Sample viewer

vx.netlux.org/Virus.DOS.HLLP.Simbirsk.11472

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:49:23.654136185Z 53 PC: 13f7a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:49:23.656000685Z 53 PC: 13f7a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:49:23.657064098Z 53 PC: 13f7a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:49:23.658118467Z 53 PC: 13f7a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:49:23.65988686Z 53 PC: 13f7a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:49:23.660922498Z 53 PC: 13f7a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:49:23.661910146Z 53 PC: 13f7a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:49:23.663305293Z 53 PC: 13f7a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:49:23.664490452Z 53 PC: 13f7a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:49:23.665479382Z 53 PC: 13f7a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:49:23.667310535Z 53 PC: 13f7a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:49:23.668430029Z 53 PC: 13f7a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:49:23.669748315Z 53 PC: 13f7a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:49:23.671648839Z 53 PC: 13f7a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:49:23.672908923Z 53 PC: 13f7a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:49:23.674084914Z 53 PC: 13f7a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:49:23.675488427Z 53 PC: 13f7a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:49:23.677313764Z 53 PC: 13f7a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:49:23.678609443Z 53 PC: 13f7a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:49:23.680110359Z 37 PC: 13f8f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:49:23.69011187Z 37 PC: 13f97 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:49:23.691592905Z 37 PC: 13f9f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:49:23.692891879Z 37 PC: 13fa7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:49:23.701592239Z 68 PC: 14fc5 | I/O control for devices (Set for = '')
2018-12-17T22:49:23.704043296Z 42 PC: 13be7 | Get date 0x13be7: xor ah, ah
0x13be9: les di, ptr [bp + 6]
0x13bec: stosw word ptr es:[di], ax
0x13bed: mov al, dl
0x13bef: les di, ptr [bp + 0xa]
0x13bf2: stosw word ptr es:[di], ax
0x13bf3: mov al, dh
0x13bf5: les di, ptr [bp + 0xe]
0x13bf8: stosw word ptr es:[di], ax
0x13bf9: xchg ax, cx
0x13bfa: les di, ptr [bp + 0x12]
0x13bfd: stosw word ptr es:[di], ax
0x13bfe: pop bp
0x13bff: retf 0x10
0x13c02: push bp
0x13c03: mov bp, sp
0x13c05: mov cx, word ptr [bp + 0xa]
0x13c08: mov dh, byte ptr [bp + 8]
0x13c0b: mov dl, byte ptr [bp + 6]
0x13c0e: mov ah, 0x2b
2018-12-17T22:49:23.706023075Z 48 PC: 14af5 | Get DOS version
2018-12-17T22:49:23.711244382Z 67 PC: 13c61 | Get or set file attributes
2018-12-17T22:49:23.714995981Z 67 PC: 13c88 | Get or set file attributes
2018-12-17T22:49:23.728456709Z 61 PC: 14933 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:49:23.734231471Z 87 PC: 13ca2 | Get or set file date and time
2018-12-17T22:49:23.735956451Z 63 PC: 14a06 | Read file or device (Read 11472 bytes on handle 5)
2018-12-17T22:49:23.74181597Z 60 PC: 14933 | Create or truncate file
2018-12-17T22:49:23.749159109Z 64 PC: 14a06 | Write file or device (Write 11472 bytes on handle 6)
2018-12-17T22:49:23.759250059Z 62 PC: 14983 | Close file
2018-12-17T22:49:23.764524094Z 44 PC: 150fc | Get time 0x150fc: mov word ptr [0x44], cx
0x15100: mov word ptr [0x46], dx
0x15104: retf
0x15105: mov cx, di
0x15107: mov si, 0xa
0x1510a: mov bx, dx
0x1510c: or bx, bx
0x1510e: jns 0x15121
0x15110: neg bx
0x15112: neg ax
0x15114: sbb bx, 0
0x15117: call 0x15121
0x1511a: dec di
0x1511b: mov byte ptr es:[di], 0x2d
0x1511f: inc cx
0x15120: ret
0x15121: xor dx, dx
0x15123: xchg ax, bx
0x15124: div si
0x15126: xchg ax, bx
2018-12-17T22:49:23.767048897Z 25 PC: 14b82 | Get default drive
