Technical Information
- '%TEMP%\ZIWIA.tmp'
- '<SYSTEM32>\rundll32.exe' <SYSTEM32>\shimgvw.dll,ImageView_Fullscreen %TEMP%\SBQPWMKO.jpg
- ClassName: 'TXGuiFoundation' WindowName: ''
- %TEMP%\ZIWIA.tmp
- %TEMP%\SBQPWMKO.jpg
- from %TEMP%\83Q1G.tmp to %TEMP%\XG35Q.tmp
- from %TEMP%\XG35Q.tmp to %TEMP%\83Q1G.tmp
- from %TEMP%\XG35Q.tmp to %TEMP%\7N3QT.tmp
- from %TEMP%\GQFHI.tmp to %TEMP%\7N3QT.tmp
- from %TEMP%\7N3QT.tmp to %TEMP%\GQFHI.tmp
- from %TEMP%\V1U8J.tmp to %TEMP%\E8VTN.tmp
- from %TEMP%\T0D4A.tmp to %TEMP%\V1U8J.tmp
- from %TEMP%\E8VTN.tmp to %TEMP%\0N1KD.tmp
- from %TEMP%\E8VTN.tmp to %TEMP%\XG35Q.tmp
- from %TEMP%\0N1KD.tmp to %TEMP%\E8VTN.tmp
- from %TEMP%\8ABU0.tmp to %TEMP%\RHJ73.tmp
- from %TEMP%\4TS6G.tmp to %TEMP%\8ABU0.tmp
- from %TEMP%\RHJ73.tmp to %TEMP%\C9HNI.tmp
- from %TEMP%\RHJ73.tmp to %TEMP%\1WKR6.tmp
- from %TEMP%\C9HNI.tmp to %TEMP%\RHJ73.tmp
- from %TEMP%\Q2BAW.tmp to %TEMP%\W64QD.tmp
- from %TEMP%\7N3QT.tmp to %TEMP%\Q2BAW.tmp
- from %TEMP%\W64QD.tmp to %TEMP%\Q2BAW.tmp
- from %TEMP%\8ABU0.tmp to %TEMP%\4TS6G.tmp
- from %TEMP%\W64QD.tmp to %TEMP%\8ABU0.tmp
- from %TEMP%\V1U8J.tmp to %TEMP%\T0D4A.tmp
- from %TEMP%\HEPU4.tmp to %TEMP%\RKEU3.tmp
- from %TEMP%\RKEU3.tmp to %TEMP%\HEPU4.tmp
- from %TEMP%\RKEU3.tmp to %TEMP%\90E76.tmp
- from %TEMP%\PTMAZ.tmp to %TEMP%\90E76.tmp
- from %TEMP%\90E76.tmp to %TEMP%\PTMAZ.tmp
- from %TEMP%\X65QX.tmp to %TEMP%\8D5A0.tmp
- from %TEMP%\1AC5Z.tmp to %TEMP%\X65QX.tmp
- from %TEMP%\8D5A0.tmp to %TEMP%\9Q0D2.tmp
- from %TEMP%\9Q0D2.tmp to %TEMP%\RKEU3.tmp
- from %TEMP%\9Q0D2.tmp to %TEMP%\8D5A0.tmp
- from %TEMP%\2EMCD.tmp to %TEMP%\LMMOG.tmp
- from %TEMP%\DWZ75.tmp to %TEMP%\2EMCD.tmp
- from %TEMP%\LMMOG.tmp to %TEMP%\LKOO7.tmp
- from %TEMP%\LKOO7.tmp to %TEMP%\V1U8J.tmp
- from %TEMP%\LKOO7.tmp to %TEMP%\LMMOG.tmp
- from %TEMP%\K7ERA.tmp to %TEMP%\XHAR2.tmp
- from %TEMP%\90E76.tmp to %TEMP%\K7ERA.tmp
- from %TEMP%\XHAR2.tmp to %TEMP%\K7ERA.tmp
- from %TEMP%\2EMCD.tmp to %TEMP%\DWZ75.tmp
- from %TEMP%\K7ERA.tmp to %TEMP%\2EMCD.tmp
- from %TEMP%\16H70.tmp to %TEMP%\ZPKZ2.tmp
- from %TEMP%\S9VJZ.tmp to %TEMP%\16H70.tmp
- from %TEMP%\ZPKZ2.tmp to %TEMP%\16H70.tmp
- from %TEMP%\JDPR3.tmp to %TEMP%\7D9G4.tmp
- from %TEMP%\16H70.tmp to %TEMP%\JDPR3.tmp
- from %TEMP%\KM7AW.tmp to %TEMP%\7J9AT.tmp
- from %TEMP%\7J9AT.tmp to %TEMP%\KM7AW.tmp
- from %TEMP%\7J9AT.tmp to %TEMP%\QZHMW.tmp
- from %TEMP%\S9VJZ.tmp to %TEMP%\QZHMW.tmp
- from %TEMP%\QZHMW.tmp to %TEMP%\S9VJZ.tmp
- from %TEMP%\NGUDA.tmp to %TEMP%\C0QO9.tmp
