Sample viewer

vx.netlux.org/Virus.DOS.DSU.1422

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:19:21.743293929Z 42 PC: 142a4 | Get date 0x142a4: cmp dx, 0xc1f
0x142a8: jne 0x142d5
0x142aa: mov ax, 0x500
0x142ad: int 0x10
0x142af: xor bh, bh
0x142b1: mov ax, 0x600
0x142b4: int 0x10
0x142b6: mov ax, 1
0x142b9: int 0x10
0x142bb: mov ax, 0x200
0x142be: mov dx, 0xc07
0x142c1: xor bx, bx
0x142c3: int 0x10
0x142c5: mov dx, 0x572
0x142c8: mov ah, 9
0x142ca: int 0x21
0x142cc: xor ah, ah
0x142ce: int 0x16
0x142d0: ljmp 0xffff:0
0x142d5: mov ah, 0xef
2018-12-17T22:19:21.747427337Z 239 PC: 142d9 | UNKNOWN!
2018-12-17T22:19:21.748687008Z 53 PC: 142e7 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:19:21.750488508Z 9 PC: 13dc6 | Display string (String= 'CDEFG-This is a 5000 byte COM test, 1994 ')
2018-12-17T22:19:21.75784992Z 77 PC: 11fe0 | Get program return code
2018-12-17T22:19:21.759651884Z 72 PC: 12174 | Allocate memory
2018-12-17T22:19:21.76176543Z 72 PC: 1218d | Allocate memory
2018-12-17T22:19:21.765142402Z 37 PC: 123c4 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T22:19:21.76723192Z 37 PC: 123cb | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:19:21.768486721Z 37 PC: 123d2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:21.769738919Z 53 PC: 9f425 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:21.772416481Z 37 PC: 9f435 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:21.774375874Z 51 PC: 9f43a | Get or set Ctrl-Break
2018-12-17T22:19:21.776093211Z 51 PC: 9f442 | Get or set Ctrl-Break
2018-12-17T22:19:21.781740419Z 87 PC: 9f031 | Get or set file date and time
2018-12-17T22:19:21.783956878Z 37 PC: 9f45a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:21.786451199Z 51 PC: 9f463 | Get or set Ctrl-Break
2018-12-17T22:19:21.7926184Z 62 PC: 122ab | Close file
2018-12-17T22:19:21.795788645Z 53 PC: 9f425 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:21.798090119Z 37 PC: 9f435 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:21.801447002Z 51 PC: 9f43a | Get or set Ctrl-Break
2018-12-17T22:19:21.802263609Z 51 PC: 9f442 | Get or set Ctrl-Break
2018-12-17T22:19:21.803053508Z 87 PC: 9f031 | Get or set file date and time
2018-12-17T22:19:21.805989587Z 37 PC: 9f45a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:21.808082658Z 51 PC: 9f463 | Get or set Ctrl-Break
2018-12-17T22:19:21.809209634Z 62 PC: 122ab | Close file
2018-12-17T22:19:21.812243436Z 53 PC: 9f425 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:21.814564663Z 37 PC: 9f435 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:21.816760096Z 51 PC: 9f43a | Get or set Ctrl-Break
2018-12-17T22:19:21.81836764Z 51 PC: 9f442 | Get or set Ctrl-Break
2018-12-17T22:19:21.819780519Z 87 PC: 9f031 | Get or set file date and time
2018-12-17T22:19:21.822391396Z 37 PC: 9f45a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:21.824973751Z 51 PC: 9f463 | Get or set Ctrl-Break
2018-12-17T22:19:21.826615425Z 62 PC: 122ab | Close file
2018-12-17T22:19:21.829306217Z 53 PC: 9f425 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:21.83775963Z 37 PC: 9f435 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:21.840530816Z 51 PC: 9f43a | Get or set Ctrl-Break
2018-12-17T22:19:21.841961617Z 51 PC: 9f442 | Get or set Ctrl-Break
2018-12-17T22:19:21.843564193Z 87 PC: 9f031 | Get or set file date and time
2018-12-17T22:19:21.846872698Z 37 PC: 9f45a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:21.849608384Z 51 PC: 9f463 | Get or set Ctrl-Break
2018-12-17T22:19:21.85132716Z 62 PC: 122ab | Close file
2018-12-17T22:19:21.854697503Z 53 PC: 9f425 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:21.856799534Z 37 PC: 9f435 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:21.858848473Z 51 PC: 9f43a | Get or set Ctrl-Break
2018-12-17T22:19:21.860477171Z 51 PC: 9f442 | Get or set Ctrl-Break
2018-12-17T22:19:21.861492206Z 87 PC: 9f031 | Get or set file date and time
2018-12-17T22:19:21.864396239Z 37 PC: 9f45a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:21.867692491Z 51 PC: 9f463 | Get or set Ctrl-Break
2018-12-17T22:19:21.868856585Z 62 PC: 122ab | Close file
2018-12-17T22:19:21.871651262Z 53 PC: 9f425 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:21.875078807Z 37 PC: 9f435 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:21.877459581Z 51 PC: 9f43a | Get or set Ctrl-Break
2018-12-17T22:19:21.878687192Z 51 PC: 9f442 | Get or set Ctrl-Break
2018-12-17T22:19:21.880147953Z 87 PC: 9f031 | Get or set file date and time
2018-12-17T22:19:21.882602621Z 37 PC: 9f45a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:21.88454857Z 51 PC: 9f463 | Get or set Ctrl-Break
2018-12-17T22:19:21.885865389Z 62 PC: 122ab | Close file
2018-12-17T22:19:21.888337252Z 53 PC: 9f425 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:21.890461541Z 37 PC: 9f435 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:21.893216772Z 51 PC: 9f43a | Get or set Ctrl-Break
2018-12-17T22:19:21.894090523Z 51 PC: 9f442 | Get or set Ctrl-Break
2018-12-17T22:19:21.894841843Z 87 PC: 9f031 | Get or set file date and time
2018-12-17T22:19:21.897982501Z 37 PC: 9f45a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:21.900549882Z 51 PC: 9f463 | Get or set Ctrl-Break
2018-12-17T22:19:21.901941514Z 62 PC: 122ab | Close file
2018-12-17T22:19:21.905181616Z 53 PC: 9f425 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:21.907306759Z 37 PC: 9f435 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:21.909372004Z 51 PC: 9f43a | Get or set Ctrl-Break
2018-12-17T22:19:21.911352833Z 51 PC: 9f442 | Get or set Ctrl-Break
2018-12-17T22:19:21.912708909Z 87 PC: 9f031 | Get or set file date and time
2018-12-17T22:19:21.91572083Z 37 PC: 9f45a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:21.919198609Z 51 PC: 9f463 | Get or set Ctrl-Break
