Sample viewer

vx.netlux.org/Virus.DOS.HLLP.5220

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:15:58.205634198Z 53 PC: 13912 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:15:58.207444316Z 53 PC: 13912 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:15:58.20893183Z 53 PC: 13912 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:15:58.21003219Z 53 PC: 13912 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:15:58.211788568Z 53 PC: 13912 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:15:58.21294094Z 53 PC: 13912 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:15:58.214119377Z 53 PC: 13912 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:15:58.21563459Z 53 PC: 13912 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:15:58.217257515Z 53 PC: 13912 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:15:58.218249372Z 53 PC: 13912 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:15:58.219935381Z 53 PC: 13912 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:15:58.220982426Z 53 PC: 13912 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:15:58.222292089Z 53 PC: 13912 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:15:58.223840336Z 53 PC: 13912 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:15:58.225176696Z 53 PC: 13912 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:15:58.226307374Z 53 PC: 13912 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:15:58.227603504Z 53 PC: 13912 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:15:58.229424959Z 53 PC: 13912 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:15:58.230755212Z 53 PC: 13912 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:15:58.231907043Z 37 PC: 13927 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:15:58.236276138Z 37 PC: 1392f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:15:58.23749068Z 37 PC: 13937 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:15:58.238772158Z 37 PC: 1393f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:15:58.240819538Z 68 PC: 13ebf | I/O control for devices (Set for = '')
2018-12-17T22:15:58.242480964Z 44 PC: 1354d | Get time 0x1354d: xor ah, ah
0x1354f: mov al, dl
0x13551: les di, ptr [bp + 6]
0x13554: stosw word ptr es:[di], ax
0x13555: mov al, dh
0x13557: les di, ptr [bp + 0xa]
0x1355a: stosw word ptr es:[di], ax
0x1355b: mov al, cl
0x1355d: les di, ptr [bp + 0xe]
0x13560: stosw word ptr es:[di], ax
0x13561: mov al, ch
0x13563: les di, ptr [bp + 0x12]
0x13566: stosw word ptr es:[di], ax
0x13567: pop bp
0x13568: retf 0x10
0x1356b: push bp
0x1356c: mov bp, sp
0x1356e: mov ch, byte ptr [bp + 0xc]
0x13571: mov cl, byte ptr [bp + 0xa]
0x13574: mov dh, byte ptr [bp + 8]
2018-12-17T22:15:58.244724622Z 48 PC: 14657 | Get DOS version
2018-12-17T22:15:58.247049231Z 48 PC: 14657 | Get DOS version
2018-12-17T22:15:58.248287878Z 67 PC: 135ec | Get or set file attributes
2018-12-17T22:15:58.25978333Z 61 PC: 1447d | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:15:58.264858716Z 63 PC: 14550 | Read file or device (Read 5220 bytes on handle 5)
2018-12-17T22:15:58.270391409Z 62 PC: 144cd | Close file
2018-12-17T22:15:58.272490771Z 26 PC: 13663 | Set disk transfer address
2018-12-17T22:15:58.275411973Z 78 PC: 1366f | Find first file
2018-12-17T22:15:58.281537321Z 25 PC: 137ba | Get default drive
2018-12-17T22:15:58.282594159Z 71 PC: 137d9 | Get current directory
2018-12-17T22:15:58.286454065Z 48 PC: 14657 | Get DOS version
2018-12-17T22:15:58.289053123Z 26 PC: 13687 | Set disk transfer address
2018-12-17T22:15:58.30330934Z 79 PC: 1368c | Find next file
