9f7e49273059b6a2_131c874.exe "C:\Users\Administrator\AppData\Local\Temp\9f7e49273059b6a2_131c874.exe"
2596dwm.exe "C:\Windows\system32\Dwm.exe"
1560taskhost.exe "taskhost.exe"
1596explorer.exe C:\Windows\Explorer.EXE
1676mobsync.exe C:\Windows\System32\mobsync.exe -Embedding
880