Sample viewer

vx.netlux.org/Virus.DOS.HLLP.8600

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:48:44.418620128Z 53 PC: 1367a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:48:44.420431532Z 53 PC: 1367a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:48:44.423959347Z 53 PC: 1367a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:48:44.42581738Z 53 PC: 1367a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:48:44.435801282Z 53 PC: 1367a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:48:44.437874085Z 53 PC: 1367a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:48:44.444537197Z 53 PC: 1367a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:48:44.446556422Z 53 PC: 1367a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:48:44.448400414Z 53 PC: 1367a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:48:44.450618978Z 53 PC: 1367a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:48:44.452082543Z 53 PC: 1367a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:48:44.453493172Z 53 PC: 1367a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:48:44.456176029Z 53 PC: 1367a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:48:44.457578022Z 53 PC: 1367a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:48:44.458979634Z 53 PC: 1367a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:48:44.462417906Z 53 PC: 1367a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:48:44.464899612Z 53 PC: 1367a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:48:44.47040584Z 53 PC: 1367a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:48:44.473412013Z 53 PC: 1367a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:48:44.475051616Z 37 PC: 1368f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:48:44.476625556Z 37 PC: 13697 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:48:44.478885035Z 37 PC: 1369f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:48:44.480229436Z 37 PC: 136a7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:48:44.48201373Z 68 PC: 14432 | I/O control for devices (Set for = '��o�@�`�@�a��}�@�~� ø���Q�����\')
2018-12-17T22:48:44.493437644Z 48 PC: 13f62 | Get DOS version
2018-12-17T22:48:44.496328971Z 61 PC: 13da0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:48:44.505174843Z 87 PC: 133b0 | Get or set file date and time
2018-12-17T22:48:44.508109965Z 60 PC: 13da0 | Create or truncate file
2018-12-17T22:48:44.526921546Z 66 PC: 13ed2 | Move file pointer
2018-12-17T22:48:44.534689532Z 63 PC: 13e73 | Read file or device (Read 8192 bytes on handle 5)
2018-12-17T22:48:44.547699862Z 64 PC: 13e73 | Write file or device (Write 5120 bytes on handle 6)
2018-12-17T22:48:44.558391336Z 66 PC: 14531 | Move file pointer
2018-12-17T22:48:44.560367856Z 66 PC: 1453f | Move file pointer
2018-12-17T22:48:44.562219219Z 66 PC: 1454d | Move file pointer
2018-12-17T22:48:44.565953917Z 62 PC: 13df0 | Close file
2018-12-17T22:48:44.568972259Z 87 PC: 133dd | Get or set file date and time
2018-12-17T22:48:44.571583593Z 62 PC: 13df0 | Close file
2018-12-17T22:48:44.582204604Z 67 PC: 1336f | Get or set file attributes