2018-12-17T22:15:58.307211128Z 26 PC: 13663 | Set disk transfer address
2018-12-17T22:15:58.308242067Z 78 PC: 1366f | Find first file
2018-12-17T22:15:58.322561465Z 25 PC: 137ba | Get default drive
2018-12-17T22:15:58.323695206Z 71 PC: 137d9 | Get current directory
2018-12-17T22:15:58.333187429Z 48 PC: 14657 | Get DOS version
2018-12-17T22:15:58.334920696Z 26 PC: 13687 | Set disk transfer address
2018-12-17T22:15:58.336181397Z 79 PC: 1368c | Find next file
2018-12-17T22:15:58.33975131Z 25 PC: 137ba | Get default drive
2018-12-17T22:15:58.340882681Z 71 PC: 137d9 | Get current directory
2018-12-17T22:15:58.348843237Z 48 PC: 14657 | Get DOS version
2018-12-17T22:15:58.351156109Z 26 PC: 13687 | Set disk transfer address
2018-12-17T22:15:58.352485543Z 79 PC: 1368c | Find next file
2018-12-17T22:15:58.359264652Z 25 PC: 137ba | Get default drive
2018-12-17T22:15:58.373356729Z 71 PC: 137d9 | Get current directory
2018-12-17T22:15:58.376616237Z 48 PC: 14657 | Get DOS version
2018-12-17T22:15:58.378398411Z 26 PC: 13687 | Set disk transfer address
2018-12-17T22:15:58.380719011Z 79 PC: 1368c | Find next file
2018-12-17T22:15:58.383627708Z 25 PC: 137ba | Get default drive
2018-12-17T22:15:58.385039195Z 71 PC: 137d9 | Get current directory
2018-12-17T22:15:58.388949119Z 48 PC: 14657 | Get DOS version
2018-12-17T22:15:58.390733974Z 26 PC: 13687 | Set disk transfer address
2018-12-17T22:15:58.392087875Z 79 PC: 1368c | Find next file
2018-12-17T22:15:58.395384993Z 25 PC: 137ba | Get default drive
2018-12-17T22:15:58.396371366Z 71 PC: 137d9 | Get current directory
2018-12-17T22:15:58.399462259Z 48 PC: 14657 | Get DOS version
2018-12-17T22:15:58.401468486Z 26 PC: 13687 | Set disk transfer address
2018-12-17T22:15:58.402543955Z 79 PC: 1368c | Find next file
2018-12-17T22:15:58.405317512Z 25 PC: 137ba | Get default drive
2018-12-17T22:15:58.406786872Z 71 PC: 137d9 | Get current directory
2018-12-17T22:15:58.41013238Z 48 PC: 14657 | Get DOS version
2018-12-17T22:15:58.41146888Z 26 PC: 13687 | Set disk transfer address
2018-12-17T22:15:58.412823938Z 79 PC: 1368c | Find next file
2018-12-17T22:15:58.415348236Z 25 PC: 137ba | Get default drive
2018-12-17T22:15:58.416341707Z 71 PC: 137d9 | Get current directory
2018-12-17T22:15:58.424450795Z 48 PC: 14657 | Get DOS version
2018-12-17T22:15:58.425993312Z 26 PC: 13687 | Set disk transfer address
2018-12-17T22:15:58.426983135Z 79 PC: 1368c | Find next file
2018-12-17T22:15:58.434481696Z 26 PC: 13663 | Set disk transfer address
2018-12-17T22:15:58.435401062Z 78 PC: 1366f | Find first file
2018-12-17T22:15:58.44100196Z 26 PC: 13687 | Set disk transfer address
2018-12-17T22:15:58.443353565Z 79 PC: 1368c | Find next file
2018-12-17T22:15:58.446699272Z 26 PC: 13663 | Set disk transfer address
2018-12-17T22:15:58.448025697Z 78 PC: 1366f | Find first file
2018-12-17T22:15:58.453572261Z 25 PC: 137ba | Get default drive
2018-12-17T22:15:58.454556139Z 71 PC: 137d9 | Get current directory
2018-12-17T22:15:58.462088479Z 48 PC: 14657 | Get DOS version
2018-12-17T22:15:58.46405856Z 26 PC: 13663 | Set disk transfer address
2018-12-17T22:15:58.467268256Z 78 PC: 1366f | Find first file
2018-12-17T22:15:58.472888958Z 25 PC: 137ba | Get default drive
2018-12-17T22:15:58.474590858Z 71 PC: 137d9 | Get current directory
2018-12-17T22:15:58.477593387Z 48 PC: 14657 | Get DOS version
2018-12-17T22:15:58.479291365Z 26 PC: 13663 | Set disk transfer address
2018-12-17T22:15:58.48130573Z 78 PC: 1366f | Find first file
2018-12-17T22:15:58.486585963Z 26 PC: 13687 | Set disk transfer address
2018-12-17T22:15:58.487599312Z 79 PC: 1368c | Find next file
