Sample viewer

vx.netlux.org/Virus.DOS.HLLP.5824

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:23:26.397821977Z 53 PC: 133c6 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:23:26.399891335Z 53 PC: 133c6 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:23:26.400981723Z 53 PC: 133c6 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:23:26.402094838Z 53 PC: 133c6 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:23:26.403690854Z 53 PC: 133c6 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:23:26.405091366Z 53 PC: 133c6 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:23:26.406354836Z 53 PC: 133c6 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:23:26.408047268Z 53 PC: 133c6 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:23:26.409408963Z 53 PC: 133c6 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:23:26.410666438Z 53 PC: 133c6 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:23:26.412097902Z 53 PC: 133c6 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:23:26.413630927Z 53 PC: 133c6 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:23:26.414882937Z 53 PC: 133c6 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:23:26.416177762Z 53 PC: 133c6 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:23:26.417578536Z 53 PC: 133c6 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:23:26.418901034Z 53 PC: 133c6 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:23:26.420229793Z 53 PC: 133c6 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:23:26.4221099Z 53 PC: 133c6 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:23:26.423227267Z 37 PC: 133db | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:23:26.424228722Z 37 PC: 133e3 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:23:26.425533062Z 37 PC: 133eb | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:23:26.433647553Z 37 PC: 133f3 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:23:26.435038876Z 68 PC: 139f3 | I/O control for devices (Set for = '')
2018-12-17T22:23:26.437390454Z 48 PC: 13eef | Get DOS version
2018-12-17T22:23:26.43946356Z 67 PC: 13195 | Get or set file attributes
2018-12-17T22:23:26.445020362Z 67 PC: 131bc | Get or set file attributes
2018-12-17T22:23:26.460180462Z 54 PC: 1315c | Get free disk space
2018-12-17T22:23:26.469833827Z 61 PC: 13d15 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:23:26.476843445Z 66 PC: 13e47 | Move file pointer
2018-12-17T22:23:26.485497712Z 63 PC: 13de8 | Read file or device (Read 5824 bytes on handle 5)
2018-12-17T22:23:26.493015136Z 62 PC: 13d65 | Close file
2018-12-17T22:23:26.494838558Z 26 PC: 131ed | Set disk transfer address
2018-12-17T22:23:26.501832134Z 78 PC: 131f9 | Find first file
2018-12-17T22:23:26.507976051Z 26 PC: 13211 | Set disk transfer address
2018-12-17T22:23:26.509033784Z 79 PC: 13216 | Find next file
2018-12-17T22:23:26.512420208Z 26 PC: 13211 | Set disk transfer address
2018-12-17T22:23:26.513413479Z 79 PC: 13216 | Find next file
2018-12-17T22:23:26.51665589Z 26 PC: 13211 | Set disk transfer address
2018-12-17T22:23:26.518379929Z 79 PC: 13216 | Find next file
2018-12-17T22:23:26.522178571Z 26 PC: 13211 | Set disk transfer address
2018-12-17T22:23:26.523467609Z 79 PC: 13216 | Find next file
2018-12-17T22:23:26.527636315Z 26 PC: 13211 | Set disk transfer address
2018-12-17T22:23:26.528935858Z 79 PC: 13216 | Find next file
2018-12-17T22:23:26.532050795Z 26 PC: 13211 | Set disk transfer address
2018-12-17T22:23:26.534170439Z 79 PC: 13216 | Find next file
2018-12-17T22:23:26.537049189Z 26 PC: 13211 | Set disk transfer address
2018-12-17T22:23:26.538124744Z 79 PC: 13216 | Find next file
2018-12-17T22:23:26.5415003Z 26 PC: 13211 | Set disk transfer address
2018-12-17T22:23:26.542494433Z 79 PC: 13216 | Find next file
2018-12-17T22:23:26.545303435Z 26 PC: 13211 | Set disk transfer address
2018-12-17T22:23:26.546968154Z 79 PC: 13216 | Find next file
2018-12-17T22:23:26.549676739Z 26 PC: 13211 | Set disk transfer address
2018-12-17T22:23:26.550560459Z 79 PC: 13216 | Find next file
2018-12-17T22:23:26.55386111Z 26 PC: 13211 | Set disk transfer address
2018-12-17T22:23:26.554854387Z 79 PC: 13216 | Find next file
2018-12-17T22:23:26.55769915Z 26 PC: 13211 | Set disk transfer address
2018-12-17T22:23:26.559262276Z 79 PC: 13216 | Find next file
2018-12-17T22:23:26.562105285Z 26 PC: 13211 | Set disk transfer address
2018-12-17T22:23:26.563050301Z 79 PC: 13216 | Find next file
2018-12-17T22:23:26.566500235Z 26 PC: 13211 | Set disk transfer address
2018-12-17T22:23:26.567532695Z 79 PC: 13216 | Find next file
2018-12-17T22:23:26.570660454Z 67 PC: 131bc | Get or set file attributes
2018-12-17T22:23:26.58112361Z 61 PC: 13d15 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:23:26.587845078Z 63 PC: 13de8 | Read file or device (Read 20 bytes on handle 5)
2018-12-17T22:23:26.590528461Z 62 PC: 13d65 | Close file
2018-12-17T22:23:26.592921164Z 67 PC: 131bc | Get or set file attributes
2018-12-17T22:23:26.605879351Z 26 PC: 13211 | Set disk transfer address
2018-12-17T22:23:26.606935819Z 79 PC: 13216 | Find next file
2018-12-17T22:23:26.609966257Z 42 PC: 130e7 | Get date 0x130e7: xor ah, ah
0x130e9: les di, ptr [bp + 6]
