Sample viewer

vx.netlux.org/Virus.DOS.HLLP.Doggy_II.6668

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:41:48.523226216Z 53 PC: 140ea | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:48.525877402Z 53 PC: 140ea | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:48.527061796Z 53 PC: 140ea | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:48.528236404Z 53 PC: 140ea | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:48.530577773Z 53 PC: 140ea | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:48.531498053Z 53 PC: 140ea | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:48.532376742Z 53 PC: 140ea | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:48.533931535Z 53 PC: 140ea | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:48.534822978Z 53 PC: 140ea | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:48.535669644Z 53 PC: 140ea | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:48.536986503Z 53 PC: 140ea | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:48.538003564Z 53 PC: 140ea | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:48.538841651Z 53 PC: 140ea | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:48.540223167Z 53 PC: 140ea | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:48.541128608Z 53 PC: 140ea | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:48.541917415Z 53 PC: 140ea | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:48.543618966Z 53 PC: 140ea | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:48.544725783Z 53 PC: 140ea | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:48.545804786Z 53 PC: 140ea | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:48.5469984Z 37 PC: 140ff | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:48.548575229Z 37 PC: 14107 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:48.550136579Z 37 PC: 1410f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:48.551608125Z 37 PC: 14117 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:48.553383454Z 68 PC: 14ced | I/O control for devices (Set for = '')
2018-12-17T22:41:48.623730775Z 37 PC: 13881 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:48.625808809Z 42 PC: 13e07 | Get date 0x13e07: xor ah, ah
0x13e09: les di, ptr [bp + 6]
0x13e0c: stosw word ptr es:[di], ax
0x13e0d: mov al, dl
0x13e0f: les di, ptr [bp + 0xa]
0x13e12: stosw word ptr es:[di], ax
0x13e13: mov al, dh
0x13e15: les di, ptr [bp + 0xe]
0x13e18: stosw word ptr es:[di], ax
0x13e19: xchg ax, cx
0x13e1a: les di, ptr [bp + 0x12]
0x13e1d: stosw word ptr es:[di], ax
0x13e1e: pop bp
0x13e1f: retf 0x10
0x13e22: push bp
0x13e23: mov bp, sp
0x13e25: mov cx, word ptr [bp + 0xa]
0x13e28: mov dh, byte ptr [bp + 8]
0x13e2b: mov dl, byte ptr [bp + 6]
0x13e2e: mov ah, 0x2b
2018-12-17T22:41:48.628625431Z 48 PC: 148fe | Get DOS version
2018-12-17T22:41:48.634572595Z 61 PC: 147b0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:41:48.642048771Z 66 PC: 14dec | Move file pointer
2018-12-17T22:41:48.644734815Z 66 PC: 14dfa | Move file pointer
2018-12-17T22:41:48.64695232Z 66 PC: 14e08 | Move file pointer
2018-12-17T22:41:48.648832882Z 62 PC: 14800 | Close file
2018-12-17T22:41:48.652028142Z 26 PC: 13e97 | Set disk transfer address
2018-12-17T22:41:48.653583373Z 78 PC: 13ea3 | Find first file
2018-12-17T22:41:48.659610947Z 26 PC: 13e97 | Set disk transfer address
2018-12-17T22:41:48.661670059Z 78 PC: 13ea3 | Find first file
2018-12-17T22:41:48.666923466Z 26 PC: 13ebb | Set disk transfer address
2018-12-17T22:41:48.667996648Z 79 PC: 13ec0 | Find next file
2018-12-17T22:41:48.671451215Z 26 PC: 13ebb | Set disk transfer address
2018-12-17T22:41:48.672514933Z 79 PC: 13ec0 | Find next file
2018-12-17T22:41:48.675105644Z 26 PC: 13ebb | Set disk transfer address
2018-12-17T22:41:48.676696521Z 79 PC: 13ec0 | Find next file
2018-12-17T22:41:48.679935386Z 26 PC: 13e97 | Set disk transfer address
2018-12-17T22:41:48.681253846Z 78 PC: 13ea3 | Find first file
2018-12-17T22:41:48.694438727Z 61 PC: 147b0 | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:41:48.701318833Z 66 PC: 14dec | Move file pointer
2018-12-17T22:41:48.702635374Z 66 PC: 14dfa | Move file pointer
2018-12-17T22:41:48.705156765Z 66 PC: 14e08 | Move file pointer
2018-12-17T22:41:48.706867676Z 66 PC: 14dec | Move file pointer
2018-12-17T22:41:48.708223229Z 66 PC: 14dfa | Move file pointer
2018-12-17T22:41:48.710186822Z 66 PC: 14e08 | Move file pointer
2018-12-17T22:41:48.711589594Z 66 PC: 14dec | Move file pointer
2018-12-17T22:41:48.712917009Z 66 PC: 14dfa | Move file pointer
2018-12-17T22:41:48.714862199Z 66 PC: 14e08 | Move file pointer
