Sample viewer

vx.netlux.org/Virus.DOS.HLLP.Iwor.8368

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:21:48.786297624Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:48.788165335Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:48.789310172Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:48.79124466Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:48.792340085Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:48.793655777Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:48.795017404Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:48.796185337Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:48.798325574Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:48.799463044Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:48.800807749Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:48.802496351Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:48.804503402Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:48.806055658Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:48.807672176Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:48.809558589Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:48.811103193Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:48.812928944Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:48.814376718Z 53 PC: 13b0a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:48.815384331Z 37 PC: 13b1f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:48.816696166Z 37 PC: 13b27 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:48.818145977Z 37 PC: 13b2f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:48.8193427Z 37 PC: 13b37 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:48.821365935Z 68 PC: 1467f | I/O control for devices (Set for = '')
2018-12-17T22:21:48.823004767Z 53 PC: 1394f | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:21:48.824399552Z 37 PC: 1396b | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:21:48.826738087Z 53 PC: 1394f | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:21:48.828054462Z 37 PC: 1396b | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:21:48.829212634Z 53 PC: 1394f | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:48.831228297Z 37 PC: 1396b | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:48.832320371Z 51 PC: 1383d | Get or set Ctrl-Break
2018-12-17T22:21:48.833550645Z 48 PC: 14392 | Get DOS version
2018-12-17T22:21:48.836137847Z 48 PC: 14392 | Get DOS version
2018-12-17T22:21:48.837544725Z 26 PC: 138ee | Set disk transfer address
2018-12-17T22:21:48.838577928Z 78 PC: 138fa | Find first file
2018-12-17T22:21:48.846366563Z 67 PC: 13877 | Get or set file attributes
2018-12-17T22:21:48.863351055Z 60 PC: 141d0 | Create or truncate file
2018-12-17T22:21:48.888028439Z 65 PC: 14319 | Delete file (Filename = 'A:\�')
2018-12-17T22:21:48.899056664Z 61 PC: 141d0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:21:48.906603354Z 66 PC: 14302 | Move file pointer
2018-12-17T22:21:48.907937067Z 63 PC: 142a3 | Read file or device (Read 5 bytes on handle 6)
2018-12-17T22:21:48.912585027Z 62 PC: 14220 | Close file
2018-12-17T22:21:48.914754659Z 61 PC: 141d0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:21:48.921456891Z 63 PC: 142a3 | Read file or device (Read 8368 bytes on handle 6)
2018-12-17T22:21:48.929493095Z 62 PC: 14220 | Close file
2018-12-17T22:21:48.931535686Z 26 PC: 138ee | Set disk transfer address
2018-12-17T22:21:48.932508462Z 78 PC: 138fa | Find first file
2018-12-17T22:21:48.939467502Z 67 PC: 13877 | Get or set file attributes
2018-12-17T22:21:48.94906669Z 61 PC: 141d0 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:21:48.955447723Z 62 PC: 14220 | Close file
2018-12-17T22:21:48.957986675Z 67 PC: 13877 | Get or set file attributes
2018-12-17T22:21:48.967665149Z 26 PC: 13912 | Set disk transfer address
2018-12-17T22:21:48.969496163Z 79 PC: 13917 | Find next file
2018-12-17T22:21:48.97270906Z 67 PC: 13877 | Get or set file attributes
2018-12-17T22:21:48.989297934Z 61 PC: 141d0 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:21:48.996044187Z 62 PC: 14220 | Close file
2018-12-17T22:21:48.998644199Z 67 PC: 13877 | Get or set file attributes
2018-12-17T22:21:49.008118853Z 26 PC: 13912 | Set disk transfer address
2018-12-17T22:21:49.009275649Z 79 PC: 13917 | Find next file
2018-12-17T22:21:49.012398155Z 67 PC: 13877 | Get or set file attributes
