NtCreateFile,0x000000f8,… ∖nso1.tmp
DeleteFile,… ∖nso1.tmp
NtCreateFile,0x000000f8,… ∖Trojan-Downloader.Win32.Zlob.bcl
NtQueryInformationFile,0x000000f8
NtReadFile,0x000000f8
NtReadFile,0x000000f8
NtCreateFile,0x000000ec,… ∖nsi2.tmp
NtSetInformationFile,0x000000f8
Box 1: Sample malware execution trace.