Sample viewer

vx.netlux.org/Virus.DOS.HLLP.4487

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T21:58:08.134003725Z 53 PC: 1370a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T21:58:08.135146195Z 53 PC: 1370a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T21:58:08.136244686Z 53 PC: 1370a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T21:58:08.138071544Z 53 PC: 1370a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T21:58:08.139801185Z 53 PC: 1370a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T21:58:08.141498594Z 53 PC: 1370a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:58:08.14429788Z 53 PC: 1370a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T21:58:08.145783536Z 53 PC: 1370a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T21:58:08.147319668Z 53 PC: 1370a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T21:58:08.149418339Z 53 PC: 1370a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T21:58:08.150924443Z 53 PC: 1370a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T21:58:08.152263955Z 53 PC: 1370a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T21:58:08.154714089Z 53 PC: 1370a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T21:58:08.157215617Z 53 PC: 1370a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T21:58:08.176270337Z 53 PC: 1370a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T21:58:08.17782862Z 53 PC: 1370a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T21:58:08.179139917Z 53 PC: 1370a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T21:58:08.180176295Z 53 PC: 1370a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T21:58:08.182831822Z 53 PC: 1370a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T21:58:08.18478841Z 37 PC: 1371f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T21:58:08.186735249Z 37 PC: 13727 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T21:58:08.189226645Z 37 PC: 1372f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:58:08.190463037Z 37 PC: 13737 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T21:58:08.191707745Z 68 PC: 141f3 | I/O control for devices (Set for = '')
2018-12-17T21:58:08.194500486Z 42 PC: 13467 | Get date 0x13467: xor ah, ah
0x13469: les di, ptr [bp + 6]
0x1346c: stosw word ptr es:[di], ax
0x1346d: mov al, dl
0x1346f: les di, ptr [bp + 0xa]
0x13472: stosw word ptr es:[di], ax
0x13473: mov al, dh
0x13475: les di, ptr [bp + 0xe]
0x13478: stosw word ptr es:[di], ax
0x13479: xchg ax, cx
0x1347a: les di, ptr [bp + 0x12]
0x1347d: stosw word ptr es:[di], ax
0x1347e: pop bp
0x1347f: retf 0x10
0x13482: push bp
0x13483: mov bp, sp
0x13485: mov cx, word ptr [bp + 0xa]
0x13488: mov dh, byte ptr [bp + 8]
0x1348b: mov dl, byte ptr [bp + 6]
0x1348e: mov ah, 0x2b
2018-12-17T21:58:08.197590351Z 44 PC: 1432a | Get time 0x1432a: mov word ptr [0x3e], cx
0x1432e: mov word ptr [0x40], dx
0x14332: retf
0x14333: mov cx, di
0x14335: mov si, 0xa
0x14338: mov bx, dx
0x1433a: or bx, bx
0x1433c: jns 0x1434f
0x1433e: neg bx
0x14340: neg ax
0x14342: sbb bx, 0
0x14345: call 0x1434f
0x14348: dec di
0x14349: mov byte ptr es:[di], 0x2d
0x1434d: inc cx
0x1434e: ret
0x1434f: xor dx, dx
0x14351: xchg ax, bx
0x14352: div si
0x14354: xchg ax, bx
2018-12-17T21:58:08.200104276Z 48 PC: 13f1e | Get DOS version
2018-12-17T21:58:08.202398105Z 26 PC: 1357f | Set disk transfer address
2018-12-17T21:58:08.203502883Z 78 PC: 1358b | Find first file
2018-12-17T21:58:08.20959869Z 48 PC: 13f1e | Get DOS version
2018-12-17T21:58:08.212303559Z 67 PC: 134e1 | Get or set file attributes
2018-12-17T21:58:08.218535221Z 67 PC: 13508 | Get or set file attributes
2018-12-17T21:58:08.234621373Z 61 PC: 13dd0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T21:58:08.241660903Z 87 PC: 13522 | Get or set file date and time
2018-12-17T21:58:08.243165562Z 66 PC: 13f02 | Move file pointer
2018-12-17T21:58:08.244511218Z 63 PC: 13ea3 | Read file or device (Read 4487 bytes on handle 5)
2018-12-17T21:58:08.252385199Z 66 PC: 13f02 | Move file pointer
2018-12-17T21:58:08.253830325Z 63 PC: 13ea3 | Read file or device (Read 4487 bytes on handle 5)
2018-12-17T21:58:08.261071955Z 62 PC: 13e20 | Close file
2018-12-17T21:58:08.264768521Z 26 PC: 1357f | Set disk transfer address
2018-12-17T21:58:08.266087921Z 78 PC: 1358b | Find first file
2018-12-17T21:58:08.272330979Z 67 PC: 134e1 | Get or set file attributes
2018-12-17T21:58:08.282121582Z 67 PC: 13508 | Get or set file attributes
2018-12-17T21:58:08.302148318Z 61 PC: 13dd0 | Open file (Filename = '\TEST.EXE')
2018-12-17T21:58:08.309389117Z 63 PC: 13ea3 | Read file or device (Read 4487 bytes on handle 5)
2018-12-17T21:58:08.318615389Z 67 PC: 13508 | Get or set file attributes
2018-12-17T21:58:08.328560361Z 62 PC: 13e20 | Close file
2018-12-17T21:58:08.330637444Z 26 PC: 135a3 | Set disk transfer address
2018-12-17T21:58:08.332381217Z 79 PC: 135a8 | Find next file
2018-12-17T21:58:08.337163991Z 26 PC: 1357f | Set disk transfer address
2018-12-17T21:58:08.34235379Z 78 PC: 1358b | Find first file
2018-12-17T21:58:08.346965458Z 26 PC: 135a3 | Set disk transfer address
2018-12-17T21:58:08.348169746Z 79 PC: 135a8 | Find next file
2018-12-17T21:58:08.351654781Z 26 PC: 135a3 | Set disk transfer address
2018-12-17T21:58:08.353326751Z 79 PC: 135a8 | Find next file
2018-12-17T21:58:08.355898446Z 26 PC: 135a3 | Set disk transfer address
