Sample viewer

vx.netlux.org/Virus.DOS.HLLP.Eva.4967

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:18:47.95328751Z 53 PC: 135da | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:47.954943484Z 53 PC: 135da | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:47.956145653Z 53 PC: 135da | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:47.957316526Z 53 PC: 135da | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:47.958876943Z 53 PC: 135da | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:47.96005546Z 53 PC: 135da | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:47.961216541Z 53 PC: 135da | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:47.96276728Z 53 PC: 135da | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:47.96479753Z 53 PC: 135da | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:47.965823067Z 53 PC: 135da | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:47.970164675Z 53 PC: 135da | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:47.971380188Z 53 PC: 135da | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:47.97252958Z 53 PC: 135da | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:47.97402618Z 53 PC: 135da | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:47.975253019Z 53 PC: 135da | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:47.976424705Z 53 PC: 135da | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:47.977899273Z 53 PC: 135da | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:47.97912037Z 53 PC: 135da | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:47.980279906Z 53 PC: 135da | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:47.981457075Z 37 PC: 135ef | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:47.982690467Z 37 PC: 135f7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:47.983754192Z 37 PC: 135ff | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:47.984815859Z 37 PC: 13607 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:47.986645289Z 68 PC: 14134 | I/O control for devices (Set for = '')
2018-12-17T22:18:47.988145423Z 42 PC: 132c7 | Get date 0x132c7: xor ah, ah
0x132c9: les di, ptr [bp + 6]
0x132cc: stosw word ptr es:[di], ax
0x132cd: mov al, dl
0x132cf: les di, ptr [bp + 0xa]
0x132d2: stosw word ptr es:[di], ax
0x132d3: mov al, dh
0x132d5: les di, ptr [bp + 0xe]
0x132d8: stosw word ptr es:[di], ax
0x132d9: xchg ax, cx
0x132da: les di, ptr [bp + 0x12]
0x132dd: stosw word ptr es:[di], ax
0x132de: pop bp
0x132df: retf 0x10
0x132e2: push bp
0x132e3: mov bp, sp
0x132e5: mov cx, word ptr [bp + 0xa]
0x132e8: mov dh, byte ptr [bp + 8]
0x132eb: mov dl, byte ptr [bp + 6]
0x132ee: mov ah, 0x2b
2018-12-17T22:18:47.990700832Z 60 PC: 13a9d | Create or truncate file
2018-12-17T22:18:48.009531879Z 62 PC: 13aed | Close file
2018-12-17T22:18:48.011502535Z 65 PC: 13be6 | Delete file (Filename = '\�')
2018-12-17T22:18:48.023135824Z 48 PC: 13c5f | Get DOS version
2018-12-17T22:18:48.025243602Z 67 PC: 13341 | Get or set file attributes
2018-12-17T22:18:48.03177133Z 67 PC: 13368 | Get or set file attributes
2018-12-17T22:18:48.042667358Z 61 PC: 13a9d | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:18:48.047634546Z 87 PC: 13382 | Get or set file date and time
2018-12-17T22:18:48.048938008Z 63 PC: 13b70 | Read file or device (Read 4967 bytes on handle 5)
2018-12-17T22:18:48.054186421Z 66 PC: 14233 | Move file pointer
2018-12-17T22:18:48.055948623Z 66 PC: 14241 | Move file pointer
2018-12-17T22:18:48.0571161Z 66 PC: 1424f | Move file pointer
2018-12-17T22:18:48.058282498Z 66 PC: 13bcf | Move file pointer
2018-12-17T22:18:48.059587147Z 63 PC: 13b70 | Read file or device (Read 4967 bytes on handle 5)
2018-12-17T22:18:48.064941416Z 66 PC: 14233 | Move file pointer
2018-12-17T22:18:48.066435742Z 66 PC: 14241 | Move file pointer
2018-12-17T22:18:48.067916931Z 66 PC: 1424f | Move file pointer
2018-12-17T22:18:48.06955959Z 66 PC: 13bcf | Move file pointer
2018-12-17T22:18:48.071015114Z 64 PC: 13ace | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:18:48.079645475Z 66 PC: 13bcf | Move file pointer
2018-12-17T22:18:48.081424409Z 64 PC: 13b70 | Write file or device (Write 4967 bytes on handle 5)
2018-12-17T22:18:48.090154875Z 87 PC: 133af | Get or set file date and time
2018-12-17T22:18:48.091858139Z 62 PC: 13aed | Close file
2018-12-17T22:18:48.100435118Z 67 PC: 13368 | Get or set file attributes
2018-12-17T22:18:48.111916538Z 25 PC: 13cec | Get default drive
2018-12-17T22:18:48.113078464Z 71 PC: 13cff | Get current directory
2018-12-17T22:18:48.117783182Z 26 PC: 133df | Set disk transfer address
2018-12-17T22:18:48.118953535Z 78 PC: 133eb | Find first file
2018-12-17T22:18:48.140560905Z 67 PC: 13341 | Get or set file attributes
2018-12-17T22:18:48.147808313Z 67 PC: 13368 | Get or set file attributes
2018-12-17T22:18:48.486735113Z 61 PC: 13a9d | Open file (Filename = 'C:\DOS\EDIT.COM')
2018-12-17T22:18:48.495368243Z 87 PC: 13382 | Get or set file date and time
2018-12-17T22:18:48.497473841Z 66 PC: 14233 | Move file pointer
2018-12-17T22:18:48.498994838Z 66 PC: 14241 | Move file pointer