2018-12-17T22:21:49.021866427Z 61 PC: 141d0 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:21:49.029534085Z 62 PC: 14220 | Close file
2018-12-17T22:21:49.031691995Z 67 PC: 13877 | Get or set file attributes
2018-12-17T22:21:49.043897776Z 26 PC: 13912 | Set disk transfer address
2018-12-17T22:21:49.045385508Z 79 PC: 13917 | Find next file
2018-12-17T22:21:49.048271783Z 67 PC: 13877 | Get or set file attributes
2018-12-17T22:21:49.057764488Z 61 PC: 141d0 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:21:49.065280635Z 62 PC: 14220 | Close file
2018-12-17T22:21:49.067799343Z 67 PC: 13877 | Get or set file attributes
2018-12-17T22:21:49.077926066Z 26 PC: 13912 | Set disk transfer address
2018-12-17T22:21:49.079853509Z 79 PC: 13917 | Find next file
2018-12-17T22:21:49.083079668Z 67 PC: 13877 | Get or set file attributes
2018-12-17T22:21:49.092802427Z 61 PC: 141d0 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:21:49.105217668Z 62 PC: 14220 | Close file
2018-12-17T22:21:49.107451723Z 67 PC: 13877 | Get or set file attributes
2018-12-17T22:21:49.117228115Z 26 PC: 13912 | Set disk transfer address
2018-12-17T22:21:49.119352822Z 79 PC: 13917 | Find next file
2018-12-17T22:21:49.122591472Z 67 PC: 13877 | Get or set file attributes
2018-12-17T22:21:49.132442957Z 61 PC: 141d0 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:21:49.139793385Z 62 PC: 14220 | Close file
2018-12-17T22:21:49.142112103Z 67 PC: 13877 | Get or set file attributes
2018-12-17T22:21:49.151894642Z 26 PC: 13912 | Set disk transfer address
2018-12-17T22:21:49.154368804Z 79 PC: 13917 | Find next file
2018-12-17T22:21:49.157574721Z 67 PC: 13877 | Get or set file attributes
2018-12-17T22:21:49.170290466Z 61 PC: 141d0 | Open file (Filename = 'PAH.COM')
2018-12-17T22:21:49.178292125Z 62 PC: 14220 | Close file
2018-12-17T22:21:49.180594057Z 67 PC: 13877 | Get or set file attributes
2018-12-17T22:21:49.193553074Z 26 PC: 13912 | Set disk transfer address
2018-12-17T22:21:49.195330965Z 79 PC: 13917 | Find next file
2018-12-17T22:21:49.201952649Z 26 PC: 138ee | Set disk transfer address
2018-12-17T22:21:49.20303161Z 78 PC: 138fa | Find first file
2018-12-17T22:21:49.209735912Z 67 PC: 13877 | Get or set file attributes
2018-12-17T22:21:49.219494358Z 61 PC: 141d0 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:21:49.23234124Z 66 PC: 14302 | Move file pointer
2018-12-17T22:21:49.233805106Z 63 PC: 142a3 | Read file or device (Read 5 bytes on handle 6)
2018-12-17T22:21:49.24059475Z 62 PC: 14220 | Close file
2018-12-17T22:21:49.243601758Z 67 PC: 13877 | Get or set file attributes
2018-12-17T22:21:49.253887173Z 26 PC: 13912 | Set disk transfer address
2018-12-17T22:21:49.255111949Z 79 PC: 13917 | Find next file
2018-12-17T22:21:49.261932505Z 26 PC: 138ee | Set disk transfer address
2018-12-17T22:21:49.26346082Z 78 PC: 138fa | Find first file
2018-12-17T22:21:49.269474761Z 67 PC: 13877 | Get or set file attributes
2018-12-17T22:21:49.617927961Z 61 PC: 141d0 | Open file (Filename = 'c:COMMAND.COM')
2018-12-17T22:21:49.624983881Z 66 PC: 14302 | Move file pointer
2018-12-17T22:21:49.627027678Z 63 PC: 142a3 | Read file or device (Read 5 bytes on handle 6)
2018-12-17T22:21:49.636273735Z 62 PC: 14220 | Close file
2018-12-17T22:21:49.639490076Z 61 PC: 141d0 | Open file (Filename = 'c:COMMAND.COM')
2018-12-17T22:21:49.645737256Z 66 PC: 14302 | Move file pointer
2018-12-17T22:21:49.648352396Z 63 PC: 142a3 | Read file or device (Read 1500 bytes on handle 6)
2018-12-17T22:21:49.655664038Z 66 PC: 14302 | Move file pointer
2018-12-17T22:21:49.657449602Z 64 PC: 142a3 | Write file or device (Write 1500 bytes on handle 6)
2018-12-17T22:21:49.665895744Z 66 PC: 14302 | Move file pointer
2018-12-17T22:21:49.667587263Z 66 PC: 14302 | Move file pointer
2018-12-17T22:21:49.669333289Z 63 PC: 142a3 | Read file or device (Read 1500 bytes on handle 6)
2018-12-17T22:21:49.67774068Z 66 PC: 14302 | Move file pointer
2018-12-17T22:21:49.679148463Z 63 PC: 142a3 | Read file or device (Read 1500 bytes on handle 6)
2018-12-17T22:21:49.686205579Z 66 PC: 14302 | Move file pointer
2018-12-17T22:21:49.689416587Z 64 PC: 142a3 | Write file or device (Write 1500 bytes on handle 6)
2018-12-17T22:21:49.697301828Z 66 PC: 14302 | Move file pointer
2018-12-17T22:21:49.699049259Z 64 PC: 142a3 | Write file or device (Write 1500 bytes on handle 6)
2018-12-17T22:21:49.710387873Z 66 PC: 14302 | Move file pointer
2018-12-17T22:21:49.712436965Z 63 PC: 142a3 | Read file or device (Read 8368 bytes on handle 6)