2018-12-17T22:19:21.921403048Z 62 PC: 122ab | Close file
2018-12-17T22:19:21.924331907Z 53 PC: 9f425 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:21.927924823Z 37 PC: 9f435 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:21.93072052Z 51 PC: 9f43a | Get or set Ctrl-Break
2018-12-17T22:19:21.931597982Z 51 PC: 9f442 | Get or set Ctrl-Break
2018-12-17T22:19:21.933253553Z 87 PC: 9f031 | Get or set file date and time
2018-12-17T22:19:21.935755405Z 37 PC: 9f45a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:21.937768871Z 51 PC: 9f463 | Get or set Ctrl-Break
2018-12-17T22:19:21.939504762Z 62 PC: 122ab | Close file
2018-12-17T22:19:21.942413819Z 53 PC: 9f425 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:21.944902649Z 37 PC: 9f435 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:21.948747168Z 51 PC: 9f43a | Get or set Ctrl-Break
2018-12-17T22:19:21.950085126Z 51 PC: 9f442 | Get or set Ctrl-Break
2018-12-17T22:19:21.95132423Z 87 PC: 9f031 | Get or set file date and time
2018-12-17T22:19:21.954166391Z 37 PC: 9f45a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:21.957553998Z 51 PC: 9f463 | Get or set Ctrl-Break
2018-12-17T22:19:21.958882957Z 62 PC: 122ab | Close file
2018-12-17T22:19:21.96178643Z 53 PC: 9f425 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:21.965082197Z 37 PC: 9f435 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:21.967460103Z 51 PC: 9f43a | Get or set Ctrl-Break
2018-12-17T22:19:21.968654792Z 51 PC: 9f442 | Get or set Ctrl-Break
2018-12-17T22:19:21.970553153Z 87 PC: 9f031 | Get or set file date and time
2018-12-17T22:19:21.973389825Z 37 PC: 9f45a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:21.975450233Z 51 PC: 9f463 | Get or set Ctrl-Break
2018-12-17T22:19:21.977031704Z 62 PC: 122ab | Close file
2018-12-17T22:19:21.979391227Z 53 PC: 9f425 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:21.9814257Z 37 PC: 9f435 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:21.984148306Z 51 PC: 9f43a | Get or set Ctrl-Break
2018-12-17T22:19:21.985036132Z 51 PC: 9f442 | Get or set Ctrl-Break
2018-12-17T22:19:21.985855131Z 87 PC: 9f031 | Get or set file date and time
2018-12-17T22:19:21.989240272Z 37 PC: 9f45a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:21.991202038Z 51 PC: 9f463 | Get or set Ctrl-Break
2018-12-17T22:19:21.992023782Z 62 PC: 122ab | Close file
2018-12-17T22:19:21.995509911Z 53 PC: 9f425 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:21.997578047Z 37 PC: 9f435 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:21.999561241Z 51 PC: 9f43a | Get or set Ctrl-Break
2018-12-17T22:19:22.001265526Z 51 PC: 9f442 | Get or set Ctrl-Break
2018-12-17T22:19:22.002075303Z 87 PC: 9f031 | Get or set file date and time
2018-12-17T22:19:22.005016752Z 37 PC: 9f45a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:22.007913142Z 51 PC: 9f463 | Get or set Ctrl-Break
2018-12-17T22:19:22.009372009Z 62 PC: 122ab | Close file
2018-12-17T22:19:22.012310343Z 53 PC: 9f425 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:22.015705901Z 37 PC: 9f435 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:22.018050501Z 51 PC: 9f43a | Get or set Ctrl-Break
2018-12-17T22:19:22.019169291Z 51 PC: 9f442 | Get or set Ctrl-Break
2018-12-17T22:19:22.021302824Z 87 PC: 9f031 | Get or set file date and time
2018-12-17T22:19:22.024341065Z 37 PC: 9f45a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:22.026296251Z 51 PC: 9f463 | Get or set Ctrl-Break
2018-12-17T22:19:22.028034522Z 62 PC: 122ab | Close file
2018-12-17T22:19:22.03045798Z 53 PC: 9f425 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:22.032422241Z 37 PC: 9f435 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:22.034576736Z 51 PC: 9f43a | Get or set Ctrl-Break
2018-12-17T22:19:22.036134295Z 51 PC: 9f442 | Get or set Ctrl-Break
2018-12-17T22:19:22.037331338Z 87 PC: 9f031 | Get or set file date and time
2018-12-17T22:19:22.04107969Z 37 PC: 9f45a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:22.058344127Z 51 PC: 9f463 | Get or set Ctrl-Break
2018-12-17T22:19:22.059647895Z 62 PC: 122ab | Close file
2018-12-17T22:19:22.06415558Z 99 PC: 999d7 | Get DBCS lead byte table pointer
2018-12-17T22:19:22.067970425Z 56 PC: 941f9 | Get or set country info
2018-12-17T22:19:22.071185769Z 64 PC: 99c48 | Write file or device (Write 2 bytes on handle 1)
2018-12-17T22:19:22.081345075Z 25 PC: 94262 | Get default drive
2018-12-17T22:19:22.08509076Z 71 PC: 964dd | Get current directory
2018-12-17T22:19:22.089630175Z 64 PC: 99c48 | Write file or device (Write 3 bytes on handle 1)
2018-12-17T22:19:22.094628041Z 2 PC: 964b2 | Character output (Char = '3e')
2018-12-17T22:19:22.09829938Z 93 PC: 94320 | File sharing functions
2018-12-17T22:19:22.10214606Z 93 PC: 94327 | File sharing functions
2018-12-17T22:19:22.105172548Z 10 PC: 94339 | Buffered keyboard input
2018-12-17T22:19:36.680946616Z 0 PC: 0 | Program terminate
2018-12-17T22:19:38.042808724Z 0 PC: 0 | Program terminate
2018-12-17T22:19:38.146451052Z 64 PC: 99c48 | Write file or device (Write 2 bytes on handle 1)
2018-12-17T22:19:38.153444306Z 41 PC: 943ae | Parse filename
2018-12-17T22:19:38.156580966Z 41 PC: 9442f | Parse filename
2018-12-17T22:19:38.161603433Z 41 PC: 9444c | Parse filename
2018-12-17T22:19:38.16524831Z 26 PC: 978f7 | Set disk transfer address
2018-12-17T22:19:38.168894268Z 71 PC: 97af3 | Get current directory
2018-12-17T22:19:38.191549825Z 78 PC: 9f075 | Find first file
2018-12-17T22:19:38.202401799Z 47 PC: 9f088 | Get disk transfer address
2018-12-17T22:19:38.204892748Z 71 PC: 9796c | Get current directory
2018-12-17T22:19:38.20932676Z 73 PC: 97009 | Release memory
