02_windows_service | WeLiveSecurity

02_windows_service

Figure 2. Registry settings of the Windows service created by the Win32/Exaramel backdoor