Detects potential malicious modification of run keys by winekey or team9 backdoor
Read the full analysis on IntelFusions