2018-12-17T22:48:44.589475526Z 61 PC: 13da0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:48:44.597306077Z 87 PC: 133b0 | Get or set file date and time
2018-12-17T22:48:44.60020811Z 63 PC: 13e73 | Read file or device (Read 8600 bytes on handle 5)
2018-12-17T22:48:44.610721975Z 66 PC: 13ed2 | Move file pointer
2018-12-17T22:48:44.612792564Z 64 PC: 13e73 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:48:44.616429143Z 87 PC: 133dd | Get or set file date and time
2018-12-17T22:48:44.618931797Z 62 PC: 13df0 | Close file
2018-12-17T22:48:44.627458614Z 67 PC: 13396 | Get or set file attributes
2018-12-17T22:48:44.639881077Z 26 PC: 1340d | Set disk transfer address
2018-12-17T22:48:44.642227596Z 78 PC: 13419 | Find first file
2018-12-17T22:48:44.654597403Z 26 PC: 1340d | Set disk transfer address
2018-12-17T22:48:44.656180671Z 78 PC: 13419 | Find first file
2018-12-17T22:48:44.665193699Z 61 PC: 13da0 | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:48:44.673465701Z 63 PC: 13e73 | Read file or device (Read 27 bytes on handle 5)
2018-12-17T22:48:44.680212048Z 62 PC: 13df0 | Close file
2018-12-17T22:48:44.683819257Z 60 PC: 13da0 | Create or truncate file
2018-12-17T22:48:45.027446734Z 67 PC: 1336f | Get or set file attributes
2018-12-17T22:48:45.034621363Z 61 PC: 13da0 | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:48:45.043641193Z 87 PC: 133b0 | Get or set file date and time
2018-12-17T22:48:45.045219327Z 64 PC: 13e73 | Write file or device (Write 8600 bytes on handle 5)
2018-12-17T22:48:45.0604755Z 63 PC: 13e73 | Read file or device (Read 8192 bytes on handle 6)
2018-12-17T22:48:45.070149623Z 64 PC: 13e73 | Write file or device (Write 8192 bytes on handle 5)
2018-12-17T22:48:45.079546773Z 66 PC: 14531 | Move file pointer
2018-12-17T22:48:45.080927811Z 66 PC: 1453f | Move file pointer
2018-12-17T22:48:45.08294418Z 66 PC: 1454d | Move file pointer
2018-12-17T22:48:45.084491193Z 63 PC: 13e73 | Read file or device (Read 8192 bytes on handle 6)
2018-12-17T22:48:45.09184482Z 64 PC: 13e73 | Write file or device (Write 3016 bytes on handle 5)
2018-12-17T22:48:45.100927127Z 66 PC: 14531 | Move file pointer
2018-12-17T22:48:45.102403927Z 66 PC: 1453f | Move file pointer
2018-12-17T22:48:45.103770788Z 66 PC: 1454d | Move file pointer
2018-12-17T22:48:45.105195554Z 62 PC: 13df0 | Close file
2018-12-17T22:48:45.107575186Z 87 PC: 133dd | Get or set file date and time
2018-12-17T22:48:45.109273072Z 62 PC: 13df0 | Close file
2018-12-17T22:48:45.116998486Z 65 PC: 13ee9 | Delete file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:48:45.129361368Z 86 PC: 13f2d | Rename file
2018-12-17T22:48:45.135768868Z 67 PC: 13396 | Get or set file attributes
2018-12-17T22:48:45.146473797Z 26 PC: 13431 | Set disk transfer address
2018-12-17T22:48:45.148875065Z 79 PC: 13436 | Find next file
2018-12-17T22:48:45.153409154Z 61 PC: 13da0 | Open file (Filename = 'C:\DOS\CHKDSK.EXE')
2018-12-17T22:48:45.161167476Z 26 PC: 13431 | Set disk transfer address
2018-12-17T22:48:45.162464364Z 79 PC: 13436 | Find next file
2018-12-17T22:48:45.166897316Z 61 PC: 13da0 | Open file (Filename = 'C:\DOS\DEBUG.EXE')
2018-12-17T22:48:45.1714155Z 63 PC: 13e73 | Read file or device (Read 27 bytes on handle 6)