2018-12-17T21:58:08.356839361Z 79 PC: 135a8 | Find next file
2018-12-17T21:58:08.359898743Z 26 PC: 135a3 | Set disk transfer address
2018-12-17T21:58:08.360886836Z 79 PC: 135a8 | Find next file
2018-12-17T21:58:08.363772687Z 26 PC: 135a3 | Set disk transfer address
2018-12-17T21:58:08.366840022Z 79 PC: 135a8 | Find next file
2018-12-17T21:58:08.369503213Z 26 PC: 135a3 | Set disk transfer address
2018-12-17T21:58:08.370914159Z 79 PC: 135a8 | Find next file
2018-12-17T21:58:08.37434262Z 26 PC: 135a3 | Set disk transfer address
2018-12-17T21:58:08.375760845Z 79 PC: 135a8 | Find next file
2018-12-17T21:58:08.378909618Z 26 PC: 135a3 | Set disk transfer address
2018-12-17T21:58:08.380723578Z 79 PC: 135a8 | Find next file
2018-12-17T21:58:08.383688745Z 26 PC: 135a3 | Set disk transfer address
2018-12-17T21:58:08.385825431Z 79 PC: 135a8 | Find next file
2018-12-17T21:58:08.389287346Z 48 PC: 13f1e | Get DOS version
2018-12-17T21:58:08.390991483Z 61 PC: 13dd0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T21:58:08.398769884Z 66 PC: 13f02 | Move file pointer
2018-12-17T21:58:08.400999044Z 64 PC: 13ea3 | Write file or device (Write 4487 bytes on handle 5)
2018-12-17T21:58:08.409411665Z 62 PC: 13e20 | Close file
2018-12-17T21:58:08.418259639Z 53 PC: 13680 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T21:58:08.419438423Z 37 PC: 13689 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T21:58:08.420531106Z 53 PC: 13680 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T21:58:08.422687624Z 37 PC: 13689 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T21:58:08.424261556Z 53 PC: 13680 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T21:58:08.425650937Z 37 PC: 13689 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T21:58:08.427626207Z 53 PC: 13680 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T21:58:08.429043411Z 37 PC: 13689 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T21:58:08.430449Z 53 PC: 13680 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T21:58:08.433093404Z 37 PC: 13689 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T21:58:08.43441259Z 53 PC: 13680 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:58:08.435625669Z 37 PC: 13689 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:58:08.437763152Z 53 PC: 13680 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T21:58:08.43888457Z 37 PC: 13689 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T21:58:08.439963348Z 53 PC: 13680 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T21:58:08.442148117Z 37 PC: 13689 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T21:58:08.443232408Z 53 PC: 13680 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T21:58:08.444337877Z 37 PC: 13689 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T21:58:08.446816253Z 53 PC: 13680 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T21:58:08.447934017Z 37 PC: 13689 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T21:58:08.448974823Z 53 PC: 13680 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T21:58:08.451102369Z 37 PC: 13689 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T21:58:08.452164252Z 53 PC: 13680 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T21:58:08.453292703Z 37 PC: 13689 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T21:58:08.455389006Z 53 PC: 13680 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T21:58:08.456511404Z 37 PC: 13689 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T21:58:08.457560768Z 53 PC: 13680 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T21:58:08.459979492Z 37 PC: 13689 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T21:58:08.461093356Z 53 PC: 13680 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T21:58:08.466030793Z 37 PC: 13689 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T21:58:08.467872169Z 53 PC: 13680 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T21:58:08.469269989Z 37 PC: 13689 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T21:58:08.470649526Z 53 PC: 13680 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T21:58:08.472755252Z 37 PC: 13689 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T21:58:08.47390266Z 53 PC: 13680 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T21:58:08.474935422Z 37 PC: 13689 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T21:58:08.47653142Z 53 PC: 13680 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T21:58:08.477878941Z 37 PC: 13689 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T21:58:08.479343216Z 48 PC: 13f1e | Get DOS version
2018-12-17T21:58:08.480965096Z 41 PC: 13637 | Parse filename
2018-12-17T21:58:08.482369944Z 41 PC: 13645 | Parse filename
2018-12-17T21:58:08.484113851Z 75 PC: 13650 | Execute program
2018-12-17T21:58:08.49917567Z 9 PC: 1c0d9 | Display string (Could not find end pointer)
2018-12-17T21:58:08.503165337Z 76 PC: 1c0de | Terminate with return code (Return code = '1')
