Malware Analysis Report

2025-01-06 07:55

Sample ID 240603-fbnf7ada82
Target df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90
SHA256 df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90
Tags
evasion
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90

Threat Level: Known bad

The file df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90 was found to be: Known bad.

Malicious Activity Summary

evasion

Modifies visibility of file extensions in Explorer

Disables RegEdit via registry modification

Loads dropped DLL

Executes dropped EXE

Drops file in Program Files directory

Drops file in Windows directory

Unsigned PE

Enumerates physical storage devices

Suspicious use of FindShellTrayWindow

Suspicious use of SetWindowsHookEx

System policy modification

Suspicious use of WriteProcessMemory

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-03 04:42

Signatures

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-03 04:42

Reported

2024-06-03 04:44

Platform

win7-20240508-en

Max time kernel

104s

Max time network

120s

Command Line

"C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe"

Signatures

Modifies visibility of file extensions in Explorer

evasion
Description Indicator Process Target
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\ja-JP\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files (x86)\Adobe\Reader 9.0\Setup Files\{AC76BA86-7AD7-1033-7B44-A90000000001}\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\Microsoft Games\Multiplayer\Spades\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\core\locale\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightOrange\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\Common Files\System\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\VideoLAN\VLC\hrtfs\data.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\Java\jre7\lib\ext\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files (x86)\Internet Explorer\de-DE\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\Common Files\Microsoft Shared\VSTO\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Users\Admin\AppData\Local\Temp\hsperfdata_Admin\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\VideoLAN\VLC\locale\it\LC_MESSAGES\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Users\Admin\Documents\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\VideoLAN\VLC\locale\es_MX\LC_MESSAGES\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\VideoLAN\VLC\locale\gd\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\Common Files\System\de-DE\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files (x86)\Common Files\microsoft shared\Help\3082\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\VideoLAN\VLC\locale\fi\LC_MESSAGES\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Users\Public\Videos\Sample Videos\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" N/A N/A

Disables RegEdit via registry modification

evasion
Description Indicator Process Target
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\Common Files\Microsoft Shared\ink\uk-UA\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\System Restore.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\Java\jre7\lib\cmm\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Microsoft Office\Office14\1033\DataServices\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\VideoLAN\VLC\locale\cy\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Common Files\microsoft shared\TextConv\it-IT\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Common Files\System\Ole DB\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\DVD Maker\ja-JP\data.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\Microsoft Games\SpiderSolitaire\ja-JP\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\VideoLAN\VLC\locale\hu\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\VideoLAN\VLC\locale\mai\LC_MESSAGES\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\VideoLAN\VLC\locale\nb\LC_MESSAGES\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\Common Files\Microsoft Shared\VGX\data.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\data.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\Internet Explorer\es-ES\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\Microsoft Games\More Games\en-US\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Internet Explorer\SIGNUP\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\update.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Common Files\Adobe\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\537978017\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\hsperfdata_Admin\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Low\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Microsoft Visual C++ 2010 x64 Redistributable Setup_10.0.40219\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Microsoft Visual C++ 2010 x86 Redistributable Setup_10.0.40219\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\mozilla-temp-files\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\scoped_dir816_1791373456\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\scoped_dir816_1791373456\CRX_INSTALL\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\scoped_dir816_2026301031\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\scoped_dir816_2026301031\CRX_INSTALL\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\WPDNSE\System Restore.exe N/A
N/A N/A C:\backup.exe N/A
N/A N/A C:\PerfLogs\backup.exe N/A
N/A N/A C:\PerfLogs\Admin\update.exe N/A
N/A N/A C:\Program Files\backup.exe N/A
N/A N/A C:\Program Files\7-Zip\backup.exe N/A
N/A N/A C:\Program Files\7-Zip\Lang\backup.exe N/A
N/A N/A C:\Program Files\Common Files\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\Filters\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\ar-SA\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\bg-BG\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\el-GR\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\en-US\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\et-EE\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\fi-FI\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred\update.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\he-IL\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\hr-HR\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\hu-HU\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\HWRCustomization\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\ko-KR\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\lt-LT\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\lv-LV\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\nb-NO\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\nl-NL\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\pl-PL\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\pt-BR\data.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\pt-PT\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\ro-RO\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\ru-RU\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\sk-SK\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\sl-SI\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\sr-Latn-CS\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\sv-SE\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\th-TH\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\tr-TR\backup.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\scoped_dir816_1791373456\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\scoped_dir816_1791373456\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\scoped_dir816_2026301031\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\scoped_dir816_2026301031\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe N/A
N/A N/A C:\backup.exe N/A
N/A N/A C:\backup.exe N/A
N/A N/A C:\PerfLogs\backup.exe N/A
N/A N/A C:\PerfLogs\Admin\update.exe N/A
N/A N/A C:\PerfLogs\Admin\update.exe N/A
N/A N/A C:\PerfLogs\Admin\update.exe N/A
N/A N/A C:\backup.exe N/A
N/A N/A C:\backup.exe N/A
N/A N/A C:\Program Files\backup.exe N/A
N/A N/A C:\Program Files\backup.exe N/A
N/A N/A C:\Program Files\7-Zip\backup.exe N/A
N/A N/A C:\Program Files\7-Zip\backup.exe N/A
N/A N/A C:\Program Files\backup.exe N/A
N/A N/A C:\Program Files\backup.exe N/A
N/A N/A C:\Program Files\Common Files\backup.exe N/A
N/A N/A C:\Program Files\Common Files\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\backup.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ARCTIC\backup.exe C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\backup.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\backup.exe N/A N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\en-US\css\backup.exe N/A N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\data.exe C:\Program Files (x86)\Microsoft Office\Office14\backup.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Adobe\Updater6\backup.exe C:\Program Files (x86)\Common Files\Adobe\backup.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\Certificates\backup.exe N/A N/A
File opened for modification C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v3.5\Desktop\backup.exe N/A N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\Packages\Debugger\backup.exe N/A N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\fr-FR\backup.exe N/A N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BabyBlue\backup.exe N/A N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_chroma\backup.exe N/A N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\it-IT\css\backup.exe N/A N/A
File opened for modification C:\Program Files\Mozilla Firefox\gmp-clearkey\0.1\backup.exe C:\Program Files\Mozilla Firefox\gmp-clearkey\backup.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\ja-JP\css\backup.exe N/A N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\fr-FR\backup.exe N/A N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\de-DE\backup.exe C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\backup.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\en-US\css\backup.exe N/A N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\es-ES\js\backup.exe N/A N/A
File opened for modification C:\Program Files (x86)\Internet Explorer\it-IT\backup.exe C:\Program Files (x86)\Internet Explorer\backup.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\lv\backup.exe C:\Program Files\VideoLAN\VLC\locale\backup.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\it-IT\css\backup.exe N/A N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EVRGREEN\backup.exe C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\backup.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\META-INF\backup.exe C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\backup.exe N/A
File opened for modification C:\Program Files\DVD Maker\es-ES\backup.exe C:\Program Files\DVD Maker\backup.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\dtplugin\backup.exe C:\Program Files\Java\jre7\bin\backup.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Help\1042\backup.exe C:\Program Files (x86)\Common Files\microsoft shared\Help\backup.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\GrayCheck\System Restore.exe C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\update.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\uk\backup.exe C:\Program Files\VideoLAN\VLC\locale\backup.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\ja\backup.exe N/A N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\js\backup.exe N/A N/A
File opened for modification C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\backup.exe C:\Program Files (x86)\Common Files\Adobe AIR\Versions\backup.exe N/A
File opened for modification C:\Program Files\Microsoft Games\Multiplayer\Checkers\de-DE\backup.exe C:\Program Files\Microsoft Games\Multiplayer\Checkers\backup.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\backup.exe C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\backup.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\my\LC_MESSAGES\backup.exe C:\Program Files\VideoLAN\VLC\locale\my\backup.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\backup.exe N/A N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\core\backup.exe C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\backup.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\1033\backup.exe C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\backup.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\ja-JP\backup.exe N/A N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\css\backup.exe N/A N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\fr-FR\css\backup.exe N/A N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\it-IT\System Restore.exe N/A N/A
File opened for modification C:\Program Files (x86)\Windows Defender\ja-JP\backup.exe N/A N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\bg-BG\backup.exe C:\Program Files\Common Files\Microsoft Shared\ink\backup.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\backup.exe C:\Program Files\DVD Maker\Shared\DvdStyles\backup.exe N/A
File opened for modification C:\Program Files\Microsoft Games\Multiplayer\Checkers\en-US\backup.exe C:\Program Files\Microsoft Games\Multiplayer\Checkers\backup.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\ja\backup.exe C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\backup.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\backup.exe C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\backup.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\backup.exe C:\Program Files (x86)\backup.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\pa\LC_MESSAGES\backup.exe C:\Program Files\VideoLAN\VLC\locale\pa\backup.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\cgg\backup.exe C:\Program Files\VideoLAN\VLC\locale\backup.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ga\backup.exe C:\Program Files\VideoLAN\VLC\locale\backup.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\or_IN\LC_MESSAGES\backup.exe C:\Program Files\VideoLAN\VLC\locale\or_IN\backup.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ro\backup.exe C:\Program Files\VideoLAN\VLC\locale\backup.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\backup.exe C:\Program Files (x86)\Common Files\Adobe\Acrobat\backup.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\gd\LC_MESSAGES\backup.exe C:\Program Files\VideoLAN\VLC\locale\gd\backup.exe N/A
File opened for modification C:\Program Files (x86)\Internet Explorer\ja-JP\backup.exe C:\Program Files (x86)\Internet Explorer\backup.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\backup.exe C:\Program Files\Java\jdk1.7.0_80\data.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\ado\es-ES\backup.exe C:\Program Files (x86)\Common Files\System\ado\backup.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\css\backup.exe N/A N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\ja-JP\update.exe N/A N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Triedit\fr-FR\backup.exe C:\Program Files\Common Files\Microsoft Shared\Triedit\backup.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\System Restore.exe C:\Program Files\Google\Chrome\Application\106.0.5249.119\backup.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\include\win32\backup.exe C:\Program Files\Java\jdk1.7.0_80\include\backup.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\backup.exe N/A N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\ehome\it-IT\backup.exe N/A N/A
File opened for modification C:\Windows\assembly\GAC_MSIL\Microsoft.BackgroundIntelligentTransfer.Management.Resources\1.0.0.0_fr_31bf3856ad364e35\backup.exe N/A N/A
File opened for modification C:\Windows\inf\ASP.NET_4.0.30319\0012\backup.exe N/A N/A
File opened for modification C:\Windows\assembly\GAC_MSIL\Microsoft.PowerShell.GPowerShell.Resources\1.0.0.0_fr_31bf3856ad364e35\backup.exe N/A N/A
File opened for modification C:\Windows\Microsoft.NET\Framework\v3.5\ja\backup.exe N/A N/A
File opened for modification C:\Windows\assembly\GAC_MSIL\Microsoft.Tpm\6.1.0.0__31bf3856ad364e35\data.exe N/A N/A
File opened for modification C:\Windows\Microsoft.NET\Framework\v3.5\MOF\de\backup.exe N/A N/A
File opened for modification C:\Windows\assembly\GAC_64\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\backup.exe N/A N/A
File opened for modification C:\Windows\assembly\GAC_64\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\backup.exe N/A N/A
File opened for modification C:\Windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\backup.exe N/A N/A
File opened for modification C:\Windows\assembly\GAC_MSIL\Microsoft.Build.Engine.resources\2.0.0.0_es_b03f5f7f11d50a3a\backup.exe N/A N/A
File opened for modification C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\backup.exe N/A N/A
File opened for modification C:\Windows\assembly\GAC_MSIL\Microsoft.ApplicationId.RuleWizard.Resources\6.1.0.0_es_31bf3856ad364e35\backup.exe N/A N/A
File opened for modification C:\Windows\Media\Garden\backup.exe N/A N/A
File opened for modification C:\Windows\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Management.Resources\1.0.0.0_de_31bf3856ad364e35\backup.exe N/A N/A
File opened for modification C:\Windows\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\backup.exe N/A N/A
File opened for modification C:\Windows\inf\UGTHRSVC\0407\backup.exe N/A N/A
File opened for modification C:\Windows\inf\MSDTC Bridge 4.0.0.0\0015\backup.exe N/A N/A
File opened for modification C:\Windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\backup.exe N/A N/A
File opened for modification C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio84a7b877#\backup.exe N/A N/A
File opened for modification C:\Windows\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Diagnostics.Resources\1.0.0.0_fr_31bf3856ad364e35\backup.exe N/A N/A
File opened for modification C:\Windows\inf\SMSvcHost 3.0.0.0\040C\backup.exe N/A N/A
File opened for modification C:\Windows\assembly\NativeImages_v2.0.50727_64\MCESidebarCtrl\f04b0488328a68d57953149b31a85065\backup.exe N/A N/A
File opened for modification C:\Windows\Performance\WinSAT\backup.exe N/A N/A
File opened for modification C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\backup.exe N/A N/A
File opened for modification C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\fr\update.exe N/A N/A
File opened for modification C:\Windows\assembly\GAC_MSIL\ehiActivScp\data.exe N/A N/A
File opened for modification C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\data.exe N/A N/A
File opened for modification C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.B83e9cb53#\67215fe430cb12f890a7dc19fd53aa55\backup.exe N/A N/A
File opened for modification C:\Windows\Resources\Themes\Aero\backup.exe N/A N/A
File opened for modification C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\backup.exe N/A N/A
File opened for modification C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_Data\backup.exe N/A N/A
File opened for modification C:\Windows\assembly\GAC_32\Policy.1.0.Microsoft.Ink\backup.exe C:\Windows\assembly\GAC_32\backup.exe N/A
File opened for modification C:\Windows\assembly\GAC_64\System.Data\2.0.0.0__b77a5c561934e089\backup.exe N/A N/A
File opened for modification C:\Windows\assembly\NativeImages_v2.0.50727_64\ComSvcConfig\d632b7434f821829827657e23ac98589\backup.exe N/A N/A
File opened for modification C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\backup.exe N/A N/A
File opened for modification C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\es\backup.exe N/A N/A
File opened for modification C:\Windows\Globalization\ELS\backup.exe N/A N/A
File opened for modification C:\Windows\Globalization\ELS\Transliteration\backup.exe N/A N/A
File opened for modification C:\Windows\assembly\NativeImages_v4.0.30319_64\AspNetMMCExt\51f5ebc7dec87fb0c89540ed15a5c2b6\backup.exe N/A N/A
File opened for modification C:\Windows\Microsoft.NET\Framework64\v2.0.50727\fr\backup.exe N/A N/A
File opened for modification C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management.A#\backup.exe N/A N/A
File opened for modification C:\Windows\assembly\GAC_64\System.EnterpriseServices\backup.exe N/A N/A
File opened for modification C:\Windows\assembly\NativeImages_v2.0.50727_32\napinit\backup.exe N/A N/A
File opened for modification C:\Windows\Migration\backup.exe C:\Windows\backup.exe N/A
File opened for modification C:\Windows\assembly\GAC_64\PresentationCore\backup.exe N/A N/A
File opened for modification C:\Windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\backup.exe N/A N/A
File opened for modification C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\backup.exe N/A N/A
File opened for modification C:\Windows\Resources\Themes\Aero\de-DE\backup.exe N/A N/A
File opened for modification C:\Windows\assembly\GAC_32\ehexthost32\6.1.0.0__31bf3856ad364e35\backup.exe C:\Windows\assembly\GAC_32\ehexthost32\backup.exe N/A
File opened for modification C:\Windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\backup.exe N/A N/A
File opened for modification C:\Windows\inf\aspnet_state\0019\backup.exe N/A N/A
File opened for modification C:\Windows\inf\MSDTC Bridge 4.0.0.0\0009\data.exe N/A N/A
File opened for modification C:\Windows\schemas\WCN\backup.exe N/A N/A
File opened for modification C:\Windows\Microsoft.NET\Framework\v3.5\SQL\backup.exe N/A N/A
File opened for modification C:\Windows\assembly\NativeImages_v2.0.50727_64\MSBuild\1a154709cdfe214029ea88c51ab2b579\backup.exe N/A N/A
File opened for modification C:\Windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\backup.exe N/A N/A
File opened for modification C:\Windows\Microsoft.NET\Framework\v1.0.3705\backup.exe N/A N/A
File opened for modification C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\backup.exe N/A N/A
File opened for modification C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Vf4833439#\backup.exe N/A N/A
File opened for modification C:\Windows\assembly\NativeImages_v2.0.50727_64\napcrypt\backup.exe N/A N/A
File opened for modification C:\Windows\assembly\GAC_32\BDATunePIA\6.1.0.0__31bf3856ad364e35\backup.exe C:\Windows\assembly\GAC_32\BDATunePIA\backup.exe N/A
File opened for modification C:\Windows\inf\ASP.NET_4.0.30319\0001\backup.exe N/A N/A
File opened for modification C:\Windows\assembly\NativeImages_v2.0.50727_64\ehshell\d1dc67c666bc15291be843bd67cd2a2e\backup.exe N/A N/A