2018-12-17T22:49:23.769577656Z 71 PC: 14b95 | Get current directory
2018-12-17T22:49:23.772137089Z 26 PC: 13cff | Set disk transfer address
2018-12-17T22:49:23.773116015Z 78 PC: 13d0b | Find first file
2018-12-17T22:49:23.780585326Z 67 PC: 13c61 | Get or set file attributes
2018-12-17T22:49:23.800245436Z 67 PC: 13c88 | Get or set file attributes
2018-12-17T22:49:23.8071452Z 61 PC: 14933 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:49:23.812013856Z 87 PC: 13ca2 | Get or set file date and time
2018-12-17T22:49:23.813744161Z 63 PC: 14a06 | Read file or device (Read 11472 bytes on handle 6)
2018-12-17T22:49:23.822371179Z 66 PC: 14a65 | Move file pointer
2018-12-17T22:49:23.824380761Z 64 PC: 14a06 | Write file or device (Write 11472 bytes on handle 6)
2018-12-17T22:49:23.834088808Z 66 PC: 152c5 | Move file pointer
2018-12-17T22:49:23.836093906Z 66 PC: 152d3 | Move file pointer
2018-12-17T22:49:23.839108061Z 66 PC: 152e1 | Move file pointer
2018-12-17T22:49:23.841194444Z 66 PC: 14a65 | Move file pointer
2018-12-17T22:49:23.84369223Z 64 PC: 14a06 | Write file or device (Write 11472 bytes on handle 6)
2018-12-17T22:49:23.855233484Z 87 PC: 13ccf | Get or set file date and time
2018-12-17T22:49:23.857450867Z 62 PC: 14983 | Close file
2018-12-17T22:49:23.866300546Z 67 PC: 13c88 | Get or set file attributes
2018-12-17T22:49:23.877331924Z 26 PC: 13d23 | Set disk transfer address
2018-12-17T22:49:23.878834139Z 79 PC: 13d28 | Find next file
2018-12-17T22:49:23.886228454Z 26 PC: 13cff | Set disk transfer address
2018-12-17T22:49:23.888521499Z 78 PC: 13d0b | Find first file
2018-12-17T22:49:23.894983944Z 67 PC: 13c61 | Get or set file attributes
2018-12-17T22:49:23.90091466Z 67 PC: 13c88 | Get or set file attributes
2018-12-17T22:49:23.916244781Z 61 PC: 14933 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:49:23.920430834Z 87 PC: 13ca2 | Get or set file date and time
2018-12-17T22:49:23.921609498Z 62 PC: 14983 | Close file
2018-12-17T22:49:23.92334513Z 26 PC: 13d23 | Set disk transfer address
2018-12-17T22:49:23.924302475Z 79 PC: 13d28 | Find next file
2018-12-17T22:49:23.930545519Z 26 PC: 13cff | Set disk transfer address
2018-12-17T22:49:23.932437709Z 78 PC: 13d0b | Find first file
2018-12-17T22:49:23.941449184Z 67 PC: 13c61 | Get or set file attributes
2018-12-17T22:49:23.947393062Z 67 PC: 13c88 | Get or set file attributes
2018-12-17T22:49:24.298423481Z 61 PC: 14933 | Open file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:49:24.304083759Z 87 PC: 13ca2 | Get or set file date and time
2018-12-17T22:49:24.305448399Z 63 PC: 14a06 | Read file or device (Read 11472 bytes on handle 6)
2018-12-17T22:49:24.313320467Z 66 PC: 14a65 | Move file pointer
2018-12-17T22:49:24.314982206Z 64 PC: 14a06 | Write file or device (Write 11472 bytes on handle 6)
2018-12-17T22:49:24.322051009Z 66 PC: 152c5 | Move file pointer
2018-12-17T22:49:24.324084858Z 66 PC: 152d3 | Move file pointer
2018-12-17T22:49:24.326260285Z 66 PC: 152e1 | Move file pointer
2018-12-17T22:49:24.327422874Z 66 PC: 14a65 | Move file pointer
2018-12-17T22:49:24.32855704Z 64 PC: 14a06 | Write file or device (Write 11208 bytes on handle 6)
2018-12-17T22:49:24.339999374Z 87 PC: 13ccf | Get or set file date and time
2018-12-17T22:49:24.34116567Z 62 PC: 14983 | Close file
2018-12-17T22:49:24.348154551Z 67 PC: 13c88 | Get or set file attributes
2018-12-17T22:49:24.355175474Z 26 PC: 13d23 | Set disk transfer address
2018-12-17T22:49:24.35647162Z 79 PC: 13d28 | Find next file
2018-12-17T22:49:24.358821206Z 67 PC: 13c61 | Get or set file attributes
2018-12-17T22:49:24.363444034Z 67 PC: 13c88 | Get or set file attributes
2018-12-17T22:49:24.369994875Z 61 PC: 14933 | Open file (Filename = 'C:\DOS\CHKDSK.EXE')
2018-12-17T22:49:24.377181105Z 87 PC: 13ca2 | Get or set file date and time
2018-12-17T22:49:24.379671884Z 63 PC: 14a06 | Read file or device (Read 11472 bytes on handle 6)
2018-12-17T22:49:24.387525734Z 66 PC: 14a65 | Move file pointer
