Sample viewer

vx.netlux.org/Virus.DOS.HLLO.7392

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:23:11.930824516Z 53 PC: 13a46 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:23:11.932773094Z 53 PC: 13a46 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:23:11.934055797Z 53 PC: 13a46 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:23:11.935414905Z 53 PC: 13a46 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:23:11.936978183Z 53 PC: 13a46 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:23:11.938750951Z 53 PC: 13a46 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:23:11.940030084Z 53 PC: 13a46 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:23:11.941292702Z 53 PC: 13a46 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:23:11.942654615Z 53 PC: 13a46 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:23:11.944190457Z 53 PC: 13a46 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:23:11.945788508Z 53 PC: 13a46 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:23:11.947365173Z 53 PC: 13a46 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:23:11.948837046Z 53 PC: 13a46 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:23:11.950388515Z 53 PC: 13a46 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:23:11.952150702Z 53 PC: 13a46 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:23:11.953404641Z 53 PC: 13a46 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:23:11.954626777Z 53 PC: 13a46 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:23:11.956415777Z 53 PC: 13a46 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:23:11.957843337Z 37 PC: 13a5b | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:23:11.95937973Z 37 PC: 13a63 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:23:11.965193581Z 37 PC: 13a6b | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:23:11.966513198Z 37 PC: 13a73 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:23:11.968009306Z 68 PC: 13fbf | I/O control for devices (Set for = '')
2018-12-17T22:23:12.030277315Z 37 PC: 13477 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:23:12.032317282Z 48 PC: 1447a | Get DOS version
2018-12-17T22:23:12.033782767Z 48 PC: 1447a | Get DOS version
2018-12-17T22:23:12.036449669Z 26 PC: 13339 | Set disk transfer address
2018-12-17T22:23:12.037567341Z 78 PC: 13345 | Find first file
2018-12-17T22:23:12.043352293Z 26 PC: 13339 | Set disk transfer address
2018-12-17T22:23:12.04453979Z 78 PC: 13345 | Find first file
2018-12-17T22:23:12.050810654Z 26 PC: 1335d | Set disk transfer address
2018-12-17T22:23:12.052560851Z 79 PC: 13362 | Find next file
2018-12-17T22:23:12.056064061Z 26 PC: 13339 | Set disk transfer address
2018-12-17T22:23:12.057148136Z 78 PC: 13345 | Find first file
2018-12-17T22:23:12.063112546Z 26 PC: 1335d | Set disk transfer address
2018-12-17T22:23:12.064099399Z 79 PC: 13362 | Find next file
2018-12-17T22:23:12.067464394Z 26 PC: 13339 | Set disk transfer address
2018-12-17T22:23:12.068605868Z 78 PC: 13345 | Find first file
2018-12-17T22:23:12.077745649Z 26 PC: 13339 | Set disk transfer address
2018-12-17T22:23:12.078872757Z 78 PC: 13345 | Find first file
2018-12-17T22:23:12.08545794Z 61 PC: 1432c | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:23:12.091946757Z 60 PC: 1432c | Create or truncate file
2018-12-17T22:23:12.445809252Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:12.453205288Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:12.461045234Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:12.468648256Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:12.47626292Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:12.483628135Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:12.49205983Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:12.499904138Z 64 PC: 143ff | Write file or device (Write 1248 bytes on handle 6)
2018-12-17T22:23:12.507375651Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:12.509676623Z 62 PC: 1437c | Close file
2018-12-17T22:23:12.511493716Z 62 PC: 1437c | Close file
2018-12-17T22:23:12.518659707Z 26 PC: 1335d | Set disk transfer address
2018-12-17T22:23:12.520229046Z 79 PC: 13362 | Find next file
2018-12-17T22:23:12.523875865Z 61 PC: 1432c | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:23:12.5318141Z 60 PC: 1432c | Create or truncate file
2018-12-17T22:23:12.544599443Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:12.551274627Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:12.558394476Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:12.56583676Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:12.578394319Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:12.585367897Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:12.593986708Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:12.60139538Z 64 PC: 143ff | Write file or device (Write 1248 bytes on handle 6)
2018-12-17T22:23:12.609917663Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:12.613358385Z 62 PC: 1437c | Close file
2018-12-17T22:23:12.615246343Z 62 PC: 1437c | Close file
2018-12-17T22:23:12.62254437Z 26 PC: 1335d | Set disk transfer address
2018-12-17T22:23:12.624970166Z 79 PC: 13362 | Find next file
2018-12-17T22:23:12.628930937Z 61 PC: 1432c | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:23:12.635917884Z 60 PC: 1432c | Create or truncate file
2018-12-17T22:23:12.649362616Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:12.656391256Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:12.664822262Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:12.673057511Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:12.680681986Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:12.688066798Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:12.697315418Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:12.70456964Z 64 PC: 143ff | Write file or device (Write 1248 bytes on handle 6)
2018-12-17T22:23:12.71197573Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:12.714696139Z 62 PC: 1437c | Close file
2018-12-17T22:23:12.716465722Z 62 PC: 1437c | Close file
2018-12-17T22:23:12.723622808Z 26 PC: 1335d | Set disk transfer address
2018-12-17T22:23:12.725122166Z 79 PC: 13362 | Find next file
2018-12-17T22:23:12.729480024Z 61 PC: 1432c | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:23:12.736094946Z 60 PC: 1432c | Create or truncate file
2018-12-17T22:23:12.748309569Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:12.754708581Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:12.761743206Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:12.768793802Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:12.776039096Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:12.782798043Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:12.790801065Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:12.797745351Z 64 PC: 143ff | Write file or device (Write 1248 bytes on handle 6)
2018-12-17T22:23:12.805089784Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:12.80782327Z 62 PC: 1437c | Close file
2018-12-17T22:23:12.809745446Z 62 PC: 1437c | Close file
2018-12-17T22:23:12.81689413Z 26 PC: 1335d | Set disk transfer address
2018-12-17T22:23:12.818629026Z 79 PC: 13362 | Find next file
2018-12-17T22:23:12.821166495Z 61 PC: 1432c | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:23:12.825347606Z 60 PC: 1432c | Create or truncate file
2018-12-17T22:23:12.832826335Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:12.837284104Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:12.841931133Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:12.846500296Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:12.854500262Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:12.861508761Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:12.868531537Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:12.875900392Z 64 PC: 143ff | Write file or device (Write 1248 bytes on handle 6)
2018-12-17T22:23:12.883231576Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:12.885008712Z 62 PC: 1437c | Close file
2018-12-17T22:23:12.887496825Z 62 PC: 1437c | Close file
2018-12-17T22:23:12.899955416Z 26 PC: 1335d | Set disk transfer address
2018-12-17T22:23:12.90089373Z 79 PC: 13362 | Find next file
2018-12-17T22:23:12.905412799Z 61 PC: 1432c | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:23:12.912113435Z 60 PC: 1432c | Create or truncate file
2018-12-17T22:23:12.924325319Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:12.931145213Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:12.938182298Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:12.944700649Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:12.951984338Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:12.958742934Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:12.968422791Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:12.976212755Z 64 PC: 143ff | Write file or device (Write 1248 bytes on handle 6)
2018-12-17T22:23:12.983662798Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:12.985493599Z 62 PC: 1437c | Close file
2018-12-17T22:23:12.98768308Z 62 PC: 1437c | Close file
2018-12-17T22:23:12.994678188Z 26 PC: 1335d | Set disk transfer address
2018-12-17T22:23:12.99557166Z 79 PC: 13362 | Find next file
2018-12-17T22:23:13.002659353Z 61 PC: 1432c | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:23:13.006839722Z 60 PC: 1432c | Create or truncate file
2018-12-17T22:23:13.014152913Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.018572782Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:13.023166555Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.027220052Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:13.031896068Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.038901597Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:13.045815787Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.053079232Z 64 PC: 143ff | Write file or device (Write 1248 bytes on handle 6)
2018-12-17T22:23:13.060618626Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.062964627Z 62 PC: 1437c | Close file
2018-12-17T22:23:13.065321879Z 62 PC: 1437c | Close file
2018-12-17T22:23:13.072596333Z 26 PC: 1335d | Set disk transfer address
2018-12-17T22:23:13.073933327Z 79 PC: 13362 | Find next file
