2 EqualSubString "Run" 1 PrintString Registry "Registry startup method (run/runonce)" File access 2 "Accesses the following file:"