TargetObject:\\Microsoft\\Windows\ NT\\CurrentVersion\\Winlogon\\Shell (Details:\-nop\ \-w\ h* Details:$env* Details:explorer.exe* Details:Start\-Process*)