Enumerates physical storage devices

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\537978017\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\hsperfdata_Admin\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Low\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Microsoft Visual C++ 2010 x64 Redistributable Setup_10.0.40219\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Microsoft Visual C++ 2010 x86 Redistributable Setup_10.0.40219\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\mozilla-temp-files\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\scoped_dir816_1791373456\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\scoped_dir816_1791373456\CRX_INSTALL\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\scoped_dir816_2026301031\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\scoped_dir816_2026301031\CRX_INSTALL\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\WPDNSE\System Restore.exe N/A
N/A N/A C:\backup.exe N/A
N/A N/A C:\PerfLogs\backup.exe N/A
N/A N/A C:\PerfLogs\Admin\update.exe N/A
N/A N/A C:\Program Files\backup.exe N/A
N/A N/A C:\Program Files\7-Zip\backup.exe N/A
N/A N/A C:\Program Files\7-Zip\Lang\backup.exe N/A
N/A N/A C:\Program Files\Common Files\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\Filters\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\ar-SA\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\bg-BG\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\el-GR\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\en-US\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\et-EE\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\fi-FI\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred\update.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\he-IL\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\hr-HR\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\hu-HU\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\HWRCustomization\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\ko-KR\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\lt-LT\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\lv-LV\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\nb-NO\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\nl-NL\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\pl-PL\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\pt-BR\data.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\pt-PT\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\ro-RO\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\ru-RU\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\sk-SK\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\sl-SI\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\sr-Latn-CS\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\sv-SE\backup.exe N/A
N/A N/A C:\Program Files\Common Files\Microsoft Shared\ink\th-TH\backup.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1868 wrote to memory of 2160 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\537978017\backup.exe
PID 1868 wrote to memory of 2160 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\537978017\backup.exe
PID 1868 wrote to memory of 2160 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\537978017\backup.exe
PID 1868 wrote to memory of 2160 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\537978017\backup.exe
PID 1868 wrote to memory of 3060 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\hsperfdata_Admin\backup.exe
PID 1868 wrote to memory of 3060 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\hsperfdata_Admin\backup.exe
PID 1868 wrote to memory of 3060 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\hsperfdata_Admin\backup.exe
PID 1868 wrote to memory of 3060 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\hsperfdata_Admin\backup.exe
PID 1868 wrote to memory of 2704 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\Low\backup.exe
PID 1868 wrote to memory of 2704 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\Low\backup.exe
PID 1868 wrote to memory of 2704 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\Low\backup.exe
PID 1868 wrote to memory of 2704 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\Low\backup.exe
PID 1868 wrote to memory of 2844 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\Microsoft Visual C++ 2010 x64 Redistributable Setup_10.0.40219\backup.exe
PID 1868 wrote to memory of 2844 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\Microsoft Visual C++ 2010 x64 Redistributable Setup_10.0.40219\backup.exe
PID 1868 wrote to memory of 2844 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\Microsoft Visual C++ 2010 x64 Redistributable Setup_10.0.40219\backup.exe
PID 1868 wrote to memory of 2844 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\Microsoft Visual C++ 2010 x64 Redistributable Setup_10.0.40219\backup.exe
PID 1868 wrote to memory of 2768 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\Microsoft Visual C++ 2010 x86 Redistributable Setup_10.0.40219\backup.exe
PID 1868 wrote to memory of 2768 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\Microsoft Visual C++ 2010 x86 Redistributable Setup_10.0.40219\backup.exe
PID 1868 wrote to memory of 2768 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\Microsoft Visual C++ 2010 x86 Redistributable Setup_10.0.40219\backup.exe
PID 1868 wrote to memory of 2768 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\Microsoft Visual C++ 2010 x86 Redistributable Setup_10.0.40219\backup.exe
PID 1868 wrote to memory of 2380 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\mozilla-temp-files\backup.exe
PID 1868 wrote to memory of 2380 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\mozilla-temp-files\backup.exe
PID 1868 wrote to memory of 2380 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\mozilla-temp-files\backup.exe
PID 1868 wrote to memory of 2380 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\mozilla-temp-files\backup.exe
PID 1868 wrote to memory of 2496 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\scoped_dir816_1791373456\backup.exe
PID 1868 wrote to memory of 2496 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\scoped_dir816_1791373456\backup.exe
PID 1868 wrote to memory of 2496 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\scoped_dir816_1791373456\backup.exe
PID 1868 wrote to memory of 2496 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\scoped_dir816_1791373456\backup.exe
PID 2496 wrote to memory of 2924 N/A C:\Users\Admin\AppData\Local\Temp\scoped_dir816_1791373456\backup.exe C:\Users\Admin\AppData\Local\Temp\scoped_dir816_1791373456\CRX_INSTALL\backup.exe
PID 2496 wrote to memory of 2924 N/A C:\Users\Admin\AppData\Local\Temp\scoped_dir816_1791373456\backup.exe C:\Users\Admin\AppData\Local\Temp\scoped_dir816_1791373456\CRX_INSTALL\backup.exe
PID 2496 wrote to memory of 2924 N/A C:\Users\Admin\AppData\Local\Temp\scoped_dir816_1791373456\backup.exe C:\Users\Admin\AppData\Local\Temp\scoped_dir816_1791373456\CRX_INSTALL\backup.exe
PID 2496 wrote to memory of 2924 N/A C:\Users\Admin\AppData\Local\Temp\scoped_dir816_1791373456\backup.exe C:\Users\Admin\AppData\Local\Temp\scoped_dir816_1791373456\CRX_INSTALL\backup.exe
PID 1868 wrote to memory of 1560 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\scoped_dir816_2026301031\backup.exe
PID 1868 wrote to memory of 1560 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\scoped_dir816_2026301031\backup.exe
PID 1868 wrote to memory of 1560 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\scoped_dir816_2026301031\backup.exe
PID 1868 wrote to memory of 1560 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\scoped_dir816_2026301031\backup.exe
PID 1560 wrote to memory of 2560 N/A C:\Users\Admin\AppData\Local\Temp\scoped_dir816_2026301031\backup.exe C:\Users\Admin\AppData\Local\Temp\scoped_dir816_2026301031\CRX_INSTALL\backup.exe
PID 1560 wrote to memory of 2560 N/A C:\Users\Admin\AppData\Local\Temp\scoped_dir816_2026301031\backup.exe C:\Users\Admin\AppData\Local\Temp\scoped_dir816_2026301031\CRX_INSTALL\backup.exe
PID 1560 wrote to memory of 2560 N/A C:\Users\Admin\AppData\Local\Temp\scoped_dir816_2026301031\backup.exe C:\Users\Admin\AppData\Local\Temp\scoped_dir816_2026301031\CRX_INSTALL\backup.exe
PID 1560 wrote to memory of 2560 N/A C:\Users\Admin\AppData\Local\Temp\scoped_dir816_2026301031\backup.exe C:\Users\Admin\AppData\Local\Temp\scoped_dir816_2026301031\CRX_INSTALL\backup.exe
PID 1868 wrote to memory of 2808 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\WPDNSE\System Restore.exe
PID 1868 wrote to memory of 2808 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\WPDNSE\System Restore.exe
PID 1868 wrote to memory of 2808 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\WPDNSE\System Restore.exe
PID 1868 wrote to memory of 2808 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\WPDNSE\System Restore.exe
PID 2160 wrote to memory of 1476 N/A C:\Users\Admin\AppData\Local\Temp\537978017\backup.exe C:\backup.exe
PID 2160 wrote to memory of 1476 N/A C:\Users\Admin\AppData\Local\Temp\537978017\backup.exe C:\backup.exe
PID 2160 wrote to memory of 1476 N/A C:\Users\Admin\AppData\Local\Temp\537978017\backup.exe C:\backup.exe
PID 2160 wrote to memory of 1476 N/A C:\Users\Admin\AppData\Local\Temp\537978017\backup.exe C:\backup.exe
PID 1476 wrote to memory of 844 N/A C:\backup.exe C:\PerfLogs\backup.exe
PID 1476 wrote to memory of 844 N/A C:\backup.exe C:\PerfLogs\backup.exe
PID 1476 wrote to memory of 844 N/A C:\backup.exe C:\PerfLogs\backup.exe
PID 1476 wrote to memory of 844 N/A C:\backup.exe C:\PerfLogs\backup.exe
PID 844 wrote to memory of 1172 N/A C:\PerfLogs\backup.exe C:\PerfLogs\Admin\update.exe
PID 844 wrote to memory of 1172 N/A C:\PerfLogs\backup.exe C:\PerfLogs\Admin\update.exe
PID 844 wrote to memory of 1172 N/A C:\PerfLogs\backup.exe C:\PerfLogs\Admin\update.exe
PID 844 wrote to memory of 1172 N/A C:\PerfLogs\backup.exe C:\PerfLogs\Admin\update.exe
PID 844 wrote to memory of 1172 N/A C:\PerfLogs\backup.exe C:\PerfLogs\Admin\update.exe
PID 844 wrote to memory of 1172 N/A C:\PerfLogs\backup.exe C:\PerfLogs\Admin\update.exe
PID 844 wrote to memory of 1172 N/A C:\PerfLogs\backup.exe C:\PerfLogs\Admin\update.exe
PID 1476 wrote to memory of 2252 N/A C:\backup.exe C:\Program Files\backup.exe
PID 1476 wrote to memory of 2252 N/A C:\backup.exe C:\Program Files\backup.exe
PID 1476 wrote to memory of 2252 N/A C:\backup.exe C:\Program Files\backup.exe
PID 1476 wrote to memory of 2252 N/A C:\backup.exe C:\Program Files\backup.exe
PID 2252 wrote to memory of 2020 N/A C:\Program Files\backup.exe C:\Program Files\7-Zip\backup.exe

System policy modification

evasion
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions = "1" C:\Program Files\Java\jre7\lib\zi\Indian\backup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions = "1" C:\Program Files (x86)\Common Files\SpeechEngines\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions = "1" N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\de-DE\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions = "1" C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions = "1" N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions = "1" N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions = "1" N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\backup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer C:\Program Files\Java\jdk1.7.0_80\jre\bin\server\backup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\VideoLAN\VLC\locale\bn_IN\backup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions = "1" N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions = "1" N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions = "1" C:\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\backup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions = "1" N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions = "1" N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions = "1" N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions = "1" N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer C:\Program Files\Java\jre7\lib\zi\America\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions = "1" C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions = "1" N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\backup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions = "1" N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions = "1" N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions = "1" N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions = "1" N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer C:\Program Files\VideoLAN\VLC\locale\ga\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions = "1" C:\Program Files\VideoLAN\VLC\locale\hy\backup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer C:\Program Files\VideoLAN\VLC\locale\fr\LC_MESSAGES\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Users\Public\Recorded TV\Sample Media\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions = "1" N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\META-INF\backup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer C:\Program Files\VideoLAN\VLC\locale\el\LC_MESSAGES\backup.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe

"C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe"

C:\Users\Admin\AppData\Local\Temp\537978017\backup.exe

C:\Users\Admin\AppData\Local\Temp\537978017\backup.exe C:\Users\Admin\AppData\Local\Temp\537978017\

C:\Users\Admin\AppData\Local\Temp\hsperfdata_Admin\backup.exe

C:\Users\Admin\AppData\Local\Temp\hsperfdata_Admin\backup.exe C:\Users\Admin\AppData\Local\Temp\hsperfdata_Admin\

C:\Users\Admin\AppData\Local\Temp\Low\backup.exe

C:\Users\Admin\AppData\Local\Temp\Low\backup.exe C:\Users\Admin\AppData\Local\Temp\Low\

C:\Users\Admin\AppData\Local\Temp\Microsoft Visual C++ 2010 x64 Redistributable Setup_10.0.40219\backup.exe

"C:\Users\Admin\AppData\Local\Temp\Microsoft Visual C++ 2010 x64 Redistributable Setup_10.0.40219\backup.exe" C:\Users\Admin\AppData\Local\Temp\Microsoft Visual C++ 2010 x64 Redistributable Setup_10.0.40219\

C:\Users\Admin\AppData\Local\Temp\Microsoft Visual C++ 2010 x86 Redistributable Setup_10.0.40219\backup.exe

"C:\Users\Admin\AppData\Local\Temp\Microsoft Visual C++ 2010 x86 Redistributable Setup_10.0.40219\backup.exe" C:\Users\Admin\AppData\Local\Temp\Microsoft Visual C++ 2010 x86 Redistributable Setup_10.0.40219\

C:\Users\Admin\AppData\Local\Temp\mozilla-temp-files\backup.exe

C:\Users\Admin\AppData\Local\Temp\mozilla-temp-files\backup.exe C:\Users\Admin\AppData\Local\Temp\mozilla-temp-files\

C:\Users\Admin\AppData\Local\Temp\scoped_dir816_1791373456\backup.exe

C:\Users\Admin\AppData\Local\Temp\scoped_dir816_1791373456\backup.exe C:\Users\Admin\AppData\Local\Temp\scoped_dir816_1791373456\

C:\Users\Admin\AppData\Local\Temp\scoped_dir816_1791373456\CRX_INSTALL\backup.exe

C:\Users\Admin\AppData\Local\Temp\scoped_dir816_1791373456\CRX_INSTALL\backup.exe C:\Users\Admin\AppData\Local\Temp\scoped_dir816_1791373456\CRX_INSTALL\

C:\Users\Admin\AppData\Local\Temp\scoped_dir816_2026301031\backup.exe

C:\Users\Admin\AppData\Local\Temp\scoped_dir816_2026301031\backup.exe C:\Users\Admin\AppData\Local\Temp\scoped_dir816_2026301031\

C:\Users\Admin\AppData\Local\Temp\scoped_dir816_2026301031\CRX_INSTALL\backup.exe

C:\Users\Admin\AppData\Local\Temp\scoped_dir816_2026301031\CRX_INSTALL\backup.exe C:\Users\Admin\AppData\Local\Temp\scoped_dir816_2026301031\CRX_INSTALL\

C:\Users\Admin\AppData\Local\Temp\WPDNSE\System Restore.exe

"C:\Users\Admin\AppData\Local\Temp\WPDNSE\System Restore.exe" C:\Users\Admin\AppData\Local\Temp\WPDNSE\

C:\backup.exe

\backup.exe \

C:\PerfLogs\backup.exe

C:\PerfLogs\backup.exe C:\PerfLogs\

C:\PerfLogs\Admin\update.exe

C:\PerfLogs\Admin\update.exe C:\PerfLogs\Admin\

C:\Program Files\backup.exe

"C:\Program Files\backup.exe" C:\Program Files\

C:\Program Files\7-Zip\backup.exe

"C:\Program Files\7-Zip\backup.exe" C:\Program Files\7-Zip\

C:\Program Files\7-Zip\Lang\backup.exe

"C:\Program Files\7-Zip\Lang\backup.exe" C:\Program Files\7-Zip\Lang\

C:\Program Files\Common Files\backup.exe

"C:\Program Files\Common Files\backup.exe" C:\Program Files\Common Files\

C:\Program Files\Common Files\Microsoft Shared\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\backup.exe" C:\Program Files\Common Files\Microsoft Shared\

C:\Program Files\Common Files\Microsoft Shared\Filters\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\Filters\backup.exe" C:\Program Files\Common Files\Microsoft Shared\Filters\

C:\Program Files\Common Files\Microsoft Shared\ink\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\

C:\Program Files\Common Files\Microsoft Shared\ink\ar-SA\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\ar-SA\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\ar-SA\

C:\Program Files\Common Files\Microsoft Shared\ink\bg-BG\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\bg-BG\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\bg-BG\

C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\

C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\

C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\

C:\Program Files\Common Files\Microsoft Shared\ink\el-GR\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\el-GR\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\el-GR\

C:\Program Files\Common Files\Microsoft Shared\ink\en-US\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\en-US\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\en-US\

C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\

C:\Program Files\Common Files\Microsoft Shared\ink\et-EE\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\et-EE\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\et-EE\

C:\Program Files\Common Files\Microsoft Shared\ink\fi-FI\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\fi-FI\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\fi-FI\

C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers\

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu\

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad\

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred\update.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred\update.exe" C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred\

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web\

C:\Program Files\Common Files\Microsoft Shared\ink\he-IL\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\he-IL\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\he-IL\

C:\Program Files\Common Files\Microsoft Shared\ink\hr-HR\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\hr-HR\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\hr-HR\

C:\Program Files\Common Files\Microsoft Shared\ink\hu-HU\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\hu-HU\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\hu-HU\

C:\Program Files\Common Files\Microsoft Shared\ink\HWRCustomization\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\HWRCustomization\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\HWRCustomization\

C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\

C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\

C:\Program Files\Common Files\Microsoft Shared\ink\ko-KR\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\ko-KR\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\ko-KR\

C:\Program Files\Common Files\Microsoft Shared\ink\lt-LT\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\lt-LT\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\lt-LT\

C:\Program Files\Common Files\Microsoft Shared\ink\lv-LV\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\lv-LV\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\lv-LV\

C:\Program Files\Common Files\Microsoft Shared\ink\nb-NO\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\nb-NO\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\nb-NO\

C:\Program Files\Common Files\Microsoft Shared\ink\nl-NL\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\nl-NL\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\nl-NL\

C:\Program Files\Common Files\Microsoft Shared\ink\pl-PL\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\pl-PL\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\pl-PL\

C:\Program Files\Common Files\Microsoft Shared\ink\pt-BR\data.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\pt-BR\data.exe" C:\Program Files\Common Files\Microsoft Shared\ink\pt-BR\

C:\Program Files\Common Files\Microsoft Shared\ink\pt-PT\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\pt-PT\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\pt-PT\

C:\Program Files\Common Files\Microsoft Shared\ink\ro-RO\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\ro-RO\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\ro-RO\

C:\Program Files\Common Files\Microsoft Shared\ink\ru-RU\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\ru-RU\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\ru-RU\

C:\Program Files\Common Files\Microsoft Shared\ink\sk-SK\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\sk-SK\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\sk-SK\

C:\Program Files\Common Files\Microsoft Shared\ink\sl-SI\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\sl-SI\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\sl-SI\

C:\Program Files\Common Files\Microsoft Shared\ink\sr-Latn-CS\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\sr-Latn-CS\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\sr-Latn-CS\

