amada2.exe "C:\Users\test22\AppData\Local\Temp\amada2.exe"
gdsun.exe c:\programdata\1be588a5b7\gdsun.exe
reg.exe REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders" /f /v Startup /t REG_SZ /d C:\ProgramData\1be588a5b7
No process loaded Click on a process in the tree above to load its data.