aad2bdb17f8cfd3a7cfeb83efd1c508f3a5e7e59fb7a88b8a987869a0074a392.exe "C:\Users\Administrator\AppData\Local\Temp\aad2bdb17f8cfd3a7cfeb83efd1c508f3a5e7e59fb7a88b8a987869a0074a392.exe"
2404reg.exe "C:\Windows\System32\reg.exe" ADD HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v "Windows Update" /t REG_SZ /d "C:\Users\Administrator\AppData\Roaming\7D57AD13E21.exe" /f
25127D57AD13E21.exe "C:\Users\Administrator\AppData\Roaming\7D57AD13E21.exe"
2492