Sample viewer

vx.netlux.org/Virus.DOS.Ply.4732.b

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:34:37.094755866Z 65 PC: 12a78 | Delete file (Filename = '\NCDTREE')
2018-12-17T22:34:37.102742202Z 26 PC: 12d60 | Set disk transfer address
2018-12-17T22:34:37.103962148Z 53 PC: 12d66 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:34:37.105083163Z 37 PC: 12d81 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:34:37.106231353Z 78 PC: 12dd0 | Find first file
2018-12-17T22:34:37.110165775Z 37 PC: 12e00 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:34:37.111080853Z 98 PC: 12e0c | Get current PSP
2018-12-17T22:34:37.111809401Z 26 PC: 12e1b | Set disk transfer address
2018-12-17T22:34:37.113406474Z 98 PC: 12fec | Get current PSP