C:\Program Files\Common Files\Microsoft Shared\ink\sv-SE\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\sv-SE\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\sv-SE\

C:\Program Files\Common Files\Microsoft Shared\ink\th-TH\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\th-TH\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\th-TH\

C:\Program Files\Common Files\Microsoft Shared\ink\tr-TR\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\tr-TR\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\tr-TR\

C:\Program Files\Common Files\Microsoft Shared\ink\uk-UA\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\uk-UA\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\uk-UA\

C:\Program Files\Common Files\Microsoft Shared\ink\zh-CN\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\zh-CN\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\zh-CN\

C:\Program Files\Common Files\Microsoft Shared\ink\zh-TW\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\ink\zh-TW\backup.exe" C:\Program Files\Common Files\Microsoft Shared\ink\zh-TW\

C:\Program Files\Common Files\Microsoft Shared\MSInfo\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\MSInfo\backup.exe" C:\Program Files\Common Files\Microsoft Shared\MSInfo\

C:\Program Files\Common Files\Microsoft Shared\MSInfo\de-DE\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\MSInfo\de-DE\backup.exe" C:\Program Files\Common Files\Microsoft Shared\MSInfo\de-DE\

C:\Program Files\Common Files\Microsoft Shared\MSInfo\en-US\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\MSInfo\en-US\backup.exe" C:\Program Files\Common Files\Microsoft Shared\MSInfo\en-US\

C:\Program Files\Common Files\Microsoft Shared\MSInfo\es-ES\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\MSInfo\es-ES\backup.exe" C:\Program Files\Common Files\Microsoft Shared\MSInfo\es-ES\

C:\Program Files\Common Files\Microsoft Shared\MSInfo\fr-FR\data.exe

"C:\Program Files\Common Files\Microsoft Shared\MSInfo\fr-FR\data.exe" C:\Program Files\Common Files\Microsoft Shared\MSInfo\fr-FR\

C:\Program Files\Common Files\Microsoft Shared\MSInfo\it-IT\System Restore.exe

"C:\Program Files\Common Files\Microsoft Shared\MSInfo\it-IT\System Restore.exe" C:\Program Files\Common Files\Microsoft Shared\MSInfo\it-IT\

C:\Program Files\Common Files\Microsoft Shared\MSInfo\ja-JP\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\MSInfo\ja-JP\backup.exe" C:\Program Files\Common Files\Microsoft Shared\MSInfo\ja-JP\

C:\Program Files\Common Files\Microsoft Shared\OFFICE14\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\backup.exe" C:\Program Files\Common Files\Microsoft Shared\OFFICE14\

C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\backup.exe" C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\

C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\backup.exe" C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\

C:\Program Files\Common Files\Microsoft Shared\Stationery\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\Stationery\backup.exe" C:\Program Files\Common Files\Microsoft Shared\Stationery\

C:\Program Files\Common Files\Microsoft Shared\TextConv\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\TextConv\backup.exe" C:\Program Files\Common Files\Microsoft Shared\TextConv\

C:\Program Files\Common Files\Microsoft Shared\TextConv\de-DE\System Restore.exe

"C:\Program Files\Common Files\Microsoft Shared\TextConv\de-DE\System Restore.exe" C:\Program Files\Common Files\Microsoft Shared\TextConv\de-DE\

C:\Program Files\Common Files\Microsoft Shared\TextConv\en-US\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\TextConv\en-US\backup.exe" C:\Program Files\Common Files\Microsoft Shared\TextConv\en-US\

C:\Program Files\Common Files\Microsoft Shared\TextConv\es-ES\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\TextConv\es-ES\backup.exe" C:\Program Files\Common Files\Microsoft Shared\TextConv\es-ES\

C:\Program Files\Common Files\Microsoft Shared\TextConv\fr-FR\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\TextConv\fr-FR\backup.exe" C:\Program Files\Common Files\Microsoft Shared\TextConv\fr-FR\

C:\Program Files\Common Files\Microsoft Shared\TextConv\it-IT\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\TextConv\it-IT\backup.exe" C:\Program Files\Common Files\Microsoft Shared\TextConv\it-IT\

C:\Program Files\Common Files\Microsoft Shared\TextConv\ja-JP\data.exe

"C:\Program Files\Common Files\Microsoft Shared\TextConv\ja-JP\data.exe" C:\Program Files\Common Files\Microsoft Shared\TextConv\ja-JP\

C:\Program Files\Common Files\Microsoft Shared\Triedit\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\Triedit\backup.exe" C:\Program Files\Common Files\Microsoft Shared\Triedit\

C:\Program Files\Common Files\Microsoft Shared\Triedit\de-DE\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\Triedit\de-DE\backup.exe" C:\Program Files\Common Files\Microsoft Shared\Triedit\de-DE\

C:\Program Files\Common Files\Microsoft Shared\Triedit\en-US\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\Triedit\en-US\backup.exe" C:\Program Files\Common Files\Microsoft Shared\Triedit\en-US\

C:\Program Files\Common Files\Microsoft Shared\Triedit\es-ES\data.exe

"C:\Program Files\Common Files\Microsoft Shared\Triedit\es-ES\data.exe" C:\Program Files\Common Files\Microsoft Shared\Triedit\es-ES\

C:\Program Files\Common Files\Microsoft Shared\Triedit\fr-FR\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\Triedit\fr-FR\backup.exe" C:\Program Files\Common Files\Microsoft Shared\Triedit\fr-FR\

C:\Program Files\Common Files\Microsoft Shared\Triedit\it-IT\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\Triedit\it-IT\backup.exe" C:\Program Files\Common Files\Microsoft Shared\Triedit\it-IT\

C:\Program Files\Common Files\Microsoft Shared\Triedit\ja-JP\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\Triedit\ja-JP\backup.exe" C:\Program Files\Common Files\Microsoft Shared\Triedit\ja-JP\

C:\Program Files\Common Files\Microsoft Shared\VC\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\VC\backup.exe" C:\Program Files\Common Files\Microsoft Shared\VC\

C:\Program Files\Common Files\Microsoft Shared\VGX\data.exe

"C:\Program Files\Common Files\Microsoft Shared\VGX\data.exe" C:\Program Files\Common Files\Microsoft Shared\VGX\

C:\Program Files\Common Files\Microsoft Shared\VSTO\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\VSTO\backup.exe" C:\Program Files\Common Files\Microsoft Shared\VSTO\

C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\backup.exe" C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\

C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\backup.exe

"C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\backup.exe" C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\

C:\Program Files\Common Files\Services\backup.exe

"C:\Program Files\Common Files\Services\backup.exe" C:\Program Files\Common Files\Services\

C:\Program Files\Common Files\SpeechEngines\backup.exe

"C:\Program Files\Common Files\SpeechEngines\backup.exe" C:\Program Files\Common Files\SpeechEngines\

C:\Program Files\Common Files\SpeechEngines\Microsoft\backup.exe

"C:\Program Files\Common Files\SpeechEngines\Microsoft\backup.exe" C:\Program Files\Common Files\SpeechEngines\Microsoft\

C:\Program Files\Common Files\System\backup.exe

"C:\Program Files\Common Files\System\backup.exe" C:\Program Files\Common Files\System\

C:\Program Files\Common Files\System\ado\backup.exe

"C:\Program Files\Common Files\System\ado\backup.exe" C:\Program Files\Common Files\System\ado\

C:\Program Files\Common Files\System\ado\de-DE\backup.exe

"C:\Program Files\Common Files\System\ado\de-DE\backup.exe" C:\Program Files\Common Files\System\ado\de-DE\

C:\Program Files\Common Files\System\ado\en-US\backup.exe

"C:\Program Files\Common Files\System\ado\en-US\backup.exe" C:\Program Files\Common Files\System\ado\en-US\

C:\Program Files\Common Files\System\ado\es-ES\backup.exe

"C:\Program Files\Common Files\System\ado\es-ES\backup.exe" C:\Program Files\Common Files\System\ado\es-ES\

C:\Program Files\Common Files\System\ado\fr-FR\backup.exe

"C:\Program Files\Common Files\System\ado\fr-FR\backup.exe" C:\Program Files\Common Files\System\ado\fr-FR\

C:\Program Files\Common Files\System\ado\it-IT\backup.exe

"C:\Program Files\Common Files\System\ado\it-IT\backup.exe" C:\Program Files\Common Files\System\ado\it-IT\

C:\Program Files\Common Files\System\ado\ja-JP\backup.exe

"C:\Program Files\Common Files\System\ado\ja-JP\backup.exe" C:\Program Files\Common Files\System\ado\ja-JP\

C:\Program Files\Common Files\System\de-DE\backup.exe

"C:\Program Files\Common Files\System\de-DE\backup.exe" C:\Program Files\Common Files\System\de-DE\

C:\Program Files\Common Files\System\en-US\backup.exe

"C:\Program Files\Common Files\System\en-US\backup.exe" C:\Program Files\Common Files\System\en-US\

C:\Program Files\Common Files\System\es-ES\backup.exe

"C:\Program Files\Common Files\System\es-ES\backup.exe" C:\Program Files\Common Files\System\es-ES\

C:\Program Files\Common Files\System\fr-FR\backup.exe

"C:\Program Files\Common Files\System\fr-FR\backup.exe" C:\Program Files\Common Files\System\fr-FR\

C:\Program Files\Common Files\System\it-IT\backup.exe

"C:\Program Files\Common Files\System\it-IT\backup.exe" C:\Program Files\Common Files\System\it-IT\

C:\Program Files\Common Files\System\ja-JP\backup.exe

"C:\Program Files\Common Files\System\ja-JP\backup.exe" C:\Program Files\Common Files\System\ja-JP\

C:\Program Files\Common Files\System\msadc\backup.exe

"C:\Program Files\Common Files\System\msadc\backup.exe" C:\Program Files\Common Files\System\msadc\

C:\Program Files\Common Files\System\msadc\de-DE\backup.exe

"C:\Program Files\Common Files\System\msadc\de-DE\backup.exe" C:\Program Files\Common Files\System\msadc\de-DE\

C:\Program Files\Common Files\System\msadc\en-US\backup.exe

"C:\Program Files\Common Files\System\msadc\en-US\backup.exe" C:\Program Files\Common Files\System\msadc\en-US\

C:\Program Files\Common Files\System\msadc\es-ES\backup.exe

"C:\Program Files\Common Files\System\msadc\es-ES\backup.exe" C:\Program Files\Common Files\System\msadc\es-ES\

C:\Program Files\Common Files\System\msadc\fr-FR\backup.exe

"C:\Program Files\Common Files\System\msadc\fr-FR\backup.exe" C:\Program Files\Common Files\System\msadc\fr-FR\

C:\Program Files\Common Files\System\msadc\it-IT\backup.exe

"C:\Program Files\Common Files\System\msadc\it-IT\backup.exe" C:\Program Files\Common Files\System\msadc\it-IT\

C:\Program Files\Common Files\System\msadc\ja-JP\backup.exe

"C:\Program Files\Common Files\System\msadc\ja-JP\backup.exe" C:\Program Files\Common Files\System\msadc\ja-JP\

C:\Program Files\Common Files\System\Ole DB\System Restore.exe

"C:\Program Files\Common Files\System\Ole DB\System Restore.exe" C:\Program Files\Common Files\System\Ole DB\

C:\Program Files\Common Files\System\Ole DB\de-DE\backup.exe

"C:\Program Files\Common Files\System\Ole DB\de-DE\backup.exe" C:\Program Files\Common Files\System\Ole DB\de-DE\

C:\Program Files\Common Files\System\Ole DB\en-US\backup.exe

"C:\Program Files\Common Files\System\Ole DB\en-US\backup.exe" C:\Program Files\Common Files\System\Ole DB\en-US\

C:\Program Files\Common Files\System\Ole DB\es-ES\backup.exe

"C:\Program Files\Common Files\System\Ole DB\es-ES\backup.exe" C:\Program Files\Common Files\System\Ole DB\es-ES\

C:\Program Files\Common Files\System\Ole DB\fr-FR\backup.exe

"C:\Program Files\Common Files\System\Ole DB\fr-FR\backup.exe" C:\Program Files\Common Files\System\Ole DB\fr-FR\

C:\Program Files\Common Files\System\Ole DB\it-IT\backup.exe

"C:\Program Files\Common Files\System\Ole DB\it-IT\backup.exe" C:\Program Files\Common Files\System\Ole DB\it-IT\

C:\Program Files\Common Files\System\Ole DB\ja-JP\System Restore.exe

"C:\Program Files\Common Files\System\Ole DB\ja-JP\System Restore.exe" C:\Program Files\Common Files\System\Ole DB\ja-JP\

C:\Program Files\DVD Maker\backup.exe

"C:\Program Files\DVD Maker\backup.exe" C:\Program Files\DVD Maker\

C:\Program Files\DVD Maker\de-DE\System Restore.exe

"C:\Program Files\DVD Maker\de-DE\System Restore.exe" C:\Program Files\DVD Maker\de-DE\

C:\Program Files\DVD Maker\en-US\backup.exe

"C:\Program Files\DVD Maker\en-US\backup.exe" C:\Program Files\DVD Maker\en-US\

C:\Program Files\DVD Maker\es-ES\backup.exe

"C:\Program Files\DVD Maker\es-ES\backup.exe" C:\Program Files\DVD Maker\es-ES\

C:\Program Files\DVD Maker\fr-FR\backup.exe

"C:\Program Files\DVD Maker\fr-FR\backup.exe" C:\Program Files\DVD Maker\fr-FR\

C:\Program Files\DVD Maker\it-IT\backup.exe

"C:\Program Files\DVD Maker\it-IT\backup.exe" C:\Program Files\DVD Maker\it-IT\

C:\Program Files\DVD Maker\ja-JP\data.exe

"C:\Program Files\DVD Maker\ja-JP\data.exe" C:\Program Files\DVD Maker\ja-JP\

C:\Program Files\DVD Maker\Shared\backup.exe

"C:\Program Files\DVD Maker\Shared\backup.exe" C:\Program Files\DVD Maker\Shared\

C:\Program Files\DVD Maker\Shared\DvdStyles\backup.exe

"C:\Program Files\DVD Maker\Shared\DvdStyles\backup.exe" C:\Program Files\DVD Maker\Shared\DvdStyles\

C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\backup.exe

"C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\backup.exe" C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\

C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\backup.exe

"C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\backup.exe" C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\

C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\backup.exe

"C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\backup.exe" C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\

C:\Program Files\DVD Maker\Shared\DvdStyles\Full\backup.exe

"C:\Program Files\DVD Maker\Shared\DvdStyles\Full\backup.exe" C:\Program Files\DVD Maker\Shared\DvdStyles\Full\

C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\backup.exe

"C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\backup.exe" C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\

C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\data.exe

"C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\data.exe" C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\

C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\backup.exe

"C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\backup.exe" C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\

C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\backup.exe

"C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\backup.exe" C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\

C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\backup.exe

"C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\backup.exe" C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\

C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\backup.exe

"C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\backup.exe" C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\

C:\Program Files\DVD Maker\Shared\DvdStyles\Push\System Restore.exe

"C:\Program Files\DVD Maker\Shared\DvdStyles\Push\System Restore.exe" C:\Program Files\DVD Maker\Shared\DvdStyles\Push\

C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\backup.exe

"C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\backup.exe" C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\

C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\backup.exe

"C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\backup.exe" C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\

C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\backup.exe

"C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\backup.exe" C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\

C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\backup.exe

"C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\backup.exe" C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\

C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\backup.exe

"C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\backup.exe" C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\

C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\backup.exe

"C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\backup.exe" C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\

C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\backup.exe

"C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\backup.exe" C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\

C:\Program Files\DVD Maker\Shared\DvdStyles\VideoWall\backup.exe

"C:\Program Files\DVD Maker\Shared\DvdStyles\VideoWall\backup.exe" C:\Program Files\DVD Maker\Shared\DvdStyles\VideoWall\

C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\backup.exe

"C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\backup.exe" C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\

C:\Program Files\Google\System Restore.exe

"C:\Program Files\Google\System Restore.exe" C:\Program Files\Google\

C:\Program Files\Google\Chrome\backup.exe

"C:\Program Files\Google\Chrome\backup.exe" C:\Program Files\Google\Chrome\

C:\Program Files\Google\Chrome\Application\backup.exe

"C:\Program Files\Google\Chrome\Application\backup.exe" C:\Program Files\Google\Chrome\Application\

C:\Program Files\Google\Chrome\Application\106.0.5249.119\backup.exe

"C:\Program Files\Google\Chrome\Application\106.0.5249.119\backup.exe" C:\Program Files\Google\Chrome\Application\106.0.5249.119\

C:\Program Files\Google\Chrome\Application\106.0.5249.119\default_apps\backup.exe

"C:\Program Files\Google\Chrome\Application\106.0.5249.119\default_apps\backup.exe" C:\Program Files\Google\Chrome\Application\106.0.5249.119\default_apps\

C:\Program Files\Google\Chrome\Application\106.0.5249.119\Extensions\backup.exe

"C:\Program Files\Google\Chrome\Application\106.0.5249.119\Extensions\backup.exe" C:\Program Files\Google\Chrome\Application\106.0.5249.119\Extensions\

C:\Program Files\Google\Chrome\Application\106.0.5249.119\Installer\backup.exe

"C:\Program Files\Google\Chrome\Application\106.0.5249.119\Installer\backup.exe" C:\Program Files\Google\Chrome\Application\106.0.5249.119\Installer\

C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\System Restore.exe

"C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\System Restore.exe" C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\

C:\Program Files\Google\Chrome\Application\106.0.5249.119\MEIPreload\backup.exe

"C:\Program Files\Google\Chrome\Application\106.0.5249.119\MEIPreload\backup.exe" C:\Program Files\Google\Chrome\Application\106.0.5249.119\MEIPreload\

