![]() "CREATE TABLE IF NOT EXISTS %Q.'%q_stat'(id INTEGER PRIMARY KEY, value BLOB) " "UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s " "UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s " Sample was identified as clean by Antivirus engines Source Hybrid Analysis Technology relevance 10/10 ![]() from Calculator - SpeedCrunchPortable_0.12.paf.exe (PID: 2520) ( Show Stream)įound API call (Target: "Calculator - SpeedCrunchPortable_0.12.paf.exe" Stream UID: "00014463-00002520-4033B6") Which is directly followed by "cmp ax, 00000006h" and "je 004033FCh". "C:\Calculator - SpeedCrunchPortable_0.12.paf.exe" marked "%TEMP%\nsw3C8C.tmp\w7tbp.dll" for deletionįound API call (Target: "Calculator - SpeedCrunchPortable_0.12.paf.exe" Stream UID: "00014463-0000-004033B6") "C:\Calculator - SpeedCrunchPortable_0.12.paf.exe" marked "%TEMP%\nsw3C8C.tmp\System.dll" for deletion "C:\Calculator - SpeedCrunchPortable_0.12.paf.exe" marked "%TEMP%\nsw3C8C.tmp\nsDialogs.dll" for deletion "C:\Calculator - SpeedCrunchPortable_0.12.paf.exe" marked "%TEMP%\nsw3C8C.tmp\modern-wizard.bmp" for deletion "C:\Calculator - SpeedCrunchPortable_0.12.paf.exe" marked "%TEMP%\nsw3C8C.tmp\modern-header.bmp" for deletion "C:\Calculator - SpeedCrunchPortable_0.12.paf.exe" marked "%TEMP%\nsw3C8C.tmp\LangDLL.dll" for deletion "C:\Calculator - SpeedCrunchPortable_0.12.paf.exe" marked "%TEMP%\nsw3C8C.tmp\FindProcDLL.dll" for deletion "C:\Calculator - SpeedCrunchPortable_0.12.paf.exe" marked "%TEMP%\nsw3C8C.tmp" for deletion "C:\Calculator - SpeedCrunchPortable_0.12.paf.exe" marked "%TEMP%\nsg3C12.tmp" for deletion
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |