Z 62 PC: 1391d | Close file
2018-12-17T22:11:17.85087482Z 87 PC: 13211 | Get or set file date and time
2018-12-17T22:11:17.852639643Z 67 PC: 131ca | Get or set file attributes
2018-12-17T22:11:17.86238705Z 26 PC: 13265 | Set disk transfer address
2018-12-17T22:11:17.864754103Z 79 PC: 1326a | Find next file
2018-12-17T22:11:17.868640094Z 61 PC: 138cd | Open file (Filename = 'C:\DOS\FDISK.EXE')
2018-12-17T22:11:17.875411367Z 63 PC: 139a0 | Read file or device (Read 10 bytes on handle 5)
2018-12-17T22:11:17.882039958Z 62 PC: 1391d | Close file
2018-12-17T22:11:17.884444815Z 61 PC: 138cd | Open file (Filename = 'C:\DOS\FDISK.EXE')
2018-12-17T22:11:17.891916258Z 63 PC: 139a0 | Read file or device (Read 6624 bytes on handle 5)
2018-12-17T22:11:17.90008358Z 66 PC: 139ff | Move file pointer
2018-12-17T22:11:17.901474849Z 64 PC: 139a0 | Write file or device (Write 6624 bytes on handle 5)
2018-12-17T22:11:17.909911121Z 66 PC: 1417a | Move file pointer
2018-12-17T22:11:17.912386487Z 66 PC: 14188 | Move file pointer
2018-12-17T22:11:17.913976176Z 66 PC: 14196 | Move file pointer
2018-12-17T22:11:17.915565528Z 66 PC: 139ff | Move file pointer
2018-12-17T22:11:17.917322948Z 64 PC: 139a0 | Write file or device (Write 6624 bytes on handle 5)
2018-12-17T22:11:17.923623002Z 62 PC: 1391d | Close file
2018-12-17T22:11:17.929335058Z 87 PC: 13211 | Get or set file date and time
2018-12-17T22:11:17.931006961Z 67 PC: 131ca | Get or set file attributes
2018-12-17T22:11:17.937652294Z 26 PC: 13265 | Set disk transfer address
2018-12-17T22:11:17.93858557Z 79 PC: 1326a | Find next file
2018-12-17T22:11:17.941667227Z 61 PC: 138cd | Open file (Filename = 'C:\DOS\MEM.EXE')
2018-12-17T22:11:17.946618346Z 63 PC: 139a0 | Read file or device (Read 10 bytes on handle 5)
2018-12-17T22:11:17.950935278Z 62 PC: 1391d | Close file
2018-12-17T22:11:17.953150595Z 26 PC: 12d1e | Set disk transfer address
2018-12-17T22:11:17.954246079Z 61 PC: 138cd | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:11:17.961886094Z 66 PC: 1417a | Move file pointer
2018-12-17T22:11:17.963825184Z 66 PC: 14188 | Move file pointer
2018-12-17T22:11:17.965171362Z 66 PC: 14196 | Move file pointer
2018-12-17T22:11:17.96669743Z 66 PC: 139ff | Move file pointer
2018-12-17T22:11:17.968531715Z 63 PC: 139a0 | Read file or device (Read 6624 bytes on handle 5)
2018-12-17T22:11:17.976773051Z 66 PC: 139ff | Move file pointer
2018-12-17T22:11:17.978790558Z 64 PC: 139a0 | Write file or device (Write 6624 bytes on handle 5)
2018-12-17T22:11:17.993327682Z 62 PC: 1391d | Close file
2018-12-17T22:11:18.00107754Z 53 PC: 13387 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:11:18.003072786Z 37 PC: 13390 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:11:18.00411678Z 53 PC: 13387 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:11:18.00534655Z 37 PC: 13390 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:11:18.006936861Z 53 PC: 13387 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:11:18.007962205Z 37 PC: 13390 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:11:18.009081114Z 53 PC: 13387 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:11:18.010971065Z 37 PC: 13390 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:11:18.011992357Z 53 PC: 13387 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:11:18.013037675Z 37 PC: 13390 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:11:18.015335806Z 53 PC: 13387 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:11:18.016981106Z 37 PC: 13390 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:11:18.018556568Z 53 PC: 13387 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:11:18.020968528Z 37 PC: 13390 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:11:18.024011637Z 53 PC: 13387 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:11:18.02561169Z 37 PC: 13390 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:11:18.028353768Z 53 PC: 13387 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:11:18.029806421Z 37 PC: 13390 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:11:18.031250415Z 53 PC: 13387 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:11:18.033462115Z 37 PC: 13390 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:11:18.03461204Z 53 PC: 13387 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:11:18.036731314Z 37 PC: 13390 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:11:18.039394316Z 53 PC: 13387 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:11:18.040774818Z 37 PC: 13390 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:11:18.042153971Z 53 PC: 13387 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:11:18.045178876Z 37 PC: 13390 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:11:18.046297481Z 53 PC: 13387 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:11:18.047447269Z 37 PC: 13390 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:11:18.051937839Z 53 PC: 13387 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:11:18.053350128Z 37 PC: 13390 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:11:18.054910389Z 53 PC: 13387 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:11:18.056929024Z 37 PC: 13390 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:11:18.058282027Z 53 PC: 13387 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:11:18.059859489Z 37 PC: 13390 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:11:18.061693396Z 53 PC: 13387 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:11:18.062907373Z 37 PC: 13390 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:11:18.064680174Z 53 PC: 13387 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:11:18.065881142Z 37 PC: 13390 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:11:18.067521416Z 41 PC: 1333e | Parse filename