C:\Program Files\Google\Chrome\Application\106.0.5249.119\VisualElements\backup.exe

"C:\Program Files\Google\Chrome\Application\106.0.5249.119\VisualElements\backup.exe" C:\Program Files\Google\Chrome\Application\106.0.5249.119\VisualElements\

C:\Program Files\Google\Chrome\Application\106.0.5249.119\WidevineCdm\backup.exe

"C:\Program Files\Google\Chrome\Application\106.0.5249.119\WidevineCdm\backup.exe" C:\Program Files\Google\Chrome\Application\106.0.5249.119\WidevineCdm\

C:\Program Files\Google\Chrome\Application\106.0.5249.119\WidevineCdm\_platform_specific\backup.exe

"C:\Program Files\Google\Chrome\Application\106.0.5249.119\WidevineCdm\_platform_specific\backup.exe" C:\Program Files\Google\Chrome\Application\106.0.5249.119\WidevineCdm\_platform_specific\

C:\Program Files\Google\Chrome\Application\106.0.5249.119\WidevineCdm\_platform_specific\win_x64\backup.exe

"C:\Program Files\Google\Chrome\Application\106.0.5249.119\WidevineCdm\_platform_specific\win_x64\backup.exe" C:\Program Files\Google\Chrome\Application\106.0.5249.119\WidevineCdm\_platform_specific\win_x64\

C:\Program Files\Google\Chrome\Application\SetupMetrics\update.exe

"C:\Program Files\Google\Chrome\Application\SetupMetrics\update.exe" C:\Program Files\Google\Chrome\Application\SetupMetrics\

C:\Program Files\Internet Explorer\backup.exe

"C:\Program Files\Internet Explorer\backup.exe" C:\Program Files\Internet Explorer\

C:\Program Files\Internet Explorer\de-DE\backup.exe

"C:\Program Files\Internet Explorer\de-DE\backup.exe" C:\Program Files\Internet Explorer\de-DE\

C:\Program Files\Internet Explorer\en-US\backup.exe

"C:\Program Files\Internet Explorer\en-US\backup.exe" C:\Program Files\Internet Explorer\en-US\

C:\Program Files\Internet Explorer\es-ES\backup.exe

"C:\Program Files\Internet Explorer\es-ES\backup.exe" C:\Program Files\Internet Explorer\es-ES\

C:\Program Files\Internet Explorer\fr-FR\backup.exe

"C:\Program Files\Internet Explorer\fr-FR\backup.exe" C:\Program Files\Internet Explorer\fr-FR\

C:\Program Files\Internet Explorer\images\backup.exe

"C:\Program Files\Internet Explorer\images\backup.exe" C:\Program Files\Internet Explorer\images\

C:\Program Files\Internet Explorer\it-IT\backup.exe

"C:\Program Files\Internet Explorer\it-IT\backup.exe" C:\Program Files\Internet Explorer\it-IT\

C:\Program Files\Internet Explorer\ja-JP\backup.exe

"C:\Program Files\Internet Explorer\ja-JP\backup.exe" C:\Program Files\Internet Explorer\ja-JP\

C:\Program Files\Internet Explorer\SIGNUP\backup.exe

"C:\Program Files\Internet Explorer\SIGNUP\backup.exe" C:\Program Files\Internet Explorer\SIGNUP\

C:\Program Files\Java\backup.exe

"C:\Program Files\Java\backup.exe" C:\Program Files\Java\

C:\Program Files\Java\jdk1.7.0_80\data.exe

"C:\Program Files\Java\jdk1.7.0_80\data.exe" C:\Program Files\Java\jdk1.7.0_80\

C:\Program Files\Java\jdk1.7.0_80\bin\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\bin\backup.exe" C:\Program Files\Java\jdk1.7.0_80\bin\

C:\Program Files\Java\jdk1.7.0_80\db\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\db\backup.exe" C:\Program Files\Java\jdk1.7.0_80\db\

C:\Program Files\Java\jdk1.7.0_80\db\bin\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\db\bin\backup.exe" C:\Program Files\Java\jdk1.7.0_80\db\bin\

C:\Program Files\Java\jdk1.7.0_80\db\lib\update.exe

"C:\Program Files\Java\jdk1.7.0_80\db\lib\update.exe" C:\Program Files\Java\jdk1.7.0_80\db\lib\

C:\Program Files\Java\jdk1.7.0_80\include\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\include\backup.exe" C:\Program Files\Java\jdk1.7.0_80\include\

C:\Program Files\Java\jdk1.7.0_80\include\win32\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\include\win32\backup.exe" C:\Program Files\Java\jdk1.7.0_80\include\win32\

C:\Program Files\Java\jdk1.7.0_80\include\win32\bridge\data.exe

"C:\Program Files\Java\jdk1.7.0_80\include\win32\bridge\data.exe" C:\Program Files\Java\jdk1.7.0_80\include\win32\bridge\

C:\Program Files\Java\jdk1.7.0_80\jre\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\jre\backup.exe" C:\Program Files\Java\jdk1.7.0_80\jre\

C:\Program Files\Java\jdk1.7.0_80\jre\bin\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\jre\bin\backup.exe" C:\Program Files\Java\jdk1.7.0_80\jre\bin\

C:\Program Files\Java\jdk1.7.0_80\jre\bin\dtplugin\data.exe

"C:\Program Files\Java\jdk1.7.0_80\jre\bin\dtplugin\data.exe" C:\Program Files\Java\jdk1.7.0_80\jre\bin\dtplugin\

C:\Program Files\Java\jdk1.7.0_80\jre\bin\plugin2\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\jre\bin\plugin2\backup.exe" C:\Program Files\Java\jdk1.7.0_80\jre\bin\plugin2\

C:\Program Files\Java\jdk1.7.0_80\jre\bin\server\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\jre\bin\server\backup.exe" C:\Program Files\Java\jdk1.7.0_80\jre\bin\server\

C:\Program Files\Java\jdk1.7.0_80\jre\lib\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\jre\lib\backup.exe" C:\Program Files\Java\jdk1.7.0_80\jre\lib\

C:\Program Files\Java\jdk1.7.0_80\jre\lib\amd64\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\jre\lib\amd64\backup.exe" C:\Program Files\Java\jdk1.7.0_80\jre\lib\amd64\

C:\Program Files\Java\jdk1.7.0_80\jre\lib\applet\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\jre\lib\applet\backup.exe" C:\Program Files\Java\jdk1.7.0_80\jre\lib\applet\

C:\Program Files\Java\jdk1.7.0_80\jre\lib\cmm\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\jre\lib\cmm\backup.exe" C:\Program Files\Java\jdk1.7.0_80\jre\lib\cmm\

C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\backup.exe" C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\

C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\backup.exe" C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\

C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\backup.exe" C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\

C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\backup.exe" C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\

C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\backup.exe" C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\

C:\Program Files\Java\jdk1.7.0_80\jre\lib\jfr\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\jre\lib\jfr\backup.exe" C:\Program Files\Java\jdk1.7.0_80\jre\lib\jfr\

C:\Program Files\Java\jdk1.7.0_80\jre\lib\management\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\jre\lib\management\backup.exe" C:\Program Files\Java\jdk1.7.0_80\jre\lib\management\

C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\backup.exe" C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\

C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\backup.exe" C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\

C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\backup.exe" C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\

C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\update.exe

"C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\update.exe" C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\

C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\backup.exe" C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\

C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Indiana\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Indiana\backup.exe" C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Indiana\

C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Kentucky\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Kentucky\backup.exe" C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Kentucky\

C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\North_Dakota\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\North_Dakota\backup.exe" C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\North_Dakota\

C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\backup.exe" C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\

C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\backup.exe" C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\

C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\backup.exe" C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\

C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\data.exe

"C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\data.exe" C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\

C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\backup.exe" C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\

C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\backup.exe" C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\

C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Indian\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Indian\backup.exe" C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Indian\

C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\backup.exe" C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\

C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\backup.exe" C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\

C:\Program Files\Java\jdk1.7.0_80\lib\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\data.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\data.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\configuration\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\configuration\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\configuration\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\configuration\org.eclipse.equinox.simpleconfigurator\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\configuration\org.eclipse.equinox.simpleconfigurator\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\configuration\org.eclipse.equinox.simpleconfigurator\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\configuration\org.eclipse.update\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\configuration\org.eclipse.update\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\configuration\org.eclipse.update\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\dropins\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\dropins\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\dropins\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.console_5.5.0.165303\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.console_5.5.0.165303\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.console_5.5.0.165303\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.core_5.5.0.165303\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.core_5.5.0.165303\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.core_5.5.0.165303\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.flightrecorder_5.5.0.165303\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.flightrecorder_5.5.0.165303\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.flightrecorder_5.5.0.165303\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.ja_5.5.0.165303\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.ja_5.5.0.165303\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.ja_5.5.0.165303\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.zh_CN_5.5.0.165303\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.zh_CN_5.5.0.165303\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.zh_CN_5.5.0.165303\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp_5.5.0.165303\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp_5.5.0.165303\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp_5.5.0.165303\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.rcp.product_5.5.0.165303\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.rcp.product_5.5.0.165303\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.rcp.product_5.5.0.165303\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\META-INF\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\META-INF\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\META-INF\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\data.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\data.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\META-INF\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\META-INF\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\META-INF\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\META-INF\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\META-INF\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\META-INF\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\META-INF\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\META-INF\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\META-INF\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\System Restore.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\System Restore.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\META-INF\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\META-INF\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\META-INF\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\META-INF\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\META-INF\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\META-INF\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\META-INF\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\META-INF\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\META-INF\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\META-INF\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\META-INF\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\META-INF\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\META-INF\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\META-INF\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\META-INF\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\META-INF\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\META-INF\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\META-INF\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\META-INF\System Restore.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\META-INF\System Restore.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\META-INF\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\binary\update.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\binary\update.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\binary\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\update.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\update.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\JMC.profile\System Restore.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\JMC.profile\System Restore.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\JMC.profile\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\update.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\update.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\css\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\css\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\css\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\html\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\html\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\html\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\icons\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\icons\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\icons\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\META-INF\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\META-INF\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\META-INF\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\META-INF\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\META-INF\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\META-INF\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\META-INF\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\META-INF\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\META-INF\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\data.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\data.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\dark\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\dark\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\dark\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\META-INF\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\META-INF\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\META-INF\

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\etc\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\etc\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\etc\

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\data.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\data.exe" C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\core\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\core\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\core\

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\core\locale\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\core\locale\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\core\locale\

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\locale\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\locale\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\locale\

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\ext\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\ext\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\ext\

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\ext\locale\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\ext\locale\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\ext\locale\

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\deployed\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\deployed\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\deployed\

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\deployed\jdk15\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\deployed\jdk15\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\deployed\jdk15\

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\deployed\jdk15\windows-amd64\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\deployed\jdk15\windows-amd64\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\deployed\jdk15\windows-amd64\

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\deployed\jdk16\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\deployed\jdk16\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\deployed\jdk16\

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\deployed\jdk16\windows-amd64\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\deployed\jdk16\windows-amd64\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\deployed\jdk16\windows-amd64\

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\locale\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\locale\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\locale\

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\core\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\core\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\core\

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\core\locale\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\core\locale\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\core\locale\

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\backup.exe

"C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\backup.exe" C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\

C:\Program Files (x86)\backup.exe

"C:\Program Files (x86)\backup.exe" C:\Program Files (x86)\

C:\Program Files\Java\jre7\System Restore.exe

"C:\Program Files\Java\jre7\System Restore.exe" C:\Program Files\Java\jre7\

C:\Program Files (x86)\Adobe\backup.exe

"C:\Program Files (x86)\Adobe\backup.exe" C:\Program Files (x86)\Adobe\

C:\Program Files (x86)\Adobe\Reader 9.0\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\

C:\Program Files\Java\jre7\bin\backup.exe

"C:\Program Files\Java\jre7\bin\backup.exe" C:\Program Files\Java\jre7\bin\

C:\Program Files (x86)\Adobe\Reader 9.0\Esl\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Esl\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Esl\

C:\Program Files\Java\jre7\bin\dtplugin\backup.exe

"C:\Program Files\Java\jre7\bin\dtplugin\backup.exe" C:\Program Files\Java\jre7\bin\dtplugin\

C:\Program Files\Java\jre7\bin\plugin2\backup.exe

"C:\Program Files\Java\jre7\bin\plugin2\backup.exe" C:\Program Files\Java\jre7\bin\plugin2\

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Reader\

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\data.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\data.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\

C:\Program Files\Java\jre7\bin\server\backup.exe

"C:\Program Files\Java\jre7\bin\server\backup.exe" C:\Program Files\Java\jre7\bin\server\

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AMT\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AMT\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AMT\

C:\Program Files\Java\jre7\lib\backup.exe

"C:\Program Files\Java\jre7\lib\backup.exe" C:\Program Files\Java\jre7\lib\

C:\Program Files\Java\jre7\lib\amd64\backup.exe

"C:\Program Files\Java\jre7\lib\amd64\backup.exe" C:\Program Files\Java\jre7\lib\amd64\

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\

C:\Program Files\Java\jre7\lib\applet\backup.exe

"C:\Program Files\Java\jre7\lib\applet\backup.exe" C:\Program Files\Java\jre7\lib\applet\

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\IDTemplates\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\IDTemplates\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Reader\IDTemplates\

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\IDTemplates\ENU\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\IDTemplates\ENU\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Reader\IDTemplates\ENU\

C:\Program Files\Java\jre7\lib\cmm\backup.exe

"C:\Program Files\Java\jre7\lib\cmm\backup.exe" C:\Program Files\Java\jre7\lib\cmm\

C:\Program Files\Java\jre7\lib\deploy\backup.exe

"C:\Program Files\Java\jre7\lib\deploy\backup.exe" C:\Program Files\Java\jre7\lib\deploy\

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Javascripts\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Javascripts\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Javascripts\

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Legal\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Legal\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Legal\

C:\Program Files\Java\jre7\lib\ext\backup.exe

"C:\Program Files\Java\jre7\lib\ext\backup.exe" C:\Program Files\Java\jre7\lib\ext\

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Legal\ENU\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Legal\ENU\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Legal\ENU\

C:\Program Files\Java\jre7\lib\fonts\backup.exe

"C:\Program Files\Java\jre7\lib\fonts\backup.exe" C:\Program Files\Java\jre7\lib\fonts\

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Optional\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Optional\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Optional\

C:\Program Files\Java\jre7\lib\images\backup.exe

"C:\Program Files\Java\jre7\lib\images\backup.exe" C:\Program Files\Java\jre7\lib\images\

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\

C:\Program Files\Java\jre7\lib\images\cursors\backup.exe

"C:\Program Files\Java\jre7\lib\images\cursors\backup.exe" C:\Program Files\Java\jre7\lib\images\cursors\

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\AcroForm\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\AcroForm\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\AcroForm\

C:\Program Files\Java\jre7\lib\jfr\backup.exe

"C:\Program Files\Java\jre7\lib\jfr\backup.exe" C:\Program Files\Java\jre7\lib\jfr\

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\AcroForm\PMP\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\AcroForm\PMP\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\AcroForm\PMP\

C:\Program Files\Java\jre7\lib\management\backup.exe

"C:\Program Files\Java\jre7\lib\management\backup.exe" C:\Program Files\Java\jre7\lib\management\

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Annotations\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Annotations\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Annotations\

C:\Program Files\Java\jre7\lib\security\backup.exe

"C:\Program Files\Java\jre7\lib\security\backup.exe" C:\Program Files\Java\jre7\lib\security\

C:\Program Files\Java\jre7\lib\zi\backup.exe

"C:\Program Files\Java\jre7\lib\zi\backup.exe" C:\Program Files\Java\jre7\lib\zi\

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Annotations\Stamps\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Annotations\Stamps\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Annotations\Stamps\

C:\Program Files\Java\jre7\lib\zi\Africa\backup.exe

"C:\Program Files\Java\jre7\lib\zi\Africa\backup.exe" C:\Program Files\Java\jre7\lib\zi\Africa\

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Annotations\Stamps\ENU\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Annotations\Stamps\ENU\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Annotations\Stamps\ENU\

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Multimedia\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Multimedia\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Multimedia\

C:\Program Files\Java\jre7\lib\zi\America\backup.exe

"C:\Program Files\Java\jre7\lib\zi\America\backup.exe" C:\Program Files\Java\jre7\lib\zi\America\

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Multimedia\MPP\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Multimedia\MPP\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Multimedia\MPP\

C:\Program Files\Java\jre7\lib\zi\America\Argentina\backup.exe

"C:\Program Files\Java\jre7\lib\zi\America\Argentina\backup.exe" C:\Program Files\Java\jre7\lib\zi\America\Argentina\

C:\Program Files\Java\jre7\lib\zi\America\Indiana\System Restore.exe

"C:\Program Files\Java\jre7\lib\zi\America\Indiana\System Restore.exe" C:\Program Files\Java\jre7\lib\zi\America\Indiana\

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\

C:\Program Files\Java\jre7\lib\zi\America\Kentucky\backup.exe

"C:\Program Files\Java\jre7\lib\zi\America\Kentucky\backup.exe" C:\Program Files\Java\jre7\lib\zi\America\Kentucky\

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\ENU\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\ENU\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\ENU\

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\

C:\Program Files\Java\jre7\lib\zi\America\North_Dakota\backup.exe

"C:\Program Files\Java\jre7\lib\zi\America\North_Dakota\backup.exe" C:\Program Files\Java\jre7\lib\zi\America\North_Dakota\

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\prc\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\prc\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\prc\

