c4d8a432e8d267fd95be61a5c9006c5ebb243f5f651c7057f3048c8b07d2e57f.exe "C:\Users\Administrator\AppData\Local\Temp\c4d8a432e8d267fd95be61a5c9006c5ebb243f5f651c7057f3048c8b07d2e57f.exe"
1648backup.exe C:\Users\Administrator\AppData\Local\Temp\0C7910BA-F902-421E-9E69-CF9AEE0DD4D7\backup.exe C:\Users\Administrator\AppData\Local\Temp\0C7910BA-F902-421E-9E69-CF9AEE0DD4D7\
3032