New DLL Added to AppCertDlls Registry Key (6aa1d992-5925-4e9f-a49b-845e51d1de01)
Dynamic-link libraries (DLLs) that are specified in the AppCertDLLs value in the Registry key can be abused to obtain persistence and privilege escalation by causing a malicious DLL to be loaded and run in the context of separate processes on the computer.