2018-12-17T22:19:38.217971347Z 53 PC: 9f425 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.220405106Z 37 PC: 9f435 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.23435274Z 51 PC: 9f43a | Get or set Ctrl-Break
2018-12-17T22:19:38.235946458Z 51 PC: 9f442 | Get or set Ctrl-Break
2018-12-17T22:19:38.23717098Z 67 PC: 9f20b | Get or set file attributes
2018-12-17T22:19:38.244056199Z 67 PC: 9f219 | Get or set file attributes
2018-12-17T22:19:38.262885622Z 61 PC: 9f220 | Open file (Filename = 'A:\PRINT.COM')
2018-12-17T22:19:38.287604257Z 87 PC: 9f22c | Get or set file date and time
2018-12-17T22:19:38.292109629Z 63 PC: 9f295 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:19:38.300315572Z 66 PC: 9f418 | Move file pointer
2018-12-17T22:19:38.303408958Z 62 PC: 9f248 | Close file
2018-12-17T22:19:38.306673686Z 67 PC: 9f253 | Get or set file attributes
2018-12-17T22:19:38.322182623Z 37 PC: 9f45a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.324927969Z 51 PC: 9f463 | Get or set Ctrl-Break
2018-12-17T22:19:38.326267946Z 75 PC: 11821 | Execute program
2018-12-17T22:19:38.347933946Z 9 PC: 12a47 | Display string (String= 'Hello, World! ')
2018-12-17T22:19:38.357094296Z 76 PC: 12a4b | Terminate with return code (Return code = '36')
2018-12-17T22:19:38.36151648Z 77 PC: 11fe0 | Get program return code
2018-12-17T22:19:38.36528186Z 72 PC: 12174 | Allocate memory
2018-12-17T22:19:38.36841705Z 72 PC: 1218d | Allocate memory
2018-12-17T22:19:38.371414034Z 37 PC: 123c4 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T22:19:38.374607486Z 37 PC: 123cb | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:19:38.377642353Z 37 PC: 123d2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.380218912Z 53 PC: 9f425 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.383339865Z 37 PC: 9f435 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.387959696Z 51 PC: 9f43a | Get or set Ctrl-Break
2018-12-17T22:19:38.3945929Z 51 PC: 9f442 | Get or set Ctrl-Break
2018-12-17T22:19:38.396579433Z 87 PC: 9f031 | Get or set file date and time
2018-12-17T22:19:38.399688939Z 37 PC: 9f45a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.402035347Z 51 PC: 9f463 | Get or set Ctrl-Break
2018-12-17T22:19:38.404023042Z 62 PC: 122ab | Close file
2018-12-17T22:19:38.407744358Z 53 PC: 9f425 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.410129779Z 37 PC: 9f435 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.413519459Z 51 PC: 9f43a | Get or set Ctrl-Break
2018-12-17T22:19:38.414644389Z 51 PC: 9f442 | Get or set Ctrl-Break
2018-12-17T22:19:38.415773767Z 87 PC: 9f031 | Get or set file date and time
2018-12-17T22:19:38.419333124Z 37 PC: 9f45a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.421777781Z 51 PC: 9f463 | Get or set Ctrl-Break
2018-12-17T22:19:38.422930279Z 62 PC: 122ab | Close file
2018-12-17T22:19:38.426429538Z 53 PC: 9f425 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.428890052Z 37 PC: 9f435 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.431215834Z 51 PC: 9f43a | Get or set Ctrl-Break
2018-12-17T22:19:38.432815231Z 51 PC: 9f442 | Get or set Ctrl-Break
2018-12-17T22:19:38.433797628Z 87 PC: 9f031 | Get or set file date and time
2018-12-17T22:19:38.43654968Z 37 PC: 9f45a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.439457478Z 51 PC: 9f463 | Get or set Ctrl-Break
2018-12-17T22:19:38.440614694Z 62 PC: 122ab | Close file
2018-12-17T22:19:38.443340771Z 53 PC: 9f425 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.446342022Z 37 PC: 9f435 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.448673659Z 51 PC: 9f43a | Get or set Ctrl-Break
2018-12-17T22:19:38.449776867Z 51 PC: 9f442 | Get or set Ctrl-Break
2018-12-17T22:19:38.451768478Z 87 PC: 9f031 | Get or set file date and time
2018-12-17T22:19:38.454625828Z 37 PC: 9f45a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.45690542Z 51 PC: 9f463 | Get or set Ctrl-Break
2018-12-17T22:19:38.458854157Z 62 PC: 122ab | Close file
2018-12-17T22:19:38.461695097Z 53 PC: 9f425 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.464047336Z 37 PC: 9f435 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.467145666Z 51 PC: 9f43a | Get or set Ctrl-Break
2018-12-17T22:19:38.468375109Z 51 PC: 9f442 | Get or set Ctrl-Break
2018-12-17T22:19:38.469487335Z 87 PC: 9f031 | Get or set file date and time
2018-12-17T22:19:38.472988577Z 37 PC: 9f45a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.475433187Z 51 PC: 9f463 | Get or set Ctrl-Break
2018-12-17T22:19:38.477142245Z 62 PC: 122ab | Close file
2018-12-17T22:19:38.480397384Z 53 PC: 9f425 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.48274259Z 37 PC: 9f435 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.485028475Z 51 PC: 9f43a | Get or set Ctrl-Break
2018-12-17T22:19:38.486672044Z 51 PC: 9f442 | Get or set Ctrl-Break
2018-12-17T22:19:38.487782406Z 87 PC: 9f031 | Get or set file date and time
2018-12-17T22:19:38.490507757Z 37 PC: 9f45a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.493977525Z 51 PC: 9f463 | Get or set Ctrl-Break
2018-12-17T22:19:38.495130222Z 62 PC: 122ab | Close file
2018-12-17T22:19:38.497939316Z 53 PC: 9f425 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.500733723Z 37 PC: 9f435 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.503057534Z 51 PC: 9f43a | Get or set Ctrl-Break
2018-12-17T22:19:38.504158436Z 51 PC: 9f442 | Get or set Ctrl-Break
2018-12-17T22:19:38.505698412Z 87 PC: 9f031 | Get or set file date and time
2018-12-17T22:19:38.508385245Z 37 PC: 9f45a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.510899382Z 51 PC: 9f463 | Get or set Ctrl-Break
2018-12-17T22:19:38.512704708Z 62 PC: 122ab | Close file
2018-12-17T22:19:38.515428614Z 53 PC: 9f425 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.518026733Z 37 PC: 9f435 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.520633201Z 51 PC: 9f43a | Get or set Ctrl-Break
