If establishing persistence by installation as a new service fails, one variant of Elise establishes persistence for the created .exe file by setting the following Registry key: "HKCU\Software\Microsoft\Windows\CurrentVersion\Run\svchost : %APPDATA%\Microsoft\Network\svchost.exe". Other variants have set the following Registry keys for persistence: "HKCU\Software\Microsoft\Windows\CurrentVersion\Run\imejp : [self]" and "HKCU\Software\Microsoft\Windows\CurrentVersion\Run\IAStorD".