2018-12-17T22:18:48.500457633Z 66 PC: 1424f | Move file pointer
2018-12-17T22:18:48.502455663Z 66 PC: 14233 | Move file pointer
2018-12-17T22:18:48.504005884Z 66 PC: 14241 | Move file pointer
2018-12-17T22:18:48.505455204Z 66 PC: 1424f | Move file pointer
2018-12-17T22:18:48.507838046Z 48 PC: 13c5f | Get DOS version
2018-12-17T22:18:48.509605005Z 66 PC: 13bcf | Move file pointer
2018-12-17T22:18:48.511152486Z 63 PC: 13b70 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:18:48.518669596Z 66 PC: 13bcf | Move file pointer
2018-12-17T22:18:48.520188668Z 63 PC: 13b70 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:18:48.523140549Z 66 PC: 13bcf | Move file pointer
2018-12-17T22:18:48.524794234Z 63 PC: 13b70 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:18:48.528061436Z 87 PC: 133af | Get or set file date and time
2018-12-17T22:18:48.529621237Z 62 PC: 13aed | Close file
2018-12-17T22:18:48.535984323Z 67 PC: 13368 | Get or set file attributes
2018-12-17T22:18:48.54643111Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:48.547536139Z 79 PC: 13408 | Find next file
2018-12-17T22:18:48.551490573Z 67 PC: 13341 | Get or set file attributes
2018-12-17T22:18:48.558648892Z 67 PC: 13368 | Get or set file attributes
2018-12-17T22:18:48.570186272Z 61 PC: 13a9d | Open file (Filename = 'C:\DOS\FORMAT.COM')
2018-12-17T22:18:48.577775077Z 87 PC: 13382 | Get or set file date and time
2018-12-17T22:18:48.579804818Z 66 PC: 14233 | Move file pointer
2018-12-17T22:18:48.58119201Z 66 PC: 14241 | Move file pointer
2018-12-17T22:18:48.582586162Z 66 PC: 1424f | Move file pointer
2018-12-17T22:18:48.584571064Z 66 PC: 14233 | Move file pointer
2018-12-17T22:18:48.586173578Z 66 PC: 14241 | Move file pointer
2018-12-17T22:18:48.587533791Z 66 PC: 1424f | Move file pointer
2018-12-17T22:18:48.589486653Z 48 PC: 13c5f | Get DOS version
2018-12-17T22:18:48.591112262Z 66 PC: 13bcf | Move file pointer
2018-12-17T22:18:48.592585616Z 63 PC: 13b70 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:18:48.599366201Z 66 PC: 13bcf | Move file pointer
2018-12-17T22:18:48.601005603Z 63 PC: 13b70 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:18:48.604118747Z 66 PC: 13bcf | Move file pointer
2018-12-17T22:18:48.606083421Z 63 PC: 13b70 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:18:48.609012288Z 87 PC: 133af | Get or set file date and time
2018-12-17T22:18:48.610618878Z 62 PC: 13aed | Close file
2018-12-17T22:18:48.617452869Z 67 PC: 13368 | Get or set file attributes
2018-12-17T22:18:48.629315466Z 67 PC: 13341 | Get or set file attributes
2018-12-17T22:18:48.635897531Z 67 PC: 13368 | Get or set file attributes
2018-12-17T22:18:48.64654145Z 61 PC: 13a9d | Open file (Filename = 'C:\DOS\FORMAT.COM')
2018-12-17T22:18:48.654053507Z 87 PC: 13382 | Get or set file date and time
2018-12-17T22:18:48.655430789Z 63 PC: 13b70 | Read file or device (Read 4967 bytes on handle 5)
2018-12-17T22:18:48.663599351Z 66 PC: 14233 | Move file pointer
2018-12-17T22:18:48.664970863Z 66 PC: 14241 | Move file pointer
2018-12-17T22:18:48.66622389Z 66 PC: 1424f | Move file pointer
2018-12-17T22:18:48.66785952Z 66 PC: 13bcf | Move file pointer
2018-12-17T22:18:48.669596634Z 64 PC: 13b70 | Write file or device (Write 4967 bytes on handle 5)
2018-12-17T22:18:48.681060185Z 66 PC: 13bcf | Move file pointer
2018-12-17T22:18:48.683008866Z 64 PC: 13b70 | Write file or device (Write 4967 bytes on handle 5)
2018-12-17T22:18:48.691608832Z 87 PC: 133af | Get or set file date and time
2018-12-17T22:18:48.693150192Z 62 PC: 13aed | Close file
2018-12-17T22:18:48.700913738Z 67 PC: 13368 | Get or set file attributes
2018-12-17T22:18:48.711534439Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:48.712622901Z 79 PC: 13408 | Find next file
2018-12-17T22:18:48.716746048Z 67 PC: 13341 | Get or set file attributes
2018-12-17T22:18:48.723428088Z 67 PC: 13368 | Get or set file attributes
2018-12-17T22:18:48.733893262Z 61 PC: 13a9d | Open file (Filename = 'C:\DOS\KEYB.COM')
2018-12-17T22:18:48.741878174Z 87 PC: 13382 | Get or set file date and time
2018-12-17T22:18:48.743379793Z 66 PC: 14233 | Move file pointer
2018-12-17T22:18:48.744756156Z 66 PC: 14241 | Move file pointer
2018-12-17T22:18:48.746628193Z 66 PC: 1424f | Move file pointer
2018-12-17T22:18:48.748127852Z 66 PC: 14233 | Move file pointer
2018-12-17T22:18:48.749510815Z 66 PC: 14241 | Move file pointer
2018-12-17T22:18:48.752346175Z 66 PC: 1424f | Move file pointer
2018-12-17T22:18:48.754023405Z 48 PC: 13c5f | Get DOS version
2018-12-17T22:18:48.755591842Z 66 PC: 13bcf | Move file pointer
2018-12-17T22:18:48.757521985Z 63 PC: 13b70 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:18:48.763986654Z 66 PC: 13bcf | Move file pointer
2018-12-17T22:18:48.765436894Z 63 PC: 13b70 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:18:48.768793691Z 66 PC: 13bcf | Move file pointer
2018-12-17T22:18:48.770298901Z 63 PC: 13b70 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:18:48.773202885Z 87 PC: 133af | Get or set file date and time
2018-12-17T22:18:48.7753298Z 62 PC: 13aed | Close file