2018-12-17T22:41:48.716270431Z 66 PC: 148e2 | Move file pointer
2018-12-17T22:41:48.717670119Z 63 PC: 14842 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:41:48.725346279Z 63 PC: 14842 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:41:48.728036981Z 63 PC: 14842 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:41:48.730655343Z 63 PC: 14842 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:41:48.73464596Z 62 PC: 14800 | Close file
2018-12-17T22:41:48.73682296Z 26 PC: 14027 | Set disk transfer address
2018-12-17T22:41:48.737883356Z 26 PC: 13ebb | Set disk transfer address
2018-12-17T22:41:48.73942056Z 79 PC: 13ec0 | Find next file
2018-12-17T22:41:48.745963402Z 26 PC: 13ebb | Set disk transfer address
2018-12-17T22:41:48.746908484Z 79 PC: 13ec0 | Find next file
2018-12-17T22:41:48.751541268Z 26 PC: 13e97 | Set disk transfer address
2018-12-17T22:41:48.752768731Z 78 PC: 13ea3 | Find first file
2018-12-17T22:41:48.762671618Z 61 PC: 147b0 | Open file (Filename = 'C:\WINDOWS\SETUP.EXE')
2018-12-17T22:41:48.770527106Z 66 PC: 14dec | Move file pointer
2018-12-17T22:41:48.771850326Z 66 PC: 14dfa | Move file pointer
2018-12-17T22:41:48.773196128Z 66 PC: 14e08 | Move file pointer
2018-12-17T22:41:48.775560539Z 66 PC: 14dec | Move file pointer
2018-12-17T22:41:48.776904173Z 66 PC: 14dfa | Move file pointer
2018-12-17T22:41:48.778247108Z 66 PC: 14e08 | Move file pointer
2018-12-17T22:41:48.78024308Z 66 PC: 14dec | Move file pointer
2018-12-17T22:41:48.781493054Z 66 PC: 14dfa | Move file pointer
2018-12-17T22:41:48.782684819Z 66 PC: 14e08 | Move file pointer
2018-12-17T22:41:48.785385519Z 66 PC: 148e2 | Move file pointer
2018-12-17T22:41:48.786939591Z 63 PC: 14842 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:41:48.794537628Z 63 PC: 14842 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:41:48.79876201Z 63 PC: 14842 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:41:48.801543121Z 63 PC: 14842 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:41:48.804795494Z 62 PC: 14800 | Close file
2018-12-17T22:41:48.810087536Z 26 PC: 14027 | Set disk transfer address
2018-12-17T22:41:48.811420399Z 26 PC: 13ebb | Set disk transfer address
2018-12-17T22:41:48.812569303Z 79 PC: 13ec0 | Find next file
2018-12-17T22:41:48.815972524Z 26 PC: 13ebb | Set disk transfer address
2018-12-17T22:41:48.817003107Z 79 PC: 13ec0 | Find next file
2018-12-17T22:41:48.819497404Z 26 PC: 13ebb | Set disk transfer address
2018-12-17T22:41:48.821927145Z 79 PC: 13ec0 | Find next file
2018-12-17T22:41:48.833200497Z 48 PC: 148fe | Get DOS version
2018-12-17T22:41:48.834755257Z 61 PC: 147b0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:41:48.841525882Z 63 PC: 14883 | Read file or device (Read 6682 bytes on handle 5)
2018-12-17T22:41:48.850459816Z 62 PC: 14800 | Close file
2018-12-17T22:41:48.85247596Z 61 PC: 147b0 | Open file (Filename = 'C:\WINDOWS\SETUP.EXE')
2018-12-17T22:41:48.8596008Z 63 PC: 14883 | Read file or device (Read 6682 bytes on handle 5)
2018-12-17T22:41:48.867881709Z 66 PC: 148e2 | Move file pointer
2018-12-17T22:41:48.869732623Z 64 PC: 14883 | Write file or device (Write 6682 bytes on handle 5)
2018-12-17T22:41:49.214365294Z 66 PC: 14dec | Move file pointer
2018-12-17T22:41:49.216600236Z 66 PC: 14dfa | Move file pointer
2018-12-17T22:41:49.218381109Z 66 PC: 14e08 | Move file pointer
2018-12-17T22:41:49.220364261Z 66 PC: 148e2 | Move file pointer
2018-12-17T22:41:49.223158777Z 64 PC: 14883 | Write file or device (Write 6682 bytes on handle 5)
2018-12-17T22:41:49.235668323Z 64 PC: 14883 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:41:49.238508198Z 62 PC: 14800 | Close file
2018-12-17T22:41:49.247390947Z 48 PC: 148fe | Get DOS version
2018-12-17T22:41:49.248866077Z 61 PC: 147b0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:41:49.256293981Z 63 PC: 14883 | Read file or device (Read 6682 bytes on handle 5)
2018-12-17T22:41:49.264353469Z 66 PC: 14dec | Move file pointer
2018-12-17T22:41:49.265681836Z 66 PC: 14dfa | Move file pointer
2018-12-17T22:41:49.267028425Z 66 PC: 14e08 | Move file pointer
2018-12-17T22:41:49.270297997Z 66 PC: 148e2 | Move file pointer
2018-12-17T22:41:49.271800959Z 63 PC: 14883 | Read file or device (Read 6682 bytes on handle 5)
2018-12-17T22:41:49.279986605Z 66 PC: 14dec | Move file pointer
2018-12-17T22:41:49.282957039Z 66 PC: 14dfa | Move file pointer
2018-12-17T22:41:49.284736259Z 66 PC: 14e08 | Move file pointer
2018-12-17T22:41:49.286393497Z 66 PC: 148e2 | Move file pointer
2018-12-17T22:41:49.288978046Z 64 PC: 147e1 | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:41:49.301818774Z 66 PC: 148e2 | Move file pointer