- from %TEMP%\C0QO9.tmp to %TEMP%\NGUDA.tmp
- from %TEMP%\C0QO9.tmp to %TEMP%\V7Y9D.tmp
- from %TEMP%\3VJTD.tmp to %TEMP%\V7Y9D.tmp
- from %TEMP%\V7Y9D.tmp to %TEMP%\3VJTD.tmp
- from %TEMP%\JDPR3.tmp to %TEMP%\2LQ46.tmp
- from %TEMP%\7D9G4.tmp to %TEMP%\JDPR3.tmp
- from %TEMP%\2LQ46.tmp to %TEMP%\FS6W7.tmp
- from %TEMP%\2LQ46.tmp to %TEMP%\C0QO9.tmp
- from %TEMP%\FS6W7.tmp to %TEMP%\2LQ46.tmp
- from %TEMP%\PC9QQ.tmp to %TEMP%\7J9AT.tmp
- from %TEMP%\3BSOD.tmp to %TEMP%\80R0R.tmp
- from %TEMP%\K3KCA.tmp to %TEMP%\3BSOD.tmp
- from %TEMP%\80R0R.tmp to %TEMP%\3BSOD.tmp
- from %TEMP%\DIS8G.tmp to %TEMP%\GFGHT.tmp
- from %TEMP%\80R0R.tmp to %TEMP%\DIS8G.tmp
- from %TEMP%\KXE3L.tmp to %TEMP%\1WKR6.tmp
- from %TEMP%\1WKR6.tmp to %TEMP%\KXE3L.tmp
- from %TEMP%\1WKR6.tmp to %TEMP%\K3KCA.tmp
- from %TEMP%\SC2KO.tmp to %TEMP%\K3KCA.tmp
- from %TEMP%\K3KCA.tmp to %TEMP%\SC2KO.tmp
- from %TEMP%\WJTDZ.tmp to %TEMP%\E515N.tmp
- from %TEMP%\E515N.tmp to %TEMP%\WJTDZ.tmp
- from %TEMP%\E515N.tmp to %TEMP%\PC9QQ.tmp
- from %TEMP%\46IUU.tmp to %TEMP%\PC9QQ.tmp
- from %TEMP%\PC9QQ.tmp to %TEMP%\46IUU.tmp
- from %TEMP%\DIS8G.tmp to %TEMP%\WX0TJ.tmp
- from %TEMP%\GFGHT.tmp to %TEMP%\DIS8G.tmp
- from %TEMP%\WX0TJ.tmp to %TEMP%\O35XW.tmp
- from %TEMP%\WX0TJ.tmp to %TEMP%\E515N.tmp
- from %TEMP%\O35XW.tmp to %TEMP%\WX0TJ.tmp
- from %TEMP%\X65QX.tmp to %TEMP%\1AC5Z.tmp
- from %TEMP%\G72I6.tmp to %TEMP%\RE2UA.tmp
- from %TEMP%\YU2OZ.tmp to %TEMP%\G72I6.tmp
- from %TEMP%\RE2UA.tmp to %TEMP%\6IQ52.tmp
- from %TEMP%\RE2UA.tmp to %TEMP%\ALAFD.tmp
- from %TEMP%\6IQ52.tmp to %TEMP%\RE2UA.tmp
- from %TEMP%\YZ2X3.tmp to %TEMP%\QF58W.tmp
- from %TEMP%\IZGRU.tmp to %TEMP%\YZ2X3.tmp
- from %TEMP%\QF58W.tmp to %TEMP%\YZ2X3.tmp
- from %TEMP%\G72I6.tmp to %TEMP%\YU2OZ.tmp
- from %TEMP%\YZ2X3.tmp to %TEMP%\G72I6.tmp
- from %TEMP%\38JBK.tmp to %TEMP%\21TIA.tmp
- from %TEMP%\S1BZG.tmp to %TEMP%\38JBK.tmp
- from %TEMP%\21TIA.tmp to %TEMP%\38JBK.tmp
- from %TEMP%\LFJWN.tmp to %TEMP%\AOHZ5.tmp
- from %TEMP%\21TIA.tmp to %TEMP%\LFJWN.tmp
- from %TEMP%\EXFL5.tmp to %TEMP%\ALAFD.tmp
- from %TEMP%\ALAFD.tmp to %TEMP%\EXFL5.tmp
- from %TEMP%\ALAFD.tmp to %TEMP%\S1BZG.tmp
- from %TEMP%\UL427.tmp to %TEMP%\S1BZG.tmp
- from %TEMP%\S1BZG.tmp to %TEMP%\UL427.tmp
- from %TEMP%\IZGRU.tmp to %TEMP%\FKUD0.tmp
- from %TEMP%\751PO.tmp to %TEMP%\LJDJN.tmp
- from %TEMP%\751PO.tmp to %TEMP%\ACDZK.tmp
- from %TEMP%\LJDJN.tmp to %TEMP%\FTP6R.tmp
- from %TEMP%\LJDJN.tmp to %TEMP%\4QLWQ.tmp
- from %TEMP%\FTP6R.tmp to %TEMP%\LJDJN.tmp
- from %TEMP%\S45FG.tmp to %TEMP%\ZPC9L.tmp