2018-12-17T22:18:48.781697584Z 67 PC: 13368 | Get or set file attributes
2018-12-17T22:18:48.7925949Z 67 PC: 13341 | Get or set file attributes
2018-12-17T22:18:48.799531474Z 67 PC: 13368 | Get or set file attributes
2018-12-17T22:18:48.810296572Z 61 PC: 13a9d | Open file (Filename = 'C:\DOS\KEYB.COM')
2018-12-17T22:18:48.818735831Z 87 PC: 13382 | Get or set file date and time
2018-12-17T22:18:48.820897297Z 63 PC: 13b70 | Read file or device (Read 4967 bytes on handle 5)
2018-12-17T22:18:48.828478864Z 66 PC: 14233 | Move file pointer
2018-12-17T22:18:48.829875975Z 66 PC: 14241 | Move file pointer
2018-12-17T22:18:48.832025599Z 66 PC: 1424f | Move file pointer
2018-12-17T22:18:48.833427737Z 66 PC: 13bcf | Move file pointer
2018-12-17T22:18:48.834976017Z 64 PC: 13b70 | Write file or device (Write 4967 bytes on handle 5)
2018-12-17T22:18:48.84861496Z 66 PC: 13bcf | Move file pointer
2018-12-17T22:18:48.85021764Z 64 PC: 13b70 | Write file or device (Write 4967 bytes on handle 5)
2018-12-17T22:18:48.858366045Z 87 PC: 133af | Get or set file date and time
2018-12-17T22:18:48.860544597Z 62 PC: 13aed | Close file
2018-12-17T22:18:48.868701975Z 67 PC: 13368 | Get or set file attributes
2018-12-17T22:18:48.87998951Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:48.881499985Z 79 PC: 13408 | Find next file
2018-12-17T22:18:48.888249303Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:48.889300182Z 79 PC: 13408 | Find next file
2018-12-17T22:18:48.896322079Z 26 PC: 133df | Set disk transfer address
2018-12-17T22:18:48.897384865Z 78 PC: 133eb | Find first file
2018-12-17T22:18:48.904861029Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:48.906159967Z 79 PC: 13408 | Find next file
2018-12-17T22:18:48.909515297Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:48.91060957Z 79 PC: 13408 | Find next file
2018-12-17T22:18:48.914179106Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:48.915270988Z 79 PC: 13408 | Find next file
2018-12-17T22:18:48.918594416Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:48.920012557Z 79 PC: 13408 | Find next file
2018-12-17T22:18:48.923468874Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:48.924591871Z 79 PC: 13408 | Find next file
2018-12-17T22:18:48.928425584Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:48.929461198Z 79 PC: 13408 | Find next file
2018-12-17T22:18:48.932800883Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:48.9344872Z 79 PC: 13408 | Find next file
2018-12-17T22:18:48.937913046Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:48.93896595Z 79 PC: 13408 | Find next file
2018-12-17T22:18:48.942954891Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:48.944025857Z 79 PC: 13408 | Find next file
2018-12-17T22:18:48.948140699Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:48.949239582Z 79 PC: 13408 | Find next file
2018-12-17T22:18:48.952538512Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:48.95358341Z 79 PC: 13408 | Find next file
2018-12-17T22:18:48.956917961Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:48.957760542Z 79 PC: 13408 | Find next file
2018-12-17T22:18:48.959900944Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:48.961383255Z 79 PC: 13408 | Find next file
2018-12-17T22:18:48.964653988Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:48.965773537Z 79 PC: 13408 | Find next file
2018-12-17T22:18:48.969699492Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:48.970757186Z 79 PC: 13408 | Find next file
2018-12-17T22:18:48.97413122Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:48.975424444Z 79 PC: 13408 | Find next file
2018-12-17T22:18:48.978640219Z 26 PC: 133df | Set disk transfer address
2018-12-17T22:18:48.979580251Z 78 PC: 133eb | Find first file
2018-12-17T22:18:48.986578602Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:48.98762462Z 79 PC: 13408 | Find next file
2018-12-17T22:18:48.991152765Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:48.992132384Z 79 PC: 13408 | Find next file
2018-12-17T22:18:48.994250407Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:48.995248098Z 79 PC: 13408 | Find next file
2018-12-17T22:18:48.998914689Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:48.999973115Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.003848289Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.0049596Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.008139893Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.00939943Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.012770883Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.01379514Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.018352359Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.019435693Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.02263658Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.024094141Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.027473779Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.02854972Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.032122592Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