Technical Information
- [HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] 'Builder' = '<SYSTEM32>\Builder.exe'
- '%WINDIR%\syswow64\reg.exe' ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run" /v "Builder" /d <SYSTEM32>\Builder.exe /t "REG_SZ" /f
- '%WINDIR%\syswow64\reg.exe' ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run" /v "Builder" /d <SYSTEM32>\Builder.exe /t "REG_SZ" /f' (with hidden window)