am.exe "C:\Users\test22\AppData\Local\Temp\am.exe"
ftp.exe C:\Windows\SysWOW64\ftp.exe
explorer.exe C:\Windows\SysWOW64\explorer.exe
powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -executionpolicy remotesigned -File "C:\Users\test22\AppData\Local\Temp\1000003041\run.ps1"
explorer.exe C:\Windows\Explorer.EXE
No process loaded Click on a process in the tree above to load its data.