.032975901Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.036144079Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.037522211Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.040826428Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.041906874Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.045539519Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.046568644Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.049834761Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.050922217Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.054221707Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.055557514Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.058918653Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.059745323Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.063266793Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.064353451Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.067670058Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.069111944Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.072447297Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.073353984Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.076883768Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.077958908Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.081147892Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.082524449Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.085356378Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.086201846Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.088656053Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.089505806Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.091637125Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.092957551Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.096314116Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.097225603Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.09947518Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.100330673Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.103728465Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.105043768Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.107637715Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.108811598Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.110998596Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.11185111Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.114438579Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.11554454Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.118737188Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.120220127Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.122410884Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.123218965Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.125650284Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.126514881Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.128592046Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.129744011Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.131830469Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.132637423Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.13523926Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.136327165Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.140109347Z 26 PC: 133df | Set disk transfer address
2018-12-17T22:18:49.141285815Z 78 PC: 133eb | Find first file
2018-12-17T22:18:49.147852482Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.149241105Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.152090351Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.153103972Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.156232688Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.158088577Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.160881211Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.162332134Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.164192007Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.165007555Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.167171127Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.168049721Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.169799824Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.170951056Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.178371359Z 26 PC: 133df | Set disk transfer address
2018-12-17T22:18:49.179251854Z 78 PC: 133eb | Find first file
2018-12-17T22:18:49.186062585Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.187146603Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.190097355Z 26 PC: 133df | Set disk transfer address
2018-12-17T22:18:49.191204919Z 78 PC: 133eb | Find first file