2018-12-17T22:23:13.07792307Z 61 PC: 1432c | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:23:13.084517479Z 60 PC: 1432c | Create or truncate file
2018-12-17T22:23:13.09668746Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.103557112Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:13.110523744Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.116961591Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:13.124141326Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.130854586Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:13.137868254Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.144850216Z 64 PC: 143ff | Write file or device (Write 1248 bytes on handle 6)
2018-12-17T22:23:13.152080123Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.153989772Z 62 PC: 1437c | Close file
2018-12-17T22:23:13.156694252Z 62 PC: 1437c | Close file
2018-12-17T22:23:13.164266768Z 26 PC: 1335d | Set disk transfer address
2018-12-17T22:23:13.165246169Z 79 PC: 13362 | Find next file
2018-12-17T22:23:13.169738599Z 61 PC: 1432c | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:23:13.176763109Z 60 PC: 1432c | Create or truncate file
2018-12-17T22:23:13.189092793Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.196616294Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:13.203985703Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.210845459Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:13.219568804Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.226490435Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:13.234359931Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.242328807Z 64 PC: 143ff | Write file or device (Write 1248 bytes on handle 6)
2018-12-17T22:23:13.24977298Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.251995653Z 62 PC: 1437c | Close file
2018-12-17T22:23:13.255013418Z 62 PC: 1437c | Close file
2018-12-17T22:23:13.262278149Z 26 PC: 1335d | Set disk transfer address
2018-12-17T22:23:13.263603415Z 79 PC: 13362 | Find next file
2018-12-17T22:23:13.268862153Z 61 PC: 1432c | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:23:13.273183756Z 60 PC: 1432c | Create or truncate file
2018-12-17T22:23:13.280708454Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.288229951Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:13.293480871Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.297885726Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:13.303089875Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.307591059Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:13.312977895Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.318215764Z 64 PC: 143ff | Write file or device (Write 1248 bytes on handle 6)
2018-12-17T22:23:13.323131679Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.324587112Z 62 PC: 1437c | Close file
2018-12-17T22:23:13.326762299Z 62 PC: 1437c | Close file
2018-12-17T22:23:13.337054416Z 26 PC: 1335d | Set disk transfer address
2018-12-17T22:23:13.337967899Z 79 PC: 13362 | Find next file
2018-12-17T22:23:13.340911798Z 61 PC: 1432c | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:23:13.345969295Z 60 PC: 1432c | Create or truncate file
2018-12-17T22:23:13.354370036Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.362346826Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:13.369905429Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.378579331Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:13.3993651Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.404665666Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:13.410048839Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.414750382Z 64 PC: 143ff | Write file or device (Write 1248 bytes on handle 6)
2018-12-17T22:23:13.419668651Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.422204028Z 62 PC: 1437c | Close file
2018-12-17T22:23:13.423638107Z 62 PC: 1437c | Close file
2018-12-17T22:23:13.428339441Z 26 PC: 1335d | Set disk transfer address
2018-12-17T22:23:13.42986116Z 79 PC: 13362 | Find next file
2018-12-17T22:23:13.43273009Z 61 PC: 1432c | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:23:13.437506896Z 60 PC: 1432c | Create or truncate file
2018-12-17T22:23:13.446572448Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.453237896Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:13.460480787Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.466033145Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:13.470882054Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.476012404Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:13.481503979Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.48811736Z 64 PC: 143ff | Write file or device (Write 1248 bytes on handle 6)
2018-12-17T22:23:13.493134653Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.495441342Z 62 PC: 1437c | Close file
2018-12-17T22:23:13.497394062Z 62 PC: 1437c | Close file
2018-12-17T22:23:13.502442179Z 26 PC: 1335d | Set disk transfer address
2018-12-17T22:23:13.503907134Z 79 PC: 13362 | Find next file
2018-12-17T22:23:13.506359766Z 61 PC: 1432c | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:23:13.51095113Z 60 PC: 1432c | Create or truncate file
