27ca24b85741b7e0acbc20894bcde101e2b391e496006db6cb7e35ead147bcbd.exe "C:\Users\Administrator\AppData\Local\Temp\27ca24b85741b7e0acbc20894bcde101e2b391e496006db6cb7e35ead147bcbd.exe"
1320backup.exe C:\Users\Administrator\AppData\Local\Temp\0C7910BA-F902-421E-9E69-CF9AEE0DD4D7\backup.exe C:\Users\Administrator\AppData\Local\Temp\0C7910BA-F902-421E-9E69-CF9AEE0DD4D7\
1364