Sample viewer

vx.netlux.org/Virus.DOS.HLLC.Invader.7503

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:44:18.648606708Z 53 PC: 1452a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:44:18.650545086Z 53 PC: 1452a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:44:18.652312088Z 53 PC: 1452a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:44:18.653652437Z 53 PC: 1452a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:44:18.656495416Z 53 PC: 1452a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:44:18.658566335Z 53 PC: 1452a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:44:18.660247974Z 53 PC: 1452a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:44:18.661996024Z 53 PC: 1452a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:44:18.664167607Z 53 PC: 1452a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:44:18.665693385Z 53 PC: 1452a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:44:18.667370439Z 53 PC: 1452a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:44:18.669888625Z 53 PC: 1452a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:44:18.671488499Z 53 PC: 1452a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:44:18.672815122Z 53 PC: 1452a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:44:18.674660236Z 53 PC: 1452a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:44:18.676083807Z 53 PC: 1452a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:44:18.67745856Z 53 PC: 1452a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:44:18.679174652Z 53 PC: 1452a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:44:18.680835953Z 53 PC: 1452a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:44:18.682740519Z 37 PC: 1453f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:44:18.68454136Z 37 PC: 14547 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:44:18.686685027Z 37 PC: 1454f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:44:18.691960926Z 37 PC: 14557 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:44:18.693646528Z 68 PC: 15287 | I/O control for devices (Set for = '')
2018-12-17T22:44:18.748022871Z 37 PC: 13c71 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:44:18.750669526Z 54 PC: 141fa | Get free disk space
2018-12-17T22:44:18.762294585Z 26 PC: 142d1 | Set disk transfer address
2018-12-17T22:44:18.763666129Z 78 PC: 142dd | Find first file
2018-12-17T22:44:18.769795786Z 26 PC: 142d1 | Set disk transfer address
2018-12-17T22:44:18.771032842Z 78 PC: 142dd | Find first file
2018-12-17T22:44:18.77653489Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:18.781769193Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:18.786535297Z 61 PC: 14bf0 | Open file (Filename = '[/O[[:]sortord]]  [/S] [/B]C:\DOS\')
2018-12-17T22:44:18.796979806Z 25 PC: 14e3f | Get default drive
2018-12-17T22:44:18.799030904Z 71 PC: 14e52 | Get current directory
2018-12-17T22:44:18.808005102Z 26 PC: 142d1 | Set disk transfer address
2018-12-17T22:44:18.809398406Z 78 PC: 142dd | Find first file
2018-12-17T22:44:18.823181934Z 25 PC: 14e3f | Get default drive
2018-12-17T22:44:18.824550956Z 71 PC: 14e52 | Get current directory
2018-12-17T22:44:18.834045577Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:18.843655933Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:18.861296611Z 61 PC: 14bf0 | Open file (Filename = 'A:\SLEEP.COM')
2018-12-17T22:44:18.868860662Z 66 PC: 15428 | Move file pointer
2018-12-17T22:44:18.870469791Z 66 PC: 15436 | Move file pointer
2018-12-17T22:44:18.872860781Z 66 PC: 15444 | Move file pointer
2018-12-17T22:44:18.874507641Z 26 PC: 142f5 | Set disk transfer address
2018-12-17T22:44:18.875700508Z 79 PC: 142fa | Find next file
2018-12-17T22:44:18.879836835Z 25 PC: 14e3f | Get default drive
2018-12-17T22:44:18.881484672Z 71 PC: 14e52 | Get current directory
2018-12-17T22:44:18.885416679Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:18.897581862Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:18.909037704Z 61 PC: 14bf0 | Open file (Filename = 'A:\PRINT.COM')
2018-12-17T22:44:18.91721952Z 66 PC: 15428 | Move file pointer
2018-12-17T22:44:18.91953459Z 66 PC: 15436 | Move file pointer
2018-12-17T22:44:18.929717459Z 66 PC: 15444 | Move file pointer
2018-12-17T22:44:18.931666708Z 26 PC: 142f5 | Set disk transfer address
2018-12-17T22:44:18.933726831Z 79 PC: 142fa | Find next file
2018-12-17T22:44:18.937172418Z 25 PC: 14e3f | Get default drive
2018-12-17T22:44:18.938467006Z 71 PC: 14e52 | Get current directory
2018-12-17T22:44:18.943799544Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:18.950336501Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:18.961569717Z 61 PC: 14bf0 | Open file (Filename = 'A:\HELLO.COM')
2018-12-17T22:44:18.975291765Z 66 PC: 15428 | Move file pointer
2018-12-17T22:44:18.977112063Z 66 PC: 15436 | Move file pointer
2018-12-17T22:44:18.979150951Z 66 PC: 15444 | Move file pointer
2018-12-17T22:44:18.981172221Z 26 PC: 142f5 | Set disk transfer address
2018-12-17T22:44:18.983185347Z 79 PC: 142fa | Find next file
2018-12-17T22:44:18.986660728Z 25 PC: 14e3f | Get default drive
2018-12-17T22:44:18.988254325Z 71 PC: 14e52 | Get current directory
2018-12-17T22:44:18.993449849Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:19.000276233Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:19.011602341Z 61 PC: 14bf0 | Open file (Filename = 'A:\PHANG.COM')
2018-12-17T22:44:19.019579549Z 66 PC: 15428 | Move file pointer
2018-12-17T22:44:19.021502297Z 66 PC: 15436 | Move file pointer
2018-12-17T22:44:19.023471798Z 66 PC: 15444 | Move file pointer
2018-12-17T22:44:19.026583866Z 26 PC: 142f5 | Set disk transfer address
2018-12-17T22:44:19.027859696Z 79 PC: 142fa | Find next file