2018-12-17T22:21:49.720627057Z 66 PC: 14302 | Move file pointer
2018-12-17T22:21:49.723312514Z 64 PC: 142a3 | Write file or device (Write 8368 bytes on handle 6)
2018-12-17T22:21:49.731543217Z 66 PC: 14302 | Move file pointer
2018-12-17T22:21:49.733324137Z 64 PC: 142a3 | Write file or device (Write 8368 bytes on handle 6)
2018-12-17T22:21:49.745751137Z 87 PC: 138be | Get or set file date and time
2018-12-17T22:21:49.74755258Z 67 PC: 13877 | Get or set file attributes
2018-12-17T22:21:49.758469716Z 62 PC: 14220 | Close file
2018-12-17T22:21:49.764706393Z 26 PC: 13912 | Set disk transfer address
2018-12-17T22:21:49.766093608Z 79 PC: 13917 | Find next file
2018-12-17T22:21:49.77009731Z 26 PC: 138ee | Set disk transfer address
2018-12-17T22:21:49.771264879Z 78 PC: 138fa | Find first file
2018-12-17T22:21:49.777942213Z 26 PC: 138ee | Set disk transfer address
2018-12-17T22:21:49.77943038Z 78 PC: 138fa | Find first file
2018-12-17T22:21:49.782113348Z 26 PC: 138ee | Set disk transfer address
2018-12-17T22:21:49.783059933Z 78 PC: 138fa | Find first file
2018-12-17T22:21:49.787319178Z 37 PC: 1396b | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:21:49.788362659Z 37 PC: 1396b | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:21:49.789462096Z 37 PC: 1396b | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:49.791313612Z 26 PC: 138ee | Set disk transfer address
2018-12-17T22:21:49.792516236Z 78 PC: 138fa | Find first file
2018-12-17T22:21:49.79863969Z 61 PC: 141d0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:21:49.806337158Z 66 PC: 14302 | Move file pointer
2018-12-17T22:21:49.807782904Z 63 PC: 142a3 | Read file or device (Read 8368 bytes on handle 6)
2018-12-17T22:21:49.81583737Z 66 PC: 14302 | Move file pointer
2018-12-17T22:21:49.817666287Z 64 PC: 14201 | Write file or device (Write 0 bytes on handle 6)
2018-12-17T22:21:49.825214983Z 66 PC: 14302 | Move file pointer
2018-12-17T22:21:49.826641974Z 64 PC: 142a3 | Write file or device (Write 8368 bytes on handle 6)
2018-12-17T22:21:49.836176781Z 66 PC: 14302 | Move file pointer
2018-12-17T22:21:49.837736913Z 63 PC: 142a3 | Read file or device (Read 1500 bytes on handle 6)
2018-12-17T22:21:49.845988542Z 66 PC: 14302 | Move file pointer
2018-12-17T22:21:49.847932482Z 63 PC: 142a3 | Read file or device (Read 1500 bytes on handle 6)
2018-12-17T22:21:49.855216782Z 66 PC: 14302 | Move file pointer
2018-12-17T22:21:49.857534353Z 64 PC: 142a3 | Write file or device (Write 1500 bytes on handle 6)
2018-12-17T22:21:49.865245161Z 66 PC: 14302 | Move file pointer
2018-12-17T22:21:49.866978216Z 64 PC: 142a3 | Write file or device (Write 1500 bytes on handle 6)
2018-12-17T22:21:49.874743627Z 66 PC: 14302 | Move file pointer
2018-12-17T22:21:49.876088749Z 66 PC: 14302 | Move file pointer
2018-12-17T22:21:49.877540156Z 63 PC: 142a3 | Read file or device (Read 1500 bytes on handle 6)
2018-12-17T22:21:49.88526264Z 66 PC: 14302 | Move file pointer
2018-12-17T22:21:49.886678729Z 64 PC: 142a3 | Write file or device (Write 1500 bytes on handle 6)
2018-12-17T22:21:49.895958027Z 66 PC: 14302 | Move file pointer
2018-12-17T22:21:49.89726585Z 87 PC: 138be | Get or set file date and time
2018-12-17T22:21:49.898633406Z 67 PC: 13877 | Get or set file attributes
2018-12-17T22:21:49.910259719Z 62 PC: 14220 | Close file
2018-12-17T22:21:49.917150066Z 53 PC: 13a88 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:49.918212803Z 37 PC: 13a91 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:49.919709947Z 53 PC: 13a88 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:49.920862165Z 37 PC: 13a91 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:49.921988971Z 53 PC: 13a88 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:49.923734248Z 37 PC: 13a91 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:49.925101564Z 53 PC: 13a88 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:49.926478662Z 37 PC: 13a91 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:49.927805855Z 53 PC: 13a88 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:49.928929828Z 37 PC: 13a91 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:49.930602478Z 53 PC: 13a88 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:49.931706305Z 37 PC: 13a91 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:49.932860219Z 53 PC: 13a88 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:49.934639966Z 37 PC: 13a91 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:49.935603479Z 53 PC: 13a88 