2018-12-17T22:23:13.518898022Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.523419476Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:13.528337866Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.533376245Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:13.538357953Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.54343154Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:13.548768726Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.554354546Z 64 PC: 143ff | Write file or device (Write 1248 bytes on handle 6)
2018-12-17T22:23:13.560101575Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.562056636Z 62 PC: 1437c | Close file
2018-12-17T22:23:13.563443076Z 62 PC: 1437c | Close file
2018-12-17T22:23:13.569878738Z 26 PC: 1335d | Set disk transfer address
2018-12-17T22:23:13.570859786Z 79 PC: 13362 | Find next file
2018-12-17T22:23:13.574565519Z 61 PC: 1432c | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:23:13.58152136Z 60 PC: 1432c | Create or truncate file
2018-12-17T22:23:13.592014511Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.596417894Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:13.602310774Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.606779022Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:13.611975128Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.617917608Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:13.623693936Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.628267707Z 64 PC: 143ff | Write file or device (Write 1248 bytes on handle 6)
2018-12-17T22:23:13.634002309Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.635549041Z 62 PC: 1437c | Close file
2018-12-17T22:23:13.636872204Z 62 PC: 1437c | Close file
2018-12-17T22:23:13.642203344Z 26 PC: 1335d | Set disk transfer address
2018-12-17T22:23:13.643201708Z 79 PC: 13362 | Find next file
2018-12-17T22:23:13.648672524Z 61 PC: 1432c | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:23:13.656597012Z 60 PC: 1432c | Create or truncate file
2018-12-17T22:23:13.668607649Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.675254168Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:13.683296666Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.690486706Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:13.698242388Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.706327361Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:13.713611509Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.7207388Z 64 PC: 143ff | Write file or device (Write 1248 bytes on handle 6)
2018-12-17T22:23:13.72945624Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.731809905Z 62 PC: 1437c | Close file
2018-12-17T22:23:13.734037658Z 62 PC: 1437c | Close file
2018-12-17T22:23:13.742687147Z 26 PC: 1335d | Set disk transfer address
2018-12-17T22:23:13.744091195Z 79 PC: 13362 | Find next file
2018-12-17T22:23:13.747926494Z 61 PC: 1432c | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:23:13.755333796Z 60 PC: 1432c | Create or truncate file
2018-12-17T22:23:13.768430151Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.77563288Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:13.784437048Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.791650546Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:13.798981222Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.807312547Z 64 PC: 143ff | Write file or device (Write 2048 bytes on handle 6)
2018-12-17T22:23:13.814620095Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.822098179Z 64 PC: 143ff | Write file or device (Write 1248 bytes on handle 6)
2018-12-17T22:23:13.830605981Z 63 PC: 143ff | Read file or device (Read 2048 bytes on handle 5)
2018-12-17T22:23:13.833445635Z 62 PC: 1437c | Close file
2018-12-17T22:23:13.835681025Z 62 PC: 1437c | Close file
2018-12-17T22:23:13.843510431Z 26 PC: 1335d | Set disk transfer address
2018-12-17T22:23:13.844557923Z 79 PC: 13362 | Find next file
2018-12-17T22:23:13.847440915Z 42 PC: 13267 | Get date 0x13267: xor ah, ah
0x13269: les di, ptr [bp + 6]
0x1326c: stosw word ptr es:[di], ax
0x1326d: mov al, dl
0x1326f: les di, ptr [bp + 0xa]
0x13272: stosw word ptr es:[di], ax
0x13273: mov al, dh
0x13275: les di, ptr [bp + 0xe]
0x13278: stosw word ptr es:[di], ax
0x13279: xchg ax, cx
0x1327a: les di, ptr [bp + 0x12]
0x1327d: stosw word ptr es:[di], ax
0x1327e: pop bp
0x1327f: retf 0x10
0x13282: push bp
0x13283: mov bp, sp
0x13285: mov cx, word ptr [bp + 0xa]
0x13288: mov dh, byte ptr [bp + 8]
0x1328b: mov dl, byte ptr [bp + 6]
0x1328e: mov ah, 0x2b
2018-12-17T22:23:13.850002146Z 26 PC: 13339 | Set disk transfer address
2018-12-17T22:23:13.851238908Z 78 PC: 13345 | Find first file
2018-12-17T22:23:13.858058872Z 60 PC: 13fa6 | Create or truncate file
2018-12-17T22:23:13.875652146Z 68 PC: 13fbf | I/O control for devices (Set for = 'SLEEP.COM')
2018-12-17T22:23:13.877511489Z 64 PC: 1409d | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:23:13.880185195Z 62 PC: 140dc | Close file
2018-12-17T22:23:13.887922575Z 26 PC: 1335d | Set disk transfer address
