Technical Information
- %APPDATA%\microsoft\ff515.exe
- <PATH_SAMPLE>.jpg
- %TEMP%\~pif90c.tmp
- %TEMP%\~pif92d.tmp
- %APPDATA%\microsoft\windowsupdate.exe
- %TEMP%\e_4\krnln.fnr
- '%APPDATA%\microsoft\ff515.exe' deldmedmedme "<Full path to file>"
- '%APPDATA%\microsoft\windowsupdate.exe'
- '%WINDIR%\syswow64\rundll32.exe' shimgvw.dll,ImageView_Fullscreen <PATH_SAMPLE>.jpg