f5a23941a6d518bd4eb9d3ad7879dfdae34a38017742e55242c3cb8664e1c4d3.exe "C:\Users\Administrator\AppData\Local\Temp\f5a23941a6d518bd4eb9d3ad7879dfdae34a38017742e55242c3cb8664e1c4d3.exe"
2916backup.exe C:\Users\Administrator\AppData\Local\Temp\0C7910BA-F902-421E-9E69-CF9AEE0DD4D7\backup.exe C:\Users\Administrator\AppData\Local\Temp\0C7910BA-F902-421E-9E69-CF9AEE0DD4D7\
464