vbc.exe "C:\Users\test22\AppData\Local\Temp\vbc.exe"
PowerShell.exe "PowerShell" copy-item 'C:\Users\test22\AppData\Local\Temp\vbc.exe' 'C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\NewTemp.exe'
No process loaded Click on a process in the tree above to load its data.