2018-12-17T22:44:19.031076376Z 25 PC: 14e3f | Get default drive
2018-12-17T22:44:19.033072436Z 71 PC: 14e52 | Get current directory
2018-12-17T22:44:19.03745272Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:19.044461423Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:19.059078227Z 61 PC: 14bf0 | Open file (Filename = 'A:\PRINTA~1.COM')
2018-12-17T22:44:19.068310117Z 66 PC: 15428 | Move file pointer
2018-12-17T22:44:19.070104936Z 66 PC: 15436 | Move file pointer
2018-12-17T22:44:19.071755943Z 66 PC: 15444 | Move file pointer
2018-12-17T22:44:19.079581798Z 26 PC: 142f5 | Set disk transfer address
2018-12-17T22:44:19.080899767Z 79 PC: 142fa | Find next file
2018-12-17T22:44:19.084305208Z 25 PC: 14e3f | Get default drive
2018-12-17T22:44:19.08921614Z 71 PC: 14e52 | Get current directory
2018-12-17T22:44:19.093289928Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:19.099769366Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:19.111401128Z 61 PC: 14bf0 | Open file (Filename = 'A:\MANDEL.COM')
2018-12-17T22:44:19.119632903Z 66 PC: 15428 | Move file pointer
2018-12-17T22:44:19.121193933Z 66 PC: 15436 | Move file pointer
2018-12-17T22:44:19.123463914Z 66 PC: 15444 | Move file pointer
2018-12-17T22:44:19.125106591Z 26 PC: 142f5 | Set disk transfer address
2018-12-17T22:44:19.126276903Z 79 PC: 142fa | Find next file
2018-12-17T22:44:19.130027437Z 25 PC: 14e3f | Get default drive
2018-12-17T22:44:19.131297039Z 71 PC: 14e52 | Get current directory
2018-12-17T22:44:19.135289939Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:19.142293382Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:19.153164651Z 61 PC: 14bf0 | Open file (Filename = 'A:\PAH.COM')
2018-12-17T22:44:19.160846912Z 66 PC: 15428 | Move file pointer
2018-12-17T22:44:19.163074441Z 66 PC: 15436 | Move file pointer
2018-12-17T22:44:19.16489346Z 66 PC: 15444 | Move file pointer
2018-12-17T22:44:19.166823763Z 26 PC: 142f5 | Set disk transfer address
2018-12-17T22:44:19.169315604Z 79 PC: 142fa | Find next file
2018-12-17T22:44:19.172637881Z 25 PC: 14e3f | Get default drive
2018-12-17T22:44:19.173827369Z 71 PC: 14e52 | Get current directory
2018-12-17T22:44:19.177765687Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:19.185210722Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:19.196256204Z 61 PC: 14bf0 | Open file (Filename = 'A:\TEST.COM')
2018-12-17T22:44:19.203688382Z 66 PC: 15428 | Move file pointer
2018-12-17T22:44:19.205637219Z 66 PC: 15436 | Move file pointer
2018-12-17T22:44:19.207319552Z 66 PC: 15444 | Move file pointer
2018-12-17T22:44:19.209550692Z 63 PC: 14c82 | Read file or device (Read 1 bytes on handle 12)
2018-12-17T22:44:19.217578574Z 66 PC: 14d22 | Move file pointer
2018-12-17T22:44:19.21972715Z 63 PC: 14c82 | Read file or device (Read 1 bytes on handle 12)
2018-12-17T22:44:19.227988814Z 62 PC: 14c40 | Close file
2018-12-17T22:44:19.231638772Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:19.243330926Z 26 PC: 142f5 | Set disk transfer address
2018-12-17T22:44:19.244863293Z 79 PC: 142fa | Find next file
2018-12-17T22:44:19.248862975Z 26 PC: 142d1 | Set disk transfer address
2018-12-17T22:44:19.250740877Z 78 PC: 142dd | Find first file
2018-12-17T22:44:19.258784033Z 59 PC: 14f06 | Change current directory
2018-12-17T22:44:19.264953802Z 26 PC: 142d1 | Set disk transfer address
2018-12-17T22:44:19.266261085Z 78 PC: 142dd | Find first file
2018-12-17T22:44:19.273054995Z 26 PC: 142d1 | Set disk transfer address
2018-12-17T22:44:19.275378991Z 78 PC: 142dd | Find first file
2018-12-17T22:44:19.282562133Z 25 PC: 14e3f | Get default drive
2018-12-17T22:44:19.284139059Z 71 PC: 14e52 | Get current directory
2018-12-17T22:44:19.28845391Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:19.296406937Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:19.308197863Z 61 PC: 14bf0 | Open file (Filename = 'A:\SLEEP.COM')
2018-12-17T22:44:19.315947312Z 66 PC: 15428 | Move file pointer
2018-12-17T22:44:19.318513108Z 66 PC: 15436 | Move file pointer
2018-12-17T22:44:19.320356574Z 66 PC: 15444 | Move file pointer
2018-12-17T22:44:19.323325765Z 26 PC: 142f5 | Set disk transfer address
2018-12-17T22:44:19.325843569Z 79 PC: 142fa | Find next file
2018-12-17T22:44:19.329299447Z 25 PC: 14e3f | Get default drive
2018-12-17T22:44:19.33077804Z 71 PC: 14e52 | Get current directory
2018-12-17T22:44:19.336098083Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:19.342975161Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:19.354299557Z 61 PC: 14bf0 | Open file (Filename = 'A:\PRINT.COM')
2018-12-17T22:44:19.362692238Z 66 PC: 15428 | Move file pointer
2018-12-17T22:44:19.364532602Z 66 PC: 15436 | Move file pointer
2018-12-17T22:44:19.366262969Z 66 PC: 15444 | Move file pointer
2018-12-17T22:44:19.36885085Z 26 PC: 142f5 | Set disk transfer address
2018-12-17T22:44:19.370227519Z 79 PC: 142fa | Find next file
2018-12-17T22:44:19.373468154Z 25 PC: 14e3f | Get default drive
2018-12-17T22:44:19.375645988Z 71 PC: 14e52 | Get current directory
2018-12-17T22:44:19.380133453Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:19.386598565Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:19.398943426Z 61 PC: 14bf0 | Open file (Filename = 'A:\HELLO.COM')
2018-12-17T22:44:19.407116754Z 66 PC: 15428 | Move file pointer
2018-12-17T22:44:19.408745079Z 66 PC: 15436 | Move file pointer
2018-12-17T22:44:19.410608933Z 66 PC: 15444 | Move file pointer
2018-12-17T22:44:19.412826016Z 26 PC: 142f5 | Set disk transfer address
2018-12-17T22:44:19.414087592Z 79 PC: 142fa | Find next file
2018-12-17T22:44:19.417534308Z 25 PC: 14e3f | Get default drive
2018-12-17T22:44:19.420092774Z 71 PC: 14e52 | Get current directory