2018-12-17T22:15:58.490732153Z 26 PC: 13687 | Set disk transfer address
2018-12-17T22:15:58.49211153Z 79 PC: 1368c | Find next file
2018-12-17T22:15:58.495339535Z 26 PC: 13663 | Set disk transfer address
2018-12-17T22:15:58.498272953Z 78 PC: 1366f | Find first file
2018-12-17T22:15:58.50712484Z 25 PC: 137ba | Get default drive
2018-12-17T22:15:58.509888371Z 71 PC: 137d9 | Get current directory
2018-12-17T22:15:58.513894866Z 48 PC: 14657 | Get DOS version
2018-12-17T22:15:58.515959498Z 67 PC: 135ec | Get or set file attributes
2018-12-17T22:15:59.188965828Z 48 PC: 14657 | Get DOS version
2018-12-17T22:15:59.191759885Z 61 PC: 1447d | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:15:59.198945178Z 66 PC: 145af | Move file pointer
2018-12-17T22:15:59.200744712Z 63 PC: 1450f | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:15:59.208238014Z 66 PC: 145af | Move file pointer
2018-12-17T22:15:59.21040059Z 63 PC: 1450f | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:15:59.213225047Z 66 PC: 145af | Move file pointer
2018-12-17T22:15:59.215631611Z 63 PC: 1450f | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:15:59.218804316Z 66 PC: 145af | Move file pointer
2018-12-17T22:15:59.220535682Z 63 PC: 1450f | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:15:59.223499899Z 66 PC: 145af | Move file pointer
2018-12-17T22:15:59.226005701Z 63 PC: 1450f | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:15:59.228736316Z 61 PC: 1447d | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:15:59.235809443Z 66 PC: 145af | Move file pointer
2018-12-17T22:15:59.238483401Z 63 PC: 1450f | Read file or device (Read 1 bytes on handle 6)
2018-12-17T22:15:59.24477223Z 66 PC: 145af | Move file pointer
2018-12-17T22:15:59.246466227Z 63 PC: 1450f | Read file or device (Read 1 bytes on handle 6)
2018-12-17T22:15:59.250224144Z 66 PC: 145af | Move file pointer
2018-12-17T22:15:59.251919183Z 63 PC: 1450f | Read file or device (Read 1 bytes on handle 6)
2018-12-17T22:15:59.254724935Z 66 PC: 145af | Move file pointer
2018-12-17T22:15:59.257339878Z 63 PC: 1450f | Read file or device (Read 1 bytes on handle 6)
2018-12-17T22:15:59.260116593Z 66 PC: 145af | Move file pointer
2018-12-17T22:15:59.261795306Z 63 PC: 1450f | Read file or device (Read 1 bytes on handle 6)
2018-12-17T22:15:59.265238751Z 62 PC: 144cd | Close file
2018-12-17T22:15:59.267226999Z 62 PC: 144cd | Close file
2018-12-17T22:15:59.269456624Z 67 PC: 135ec | Get or set file attributes
2018-12-17T22:15:59.277409227Z 61 PC: 1447d | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:15:59.281759963Z 66 PC: 14619 | Move file pointer
2018-12-17T22:15:59.282797446Z 66 PC: 14627 | Move file pointer
2018-12-17T22:15:59.288805527Z 66 PC: 14635 | Move file pointer
2018-12-17T22:15:59.289995249Z 54 PC: 1358c | Get free disk space
2018-12-17T22:15:59.296553279Z 62 PC: 144cd | Close file
2018-12-17T22:15:59.298770703Z 61 PC: 1447d | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:15:59.304278928Z 63 PC: 14550 | Read file or device (Read 5220 bytes on handle 5)
2018-12-17T22:15:59.30965367Z 66 PC: 14619 | Move file pointer
2018-12-17T22:15:59.311178839Z 66 PC: 14627 | Move file pointer
2018-12-17T22:15:59.312626438Z 66 PC: 14635 | Move file pointer
2018-12-17T22:15:59.3139412Z 66 PC: 145af | Move file pointer
2018-12-17T22:15:59.315486989Z 64 PC: 14550 | Write file or device (Write 5220 bytes on handle 5)
2018-12-17T22:15:59.32615334Z 62 PC: 144cd | Close file
2018-12-17T22:15:59.334074909Z 61 PC: 1447d | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:15:59.340600993Z 64 PC: 14550 | Write file or device (Write 5220 bytes on handle 5)
