Sample viewer

vx.netlux.org/Virus.DOS.HLLP.Light.4917

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T21:51:12.635158089Z 53 PC: 1302a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T21:51:12.637362682Z 53 PC: 1302a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T21:51:12.638583621Z 53 PC: 1302a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T21:51:12.639754802Z 53 PC: 1302a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T21:51:12.641867711Z 53 PC: 1302a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T21:51:12.643132625Z 53 PC: 1302a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:51:12.64429666Z 53 PC: 1302a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T21:51:12.645466111Z 53 PC: 1302a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T21:51:12.647301096Z 53 PC: 1302a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T21:51:12.648441714Z 53 PC: 1302a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T21:51:12.649942204Z 53 PC: 1302a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T21:51:12.652056202Z 53 PC: 1302a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T21:51:12.653237893Z 53 PC: 1302a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T21:51:12.654354725Z 53 PC: 1302a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T21:51:12.664552917Z 53 PC: 1302a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T21:51:12.66571621Z 53 PC: 1302a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T21:51:12.666832726Z 53 PC: 1302a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T21:51:12.668203596Z 53 PC: 1302a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T21:51:12.669624995Z 53 PC: 1302a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T21:51:12.670636932Z 37 PC: 1303f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T21:51:12.672178478Z 37 PC: 13047 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T21:51:12.673359266Z 37 PC: 1304f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:51:12.674344552Z 37 PC: 13057 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T21:51:12.676671424Z 68 PC: 13f34 | I/O control for devices (Set for = ' �t4<-u�������')
2018-12-17T21:51:12.678332913Z 48 PC: 13b4a | Get DOS version
2018-12-17T21:51:12.680003377Z 61 PC: 13988 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T21:51:12.697554121Z 63 PC: 13a5b | Read file or device (Read 4917 bytes on handle 5)
2018-12-17T21:51:12.719163947Z 66 PC: 13aba | Move file pointer
2018-12-17T21:51:12.720168008Z 66 PC: 14116 | Move file pointer
2018-12-17T21:51:12.721750513Z 66 PC: 14124 | Move file pointer
2018-12-17T21:51:12.723884044Z 66 PC: 14132 | Move file pointer
2018-12-17T21:51:12.725534653Z 60 PC: 13988 | Create or truncate file
2018-12-17T21:51:12.911593104Z 62 PC: 139d8 | Close file
2018-12-17T21:51:12.914178328Z 62 PC: 139d8 | Close file
2018-12-17T21:51:12.916572074Z 53 PC: 12fa6 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T21:51:12.918575438Z 37 PC: 12faf | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T21:51:12.920087841Z 53 PC: 12fa6 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T21:51:12.921520239Z 37 PC: 12faf | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T21:51:12.922936527Z 53 PC: 12fa6 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T21:51:12.924624511Z 37 PC: 12faf | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T21:51:12.926040155Z 53 PC: 12fa6 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T21:51:12.927475178Z 37 PC: 12faf | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T21:51:12.929220789Z 53 PC: 12fa6 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T21:51:12.942278031Z 37 PC: 12faf | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T21:51:12.943581474Z 53 PC: 12fa6 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:51:12.945739343Z 37 PC: 12faf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:51:12.946839024Z 53 PC: 12fa6 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T21:51:12.947983662Z 37 PC: 12faf | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T21:51:12.949817261Z 53 PC: 12fa6 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T21:51:12.950914914Z 37 PC: 12faf | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T21:51:12.952070031Z 53 PC: 12fa6 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T21:51:12.953777731Z 37 PC: 12faf | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T21:51:12.954837726Z 53 PC: 12fa6 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T21:51:12.956102648Z 37 PC: 12faf | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T21:51:12.958088072Z 53 PC: 12fa6 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T21:51:12.959438086Z 37 PC: 12faf | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T21:51:12.960731524Z 53 PC: 12fa6 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T21:51:12.962494243Z 37 PC: 12faf | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T21:51:12.963794545Z 53 PC: 12fa6 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T21:51:12.965122783Z 37 PC: 12faf | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T21:51:12.967659446Z 53 PC: 12fa6 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T21:51:12.96989157Z 37 PC: 12faf | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T21:51:12.971278913Z 53 PC: 12fa6 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T21:51:12.973502833Z 37 PC: 12faf | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T21:51:12.974824823Z 53 PC: 12fa6 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T21:51:12.976264696Z 37 PC: 12faf | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T21:51:12.97887169Z 53 PC: 12fa6 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T21:51:12.980344881Z 37 PC: 12faf | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T21:51:12.982454967Z 53 PC: 12fa6 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T21:51:12.984326953Z 37 PC: 12faf | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T21:51:12.985900264Z 53 PC: 12fa6 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T21:51:12.987496645Z 37 PC: 12faf | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T21:51:12.989845408Z 41 PC: 12f5d | Parse filename
2018-12-17T21:51:12.991249934Z 41 PC: 12f6b | Parse filename
2018-12-17T21:51:12.992559668Z 75 PC: 12f76 | Execute program
2018-12-17T21:51:13.001713638Z 53 PC: 12fa6 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T21:51:13.003075809Z 37 PC: 12faf | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T21:51:13.004131221Z 53 PC: 12fa6 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T21:51:13.005946957Z 37 PC: 12faf | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T21:51:13.007151784Z 53 PC: 12fa6 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T21:51:13.008569058Z 37 PC: 12faf | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T21:51:13.010268615Z 53 PC: 12fa6 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T21:51:13.012104081Z 37 PC: 12faf | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T21:51:13.013681756Z 53 PC: 12fa6 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T21:51:13.015508434Z 37 PC: 12faf | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T21:51:13.017693113Z 53 PC: 12fa6 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:51:13.019652049Z 37 PC: 12faf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:51:13.022549128Z 53 PC: 12fa6 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T21:51:13.024251191Z 37 PC: 12faf | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T21:51:13.025825345Z 53 PC: 12fa6 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T21:51:13.027409932Z 37 PC: 12faf | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T21:51:13.029886741Z 53 PC: 12fa6 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T21:51:13.031472154Z 37 PC: 12faf | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T21:51:13.033019668Z 53 PC: 12fa6 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T21:51:13.035532809Z 37 PC: 12faf | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T21:51:13.037130525Z 53 PC: 12fa6 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T21:51:13.039132554Z 37 PC: 12faf | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T21:51:13.041591645Z 53 PC: 12fa6 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T21:51:13.043182394Z 37 PC: 12faf | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T21:51:13.044729017Z 53 PC: 12fa6 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T21:51:13.047170525Z 37 PC: 12faf | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T21:51:13.049053132Z 53 PC: 12fa6 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T21:51:13.050646598Z 37 PC: 12faf | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T21:51:13.053002292Z 53 PC: 12fa6 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T21:51:13.054657153Z 37 PC: 12faf | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T21:51:13.056222763Z 53 PC: 12fa6 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T21:51:13.058250063Z 37 PC: 12faf | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T21:51:13.059356748Z 53 PC: 12fa6 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T21:51:13.060697836Z 37 PC: 12faf | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T21:51:13.062730459Z 53 PC: 12fa6 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T21:51:13.064283039Z 37 PC: 12faf | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T21:51:13.065562986Z 53 PC: 12fa6 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T21:51:13.067547487Z 37 PC: 12faf | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T21:51:13.070688448Z 65 PC: 13ad1 | Delete file (Filename = '����u)��')
