35b131914173b444_7d57ad13e21.exe "C:\Users\Administrator\AppData\Local\Temp\35b131914173b444_7d57ad13e21.exe"
1892reg.exe "C:\Windows\System32\reg.exe" ADD HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v "Windows Update" /t REG_SZ /d "C:\Users\Administrator\AppData\Roaming\7D57AD13E21.exe" /f
28447D57AD13E21.exe "C:\Users\Administrator\AppData\Roaming\7D57AD13E21.exe"
1064