2018-12-17T22:15:59.345904054Z 87 PC: 13633 | Get or set file date and time
2018-12-17T22:15:59.347117564Z 62 PC: 144cd | Close file
2018-12-17T22:15:59.352464286Z 26 PC: 13687 | Set disk transfer address
2018-12-17T22:15:59.353308134Z 79 PC: 1368c | Find next file
2018-12-17T22:15:59.355465741Z 25 PC: 137ba | Get default drive
2018-12-17T22:15:59.357663358Z 71 PC: 137d9 | Get current directory
2018-12-17T22:15:59.359692979Z 48 PC: 14657 | Get DOS version
2018-12-17T22:15:59.361006931Z 67 PC: 135ec | Get or set file attributes
2018-12-17T22:15:59.367690185Z 48 PC: 14657 | Get DOS version
2018-12-17T22:15:59.368868781Z 61 PC: 1447d | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:15:59.373312364Z 66 PC: 145af | Move file pointer
2018-12-17T22:15:59.374894902Z 63 PC: 1450f | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:15:59.376749204Z 66 PC: 145af | Move file pointer
2018-12-17T22:15:59.377833205Z 63 PC: 1450f | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:15:59.380253216Z 66 PC: 145af | Move file pointer
2018-12-17T22:15:59.381452341Z 63 PC: 1450f | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:15:59.383197462Z 66 PC: 145af | Move file pointer
2018-12-17T22:15:59.384633054Z 63 PC: 1450f | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:15:59.386377717Z 66 PC: 145af | Move file pointer
2018-12-17T22:15:59.387490862Z 63 PC: 1450f | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:15:59.389787552Z 61 PC: 1447d | Open file (Filename = 'C:\DOS\CHKDSK.EXE')
2018-12-17T22:15:59.394863847Z 66 PC: 145af | Move file pointer
2018-12-17T22:15:59.396189242Z 63 PC: 1450f | Read file or device (Read 1 bytes on handle 6)
2018-12-17T22:15:59.400268277Z 66 PC: 145af | Move file pointer
2018-12-17T22:15:59.401412365Z 63 PC: 1450f | Read file or device (Read 1 bytes on handle 6)
2018-12-17T22:15:59.403908126Z 66 PC: 145af | Move file pointer
2018-12-17T22:15:59.405315386Z 63 PC: 1450f | Read file or device (Read 1 bytes on handle 6)
2018-12-17T22:15:59.407193954Z 66 PC: 145af | Move file pointer
2018-12-17T22:15:59.408921646Z 63 PC: 1450f | Read file or device (Read 1 bytes on handle 6)
2018-12-17T22:15:59.410810001Z 66 PC: 145af | Move file pointer
2018-12-17T22:15:59.411972168Z 63 PC: 1450f | Read file or device (Read 1 bytes on handle 6)
2018-12-17T22:15:59.414351765Z 62 PC: 144cd | Close file
2018-12-17T22:15:59.41576451Z 62 PC: 144cd | Close file
2018-12-17T22:15:59.417328757Z 67 PC: 135ec | Get or set file attributes
2018-12-17T22:15:59.425635321Z 61 PC: 1447d | Open file (Filename = 'C:\DOS\CHKDSK.EXE')
2018-12-17T22:15:59.432838186Z 66 PC: 14619 | Move file pointer
2018-12-17T22:15:59.434600804Z 66 PC: 14627 | Move file pointer
2018-12-17T22:15:59.436943084Z 66 PC: 14635 | Move file pointer
2018-12-17T22:15:59.438806232Z 54 PC: 1358c | Get free disk space
2018-12-17T22:15:59.442303197Z 62 PC: 144cd | Close file
2018-12-17T22:15:59.445277507Z 61 PC: 1447d | Open file (Filename = 'C:\DOS\CHKDSK.EXE')
2018-12-17T22:15:59.452670701Z 63 PC: 14550 | Read file or device (Read 5220 bytes on handle 5)
2018-12-17T22:15:59.459768474Z 66 PC: 14619 | Move file pointer
2018-12-17T22:15:59.462052253Z 66 PC: 14627 | Move file pointer
2018-12-17T22:15:59.463603559Z 66 PC: 14635 | Move file pointer
2018-12-17T22:15:59.466105433Z 66 PC: 145af | Move file pointer
2018-12-17T22:15:59.468394697Z 64 PC: 14550 | Write file or device (Write 5220 bytes on handle 5)
2018-12-17T22:15:59.480235709Z 62 PC: 144cd | Close file
2018-12-17T22:15:59.487907075Z 61 PC: 1447d | Open file (Filename = 'C:\DOS\CHKDSK.EXE')
