Sample viewer

vx.netlux.org/Virus.DOS.HLLO.Messanger

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:47:34.414706073Z 53 PC: 13c3a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:47:34.417223368Z 53 PC: 13c3a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:47:34.41853369Z 53 PC: 13c3a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:47:34.419693939Z 53 PC: 13c3a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:47:34.421812977Z 53 PC: 13c3a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:47:34.423254016Z 53 PC: 13c3a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:47:34.425143707Z 53 PC: 13c3a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:47:34.428799072Z 53 PC: 13c3a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:47:34.430200133Z 53 PC: 13c3a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:47:34.431634081Z 53 PC: 13c3a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:47:34.433699628Z 53 PC: 13c3a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:47:34.43542875Z 53 PC: 13c3a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:47:34.436860805Z 53 PC: 13c3a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:47:34.439281531Z 53 PC: 13c3a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:47:34.440538613Z 53 PC: 13c3a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:47:34.441655335Z 53 PC: 13c3a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:47:34.443203841Z 53 PC: 13c3a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:47:34.444723468Z 53 PC: 13c3a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:47:34.445876612Z 53 PC: 13c3a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:47:34.44729848Z 37 PC: 13c4f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:47:34.449597951Z 37 PC: 13c57 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:47:34.451519634Z 37 PC: 13c5f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:47:34.453401977Z 37 PC: 13c67 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:47:34.46358164Z 68 PC: 14913 | I/O control for devices (Set for = '')
2018-12-17T22:47:34.532624266Z 37 PC: 135f1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:47:34.53397214Z 53 PC: 1352d | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:47:34.535590816Z 37 PC: 13549 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:47:34.536998626Z 44 PC: 1521e | Get time 0x1521e: mov word ptr [0x54c], cx
0x15222: mov word ptr [0x54e], dx
0x15226: retf
0x15227: mov di, 0x560
0x1522a: push ds
0x1522b: pop es
0x1522c: mov cx, 0x38fe
0x1522f: sub cx, di
0x15231: shr cx, 1
0x15233: xor ax, ax
0x15235: cld
0x15236: rep stosd dword ptr es:[di], eax
0x15238: ret
0x15239: add byte ptr [bx + si], al
0x1523b: add byte ptr [bx + si], al
0x1523d: add byte ptr [bx + si], al
0x1523f: add byte ptr [bx + si], al
0x15241: add byte ptr [bx + si], al
0x15243: add word ptr [bx + si], ax
0x15245: push ax
2018-12-17T22:47:34.539816604Z 48 PC: 14553 | Get DOS version
2018-12-17T22:47:34.542279189Z 67 PC: 134bb | Get or set file attributes
2018-12-17T22:47:34.558335615Z 61 PC: 14391 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:47:34.563307154Z 63 PC: 14464 | Read file or device (Read 12288 bytes on handle 5)
2018-12-17T22:47:34.571761841Z 62 PC: 143e1 | Close file
2018-12-17T22:47:34.574290592Z 48 PC: 14553 | Get DOS version
2018-12-17T22:47:34.575729077Z 61 PC: 14391 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:47:34.583103023Z 66 PC: 144c3 | Move file pointer
2018-12-17T22:47:34.584577718Z 64 PC: 14464 | Write file or device (Write 12300 bytes on handle 5)
2018-12-17T22:47:34.594055362Z 62 PC: 143e1 | Close file
2018-12-17T22:47:34.602184338Z 65 PC: 144da | Delete file (Filename = 'A:\TEST.EXE')
2018-12-17T22:47:34.613217396Z 25 PC: 145e0 | Get default drive
2018-12-17T22:47:34.61461165Z 71 PC: 145f3 | Get current directory
2018-12-17T22:47:34.619986754Z 14 PC: 14639 | Set default drive (Drive = 'A')
2018-12-17T22:47:34.621692528Z 25 PC: 1463d | Get default drive
2018-12-17T22:47:34.623091009Z 59 PC: 146a7 | Change current directory
2018-12-17T22:47:34.628966606Z 26 PC: 134f1 | Set disk transfer address
2018-12-17T22:47:34.630050786Z 78 PC: 134a7 | Find first file
2018-12-17T22:47:34.643930147Z 26 PC: 134f1 | Set disk transfer address
2018-12-17T22:47:34.645822202Z 78 PC: 134a7 | Find first file
2018-12-17T22:47:34.661935631Z 14 PC: 14639 | Set default drive (Drive = 'C')
2018-12-17T22:47:34.663229426Z 25 PC: 1463d | Get default drive
2018-12-17T22:47:34.665172245Z 59 PC: 146a7 | Change current directory
2018-12-17T22:47:34.671328531Z 26 PC: 134f1 | Set disk transfer address
2018-12-17T22:47:34.672627165Z 78 PC: 134a7 | Find first file
2018-12-17T22:47:34.681646962Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:34.682693186Z 79 PC: 13518 | Find next file
2018-12-17T22:47:34.686097429Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:34.687989905Z 79 PC: 13518 | Find next file
2018-12-17T22:47:34.691017005Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:34.692094211Z 79 PC: 13518 | Find next file
2018-12-17T22:47:34.696336825Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:34.698031276Z 79 PC: 13518 | Find next file
2018-12-17T22:47:34.701041606Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:34.702637426Z 79 PC: 13518 | Find next file
