Suspicious Run Key from Download — Detection Rule

Detects the suspicious RUN keys created by software located in Download or temporary Outlook/Internet Explorer directories

Read the full analysis on IntelFusions