2018-12-17T22:49:24.388640412Z 64 PC: 14a06 | Write file or device (Write 11472 bytes on handle 6)
2018-12-17T22:49:24.395092353Z 66 PC: 152c5 | Move file pointer
2018-12-17T22:49:24.39626438Z 66 PC: 152d3 | Move file pointer
2018-12-17T22:49:24.39743998Z 66 PC: 152e1 | Move file pointer
2018-12-17T22:49:24.398979147Z 66 PC: 14a65 | Move file pointer
2018-12-17T22:49:24.400332367Z 64 PC: 14a06 | Write file or device (Write 11472 bytes on handle 6)
2018-12-17T22:49:24.406610875Z 87 PC: 13ccf | Get or set file date and time
2018-12-17T22:49:24.408405794Z 62 PC: 14983 | Close file
2018-12-17T22:49:24.413028131Z 67 PC: 13c88 | Get or set file attributes
2018-12-17T22:49:24.419388802Z 66 PC: 152c5 | Move file pointer
2018-12-17T22:49:24.421163936Z 66 PC: 152d3 | Move file pointer
2018-12-17T22:49:24.422219173Z 66 PC: 152e1 | Move file pointer
2018-12-17T22:49:24.423367174Z 66 PC: 14a65 | Move file pointer
2018-12-17T22:49:24.42523583Z 63 PC: 14a06 | Read file or device (Read 11472 bytes on handle 5)
2018-12-17T22:49:24.430637695Z 66 PC: 14a65 | Move file pointer
2018-12-17T22:49:24.431870529Z 64 PC: 14a06 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T22:49:24.437549217Z 66 PC: 152c5 | Move file pointer
2018-12-17T22:49:24.43882441Z 66 PC: 152d3 | Move file pointer
2018-12-17T22:49:24.439749461Z 66 PC: 152e1 | Move file pointer
2018-12-17T22:49:24.44129405Z 66 PC: 14a65 | Move file pointer
2018-12-17T22:49:24.443401344Z 64 PC: 14964 | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:49:24.45129845Z 87 PC: 13ccf | Get or set file date and time
2018-12-17T22:49:24.45349698Z 62 PC: 14983 | Close file
2018-12-17T22:49:24.460477438Z 67 PC: 13c88 | Get or set file attributes
2018-12-17T22:49:24.470914348Z 53 PC: 13eea | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:49:24.472219768Z 37 PC: 13ef3 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:49:24.473529665Z 53 PC: 13eea | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:49:24.474606418Z 37 PC: 13ef3 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:49:24.476299194Z 53 PC: 13eea | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:49:24.47745964Z 37 PC: 13ef3 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:49:24.478495158Z 53 PC: 13eea | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:49:24.480385869Z 37 PC: 13ef3 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:49:24.481442731Z 53 PC: 13eea | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:49:24.482409083Z 37 PC: 13ef3 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:49:24.483562126Z 53 PC: 13eea | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:49:24.485374234Z 37 PC: 13ef3 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:49:24.486381743Z 53 PC: 13eea | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:49:24.488179544Z 37 PC: 13ef3 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:49:24.489620999Z 53 PC: 13eea | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:49:24.490716236Z 37 PC: 13ef3 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:49:24.493102196Z 53 PC: 13eea | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:49:24.494222833Z 37 PC: 13ef3 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:49:24.495251402Z 53 PC: 13eea | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:49:24.496602946Z 37 PC: 13ef3 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:49:24.498342746Z 53 PC: 13eea | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:49:24.499479872Z 37 PC: 13ef3 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:49:24.502527517Z 53 PC: 13eea | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:49:24.504315939Z 37 PC: 13ef3 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:49:24.505593106Z 53 PC: 13eea | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:49:24.509897896Z 37 PC: 13ef3 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:49:24.511406334Z 53 PC: 