Show in Graph
Common Information
Type Value
Value 
HKEY_CURRENT_USER\Software\Microsoft\RestartManager\Session00xx
Category
Type Windows Registry Key
Misp Type
Description
Details Published Attributes CTI Title
Details Website 2019-12-02 15 God save the queen [...] 'cause ransom is money - savethequeen encryptor