2018-12-17T22:18:49.197835076Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.198949761Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.201760958Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.202698933Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.205938653Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.207060866Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.209729419Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.211442632Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.214340074Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.215417341Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.218633386Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.219695207Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.222617605Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.224151304Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.227944206Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.228967236Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.23210758Z 26 PC: 13403 | Set disk transfer address
2018-12-17T22:18:49.233205345Z 79 PC: 13408 | Find next file
2018-12-17T22:18:49.236236861Z 53 PC: 1354e | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:49.237506718Z 37 PC: 13557 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:49.238469809Z 53 PC: 1354e | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:49.239899182Z 37 PC: 13557 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:49.241076412Z 53 PC: 1354e | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:49.242087136Z 37 PC: 13557 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:49.24347574Z 53 PC: 1354e | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:49.244678701Z 37 PC: 13557 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:49.245809345Z 53 PC: 1354e | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:49.248033566Z 37 PC: 13557 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:49.24913025Z 53 PC: 1354e | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:49.250300339Z 37 PC: 13557 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:49.251444362Z 53 PC: 1354e | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:49.252554986Z 37 PC: 13557 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:49.253764057Z 53 PC: 1354e | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:49.255037075Z 37 PC: 13557 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:49.256142726Z 53 PC: 1354e | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:49.257663575Z 37 PC: 13557 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:49.258785313Z 53 PC: 1354e | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:49.259924655Z 37 PC: 13557 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:49.261336724Z 53 PC: 1354e | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:49.262556914Z 37 PC: 13557 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:49.263721381Z 53 PC: 1354e | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:49.265139403Z 37 PC: 13557 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:49.266295279Z 53 PC: 1354e | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:49.267603907Z 37 PC: 13557 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:49.268716103Z 53 PC: 1354e | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:49.269699071Z 37 PC: 13557 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:49.271059767Z 53 PC: 1354e | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:49.272212851Z 37 PC: 13557 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:49.273315838Z 53 PC: 1354e | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:49.274850093Z 37 PC: 13557 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:49.275927206Z 53 PC: 1354e | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:49.276908967Z 37 PC: 13557 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:49.278124299Z 53 PC: 1354e | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:49.279285392Z 37 PC: 13557 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:49.280552606Z 53 PC: 1354e | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:49.281681182Z 37 PC: 13557 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:49.282664296Z 48 PC: 13c5f | Get DOS version
2018-12-17T22:18:49.284334532Z 41 PC: 13505 | Parse filename
2018-12-17T22:18:49.285931784Z 41 PC: 13513 | Parse filename
2018-12-17T22:18:49.287321021Z 75 PC: 1351e | Execute program
2018-12-17T22:18:49.301147741Z 53 PC: 1354e | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:49.302879217Z 37 PC: 13557 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:49.304458107Z 53 PC: 1354e | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:49.306415431Z 37 PC: 13557 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:49.307994039Z 53 PC: 1354e | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:49.309795426Z 37 PC: 13557 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:49.312624979Z 53 PC: 1354e | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:49.314305552Z 37 PC: 13557 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:49.316292575Z 53 PC: 1354e | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:49.31795034Z 37 PC: 13557 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:49.319486326Z 53 PC: 1354e | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:49.32164324Z 37 PC: 13557 