C:\Program Files\Java\jre7\lib\zi\Antarctica\backup.exe

"C:\Program Files\Java\jre7\lib\zi\Antarctica\backup.exe" C:\Program Files\Java\jre7\lib\zi\Antarctica\

C:\Program Files\Java\jre7\lib\zi\Asia\backup.exe

"C:\Program Files\Java\jre7\lib\zi\Asia\backup.exe" C:\Program Files\Java\jre7\lib\zi\Asia\

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\SPPlugins\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\SPPlugins\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Reader\SPPlugins\

C:\Program Files\Java\jre7\lib\zi\Atlantic\backup.exe

"C:\Program Files\Java\jre7\lib\zi\Atlantic\backup.exe" C:\Program Files\Java\jre7\lib\zi\Atlantic\

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\

C:\Program Files (x86)\Adobe\Reader 9.0\Resource\update.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Resource\update.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Resource\

C:\Program Files\Java\jre7\lib\zi\Australia\backup.exe

"C:\Program Files\Java\jre7\lib\zi\Australia\backup.exe" C:\Program Files\Java\jre7\lib\zi\Australia\

C:\Program Files\Java\jre7\lib\zi\Etc\backup.exe

"C:\Program Files\Java\jre7\lib\zi\Etc\backup.exe" C:\Program Files\Java\jre7\lib\zi\Etc\

C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\

C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\PFM\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\PFM\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\PFM\

C:\Program Files\Java\jre7\lib\zi\Europe\backup.exe

"C:\Program Files\Java\jre7\lib\zi\Europe\backup.exe" C:\Program Files\Java\jre7\lib\zi\Europe\

C:\Program Files\Java\jre7\lib\zi\Indian\backup.exe

"C:\Program Files\Java\jre7\lib\zi\Indian\backup.exe" C:\Program Files\Java\jre7\lib\zi\Indian\

C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Icons\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Icons\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Icons\

C:\Program Files\Java\jre7\lib\zi\Pacific\backup.exe

"C:\Program Files\Java\jre7\lib\zi\Pacific\backup.exe" C:\Program Files\Java\jre7\lib\zi\Pacific\

C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\

C:\Program Files\Java\jre7\lib\zi\SystemV\backup.exe

"C:\Program Files\Java\jre7\lib\zi\SystemV\backup.exe" C:\Program Files\Java\jre7\lib\zi\SystemV\

C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\LanguageNames2\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\LanguageNames2\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\LanguageNames2\

C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\

C:\Program Files\Microsoft Games\backup.exe

"C:\Program Files\Microsoft Games\backup.exe" C:\Program Files\Microsoft Games\

C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\

C:\Program Files\Microsoft Games\Chess\data.exe

"C:\Program Files\Microsoft Games\Chess\data.exe" C:\Program Files\Microsoft Games\Chess\

C:\Program Files\Microsoft Games\Chess\de-DE\backup.exe

"C:\Program Files\Microsoft Games\Chess\de-DE\backup.exe" C:\Program Files\Microsoft Games\Chess\de-DE\

C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\

C:\Program Files\Microsoft Games\Chess\en-US\backup.exe

"C:\Program Files\Microsoft Games\Chess\en-US\backup.exe" C:\Program Files\Microsoft Games\Chess\en-US\

C:\Program Files (x86)\Adobe\Reader 9.0\Resource\SaslPrep\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Resource\SaslPrep\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Resource\SaslPrep\

C:\Program Files\Microsoft Games\Chess\es-ES\backup.exe

"C:\Program Files\Microsoft Games\Chess\es-ES\backup.exe" C:\Program Files\Microsoft Games\Chess\es-ES\

C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\

C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\

C:\Program Files\Microsoft Games\Chess\fr-FR\backup.exe

"C:\Program Files\Microsoft Games\Chess\fr-FR\backup.exe" C:\Program Files\Microsoft Games\Chess\fr-FR\

C:\Program Files\Microsoft Games\Chess\it-IT\backup.exe

"C:\Program Files\Microsoft Games\Chess\it-IT\backup.exe" C:\Program Files\Microsoft Games\Chess\it-IT\

C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\ICU\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\ICU\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\ICU\

C:\Program Files\Microsoft Games\Chess\ja-JP\backup.exe

"C:\Program Files\Microsoft Games\Chess\ja-JP\backup.exe" C:\Program Files\Microsoft Games\Chess\ja-JP\

C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\

C:\Program Files\Microsoft Games\FreeCell\System Restore.exe

"C:\Program Files\Microsoft Games\FreeCell\System Restore.exe" C:\Program Files\Microsoft Games\FreeCell\

C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Adobe\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Adobe\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Adobe\

C:\Program Files\Microsoft Games\FreeCell\de-DE\backup.exe

"C:\Program Files\Microsoft Games\FreeCell\de-DE\backup.exe" C:\Program Files\Microsoft Games\FreeCell\de-DE\

C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\

C:\Program Files\Microsoft Games\FreeCell\en-US\backup.exe

"C:\Program Files\Microsoft Games\FreeCell\en-US\backup.exe" C:\Program Files\Microsoft Games\FreeCell\en-US\

C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\win\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\win\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\win\

C:\Program Files\Microsoft Games\FreeCell\es-ES\backup.exe

"C:\Program Files\Microsoft Games\FreeCell\es-ES\backup.exe" C:\Program Files\Microsoft Games\FreeCell\es-ES\

C:\Program Files\Microsoft Games\FreeCell\fr-FR\backup.exe

"C:\Program Files\Microsoft Games\FreeCell\fr-FR\backup.exe" C:\Program Files\Microsoft Games\FreeCell\fr-FR\

C:\Program Files (x86)\Adobe\Reader 9.0\Setup Files\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Setup Files\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Setup Files\

C:\Program Files\Microsoft Games\FreeCell\it-IT\backup.exe

"C:\Program Files\Microsoft Games\FreeCell\it-IT\backup.exe" C:\Program Files\Microsoft Games\FreeCell\it-IT\

C:\Program Files (x86)\Adobe\Reader 9.0\Setup Files\{AC76BA86-7AD7-1033-7B44-A90000000001}\backup.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Setup Files\{AC76BA86-7AD7-1033-7B44-A90000000001}\backup.exe" C:\Program Files (x86)\Adobe\Reader 9.0\Setup Files\{AC76BA86-7AD7-1033-7B44-A90000000001}\

C:\Program Files\Microsoft Games\FreeCell\ja-JP\backup.exe

"C:\Program Files\Microsoft Games\FreeCell\ja-JP\backup.exe" C:\Program Files\Microsoft Games\FreeCell\ja-JP\

C:\Program Files (x86)\Common Files\backup.exe

"C:\Program Files (x86)\Common Files\backup.exe" C:\Program Files (x86)\Common Files\

C:\Program Files\Microsoft Games\Hearts\backup.exe

"C:\Program Files\Microsoft Games\Hearts\backup.exe" C:\Program Files\Microsoft Games\Hearts\

C:\Program Files\Microsoft Games\Hearts\de-DE\backup.exe

"C:\Program Files\Microsoft Games\Hearts\de-DE\backup.exe" C:\Program Files\Microsoft Games\Hearts\de-DE\

C:\Program Files (x86)\Common Files\Adobe\backup.exe

"C:\Program Files (x86)\Common Files\Adobe\backup.exe" C:\Program Files (x86)\Common Files\Adobe\

C:\Program Files (x86)\Common Files\Adobe\Acrobat\backup.exe

"C:\Program Files (x86)\Common Files\Adobe\Acrobat\backup.exe" C:\Program Files (x86)\Common Files\Adobe\Acrobat\

C:\Program Files\Microsoft Games\Hearts\en-US\backup.exe

"C:\Program Files\Microsoft Games\Hearts\en-US\backup.exe" C:\Program Files\Microsoft Games\Hearts\en-US\

C:\Program Files (x86)\Common Files\Adobe\Help\backup.exe

"C:\Program Files (x86)\Common Files\Adobe\Help\backup.exe" C:\Program Files (x86)\Common Files\Adobe\Help\

C:\Program Files\Microsoft Games\Hearts\es-ES\backup.exe

"C:\Program Files\Microsoft Games\Hearts\es-ES\backup.exe" C:\Program Files\Microsoft Games\Hearts\es-ES\

C:\Program Files (x86)\Common Files\Adobe\Help\en_US\backup.exe

"C:\Program Files (x86)\Common Files\Adobe\Help\en_US\backup.exe" C:\Program Files (x86)\Common Files\Adobe\Help\en_US\

C:\Program Files\Microsoft Games\Hearts\fr-FR\backup.exe

"C:\Program Files\Microsoft Games\Hearts\fr-FR\backup.exe" C:\Program Files\Microsoft Games\Hearts\fr-FR\

C:\Program Files (x86)\Common Files\Adobe\Help\en_US\Adobe Reader\backup.exe

"C:\Program Files (x86)\Common Files\Adobe\Help\en_US\Adobe Reader\backup.exe" C:\Program Files (x86)\Common Files\Adobe\Help\en_US\Adobe Reader\

C:\Program Files\Microsoft Games\Hearts\it-IT\backup.exe

"C:\Program Files\Microsoft Games\Hearts\it-IT\backup.exe" C:\Program Files\Microsoft Games\Hearts\it-IT\

C:\Program Files\Microsoft Games\Hearts\ja-JP\backup.exe

"C:\Program Files\Microsoft Games\Hearts\ja-JP\backup.exe" C:\Program Files\Microsoft Games\Hearts\ja-JP\

C:\Program Files (x86)\Common Files\Adobe\Help\en_US\Adobe Reader\9.0\backup.exe

"C:\Program Files (x86)\Common Files\Adobe\Help\en_US\Adobe Reader\9.0\backup.exe" C:\Program Files (x86)\Common Files\Adobe\Help\en_US\Adobe Reader\9.0\

C:\Program Files\Microsoft Games\Mahjong\backup.exe

"C:\Program Files\Microsoft Games\Mahjong\backup.exe" C:\Program Files\Microsoft Games\Mahjong\

C:\Program Files (x86)\Common Files\Adobe\Updater6\backup.exe

"C:\Program Files (x86)\Common Files\Adobe\Updater6\backup.exe" C:\Program Files (x86)\Common Files\Adobe\Updater6\

C:\Program Files (x86)\Common Files\Adobe AIR\backup.exe

"C:\Program Files (x86)\Common Files\Adobe AIR\backup.exe" C:\Program Files (x86)\Common Files\Adobe AIR\

C:\Program Files\Microsoft Games\Mahjong\de-DE\backup.exe

"C:\Program Files\Microsoft Games\Mahjong\de-DE\backup.exe" C:\Program Files\Microsoft Games\Mahjong\de-DE\

C:\Program Files (x86)\Common Files\Adobe AIR\Versions\backup.exe

"C:\Program Files (x86)\Common Files\Adobe AIR\Versions\backup.exe" C:\Program Files (x86)\Common Files\Adobe AIR\Versions\

C:\Program Files\Microsoft Games\Mahjong\en-US\backup.exe

"C:\Program Files\Microsoft Games\Mahjong\en-US\backup.exe" C:\Program Files\Microsoft Games\Mahjong\en-US\

C:\Program Files\Microsoft Games\Mahjong\es-ES\backup.exe

"C:\Program Files\Microsoft Games\Mahjong\es-ES\backup.exe" C:\Program Files\Microsoft Games\Mahjong\es-ES\

C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\backup.exe

"C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\backup.exe" C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\

C:\Program Files\Microsoft Games\Mahjong\fr-FR\backup.exe

"C:\Program Files\Microsoft Games\Mahjong\fr-FR\backup.exe" C:\Program Files\Microsoft Games\Mahjong\fr-FR\

C:\Program Files (x86)\Common Files\DESIGNER\backup.exe

"C:\Program Files (x86)\Common Files\DESIGNER\backup.exe" C:\Program Files (x86)\Common Files\DESIGNER\

C:\Program Files (x86)\Common Files\microsoft shared\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\

C:\Program Files\Microsoft Games\Mahjong\it-IT\backup.exe

"C:\Program Files\Microsoft Games\Mahjong\it-IT\backup.exe" C:\Program Files\Microsoft Games\Mahjong\it-IT\

C:\Program Files (x86)\Common Files\microsoft shared\DAO\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\DAO\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\DAO\

C:\Program Files\Microsoft Games\Mahjong\ja-JP\backup.exe

"C:\Program Files\Microsoft Games\Mahjong\ja-JP\backup.exe" C:\Program Files\Microsoft Games\Mahjong\ja-JP\

C:\Program Files (x86)\Common Files\microsoft shared\DW\update.exe

"C:\Program Files (x86)\Common Files\microsoft shared\DW\update.exe" C:\Program Files (x86)\Common Files\microsoft shared\DW\

C:\Program Files\Microsoft Games\Minesweeper\backup.exe

"C:\Program Files\Microsoft Games\Minesweeper\backup.exe" C:\Program Files\Microsoft Games\Minesweeper\

C:\Program Files\Microsoft Games\Minesweeper\de-DE\backup.exe

"C:\Program Files\Microsoft Games\Minesweeper\de-DE\backup.exe" C:\Program Files\Microsoft Games\Minesweeper\de-DE\

C:\Program Files (x86)\Common Files\microsoft shared\EQUATION\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\EQUATION\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\EQUATION\

C:\Program Files (x86)\Common Files\microsoft shared\EQUATION\1033\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\EQUATION\1033\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\EQUATION\1033\

C:\Program Files\Microsoft Games\Minesweeper\en-US\backup.exe

"C:\Program Files\Microsoft Games\Minesweeper\en-US\backup.exe" C:\Program Files\Microsoft Games\Minesweeper\en-US\

C:\Program Files\Microsoft Games\Minesweeper\es-ES\backup.exe

"C:\Program Files\Microsoft Games\Minesweeper\es-ES\backup.exe" C:\Program Files\Microsoft Games\Minesweeper\es-ES\

C:\Program Files (x86)\Common Files\microsoft shared\EURO\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\EURO\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\EURO\

C:\Program Files\Microsoft Games\Minesweeper\fr-FR\backup.exe

"C:\Program Files\Microsoft Games\Minesweeper\fr-FR\backup.exe" C:\Program Files\Microsoft Games\Minesweeper\fr-FR\

C:\Program Files (x86)\Common Files\microsoft shared\Filters\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\Filters\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\Filters\

C:\Program Files\Microsoft Games\Minesweeper\it-IT\backup.exe

"C:\Program Files\Microsoft Games\Minesweeper\it-IT\backup.exe" C:\Program Files\Microsoft Games\Minesweeper\it-IT\

C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\

C:\Program Files\Microsoft Games\Minesweeper\ja-JP\backup.exe

"C:\Program Files\Microsoft Games\Minesweeper\ja-JP\backup.exe" C:\Program Files\Microsoft Games\Minesweeper\ja-JP\

C:\Program Files (x86)\Common Files\microsoft shared\Help\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\Help\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\Help\

C:\Program Files\Microsoft Games\More Games\backup.exe

"C:\Program Files\Microsoft Games\More Games\backup.exe" C:\Program Files\Microsoft Games\More Games\

C:\Program Files\Microsoft Games\More Games\de-DE\backup.exe

"C:\Program Files\Microsoft Games\More Games\de-DE\backup.exe" C:\Program Files\Microsoft Games\More Games\de-DE\

C:\Program Files (x86)\Common Files\microsoft shared\Help\1028\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\Help\1028\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\Help\1028\

C:\Program Files\Microsoft Games\More Games\en-US\backup.exe

"C:\Program Files\Microsoft Games\More Games\en-US\backup.exe" C:\Program Files\Microsoft Games\More Games\en-US\

C:\Program Files (x86)\Common Files\microsoft shared\Help\1031\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\Help\1031\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\Help\1031\

C:\Program Files\Microsoft Games\More Games\es-ES\backup.exe

"C:\Program Files\Microsoft Games\More Games\es-ES\backup.exe" C:\Program Files\Microsoft Games\More Games\es-ES\

C:\Program Files (x86)\Common Files\microsoft shared\Help\1033\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\Help\1033\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\Help\1033\

C:\Program Files\Microsoft Games\More Games\fr-FR\backup.exe

"C:\Program Files\Microsoft Games\More Games\fr-FR\backup.exe" C:\Program Files\Microsoft Games\More Games\fr-FR\

C:\Program Files\Microsoft Games\More Games\it-IT\backup.exe

"C:\Program Files\Microsoft Games\More Games\it-IT\backup.exe" C:\Program Files\Microsoft Games\More Games\it-IT\

C:\Program Files (x86)\Common Files\microsoft shared\Help\1036\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\Help\1036\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\Help\1036\

C:\Program Files (x86)\Common Files\microsoft shared\Help\1040\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\Help\1040\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\Help\1040\

C:\Program Files\Microsoft Games\More Games\ja-JP\backup.exe

"C:\Program Files\Microsoft Games\More Games\ja-JP\backup.exe" C:\Program Files\Microsoft Games\More Games\ja-JP\

C:\Program Files (x86)\Common Files\microsoft shared\Help\1041\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\Help\1041\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\Help\1041\

C:\Program Files\Microsoft Games\Multiplayer\backup.exe

"C:\Program Files\Microsoft Games\Multiplayer\backup.exe" C:\Program Files\Microsoft Games\Multiplayer\

C:\Program Files\Microsoft Games\Multiplayer\Backgammon\backup.exe

"C:\Program Files\Microsoft Games\Multiplayer\Backgammon\backup.exe" C:\Program Files\Microsoft Games\Multiplayer\Backgammon\

C:\Program Files (x86)\Common Files\microsoft shared\Help\1042\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\Help\1042\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\Help\1042\

C:\Program Files (x86)\Common Files\microsoft shared\Help\1046\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\Help\1046\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\Help\1046\

