fd4812987e1dc2a9_ahnsvc.exe "C:\Users\Administrator\AppData\Local\Temp\fd4812987e1dc2a9_ahnsvc.exe"
216AhnSvc.exe "C:\ProgramData\AhnLab\AhnSvc.exe" /run
1512cmd.exe "C:\Windows\system32\cmd.exe" /c del /q "C:\Users\Administrator\AppData\Local\Temp\fd4812987e1dc2a9_ahnsvc.exe" >> NUL
1264