Detects the import of '.reg' files from suspicious paths using the 'reg.exe' utility
Read the full analysis on IntelFusions