C:\Program Files\Microsoft Games\Multiplayer\Backgammon\de-DE\backup.exe

"C:\Program Files\Microsoft Games\Multiplayer\Backgammon\de-DE\backup.exe" C:\Program Files\Microsoft Games\Multiplayer\Backgammon\de-DE\

C:\Program Files\Microsoft Games\Multiplayer\Backgammon\en-US\backup.exe

"C:\Program Files\Microsoft Games\Multiplayer\Backgammon\en-US\backup.exe" C:\Program Files\Microsoft Games\Multiplayer\Backgammon\en-US\

C:\Program Files (x86)\Common Files\microsoft shared\Help\1049\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\Help\1049\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\Help\1049\

C:\Program Files\Microsoft Games\Multiplayer\Backgammon\es-ES\update.exe

"C:\Program Files\Microsoft Games\Multiplayer\Backgammon\es-ES\update.exe" C:\Program Files\Microsoft Games\Multiplayer\Backgammon\es-ES\

C:\Program Files (x86)\Common Files\microsoft shared\Help\2052\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\Help\2052\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\Help\2052\

C:\Program Files (x86)\Common Files\microsoft shared\Help\3082\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\Help\3082\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\Help\3082\

C:\Program Files\Microsoft Games\Multiplayer\Backgammon\fr-FR\backup.exe

"C:\Program Files\Microsoft Games\Multiplayer\Backgammon\fr-FR\backup.exe" C:\Program Files\Microsoft Games\Multiplayer\Backgammon\fr-FR\

C:\Program Files\Microsoft Games\Multiplayer\Backgammon\it-IT\backup.exe

"C:\Program Files\Microsoft Games\Multiplayer\Backgammon\it-IT\backup.exe" C:\Program Files\Microsoft Games\Multiplayer\Backgammon\it-IT\

C:\Program Files (x86)\Common Files\microsoft shared\ink\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\ink\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\ink\

C:\Program Files (x86)\Common Files\microsoft shared\ink\1.0\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\ink\1.0\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\ink\1.0\

C:\Program Files\Microsoft Games\Multiplayer\Backgammon\ja-JP\update.exe

"C:\Program Files\Microsoft Games\Multiplayer\Backgammon\ja-JP\update.exe" C:\Program Files\Microsoft Games\Multiplayer\Backgammon\ja-JP\

C:\Program Files\Microsoft Games\Multiplayer\Checkers\backup.exe

"C:\Program Files\Microsoft Games\Multiplayer\Checkers\backup.exe" C:\Program Files\Microsoft Games\Multiplayer\Checkers\

C:\Program Files (x86)\Common Files\microsoft shared\ink\1.7\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\ink\1.7\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\ink\1.7\

C:\Program Files (x86)\Common Files\microsoft shared\ink\de-DE\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\ink\de-DE\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\ink\de-DE\

C:\Program Files\Microsoft Games\Multiplayer\Checkers\de-DE\backup.exe

"C:\Program Files\Microsoft Games\Multiplayer\Checkers\de-DE\backup.exe" C:\Program Files\Microsoft Games\Multiplayer\Checkers\de-DE\

C:\Program Files (x86)\Common Files\microsoft shared\ink\en-US\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\ink\en-US\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\ink\en-US\

C:\Program Files\Microsoft Games\Multiplayer\Checkers\en-US\backup.exe

"C:\Program Files\Microsoft Games\Multiplayer\Checkers\en-US\backup.exe" C:\Program Files\Microsoft Games\Multiplayer\Checkers\en-US\

C:\Program Files (x86)\Common Files\microsoft shared\ink\es-ES\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\ink\es-ES\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\ink\es-ES\

C:\Program Files\Microsoft Games\Multiplayer\Checkers\es-ES\backup.exe

"C:\Program Files\Microsoft Games\Multiplayer\Checkers\es-ES\backup.exe" C:\Program Files\Microsoft Games\Multiplayer\Checkers\es-ES\

C:\Program Files\Microsoft Games\Multiplayer\Checkers\fr-FR\backup.exe

"C:\Program Files\Microsoft Games\Multiplayer\Checkers\fr-FR\backup.exe" C:\Program Files\Microsoft Games\Multiplayer\Checkers\fr-FR\

C:\Program Files (x86)\Common Files\microsoft shared\ink\fr-FR\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\ink\fr-FR\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\ink\fr-FR\

C:\Program Files (x86)\Common Files\microsoft shared\ink\HWRCustomization\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\ink\HWRCustomization\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\ink\HWRCustomization\

C:\Program Files\Microsoft Games\Multiplayer\Checkers\it-IT\backup.exe

"C:\Program Files\Microsoft Games\Multiplayer\Checkers\it-IT\backup.exe" C:\Program Files\Microsoft Games\Multiplayer\Checkers\it-IT\

C:\Program Files (x86)\Common Files\microsoft shared\ink\it-IT\System Restore.exe

"C:\Program Files (x86)\Common Files\microsoft shared\ink\it-IT\System Restore.exe" C:\Program Files (x86)\Common Files\microsoft shared\ink\it-IT\

C:\Program Files\Microsoft Games\Multiplayer\Checkers\ja-JP\backup.exe

"C:\Program Files\Microsoft Games\Multiplayer\Checkers\ja-JP\backup.exe" C:\Program Files\Microsoft Games\Multiplayer\Checkers\ja-JP\

C:\Program Files\Microsoft Games\Multiplayer\Spades\backup.exe

"C:\Program Files\Microsoft Games\Multiplayer\Spades\backup.exe" C:\Program Files\Microsoft Games\Multiplayer\Spades\

C:\Program Files (x86)\Common Files\microsoft shared\ink\ja-JP\update.exe

"C:\Program Files (x86)\Common Files\microsoft shared\ink\ja-JP\update.exe" C:\Program Files (x86)\Common Files\microsoft shared\ink\ja-JP\

C:\Program Files (x86)\Common Files\microsoft shared\MSClientDataMgr\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\MSClientDataMgr\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\MSClientDataMgr\

C:\Program Files\Microsoft Games\Multiplayer\Spades\de-DE\backup.exe

"C:\Program Files\Microsoft Games\Multiplayer\Spades\de-DE\backup.exe" C:\Program Files\Microsoft Games\Multiplayer\Spades\de-DE\

C:\Program Files (x86)\Common Files\microsoft shared\MSEnv\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\MSEnv\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\MSEnv\

C:\Program Files\Microsoft Games\Multiplayer\Spades\en-US\backup.exe

"C:\Program Files\Microsoft Games\Multiplayer\Spades\en-US\backup.exe" C:\Program Files\Microsoft Games\Multiplayer\Spades\en-US\

C:\Program Files\Microsoft Games\Multiplayer\Spades\es-ES\backup.exe

"C:\Program Files\Microsoft Games\Multiplayer\Spades\es-ES\backup.exe" C:\Program Files\Microsoft Games\Multiplayer\Spades\es-ES\

C:\Program Files (x86)\Common Files\microsoft shared\MSEnv\PublicAssemblies\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\MSEnv\PublicAssemblies\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\MSEnv\PublicAssemblies\

C:\Program Files\Microsoft Games\Multiplayer\Spades\fr-FR\backup.exe

"C:\Program Files\Microsoft Games\Multiplayer\Spades\fr-FR\backup.exe" C:\Program Files\Microsoft Games\Multiplayer\Spades\fr-FR\

C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\

C:\Program Files\Microsoft Games\Multiplayer\Spades\it-IT\backup.exe

"C:\Program Files\Microsoft Games\Multiplayer\Spades\it-IT\backup.exe" C:\Program Files\Microsoft Games\Multiplayer\Spades\it-IT\

C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\de-DE\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\de-DE\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\de-DE\

C:\Program Files\Microsoft Games\Multiplayer\Spades\ja-JP\backup.exe

"C:\Program Files\Microsoft Games\Multiplayer\Spades\ja-JP\backup.exe" C:\Program Files\Microsoft Games\Multiplayer\Spades\ja-JP\

C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\en-US\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\en-US\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\en-US\

C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\es-ES\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\es-ES\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\es-ES\

C:\Program Files\Microsoft Games\Purble Place\backup.exe

"C:\Program Files\Microsoft Games\Purble Place\backup.exe" C:\Program Files\Microsoft Games\Purble Place\

C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\fr-FR\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\fr-FR\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\fr-FR\

C:\Program Files\Microsoft Games\Purble Place\de-DE\backup.exe

"C:\Program Files\Microsoft Games\Purble Place\de-DE\backup.exe" C:\Program Files\Microsoft Games\Purble Place\de-DE\

C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\it-IT\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\it-IT\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\it-IT\

C:\Program Files\Microsoft Games\Purble Place\en-US\backup.exe

"C:\Program Files\Microsoft Games\Purble Place\en-US\backup.exe" C:\Program Files\Microsoft Games\Purble Place\en-US\

C:\Program Files\Microsoft Games\Purble Place\es-ES\backup.exe

"C:\Program Files\Microsoft Games\Purble Place\es-ES\backup.exe" C:\Program Files\Microsoft Games\Purble Place\es-ES\

C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\ja-JP\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\ja-JP\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\ja-JP\

C:\Program Files\Microsoft Games\Purble Place\fr-FR\backup.exe

"C:\Program Files\Microsoft Games\Purble Place\fr-FR\backup.exe" C:\Program Files\Microsoft Games\Purble Place\fr-FR\

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\

C:\Program Files\Microsoft Games\Purble Place\it-IT\backup.exe

"C:\Program Files\Microsoft Games\Purble Place\it-IT\backup.exe" C:\Program Files\Microsoft Games\Purble Place\it-IT\

C:\Program Files\Microsoft Games\Purble Place\ja-JP\backup.exe

"C:\Program Files\Microsoft Games\Purble Place\ja-JP\backup.exe" C:\Program Files\Microsoft Games\Purble Place\ja-JP\

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\

C:\Program Files\Microsoft Games\Solitaire\backup.exe

"C:\Program Files\Microsoft Games\Solitaire\backup.exe" C:\Program Files\Microsoft Games\Solitaire\

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Access.en-us\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Access.en-us\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Access.en-us\

C:\Program Files\Microsoft Games\Solitaire\de-DE\backup.exe

"C:\Program Files\Microsoft Games\Solitaire\de-DE\backup.exe" C:\Program Files\Microsoft Games\Solitaire\de-DE\

C:\Program Files\Microsoft Games\Solitaire\en-US\backup.exe

"C:\Program Files\Microsoft Games\Solitaire\en-US\backup.exe" C:\Program Files\Microsoft Games\Solitaire\en-US\

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Excel.en-us\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Excel.en-us\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Excel.en-us\

C:\Program Files\Microsoft Games\Solitaire\es-ES\backup.exe

"C:\Program Files\Microsoft Games\Solitaire\es-ES\backup.exe" C:\Program Files\Microsoft Games\Solitaire\es-ES\

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Groove.en-us\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Groove.en-us\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Groove.en-us\

C:\Program Files\Microsoft Games\Solitaire\fr-FR\backup.exe

"C:\Program Files\Microsoft Games\Solitaire\fr-FR\backup.exe" C:\Program Files\Microsoft Games\Solitaire\fr-FR\

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\InfoPath.en-us\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\InfoPath.en-us\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\InfoPath.en-us\

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\

C:\Program Files\Microsoft Games\Solitaire\it-IT\backup.exe

"C:\Program Files\Microsoft Games\Solitaire\it-IT\backup.exe" C:\Program Files\Microsoft Games\Solitaire\it-IT\

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office64.en-us\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office64.en-us\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office64.en-us\

C:\Program Files\Microsoft Games\Solitaire\ja-JP\backup.exe

"C:\Program Files\Microsoft Games\Solitaire\ja-JP\backup.exe" C:\Program Files\Microsoft Games\Solitaire\ja-JP\

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office64.WW\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office64.WW\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office64.WW\

C:\Program Files\Microsoft Games\SpiderSolitaire\backup.exe

"C:\Program Files\Microsoft Games\SpiderSolitaire\backup.exe" C:\Program Files\Microsoft Games\SpiderSolitaire\

C:\Program Files\Microsoft Games\SpiderSolitaire\de-DE\backup.exe

"C:\Program Files\Microsoft Games\SpiderSolitaire\de-DE\backup.exe" C:\Program Files\Microsoft Games\SpiderSolitaire\de-DE\

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\OneNote.en-us\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\OneNote.en-us\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\OneNote.en-us\

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Outlook.en-us\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Outlook.en-us\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Outlook.en-us\

C:\Program Files\Microsoft Games\SpiderSolitaire\en-US\backup.exe

"C:\Program Files\Microsoft Games\SpiderSolitaire\en-US\backup.exe" C:\Program Files\Microsoft Games\SpiderSolitaire\en-US\

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\

C:\Program Files\Microsoft Games\SpiderSolitaire\es-ES\backup.exe

"C:\Program Files\Microsoft Games\SpiderSolitaire\es-ES\backup.exe" C:\Program Files\Microsoft Games\SpiderSolitaire\es-ES\

C:\Program Files\Microsoft Games\SpiderSolitaire\fr-FR\backup.exe

"C:\Program Files\Microsoft Games\SpiderSolitaire\fr-FR\backup.exe" C:\Program Files\Microsoft Games\SpiderSolitaire\fr-FR\

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Proof.en\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Proof.en\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Proof.en\

C:\Program Files\Microsoft Games\SpiderSolitaire\it-IT\backup.exe

"C:\Program Files\Microsoft Games\SpiderSolitaire\it-IT\backup.exe" C:\Program Files\Microsoft Games\SpiderSolitaire\it-IT\

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Proof.es\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Proof.es\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Proof.es\

C:\Program Files\Microsoft Games\SpiderSolitaire\ja-JP\backup.exe

"C:\Program Files\Microsoft Games\SpiderSolitaire\ja-JP\backup.exe" C:\Program Files\Microsoft Games\SpiderSolitaire\ja-JP\

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Proof.fr\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Proof.fr\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Proof.fr\

C:\Program Files\Microsoft Office\backup.exe

"C:\Program Files\Microsoft Office\backup.exe" C:\Program Files\Microsoft Office\

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Proofing.en-us\data.exe

"C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Proofing.en-us\data.exe" C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Proofing.en-us\

C:\Program Files\Microsoft Office\Office14\backup.exe

"C:\Program Files\Microsoft Office\Office14\backup.exe" C:\Program Files\Microsoft Office\Office14\

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\PROPLUS\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\PROPLUS\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\PROPLUS\

C:\Program Files\Microsoft Office\Office14\1033\backup.exe

"C:\Program Files\Microsoft Office\Office14\1033\backup.exe" C:\Program Files\Microsoft Office\Office14\1033\

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Publisher.en-us\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Publisher.en-us\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Publisher.en-us\

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Word.en-us\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Word.en-us\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Word.en-us\

C:\Program Files\Mozilla Firefox\backup.exe

"C:\Program Files\Mozilla Firefox\backup.exe" C:\Program Files\Mozilla Firefox\

C:\Program Files\Mozilla Firefox\browser\backup.exe

"C:\Program Files\Mozilla Firefox\browser\backup.exe" C:\Program Files\Mozilla Firefox\browser\

C:\Program Files (x86)\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\

C:\Program Files (x86)\Common Files\microsoft shared\Portal\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\Portal\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\Portal\

C:\Program Files\Mozilla Firefox\browser\features\backup.exe

"C:\Program Files\Mozilla Firefox\browser\features\backup.exe" C:\Program Files\Mozilla Firefox\browser\features\

C:\Program Files (x86)\Common Files\microsoft shared\Portal\1033\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\Portal\1033\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\Portal\1033\

C:\Program Files\Mozilla Firefox\browser\VisualElements\backup.exe

"C:\Program Files\Mozilla Firefox\browser\VisualElements\backup.exe" C:\Program Files\Mozilla Firefox\browser\VisualElements\

C:\Program Files\Mozilla Firefox\defaults\System Restore.exe

"C:\Program Files\Mozilla Firefox\defaults\System Restore.exe" C:\Program Files\Mozilla Firefox\defaults\

C:\Program Files (x86)\Common Files\microsoft shared\PROOF\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\PROOF\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\PROOF\

C:\Program Files\Mozilla Firefox\defaults\pref\backup.exe

"C:\Program Files\Mozilla Firefox\defaults\pref\backup.exe" C:\Program Files\Mozilla Firefox\defaults\pref\

C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\

C:\Program Files\Mozilla Firefox\fonts\backup.exe

"C:\Program Files\Mozilla Firefox\fonts\backup.exe" C:\Program Files\Mozilla Firefox\fonts\

C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\1033\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\1033\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\1033\

C:\Program Files\Mozilla Firefox\gmp-clearkey\backup.exe

"C:\Program Files\Mozilla Firefox\gmp-clearkey\backup.exe" C:\Program Files\Mozilla Firefox\gmp-clearkey\

C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\LISTS\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\LISTS\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\LISTS\

C:\Program Files\Mozilla Firefox\gmp-clearkey\0.1\backup.exe

"C:\Program Files\Mozilla Firefox\gmp-clearkey\0.1\backup.exe" C:\Program Files\Mozilla Firefox\gmp-clearkey\0.1\

C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\LISTS\1033\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\LISTS\1033\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\LISTS\1033\

C:\Program Files\Mozilla Firefox\uninstall\backup.exe

"C:\Program Files\Mozilla Firefox\uninstall\backup.exe" C:\Program Files\Mozilla Firefox\uninstall\

C:\Program Files (x86)\Common Files\microsoft shared\Source Engine\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\Source Engine\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\Source Engine\

C:\Program Files\MSBuild\backup.exe

"C:\Program Files\MSBuild\backup.exe" C:\Program Files\MSBuild\

C:\Program Files (x86)\Common Files\microsoft shared\Stationery\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\Stationery\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\Stationery\

