Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\WinLogonServer] 'ImagePath' = '<LS_APPDATA>\WinLogonServer\<File name>.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\WinLogonServer] 'Start' = '00000002'
- <LS_APPDATA>\WinLogonServer\<File name>.exe
- '<LS_APPDATA>\WinLogonServer\<File name>.exe'