Suspicious ScreenSave Change by Reg.exe (0fc35fc3-efe6-4898-8a37-0b233339524f)
Adversaries may establish persistence by executing malicious content triggered by user inactivity. Screensavers are programs that execute after a configurable time of user inactivity and consist of Portable Executable (PE) files with a .scr file extension