C:\Program Files\MSBuild\Microsoft\backup.exe

"C:\Program Files\MSBuild\Microsoft\backup.exe" C:\Program Files\MSBuild\Microsoft\

C:\Program Files (x86)\Common Files\microsoft shared\TextConv\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\TextConv\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\TextConv\

C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\backup.exe

"C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\backup.exe" C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\

C:\Program Files (x86)\Common Files\microsoft shared\TextConv\de-DE\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\TextConv\de-DE\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\TextConv\de-DE\

C:\Program Files (x86)\Common Files\microsoft shared\TextConv\en-US\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\TextConv\en-US\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\TextConv\en-US\

C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\backup.exe

"C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\backup.exe" C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\

C:\Program Files (x86)\Common Files\microsoft shared\TextConv\es-ES\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\TextConv\es-ES\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\TextConv\es-ES\

C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\backup.exe

"C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\backup.exe" C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\

C:\Program Files\Reference Assemblies\backup.exe

"C:\Program Files\Reference Assemblies\backup.exe" C:\Program Files\Reference Assemblies\

C:\Program Files (x86)\Common Files\microsoft shared\TextConv\fr-FR\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\TextConv\fr-FR\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\TextConv\fr-FR\

C:\Program Files (x86)\Common Files\microsoft shared\TextConv\it-IT\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\TextConv\it-IT\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\TextConv\it-IT\

C:\Program Files\Reference Assemblies\Microsoft\backup.exe

"C:\Program Files\Reference Assemblies\Microsoft\backup.exe" C:\Program Files\Reference Assemblies\Microsoft\

C:\Program Files\Reference Assemblies\Microsoft\Framework\backup.exe

"C:\Program Files\Reference Assemblies\Microsoft\Framework\backup.exe" C:\Program Files\Reference Assemblies\Microsoft\Framework\

C:\Program Files (x86)\Common Files\microsoft shared\TextConv\ja-JP\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\TextConv\ja-JP\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\TextConv\ja-JP\

C:\Program Files (x86)\Common Files\microsoft shared\TextConv\WksConv\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\TextConv\WksConv\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\TextConv\WksConv\

C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\backup.exe

"C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\backup.exe" C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\

C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\de\backup.exe

"C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\de\backup.exe" C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\de\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\

C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\es\backup.exe

"C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\es\backup.exe" C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\es\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\AFTRNOON\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\AFTRNOON\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\AFTRNOON\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ARCTIC\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ARCTIC\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ARCTIC\

C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\fr\backup.exe

"C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\fr\backup.exe" C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\fr\

C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\it\backup.exe

"C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\it\backup.exe" C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\it\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\AXIS\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\AXIS\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\AXIS\

C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\ja\backup.exe

"C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\ja\backup.exe" C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\ja\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLENDS\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLENDS\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLENDS\

C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\backup.exe

"C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\backup.exe" C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLUECALM\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLUECALM\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLUECALM\

C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\backup.exe

"C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\backup.exe" C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLUEPRNT\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLUEPRNT\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLUEPRNT\

C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\de\backup.exe

"C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\de\backup.exe" C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\de\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BOLDSTRI\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BOLDSTRI\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BOLDSTRI\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BREEZE\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BREEZE\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BREEZE\

C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\es\backup.exe

"C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\es\backup.exe" C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\es\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CANYON\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CANYON\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CANYON\

C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\fr\backup.exe

"C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\fr\backup.exe" C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\fr\

C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\it\backup.exe

"C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\it\backup.exe" C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\it\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CAPSULES\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CAPSULES\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CAPSULES\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CASCADE\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CASCADE\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CASCADE\

C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\ja\backup.exe

"C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\ja\backup.exe" C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\ja\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\COMPASS\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\COMPASS\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\COMPASS\

C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\RedistList\backup.exe

"C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\RedistList\backup.exe" C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\RedistList\

C:\Program Files\VideoLAN\backup.exe

"C:\Program Files\VideoLAN\backup.exe" C:\Program Files\VideoLAN\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CONCRETE\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CONCRETE\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CONCRETE\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\DEEPBLUE\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\DEEPBLUE\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\DEEPBLUE\

C:\Program Files\VideoLAN\VLC\backup.exe

"C:\Program Files\VideoLAN\VLC\backup.exe" C:\Program Files\VideoLAN\VLC\

C:\Program Files\VideoLAN\VLC\hrtfs\data.exe

"C:\Program Files\VideoLAN\VLC\hrtfs\data.exe" C:\Program Files\VideoLAN\VLC\hrtfs\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ECHO\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ECHO\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ECHO\

C:\Program Files\VideoLAN\VLC\locale\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\backup.exe" C:\Program Files\VideoLAN\VLC\locale\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ECLIPSE\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ECLIPSE\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ECLIPSE\

C:\Program Files\VideoLAN\VLC\locale\ach\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\ach\backup.exe" C:\Program Files\VideoLAN\VLC\locale\ach\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EDGE\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EDGE\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EDGE\

C:\Program Files\VideoLAN\VLC\locale\ach\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\ach\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\ach\LC_MESSAGES\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EVRGREEN\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EVRGREEN\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EVRGREEN\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EXPEDITN\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EXPEDITN\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EXPEDITN\

C:\Program Files\VideoLAN\VLC\locale\af\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\af\backup.exe" C:\Program Files\VideoLAN\VLC\locale\af\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ICE\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ICE\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ICE\

C:\Program Files\VideoLAN\VLC\locale\af\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\af\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\af\LC_MESSAGES\

C:\Program Files\VideoLAN\VLC\locale\am\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\am\backup.exe" C:\Program Files\VideoLAN\VLC\locale\am\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\INDUST\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\INDUST\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\INDUST\

C:\Program Files\VideoLAN\VLC\locale\am\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\am\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\am\LC_MESSAGES\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\IRIS\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\IRIS\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\IRIS\

C:\Program Files\VideoLAN\VLC\locale\am_ET\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\am_ET\backup.exe" C:\Program Files\VideoLAN\VLC\locale\am_ET\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\JOURNAL\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\JOURNAL\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\JOURNAL\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\LAYERS\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\LAYERS\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\LAYERS\

C:\Program Files\VideoLAN\VLC\locale\am_ET\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\am_ET\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\am_ET\LC_MESSAGES\

C:\Program Files\VideoLAN\VLC\locale\an\data.exe

"C:\Program Files\VideoLAN\VLC\locale\an\data.exe" C:\Program Files\VideoLAN\VLC\locale\an\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\LEVEL\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\LEVEL\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\LEVEL\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\NETWORK\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\NETWORK\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\NETWORK\

C:\Program Files\VideoLAN\VLC\locale\an\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\an\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\an\LC_MESSAGES\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PAPYRUS\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PAPYRUS\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PAPYRUS\

C:\Program Files\VideoLAN\VLC\locale\ar\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\ar\backup.exe" C:\Program Files\VideoLAN\VLC\locale\ar\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PIXEL\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PIXEL\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PIXEL\

C:\Program Files\VideoLAN\VLC\locale\ar\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\ar\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\ar\LC_MESSAGES\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PROFILE\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PROFILE\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PROFILE\

C:\Program Files\VideoLAN\VLC\locale\as_IN\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\as_IN\backup.exe" C:\Program Files\VideoLAN\VLC\locale\as_IN\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\QUAD\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\QUAD\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\QUAD\

C:\Program Files\VideoLAN\VLC\locale\as_IN\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\as_IN\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\as_IN\LC_MESSAGES\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RADIAL\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RADIAL\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RADIAL\

C:\Program Files\VideoLAN\VLC\locale\ast\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\ast\backup.exe" C:\Program Files\VideoLAN\VLC\locale\ast\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\REFINED\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\REFINED\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\REFINED\

C:\Program Files\VideoLAN\VLC\locale\ast\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\ast\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\ast\LC_MESSAGES\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RICEPAPR\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RICEPAPR\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RICEPAPR\

C:\Program Files\VideoLAN\VLC\locale\be\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\be\backup.exe" C:\Program Files\VideoLAN\VLC\locale\be\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RIPPLE\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RIPPLE\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RIPPLE\

C:\Program Files\VideoLAN\VLC\locale\be\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\be\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\be\LC_MESSAGES\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RMNSQUE\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RMNSQUE\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RMNSQUE\

C:\Program Files\VideoLAN\VLC\locale\bg\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\bg\backup.exe" C:\Program Files\VideoLAN\VLC\locale\bg\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SATIN\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SATIN\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SATIN\

C:\Program Files\VideoLAN\VLC\locale\bg\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\bg\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\bg\LC_MESSAGES\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SKY\System Restore.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SKY\System Restore.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SKY\

C:\Program Files\VideoLAN\VLC\locale\bn\update.exe

"C:\Program Files\VideoLAN\VLC\locale\bn\update.exe" C:\Program Files\VideoLAN\VLC\locale\bn\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SLATE\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SLATE\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SLATE\

C:\Program Files\VideoLAN\VLC\locale\bn\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\bn\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\bn\LC_MESSAGES\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SONORA\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SONORA\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SONORA\

C:\Program Files\VideoLAN\VLC\locale\bn_IN\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\bn_IN\backup.exe" C:\Program Files\VideoLAN\VLC\locale\bn_IN\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SPRING\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SPRING\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SPRING\

C:\Program Files\VideoLAN\VLC\locale\bn_IN\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\bn_IN\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\bn_IN\LC_MESSAGES\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\STRTEDGE\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\STRTEDGE\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\STRTEDGE\

C:\Program Files\VideoLAN\VLC\locale\br\update.exe

"C:\Program Files\VideoLAN\VLC\locale\br\update.exe" C:\Program Files\VideoLAN\VLC\locale\br\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\STUDIO\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\STUDIO\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\STUDIO\

C:\Program Files\VideoLAN\VLC\locale\br\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\br\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\br\LC_MESSAGES\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SUMIPNTG\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SUMIPNTG\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SUMIPNTG\

C:\Program Files\VideoLAN\VLC\locale\brx\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\brx\backup.exe" C:\Program Files\VideoLAN\VLC\locale\brx\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\WATER\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\WATER\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\WATER\

C:\Program Files\VideoLAN\VLC\locale\brx\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\brx\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\brx\LC_MESSAGES\

C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\WATERMAR\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\WATERMAR\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\WATERMAR\

C:\Program Files\VideoLAN\VLC\locale\bs\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\bs\backup.exe" C:\Program Files\VideoLAN\VLC\locale\bs\

C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\

C:\Program Files\VideoLAN\VLC\locale\bs\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\bs\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\bs\LC_MESSAGES\

C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ARFR\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ARFR\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ARFR\

C:\Program Files\VideoLAN\VLC\locale\ca\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\ca\backup.exe" C:\Program Files\VideoLAN\VLC\locale\ca\

C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ENES\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ENES\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ENES\

C:\Program Files\VideoLAN\VLC\locale\ca\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\ca\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\ca\LC_MESSAGES\

C:\Program Files\VideoLAN\VLC\locale\ca@valencia\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\ca@valencia\backup.exe" C:\Program Files\VideoLAN\VLC\locale\ca@valencia\

C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ENFR\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ENFR\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ENFR\

C:\Program Files\VideoLAN\VLC\locale\ca@valencia\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\ca@valencia\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\ca@valencia\LC_MESSAGES\

C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ESEN\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ESEN\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ESEN\

C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\FRAR\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\FRAR\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\FRAR\

C:\Program Files\VideoLAN\VLC\locale\cgg\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\cgg\backup.exe" C:\Program Files\VideoLAN\VLC\locale\cgg\

C:\Program Files\VideoLAN\VLC\locale\cgg\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\cgg\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\cgg\LC_MESSAGES\

C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\FREN\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\FREN\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\FREN\

C:\Program Files (x86)\Common Files\microsoft shared\Triedit\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\Triedit\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\Triedit\

C:\Program Files\VideoLAN\VLC\locale\co\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\co\backup.exe" C:\Program Files\VideoLAN\VLC\locale\co\

C:\Program Files (x86)\Common Files\microsoft shared\Triedit\de-DE\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\Triedit\de-DE\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\Triedit\de-DE\

C:\Program Files\VideoLAN\VLC\locale\co\LC_MESSAGES\update.exe

"C:\Program Files\VideoLAN\VLC\locale\co\LC_MESSAGES\update.exe" C:\Program Files\VideoLAN\VLC\locale\co\LC_MESSAGES\

C:\Program Files (x86)\Common Files\microsoft shared\Triedit\en-US\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\Triedit\en-US\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\Triedit\en-US\

C:\Program Files\VideoLAN\VLC\locale\cs\update.exe

"C:\Program Files\VideoLAN\VLC\locale\cs\update.exe" C:\Program Files\VideoLAN\VLC\locale\cs\

C:\Program Files (x86)\Common Files\microsoft shared\Triedit\es-ES\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\Triedit\es-ES\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\Triedit\es-ES\

C:\Program Files\VideoLAN\VLC\locale\cs\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\cs\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\cs\LC_MESSAGES\

C:\Program Files (x86)\Common Files\microsoft shared\Triedit\fr-FR\System Restore.exe

"C:\Program Files (x86)\Common Files\microsoft shared\Triedit\fr-FR\System Restore.exe" C:\Program Files (x86)\Common Files\microsoft shared\Triedit\fr-FR\

C:\Program Files\VideoLAN\VLC\locale\cy\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\cy\backup.exe" C:\Program Files\VideoLAN\VLC\locale\cy\

C:\Program Files (x86)\Common Files\microsoft shared\Triedit\it-IT\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\Triedit\it-IT\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\Triedit\it-IT\

C:\Program Files\VideoLAN\VLC\locale\cy\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\cy\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\cy\LC_MESSAGES\

C:\Program Files (x86)\Common Files\microsoft shared\Triedit\ja-JP\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\Triedit\ja-JP\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\Triedit\ja-JP\

C:\Program Files\VideoLAN\VLC\locale\da\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\da\backup.exe" C:\Program Files\VideoLAN\VLC\locale\da\

C:\Program Files\VideoLAN\VLC\locale\da\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\da\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\da\LC_MESSAGES\

C:\Program Files (x86)\Common Files\microsoft shared\VBA\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\VBA\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\VBA\

C:\Program Files\VideoLAN\VLC\locale\de\System Restore.exe

"C:\Program Files\VideoLAN\VLC\locale\de\System Restore.exe" C:\Program Files\VideoLAN\VLC\locale\de\

C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA6\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA6\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA6\

C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA7\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA7\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA7\

C:\Program Files\VideoLAN\VLC\locale\de\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\de\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\de\LC_MESSAGES\

C:\Program Files\VideoLAN\VLC\locale\el\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\el\backup.exe" C:\Program Files\VideoLAN\VLC\locale\el\

C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA7\1033\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA7\1033\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA7\1033\

C:\Program Files\VideoLAN\VLC\locale\el\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\el\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\el\LC_MESSAGES\

C:\Program Files (x86)\Common Files\microsoft shared\VC\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\VC\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\VC\

C:\Program Files (x86)\Common Files\microsoft shared\VGX\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\VGX\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\VGX\

C:\Program Files\VideoLAN\VLC\locale\en_GB\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\en_GB\backup.exe" C:\Program Files\VideoLAN\VLC\locale\en_GB\

C:\Program Files\VideoLAN\VLC\locale\en_GB\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\en_GB\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\en_GB\LC_MESSAGES\

C:\Program Files (x86)\Common Files\microsoft shared\VSTA\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\VSTA\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\VSTA\

C:\Program Files\VideoLAN\VLC\locale\eo\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\eo\backup.exe" C:\Program Files\VideoLAN\VLC\locale\eo\

C:\Program Files (x86)\Common Files\microsoft shared\VSTA\8.0\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\VSTA\8.0\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\VSTA\8.0\

C:\Program Files\VideoLAN\VLC\locale\eo\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\eo\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\eo\LC_MESSAGES\

C:\Program Files (x86)\Common Files\microsoft shared\VSTA\8.0\x86\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\VSTA\8.0\x86\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\VSTA\8.0\x86\

C:\Program Files\VideoLAN\VLC\locale\es\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\es\backup.exe" C:\Program Files\VideoLAN\VLC\locale\es\

C:\Program Files (x86)\Common Files\microsoft shared\VSTA\AppInfoDocument\data.exe

"C:\Program Files (x86)\Common Files\microsoft shared\VSTA\AppInfoDocument\data.exe" C:\Program Files (x86)\Common Files\microsoft shared\VSTA\AppInfoDocument\

C:\Program Files\VideoLAN\VLC\locale\es\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\es\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\es\LC_MESSAGES\

C:\Program Files (x86)\Common Files\microsoft shared\VSTA\AppInfoDocument\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\VSTA\AppInfoDocument\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\VSTA\AppInfoDocument\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\

C:\Program Files\VideoLAN\VLC\locale\es_MX\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\es_MX\backup.exe" C:\Program Files\VideoLAN\VLC\locale\es_MX\

C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\

C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInSideAdapters\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInSideAdapters\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInSideAdapters\

C:\Program Files\VideoLAN\VLC\locale\es_MX\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\es_MX\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\es_MX\LC_MESSAGES\

C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInViews\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInViews\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInViews\

C:\Program Files\VideoLAN\VLC\locale\et\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\et\backup.exe" C:\Program Files\VideoLAN\VLC\locale\et\

C:\Program Files\VideoLAN\VLC\locale\et\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\et\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\et\LC_MESSAGES\

C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\Contracts\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\Contracts\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\Contracts\

C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\HostSideAdapters\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\HostSideAdapters\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\HostSideAdapters\

C:\Program Files\VideoLAN\VLC\locale\eu\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\eu\backup.exe" C:\Program Files\VideoLAN\VLC\locale\eu\