2018-12-17T22:44:19.42437372Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:19.431101325Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:19.442921807Z 61 PC: 14bf0 | Open file (Filename = 'A:\PHANG.COM')
2018-12-17T22:44:19.455633412Z 66 PC: 15428 | Move file pointer
2018-12-17T22:44:19.45724636Z 66 PC: 15436 | Move file pointer
2018-12-17T22:44:19.459650259Z 66 PC: 15444 | Move file pointer
2018-12-17T22:44:19.461346593Z 26 PC: 142f5 | Set disk transfer address
2018-12-17T22:44:19.462572634Z 79 PC: 142fa | Find next file
2018-12-17T22:44:19.467513469Z 25 PC: 14e3f | Get default drive
2018-12-17T22:44:19.468772157Z 71 PC: 14e52 | Get current directory
2018-12-17T22:44:19.475241746Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:19.482357967Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:19.493333694Z 61 PC: 14bf0 | Open file (Filename = 'A:\PRINTA~1.COM')
2018-12-17T22:44:19.514747862Z 66 PC: 15428 | Move file pointer
2018-12-17T22:44:19.523888034Z 66 PC: 15436 | Move file pointer
2018-12-17T22:44:19.525590041Z 66 PC: 15444 | Move file pointer
2018-12-17T22:44:19.527280594Z 26 PC: 142f5 | Set disk transfer address
2018-12-17T22:44:19.53000322Z 79 PC: 142fa | Find next file
2018-12-17T22:44:19.533477346Z 25 PC: 14e3f | Get default drive
2018-12-17T22:44:19.535927775Z 71 PC: 14e52 | Get current directory
2018-12-17T22:44:19.540885985Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:19.547569493Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:19.558912257Z 61 PC: 14bf0 | Open file (Filename = 'A:\MANDEL.COM')
2018-12-17T22:44:19.56800108Z 66 PC: 15428 | Move file pointer
2018-12-17T22:44:19.569621133Z 66 PC: 15436 | Move file pointer
2018-12-17T22:44:19.572074895Z 66 PC: 15444 | Move file pointer
2018-12-17T22:44:19.575303166Z 26 PC: 142f5 | Set disk transfer address
2018-12-17T22:44:19.576921831Z 79 PC: 142fa | Find next file
2018-12-17T22:44:19.580634694Z 25 PC: 14e3f | Get default drive
2018-12-17T22:44:19.582901785Z 71 PC: 14e52 | Get current directory
2018-12-17T22:44:19.587344419Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:19.594145886Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:19.605911157Z 61 PC: 14bf0 | Open file (Filename = 'A:\PAH.COM')
2018-12-17T22:44:19.613795777Z 66 PC: 15428 | Move file pointer
2018-12-17T22:44:19.615508347Z 66 PC: 15436 | Move file pointer
2018-12-17T22:44:19.617828683Z 66 PC: 15444 | Move file pointer
2018-12-17T22:44:19.619863521Z 26 PC: 142f5 | Set disk transfer address
2018-12-17T22:44:19.620840206Z 79 PC: 142fa | Find next file
2018-12-17T22:44:19.623029616Z 25 PC: 14e3f | Get default drive
2018-12-17T22:44:19.624285067Z 71 PC: 14e52 | Get current directory
2018-12-17T22:44:19.626701775Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:19.631509392Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:19.640167146Z 61 PC: 14bf0 | Open file (Filename = 'A:\TEST.COM')
2018-12-17T22:44:19.655053441Z 66 PC: 15428 | Move file pointer
2018-12-17T22:44:19.658187542Z 66 PC: 15436 | Move file pointer
2018-12-17T22:44:19.660804073Z 66 PC: 15444 | Move file pointer
2018-12-17T22:44:19.662987151Z 63 PC: 14c82 | Read file or device (Read 1 bytes on handle 19)
2018-12-17T22:44:19.671248064Z 66 PC: 14d22 | Move file pointer
2018-12-17T22:44:19.674585336Z 63 PC: 14c82 | Read file or device (Read 1 bytes on handle 19)
2018-12-17T22:44:19.67914585Z 62 PC: 14c40 | Close file
2018-12-17T22:44:19.680802869Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:19.688580315Z 26 PC: 142f5 | Set disk transfer address
2018-12-17T22:44:19.689924322Z 79 PC: 142fa | Find next file
2018-12-17T22:44:19.69200888Z 26 PC: 142d1 | Set disk transfer address
2018-12-17T22:44:19.693773901Z 78 PC: 142dd | Find first file
2018-12-17T22:44:19.698186326Z 25 PC: 14e3f | Get default drive
2018-12-17T22:44:19.699125071Z 71 PC: 14e52 | Get current directory
2018-12-17T22:44:19.702352604Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:19.706324754Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:19.716588119Z 61 PC: 14bf0 | Open file (Filename = 'A:\SLEEP.COM')
2018-12-17T22:44:19.725253865Z 66 PC: 15428 | Move file pointer
2018-12-17T22:44:19.726561441Z 66 PC: 15436 | Move file pointer
2018-12-17T22:44:19.72779401Z 66 PC: 15444 | Move file pointer
2018-12-17T22:44:19.729603633Z 26 PC: 142f5 | Set disk transfer address
2018-12-17T22:44:19.730576719Z 79 PC: 142fa | Find next file
2018-12-17T22:44:19.732642695Z 25 PC: 14e3f | Get default drive
2018-12-17T22:44:19.734192664Z 71 PC: 14e52 | Get current directory
2018-12-17T22:44:19.739654632Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:19.745747745Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:19.753174013Z 61 PC: 14bf0 | Open file (Filename = 'A:\PRINT.COM')
2018-12-17T22:44:19.755452443Z 26 PC: 142f5 | Set disk transfer address
2018-12-17T22:44:19.756627784Z 79 PC: 142fa | Find next file
2018-12-17T22:44:19.760991551Z 25 PC: 14e3f | Get default drive
2018-12-17T22:44:19.762683878Z 71 PC: 14e52 | Get current directory
2018-12-17T22:44:19.766681029Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:19.77419058Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:19.785182955Z 61 PC: 14bf0 | Open file (Filename = 'A:\HELLO.COM')
2018-12-17T22:44:19.787694285Z 26 PC: 142f5 | Set disk transfer address
2018-12-17T22:44:19.790056175Z 79 PC: 142fa | Find next file
2018-12-17T22:44:19.794350492Z 25 PC: 14e3f | Get default drive
2018-12-17T22:44:19.7958845Z 71 PC: 14e52 | Get current directory
2018-12-17T22:44:19.805866127Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:19.817559485Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:19.827812238Z 61 PC: 14bf0 | Open file (Filename = 'A:\PHANG.COM')