2018-12-17T22:19:38.521737725Z 51 PC: 9f442 | Get or set Ctrl-Break
2018-12-17T22:19:38.523414258Z 87 PC: 9f031 | Get or set file date and time
2018-12-17T22:19:38.526142389Z 37 PC: 9f45a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.528447879Z 51 PC: 9f463 | Get or set Ctrl-Break
2018-12-17T22:19:38.53019155Z 62 PC: 122ab | Close file
2018-12-17T22:19:38.532923394Z 53 PC: 9f425 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.535287243Z 37 PC: 9f435 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.538175033Z 51 PC: 9f43a | Get or set Ctrl-Break
2018-12-17T22:19:38.539278665Z 51 PC: 9f442 | Get or set Ctrl-Break
2018-12-17T22:19:38.540380614Z 87 PC: 9f031 | Get or set file date and time
2018-12-17T22:19:38.543603949Z 37 PC: 9f45a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.545935757Z 51 PC: 9f463 | Get or set Ctrl-Break
2018-12-17T22:19:38.547082972Z 62 PC: 122ab | Close file
2018-12-17T22:19:38.55007932Z 53 PC: 9f425 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.552263804Z 37 PC: 9f435 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.554583832Z 51 PC: 9f43a | Get or set Ctrl-Break
2018-12-17T22:19:38.556211626Z 51 PC: 9f442 | Get or set Ctrl-Break
2018-12-17T22:19:38.557330814Z 87 PC: 9f031 | Get or set file date and time
2018-12-17T22:19:38.560607157Z 37 PC: 9f45a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.563303287Z 51 PC: 9f463 | Get or set Ctrl-Break
2018-12-17T22:19:38.564442106Z 62 PC: 122ab | Close file
2018-12-17T22:19:38.567343866Z 53 PC: 9f425 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.569960257Z 37 PC: 9f435 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.572244397Z 51 PC: 9f43a | Get or set Ctrl-Break
2018-12-17T22:19:38.574086896Z 51 PC: 9f442 | Get or set Ctrl-Break
2018-12-17T22:19:38.575303132Z 87 PC: 9f031 | Get or set file date and time
2018-12-17T22:19:38.578656832Z 37 PC: 9f45a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.581535777Z 51 PC: 9f463 | Get or set Ctrl-Break
2018-12-17T22:19:38.58267818Z 62 PC: 122ab | Close file
2018-12-17T22:19:38.58541157Z 53 PC: 9f425 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.588537795Z 37 PC: 9f435 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.590957191Z 51 PC: 9f43a | Get or set Ctrl-Break
2018-12-17T22:19:38.592061131Z 51 PC: 9f442 | Get or set Ctrl-Break
2018-12-17T22:19:38.593718067Z 87 PC: 9f031 | Get or set file date and time
2018-12-17T22:19:38.596277582Z 37 PC: 9f45a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.598575276Z 51 PC: 9f463 | Get or set Ctrl-Break
2018-12-17T22:19:38.600287552Z 62 PC: 122ab | Close file
2018-12-17T22:19:38.602905566Z 53 PC: 9f425 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.605295882Z 37 PC: 9f435 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.612173441Z 51 PC: 9f43a | Get or set Ctrl-Break
2018-12-17T22:19:38.613325035Z 51 PC: 9f442 | Get or set Ctrl-Break
2018-12-17T22:19:38.614489414Z 87 PC: 9f031 | Get or set file date and time
2018-12-17T22:19:38.617634382Z 37 PC: 9f45a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.619922001Z 51 PC: 9f463 | Get or set Ctrl-Break
2018-12-17T22:19:38.621330267Z 62 PC: 122ab | Close file
2018-12-17T22:19:38.624923863Z 53 PC: 9f425 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.627555425Z 37 PC: 9f435 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.630533004Z 51 PC: 9f43a | Get or set Ctrl-Break
2018-12-17T22:19:38.631734822Z 51 PC: 9f442 | Get or set Ctrl-Break
2018-12-17T22:19:38.633020995Z 87 PC: 9f031 | Get or set file date and time
2018-12-17T22:19:38.636036251Z 37 PC: 9f45a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.638798861Z 51 PC: 9f463 | Get or set Ctrl-Break
2018-12-17T22:19:38.640111236Z 62 PC: 122ab | Close file
2018-12-17T22:19:38.64352018Z 53 PC: 9f425 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.646081672Z 37 PC: 9f435 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.648463987Z 51 PC: 9f43a | Get or set Ctrl-Break
2018-12-17T22:19:38.650591712Z 51 PC: 9f442 | Get or set Ctrl-Break
2018-12-17T22:19:38.651738957Z 87 PC: 9f031 | Get or set file date and time
2018-12-17T22:19:38.654558781Z 37 PC: 9f45a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:19:38.657553152Z 51 PC: 9f463 | Get or set Ctrl-Break
2018-12-17T22:19:38.658802431Z 62 PC: 122ab | Close file
2018-12-17T22:19:38.663645681Z 99 PC: 999d7 | Get DBCS lead byte table pointer
2018-12-17T22:19:38.66755566Z 56 PC: 941f9 | Get or set country info
2018-12-17T22:19:38.670771054Z 64 PC: 99c48 | Write file or device (Write 2 bytes on handle 1)
2018-12-17T22:19:38.677390892Z 25 PC: 94262 | Get default drive
2018-12-17T22:19:38.680447357Z 71 PC: 964dd | Get current directory
2018-12-17T22:19:38.685163564Z 64 PC: 99c48 | Write file or device (Write 3 bytes on handle 1)
2018-12-17T22:19:38.690513398Z 2 PC: 964b2 | Character output (Char = '3e')
2018-12-17T22:19:38.69310321Z 93 PC: 94320 | File sharing functions
2018-12-17T22:19:38.696120706Z 93 PC: 94327 | File sharing functions
2018-12-17T22:19:38.700119818Z 10 PC: 94339 | Buffered keyboard input

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":3331,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:48:52.327713909Z 42 PC: 142a4 | Get date 0x142a4: cmp dx, 0xc1f
0x142a8: jne 0x142d5
0x142aa: mov ax, 0x500
0x142ad: int 0x10
0x142af: xor bh, bh
0x142b1: mov ax, 0x600
0x142b4: int 0x10
0x142b6: mov ax, 1
0x142b9: int 0x10
0x142bb: mov ax, 0x200
0x142be: mov dx, 0xc07
0x142c1: xor bx, bx
0x142c3: int 0x10
0x142c5: mov dx, 0x572
0x142c8: mov ah, 9
0x142ca: int 0x21
0x142cc: xor ah, ah
0x142ce: int 0x16
0x142d0: ljmp 0xffff:0
0x142d5: mov ah, 0xef
2018-12-25T11:48:52.331153528Z 239 PC: 142d9 | UNKNOWN!
