Sample viewer

vx.netlux.org/Virus.DOS.Ply.5175

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:39:07.156272781Z 65 PC: 12a7b | Delete file (Filename = '\NCDTREE')
2018-12-17T22:39:07.164216806Z 47 PC: 12d87 | Get disk transfer address
2018-12-17T22:39:07.172199465Z 26 PC: 12da5 | Set disk transfer address
2018-12-17T22:39:07.173696545Z 53 PC: 12dab | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:39:07.175259341Z 37 PC: 12dc6 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:39:07.177325454Z 78 PC: 12e14 | Find first file
2018-12-17T22:39:07.183127773Z 37 PC: 12e44 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:39:07.184659013Z 26 PC: 12e5f | Set disk transfer address
2018-12-17T22:39:07.187219595Z 98 PC: 13075 | Get current PSP