13eea | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:49:24.512971467Z 37 PC: 13ef3 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:49:24.51612681Z 53 PC: 13eea | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:49:24.517680704Z 37 PC: 13ef3 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:49:24.519165117Z 53 PC: 13eea | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:49:24.521231217Z 37 PC: 13ef3 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:49:24.523713708Z 53 PC: 13eea | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:49:24.525056549Z 37 PC: 13ef3 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:49:24.526420711Z 53 PC: 13eea | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:49:24.529151466Z 37 PC: 13ef3 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:49:24.530083411Z 53 PC: 13eea | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:49:24.531146235Z 37 PC: 13ef3 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:49:24.532488881Z 48 PC: 14af5 | Get DOS version
2018-12-17T22:49:24.535059443Z 41 PC: 13ea1 | Parse filename
2018-12-17T22:49:24.536365681Z 41 PC: 13eaf | Parse filename
2018-12-17T22:49:24.537987954Z 75 PC: 13eba | Execute program
2018-12-17T22:49:24.554382373Z 9 PC: 209bc | Display string (Could not find end pointer)
2018-12-17T22:49:24.559899395Z 76 PC: 209c1 | Terminate with return code (Return code = '0')
2018-12-17T22:49:24.563262542Z 53 PC: 13eea | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:49:24.564454852Z 37 PC: 13ef3 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:49:24.5669597Z 53 PC: 13eea | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:49:24.56802182Z 37 PC: 13ef3 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:49:24.56908434Z 53 PC: 13eea | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:49:24.570328458Z 37 PC: 13ef3 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:49:24.571625861Z 53 PC: 13eea | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:49:24.572678741Z 37 PC: 13ef3 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:49:24.574020746Z 53 PC: 13eea | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:49:24.575426925Z 37 PC: 13ef3 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:49:24.576676589Z 53 PC: 13eea | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:49:24.578719068Z 37 PC: 13ef3 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:49:24.580546787Z 53 PC: 13eea | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:49:24.581899579Z 37 PC: 13ef3 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:49:24.583712382Z 53 PC: 13eea | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:49:24.585663431Z 37 PC: 13ef3 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:49:24.586771565Z 53 PC: 13eea | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:49:24.588248445Z 37 PC: 13ef3 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:49:24.589437727Z 53 PC: 13eea | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:49:24.590555223Z 37 PC: 13ef3 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:49:24.592916899Z 53 PC: 13eea | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:49:24.594431066Z 37 PC: 13ef3 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:49:24.595689947Z 53 PC: 13eea | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:49:24.597733298Z 37 PC: 13ef3 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:49:24.599540347Z 53 PC: 13eea | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:49:24.601052464Z 37 PC: 13ef3 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:49:24.603835895Z 53 PC: 13eea | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:49:24.605176208Z 37 PC: 13ef3 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:49:24.607517264Z 53 PC: 13eea | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:49:24.608869034Z 37 PC: 13ef3 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:49:24.610880957Z 