2018-12-17T22:47:34.705683728Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:34.706715043Z 79 PC: 13518 | Find next file
2018-12-17T22:47:34.713279877Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:34.715178759Z 79 PC: 13518 | Find next file
2018-12-17T22:47:34.718345009Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:34.720534665Z 79 PC: 13518 | Find next file
2018-12-17T22:47:34.723970211Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:34.724974634Z 79 PC: 13518 | Find next file
2018-12-17T22:47:34.729117294Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:34.730304279Z 79 PC: 13518 | Find next file
2018-12-17T22:47:34.733482444Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:34.735795473Z 79 PC: 13518 | Find next file
2018-12-17T22:47:34.739442663Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:34.740466535Z 79 PC: 13518 | Find next file
2018-12-17T22:47:34.744535832Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:34.745531328Z 79 PC: 13518 | Find next file
2018-12-17T22:47:34.74842792Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:34.750701974Z 79 PC: 13518 | Find next file
2018-12-17T22:47:34.75660562Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:34.757577848Z 79 PC: 13518 | Find next file
2018-12-17T22:47:34.761093205Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:34.762590328Z 79 PC: 13518 | Find next file
2018-12-17T22:47:34.765945876Z 26 PC: 134f1 | Set disk transfer address
2018-12-17T22:47:34.767977367Z 78 PC: 134a7 | Find first file
2018-12-17T22:47:34.773993642Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:34.775318817Z 79 PC: 13518 | Find next file
2018-12-17T22:47:34.779306201Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:34.780772402Z 79 PC: 13518 | Find next file
2018-12-17T22:47:34.784003433Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:34.785573262Z 79 PC: 13518 | Find next file
2018-12-17T22:47:34.788741663Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:34.789814685Z 79 PC: 13518 | Find next file
2018-12-17T22:47:34.792998812Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:34.794364273Z 79 PC: 13518 | Find next file
2018-12-17T22:47:34.797326518Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:34.798412896Z 79 PC: 13518 | Find next file
2018-12-17T22:47:34.802116573Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:34.803157228Z 79 PC: 13518 | Find next file
2018-12-17T22:47:34.806655016Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:34.81393676Z 79 PC: 13518 | Find next file
2018-12-17T22:47:34.817054276Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:34.818067553Z 79 PC: 13518 | Find next file
2018-12-17T22:47:34.823539568Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:34.824955256Z 79 PC: 13518 | Find next file
2018-12-17T22:47:34.828274529Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:34.829955077Z 79 PC: 13518 | Find next file
2018-12-17T22:47:34.833244552Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:34.834456922Z 79 PC: 13518 | Find next file
2018-12-17T22:47:34.838022667Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:34.839068382Z 79 PC: 13518 | Find next file
2018-12-17T22:47:34.842215721Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:34.844285636Z 79 PC: 13518 | Find next file
2018-12-17T22:47:34.848351231Z 67 PC: 134bb | Get or set file attributes
2018-12-17T22:47:35.204462562Z 61 PC: 14391 | Open file (Filename = 'EMM386.EXE')
2018-12-17T22:47:35.211092516Z 64 PC: 14464 | Write file or device (Write 12288 bytes on handle 5)
2018-12-17T22:47:35.219545295Z 62 PC: 143e1 | Close file
2018-12-17T22:47:35.226563715Z 61 PC: 14391 | Open file (Filename = 'EMM386.EXE')
2018-12-17T22:47:35.23395078Z 87 PC: 134db | Get or set file date and time
2018-12-17T22:47:35.236406934Z 62 PC: 143e1 | Close file
2018-12-17T22:47:35.24204715Z 67 PC: 134bb | Get or set file attributes
2018-12-17T22:47:35.254921016Z 14 PC: 14639 | Set default drive (Drive = 'C')
2018-12-17T22:47:35.256200752Z 25 PC: 1463d | Get default drive
2018-12-17T22:47:35.257351019Z 59 PC: 146a7 | Change current directory
2018-12-17T22:47:35.263786733Z 26 PC: 134f1 | Set disk transfer address
2018-12-17T22:47:35.26481001Z 78 PC: 134a7 | Find first file
2018-12-17T22:47:35.271056586Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.272820393Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.275988335Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.2770385Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.281638684Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.282872591Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.28611693Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.287965177Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.291073689Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.292489016Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.296026634Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.297059725Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.300172761Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.301656084Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.312567009Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.313817936Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.318825652Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.319994952Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.32374919Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.325640558Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.329521378Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.331113508Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.335930589Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.337520427Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.341607894Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.343388843Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.347128211Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.34833165Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.352826164Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.353873858Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.357382696Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.358981217Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.362703285Z 26 PC: 134f1 | Set disk transfer address
2018-12-17T22:47:35.364350567Z 78 PC: 134a7 | Find first file
2018-12-17T22:47:35.372443063Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.373536926Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.377322704Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.379160733Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.384134169Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.385828415Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.390127949Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.391533118Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.396019047Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.397414359Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.401423876Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.403564074Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.407484429Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.408905638Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.413670998Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.414912957Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.417882001Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.419385139Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.422295948Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.423225446Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.426428596Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.427331074Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.430206555Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.431915937Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.43492276Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.436045334Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.439332436Z 67 PC: 134bb | Get or set file attributes
2018-12-17T22:47:35.449119912Z 61 PC: 14391 | Open file (Filename = 'DEFRAG.EXE')
2018-12-17T22:47:35.456969973Z 64 PC: 14464 | Write file or device (Write 12288 bytes on handle 5)
2018-12-17T22:47:35.467122162Z 62 PC: 143e1 | Close file
2018-12-17T22:47:35.474455624Z 61 PC: 14391 | Open file (Filename = 'DEFRAG.EXE')
2018-12-17T22:47:35.4814921Z 87 PC: 134db | Get or set file date and time
2018-12-17T22:47:35.482956442Z 62 PC: 143e1 | Close file
2018-12-17T22:47:35.48869958Z 67 PC: 134bb | Get or set file attributes
2018-12-17T22:47:35.499183333Z 14 PC: 14639 | Set default drive (Drive = 'A')
2018-12-17T22:47:35.500698187Z 25 PC: 1463d | Get default drive
2018-12-17T22:47:35.501740152Z 59 PC: 146a7 | Change current directory
2018-12-17T22:47:35.506438016Z 26 PC: 134f1 | Set disk transfer address
2018-12-17T22:47:35.508814058Z 78 PC: 134a7 | Find first file
2018-12-17T22:47:35.51490328Z 26 PC: 134f1 | Set disk transfer address
2018-12-17T22:47:35.516924608Z 78 PC: 134a7 | Find first file
2018-12-17T22:47:35.523927309Z 14 PC: 14639 | Set default drive (Drive = 'A')
2018-12-17T22:47:35.525001597Z 25 PC: 1463d | Get default drive
2018-12-17T22:47:35.526918848Z 59 PC: 146a7 | Change current directory
2018-12-17T22:47:35.530903839Z 26 PC: 134f1 | Set disk transfer address
2018-12-17T22:47:35.531868805Z 78 PC: 134a7 | Find first file
2018-12-17T22:47:35.538070501Z 26 PC: 134f1 | Set disk transfer address
2018-12-17T22:47:35.539043265Z 78 PC: 134a7 | Find first file
2018-12-17T22:47:35.545756677Z 14 PC: 14639 | Set default drive (Drive = 'C')
2018-12-17T22:47:35.547628433Z 25 PC: 1463d | Get default drive
2018-12-17T22:47:35.548681778Z 59 PC: 146a7 | Change current directory
2018-12-17T22:47:35.556381858Z 26 PC: 134f1 | Set disk transfer address
2018-12-17T22:47:35.558122653Z 78 PC: 134a7 | Find first file