2018-12-17T22:44:19.830235695Z 26 PC: 142f5 | Set disk transfer address
2018-12-17T22:44:19.832763154Z 79 PC: 142fa | Find next file
2018-12-17T22:44:19.836395999Z 25 PC: 14e3f | Get default drive
2018-12-17T22:44:19.83799932Z 71 PC: 14e52 | Get current directory
2018-12-17T22:44:19.843270145Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:19.849958213Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:19.8608049Z 61 PC: 14bf0 | Open file (Filename = 'A:\PRINTA~1.COM')
2018-12-17T22:44:19.863888952Z 26 PC: 142f5 | Set disk transfer address
2018-12-17T22:44:19.864995025Z 79 PC: 142fa | Find next file
2018-12-17T22:44:19.86744323Z 25 PC: 14e3f | Get default drive
2018-12-17T22:44:19.869402474Z 71 PC: 14e52 | Get current directory
2018-12-17T22:44:19.875090302Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:19.882634573Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:19.890079533Z 61 PC: 14bf0 | Open file (Filename = 'A:\MANDEL.COM')
2018-12-17T22:44:19.89166752Z 26 PC: 142f5 | Set disk transfer address
2018-12-17T22:44:19.892678378Z 79 PC: 142fa | Find next file
2018-12-17T22:44:19.895327406Z 25 PC: 14e3f | Get default drive
2018-12-17T22:44:19.89634981Z 71 PC: 14e52 | Get current directory
2018-12-17T22:44:19.899135096Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:19.903784058Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:19.912461516Z 61 PC: 14bf0 | Open file (Filename = 'A:\PAH.COM')
2018-12-17T22:44:19.914052961Z 26 PC: 142f5 | Set disk transfer address
2018-12-17T22:44:19.915676615Z 79 PC: 142fa | Find next file
2018-12-17T22:44:19.918941749Z 25 PC: 14e3f | Get default drive
2018-12-17T22:44:19.920440483Z 71 PC: 14e52 | Get current directory
2018-12-17T22:44:19.92991116Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:19.941878805Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:19.953900958Z 61 PC: 14bf0 | Open file (Filename = 'A:\TEST.COM')
2018-12-17T22:44:19.9566361Z 26 PC: 142f5 | Set disk transfer address
2018-12-17T22:44:19.957929593Z 79 PC: 142fa | Find next file
2018-12-17T22:44:19.961202029Z 14 PC: 14e98 | Set default drive (Drive = 'A')
2018-12-17T22:44:19.963113082Z 25 PC: 14e9c | Get default drive
2018-12-17T22:44:19.964916257Z 44 PC: 153be | Get time 0x153be: mov word ptr [0x3e], cx
0x153c2: mov word ptr [0x40], dx
0x153c6: retf
0x153c7: call 0x1540e
0x153ca: jb 0x153db
0x153cc: mov cx, word ptr es:[di + 4]
0x153d0: cmp cx, 1
0x153d3: je 0x153db
0x153d5: xor bx, bx
0x153d7: push cs
0x153d8: call 0x24f4a
0x153db: retf 4
0x153de: call 0x1540e
0x153e1: jb 0x153f6
0x153e3: mov ax, cx
0x153e5: mov dx, bx
0x153e7: mov cx, word ptr es:[di + 4]
0x153eb: cmp cx, 1
0x153ee: je 0x153f6
0x153f0: xor bx, bx
2018-12-17T22:44:19.969144327Z 48 PC: 14db2 | Get DOS version
2018-12-17T22:44:19.971312241Z 48 PC: 14db2 | Get DOS version
2018-12-17T22:44:19.973274797Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:19.980872644Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:19.991687264Z 61 PC: 14bf0 | Open file (Filename = 'A:\TEST.COM')
2018-12-17T22:44:19.993978215Z 87 PC: 14274 | Get or set file date and time
2018-12-17T22:44:19.997896648Z 60 PC: 14bf0 | Create or truncate file
2018-12-17T22:44:20.000717423Z 26 PC: 142d1 | Set disk transfer address
2018-12-17T22:44:20.002211001Z 78 PC: 142dd | Find first file
2018-12-17T22:44:20.011467945Z 48 PC: 14db2 | Get DOS version
2018-12-17T22:44:20.013426617Z 61 PC: 14bf0 | Open file (Filename = 'A:\TEST.COM')
2018-12-17T22:44:20.016351205Z 61 PC: 14bf0 | Open file (Filename = 'A:\TEST')
2018-12-17T22:44:20.020342892Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:20.03197126Z 87 PC: 142a1 | Get or set file date and time
2018-12-17T22:44:20.033827757Z 53 PC: 144a4 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:44:20.036100173Z 37 PC: 144ad | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:44:20.038020987Z 53 PC: 144a4 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:44:20.039524541Z 37 PC: 144ad | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:44:20.044032272Z 53 PC: 144a4 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:44:20.045537083Z 37 PC: 144ad | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:44:20.047061684Z 53 PC: 144a4 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:44:20.049142183Z 37 PC: 144ad | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:44:20.050597665Z 53 PC: 144a4 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:44:20.052138908Z 37 PC: 144ad | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:44:20.053982862Z 53 PC: 144a4 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:44:20.055335775Z 37 PC: 144ad | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:44:20.057115934Z 53 PC: 144a4 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:44:20.059271683Z 37 PC: 144ad | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:44:20.060559127Z 53 PC: 144a4 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:44:20.062189945Z 37 PC: 144ad | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:44:20.064094084Z 53 PC: 144a4 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:44:20.065906499Z 37 PC: 144ad | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:44:20.068999519Z 53 PC: 144a4 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:44:20.070699608Z 37 PC: 144ad | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:44:20.072342485Z 53 PC: 144a4 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:44:20.074991557Z 37 PC: 144ad | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:44:20.076703154Z 53 PC: 144a4 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:44:20.078418394Z 37 PC: 144ad | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:44:20.080777964Z 53 PC: 144a4 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:44:20.082519526Z 37 PC: 144ad | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:44:20.083938869Z 53 PC: 144a4 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:44:20.086275407Z 37 PC: 144ad | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:44:20.08790763Z 53 PC: 144a4 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:44:20.08924746Z 37 PC: 144ad | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:44:20.091279487Z 53 PC: 144a4 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:44:20.092641891Z 37 PC: 144ad | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:44:20.093924267Z 53 PC: 144a4 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:44:20.096159038Z 37 PC: 144ad | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:44:20.097589148Z 53 PC: 144a4 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:44:20.098917002Z 37 PC: 144ad | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:44:20.100806941Z 53 PC: 144a4 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:44:20.102447212Z 37 PC: 144ad | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:44:20.104054275Z 48 PC: 14db2 | Get DOS version
2018-12-17T22:44:20.106614693Z 41 PC: 1445b | Parse filename
2018-12-17T22:44:20.108308592Z 41 PC: 14469 | Parse filename
2018-12-17T22:44:20.110043787Z 75 PC: 14474 | Execute program
2018-12-17T22:44:20.1131486Z 53 PC: 144a4 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:44:20.114565604Z 37 PC: 144ad | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:44:20.115928629Z 53 PC: 144a4 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:44:20.117836374Z 37 PC: 144ad | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:44:20.119241859Z 53 PC: 144a4 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:44:20.120745881Z 37 PC: 144ad | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:44:20.12303965Z 53 PC: 144a4 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:44:20.124388371Z 37 PC: 144ad | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:44:20.126065538Z 53 PC: 144a4 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:44:20.128013807Z 37 PC: 144ad | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:44:20.129418873Z 53 PC: 144a4 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:44:20.131469506Z 37 PC: 144ad | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:44:20.133101837Z 53 PC: 144a4 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:44:20.134959909Z 37 PC: 144ad | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:44:20.136926805Z 53 PC: 144a4 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:44:20.139213568Z 37 PC: 144ad | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:44:20.140461776Z 53 PC: 144a4 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:44:20.143289193Z 37 PC: 144ad | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:44:20.144488267Z 53 PC: 144a4 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:44:20.145755167Z 37 PC: 144ad | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:44:20.148183571Z 53 PC: 144a4 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:44:20.150070436Z 37 PC: 144ad | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:44:20.151988156Z 53 PC: 144a4 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:44:20.155296512Z 37 PC: 144ad | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:44:20.157056627Z 53 PC: 144a4 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:44:20.15849979Z 37 PC: 144ad | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:44:20.160390251Z 53 PC: 144a4 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:44:20.1617849Z 37 PC: 144ad | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:44:20.163370925Z 53 PC: 144a4 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:44:20.165340993Z 37 PC: 144ad | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:44:20.167063796Z 53 PC: 144a4 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:44:20.169002416Z 37 PC: 144ad | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:44:20.170834954Z 53 PC: 144a4 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:44:20.172767718Z 37 PC: 144ad | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:44:20.175437208Z 53 PC: 144a4 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:44:20.177006133Z 37 PC: 144ad | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:44:20.178526924Z 53 PC: 144a4 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:44:20.181679295Z 37 PC: 144ad | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:44:20.184041762Z 61 PC: 14bf0 | Open file (Filename = 'A:\TEMP.INV')
2018-12-17T22:44:20.186713556Z 48 PC: 14db2 | Get DOS version
2018-12-17T22:44:20.19016532Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:20.197226307Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:20.208492673Z 61 PC: 14bf0 | Open file (Filename = 'A:\TEST.COM')
2018-12-17T22:44:20.212176705Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:20.224674735Z 87 PC: 142a1 | Get or set file date and time
2018-12-17T22:44:20.227337043Z 65 PC: 14d39 | Delete file (Filename = 'A:\TEMP.INV')
2018-12-17T22:44:20.23502656Z 25 PC: 14e3f | Get default drive
2018-12-17T22:44:20.23607286Z 71 PC: 14e52 | Get current directory
2018-12-17T22:44:20.240598501Z 26 PC: 142d1 | Set disk transfer address
2018-12-17T22:44:20.24201Z 78 PC: 142dd | Find first file
2018-12-17T22:44:20.248992977Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:20.256186624Z 26 PC: 142f5 | Set disk transfer address
2018-12-17T22:44:20.257581931Z 79 PC: 142fa | Find next file