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:49.936584239Z 37 PC: 13a91 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:49.938175042Z 53 PC: 13a88 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:49.939209448Z 37 PC: 13a91 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:49.940229194Z 53 PC: 13a88 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:49.941829194Z 37 PC: 13a91 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:49.942957219Z 53 PC: 13a88 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:49.944415112Z 37 PC: 13a91 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:49.945372629Z 53 PC: 13a88 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:49.946443736Z 37 PC: 13a91 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:49.947941586Z 53 PC: 13a88 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:49.948992844Z 37 PC: 13a91 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:49.949874861Z 53 PC: 13a88 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:49.951347004Z 37 PC: 13a91 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:49.952272878Z 53 PC: 13a88 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:49.953276989Z 37 PC: 13a91 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:49.954627944Z 53 PC: 13a88 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:49.95558327Z 37 PC: 13a91 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:49.959058187Z 53 PC: 13a88 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:49.960222191Z 37 PC: 13a91 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:49.961084469Z 53 PC: 13a88 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:49.962773722Z 37 PC: 13a91 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:49.963853566Z 53 PC: 13a88 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:49.964846997Z 37 PC: 13a91 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:49.967178702Z 41 PC: 13a3f | Parse filename
2018-12-17T22:21:49.968691957Z 41 PC: 13a4d | Parse filename
2018-12-17T22:21:49.970266506Z 75 PC: 13a58 | Execute program
2018-12-17T22:21:49.984843528Z 9 PC: 1afc9 | Display string (String= 'JWUW�����������������Q������!� @��As c:COMMAND.COM� � 0!0�!D�!EU"F�"G#H�#I')
2018-12-17T22:21:49.988889726Z 76 PC: 1afce | Terminate with return code (Return code = '1')
2018-12-17T22:21:49.993709814Z 53 PC: 13a88 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:49.995101463Z 37 PC: 13a91 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:49.996400354Z 53 PC: 13a88 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:49.998346976Z 37 PC: 13a91 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:49.999679099Z 53 PC: 13a88 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:50.001021489Z 37 PC: 13a91 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:50.002887869Z 53 PC: 13a88 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:50.004174851Z 37 PC: 13a91 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:50.005608432Z 53 PC: 13a88 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:50.007001697Z 37 PC: 13a91 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:50.008043177Z 53 PC: 13a88 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:50.009727253Z 37 PC: 13a91 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:50.011073686Z 53 PC: 13a88 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:50.012398391Z 37 PC: 13a91 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:50.014538835Z 53 PC: 13a88 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:50.016398786Z 37 PC: 13a91 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:50.017521537Z 53 PC: 13a88 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:50.021901714Z 37 PC: 13a91 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:50.02304853Z 53 PC: 13a88 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:50.024039314Z 37 PC: 13a91 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:50.025453925Z 53 PC: 13a88 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:50.026473507Z 37 PC: 13a91 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:50.027993969Z 53 PC: 13a88 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:50.029118179Z 37 PC: 13a91 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:50.030090844Z 53 PC: 13a88 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:50.03136439Z 37 PC: 13a91 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:50.032312984Z 53 PC: 13a88 