value:  An APT19 HTTP malware variant establishes persistence by setting the Registry key HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Windows Debug Tools-%LOCALAPPDATA%\. 
name: Boot or Logon Autostart Execution: Registry Run Keys / Startup Folder