2018-12-17T22:41:49.303173472Z 64 PC: 14883 | Write file or device (Write 6682 bytes on handle 5)
2018-12-17T22:41:49.3115545Z 62 PC: 14800 | Close file
2018-12-17T22:41:49.319267653Z 53 PC: 14064 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:49.320326153Z 37 PC: 1406d | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:49.322321705Z 53 PC: 14064 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:49.323710508Z 37 PC: 1406d | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:49.325077866Z 53 PC: 14064 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:49.326954876Z 37 PC: 1406d | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:49.328040605Z 53 PC: 14064 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:49.329131698Z 37 PC: 1406d | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:49.330969477Z 53 PC: 14064 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:49.332056969Z 37 PC: 1406d | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:49.33304449Z 53 PC: 14064 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:49.33466477Z 37 PC: 1406d | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:49.335698881Z 53 PC: 14064 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:49.336772829Z 37 PC: 1406d | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:49.338252502Z 53 PC: 14064 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:49.339319548Z 37 PC: 1406d | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:49.340347532Z 53 PC: 14064 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:49.342097298Z 37 PC: 1406d | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:49.343125562Z 53 PC: 14064 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:49.344189781Z 37 PC: 1406d | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:49.345685909Z 53 PC: 14064 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:49.346758445Z 37 PC: 1406d | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:49.347957592Z 53 PC: 14064 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:49.349218223Z 37 PC: 1406d | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:49.350455041Z 53 PC: 14064 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:49.352245705Z 37 PC: 1406d | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:49.353398417Z 53 PC: 14064 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:49.354698162Z 37 PC: 1406d | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:49.356912667Z 53 PC: 14064 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:49.358258274Z 37 PC: 1406d | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:49.35957917Z 53 PC: 14064 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:49.361833124Z 37 PC: 1406d | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:49.363131228Z 53 PC: 14064 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:49.364443917Z 37 PC: 1406d | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:49.367420196Z 53 PC: 14064 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:49.368754089Z 37 PC: 1406d | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:49.370032805Z 53 PC: 14064 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:49.3725637Z 37 PC: 1406d | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:49.3738899Z 48 PC: 148fe | Get DOS version
2018-12-17T22:41:49.375401691Z 41 PC: 13fb3 | Parse filename
2018-12-17T22:41:49.37735083Z 41 PC: 13fc1 | Parse filename
2018-12-17T22:41:49.378808285Z 75 PC: 13fcc | Execute program
2018-12-17T22:41:49.394200641Z 9 PC: 20cc2 | Display string (String= 'Goat file (EXE). Size=00007400h/0000029696d bytes. ')
2018-12-17T22:41:49.398561349Z 76 PC: 20cc6 | Terminate with return code (Return code = '36')
2018-12-17T22:41:49.401380016Z 53 PC: 14064 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:49.40240253Z 37 PC: 1406d | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:49.409345264Z 53 PC: 14064 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:49.410347967Z 37 PC: 1406d | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:49.411176039Z 53 PC: 14064 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:49.412580687Z 37 PC: 1406d | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:49.413598019Z 53 PC: 14064 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:49.414661959Z 37 PC: 1406d | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:49.416455522Z 53 PC: 14064 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:49.417519825Z 37 PC: 1406d | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:49.418511397Z 53 PC: 14064 