Detects changes to 'HKCU\Software\Classes\Folder\shell\open\command\DelegateExecute'
Read the full analysis on IntelFusions