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:50.033618821Z 37 PC: 13a91 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:50.035048213Z 53 PC: 13a88 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:50.036022614Z 37 PC: 13a91 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:50.036911976Z 53 PC: 13a88 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:50.038204619Z 37 PC: 13a91 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:50.03907725Z 53 PC: 13a88 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:50.040445125Z 37 PC: 13a91 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:50.041400535Z 53 PC: 13a88 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:50.042423986Z 37 PC: 13a91 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:50.043798075Z 53 PC: 13a88 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:50.045119825Z 37 PC: 13a91 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:50.048072023Z 67 PC: 13877 | Get or set file attributes
2018-12-17T22:21:50.06219073Z 61 PC: 141d0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:21:50.06873794Z 66 PC: 14302 | Move file pointer
2018-12-17T22:21:50.07001958Z 63 PC: 142a3 | Read file or device (Read 1500 bytes on handle 6)
2018-12-17T22:21:50.077134927Z 66 PC: 14302 | Move file pointer
2018-12-17T22:21:50.078671214Z 64 PC: 142a3 | Write file or device (Write 1500 bytes on handle 6)
2018-12-17T22:21:50.086609128Z 66 PC: 14302 | Move file pointer
2018-12-17T22:21:50.088597264Z 66 PC: 14302 | Move file pointer
2018-12-17T22:21:50.089937458Z 63 PC: 142a3 | Read file or device (Read 1500 bytes on handle 6)
2018-12-17T22:21:50.098795313Z 66 PC: 14302 | Move file pointer
2018-12-17T22:21:50.100711291Z 63 PC: 142a3 | Read file or device (Read 1500 bytes on handle 6)
2018-12-17T22:21:50.10752666Z 66 PC: 14302 | Move file pointer
2018-12-17T22:21:50.109744026Z 64 PC: 142a3 | Write file or device (Write 1500 bytes on handle 6)
2018-12-17T22:21:50.117468914Z 66 PC: 14302 | Move file pointer
2018-12-17T22:21:50.119140349Z 64 PC: 142a3 | Write file or device (Write 1500 bytes on handle 6)
2018-12-17T22:21:50.127277737Z 66 PC: 14302 | Move file pointer
2018-12-17T22:21:50.128569807Z 64 PC: 142a3 | Write file or device (Write 8368 bytes on handle 6)
2018-12-17T22:21:50.136509905Z 66 PC: 14302 | Move file pointer
2018-12-17T22:21:50.138829264Z 64 PC: 142a3 | Write file or device (Write 8368 bytes on handle 6)
2018-12-17T22:21:50.148861795Z 87 PC: 138be | Get or set file date and time
2018-12-17T22:21:50.150746918Z 67 PC: 13877 | Get or set file attributes
2018-12-17T22:21:50.16161325Z 62 PC: 14220 | Close file
2018-12-17T22:21:50.168625466Z 77 PC: 13a76 | Get program return code
2018-12-17T22:21:50.17048547Z 64 PC: 13f28 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:21:50.172667156Z 37 PC: 13c61 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:21:50.173730023Z 37 PC: 13c61 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:21:50.175057266Z 37 PC: 13c61 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:21:50.176207836Z 37 PC: 13c61 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:50.177359777Z 37 PC: 13c61 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:50.179615708Z 37 PC: 13c61 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:50.180969755Z 37 PC: 13c61 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:21:50.182521606Z 37 PC: 13c61 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:21:50.183994694Z 37 PC: 13c61 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:21:50.185295588Z 37 PC: 13c61 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:21:50.187364833Z 37 PC: 13c61 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:21:50.188690189Z 37 PC: 13c61 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:21:50.189986508Z 37 PC: 13c61 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:21:50.191732158Z 37 PC: 13c61 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:21:50.192995707Z 37 PC: 13c61 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:21:50.194564778Z 37 PC: 13c61 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:21:50.195463041Z 37 PC: 13c61 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:21:50.196384471Z 37 PC: 13c61 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:21:50.198486872Z 37 PC: 13c61 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:21:50.199731256Z 76 PC: 13ca0 | Terminate with return code (Return code = '1')