2018-12-17T22:48:45.175312299Z 62 PC: 13df0 | Close file
2018-12-17T22:48:45.17715546Z 60 PC: 13da0 | Create or truncate file
2018-12-17T22:48:45.185650182Z 67 PC: 1336f | Get or set file attributes
2018-12-17T22:48:45.19089528Z 61 PC: 13da0 | Open file (Filename = 'C:\DOS\DEBUG.EXE')
2018-12-17T22:48:45.196845008Z 87 PC: 133b0 | Get or set file date and time
2018-12-17T22:48:45.198174133Z 64 PC: 13e73 | Write file or device (Write 8600 bytes on handle 6)
2018-12-17T22:48:45.204634097Z 63 PC: 13e73 | Read file or device (Read 8192 bytes on handle 7)
2018-12-17T22:48:45.21076577Z 64 PC: 13e73 | Write file or device (Write 8192 bytes on handle 6)
2018-12-17T22:48:45.216802579Z 66 PC: 14531 | Move file pointer
2018-12-17T22:48:45.217900089Z 66 PC: 1453f | Move file pointer
2018-12-17T22:48:45.21989965Z 66 PC: 1454d | Move file pointer
2018-12-17T22:48:45.221392662Z 63 PC: 13e73 | Read file or device (Read 8192 bytes on handle 7)
2018-12-17T22:48:45.226784152Z 64 PC: 13e73 | Write file or device (Write 7526 bytes on handle 6)
2018-12-17T22:48:45.253744542Z 66 PC: 14531 | Move file pointer
2018-12-17T22:48:45.255449317Z 66 PC: 1453f | Move file pointer
2018-12-17T22:48:45.257487975Z 66 PC: 1454d | Move file pointer
2018-12-17T22:48:45.260520758Z 62 PC: 13df0 | Close file
2018-12-17T22:48:45.262864497Z 87 PC: 133dd | Get or set file date and time
2018-12-17T22:48:45.264854817Z 62 PC: 13df0 | Close file
2018-12-17T22:48:45.273285285Z 65 PC: 13ee9 | Delete file (Filename = 'C:\DOS\DEBUG.EXE')
2018-12-17T22:48:45.28566589Z 86 PC: 13f2d | Rename file
2018-12-17T22:48:45.291681154Z 67 PC: 13396 | Get or set file attributes
2018-12-17T22:48:45.305118606Z 26 PC: 13431 | Set disk transfer address
2018-12-17T22:48:45.307085587Z 79 PC: 13436 | Find next file
2018-12-17T22:48:45.311897733Z 61 PC: 13da0 | Open file (Filename = 'C:\DOS\EXPAND.EXE')
2018-12-17T22:48:45.320522825Z 26 PC: 13431 | Set disk transfer address
2018-12-17T22:48:45.322633073Z 79 PC: 13436 | Find next file
2018-12-17T22:48:45.327290395Z 61 PC: 13da0 | Open file (Filename = 'C:\DOS\FDISK.EXE')
2018-12-17T22:48:45.336893722Z 63 PC: 13e73 | Read file or device (Read 27 bytes on handle 7)
2018-12-17T22:48:45.344434239Z 62 PC: 13df0 | Close file
2018-12-17T22:48:45.358985944Z 60 PC: 13da0 | Create or truncate file
2018-12-17T22:48:45.373720489Z 67 PC: 1336f | Get or set file attributes
2018-12-17T22:48:45.382981473Z 61 PC: 13da0 | Open file (Filename = 'C:\DOS\FDISK.EXE')
2018-12-17T22:48:45.391830053Z 87 PC: 133b0 | Get or set file date and time
2018-12-17T22:48:45.394403359Z 64 PC: 13e73 | Write file or device (Write 8600 bytes on handle 7)
2018-12-17T22:48:45.405393928Z 63 PC: 13e73 | Read file or device (Read 8192 bytes on handle 8)
2018-12-17T22:48:45.414594027Z 64 PC: 13e73 | Write file or device (Write 8192 bytes on handle 7)
2018-12-17T22:48:45.426800963Z 66 PC: 14531 | Move file pointer
2018-12-17T22:48:45.429425848Z 66 PC: 1453f | Move file pointer
2018-12-17T22:48:45.431940818Z 66 PC: 1454d | Move file pointer
2018-12-17T22:48:45.434120001Z 63 PC: 13e73 | Read file or device (Read 8192 bytes on handle 8)