2018-12-25T11:48:52.332516083Z 53 PC: 142e7 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:48:52.342073234Z 9 PC: 13dc6 | Display string (String= 'CDEFG-This is a 5000 byte COM test, 1994 ')
2018-12-25T11:48:52.352809133Z 77 PC: 11fe0 | Get program return code
2018-12-25T11:48:52.354693289Z 72 PC: 12174 | Allocate memory
2018-12-25T11:48:52.357880644Z 72 PC: 1218d | Allocate memory
2018-12-25T11:48:52.3615561Z 37 PC: 123c4 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-25T11:48:52.363951965Z 37 PC: 123cb | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T11:48:52.365926139Z 37 PC: 123d2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:48:52.368931853Z 53 PC: 9f425 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:48:52.370634413Z 37 PC: 9f435 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:48:52.372246383Z 51 PC: 9f43a | Get or set Ctrl-Break
2018-12-25T11:48:52.37384635Z 51 PC: 9f442 | Get or set Ctrl-Break
2018-12-25T11:48:52.374787482Z 87 PC: 9f031 | Get or set file date and time
2018-12-25T11:48:52.376754001Z 37 PC: 9f45a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:48:52.379984412Z 51 PC: 9f463 | Get or set Ctrl-Break
2018-12-25T11:48:52.381915766Z 62 PC: 122ab | Close file
2018-12-25T11:48:52.385250827Z 53 PC: 9f425 | Get interrupt vector (See above)
2018-12-25T11:48:52.388478894Z 37 PC: 9f435 | Set interrupt vector (See above)
2018-12-25T11:48:52.391062265Z 51 PC: 9f43a | Get or set Ctrl-Break (See above)
2018-12-25T11:48:52.392256329Z 51 PC: 9f442 | Get or set Ctrl-Break (See above)
2018-12-25T11:48:52.409485038Z 87 PC: 9f031 | Get or set file date and time (See above)
2018-12-25T11:48:52.412430434Z 37 PC: 9f45a | Set interrupt vector (See above)
2018-12-25T11:48:52.41484143Z 51 PC: 9f463 | Get or set Ctrl-Break (See above)
2018-12-25T11:48:52.41640332Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:48:52.420065674Z 53 PC: 9f425 | Get interrupt vector (See above)
2018-12-25T11:48:52.423113588Z 37 PC: 9f435 | Set interrupt vector (See above)
2018-12-25T11:48:52.427174704Z 51 PC: 9f43a | Get or set Ctrl-Break (See above)
2018-12-25T11:48:52.429276535Z 51 PC: 9f442 | Get or set Ctrl-Break (See above)
2018-12-25T11:48:52.431243593Z 87 PC: 9f031 | Get or set file date and time (See above)
2018-12-25T11:48:52.434646792Z 37 PC: 9f45a | Set interrupt vector (See above)
2018-12-25T11:48:52.438941295Z 51 PC: 9f463 | Get or set Ctrl-Break (See above)
2018-12-25T11:48:52.447999149Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:48:52.451996901Z 53 PC: 9f425 | Get interrupt vector (See above)
2018-12-25T11:48:52.467755432Z 37 PC: 9f435 | Set interrupt vector (See above)
2018-12-25T11:48:52.471166913Z 51 PC: 9f43a | Get or set Ctrl-Break (See above)
2018-12-25T11:48:52.472219892Z 51 PC: 9f442 | Get or set Ctrl-Break (See above)
2018-12-25T11:48:52.473350607Z 87 PC: 9f031 | Get or set file date and time (See above)
2018-12-25T11:48:52.476898859Z 37 PC: 9f45a | Set interrupt vector (See above)
2018-12-25T11:48:52.479493546Z 51 PC: 9f463 | Get or set Ctrl-Break (See above)
2018-12-25T11:48:52.480830497Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:48:52.483926191Z 53 PC: 9f425 | Get interrupt vector (See above)
2018-12-25T11:48:52.486818631Z 37 PC: 9f435 | Set interrupt vector (See above)
2018-12-25T11:48:52.489280486Z 51 PC: 9f43a | Get or set Ctrl-Break (See above)
2018-12-25T11:48:52.490336867Z 51 PC: 9f442 | Get or set Ctrl-Break (See above)
2018-12-25T11:48:52.492175615Z 87 PC: 9f031 | Get or set file date and time (See above)
2018-12-25T11:48:52.495036496Z 37 PC: 9f45a | Set interrupt vector (See above)
2018-12-25T11:48:52.497446359Z 51 PC: 9f463 | Get or set Ctrl-Break (See above)
2018-12-25T11:48:52.500520275Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:48:52.503872289Z 53 PC: 9f425 | Get interrupt vector (See above)
2018-12-25T11:48:52.506784961Z 37 PC: 9f435 | Set interrupt vector (See above)
2018-12-25T11:48:52.510649486Z 51 PC: 9f43a | Get or set Ctrl-Break (See above)
2018-12-25T11:48:52.51174314Z 51 PC: 9f442 | Get or set Ctrl-Break (See above)
2018-12-25T11:48:52.512941815Z 87 PC: 9f031 | Get or set file date and time (See above)
2018-12-25T11:48:52.516571394Z 37 PC: 9f45a | Set interrupt vector (See above)
2018-12-25T11:48:52.519712136Z 51 PC: 9f463 | Get or set Ctrl-Break (See above)
2018-12-25T11:48:52.520777435Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:48:52.533777868Z 53 PC: 9f425 | Get interrupt vector (See above)
2018-12-25T11:48:52.536413772Z 37 PC: 9f435 | Set interrupt vector (See above)
2018-12-25T11:48:52.539592908Z 51 PC: 9f43a | Get or set Ctrl-Break (See above)
2018-12-25T11:48:52.54088107Z 51 PC: 9f442 | Get or set Ctrl-Break (See above)
2018-12-25T11:48:52.542166024Z 87 PC: 9f031 | Get or set file date and time (See above)
2018-12-25T11:48:52.545026478Z 37 PC: 9f45a | Set interrupt vector (See above)
2018-12-25T11:48:52.548536088Z 51 PC: 9f463 | Get or set Ctrl-Break (See above)
2018-12-25T11:48:52.550381612Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:48:52.553537282Z 53 PC: 9f425 | Get interrupt vector (See above)
2018-12-25T11:48:52.556362091Z 37 PC: 9f435 | Set interrupt vector (See above)
2018-12-25T11:48:52.560083805Z 51 PC: 9f43a | Get or set Ctrl-Break (See above)
2018-12-25T11:48:52.561810877Z 51 PC: 9f442 | Get or set Ctrl-Break (See above)
2018-12-25T11:48:52.56353731Z 87 PC: 9f031 | Get or set file date and time (See above)
2018-12-25T11:48:52.56780546Z 37 PC: 9f45a | Set interrupt vector (See above)
2018-12-25T11:48:52.571409275Z 51 PC: 9f463 | Get or set Ctrl-Break (See above)
2018-12-25T11:48:52.573279498Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:48:52.577712894Z 53 PC: 9f425 | Get interrupt vector (See above)
2018-12-25T11:48:52.580945807Z 37 PC: 9f435 | Set interrupt vector (See above)
2018-12-25T11:48:52.584600192Z 51 PC: 9f43a | Get or set Ctrl-Break (See above)
2018-12-25T11:48:52.586778518Z 51 PC: 9f442 | Get or set Ctrl-Break (See above)
2018-12-25T11:48:52.588364804Z 87 PC: 9f031 | Get or set file date and time (See above)
