11222.exe C:\Users\test22\AppData\Local\Temp\11222.exe
wscript.exe "C:\Windows\System32\WScript.exe" "C:\Users\test22\AppData\Local\Temp\install.vbs"
cmd.exe "C:\Windows\System32\cmd.exe" /c "C:\Users\test22\AppData\Roaming\Remcos\remcos.exe"
remcos.exe C:\Users\test22\AppData\Roaming\Remcos\remcos.exe
No process loaded Click on a process in the tree above to load its data.