2018-12-17T22:48:45.442772349Z 64 PC: 13e73 | Write file or device (Write 8192 bytes on handle 7)
2018-12-17T22:48:45.45473238Z 66 PC: 14531 | Move file pointer
2018-12-17T22:48:45.457158475Z 66 PC: 1453f | Move file pointer
2018-12-17T22:48:45.459219445Z 66 PC: 1454d | Move file pointer
2018-12-17T22:48:45.462418578Z 63 PC: 13e73 | Read file or device (Read 8192 bytes on handle 8)
2018-12-17T22:48:45.471757237Z 64 PC: 13e73 | Write file or device (Write 8192 bytes on handle 7)
2018-12-17T22:48:45.482530949Z 66 PC: 14531 | Move file pointer
2018-12-17T22:48:45.484899455Z 66 PC: 1453f | Move file pointer
2018-12-17T22:48:45.486454912Z 66 PC: 1454d | Move file pointer
2018-12-17T22:48:45.48820074Z 63 PC: 13e73 | Read file or device (Read 8192 bytes on handle 8)
2018-12-17T22:48:45.497938542Z 64 PC: 13e73 | Write file or device (Write 4760 bytes on handle 7)
2018-12-17T22:48:45.507629393Z 66 PC: 14531 | Move file pointer
2018-12-17T22:48:45.510665679Z 66 PC: 1453f | Move file pointer
2018-12-17T22:48:45.513080807Z 66 PC: 1454d | Move file pointer
2018-12-17T22:48:45.515166187Z 62 PC: 13df0 | Close file
2018-12-17T22:48:45.517618699Z 87 PC: 133dd | Get or set file date and time
2018-12-17T22:48:45.520343221Z 62 PC: 13df0 | Close file
2018-12-17T22:48:45.52816108Z 65 PC: 13ee9 | Delete file (Filename = 'C:\DOS\FDISK.EXE')
2018-12-17T22:48:45.542265344Z 86 PC: 13f2d | Rename file
2018-12-17T22:48:45.549005331Z 67 PC: 13396 | Get or set file attributes
2018-12-17T22:48:45.561274149Z 26 PC: 13431 | Set disk transfer address
2018-12-17T22:48:45.562821718Z 79 PC: 13436 | Find next file
2018-12-17T22:48:45.568414064Z 61 PC: 13da0 | Open file (Filename = 'C:\DOS\MEM.EXE')
2018-12-17T22:48:45.576761949Z 26 PC: 13431 | Set disk transfer address
2018-12-17T22:48:45.578265795Z 79 PC: 13436 | Find next file
2018-12-17T22:48:45.583460165Z 61 PC: 13da0 | Open file (Filename = 'C:\DOS\NLSFUNC.EXE')
2018-12-17T22:48:45.592242964Z 63 PC: 13e73 | Read file or device (Read 27 bytes on handle 8)
2018-12-17T22:48:45.599295437Z 62 PC: 13df0 | Close file
2018-12-17T22:48:45.603043032Z 60 PC: 13da0 | Create or truncate file
2018-12-17T22:48:45.618240812Z 67 PC: 1336f | Get or set file attributes
2018-12-17T22:48:45.62691299Z 61 PC: 13da0 | Open file (Filename = 'C:\DOS\NLSFUNC.EXE')
2018-12-17T22:48:45.636505729Z 87 PC: 133b0 | Get or set file date and time
2018-12-17T22:48:45.638596434Z 64 PC: 13e73 | Write file or device (Write 8600 bytes on handle 8)
2018-12-17T22:48:45.64910863Z 63 PC: 13e73 | Read file or device (Read 8192 bytes on handle 9)
2018-12-17T22:48:45.663109139Z 64 PC: 13e73 | Write file or device (Write 7036 bytes on handle 8)
2018-12-17T22:48:45.673267614Z 66 PC: 14531 | Move file pointer
2018-12-17T22:48:45.675265458Z 66 PC: 1453f | Move file pointer
2018-12-17T22:48:45.6779518Z 66 PC: 1454d | Move file pointer
2018-12-17T22:48:45.679685231Z 62 PC: 13df0 | Close file
2018-12-17T22:48:45.681850369Z 87 PC: 133dd | Get or set file date and time
2018-12-17T22:48:45.684490362Z 62 PC: 13df0 | Close file
2018-12-17T22:48:45.692822523Z 65 PC: 13ee9 | Delete file (Filename = 'C:\DOS\NLSFUNC.EXE')
2018-12-17T22:48:45.704904752Z 86 PC: 13f2d | Rename file