2018-12-25T11:48:52.592335346Z 37 PC: 9f45a | Set interrupt vector (See above)
2018-12-25T11:48:52.59559328Z 51 PC: 9f463 | Get or set Ctrl-Break (See above)
2018-12-25T11:48:52.596960522Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:48:52.600392851Z 53 PC: 9f425 | Get interrupt vector (See above)
2018-12-25T11:48:52.605284221Z 37 PC: 9f435 | Set interrupt vector (See above)
2018-12-25T11:48:52.607879321Z 51 PC: 9f43a | Get or set Ctrl-Break (See above)
2018-12-25T11:48:52.609147128Z 51 PC: 9f442 | Get or set Ctrl-Break (See above)
2018-12-25T11:48:52.611164448Z 87 PC: 9f031 | Get or set file date and time (See above)
2018-12-25T11:48:52.614296991Z 37 PC: 9f45a | Set interrupt vector (See above)
2018-12-25T11:48:52.616815855Z 51 PC: 9f463 | Get or set Ctrl-Break (See above)
2018-12-25T11:48:52.618226555Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:48:52.623825728Z 53 PC: 9f425 | Get interrupt vector (See above)
2018-12-25T11:48:52.626529843Z 37 PC: 9f435 | Set interrupt vector (See above)
2018-12-25T11:48:52.629056882Z 51 PC: 9f43a | Get or set Ctrl-Break (See above)
2018-12-25T11:48:52.631398632Z 51 PC: 9f442 | Get or set Ctrl-Break (See above)
2018-12-25T11:48:52.63259454Z 87 PC: 9f031 | Get or set file date and time (See above)
2018-12-25T11:48:52.635584737Z 37 PC: 9f45a | Set interrupt vector (See above)
2018-12-25T11:48:52.639949463Z 51 PC: 9f463 | Get or set Ctrl-Break (See above)
2018-12-25T11:48:52.641283643Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:48:52.644364571Z 53 PC: 9f425 | Get interrupt vector (See above)
2018-12-25T11:48:52.648264089Z 37 PC: 9f435 | Set interrupt vector (See above)
2018-12-25T11:48:52.651470266Z 51 PC: 9f43a | Get or set Ctrl-Break (See above)
2018-12-25T11:48:52.652785611Z 51 PC: 9f442 | Get or set Ctrl-Break (See above)
2018-12-25T11:48:52.655162901Z 87 PC: 9f031 | Get or set file date and time (See above)
2018-12-25T11:48:52.658951158Z 37 PC: 9f45a | Set interrupt vector (See above)
2018-12-25T11:48:52.661779503Z 51 PC: 9f463 | Get or set Ctrl-Break (See above)
2018-12-25T11:48:52.663548542Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:48:52.668493804Z 53 PC: 9f425 | Get interrupt vector (See above)
2018-12-25T11:48:52.684459652Z 37 PC: 9f435 | Set interrupt vector (See above)
2018-12-25T11:48:52.689036305Z 51 PC: 9f43a | Get or set Ctrl-Break (See above)
2018-12-25T11:48:52.691215953Z 51 PC: 9f442 | Get or set Ctrl-Break (See above)
2018-12-25T11:48:52.692688922Z 87 PC: 9f031 | Get or set file date and time (See above)
2018-12-25T11:48:52.696155899Z 37 PC: 9f45a | Set interrupt vector (See above)
2018-12-25T11:48:52.698960212Z 51 PC: 9f463 | Get or set Ctrl-Break (See above)
2018-12-25T11:48:52.699911347Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:48:52.702991256Z 53 PC: 9f425 | Get interrupt vector (See above)
2018-12-25T11:48:52.706394657Z 37 PC: 9f435 | Set interrupt vector (See above)
2018-12-25T11:48:52.710183313Z 51 PC: 9f43a | Get or set Ctrl-Break (See above)
2018-12-25T11:48:52.711762895Z 51 PC: 9f442 | Get or set Ctrl-Break (See above)
2018-12-25T11:48:52.713864367Z 87 PC: 9f031 | Get or set file date and time (See above)
2018-12-25T11:48:52.717188625Z 37 PC: 9f45a | Set interrupt vector (See above)
2018-12-25T11:48:52.720211366Z 51 PC: 9f463 | Get or set Ctrl-Break (See above)
2018-12-25T11:48:52.722346505Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:48:52.725844774Z 53 PC: 9f425 | Get interrupt vector (See above)
2018-12-25T11:48:52.728836369Z 37 PC: 9f435 | Set interrupt vector (See above)
2018-12-25T11:48:52.733034948Z 51 PC: 9f43a | Get or set Ctrl-Break (See above)
2018-12-25T11:48:52.734622185Z 51 PC: 9f442 | Get or set Ctrl-Break (See above)
2018-12-25T11:48:52.736141106Z 87 PC: 9f031 | Get or set file date and time (See above)
2018-12-25T11:48:52.740109018Z 37 PC: 9f45a | Set interrupt vector (See above)
2018-12-25T11:48:52.742987857Z 51 PC: 9f463 | Get or set Ctrl-Break (See above)
2018-12-25T11:48:52.744465376Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:48:52.750261538Z 99 PC: 999d7 | Get DBCS lead byte table pointer
2018-12-25T11:48:52.752973027Z 56 PC: 941f9 | Get or set country info
2018-12-25T11:48:52.757280188Z 64 PC: 99c48 | Write file or device (Write 2 bytes on handle 1)
2018-12-25T11:48:52.76412799Z 25 PC: 94262 | Get default drive
2018-12-25T11:48:52.767068438Z 71 PC: 964dd | Get current directory
2018-12-25T11:48:52.772050758Z 64 PC: 99c48 | Write file or device (See above)
2018-12-25T11:48:52.778500235Z 2 PC: 964b2 | Character output (Char = '3e')
2018-12-25T11:48:52.781563605Z 93 PC: 94320 | File sharing functions
2018-12-25T11:48:52.785342278Z 93 PC: 94327 | File sharing functions
2018-12-25T11:48:52.790489494Z 10 PC: 94339 | Buffered keyboard input
2018-12-25T11:49:07.287688908Z 0 PC: 0 | Program terminate
2018-12-25T11:49:08.642338872Z 0 PC: 0 | Program terminate (See above)
2018-12-25T11:49:08.744852341Z 64 PC: 99c48 | Write file or device (See above)
2018-12-25T11:49:08.750287752Z 41 PC: 943ae | Parse filename
2018-12-25T11:49:08.753304825Z 41 PC: 9442f | Parse filename
2018-12-25T11:49:08.755234288Z 41 PC: 9444c | Parse filename
2018-12-25T11:49:08.759695469Z 26 PC: 978f7 | Set disk transfer address
2018-12-25T11:49:08.763436411Z 71 PC: 97af3 | Get current directory
2018-12-25T11:49:08.772307058Z 78 PC: 9f075 | Find first file
2018-12-25T11:49:08.778800927Z 47 PC: 9f088 | Get disk transfer address
2018-12-25T11:49:08.781225205Z 71 PC: 9796c | Get current directory
2018-12-25T11:49:08.783726821Z 73 PC: 97009 | Release memory
2018-12-25T11:49:08.785547065Z 53 PC: 9f425 | Get interrupt vector (See above)
2018-12-25T11:49:08.787770222Z 37 PC: 9f435 | Set interrupt vector (See above)
2018-12-25T11:49:08.789311276Z 51 PC: 9f43a | Get or set Ctrl-Break (See above)
2018-12-25T11:49:08.790234033Z 51 PC: 9f442 | Get or set Ctrl-Break (See above)
2018-12-25T11:49:08.791620411Z 67 PC: 9f20b | Get or set file attributes
2018-12-25T11:49:08.795824237Z 67 PC: 9f219 | Get or set file attributes
2018-12-25T11:49:08.809087222Z 61 PC: 9f220 | Open file (Filename = 'A:\PRINT.COM')
