Technical Information
- %TEMP%\tmpf9d8.tmp
- %TEMP%\tmpf9f8.tmp
- %TEMP%\tmpfa09.tmp
- from %TEMP%\tmpf9f8.tmp to <PATH_SAMPLE>.jpg
- '%TEMP%\tmpf9d8.tmp'
- '%TEMP%\tmpf9d8.tmp' ' (with hidden window)
- '%WINDIR%\syswow64\rundll32.exe' %TEMP%\tmpFA09.tmp Check' (with hidden window)
- '%WINDIR%\syswow64\rundll32.exe' %TEMP%\tmpFA09.tmp Check