2018-12-17T22:48:45.711588949Z 67 PC: 13396 | Get or set file attributes
2018-12-17T22:48:45.723078393Z 26 PC: 13431 | Set disk transfer address
2018-12-17T22:48:45.724462757Z 79 PC: 13436 | Find next file
2018-12-17T22:48:45.730186774Z 61 PC: 13da0 | Open file (Filename = 'C:\DOS\QBASIC.EXE')
2018-12-17T22:48:45.738344588Z 26 PC: 13431 | Set disk transfer address
2018-12-17T22:48:45.740030029Z 79 PC: 13436 | Find next file
2018-12-17T22:48:45.744594018Z 61 PC: 13da0 | Open file (Filename = 'C:\DOS\REPLACE.EXE')
2018-12-17T22:48:45.754182503Z 63 PC: 13e73 | Read file or device (Read 27 bytes on handle 9)
2018-12-17T22:48:45.761234485Z 62 PC: 13df0 | Close file
2018-12-17T22:48:45.763756243Z 60 PC: 13da0 | Create or truncate file
2018-12-17T22:48:45.778614032Z 67 PC: 1336f | Get or set file attributes
2018-12-17T22:48:45.786011035Z 61 PC: 13da0 | Open file (Filename = 'C:\DOS\REPLACE.EXE')
2018-12-17T22:48:45.794432434Z 87 PC: 133b0 | Get or set file date and time
2018-12-17T22:48:45.797859582Z 64 PC: 13e73 | Write file or device (Write 8600 bytes on handle 9)
2018-12-17T22:48:45.80829281Z 63 PC: 13e73 | Read file or device (Read 8192 bytes on handle 10)
2018-12-17T22:48:45.819363958Z 64 PC: 13e73 | Write file or device (Write 8192 bytes on handle 9)
2018-12-17T22:48:45.831447699Z 66 PC: 14531 | Move file pointer
2018-12-17T22:48:45.833499533Z 66 PC: 1453f | Move file pointer
2018-12-17T22:48:45.835470453Z 66 PC: 1454d | Move file pointer
2018-12-17T22:48:45.838654535Z 63 PC: 13e73 | Read file or device (Read 8192 bytes on handle 10)
2018-12-17T22:48:45.846891021Z 64 PC: 13e73 | Write file or device (Write 8192 bytes on handle 9)
2018-12-17T22:48:45.856903614Z 66 PC: 14531 | Move file pointer
2018-12-17T22:48:45.859779845Z 66 PC: 1453f | Move file pointer
2018-12-17T22:48:45.862101221Z 66 PC: 1454d | Move file pointer
2018-12-17T22:48:45.864213285Z 63 PC: 13e73 | Read file or device (Read 8192 bytes on handle 10)
2018-12-17T22:48:45.873269892Z 64 PC: 13e73 | Write file or device (Write 3890 bytes on handle 9)
2018-12-17T22:48:45.884029175Z 66 PC: 14531 | Move file pointer
2018-12-17T22:48:45.885664222Z 66 PC: 1453f | Move file pointer
2018-12-17T22:48:45.887976249Z 66 PC: 1454d | Move file pointer
2018-12-17T22:48:45.889841385Z 62 PC: 13df0 | Close file
2018-12-17T22:48:45.891937458Z 87 PC: 133dd | Get or set file date and time
2018-12-17T22:48:45.894472746Z 62 PC: 13df0 | Close file
2018-12-17T22:48:45.902478957Z 65 PC: 13ee9 | Delete file (Filename = 'C:\DOS\REPLACE.EXE')
2018-12-17T22:48:45.914431127Z 86 PC: 13f2d | Rename file
2018-12-17T22:48:45.920961381Z 67 PC: 13396 | Get or set file attributes
2018-12-17T22:48:45.932108976Z 26 PC: 13431 | Set disk transfer address
2018-12-17T22:48:45.933716171Z 79 PC: 13436 | Find next file
2018-12-17T22:48:45.939069271Z 61 PC: 13da0 | Open file (Filename = 'C:\DOS\RESTORE.EXE')
2018-12-17T22:48:45.947744492Z 26 PC: 13431 | Set disk transfer address
2018-12-17T22:48:45.949332386Z 79 PC: 13436 | Find next file
2018-12-17T22:48:45.954854771Z 61 PC: 13da0 | Open file (Filename = 'C:\DOS\SCANDISK.EXE')
2018-12-17T22:48:45.963100135Z 63 PC: 13e73 | Read file or device (Read 27 bytes on handle 10)
