GetTempPathA

GetTempPathA is used to retrieve the path of the directory designated for temporary files. This is often used by malware when it requires a location for additional installations.

Kernel32.dll

Helper

https://docs.microsoft.com/en-us/windows/win32/api/fileapi/nf-fileapi-gettemppatha