Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ApplicationWindows' = '<LS_APPDATA>\crosapp.exe -boot'
- <LS_APPDATA>\crosapp.exe
- from <Full path to file> to %TEMP%\croplo.exe.exe
- '%TEMP%\croplo.exe.exe'
- '<LS_APPDATA>\crosapp.exe'