2018-12-17T22:48:45.969706326Z 62 PC: 13df0 | Close file
2018-12-17T22:48:45.972884397Z 60 PC: 13da0 | Create or truncate file
2018-12-17T22:48:45.987622584Z 67 PC: 1336f | Get or set file attributes
2018-12-17T22:48:45.994994947Z 61 PC: 13da0 | Open file (Filename = 'C:\DOS\SCANDISK.EXE')
2018-12-17T22:48:46.003506986Z 87 PC: 133b0 | Get or set file date and time
2018-12-17T22:48:46.005548247Z 64 PC: 13e73 | Write file or device (Write 8600 bytes on handle 10)
2018-12-17T22:48:46.019328622Z 63 PC: 13e73 | Read file or device (Read 8192 bytes on handle 11)
2018-12-17T22:48:46.028249768Z 64 PC: 13e73 | Write file or device (Write 8192 bytes on handle 10)
2018-12-17T22:48:46.038918809Z 66 PC: 14531 | Move file pointer
2018-12-17T22:48:46.040850519Z 66 PC: 1453f | Move file pointer
2018-12-17T22:48:46.042530423Z 66 PC: 1454d | Move file pointer
2018-12-17T22:48:46.045355621Z 63 PC: 13e73 | Read file or device (Read 8192 bytes on handle 11)
2018-12-17T22:48:46.053826211Z 64 PC: 13e73 | Write file or device (Write 8192 bytes on handle 10)
2018-12-17T22:48:46.072813155Z 66 PC: 14531 | Move file pointer
2018-12-17T22:48:46.075913704Z 66 PC: 1453f | Move file pointer
2018-12-17T22:48:46.078089433Z 66 PC: 1454d | Move file pointer
2018-12-17T22:48:46.080050604Z 63 PC: 13e73 | Read file or device (Read 8192 bytes on handle 11)
2018-12-17T22:48:46.090845766Z 64 PC: 13e73 | Write file or device (Write 8192 bytes on handle 10)
2018-12-17T22:48:46.101277571Z 66 PC: 14531 | Move file pointer
2018-12-17T22:48:46.103235369Z 66 PC: 1453f | Move file pointer
2018-12-17T22:48:46.106542553Z 66 PC: 1454d | Move file pointer
2018-12-17T22:48:46.108680243Z 63 PC: 13e73 | Read file or device (Read 8192 bytes on handle 11)
2018-12-17T22:48:46.117452622Z 64 PC: 13e73 | Write file or device (Write 8192 bytes on handle 10)
2018-12-17T22:48:46.129679232Z 66 PC: 14531 | Move file pointer
2018-12-17T22:48:46.131741778Z 66 PC: 1453f | Move file pointer
2018-12-17T22:48:46.134027438Z 66 PC: 1454d | Move file pointer
2018-12-17T22:48:46.137058654Z 63 PC: 13e73 | Read file or device (Read 8192 bytes on handle 11)
2018-12-17T22:48:46.145493612Z 64 PC: 13e73 | Write file or device (Write 8192 bytes on handle 10)
2018-12-17T22:48:46.157010716Z 66 PC: 14531 | Move file pointer
2018-12-17T22:48:46.159301886Z 66 PC: 1453f | Move file pointer
2018-12-17T22:48:46.162335343Z 66 PC: 1454d | Move file pointer
2018-12-17T22:48:46.164228485Z 63 PC: 13e73 | Read file or device (Read 8192 bytes on handle 11)
2018-12-17T22:48:46.172910003Z 64 PC: 13e73 | Write file or device (Write 8192 bytes on handle 10)
2018-12-17T22:48:46.183298926Z 66 PC: 14531 | Move file pointer
2018-12-17T22:48:46.185064256Z 66 PC: 1453f | Move file pointer
2018-12-17T22:48:46.186869215Z 66 PC: 1454d | Move file pointer
2018-12-17T22:48:46.189671537Z 63 PC: 13e73 | Read file or device (Read 8192 bytes on handle 11)
2018-12-17T22:48:46.198338431Z 64 PC: 13e73 | Write file or device (Write 8192 bytes on handle 10)
2018-12-17T22:48:46.208525612Z 66 PC: 14531 | Move file pointer
2018-12-17T22:48:46.211748966Z 66 PC: 1453f | Move file pointer
