value:  Netfilter.sys, a malicious driver for Windows Hardware Quality Labs (WHQL), installs a root certificate to authenticate the C2 server domains that are contained within a simultaneously downloaded code. 
name: Subvert Trust Controls: Install Root Certificate