Add new signature module for malware that obtains a list of installed applications via the registry