Posted on February 11, 2015 by Dries WillemsDetection Method for a certificate HKLM\SOFTWARE\Microsoft\SystemCertificates\TrustedPublisher\Certificates\6BFF5439A57586FEF61B8D8E2194A96DD459B511