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:49.32282798Z 53 PC: 1354e | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:49.323981175Z 37 PC: 13557 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:49.325347607Z 53 PC: 1354e | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:49.326528132Z 37 PC: 13557 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:49.327779002Z 53 PC: 1354e | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:49.329071656Z 37 PC: 13557 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:49.330173914Z 53 PC: 1354e | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:49.331591229Z 37 PC: 13557 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:49.332722513Z 53 PC: 1354e | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:49.333864675Z 37 PC: 13557 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:49.335769386Z 53 PC: 1354e | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:49.33740798Z 37 PC: 13557 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:49.33899295Z 53 PC: 1354e | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:49.340794872Z 37 PC: 13557 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:49.34193063Z 53 PC: 1354e | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:49.343357653Z 37 PC: 13557 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:49.344785989Z 53 PC: 1354e | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:49.34620937Z 37 PC: 13557 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:49.347577977Z 53 PC: 1354e | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:49.348970928Z 37 PC: 13557 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:49.350380709Z 53 PC: 1354e | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:49.352029107Z 37 PC: 13557 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:49.353125453Z 53 PC: 1354e | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:49.354115524Z 37 PC: 13557 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:49.355506627Z 53 PC: 1354e | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:49.356682552Z 37 PC: 13557 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:49.358048263Z 48 PC: 13c5f | Get DOS version
2018-12-17T22:18:49.36020017Z 67 PC: 13341 | Get or set file attributes
2018-12-17T22:18:49.366357389Z 67 PC: 13368 | Get or set file attributes
2018-12-17T22:18:49.377345176Z 61 PC: 13a9d | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:18:49.384528069Z 87 PC: 13382 | Get or set file date and time
2018-12-17T22:18:49.386016626Z 63 PC: 13b70 | Read file or device (Read 4967 bytes on handle 5)
2018-12-17T22:18:49.395228682Z 66 PC: 14233 | Move file pointer
2018-12-17T22:18:49.396666452Z 66 PC: 14241 | Move file pointer
2018-12-17T22:18:49.398074183Z 66 PC: 1424f | Move file pointer
2018-12-17T22:18:49.399700313Z 66 PC: 13bcf | Move file pointer
2018-12-17T22:18:49.401460613Z 64 PC: 13b70 | Write file or device (Write 4967 bytes on handle 5)
2018-12-17T22:18:49.411371241Z 66 PC: 13bcf | Move file pointer
2018-12-17T22:18:49.412982362Z 64 PC: 13b70 | Write file or device (Write 4967 bytes on handle 5)
2018-12-17T22:18:49.42151353Z 87 PC: 133af | Get or set file date and time
2018-12-17T22:18:49.423272112Z 62 PC: 13aed | Close file
2018-12-17T22:18:49.428709674Z 67 PC: 13368 | Get or set file attributes
2018-12-17T22:18:49.435114083Z 64 PC: 139f8 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:18:49.436845756Z 37 PC: 13731 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:18:49.438055567Z 37 PC: 13731 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:18:49.439190307Z 37 PC: 13731 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:18:49.440627522Z 37 PC: 13731 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:18:49.441560976Z 37 PC: 13731 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:18:49.442931109Z 37 PC: 13731 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:18:49.445079443Z 37 PC: 13731 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:18:49.446258978Z 37 PC: 13731 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:18:49.448077487Z 37 PC: 13731 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:18:49.449355716Z 37 PC: 13731 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:18:49.450476284Z 37 PC: 13731 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:18:49.452008729Z 37 PC: 13731 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:18:49.453184068Z 37 PC: 13731 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:18:49.454291337Z 37 PC: 13731 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:18:49.456094236Z 37 PC: 13731 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:18:49.45721454Z 37 PC: 13731 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:18:49.458369782Z 37 PC: 13731 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:18:49.460015624Z 37 PC: 13731 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:18:49.461285921Z 37 PC: 13731 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:18:49.462417327Z 76 PC: 13770 | Terminate with return code (Return code = '0')