2018-12-17T22:44:20.261090373Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:20.273745762Z 26 PC: 142f5 | Set disk transfer address
2018-12-17T22:44:20.275233551Z 79 PC: 142fa | Find next file
2018-12-17T22:44:20.278942335Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:20.293036955Z 26 PC: 142f5 | Set disk transfer address
2018-12-17T22:44:20.294702009Z 79 PC: 142fa | Find next file
2018-12-17T22:44:20.298335299Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:20.306207264Z 26 PC: 142f5 | Set disk transfer address
2018-12-17T22:44:20.307791456Z 79 PC: 142fa | Find next file
2018-12-17T22:44:20.311451183Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:20.319119869Z 26 PC: 142f5 | Set disk transfer address
2018-12-17T22:44:20.321009429Z 79 PC: 142fa | Find next file
2018-12-17T22:44:20.325342167Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:20.33349211Z 26 PC: 142f5 | Set disk transfer address
2018-12-17T22:44:20.335338114Z 79 PC: 142fa | Find next file
2018-12-17T22:44:20.339798414Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:20.346747425Z 26 PC: 142f5 | Set disk transfer address
2018-12-17T22:44:20.348582264Z 79 PC: 142fa | Find next file
2018-12-17T22:44:20.353084455Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:20.365703761Z 26 PC: 142f5 | Set disk transfer address
2018-12-17T22:44:20.367582897Z 79 PC: 142fa | Find next file
2018-12-17T22:44:20.371686045Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:20.378316873Z 26 PC: 142f5 | Set disk transfer address
2018-12-17T22:44:20.395032942Z 79 PC: 142fa | Find next file
2018-12-17T22:44:20.404953852Z 25 PC: 14e3f | Get default drive
2018-12-17T22:44:20.406980347Z 71 PC: 14e52 | Get current directory
2018-12-17T22:44:20.412426805Z 14 PC: 14e98 | Set default drive (Drive = 'C')
2018-12-17T22:44:20.414682257Z 25 PC: 14e9c | Get default drive
2018-12-17T22:44:20.417038798Z 60 PC: 14bf0 | Create or truncate file
2018-12-17T22:44:20.420850122Z 48 PC: 14db2 | Get DOS version
2018-12-17T22:44:20.42289926Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:20.430434268Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:20.442706169Z 61 PC: 14bf0 | Open file (Filename = 'A:\TEST.COM')
2018-12-17T22:44:20.444843391Z 87 PC: 14274 | Get or set file date and time
2018-12-17T22:44:20.446977997Z 87 PC: 142a1 | Get or set file date and time
2018-12-17T22:44:20.450119146Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:20.461968843Z 14 PC: 14e98 | Set default drive (Drive = 'D')
2018-12-17T22:44:20.46403953Z 25 PC: 14e9c | Get default drive
2018-12-17T22:44:20.467280473Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:20.473942473Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:20.47989721Z 61 PC: 14bf0 | Open file (Filename = 'TEST.COM')
2018-12-17T22:44:20.483217632Z 14 PC: 14e98 | Set default drive (Drive = 'E')
2018-12-17T22:44:20.485289404Z 25 PC: 14e9c | Get default drive
2018-12-17T22:44:20.487896353Z 60 PC: 14bf0 | Create or truncate file
2018-12-17T22:44:20.492100527Z 48 PC: 14db2 | Get DOS version
2018-12-17T22:44:20.494055484Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:20.501770648Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:20.509665703Z 61 PC: 14bf0 | Open file (Filename = 'A:\TEST.COM')
2018-12-17T22:44:20.511280668Z 87 PC: 14274 | Get or set file date and time
2018-12-17T22:44:20.513311314Z 87 PC: 142a1 | Get or set file date and time
2018-12-17T22:44:20.514682647Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:20.52240422Z 14 PC: 14e98 | Set default drive (Drive = 'F')
2018-12-17T22:44:20.524323136Z 25 PC: 14e9c | Get default drive
2018-12-17T22:44:20.525589837Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:20.52929672Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:20.533314885Z 61 PC: 14bf0 | Open file (Filename = 'TEST.COM')
2018-12-17T22:44:20.53496273Z 14 PC: 14e98 | Set default drive (Drive = 'G')
2018-12-17T22:44:20.536165972Z 25 PC: 14e9c | Get default drive
2018-12-17T22:44:20.537929792Z 60 PC: 14bf0 | Create or truncate file
2018-12-17T22:44:20.539486878Z 48 PC: 14db2 | Get DOS version
2018-12-17T22:44:20.541156894Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:20.545332415Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:20.552217818Z 61 PC: 14bf0 | Open file (Filename = 'A:\TEST.COM')
2018-12-17T22:44:20.554363595Z 87 PC: 14274 | Get or set file date and time
2018-12-17T22:44:20.556652483Z 87 PC: 142a1 | Get or set file date and time
2018-12-17T22:44:20.558828701Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:20.590293219Z 14 PC: 14e98 | Set default drive (Drive = 'H')
2018-12-17T22:44:20.591832149Z 25 PC: 14e9c | Get default drive
2018-12-17T22:44:20.593591877Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:20.601163351Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:20.607569403Z 61 PC: 14bf0 | Open file (Filename = 'TEST.COM')
2018-12-17T22:44:20.610435884Z 14 PC: 14e98 | Set default drive (Drive = 'I')
2018-12-17T22:44:20.613771213Z 25 PC: 14e9c | Get default drive
2018-12-17T22:44:20.615823548Z 60 PC: 14bf0 | Create or truncate file
2018-12-17T22:44:20.6185331Z 48 PC: 14db2 | Get DOS version
2018-12-17T22:44:20.621502388Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:20.628444626Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:20.641169819Z 61 PC: 14bf0 | Open file (Filename = 'A:\TEST.COM')
2018-12-17T22:44:20.644019511Z 87 PC: 14274 | Get or set file date and time
2018-12-17T22:44:20.646235089Z 87 PC: 142a1 | Get or set file date and time
2018-12-17T22:44:20.649320398Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:20.661336799Z 14 PC: 14e98 | Set default drive (Drive = 'J')
2018-12-17T22:44:20.663082928Z 25 PC: 14e9c | Get default drive