2018-12-25T11:49:08.814834372Z 87 PC: 9f22c | Get or set file date and time
2018-12-25T11:49:08.816714448Z 63 PC: 9f295 | Read file or device (Read 4 bytes on handle 5)
2018-12-25T11:49:08.821325492Z 66 PC: 9f418 | Move file pointer
2018-12-25T11:49:08.82370509Z 62 PC: 9f248 | Close file
2018-12-25T11:49:08.825761158Z 67 PC: 9f253 | Get or set file attributes
2018-12-25T11:49:08.833972779Z 37 PC: 9f45a | Set interrupt vector (See above)
2018-12-25T11:49:08.835746057Z 51 PC: 9f463 | Get or set Ctrl-Break (See above)
2018-12-25T11:49:08.836893783Z 75 PC: 11821 | Execute program
2018-12-25T11:49:08.84729535Z 9 PC: 12a47 | Display string (String= 'Hello, World! ')
2018-12-25T11:49:08.853610223Z 76 PC: 12a4b | Terminate with return code (Return code = '36')
2018-12-25T11:49:08.858129643Z 77 PC: 11fe0 | Get program return code (See above)
2018-12-25T11:49:08.860593761Z 72 PC: 12174 | Allocate memory (See above)
2018-12-25T11:49:08.86294621Z 72 PC: 1218d | Allocate memory (See above)
2018-12-25T11:49:08.865426418Z 37 PC: 123c4 | Set interrupt vector (See above)
2018-12-25T11:49:08.867630741Z 37 PC: 123cb | Set interrupt vector (See above)
2018-12-25T11:49:08.869615757Z 37 PC: 123d2 | Set interrupt vector (See above)
2018-12-25T11:49:08.871764314Z 53 PC: 9f425 | Get interrupt vector (See above)
2018-12-25T11:49:08.873528816Z 37 PC: 9f435 | Set interrupt vector (See above)
2018-12-25T11:49:08.875443251Z 51 PC: 9f43a | Get or set Ctrl-Break (See above)
2018-12-25T11:49:08.876789087Z 51 PC: 9f442 | Get or set Ctrl-Break (See above)
2018-12-25T11:49:08.877788113Z 87 PC: 9f031 | Get or set file date and time (See above)
2018-12-25T11:49:08.879814749Z 37 PC: 9f45a | Set interrupt vector (See above)
2018-12-25T11:49:08.881991837Z 51 PC: 9f463 | Get or set Ctrl-Break (See above)
2018-12-25T11:49:08.883023074Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:49:08.885467236Z 53 PC: 9f425 | Get interrupt vector (See above)
2018-12-25T11:49:08.887645391Z 37 PC: 9f435 | Set interrupt vector (See above)
2018-12-25T11:49:08.889318395Z 51 PC: 9f43a | Get or set Ctrl-Break (See above)
2018-12-25T11:49:08.890418929Z 51 PC: 9f442 | Get or set Ctrl-Break (See above)
2018-12-25T11:49:08.891821193Z 87 PC: 9f031 | Get or set file date and time (See above)
2018-12-25T11:49:08.894360262Z 37 PC: 9f45a | Set interrupt vector (See above)
2018-12-25T11:49:08.896107064Z 51 PC: 9f463 | Get or set Ctrl-Break (See above)
2018-12-25T11:49:08.897612087Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:49:08.902602167Z 53 PC: 9f425 | Get interrupt vector (See above)
2018-12-25T11:49:08.904246612Z 37 PC: 9f435 | Set interrupt vector (See above)
2018-12-25T11:49:08.906382241Z 51 PC: 9f43a | Get or set Ctrl-Break (See above)
2018-12-25T11:49:08.907360348Z 51 PC: 9f442 | Get or set Ctrl-Break (See above)
2018-12-25T11:49:08.908289317Z 87 PC: 9f031 | Get or set file date and time (See above)
2018-12-25T11:49:08.910736068Z 37 PC: 9f45a | Set interrupt vector (See above)
2018-12-25T11:49:08.912515749Z 51 PC: 9f463 | Get or set Ctrl-Break (See above)
2018-12-25T11:49:08.913512668Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:49:08.915903778Z 53 PC: 9f425 | Get interrupt vector (See above)
2018-12-25T11:49:08.917669397Z 37 PC: 9f435 | Set interrupt vector (See above)
2018-12-25T11:49:08.919369575Z 51 PC: 9f43a | Get or set Ctrl-Break (See above)
2018-12-25T11:49:08.921124425Z 51 PC: 9f442 | Get or set Ctrl-Break (See above)
2018-12-25T11:49:08.922481683Z 87 PC: 9f031 | Get or set file date and time (See above)
2018-12-25T11:49:08.924818539Z 37 PC: 9f45a | Set interrupt vector (See above)
2018-12-25T11:49:08.927695979Z 51 PC: 9f463 | Get or set Ctrl-Break (See above)
2018-12-25T11:49:08.928725633Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:49:08.931562712Z 53 PC: 9f425 | Get interrupt vector (See above)
2018-12-25T11:49:08.934627293Z 37 PC: 9f435 | Set interrupt vector (See above)
2018-12-25T11:49:08.936848423Z 51 PC: 9f43a | Get or set Ctrl-Break (See above)
2018-12-25T11:49:08.937669422Z 51 PC: 9f442 | Get or set Ctrl-Break (See above)
2018-12-25T11:49:08.93921934Z 87 PC: 9f031 | Get or set file date and time (See above)
2018-12-25T11:49:08.943062775Z 37 PC: 9f45a | Set interrupt vector (See above)
2018-12-25T11:49:08.945367848Z 51 PC: 9f463 | Get or set Ctrl-Break (See above)
2018-12-25T11:49:08.946630477Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:49:08.949824175Z 53 PC: 9f425 | Get interrupt vector (See above)
2018-12-25T11:49:08.952333483Z 37 PC: 9f435 | Set interrupt vector (See above)
2018-12-25T11:49:08.955196223Z 51 PC: 9f43a | Get or set Ctrl-Break (See above)
2018-12-25T11:49:08.956059618Z 51 PC: 9f442 | Get or set Ctrl-Break (See above)
2018-12-25T11:49:08.956859533Z 87 PC: 9f031 | Get or set file date and time (See above)
2018-12-25T11:49:08.960751912Z 37 PC: 9f45a | Set interrupt vector (See above)
2018-12-25T11:49:08.963356381Z 51 PC: 9f463 | Get or set Ctrl-Break (See above)
2018-12-25T11:49:08.964688424Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:49:08.968135612Z 53 PC: 9f425 | Get interrupt vector (See above)
2018-12-25T11:49:08.970352421Z 37 PC: 9f435 | Set interrupt vector (See above)
2018-12-25T11:49:08.972485181Z 51 PC: 9f43a | Get or set Ctrl-Break (See above)
2018-12-25T11:49:08.97398897Z 51 PC: 9f442 | Get or set Ctrl-Break (See above)
2018-12-25T11:49:08.9749408Z 87 PC: 9f031 | Get or set file date and time (See above)
2018-12-25T11:49:08.977707781Z 37 PC: 9f45a | Set interrupt vector (See above)
2018-12-25T11:49:08.98091717Z 51 PC: 9f463 | Get or set Ctrl-Break (See above)
2018-12-25T11:49:08.982248448Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:49:08.991211761Z 53 PC: 9f425 | Get interrupt vector (See above)
2018-12-25T11:49:08.994261085Z 37 PC: 9f435 | Set interrupt vector (See above)
2018-12-25T11:49:08.996691094Z 51 PC: 9f43a | Get or set Ctrl-Break (See above)
2018-12-25T11:49:08.997628225Z 51 PC: 9f442 | Get or set Ctrl-Break (See above)
2018-12-25T11:49:08.999487553Z 87 PC: 9f031 | Get or set file date and time (See above)
2018-12-25T11:49:09.002850924Z 37 PC: 9f45a | Set interrupt vector (See above)
