Technical Information
- [<HKLM>\SOFTWARE\Classes\txtfile\shell\open\command] '' = '%WINDIR%\N0TEPAD.EXE %1'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'NC0NIME' = 'NC0NIME.EXE'
- %WINDIR%\NC0NIME.EXE
- %WINDIR%\N0TEPAD.EXE
- %TEMP%\<File name>.txt
- ClassName: '#32770' WindowName: ''
- '%WINDIR%\NC0NIME.EXE'
- '<SYSTEM32>\notepad.exe' "%TEMP%\<File name>.txt"