53 PC: 13eea | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:49:24.612645299Z 37 PC: 13ef3 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:49:24.614290422Z 53 PC: 13eea | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:49:24.615728767Z 37 PC: 13ef3 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:49:24.61821741Z 53 PC: 13eea | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:49:24.619784004Z 37 PC: 13ef3 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:49:24.621326028Z 53 PC: 13eea | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:49:24.623987451Z 37 PC: 13ef3 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:49:24.625163728Z 77 PC: 13ed8 | Get program return code
2018-12-17T22:49:24.626438446Z 61 PC: 14933 | Open file (Filename = '�')
2018-12-17T22:49:24.633343468Z 63 PC: 14a06 | Read file or device (Read 11472 bytes on handle 5)
2018-12-17T22:49:24.641350932Z 67 PC: 13c61 | Get or set file attributes
2018-12-17T22:49:24.648006483Z 67 PC: 13c88 | Get or set file attributes
2018-12-17T22:49:24.658024387Z 61 PC: 14933 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:49:24.665426437Z 87 PC: 13ca2 | Get or set file date and time
2018-12-17T22:49:24.667277333Z 63 PC: 14a06 | Read file or device (Read 11472 bytes on handle 6)
2018-12-17T22:49:24.675657179Z 66 PC: 14a65 | Move file pointer
2018-12-17T22:49:24.677060914Z 64 PC: 14a06 | Write file or device (Write 11472 bytes on handle 6)
2018-12-17T22:49:24.685722342Z 66 PC: 152c5 | Move file pointer
2018-12-17T22:49:24.687264264Z 66 PC: 152d3 | Move file pointer
2018-12-17T22:49:24.688711661Z 66 PC: 152e1 | Move file pointer
2018-12-17T22:49:24.690082941Z 66 PC: 14a65 | Move file pointer
2018-12-17T22:49:24.692753136Z 64 PC: 14a06 | Write file or device (Write 5120 bytes on handle 6)
2018-12-17T22:49:24.701259796Z 87 PC: 13ccf | Get or set file date and time
2018-12-17T22:49:24.702816159Z 62 PC: 14983 | Close file
2018-12-17T22:49:24.711633466Z 67 PC: 13c88 | Get or set file attributes
2018-12-17T22:49:24.723021771Z 62 PC: 14983 | Close file
2018-12-17T22:49:24.725415317Z 65 PC: 14a7c | Delete file (Filename = '��W��')
2018-12-17T22:49:24.737183756Z 64 PC: 145fb | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:49:24.73879667Z 37 PC: 140d1 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:49:24.739812518Z 37 PC: 140d1 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:49:24.741138155Z 37 PC: 140d1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:49:24.742635759Z 37 PC: 140d1 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:49:24.744268531Z 37 PC: 140d1 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:49:24.745752217Z 37 PC: 140d1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:49:24.747057124Z 37 PC: 140d1 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:49:24.748913087Z 37 PC: 140d1 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:49:24.750161395Z 37 PC: 140d1 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:49:24.751478175Z 37 PC: 140d1 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:49:24.753437164Z 37 PC: 140d1 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:49:24.754729407Z 37 PC: 140d1 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:49:24.756044388Z 37 PC: 140d1 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:49:24.75790174Z 37 PC: 140d1 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:49:24.758961189Z 37 PC: 140d1 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:49:24.760001542Z 37 PC: 140d1 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:49:24.761970976Z 37 PC: 140d1 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:49:24.763446812Z 37 PC: 140d1 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:49:24.764827041Z 37 PC: 140d1 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:49:24.766805498Z 76 PC: 14110 | Terminate with return code (Return code = '0')