s Root Certificate Authority (CA). The certification path for the malware versus the one from a valid Microsoftsigned binary is shown in Figure 3. It is likely that the authors of this threat have used standard signing tools to create such