0x130ec: stosw word ptr es:[di], ax
0x130ed: mov al, dl
0x130ef: les di, ptr [bp + 0xa]
0x130f2: stosw word ptr es:[di], ax
0x130f3: mov al, dh
0x130f5: les di, ptr [bp + 0xe]
0x130f8: stosw word ptr es:[di], ax
0x130f9: xchg ax, cx
0x130fa: les di, ptr [bp + 0x12]
0x130fd: stosw word ptr es:[di], ax
0x130fe: pop bp
0x130ff: retf 0x10
0x13102: push bp
0x13103: mov bp, sp
0x13105: mov cx, word ptr [bp + 0xa]
0x13108: mov dh, byte ptr [bp + 8]
0x1310b: mov dl, byte ptr [bp + 6]
0x1310e: mov ah, 0x2b
2018-12-17T22:23:26.612101883Z 61 PC: 13d15 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:23:26.618696759Z 66 PC: 13eb1 | Move file pointer
2018-12-17T22:23:26.620713253Z 66 PC: 13ebf | Move file pointer
2018-12-17T22:23:26.62198738Z 66 PC: 13ecd | Move file pointer
2018-12-17T22:23:26.623319479Z 66 PC: 13e47 | Move file pointer
2018-12-17T22:23:26.625388064Z 63 PC: 13de8 | Read file or device (Read 5824 bytes on handle 5)
2018-12-17T22:23:26.633552938Z 66 PC: 13e47 | Move file pointer
2018-12-17T22:23:26.635106606Z 64 PC: 13de8 | Write file or device (Write 5824 bytes on handle 5)
2018-12-17T22:23:26.645491195Z 66 PC: 13eb1 | Move file pointer
2018-12-17T22:23:26.646993041Z 66 PC: 13ebf | Move file pointer
2018-12-17T22:23:26.648997125Z 66 PC: 13ecd | Move file pointer
2018-12-17T22:23:26.651689395Z 66 PC: 13e47 | Move file pointer
2018-12-17T22:23:26.653397775Z 64 PC: 13d46 | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:23:26.66186676Z 62 PC: 13d65 | Close file
2018-12-17T22:23:26.669844163Z 67 PC: 131bc | Get or set file attributes
2018-12-17T22:23:26.675972892Z 53 PC: 13254 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:23:26.676923015Z 37 PC: 1325d | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:23:26.678117248Z 53 PC: 13254 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:23:26.679187836Z 37 PC: 1325d | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:23:26.680072501Z 53 PC: 13254 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:23:26.681566111Z 37 PC: 1325d | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:23:26.682696902Z 53 PC: 13254 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:23:26.68359688Z 37 PC: 1325d | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:23:26.685088395Z 53 PC: 13254 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:23:26.686135146Z 37 PC: 1325d | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:23:26.687023227Z 53 PC: 13254 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:23:26.688464441Z 37 PC: 1325d | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:23:26.689542783Z 53 PC: 13254 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:23:26.690456025Z 37 PC: 1325d | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:23:26.691880156Z 53 PC: 13254 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:23:26.692864666Z 37 PC: 1325d | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:23:26.693786267Z 53 PC: 13254 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:23:26.695411857Z 37 PC: 1325d | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:23:26.696457589Z 53 PC: 13254 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:23:26.697333158Z 37 PC: 1325d | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:23:26.698697798Z 53 PC: 13254 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:23:26.699677784Z 37 PC: 1325d | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:23:26.700566201Z 53 PC: 13254 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:23:26.702089431Z 37 PC: 1325d | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:23:26.703055429Z 53 PC: 13254 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:23:26.703935913Z 37 PC: 1325d | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:23:26.705391154Z 53 PC: 13254 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:23:26.706393755Z 37 PC: 1325d | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:23:26.70725659Z 53 PC: 13254 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:23:26.708675819Z 37 PC: 1325d | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:23:26.709949777Z 53 PC: 13254 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:23:26.710849501Z 37 PC: 1325d | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:23:26.712441321Z 53 PC: 13254 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:23:26.713501582Z 37 PC: 1325d | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:23:26.714371898Z 53 PC: 13254 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:23:26.715845055Z 37 PC: 1325d | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:23:26.716979741Z 41 PC: 132dc | Parse filename
2018-12-17T22:23:26.718399545Z 41 PC: 132ea | Parse filename
2018-12-17T22:23:26.720066671Z 75 PC: 132f5 | Execute program
2018-12-17T22:23:26.735201142Z 9 PC: 1b39a | Display string (String= '�����JWUW������������������G������!� �� ��u� . ���u �>�t�_��>�D��E�W��61��6'�������>�uC�#��%��%��%����'������>�u 3��')
2018-12-17T22:23:26.739495683Z 76 PC: 1b3a0 | Terminate with return code (Return code = '0')