2018-12-17T22:47:35.566592979Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.568007624Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.573098406Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.574456726Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.578431182Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.58000681Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.583384917Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.585668581Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.592171468Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.593290662Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.604566811Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.605709612Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.607842659Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.609005038Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.611130997Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.612143367Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.614450997Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.615900313Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.617905942Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.619495875Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.621435739Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.622413918Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.62555639Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.626985514Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.634802756Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.638349991Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.641285839Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.642207546Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.647133667Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.648157416Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.651515072Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.652997381Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.655884212Z 26 PC: 134f1 | Set disk transfer address
2018-12-17T22:47:35.657656756Z 78 PC: 134a7 | Find first file
2018-12-17T22:47:35.66368798Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.664911129Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.668764051Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.670711109Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.673774948Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.675366895Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.678364985Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.679274683Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.682803587Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.685202884Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.688085967Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.689567192Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.692719715Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.693820369Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.696897046Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.697847341Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.700681095Z 26 PC: 13513 | Set disk transfer address
2018-12-17T22:47:35.701996856Z 79 PC: 13518 | Find next file
2018-12-17T22:47:35.704138183Z 67 PC: 134bb | Get or set file attributes
2018-12-17T22:47:35.71159872Z 61 PC: 14391 | Open file (Filename = 'RESTORE.EXE')
2018-12-17T22:47:35.718420989Z 64 PC: 14464 | Write file or device (Write 12288 bytes on handle 5)
2018-12-17T22:47:35.726496521Z 62 PC: 143e1 | Close file
2018-12-17T22:47:35.733957615Z 61 PC: 14391 | Open file (Filename = 'RESTORE.EXE')
2018-12-17T22:47:35.73836607Z 87 PC: 134db | Get or set file date and time
2018-12-17T22:47:35.739359987Z 62 PC: 143e1 | Close file
2018-12-17T22:47:35.744252737Z 67 PC: 134bb | Get or set file attributes
2018-12-17T22:47:35.750535587Z 14 PC: 14639 | Set default drive (Drive = 'A')
2018-12-17T22:47:35.751526859Z 25 PC: 1463d | Get default drive
2018-12-17T22:47:35.753182861Z 59 PC: 146a7 | Change current directory
2018-12-17T22:47:35.756504132Z 37 PC: 13549 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:47:35.758194749Z 37 PC: 13d91 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:47:35.761742679Z 37 PC: 13d91 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:47:35.762693325Z 37 PC: 13d91 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:47:35.763565017Z 37 PC: 13d91 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:47:35.764643455Z 37 PC: 13d91 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:47:35.765513296Z 37 PC: 13d91 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:47:35.767421105Z 37 PC: 13d91 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:47:35.768500326Z 37 PC: 13d91 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:47:35.76950095Z 37 PC: 13d91 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:47:35.770917327Z 37 PC: 13d91 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:47:35.771841083Z 37 PC: 13d91 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:47:35.772776142Z 37 PC: 13d91 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:47:35.775718825Z 37 PC: 13d91 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:47:35.776776994Z 37 PC: 13d91 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:47:35.777786634Z 37 PC: 13d91 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:47:35.779302103Z 37 PC: 13d91 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:47:35.780375254Z 37 PC: 13d91 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:47:35.782142639Z 37 PC: 13d91 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:47:35.783165396Z 37 PC: 13d91 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:47:35.78405353Z 76 PC: 13dd0 | Terminate with return code (Return code = '0')