Update WIP:3249

Get the path to the executable from HKLM in order to drop the hash verification.
I was going off of util:RegistrySearch for these attributes.