c372f14b5aab8bd3a7a4e02b6d84b5d6d1f005e8551ce20fd5bf5f125e494822.exe "C:\Users\Administrator\AppData\Local\Temp\c372f14b5aab8bd3a7a4e02b6d84b5d6d1f005e8551ce20fd5bf5f125e494822.exe"
2436ghsdtd.exe "C:\Users\ADMINI~1\AppData\Local\Temp\ghsdtd.exe"
2188