2018-12-17T22:44:20.665964146Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:20.672764926Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:20.679022048Z 61 PC: 14bf0 | Open file (Filename = 'TEST.COM')
2018-12-17T22:44:20.682800516Z 14 PC: 14e98 | Set default drive (Drive = 'K')
2018-12-17T22:44:20.684854925Z 25 PC: 14e9c | Get default drive
2018-12-17T22:44:20.686900718Z 60 PC: 14bf0 | Create or truncate file
2018-12-17T22:44:20.6904993Z 48 PC: 14db2 | Get DOS version
2018-12-17T22:44:20.692502118Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:20.699872943Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:20.712566195Z 61 PC: 14bf0 | Open file (Filename = 'A:\TEST.COM')
2018-12-17T22:44:20.715095296Z 87 PC: 14274 | Get or set file date and time
2018-12-17T22:44:20.717276422Z 87 PC: 142a1 | Get or set file date and time
2018-12-17T22:44:20.720678039Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:20.732190608Z 14 PC: 14e98 | Set default drive (Drive = 'L')
2018-12-17T22:44:20.734150586Z 25 PC: 14e9c | Get default drive
2018-12-17T22:44:20.737109347Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:20.743573709Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:20.750551699Z 61 PC: 14bf0 | Open file (Filename = 'TEST.COM')
2018-12-17T22:44:20.753538765Z 14 PC: 14e98 | Set default drive (Drive = 'M')
2018-12-17T22:44:20.755583743Z 25 PC: 14e9c | Get default drive
2018-12-17T22:44:20.758310887Z 60 PC: 14bf0 | Create or truncate file
2018-12-17T22:44:20.760893157Z 48 PC: 14db2 | Get DOS version
2018-12-17T22:44:20.762903205Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:20.77025998Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:20.782506759Z 61 PC: 14bf0 | Open file (Filename = 'A:\TEST.COM')
2018-12-17T22:44:20.784998581Z 87 PC: 14274 | Get or set file date and time
2018-12-17T22:44:20.788110882Z 87 PC: 142a1 | Get or set file date and time
2018-12-17T22:44:20.790315218Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:20.802047433Z 14 PC: 14e98 | Set default drive (Drive = 'N')
2018-12-17T22:44:20.804508151Z 25 PC: 14e9c | Get default drive
2018-12-17T22:44:20.80648964Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:20.813599022Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:20.820169064Z 61 PC: 14bf0 | Open file (Filename = 'TEST.COM')
2018-12-17T22:44:20.823315341Z 14 PC: 14e98 | Set default drive (Drive = 'O')
2018-12-17T22:44:20.825723122Z 25 PC: 14e9c | Get default drive
2018-12-17T22:44:20.827886193Z 60 PC: 14bf0 | Create or truncate file
2018-12-17T22:44:20.830366841Z 48 PC: 14db2 | Get DOS version
2018-12-17T22:44:20.83326712Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:20.840190385Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:20.851964904Z 61 PC: 14bf0 | Open file (Filename = 'A:\TEST.COM')
2018-12-17T22:44:20.85546137Z 87 PC: 14274 | Get or set file date and time
2018-12-17T22:44:20.857639122Z 87 PC: 142a1 | Get or set file date and time
2018-12-17T22:44:20.859842491Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:20.872700212Z 14 PC: 14e98 | Set default drive (Drive = 'P')
2018-12-17T22:44:20.874448447Z 25 PC: 14e9c | Get default drive
2018-12-17T22:44:20.876830378Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:20.883285932Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:20.889548509Z 61 PC: 14bf0 | Open file (Filename = 'TEST.COM')
2018-12-17T22:44:20.893283672Z 14 PC: 14e98 | Set default drive (Drive = 'Q')
2018-12-17T22:44:20.895143383Z 25 PC: 14e9c | Get default drive
2018-12-17T22:44:20.89717871Z 60 PC: 14bf0 | Create or truncate file
2018-12-17T22:44:20.90056671Z 48 PC: 14db2 | Get DOS version
2018-12-17T22:44:20.902760759Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:20.90967999Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:20.922534483Z 61 PC: 14bf0 | Open file (Filename = 'A:\TEST.COM')
2018-12-17T22:44:20.925197717Z 87 PC: 14274 | Get or set file date and time
2018-12-17T22:44:20.927390694Z 87 PC: 142a1 | Get or set file date and time
2018-12-17T22:44:20.930566401Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:20.942104416Z 14 PC: 14e98 | Set default drive (Drive = 'R')
2018-12-17T22:44:20.944317812Z 25 PC: 14e9c | Get default drive
2018-12-17T22:44:20.947310331Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:20.953787046Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:20.960030096Z 61 PC: 14bf0 | Open file (Filename = 'TEST.COM')
2018-12-17T22:44:20.963312826Z 14 PC: 14e98 | Set default drive (Drive = 'S')
2018-12-17T22:44:20.965031901Z 25 PC: 14e9c | Get default drive
2018-12-17T22:44:20.967928405Z 60 PC: 14bf0 | Create or truncate file
2018-12-17T22:44:20.970592728Z 48 PC: 14db2 | Get DOS version
2018-12-17T22:44:20.972589592Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:20.980112324Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:20.991756797Z 61 PC: 14bf0 | Open file (Filename = 'A:\TEST.COM')
2018-12-17T22:44:20.994265322Z 87 PC: 14274 | Get or set file date and time
2018-12-17T22:44:20.996877275Z 87 PC: 142a1 | Get or set file date and time
2018-12-17T22:44:20.999084808Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:21.010582258Z 14 PC: 14e98 | Set default drive (Drive = 'T')
2018-12-17T22:44:21.013243844Z 25 PC: 14e9c | Get default drive
2018-12-17T22:44:21.015294408Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:21.021974535Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:21.029020715Z 61 PC: 14bf0 | Open file (Filename = 'TEST.COM')
2018-12-17T22:44:21.031894852Z 14 PC: 14e98 | Set default drive (Drive = 'U')
2018-12-17T22:44:21.034694809Z 25 PC: 14e9c | Get default drive
