Technical Information
- [<HKLM>\System\CurrentControlSet\Control\Print\Providers\1328] 'Name' = '<SYSTEM32>\spool\PRTPROCS\x64\1324643.tmp'
- [<HKLM>\System\CurrentControlSet\Services\Spooler] 'Start' = '00000002'
- %TEMP%\install_flash_player.exe
- <SYSTEM32>\spool\prtprocs\x64\1324643.tmp
- %TEMP%\ldr4652.tmp
- %TEMP%\ldr4662.tmp
- from <SYSTEM32>\spool\prtprocs\x64\1324643.tmp to %TEMP%\1363e8.tmp
- from <Full path to file> to %TEMP%\42d9.tmp
- '%TEMP%\install_flash_player.exe'