c95c82d68dda615f8148809fcab4bd533b5621ecd9ea590afe387d1e89c4786b.exe "C:\Users\Administrator\AppData\Local\Temp\c95c82d68dda615f8148809fcab4bd533b5621ecd9ea590afe387d1e89c4786b.exe"
1892backup.exe C:\Users\Administrator\AppData\Local\Temp\0C7910BA-F902-421E-9E69-CF9AEE0DD4D7\backup.exe C:\Users\Administrator\AppData\Local\Temp\0C7910BA-F902-421E-9E69-CF9AEE0DD4D7\
1792