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:49.420129041Z 37 PC: 1406d | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:49.421110414Z 53 PC: 14064 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:49.422134368Z 37 PC: 1406d | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:49.424051458Z 53 PC: 14064 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:49.425272891Z 37 PC: 1406d | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:49.426669805Z 53 PC: 14064 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:49.428434748Z 37 PC: 1406d | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:49.429835562Z 53 PC: 14064 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:49.431457403Z 37 PC: 1406d | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:49.43321462Z 53 PC: 14064 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:49.434309387Z 37 PC: 1406d | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:49.435849892Z 53 PC: 14064 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:49.437183597Z 37 PC: 1406d | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:49.438632293Z 53 PC: 14064 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:49.440518742Z 37 PC: 1406d | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:49.441990451Z 53 PC: 14064 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:49.443256807Z 37 PC: 1406d | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:49.445410993Z 53 PC: 14064 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:49.446706301Z 37 PC: 1406d | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:49.447906399Z 53 PC: 14064 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:49.450790862Z 37 PC: 1406d | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:49.452196176Z 53 PC: 14064 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:49.453593679Z 37 PC: 1406d | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:49.455720198Z 53 PC: 14064 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:49.456824331Z 37 PC: 1406d | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:49.457885017Z 53 PC: 14064 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:49.459996396Z 37 PC: 1406d | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:49.461082222Z 48 PC: 148fe | Get DOS version
2018-12-17T22:41:49.463199863Z 61 PC: 147b0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:41:49.470557117Z 64 PC: 14883 | Write file or device (Write 6682 bytes on handle 5)
2018-12-17T22:41:49.478773015Z 66 PC: 14dec | Move file pointer
2018-12-17T22:41:49.480017814Z 66 PC: 14dfa | Move file pointer
2018-12-17T22:41:49.482258309Z 66 PC: 14e08 | Move file pointer
2018-12-17T22:41:49.483533208Z 66 PC: 148e2 | Move file pointer
2018-12-17T22:41:49.484941236Z 64 PC: 14883 | Write file or device (Write 6682 bytes on handle 5)
2018-12-17T22:41:49.493853674Z 64 PC: 14883 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:41:49.496805913Z 62 PC: 14800 | Close file
2018-12-17T22:41:49.506117358Z 37 PC: 14241 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:49.508240202Z 37 PC: 14241 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:49.509908987Z 37 PC: 14241 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:41:49.511803287Z 37 PC: 14241 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:41:49.514533982Z 37 PC: 14241 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:49.516185732Z 37 PC: 14241 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:49.518033849Z 37 PC: 14241 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:49.519705305Z 37 PC: 14241 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:49.520758582Z 37 PC: 14241 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:49.522232118Z 37 PC: 14241 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:49.523760426Z 37 PC: 14241 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:49.52520595Z 37 PC: 14241 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:49.526973285Z 37 PC: 14241 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:49.528096911Z 37 PC: 14241 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:49.529205843Z 37 PC: 14241 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:49.53078121Z 37 PC: 14241 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:49.531935838Z 37 PC: 14241 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:49.533142634Z 37 PC: 14241 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:41:49.534533739Z 37 PC: 14241 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:41:49.535551483Z 76 PC: 14280 | Terminate with return code (Return code = '0')