2018-12-17T21:51:13.081821619Z 26 PC: 12ea5 | Set disk transfer address
2018-12-17T21:51:13.083004985Z 78 PC: 12eb1 | Find first file
2018-12-17T21:51:13.090393099Z 61 PC: 13988 | Open file (Filename = 'SLEEP.COM')
2018-12-17T21:51:13.097592233Z 63 PC: 13a5b | Read file or device (Read 1 bytes on handle 5)
2018-12-17T21:51:13.10478069Z 66 PC: 13aba | Move file pointer
2018-12-17T21:51:13.108082994Z 66 PC: 14116 | Move file pointer
2018-12-17T21:51:13.109932942Z 66 PC: 14124 | Move file pointer
2018-12-17T21:51:13.111769572Z 66 PC: 14132 | Move file pointer
2018-12-17T21:51:13.114876943Z 63 PC: 13a5b | Read file or device (Read 407 bytes on handle 5)
2018-12-17T21:51:13.117936627Z 62 PC: 139d8 | Close file
2018-12-17T21:51:13.120158252Z 60 PC: 13988 | Create or truncate file
2018-12-17T21:51:13.13410893Z 64 PC: 13a5b | Write file or device (Write 4917 bytes on handle 5)
2018-12-17T21:51:13.14313182Z 64 PC: 13a5b | Write file or device (Write 407 bytes on handle 5)
2018-12-17T21:51:13.152173078Z 62 PC: 139d8 | Close file
2018-12-17T21:51:13.161478266Z 26 PC: 12ec9 | Set disk transfer address
2018-12-17T21:51:13.162592923Z 79 PC: 12ece | Find next file
2018-12-17T21:51:13.166049564Z 61 PC: 13988 | Open file (Filename = 'PRINT.COM')
2018-12-17T21:51:13.182970718Z 63 PC: 13a5b | Read file or device (Read 1 bytes on handle 5)
2018-12-17T21:51:13.189678421Z 66 PC: 13aba | Move file pointer
2018-12-17T21:51:13.199981924Z 66 PC: 14116 | Move file pointer
2018-12-17T21:51:13.202514228Z 66 PC: 14124 | Move file pointer
2018-12-17T21:51:13.204266204Z 66 PC: 14132 | Move file pointer
2018-12-17T21:51:13.206317085Z 63 PC: 13a5b | Read file or device (Read 27 bytes on handle 5)
2018-12-17T21:51:13.210220568Z 62 PC: 139d8 | Close file
2018-12-17T21:51:13.213024829Z 60 PC: 13988 | Create or truncate file
2018-12-17T21:51:13.225462737Z 64 PC: 13a5b | Write file or device (Write 4917 bytes on handle 5)
2018-12-17T21:51:13.235407013Z 64 PC: 13a5b | Write file or device (Write 27 bytes on handle 5)
2018-12-17T21:51:13.238439136Z 62 PC: 139d8 | Close file
2018-12-17T21:51:13.246786118Z 26 PC: 12ec9 | Set disk transfer address
2018-12-17T21:51:13.249019957Z 79 PC: 12ece | Find next file
2018-12-17T21:51:13.252715546Z 61 PC: 13988 | Open file (Filename = 'HELLO.COM')
2018-12-17T21:51:13.259535635Z 63 PC: 13a5b | Read file or device (Read 1 bytes on handle 5)
2018-12-17T21:51:13.267842608Z 66 PC: 13aba | Move file pointer
2018-12-17T21:51:13.269802542Z 66 PC: 14116 | Move file pointer
2018-12-17T21:51:13.271668577Z 66 PC: 14124 | Move file pointer
2018-12-17T21:51:13.274767356Z 66 PC: 14132 | Move file pointer
2018-12-17T21:51:13.277240959Z 63 PC: 13a5b | Read file or device (Read 92 bytes on handle 5)
2018-12-17T21:51:13.28026545Z 62 PC: 139d8 | Close file
2018-12-17T21:51:13.28427296Z 60 PC: 13988 | Create or truncate file
2018-12-17T21:51:13.296746526Z 64 PC: 13a5b | Write file or device (Write 4917 bytes on handle 5)
2018-12-17T21:51:13.305674416Z 64 PC: 13a5b | Write file or device (Write 92 bytes on handle 5)
2018-12-17T21:51:13.309880223Z 62 PC: 139d8 | Close file
2018-12-17T21:51:13.318341434Z 26 PC: 12ec9 | Set disk transfer address
2018-12-17T21:51:13.319870919Z 79 PC: 12ece | Find next file
2018-12-17T21:51:13.323326028Z 61 PC: 13988 | Open file (Filename = 'PHANG.COM')
2018-12-17T21:51:13.331290406Z 63 PC: 13a5b | Read file or device (Read 1 bytes on handle 5)
2018-12-17T21:51:13.338095886Z 66 PC: 13aba | Move file pointer
2018-12-17T21:51:13.339933138Z 66 PC: 14116 | Move file pointer
2018-12-17T21:51:13.342473923Z 66 PC: 14124 | Move file pointer
2018-12-17T21:51:13.344338161Z 66 PC: 14132 | Move file pointer
2018-12-17T21:51:13.346449462Z 63 PC: 13a5b | Read file or device (Read 29 bytes on handle 5)
2018-12-17T21:51:13.350799683Z 62 PC: 139d8 | Close file
2018-12-17T21:51:13.353785424Z 60 PC: 13988 | Create or truncate file
2018-12-17T21:51:13.373622402Z 64 PC: 13a5b | Write file or device (Write 4917 bytes on handle 5)
2018-12-17T21:51:13.383096709Z 64 PC: 13a5b | Write file or device (Write 29 bytes on handle 5)
2018-12-17T21:51:13.385809411Z 62 PC: 139d8 | Close file
2018-12-17T21:51:13.394280082Z 26 PC: 12ec9 | Set disk transfer address
2018-12-17T21:51:13.396207613Z 79 PC: 12ece | Find next file
2018-12-17T21:51:13.399481087Z 61 PC: 13988 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T21:51:13.406317385Z 63 PC: 13a5b | Read file or device (Read 1 bytes on handle 5)
2018-12-17T21:51:13.413404965Z 66 PC: 13aba | Move file pointer
