d678cd78e60c1aa24eba80944c2160fc64f1bb7e6b1ae2c479952afc567fa9a7.exe "C:\Users\Administrator\AppData\Local\Temp\d678cd78e60c1aa24eba80944c2160fc64f1bb7e6b1ae2c479952afc567fa9a7.exe"
2492backup.exe C:\Users\Administrator\AppData\Local\Temp\0C7910BA-F902-421E-9E69-CF9AEE0DD4D7\backup.exe C:\Users\Administrator\AppData\Local\Temp\0C7910BA-F902-421E-9E69-CF9AEE0DD4D7\
2184