1394164e97d782a7_system restore.exe "C:\Users\Administrator\AppData\Local\Temp\1394164e97d782a7_system restore.exe"
556backup.exe C:\Users\Administrator\AppData\Local\Temp\0C7910BA-F902-421E-9E69-CF9AEE0DD4D7\backup.exe C:\Users\Administrator\AppData\Local\Temp\0C7910BA-F902-421E-9E69-CF9AEE0DD4D7\
2552