2018-12-17T21:58:08.506863624Z 53 PC: 13680 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T21:58:08.508033478Z 37 PC: 13689 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T21:58:08.509066429Z 53 PC: 13680 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T21:58:08.510722989Z 37 PC: 13689 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T21:58:08.511888098Z 53 PC: 13680 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T21:58:08.513021368Z 37 PC: 13689 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T21:58:08.51475827Z 53 PC: 13680 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T21:58:08.515783794Z 37 PC: 13689 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T21:58:08.516754951Z 53 PC: 13680 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T21:58:08.518321604Z 37 PC: 13689 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T21:58:08.519365881Z 53 PC: 13680 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:58:08.520459383Z 37 PC: 13689 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:58:08.522864272Z 53 PC: 13680 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T21:58:08.523941945Z 37 PC: 13689 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T21:58:08.52562091Z 53 PC: 13680 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T21:58:08.527441307Z 37 PC: 13689 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T21:58:08.528719151Z 53 PC: 13680 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T21:58:08.530458619Z 37 PC: 13689 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T21:58:08.531622411Z 53 PC: 13680 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T21:58:08.532808372Z 37 PC: 13689 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T21:58:08.534370371Z 53 PC: 13680 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T21:58:08.535720927Z 37 PC: 13689 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T21:58:08.537001865Z 53 PC: 13680 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T21:58:08.53917978Z 37 PC: 13689 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T21:58:08.540468472Z 53 PC: 13680 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T21:58:08.541988109Z 37 PC: 13689 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T21:58:08.544664354Z 53 PC: 13680 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T21:58:08.546101487Z 37 PC: 13689 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T21:58:08.548469692Z 53 PC: 13680 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T21:58:08.550170977Z 37 PC: 13689 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T21:58:08.551630581Z 53 PC: 13680 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T21:58:08.553612624Z 37 PC: 13689 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T21:58:08.554787118Z 53 PC: 13680 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T21:58:08.555790982Z 37 PC: 13689 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T21:58:08.557400935Z 53 PC: 13680 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T21:58:08.558702861Z 37 PC: 13689 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T21:58:08.559932021Z 53 PC: 13680 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T21:58:08.56213975Z 37 PC: 13689 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T21:58:08.563361472Z 48 PC: 13f1e | Get DOS version
2018-12-17T21:58:08.56515416Z 61 PC: 13dd0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T21:58:08.571763664Z 66 PC: 13f02 | Move file pointer
2018-12-17T21:58:08.573199797Z 64 PC: 13ea3 | Write file or device (Write 4487 bytes on handle 5)
2018-12-17T21:58:08.58155519Z 87 PC: 1354f | Get or set file date and time
2018-12-17T21:58:08.583037849Z 62 PC: 13e20 | Close file
2018-12-17T21:58:08.590171909Z 48 PC: 13f1e | Get DOS version
2018-12-17T21:58:08.592100044Z 67 PC: 13508 | Get or set file attributes
2018-12-17T21:58:08.602139608Z 64 PC: 13b28 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T21:58:08.604083263Z 37 PC: 13861 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T21:58:08.60577968Z 37 PC: 13861 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T21:58:08.607272734Z 37 PC: 13861 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T21:58:08.60978964Z 37 PC: 13861 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T21:58:08.611673375Z 37 PC: 13861 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T21:58:08.613666389Z 37 PC: 13861 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:58:08.615654627Z 37 PC: 13861 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T21:58:08.616832871Z 37 PC: 13861 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T21:58:08.618073003Z 37 PC: 13861 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T21:58:08.619944743Z 37 PC: 13861 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T21:58:08.620970755Z 37 PC: 13861 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T21:58:08.6220794Z 37 PC: 13861 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T21:58:08.623809629Z 37 PC: 13861 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T21:58:08.624839279Z 37 PC: 13861 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T21:58:08.625841111Z 37 PC: 13861 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T21:58:08.627106143Z 37 PC: 13861 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T21:58:08.628048778Z 37 PC: 13861 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T21:58:08.629915245Z 37 PC: 13861 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T21:58:08.63127882Z 37 PC: 13861 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T21:58:08.632523816Z 76 PC: 138a0 | Terminate with return code (Return code = '0')