2018-12-17T22:15:59.495674459Z 64 PC: 14550 | Write file or device (Write 5220 bytes on handle 5)
2018-12-17T22:15:59.503060466Z 87 PC: 13633 | Get or set file date and time
2018-12-17T22:15:59.504874241Z 62 PC: 144cd | Close file
2018-12-17T22:15:59.51209885Z 26 PC: 13687 | Set disk transfer address
2018-12-17T22:15:59.513553793Z 79 PC: 1368c | Find next file
2018-12-17T22:15:59.516917941Z 25 PC: 137ba | Get default drive
2018-12-17T22:15:59.519136042Z 71 PC: 137d9 | Get current directory
2018-12-17T22:15:59.522755712Z 48 PC: 14657 | Get DOS version
2018-12-17T22:15:59.52480797Z 67 PC: 135ec | Get or set file attributes
2018-12-17T22:15:59.535970251Z 48 PC: 14657 | Get DOS version
2018-12-17T22:15:59.538168549Z 61 PC: 1447d | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:15:59.545726984Z 66 PC: 145af | Move file pointer
2018-12-17T22:15:59.548418308Z 63 PC: 1450f | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:15:59.552020533Z 66 PC: 145af | Move file pointer
2018-12-17T22:15:59.553868351Z 63 PC: 1450f | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:15:59.557306618Z 66 PC: 145af | Move file pointer
2018-12-17T22:15:59.558989008Z 63 PC: 1450f | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:15:59.561853115Z 66 PC: 145af | Move file pointer
2018-12-17T22:15:59.565134316Z 63 PC: 1450f | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:15:59.568159929Z 66 PC: 145af | Move file pointer
2018-12-17T22:15:59.569982106Z 63 PC: 1450f | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:15:59.573755759Z 61 PC: 1447d | Open file (Filename = 'C:\DOS\DEBUG.EXE')
2018-12-17T22:15:59.581013552Z 66 PC: 145af | Move file pointer
2018-12-17T22:15:59.58276992Z 63 PC: 1450f | Read file or device (Read 1 bytes on handle 6)
2018-12-17T22:15:59.58950418Z 66 PC: 145af | Move file pointer
2018-12-17T22:15:59.59117095Z 63 PC: 1450f | Read file or device (Read 1 bytes on handle 6)
2018-12-17T22:15:59.594031872Z 66 PC: 145af | Move file pointer
2018-12-17T22:15:59.596583868Z 63 PC: 1450f | Read file or device (Read 1 bytes on handle 6)
2018-12-17T22:15:59.599464919Z 66 PC: 145af | Move file pointer
2018-12-17T22:15:59.601496861Z 63 PC: 1450f | Read file or device (Read 1 bytes on handle 6)
2018-12-17T22:15:59.605300796Z 66 PC: 145af | Move file pointer
2018-12-17T22:15:59.607824387Z 63 PC: 1450f | Read file or device (Read 1 bytes on handle 6)
2018-12-17T22:15:59.611176058Z 62 PC: 144cd | Close file
2018-12-17T22:15:59.614010149Z 62 PC: 144cd | Close file
2018-12-17T22:15:59.616801614Z 67 PC: 135ec | Get or set file attributes
2018-12-17T22:15:59.627618758Z 61 PC: 1447d | Open file (Filename = 'C:\DOS\DEBUG.EXE')
2018-12-17T22:15:59.63571408Z 66 PC: 14619 | Move file pointer
2018-12-17T22:15:59.637831362Z 66 PC: 14627 | Move file pointer
2018-12-17T22:15:59.63956871Z 66 PC: 14635 | Move file pointer
2018-12-17T22:15:59.642221267Z 54 PC: 1358c | Get free disk space
2018-12-17T22:15:59.645795725Z 62 PC: 144cd | Close file
2018-12-17T22:15:59.647796137Z 61 PC: 1447d | Open file (Filename = 'C:\DOS\DEBUG.EXE')
2018-12-17T22:15:59.65653132Z 63 PC: 14550 | Read file or device (Read 5220 bytes on handle 5)
2018-12-17T22:15:59.664534088Z 66 PC: 14619 | Move file pointer
2018-12-17T22:15:59.66631299Z 66 PC: 14627 | Move file pointer
2018-12-17T22:15:59.668852758Z 66 PC: 14635 | Move file pointer
2018-12-17T22:15:59.670978731Z 66 PC: 145af | Move file pointer
2018-12-17T22:15:59.67283331Z 64 PC: 14550 | Write file or device (Write 5220 bytes on handle 5)
2018-12-17T22:15:59.683527194Z 62 PC: 144cd | Close file
2018-12-17T22:15:59.691399717Z 61 PC: 1447d | Open file (Filename = 'C:\DOS\DEBUG.EXE')
