Technical Information
- [<HKLM>\System\CurrentControlSet\Services\tw1207806] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\tw1207806] 'ImagePath' = '%ALLUSERSPROFILE%\tw1207806.exe'
- 'tw1207806' %ALLUSERSPROFILE%\tw1207806.exe
- %ALLUSERSPROFILE%\tw1207806.exe
- %ALLUSERSPROFILE%\log.ewbb
- '%ALLUSERSPROFILE%\tw1207806.exe'