02_windows_service

02_windows_service

Figure 2. Registry settings of the Windows service created by the Win32/Exaramel backdoor.