2018-12-17T22:15:59.698515952Z 64 PC: 14550 | Write file or device (Write 5220 bytes on handle 5)
2018-12-17T22:15:59.706905219Z 87 PC: 13633 | Get or set file date and time
2018-12-17T22:15:59.708898363Z 62 PC: 144cd | Close file
2018-12-17T22:15:59.715678865Z 48 PC: 14657 | Get DOS version
2018-12-17T22:15:59.717754297Z 48 PC: 14657 | Get DOS version
2018-12-17T22:15:59.719131491Z 26 PC: 13663 | Set disk transfer address
2018-12-17T22:15:59.720167769Z 78 PC: 1366f | Find first file
2018-12-17T22:15:59.727253186Z 61 PC: 1447d | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:15:59.734171888Z 66 PC: 14619 | Move file pointer
2018-12-17T22:15:59.735797215Z 66 PC: 14627 | Move file pointer
2018-12-17T22:15:59.738282143Z 66 PC: 14635 | Move file pointer
2018-12-17T22:15:59.74006823Z 62 PC: 144cd | Close file
2018-12-17T22:15:59.74210144Z 61 PC: 1447d | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:15:59.749709717Z 66 PC: 14619 | Move file pointer
2018-12-17T22:15:59.751736864Z 66 PC: 14627 | Move file pointer
2018-12-17T22:15:59.753249986Z 66 PC: 14635 | Move file pointer
2018-12-17T22:15:59.755765153Z 66 PC: 145af | Move file pointer
2018-12-17T22:15:59.757593449Z 63 PC: 14550 | Read file or device (Read 5220 bytes on handle 5)
2018-12-17T22:15:59.76555107Z 62 PC: 144cd | Close file
2018-12-17T22:15:59.768470542Z 61 PC: 1447d | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:15:59.775254874Z 64 PC: 14550 | Write file or device (Write 5220 bytes on handle 5)
2018-12-17T22:15:59.783857764Z 62 PC: 144cd | Close file
2018-12-17T22:15:59.79219294Z 61 PC: 1447d | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:15:59.799020125Z 66 PC: 145af | Move file pointer
2018-12-17T22:15:59.800777993Z 64 PC: 144ae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:15:59.808975233Z 62 PC: 144cd | Close file
2018-12-17T22:15:59.816362509Z 53 PC: 136ca | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:15:59.825048257Z 37 PC: 136d3 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:15:59.838900859Z 53 PC: 136ca | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:15:59.84023343Z 37 PC: 136d3 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:15:59.841601506Z 53 PC: 136ca | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:15:59.842878457Z 37 PC: 136d3 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:15:59.843914322Z 53 PC: 136ca | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:15:59.845594507Z 37 PC: 136d3 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:15:59.846453617Z 53 PC: 136ca | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:15:59.847651839Z 37 PC: 136d3 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:15:59.84930225Z 53 PC: 136ca | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:15:59.850453759Z 37 PC: 136d3 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:15:59.851644209Z 53 PC: 136ca | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:15:59.853022137Z 37 PC: 136d3 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:15:59.853878379Z 53 PC: 136ca | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:15:59.855362825Z 37 PC: 136d3 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:15:59.856448939Z 53 PC: 136ca | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:15:59.857720427Z 37 PC: 136d3 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:15:59.85963466Z 53 PC: 136ca | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:15:59.860730885Z 37 PC: 136d3 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:15:59.86207583Z 53 PC: 136ca | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:15:59.863997319Z 37 PC: 136d3 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:15:59.865078636Z 53 PC: 136ca | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:15:59.866379576Z 37 PC: 136d3 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:15:59.868097263Z 53 PC: 136ca | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:15:59.869335174Z 37 PC: 136d3 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:15:59.870702042Z 53 PC: 136ca | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:15:59.871782313Z 37 PC: 136d3 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:15:59.872601254Z 53 PC: 136ca | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:15:59.874918019Z 37 PC: 136d3 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:15:59.875992985Z 53 PC: 136ca | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:15:59.876986962Z 37 PC: 136d3 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:15:59.878868414Z 53 PC: 136ca | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:15:59.879880685Z 37 PC: 136d3 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:15:59.880931081Z 53 PC: 136ca | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:15:59.882585182Z 37 PC: 136d3 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:15:59.883724701Z 53 PC: 136ca | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:15:59.884926604Z 37 PC: 136d3 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:15:59.885996862Z 48 PC: 14657 | Get DOS version
2018-12-17T22:15:59.887492159Z 41 PC: 13753 | Parse filename
2018-12-17T22:15:59.889526527Z 41 PC: 13761 | Parse filename
2018-12-17T22:15:59.89136163Z 75 PC: 1376c | Execute program
2018-12-17T22:15:59.906325795Z 76 PC: 22a75 | Terminate with return code (Return code = '0')
2018-12-17T22:15:59.911416514Z 53 PC: 136ca | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:15:59.912581336Z 37 PC: 136d3 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:15:59.913715301Z 53 PC: 136ca | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:15:59.915325875Z 37 PC: 136d3 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:15:59.916572093Z 53 PC: 136ca | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:15:59.917881212Z 37 PC: 136d3 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:15:59.92005059Z 53 PC: 136ca | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:15:59.921211907Z 37 PC: 136d3 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:15:59.922421476Z 53 PC: 136ca | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:15:59.923970204Z 37 PC: 136d3 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:15:59.925201791Z 53 PC: 136ca | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:15:59.92702189Z 37 PC: 136d3 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:15:59.928273337Z 53 PC: 136ca | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:15:59.929508589Z 37 PC: 136d3 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:15:59.931092551Z 53 PC: 136ca | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:15:59.932126616Z 37 PC: 136d3 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:15:59.933168589Z 53 PC: 136ca | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:15:59.934587416Z 37 PC: 136d3 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:15:59.935608135Z 53 PC: 136ca | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:15:59.936560226Z 37 PC: 136d3 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:15:59.9375849Z 53 PC: 136ca | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:15:59.938544798Z 37 PC: 136d3 