2018-12-17T22:48:46.213712455Z 66 PC: 1454d | Move file pointer
2018-12-17T22:48:46.215770133Z 63 PC: 13e73 | Read file or device (Read 8192 bytes on handle 11)
2018-12-17T22:48:46.225820762Z 64 PC: 13e73 | Write file or device (Write 8192 bytes on handle 10)
2018-12-17T22:48:46.236201652Z 66 PC: 14531 | Move file pointer
2018-12-17T22:48:46.238465028Z 66 PC: 1453f | Move file pointer
2018-12-17T22:48:46.241643775Z 66 PC: 1454d | Move file pointer
2018-12-17T22:48:46.244208276Z 63 PC: 13e73 | Read file or device (Read 8192 bytes on handle 11)
2018-12-17T22:48:46.252719354Z 64 PC: 13e73 | Write file or device (Write 8192 bytes on handle 10)
2018-12-17T22:48:46.263537973Z 66 PC: 14531 | Move file pointer
2018-12-17T22:48:46.265185823Z 66 PC: 1453f | Move file pointer
2018-12-17T22:48:46.266939759Z 66 PC: 1454d | Move file pointer
2018-12-17T22:48:46.269828418Z 63 PC: 13e73 | Read file or device (Read 8192 bytes on handle 11)
2018-12-17T22:48:46.2781008Z 64 PC: 13e73 | Write file or device (Write 8192 bytes on handle 10)
2018-12-17T22:48:46.288346912Z 66 PC: 14531 | Move file pointer
2018-12-17T22:48:46.292126756Z 66 PC: 1453f | Move file pointer
2018-12-17T22:48:46.294051673Z 66 PC: 1454d | Move file pointer
2018-12-17T22:48:46.296030943Z 63 PC: 13e73 | Read file or device (Read 8192 bytes on handle 11)
2018-12-17T22:48:46.304845162Z 64 PC: 13e73 | Write file or device (Write 8192 bytes on handle 10)
2018-12-17T22:48:46.316132374Z 66 PC: 14531 | Move file pointer
2018-12-17T22:48:46.317955031Z 66 PC: 1453f | Move file pointer
2018-12-17T22:48:46.319797821Z 66 PC: 1454d | Move file pointer
2018-12-17T22:48:46.323411502Z 63 PC: 13e73 | Read file or device (Read 8192 bytes on handle 11)
2018-12-17T22:48:46.332532517Z 64 PC: 13e73 | Write file or device (Write 8192 bytes on handle 10)
2018-12-17T22:48:46.343400539Z 66 PC: 14531 | Move file pointer
2018-12-17T22:48:46.34647424Z 66 PC: 1453f | Move file pointer
2018-12-17T22:48:46.348444762Z 66 PC: 1454d | Move file pointer
2018-12-17T22:48:46.350548217Z 63 PC: 13e73 | Read file or device (Read 8192 bytes on handle 11)
2018-12-17T22:48:46.360361994Z 64 PC: 13e73 | Write file or device (Write 8192 bytes on handle 10)
2018-12-17T22:48:46.371706965Z 66 PC: 14531 | Move file pointer
2018-12-17T22:48:46.373836839Z 66 PC: 1453f | Move file pointer
2018-12-17T22:48:46.377104333Z 66 PC: 1454d | Move file pointer
2018-12-17T22:48:46.379740587Z 63 PC: 13e73 | Read file or device (Read 8192 bytes on handle 11)
2018-12-17T22:48:46.388841152Z 64 PC: 13e73 | Write file or device (Write 8192 bytes on handle 10)
2018-12-17T22:48:46.400451029Z 66 PC: 14531 | Move file pointer
2018-12-17T22:48:46.40258473Z 66 PC: 1453f | Move file pointer
2018-12-17T22:48:46.404750365Z 66 PC: 1454d | Move file pointer
2018-12-17T22:48:46.408344547Z 63 PC: 13e73 | Read file or device (Read 8192 bytes on handle 11)
2018-12-17T22:48:46.417903724Z 64 PC: 13e73 | Write file or device (Write 8192 bytes on handle 10)
2018-12-17T22:48:46.42826467Z 66 PC: 14531 | Move file pointer
2018-12-17T22:48:46.431597099Z 66 PC: 1453f | Move file pointer
2018-12-17T22:48:46.433844916Z 66 PC: 1454d | Move file pointer
