797ca9d112537b75_winngphas.exe "C:\Users\Administrator\AppData\Local\Temp\797ca9d112537b75_winngphas.exe"
2872dwm.exe "C:\Windows\system32\Dwm.exe"
1600taskhost.exe "taskhost.exe"
1624explorer.exe C:\Windows\Explorer.EXE
1728mobsync.exe C:\Windows\System32\mobsync.exe -Embedding
2920