2018-12-17T21:51:13.415360607Z 66 PC: 14116 | Move file pointer
2018-12-17T21:51:13.417047211Z 66 PC: 14124 | Move file pointer
2018-12-17T21:51:13.419388629Z 66 PC: 14132 | Move file pointer
2018-12-17T21:51:13.422111033Z 63 PC: 13a5b | Read file or device (Read 29 bytes on handle 5)
2018-12-17T21:51:13.424946065Z 62 PC: 139d8 | Close file
2018-12-17T21:51:13.427591014Z 60 PC: 13988 | Create or truncate file
2018-12-17T21:51:13.440155631Z 64 PC: 13a5b | Write file or device (Write 4917 bytes on handle 5)
2018-12-17T21:51:13.448740273Z 64 PC: 13a5b | Write file or device (Write 29 bytes on handle 5)
2018-12-17T21:51:13.45227496Z 62 PC: 139d8 | Close file
2018-12-17T21:51:13.46041111Z 26 PC: 12ec9 | Set disk transfer address
2018-12-17T21:51:13.461601743Z 79 PC: 12ece | Find next file
2018-12-17T21:51:13.465755649Z 61 PC: 13988 | Open file (Filename = 'MANDEL.COM')
2018-12-17T21:51:13.472351597Z 63 PC: 13a5b | Read file or device (Read 1 bytes on handle 5)
2018-12-17T21:51:13.479029856Z 66 PC: 13aba | Move file pointer
2018-12-17T21:51:13.481741509Z 66 PC: 14116 | Move file pointer
2018-12-17T21:51:13.484079168Z 66 PC: 14124 | Move file pointer
2018-12-17T21:51:13.48563871Z 66 PC: 14132 | Move file pointer
2018-12-17T21:51:13.489008763Z 63 PC: 13a5b | Read file or device (Read 501 bytes on handle 5)
2018-12-17T21:51:13.492410622Z 62 PC: 139d8 | Close file
2018-12-17T21:51:13.494292247Z 60 PC: 13988 | Create or truncate file
2018-12-17T21:51:13.506760467Z 64 PC: 13a5b | Write file or device (Write 4917 bytes on handle 5)
2018-12-17T21:51:13.515297333Z 64 PC: 13a5b | Write file or device (Write 501 bytes on handle 5)
2018-12-17T21:51:13.523731696Z 62 PC: 139d8 | Close file
2018-12-17T21:51:13.532902708Z 26 PC: 12ec9 | Set disk transfer address
2018-12-17T21:51:13.534398339Z 79 PC: 12ece | Find next file
2018-12-17T21:51:13.538981481Z 61 PC: 13988 | Open file (Filename = 'PAH.COM')
2018-12-17T21:51:13.545945735Z 63 PC: 13a5b | Read file or device (Read 1 bytes on handle 5)
2018-12-17T21:51:13.552471085Z 66 PC: 13aba | Move file pointer
2018-12-17T21:51:13.554058458Z 66 PC: 14116 | Move file pointer
2018-12-17T21:51:13.556590181Z 66 PC: 14124 | Move file pointer
2018-12-17T21:51:13.557955002Z 66 PC: 14132 | Move file pointer
2018-12-17T21:51:13.560639973Z 63 PC: 13a5b | Read file or device (Read 29 bytes on handle 5)
2018-12-17T21:51:13.564406952Z 62 PC: 139d8 | Close file
2018-12-17T21:51:13.568712726Z 60 PC: 13988 | Create or truncate file
2018-12-17T21:51:13.605701617Z 64 PC: 13a5b | Write file or device (Write 4917 bytes on handle 5)
2018-12-17T21:51:13.614267581Z 64 PC: 13a5b | Write file or device (Write 29 bytes on handle 5)
2018-12-17T21:51:13.617338561Z 62 PC: 139d8 | Close file
2018-12-17T21:51:13.626873698Z 26 PC: 12ec9 | Set disk transfer address
2018-12-17T21:51:13.628099097Z 79 PC: 12ece | Find next file
2018-12-17T21:51:13.630372098Z 64 PC: 13650 | Write file or device (Write 47 bytes on handle 1)
2018-12-17T21:51:13.633979872Z 64 PC: 13650 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T21:51:13.635267661Z 37 PC: 13181 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T21:51:13.636881908Z 37 PC: 13181 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T21:51:13.639150286Z 37 PC: 13181 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T21:51:13.640081226Z 37 PC: 13181 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T21:51:13.641049707Z 37 PC: 13181 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T21:51:13.642614478Z 37 PC: 13181 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:51:13.643574856Z 37 PC: 13181 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T21:51:13.644532284Z 37 PC: 13181 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T21:51:13.64618746Z 37 PC: 13181 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T21:51:13.647233523Z 37 PC: 13181 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T21:51:13.648146901Z 37 PC: 13181 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T21:51:13.650298273Z 37 PC: 13181 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T21:51:13.651717551Z 37 PC: 13181 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T21:51:13.653134017Z 37 PC: 13181 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T21:51:13.655333357Z 37 PC: 13181 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T21:51:13.656865053Z 37 PC: 13181 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T21:51:13.658417773Z 37 PC: 13181 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T21:51:13.661065863Z 37 PC: 13181 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T21:51:13.662599251Z 37 PC: 13181 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T21:51:13.664282691Z 76 PC: 131c0 | Terminate with return code (Return code = '0')