2018-12-17T22:11:18.069417269Z 41 PC: 1334c | Parse filename
2018-12-17T22:11:18.07076796Z 75 PC: 13357 | Execute program
2018-12-17T22:11:18.086287305Z 9 PC: 190e2 | Display string (String= 'Goat file (EXE). Size=00002968h/0000010600d bytes. ')
2018-12-17T22:11:18.091891469Z 76 PC: 190e6 | Terminate with return code (Return code = '36')
2018-12-17T22:11:18.104125835Z 53 PC: 13387 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:11:18.105566416Z 37 PC: 13390 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:11:18.107753638Z 53 PC: 13387 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:11:18.109150861Z 37 PC: 13390 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:11:18.110539116Z 53 PC: 13387 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:11:18.112655372Z 37 PC: 13390 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:11:18.114061679Z 53 PC: 13387 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:11:18.115437235Z 37 PC: 13390 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:11:18.117797136Z 53 PC: 13387 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:11:18.11928941Z 37 PC: 13390 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:11:18.120672087Z 53 PC: 13387 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:11:18.122449446Z 37 PC: 13390 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:11:18.123479289Z 53 PC: 13387 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:11:18.124724618Z 37 PC: 13390 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:11:18.126604878Z 53 PC: 13387 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:11:18.128177867Z 37 PC: 13390 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:11:18.129585849Z 53 PC: 13387 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:11:18.131956547Z 37 PC: 13390 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:11:18.133166705Z 53 PC: 13387 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:11:18.134471869Z 37 PC: 13390 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:11:18.136020368Z 53 PC: 13387 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:11:18.137191298Z 37 PC: 13390 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:11:18.138775289Z 53 PC: 13387 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:11:18.139891093Z 37 PC: 13390 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:11:18.140904285Z 53 PC: 13387 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:11:18.142499109Z 37 PC: 13390 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:11:18.143615165Z 53 PC: 13387 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:11:18.144739953Z 37 PC: 13390 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:11:18.146281836Z 53 PC: 13387 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:11:18.147426327Z 37 PC: 13390 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:11:18.148502368Z 53 PC: 13387 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:11:18.150267708Z 37 PC: 13390 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:11:18.15136086Z 53 PC: 13387 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:11:18.15243066Z 37 PC: 13390 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:11:18.154279766Z 53 PC: 13387 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:11:18.155288587Z 37 PC: 13390 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:11:18.156344666Z 53 PC: 13387 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:11:18.15811414Z 37 PC: 13390 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:11:18.159560523Z 61 PC: 138cd | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:11:18.166553462Z 64 PC: 139a0 | Write file or device (Write 6624 bytes on handle 5)
2018-12-17T22:11:18.175622618Z 62 PC: 1391d | Close file
2018-12-17T22:11:18.183617134Z 67 PC: 131ca | Get or set file attributes
2018-12-17T22:11:18.202008967Z 87 PC: 13211 | Get or set file date and time
2018-12-17T22:11:18.204276283Z 64 PC: 13828 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:11:18.205983041Z 37 PC: 13561 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:11:18.207754783Z 37 PC: 13561 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:11:18.20886438Z 37 PC: 13561 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:11:18.209889845Z 37 PC: 13561 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:11:18.211243682Z 37 PC: 13561 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:11:18.212543371Z 37 PC: 13561 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:11:18.213667136Z 37 PC: 13561 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:11:18.215320672Z 37 PC: 13561 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:11:18.216389102Z 37 PC: 13561 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:11:18.217358176Z 37 PC: 13561 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:11:18.218877008Z 37 PC: 13561 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:11:18.219852326Z 37 PC: 13561 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:11:18.220927221Z 37 PC: 13561 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:11:18.223007122Z 37 PC: 13561 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:11:18.224003246Z 37 PC: 13561 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:11:18.225000116Z 37 PC: 13561 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:11:18.22702603Z 37 PC: 13561 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:11:18.228285381Z 37 PC: 13561 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:11:18.229557202Z 37 PC: 13561 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:11:18.231711439Z 76 PC: 135a0 | Terminate with return code (Return code = '0')