2018-12-25T11:49:09.005225976Z 51 PC: 9f463 | Get or set Ctrl-Break (See above)
2018-12-25T11:49:09.00708602Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:49:09.010146924Z 53 PC: 9f425 | Get interrupt vector (See above)
2018-12-25T11:49:09.012811785Z 37 PC: 9f435 | Set interrupt vector (See above)
2018-12-25T11:49:09.016241333Z 51 PC: 9f43a | Get or set Ctrl-Break (See above)
2018-12-25T11:49:09.017371554Z 51 PC: 9f442 | Get or set Ctrl-Break (See above)
2018-12-25T11:49:09.018586779Z 87 PC: 9f031 | Get or set file date and time (See above)
2018-12-25T11:49:09.022808393Z 37 PC: 9f45a | Set interrupt vector (See above)
2018-12-25T11:49:09.025300271Z 51 PC: 9f463 | Get or set Ctrl-Break (See above)
2018-12-25T11:49:09.02649044Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:49:09.030417291Z 53 PC: 9f425 | Get interrupt vector (See above)
2018-12-25T11:49:09.032967693Z 37 PC: 9f435 | Set interrupt vector (See above)
2018-12-25T11:49:09.035432268Z 51 PC: 9f43a | Get or set Ctrl-Break (See above)
2018-12-25T11:49:09.0374533Z 51 PC: 9f442 | Get or set Ctrl-Break (See above)
2018-12-25T11:49:09.038698759Z 87 PC: 9f031 | Get or set file date and time (See above)
2018-12-25T11:49:09.041476961Z 37 PC: 9f45a | Set interrupt vector (See above)
2018-12-25T11:49:09.044344474Z 51 PC: 9f463 | Get or set Ctrl-Break (See above)
2018-12-25T11:49:09.045671905Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:49:09.048434527Z 53 PC: 9f425 | Get interrupt vector (See above)
2018-12-25T11:49:09.051625511Z 37 PC: 9f435 | Set interrupt vector (See above)
2018-12-25T11:49:09.054486314Z 51 PC: 9f43a | Get or set Ctrl-Break (See above)
2018-12-25T11:49:09.055877039Z 51 PC: 9f442 | Get or set Ctrl-Break (See above)
2018-12-25T11:49:09.057778914Z 87 PC: 9f031 | Get or set file date and time (See above)
2018-12-25T11:49:09.060557387Z 37 PC: 9f45a | Set interrupt vector (See above)
2018-12-25T11:49:09.062919351Z 51 PC: 9f463 | Get or set Ctrl-Break (See above)
2018-12-25T11:49:09.065321606Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:49:09.06772097Z 53 PC: 9f425 | Get interrupt vector (See above)
2018-12-25T11:49:09.069735522Z 37 PC: 9f435 | Set interrupt vector (See above)
2018-12-25T11:49:09.072428947Z 51 PC: 9f43a | Get or set Ctrl-Break (See above)
2018-12-25T11:49:09.073222323Z 51 PC: 9f442 | Get or set Ctrl-Break (See above)
2018-12-25T11:49:09.074003245Z 87 PC: 9f031 | Get or set file date and time (See above)
2018-12-25T11:49:09.076747031Z 37 PC: 9f45a | Set interrupt vector (See above)
2018-12-25T11:49:09.078646405Z 51 PC: 9f463 | Get or set Ctrl-Break (See above)
2018-12-25T11:49:09.079589989Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:49:09.082591516Z 53 PC: 9f425 | Get interrupt vector (See above)
2018-12-25T11:49:09.084902915Z 37 PC: 9f435 | Set interrupt vector (See above)
2018-12-25T11:49:09.086857328Z 51 PC: 9f43a | Get or set Ctrl-Break (See above)
2018-12-25T11:49:09.08905779Z 51 PC: 9f442 | Get or set Ctrl-Break (See above)
2018-12-25T11:49:09.090234333Z 87 PC: 9f031 | Get or set file date and time (See above)
2018-12-25T11:49:09.092871276Z 37 PC: 9f45a | Set interrupt vector (See above)
2018-12-25T11:49:09.095427608Z 51 PC: 9f463 | Get or set Ctrl-Break (See above)
2018-12-25T11:49:09.096547976Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:49:09.099143074Z 53 PC: 9f425 | Get interrupt vector (See above)
2018-12-25T11:49:09.10170762Z 37 PC: 9f435 | Set interrupt vector (See above)
2018-12-25T11:49:09.103544021Z 51 PC: 9f43a | Get or set Ctrl-Break (See above)
2018-12-25T11:49:09.104191805Z 51 PC: 9f442 | Get or set Ctrl-Break (See above)
2018-12-25T11:49:09.106968549Z 87 PC: 9f031 | Get or set file date and time (See above)
2018-12-25T11:49:09.109911811Z 37 PC: 9f45a | Set interrupt vector (See above)
2018-12-25T11:49:09.111586753Z 51 PC: 9f463 | Get or set Ctrl-Break (See above)
2018-12-25T11:49:09.113170142Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:49:09.115220325Z 53 PC: 9f425 | Get interrupt vector (See above)
2018-12-25T11:49:09.11694955Z 37 PC: 9f435 | Set interrupt vector (See above)
2018-12-25T11:49:09.119902096Z 51 PC: 9f43a | Get or set Ctrl-Break (See above)
2018-12-25T11:49:09.120844614Z 51 PC: 9f442 | Get or set Ctrl-Break (See above)
2018-12-25T11:49:09.12176734Z 87 PC: 9f031 | Get or set file date and time (See above)
2018-12-25T11:49:09.125499728Z 37 PC: 9f45a | Set interrupt vector (See above)
2018-12-25T11:49:09.127788027Z 51 PC: 9f463 | Get or set Ctrl-Break (See above)
2018-12-25T11:49:09.129686411Z 62 PC: 122ab | Close file (See above)
2018-12-25T11:49:09.137017567Z 99 PC: 999d7 | Get DBCS lead byte table pointer (See above)
2018-12-25T11:49:09.139449677Z 56 PC: 941f9 | Get or set country info (See above)
2018-12-25T11:49:09.142669358Z 64 PC: 99c48 | Write file or device (See above)
2018-12-25T11:49:09.149143017Z 25 PC: 94262 | Get default drive (See above)
2018-12-25T11:49:09.151877472Z 71 PC: 964dd | Get current directory (See above)
2018-12-25T11:49:09.157369551Z 64 PC: 99c48 | Write file or device (See above)
2018-12-25T11:49:09.162041827Z 2 PC: 964b2 | Character output (See above)
2018-12-25T11:49:09.164205726Z 93 PC: 94320 | File sharing functions (See above)
2018-12-25T11:49:09.16748226Z 93 PC: 94327 | File sharing functions (See above)
2018-12-25T11:49:09.170386975Z 10 PC: 94339 | Buffered keyboard input (See above)

{"DateBased":true,"Day":31,"Month":12,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":3331,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:48:53.397046883Z 42 PC: 142a4 | Get date 0x142a4: cmp dx, 0xc1f
0x142a8: jne 0x142d5
0x142aa: mov ax, 0x500
0x142ad: int 0x10
0x142af: xor bh, bh
0x142b1: mov ax, 0x600
0x142b4: int 0x10
0x142b6: mov ax, 1
0x142b9: int 0x10
0x142bb: mov ax, 0x200
0x142be: mov dx, 0xc07
0x142c1: xor bx, bx
0x142c3: int 0x10
0x142c5: mov dx, 0x572
0x142c8: mov ah, 9
0x142ca: int 0x21
0x142cc: xor ah, ah
0x142ce: int 0x16
0x142d0: ljmp 0xffff:0
0x142d5: mov ah, 0xef
2018-12-25T11:48:53.409419855Z 9 PC: 142cc | Display string (Could not find end pointer)