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:15:59.94014248Z 53 PC: 136ca | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:15:59.941322253Z 37 PC: 136d3 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:15:59.942307426Z 53 PC: 136ca | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:15:59.947406482Z 37 PC: 136d3 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:15:59.948707538Z 53 PC: 136ca | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:15:59.950030253Z 37 PC: 136d3 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:15:59.952485627Z 53 PC: 136ca | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:15:59.953972731Z 37 PC: 136d3 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:15:59.955398214Z 53 PC: 136ca | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:15:59.958081064Z 37 PC: 136d3 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:15:59.959576342Z 53 PC: 136ca | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:15:59.960971126Z 37 PC: 136d3 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:15:59.963494079Z 53 PC: 136ca | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:15:59.964871421Z 37 PC: 136d3 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:15:59.966466938Z 53 PC: 136ca | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:15:59.96881382Z 37 PC: 136d3 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:15:59.970332882Z 61 PC: 1447d | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:15:59.979043491Z 64 PC: 14550 | Write file or device (Write 5220 bytes on handle 5)
2018-12-17T22:15:59.988118114Z 66 PC: 145af | Move file pointer
2018-12-17T22:15:59.989927675Z 64 PC: 14550 | Write file or device (Write 5220 bytes on handle 5)
2018-12-17T22:15:59.999424827Z 87 PC: 13633 | Get or set file date and time
2018-12-17T22:16:00.001483127Z 62 PC: 144cd | Close file
2018-12-17T22:16:00.01093298Z 64 PC: 13fc2 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:16:00.013261095Z 37 PC: 13a26 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:16:00.014751729Z 37 PC: 13a26 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:16:00.016149525Z 37 PC: 13a26 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:16:00.018182759Z 37 PC: 13a26 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:16:00.01935303Z 37 PC: 13a26 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:16:00.020671544Z 37 PC: 13a26 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:16:00.022261721Z 37 PC: 13a26 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:16:00.023301251Z 37 PC: 13a26 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:16:00.024881451Z 37 PC: 13a26 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:16:00.025911919Z 37 PC: 13a26 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:16:00.027199958Z 37 PC: 13a26 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:16:00.029587854Z 37 PC: 13a26 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:16:00.030856736Z 37 PC: 13a26 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:16:00.031974977Z 37 PC: 13a26 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:16:00.034357606Z 37 PC: 13a26 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:16:00.035865865Z 37 PC: 13a26 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:16:00.037195061Z 37 PC: 13a26 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:16:00.039918318Z 37 PC: 13a26 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:16:00.041095248Z 37 PC: 13a26 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:16:00.042293768Z 76 PC: 13a65 | Terminate with return code (Return code = '0')