- from %TEMP%\ZIWIA.tmp to %TEMP%\S45FG.tmp
- from %TEMP%\ZPC9L.tmp to %TEMP%\S45FG.tmp
- from %TEMP%\ACDZK.tmp to %TEMP%\751PO.tmp
- from %TEMP%\S45FG.tmp to %TEMP%\ACDZK.tmp
- from %TEMP%\5DT1X.tmp to %TEMP%\3BSJR.tmp
- from %TEMP%\M6LGT.tmp to %TEMP%\5DT1X.tmp
- from %TEMP%\3BSJR.tmp to %TEMP%\5DT1X.tmp
- from %TEMP%\FKUD0.tmp to %TEMP%\IZGRU.tmp
- from %TEMP%\5DT1X.tmp to %TEMP%\FKUD0.tmp
- from %TEMP%\N8EMT.tmp to %TEMP%\4QLWQ.tmp
- from %TEMP%\4QLWQ.tmp to %TEMP%\N8EMT.tmp
- from %TEMP%\4QLWQ.tmp to %TEMP%\M6LGT.tmp
- from %TEMP%\VW32W.tmp to %TEMP%\M6LGT.tmp
- from %TEMP%\M6LGT.tmp to %TEMP%\VW32W.tmp
- from %TEMP%\PGWVL.tmp to %TEMP%\LPGCG.tmp
- from %TEMP%\LPGCG.tmp to %TEMP%\PGWVL.tmp
- from %TEMP%\LPGCG.tmp to %TEMP%\35PWJ.tmp
- from %TEMP%\X4LBO.tmp to %TEMP%\35PWJ.tmp
- from %TEMP%\35PWJ.tmp to %TEMP%\X4LBO.tmp
- from %TEMP%\RB8FA.tmp to %TEMP%\AIGRD.tmp
- from %TEMP%\1DIYO.tmp to %TEMP%\RB8FA.tmp
- from %TEMP%\AIGRD.tmp to %TEMP%\917ER.tmp
- from %TEMP%\AIGRD.tmp to %TEMP%\LPGCG.tmp
- from %TEMP%\917ER.tmp to %TEMP%\AIGRD.tmp
- from %TEMP%\WJXTQ.tmp to %TEMP%\FYXDT.tmp
- from %TEMP%\D7Y8T.tmp to %TEMP%\WJXTQ.tmp
- from %TEMP%\FYXDT.tmp to %TEMP%\LNNOW.tmp
- from %TEMP%\FYXDT.tmp to %TEMP%\X65QX.tmp
- from %TEMP%\LNNOW.tmp to %TEMP%\FYXDT.tmp
- from %TEMP%\MCP8N.tmp to %TEMP%\5K9RR.tmp
- from %TEMP%\X4LBO.tmp to %TEMP%\MCP8N.tmp
- from %TEMP%\5K9RR.tmp to %TEMP%\MCP8N.tmp
- from %TEMP%\WJXTQ.tmp to %TEMP%\D7Y8T.tmp
- from %TEMP%\MCP8N.tmp to %TEMP%\WJXTQ.tmp
- from %TEMP%\RB8FA.tmp to %TEMP%\1DIYO.tmp
- from %TEMP%\QRVVA.tmp to %TEMP%\F2RTT.tmp
- from %TEMP%\F2RTT.tmp to %TEMP%\QRVVA.tmp
- from %TEMP%\F2RTT.tmp to %TEMP%\X9ZDX.tmp
- from %TEMP%\67KCD.tmp to %TEMP%\X9ZDX.tmp
- from %TEMP%\X9ZDX.tmp to %TEMP%\67KCD.tmp
- from %TEMP%\LFJWN.tmp to %TEMP%\4NRGQ.tmp
- from %TEMP%\AOHZ5.tmp to %TEMP%\LFJWN.tmp
- from %TEMP%\4NRGQ.tmp to %TEMP%\I46F7.tmp
- from %TEMP%\4NRGQ.tmp to %TEMP%\F2RTT.tmp
- from %TEMP%\I46F7.tmp to %TEMP%\4NRGQ.tmp
- from %TEMP%\MAX1I.tmp to %TEMP%\938U6.tmp
- from %TEMP%\MAX1I.tmp to %TEMP%\QO8A3.tmp
- from %TEMP%\938U6.tmp to %TEMP%\UYUHL.tmp
- from %TEMP%\938U6.tmp to %TEMP%\RB8FA.tmp
- from %TEMP%\UYUHL.tmp to %TEMP%\938U6.tmp
- from %TEMP%\GH0X0.tmp to %TEMP%\EV8KG.tmp
- from %TEMP%\X9ZDX.tmp to %TEMP%\GH0X0.tmp
- from %TEMP%\EV8KG.tmp to %TEMP%\GH0X0.tmp
- from %TEMP%\QO8A3.tmp to %TEMP%\MAX1I.tmp
- from %TEMP%\GH0X0.tmp to %TEMP%\QO8A3.tmp
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'ShImgVw:CPreviewWnd' WindowName: ''