Technical Information
- '<SYSTEM32>\taskkill.exe' /F /IM OneDrive.exe
- '<SYSTEM32>\taskkill.exe' /F /IM explorer.exe
- %WINDIR%\explorer.exe
- %HOMEPATH%\desktop\region-north-karelia.jpeg
- %HOMEPATH%\desktop\508softwareandos.doc
- %HOMEPATH%\desktop\hanni_umami_chapter.doc
- ClassName: '' WindowName: ''
- ClassName: 'Progman' WindowName: ''
- ClassName: 'Proxy Desktop' WindowName: ''
- ClassName: 'SystemTray_Main' WindowName: ''
- ClassName: 'Media Center Tray Applet' WindowName: ''
- ClassName: '' WindowName: 'View Available Networks'
- ClassName: 'BluetoothNotificationAreaIconWindowClass' WindowName: 'BluetoothNotificationAreaIconWindowClass'
- ClassName: 'BluetoothNotificationAreaIconWindowClass' WindowName: ''
- '<SYSTEM32>\reg.exe' load hku\Default C:\Users\Default\NTUSER.DAT
- '<SYSTEM32>\reg.exe' delete HKEY_USERS\Default\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v OneDriveSetup /f
- '<SYSTEM32>\reg.exe' unload hku\Default
- '%WINDIR%\explorer.exe'