2018-12-17T22:23:26.743922157Z 53 PC: 13254 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:23:26.745350851Z 37 PC: 1325d | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:23:26.746358617Z 53 PC: 13254 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:23:26.747985197Z 37 PC: 1325d | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:23:26.748957629Z 53 PC: 13254 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:23:26.749963333Z 37 PC: 1325d | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:23:26.751547689Z 53 PC: 13254 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:23:26.752532512Z 37 PC: 1325d | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:23:26.753464253Z 53 PC: 13254 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:23:26.759258358Z 37 PC: 1325d | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:23:26.76039137Z 53 PC: 13254 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:23:26.786615512Z 37 PC: 1325d | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:23:26.788911491Z 53 PC: 13254 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:23:26.790058201Z 37 PC: 1325d | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:23:26.791174395Z 53 PC: 13254 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:23:26.793305113Z 37 PC: 1325d | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:23:26.794462924Z 53 PC: 13254 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:23:26.795518694Z 37 PC: 1325d | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:23:26.797286366Z 53 PC: 13254 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:23:26.798250077Z 37 PC: 1325d | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:23:26.799176567Z 53 PC: 13254 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:23:26.80206059Z 37 PC: 1325d | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:23:26.805687602Z 53 PC: 13254 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:23:26.806980452Z 37 PC: 1325d | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:23:26.808699376Z 53 PC: 13254 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:23:26.809765508Z 37 PC: 1325d | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:23:26.810726759Z 53 PC: 13254 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:23:26.81234141Z 37 PC: 1325d | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:23:26.81348014Z 53 PC: 13254 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:23:26.814611765Z 37 PC: 1325d | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:23:26.816556442Z 53 PC: 13254 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:23:26.817906948Z 37 PC: 1325d | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:23:26.818961271Z 53 PC: 13254 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:23:26.820708254Z 37 PC: 1325d | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:23:26.821770805Z 53 PC: 13254 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:23:26.823028342Z 37 PC: 1325d | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:23:26.825707636Z 61 PC: 13d15 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:23:26.832548827Z 66 PC: 13eb1 | Move file pointer
2018-12-17T22:23:26.841250348Z 66 PC: 13ebf | Move file pointer
2018-12-17T22:23:26.84701539Z 66 PC: 13ecd | Move file pointer
2018-12-17T22:23:26.855753828Z 66 PC: 13e47 | Move file pointer
2018-12-17T22:23:26.858352564Z 64 PC: 13de8 | Write file or device (Write 5824 bytes on handle 5)
2018-12-17T22:23:26.867021184Z 66 PC: 13e47 | Move file pointer
2018-12-17T22:23:26.868785Z 64 PC: 13de8 | Write file or device (Write 5824 bytes on handle 5)
2018-12-17T22:23:26.890560069Z 62 PC: 13d65 | Close file
2018-12-17T22:23:26.899685862Z 64 PC: 13af6 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:23:26.901323903Z 37 PC: 134d5 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:23:26.903668269Z 37 PC: 134d5 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:23:26.905349269Z 37 PC: 134d5 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:23:26.906658855Z 37 PC: 134d5 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:23:26.908958596Z 37 PC: 134d5 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:23:26.910383062Z 37 PC: 134d5 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:23:26.911697698Z 37 PC: 134d5 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:23:26.914397473Z 37 PC: 134d5 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:23:26.916697636Z 37 PC: 134d5 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:23:26.917864792Z 37 PC: 134d5 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:23:26.919907618Z 37 PC: 134d5 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:23:26.921885622Z 37 PC: 134d5 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:23:26.923160183Z 37 PC: 134d5 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:23:26.925102635Z 37 PC: 134d5 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:23:26.926669971Z 37 PC: 134d5 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:23:26.927941454Z 37 PC: 134d5 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:23:26.92982898Z 37 PC: 134d5 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:23:26.930885642Z 37 PC: 134d5 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:23:26.931919387Z 76 PC: 13514 | Terminate with return code (Return code = '0')