2018-12-17T22:48:46.436240966Z 63 PC: 13e73 | Read file or device (Read 8192 bytes on handle 11)
2018-12-17T22:48:46.445866837Z 64 PC: 13e73 | Write file or device (Write 1382 bytes on handle 10)
2018-12-17T22:48:46.454257076Z 66 PC: 14531 | Move file pointer
2018-12-17T22:48:46.455722202Z 66 PC: 1453f | Move file pointer
2018-12-17T22:48:46.457561325Z 66 PC: 1454d | Move file pointer
2018-12-17T22:48:46.459109962Z 62 PC: 13df0 | Close file
2018-12-17T22:48:46.461478403Z 87 PC: 133dd | Get or set file date and time
2018-12-17T22:48:46.463349484Z 62 PC: 13df0 | Close file
2018-12-17T22:48:46.47085776Z 65 PC: 13ee9 | Delete file (Filename = 'C:\DOS\SCANDISK.EXE')
2018-12-17T22:48:46.483295214Z 86 PC: 13f2d | Rename file
2018-12-17T22:48:46.489121366Z 67 PC: 13396 | Get or set file attributes
2018-12-17T22:48:46.501593503Z 26 PC: 13431 | Set disk transfer address
2018-12-17T22:48:46.503790113Z 79 PC: 13436 | Find next file
2018-12-17T22:48:46.507876289Z 41 PC: 135dc | Parse filename
2018-12-17T22:48:46.509169158Z 41 PC: 135ea | Parse filename
2018-12-17T22:48:46.511024103Z 75 PC: 135f5 | Execute program
2018-12-17T22:48:46.528284564Z 9 PC: 1b4ac | Display string (Could not find end pointer)
2018-12-17T22:48:46.534572539Z 76 PC: 1b4b1 | Terminate with return code (Return code = '0')
2018-12-17T22:48:46.537700298Z 65 PC: 13ee9 | Delete file (Filename = 'A:\Ghost.dog')
2018-12-17T22:48:46.546083816Z 64 PC: 13cfb | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:48:46.547366099Z 37 PC: 137d1 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:48:46.549732248Z 37 PC: 137d1 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:48:46.550953409Z 37 PC: 137d1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:48:46.552131442Z 37 PC: 137d1 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:48:46.553991848Z 37 PC: 137d1 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:48:46.555274664Z 37 PC: 137d1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:48:46.556960902Z 37 PC: 137d1 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:48:46.558380293Z 37 PC: 137d1 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:48:46.559617345Z 37 PC: 137d1 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:48:46.561429295Z 37 PC: 137d1 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:48:46.563215245Z 37 PC: 137d1 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:48:46.565196546Z 37 PC: 137d1 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:48:46.568784915Z 37 PC: 137d1 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:48:46.570187692Z 37 PC: 137d1 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:48:46.574416825Z 37 PC: 137d1 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:48:46.577226307Z 37 PC: 137d1 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:48:46.578601485Z 37 PC: 137d1 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:48:46.580222997Z 37 PC: 137d1 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:48:46.582954126Z 37 PC: 137d1 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:48:46.584700061Z 76 PC: 13810 | Terminate with return code (Return code = '0')