Adversaries may execute their own malicious payloads by hijacking the Registry entries used by services.

Tactics
TA0003 TA0004 TA0005

Sub-technique of
T1574


See: MITRE ATT&CK