2018-12-17T22:23:13.889185327Z 79 PC: 13362 | Find next file
2018-12-17T22:23:13.895217231Z 60 PC: 13fa6 | Create or truncate file
2018-12-17T22:23:13.907441913Z 68 PC: 13fbf | I/O control for devices (Set for = 'PRINT.S')
2018-12-17T22:23:13.90906302Z 64 PC: 1409d | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:23:13.912238458Z 62 PC: 140dc | Close file
2018-12-17T22:23:13.919499321Z 26 PC: 1335d | Set disk transfer address
2018-12-17T22:23:13.920585059Z 79 PC: 13362 | Find next file
2018-12-17T22:23:13.924640685Z 60 PC: 13fa6 | Create or truncate file
2018-12-17T22:23:13.936874964Z 68 PC: 13fbf | I/O control for devices (Set for = 'PRINT.COM')
2018-12-17T22:23:13.938881914Z 64 PC: 1409d | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:23:13.942251121Z 62 PC: 140dc | Close file
2018-12-17T22:23:13.949713964Z 26 PC: 1335d | Set disk transfer address
2018-12-17T22:23:13.950951468Z 79 PC: 13362 | Find next file
2018-12-17T22:23:13.955772831Z 60 PC: 13fa6 | Create or truncate file
2018-12-17T22:23:13.968020179Z 68 PC: 13fbf | I/O control for devices (Set for = 'HELLO.COM')
2018-12-17T22:23:13.969863225Z 64 PC: 1409d | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:23:13.972932809Z 62 PC: 140dc | Close file
2018-12-17T22:23:13.980922686Z 26 PC: 1335d | Set disk transfer address
2018-12-17T22:23:13.983719066Z 79 PC: 13362 | Find next file
2018-12-17T22:23:13.987020752Z 60 PC: 13fa6 | Create or truncate file
2018-12-17T22:23:13.998970732Z 68 PC: 13fbf | I/O control for devices (Set for = 'PHANG.COM')
2018-12-17T22:23:14.002230902Z 64 PC: 1409d | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:23:14.005491971Z 62 PC: 140dc | Close file
2018-12-17T22:23:14.016493937Z 26 PC: 1335d | Set disk transfer address
2018-12-17T22:23:14.019904485Z 79 PC: 13362 | Find next file
2018-12-17T22:23:14.023831213Z 60 PC: 13fa6 | Create or truncate file
2018-12-17T22:23:14.040016374Z 68 PC: 13fbf | I/O control for devices (Set for = 'PRINTA~1.COM')
2018-12-17T22:23:14.042376764Z 64 PC: 1409d | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:23:14.045211265Z 62 PC: 140dc | Close file
2018-12-17T22:23:14.052601327Z 26 PC: 1335d | Set disk transfer address
2018-12-17T22:23:14.055035683Z 79 PC: 13362 | Find next file
2018-12-17T22:23:14.058905144Z 60 PC: 13fa6 | Create or truncate file
2018-12-17T22:23:14.072121864Z 68 PC: 13fbf | I/O control for devices (Set for = 'MANDEL.COM')
2018-12-17T22:23:14.07403947Z 64 PC: 1409d | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:23:14.076665691Z 62 PC: 140dc | Close file
2018-12-17T22:23:14.08564668Z 26 PC: 1335d | Set disk transfer address
2018-12-17T22:23:14.086831068Z 79 PC: 13362 | Find next file
2018-12-17T22:23:14.090015275Z 60 PC: 13fa6 | Create or truncate file
2018-12-17T22:23:14.103697444Z 68 PC: 13fbf | I/O control for devices (Set for = 'PAH.COM')
2018-12-17T22:23:14.105320877Z 64 PC: 1409d | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:23:14.10825019Z 62 PC: 140dc | Close file
2018-12-17T22:23:14.117047703Z 26 PC: 1335d | Set disk transfer address
2018-12-17T22:23:14.118264039Z 79 PC: 13362 | Find next file
2018-12-17T22:23:14.121426493Z 60 PC: 13fa6 | Create or truncate file
2018-12-17T22:23:14.134951982Z 68 PC: 13fbf | I/O control for devices (Set for = 'TEST.EXE')
2018-12-17T22:23:14.136749806Z 64 PC: 1409d | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:23:14.139344767Z 62 PC: 140dc | Close file
2018-12-17T22:23:14.147688208Z 26 PC: 1335d | Set disk transfer address
2018-12-17T22:23:14.149088082Z 79 PC: 13362 | Find next file
2018-12-17T22:23:14.153508349Z 37 PC: 13b55 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:23:14.155039222Z 37 PC: 13b55 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:23:14.15651397Z 37 PC: 13b55 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:23:14.159112753Z 37 PC: 13b55 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:23:14.160534873Z 37 PC: 13b55 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:23:14.161896087Z 37 PC: 13b55 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:23:14.16433071Z 37 PC: 13b55 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:23:14.165708711Z 37 PC: 13b55 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:23:14.167060385Z 37 PC: 13b55 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:23:14.169337461Z 37 PC: 13b55 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:23:14.170813773Z 37 PC: 13b55 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:23:14.171804257Z 37 PC: 13b55 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:23:14.173332942Z 37 PC: 13b55 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:23:14.174346077Z 37 PC: 13b55 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:23:14.175325515Z 37 PC: 13b55 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:23:14.176685669Z 37 PC: 13b55 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:23:14.178155021Z 37 PC: 13b55 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:23:14.179852456Z 37 PC: 13b55 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:23:14.180981739Z 76 PC: 13b94 | Terminate with return code (Return code = '1')