Detects disabling the CrashDump per registry (as used by HermeticWiper)
Read the full analysis on IntelFusions