8babfc01353771b7a3400de78649bc2e8a1d809cfea80bf63cd9d46a49c3f56b.exe "C:\Users\Administrator\AppData\Local\Temp\8babfc01353771b7a3400de78649bc2e8a1d809cfea80bf63cd9d46a49c3f56b.exe"
2292backup.exe C:\Users\Administrator\AppData\Local\Temp\0C7910BA-F902-421E-9E69-CF9AEE0DD4D7\backup.exe C:\Users\Administrator\AppData\Local\Temp\0C7910BA-F902-421E-9E69-CF9AEE0DD4D7\
1852