4ab34a51de83138302ae5318fe564b8212e4aae35073bb0ca14b2297c842a200.exe "C:\Users\Administrator\AppData\Local\Temp\4ab34a51de83138302ae5318fe564b8212e4aae35073bb0ca14b2297c842a200.exe"
2920backup.exe C:\Users\Administrator\AppData\Local\Temp\0C7910BA-F902-421E-9E69-CF9AEE0DD4D7\backup.exe C:\Users\Administrator\AppData\Local\Temp\0C7910BA-F902-421E-9E69-CF9AEE0DD4D7\
2340