WindowsWinlogonShell (GINA DLL)
Keys
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
Keys
HKEY_USERS\%SID%\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
HKEY_USERS\%SID%\Software\Microsoft\Windows NT\CurrentVersion\Winlogon