2018-12-17T22:44:21.036898362Z 60 PC: 14bf0 | Create or truncate file
2018-12-17T22:44:21.039393276Z 48 PC: 14db2 | Get DOS version
2018-12-17T22:44:21.041774343Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:21.048736163Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:21.060173112Z 61 PC: 14bf0 | Open file (Filename = 'A:\TEST.COM')
2018-12-17T22:44:21.064337068Z 87 PC: 14274 | Get or set file date and time
2018-12-17T22:44:21.066546677Z 87 PC: 142a1 | Get or set file date and time
2018-12-17T22:44:21.069261057Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:21.080962432Z 14 PC: 14e98 | Set default drive (Drive = 'V')
2018-12-17T22:44:21.08273678Z 25 PC: 14e9c | Get default drive
2018-12-17T22:44:21.085765105Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:21.092257378Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:21.098563779Z 61 PC: 14bf0 | Open file (Filename = 'TEST.COM')
2018-12-17T22:44:21.101844711Z 14 PC: 14e98 | Set default drive (Drive = 'W')
2018-12-17T22:44:21.103594385Z 25 PC: 14e9c | Get default drive
2018-12-17T22:44:21.106588477Z 60 PC: 14bf0 | Create or truncate file
2018-12-17T22:44:21.109225332Z 48 PC: 14db2 | Get DOS version
2018-12-17T22:44:21.111233191Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:21.119188734Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:21.130658787Z 61 PC: 14bf0 | Open file (Filename = 'A:\TEST.COM')
2018-12-17T22:44:21.133986368Z 87 PC: 14274 | Get or set file date and time
2018-12-17T22:44:21.137133934Z 87 PC: 142a1 | Get or set file date and time
2018-12-17T22:44:21.139370222Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:21.152677897Z 14 PC: 14e98 | Set default drive (Drive = 'X')
2018-12-17T22:44:21.157281976Z 25 PC: 14e9c | Get default drive
2018-12-17T22:44:21.166597399Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:21.173463661Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:21.179665582Z 61 PC: 14bf0 | Open file (Filename = 'TEST.COM')
2018-12-17T22:44:21.182277558Z 14 PC: 14e98 | Set default drive (Drive = 'Y')
2018-12-17T22:44:21.184532855Z 25 PC: 14e9c | Get default drive
2018-12-17T22:44:21.186764297Z 60 PC: 14bf0 | Create or truncate file
2018-12-17T22:44:21.189809286Z 48 PC: 14db2 | Get DOS version
2018-12-17T22:44:21.192158937Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:21.199313773Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:21.212642547Z 61 PC: 14bf0 | Open file (Filename = 'A:\TEST.COM')
2018-12-17T22:44:21.215260503Z 87 PC: 14274 | Get or set file date and time
2018-12-17T22:44:21.218694481Z 87 PC: 142a1 | Get or set file date and time
2018-12-17T22:44:21.221050169Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:21.232816746Z 14 PC: 14e98 | Set default drive (Drive = 'Z')
2018-12-17T22:44:21.235199174Z 25 PC: 14e9c | Get default drive
2018-12-17T22:44:21.23691993Z 67 PC: 14233 | Get or set file attributes
2018-12-17T22:44:21.243509972Z 67 PC: 1425a | Get or set file attributes
2018-12-17T22:44:21.250557437Z 61 PC: 14bf0 | Open file (Filename = 'TEST.COM')
2018-12-17T22:44:21.253415814Z 14 PC: 14e98 | Set default drive (Drive = 'A')
2018-12-17T22:44:21.255737656Z 25 PC: 14e9c | Get default drive
2018-12-17T22:44:21.257765659Z 59 PC: 14f06 | Change current directory
2018-12-17T22:44:21.262961194Z 44 PC: 153be | Get time 0x153be: mov word ptr [0x3e], cx
0x153c2: mov word ptr [0x40], dx
0x153c6: retf
0x153c7: call 0x1540e
0x153ca: jb 0x153db
0x153cc: mov cx, word ptr es:[di + 4]
0x153d0: cmp cx, 1
0x153d3: je 0x153db
0x153d5: xor bx, bx
0x153d7: push cs
0x153d8: call 0x24f4a
0x153db: retf 4
0x153de: call 0x1540e
0x153e1: jb 0x153f6
0x153e3: mov ax, cx
0x153e5: mov dx, bx
0x153e7: mov cx, word ptr es:[di + 4]
0x153eb: cmp cx, 1
0x153ee: je 0x153f6
0x153f0: xor bx, bx
2018-12-17T22:44:21.26696671Z 26 PC: 142d1 | Set disk transfer address
2018-12-17T22:44:21.268557889Z 78 PC: 142dd | Find first file
2018-12-17T22:44:21.275989589Z 26 PC: 142f5 | Set disk transfer address
2018-12-17T22:44:21.278603657Z 79 PC: 142fa | Find next file
2018-12-17T22:44:21.281923057Z 37 PC: 14681 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:44:21.283560106Z 37 PC: 14681 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:44:21.285647566Z 37 PC: 14681 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:44:21.287322328Z 37 PC: 14681 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:44:21.289935258Z 37 PC: 14681 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:44:21.29226771Z 37 PC: 14681 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:44:21.293942732Z 37 PC: 14681 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:44:21.296632907Z 37 PC: 14681 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:44:21.298452355Z 37 PC: 14681 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:44:21.30010938Z 37 PC: 14681 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:44:21.302792012Z 37 PC: 14681 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:44:21.304421388Z 37 PC: 14681 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:44:21.30701637Z 37 PC: 14681 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:44:21.308861258Z 37 PC: 14681 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:44:21.310517905Z 37 PC: 14681 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:44:21.313131959Z 37 PC: 14681 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:44:21.314955454Z 37 PC: 14681 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:44:21.316613614Z 37 PC: 14681 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:44:21.319307882Z 37 PC: 14681 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:44:21.320956013Z 76 PC: 146c0 | Terminate with return code (Return code = '1')