C:\Program Files (x86)\Common Files\microsoft shared\VSTO\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\VSTO\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\VSTO\

C:\Program Files\VideoLAN\VLC\locale\eu\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\eu\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\eu\LC_MESSAGES\

C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\

C:\Program Files\VideoLAN\VLC\locale\fa\update.exe

"C:\Program Files\VideoLAN\VLC\locale\fa\update.exe" C:\Program Files\VideoLAN\VLC\locale\fa\

C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\1033\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\1033\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\1033\

C:\Program Files\VideoLAN\VLC\locale\fa\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\fa\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\fa\LC_MESSAGES\

C:\Program Files (x86)\Common Files\microsoft shared\Web Folders\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\Web Folders\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\Web Folders\

C:\Program Files\VideoLAN\VLC\locale\ff\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\ff\backup.exe" C:\Program Files\VideoLAN\VLC\locale\ff\

C:\Program Files (x86)\Common Files\microsoft shared\Web Folders\1033\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\Web Folders\1033\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\Web Folders\1033\

C:\Program Files\VideoLAN\VLC\locale\ff\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\ff\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\ff\LC_MESSAGES\

C:\Program Files\VideoLAN\VLC\locale\fi\data.exe

"C:\Program Files\VideoLAN\VLC\locale\fi\data.exe" C:\Program Files\VideoLAN\VLC\locale\fi\

C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\

C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\14\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\14\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\14\

C:\Program Files\VideoLAN\VLC\locale\fi\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\fi\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\fi\LC_MESSAGES\

C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\14\BIN\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\14\BIN\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\14\BIN\

C:\Program Files\VideoLAN\VLC\locale\fr\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\fr\backup.exe" C:\Program Files\VideoLAN\VLC\locale\fr\

C:\Program Files\VideoLAN\VLC\locale\fr\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\fr\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\fr\LC_MESSAGES\

C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\14\BIN\1033\backup.exe

"C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\14\BIN\1033\backup.exe" C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\14\BIN\1033\

C:\Program Files\VideoLAN\VLC\locale\fur\update.exe

"C:\Program Files\VideoLAN\VLC\locale\fur\update.exe" C:\Program Files\VideoLAN\VLC\locale\fur\

C:\Program Files (x86)\Common Files\Services\backup.exe

"C:\Program Files (x86)\Common Files\Services\backup.exe" C:\Program Files (x86)\Common Files\Services\

C:\Program Files\VideoLAN\VLC\locale\fur\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\fur\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\fur\LC_MESSAGES\

C:\Program Files (x86)\Common Files\SpeechEngines\backup.exe

"C:\Program Files (x86)\Common Files\SpeechEngines\backup.exe" C:\Program Files (x86)\Common Files\SpeechEngines\

C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\backup.exe

"C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\backup.exe" C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\

C:\Program Files\VideoLAN\VLC\locale\fy\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\fy\backup.exe" C:\Program Files\VideoLAN\VLC\locale\fy\

C:\Program Files (x86)\Common Files\System\backup.exe

"C:\Program Files (x86)\Common Files\System\backup.exe" C:\Program Files (x86)\Common Files\System\

C:\Program Files\VideoLAN\VLC\locale\fy\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\fy\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\fy\LC_MESSAGES\

C:\Program Files\VideoLAN\VLC\locale\ga\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\ga\backup.exe" C:\Program Files\VideoLAN\VLC\locale\ga\

C:\Program Files (x86)\Common Files\System\ado\backup.exe

"C:\Program Files (x86)\Common Files\System\ado\backup.exe" C:\Program Files (x86)\Common Files\System\ado\

C:\Program Files\VideoLAN\VLC\locale\ga\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\ga\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\ga\LC_MESSAGES\

C:\Program Files (x86)\Common Files\System\ado\de-DE\backup.exe

"C:\Program Files (x86)\Common Files\System\ado\de-DE\backup.exe" C:\Program Files (x86)\Common Files\System\ado\de-DE\

C:\Program Files\VideoLAN\VLC\locale\gd\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\gd\backup.exe" C:\Program Files\VideoLAN\VLC\locale\gd\

C:\Program Files (x86)\Common Files\System\ado\en-US\backup.exe

"C:\Program Files (x86)\Common Files\System\ado\en-US\backup.exe" C:\Program Files (x86)\Common Files\System\ado\en-US\

C:\Program Files (x86)\Common Files\System\ado\es-ES\backup.exe

"C:\Program Files (x86)\Common Files\System\ado\es-ES\backup.exe" C:\Program Files (x86)\Common Files\System\ado\es-ES\

C:\Program Files\VideoLAN\VLC\locale\gd\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\gd\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\gd\LC_MESSAGES\

C:\Program Files\VideoLAN\VLC\locale\gl\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\gl\backup.exe" C:\Program Files\VideoLAN\VLC\locale\gl\

C:\Program Files (x86)\Common Files\System\ado\fr-FR\backup.exe

"C:\Program Files (x86)\Common Files\System\ado\fr-FR\backup.exe" C:\Program Files (x86)\Common Files\System\ado\fr-FR\

C:\Program Files (x86)\Common Files\System\ado\it-IT\backup.exe

"C:\Program Files (x86)\Common Files\System\ado\it-IT\backup.exe" C:\Program Files (x86)\Common Files\System\ado\it-IT\

C:\Program Files\VideoLAN\VLC\locale\gl\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\gl\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\gl\LC_MESSAGES\

C:\Program Files (x86)\Common Files\System\ado\ja-JP\backup.exe

"C:\Program Files (x86)\Common Files\System\ado\ja-JP\backup.exe" C:\Program Files (x86)\Common Files\System\ado\ja-JP\

C:\Program Files\VideoLAN\VLC\locale\gu\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\gu\backup.exe" C:\Program Files\VideoLAN\VLC\locale\gu\

C:\Program Files\VideoLAN\VLC\locale\gu\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\gu\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\gu\LC_MESSAGES\

C:\Program Files (x86)\Common Files\System\de-DE\backup.exe

"C:\Program Files (x86)\Common Files\System\de-DE\backup.exe" C:\Program Files (x86)\Common Files\System\de-DE\

C:\Program Files (x86)\Common Files\System\en-US\backup.exe

"C:\Program Files (x86)\Common Files\System\en-US\backup.exe" C:\Program Files (x86)\Common Files\System\en-US\

C:\Program Files\VideoLAN\VLC\locale\he\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\he\backup.exe" C:\Program Files\VideoLAN\VLC\locale\he\

C:\Program Files\VideoLAN\VLC\locale\he\LC_MESSAGES\update.exe

"C:\Program Files\VideoLAN\VLC\locale\he\LC_MESSAGES\update.exe" C:\Program Files\VideoLAN\VLC\locale\he\LC_MESSAGES\

C:\Program Files (x86)\Common Files\System\es-ES\backup.exe

"C:\Program Files (x86)\Common Files\System\es-ES\backup.exe" C:\Program Files (x86)\Common Files\System\es-ES\

C:\Program Files (x86)\Common Files\System\fr-FR\backup.exe

"C:\Program Files (x86)\Common Files\System\fr-FR\backup.exe" C:\Program Files (x86)\Common Files\System\fr-FR\

C:\Program Files\VideoLAN\VLC\locale\hi\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\hi\backup.exe" C:\Program Files\VideoLAN\VLC\locale\hi\

C:\Program Files\VideoLAN\VLC\locale\hi\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\hi\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\hi\LC_MESSAGES\

C:\Program Files (x86)\Common Files\System\it-IT\backup.exe

"C:\Program Files (x86)\Common Files\System\it-IT\backup.exe" C:\Program Files (x86)\Common Files\System\it-IT\

C:\Program Files\VideoLAN\VLC\locale\hr\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\hr\backup.exe" C:\Program Files\VideoLAN\VLC\locale\hr\

C:\Program Files (x86)\Common Files\System\ja-JP\backup.exe

"C:\Program Files (x86)\Common Files\System\ja-JP\backup.exe" C:\Program Files (x86)\Common Files\System\ja-JP\

C:\Program Files\VideoLAN\VLC\locale\hr\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\hr\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\hr\LC_MESSAGES\

C:\Program Files (x86)\Common Files\System\msadc\backup.exe

"C:\Program Files (x86)\Common Files\System\msadc\backup.exe" C:\Program Files (x86)\Common Files\System\msadc\

C:\Program Files\VideoLAN\VLC\locale\hu\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\hu\backup.exe" C:\Program Files\VideoLAN\VLC\locale\hu\

C:\Program Files (x86)\Common Files\System\msadc\de-DE\backup.exe

"C:\Program Files (x86)\Common Files\System\msadc\de-DE\backup.exe" C:\Program Files (x86)\Common Files\System\msadc\de-DE\

C:\Program Files\VideoLAN\VLC\locale\hu\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\hu\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\hu\LC_MESSAGES\

C:\Program Files (x86)\Common Files\System\msadc\en-US\backup.exe

"C:\Program Files (x86)\Common Files\System\msadc\en-US\backup.exe" C:\Program Files (x86)\Common Files\System\msadc\en-US\

C:\Program Files (x86)\Common Files\System\msadc\es-ES\backup.exe

"C:\Program Files (x86)\Common Files\System\msadc\es-ES\backup.exe" C:\Program Files (x86)\Common Files\System\msadc\es-ES\

C:\Program Files\VideoLAN\VLC\locale\hy\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\hy\backup.exe" C:\Program Files\VideoLAN\VLC\locale\hy\

C:\Program Files (x86)\Common Files\System\msadc\fr-FR\backup.exe

"C:\Program Files (x86)\Common Files\System\msadc\fr-FR\backup.exe" C:\Program Files (x86)\Common Files\System\msadc\fr-FR\

C:\Program Files\VideoLAN\VLC\locale\hy\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\hy\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\hy\LC_MESSAGES\

C:\Program Files (x86)\Common Files\System\msadc\it-IT\backup.exe

"C:\Program Files (x86)\Common Files\System\msadc\it-IT\backup.exe" C:\Program Files (x86)\Common Files\System\msadc\it-IT\

C:\Program Files\VideoLAN\VLC\locale\id\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\id\backup.exe" C:\Program Files\VideoLAN\VLC\locale\id\

C:\Program Files\VideoLAN\VLC\locale\id\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\id\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\id\LC_MESSAGES\

C:\Program Files (x86)\Common Files\System\msadc\ja-JP\backup.exe

"C:\Program Files (x86)\Common Files\System\msadc\ja-JP\backup.exe" C:\Program Files (x86)\Common Files\System\msadc\ja-JP\

C:\Program Files (x86)\Common Files\System\MSMAPI\backup.exe

"C:\Program Files (x86)\Common Files\System\MSMAPI\backup.exe" C:\Program Files (x86)\Common Files\System\MSMAPI\

C:\Program Files\VideoLAN\VLC\locale\ie\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\ie\backup.exe" C:\Program Files\VideoLAN\VLC\locale\ie\

C:\Program Files (x86)\Common Files\System\MSMAPI\1033\backup.exe

"C:\Program Files (x86)\Common Files\System\MSMAPI\1033\backup.exe" C:\Program Files (x86)\Common Files\System\MSMAPI\1033\

C:\Program Files\VideoLAN\VLC\locale\ie\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\ie\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\ie\LC_MESSAGES\

C:\Program Files (x86)\Common Files\System\Ole DB\backup.exe

"C:\Program Files (x86)\Common Files\System\Ole DB\backup.exe" C:\Program Files (x86)\Common Files\System\Ole DB\

C:\Program Files\VideoLAN\VLC\locale\is\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\is\backup.exe" C:\Program Files\VideoLAN\VLC\locale\is\

C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\backup.exe

"C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\backup.exe" C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\

C:\Program Files\VideoLAN\VLC\locale\is\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\is\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\is\LC_MESSAGES\

C:\Program Files (x86)\Common Files\System\Ole DB\en-US\backup.exe

"C:\Program Files (x86)\Common Files\System\Ole DB\en-US\backup.exe" C:\Program Files (x86)\Common Files\System\Ole DB\en-US\

C:\Program Files\VideoLAN\VLC\locale\it\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\it\backup.exe" C:\Program Files\VideoLAN\VLC\locale\it\

C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\backup.exe

"C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\backup.exe" C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\

C:\Program Files\VideoLAN\VLC\locale\it\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\it\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\it\LC_MESSAGES\

C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\backup.exe

"C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\backup.exe" C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\

C:\Program Files\VideoLAN\VLC\locale\ja\System Restore.exe

"C:\Program Files\VideoLAN\VLC\locale\ja\System Restore.exe" C:\Program Files\VideoLAN\VLC\locale\ja\

C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\data.exe

"C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\data.exe" C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\

C:\Program Files\VideoLAN\VLC\locale\ja\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\ja\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\ja\LC_MESSAGES\

C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\update.exe

"C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\update.exe" C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\

C:\Program Files\VideoLAN\VLC\locale\ka\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\ka\backup.exe" C:\Program Files\VideoLAN\VLC\locale\ka\

C:\Users\backup.exe

C:\Users\backup.exe C:\Users\

C:\Program Files (x86)\Google\backup.exe

"C:\Program Files (x86)\Google\backup.exe" C:\Program Files (x86)\Google\

C:\Program Files\VideoLAN\VLC\locale\ka\LC_MESSAGES\update.exe

"C:\Program Files\VideoLAN\VLC\locale\ka\LC_MESSAGES\update.exe" C:\Program Files\VideoLAN\VLC\locale\ka\LC_MESSAGES\

C:\Users\Admin\update.exe

C:\Users\Admin\update.exe C:\Users\Admin\

C:\Program Files (x86)\Google\CrashReports\backup.exe

"C:\Program Files (x86)\Google\CrashReports\backup.exe" C:\Program Files (x86)\Google\CrashReports\

C:\Program Files\VideoLAN\VLC\locale\kab\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\kab\backup.exe" C:\Program Files\VideoLAN\VLC\locale\kab\

C:\Users\Admin\Contacts\backup.exe

C:\Users\Admin\Contacts\backup.exe C:\Users\Admin\Contacts\

C:\Program Files (x86)\Google\Temp\backup.exe

"C:\Program Files (x86)\Google\Temp\backup.exe" C:\Program Files (x86)\Google\Temp\

C:\Program Files\VideoLAN\VLC\locale\kab\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\kab\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\kab\LC_MESSAGES\

C:\Users\Admin\Desktop\backup.exe

C:\Users\Admin\Desktop\backup.exe C:\Users\Admin\Desktop\

C:\Program Files (x86)\Google\Update\backup.exe

"C:\Program Files (x86)\Google\Update\backup.exe" C:\Program Files (x86)\Google\Update\

C:\Program Files\VideoLAN\VLC\locale\kk\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\kk\backup.exe" C:\Program Files\VideoLAN\VLC\locale\kk\

C:\Program Files (x86)\Google\Update\1.3.36.151\backup.exe

"C:\Program Files (x86)\Google\Update\1.3.36.151\backup.exe" C:\Program Files (x86)\Google\Update\1.3.36.151\

C:\Users\Admin\Documents\backup.exe

C:\Users\Admin\Documents\backup.exe C:\Users\Admin\Documents\

C:\Program Files\VideoLAN\VLC\locale\kk\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\kk\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\kk\LC_MESSAGES\

C:\Users\Admin\Downloads\backup.exe

C:\Users\Admin\Downloads\backup.exe C:\Users\Admin\Downloads\

C:\Program Files (x86)\Google\Update\Download\backup.exe

"C:\Program Files (x86)\Google\Update\Download\backup.exe" C:\Program Files (x86)\Google\Update\Download\

C:\Users\Admin\Favorites\backup.exe

C:\Users\Admin\Favorites\backup.exe C:\Users\Admin\Favorites\

C:\Program Files\VideoLAN\VLC\locale\km\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\km\backup.exe" C:\Program Files\VideoLAN\VLC\locale\km\

C:\Users\Admin\Links\backup.exe

C:\Users\Admin\Links\backup.exe C:\Users\Admin\Links\

C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\backup.exe

"C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\backup.exe" C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\

C:\Users\Admin\Music\backup.exe

C:\Users\Admin\Music\backup.exe C:\Users\Admin\Music\

C:\Program Files\VideoLAN\VLC\locale\km\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\km\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\km\LC_MESSAGES\

C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\106.0.5249.119\backup.exe

"C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\106.0.5249.119\backup.exe" C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\106.0.5249.119\

C:\Users\Admin\Pictures\data.exe

C:\Users\Admin\Pictures\data.exe C:\Users\Admin\Pictures\

C:\Program Files (x86)\Google\Update\Install\backup.exe

"C:\Program Files (x86)\Google\Update\Install\backup.exe" C:\Program Files (x86)\Google\Update\Install\

C:\Program Files\VideoLAN\VLC\locale\kn\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\kn\backup.exe" C:\Program Files\VideoLAN\VLC\locale\kn\

C:\Users\Admin\Saved Games\System Restore.exe

"C:\Users\Admin\Saved Games\System Restore.exe" C:\Users\Admin\Saved Games\

C:\Program Files\VideoLAN\VLC\locale\kn\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\kn\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\kn\LC_MESSAGES\

C:\Program Files (x86)\Google\Update\Install\{A0DB34BA-83CF-47F6-9C74-18E331645027}\backup.exe

"C:\Program Files (x86)\Google\Update\Install\{A0DB34BA-83CF-47F6-9C74-18E331645027}\backup.exe" C:\Program Files (x86)\Google\Update\Install\{A0DB34BA-83CF-47F6-9C74-18E331645027}\

C:\Users\Admin\Searches\backup.exe

C:\Users\Admin\Searches\backup.exe C:\Users\Admin\Searches\

C:\Program Files\VideoLAN\VLC\locale\ko\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\ko\backup.exe" C:\Program Files\VideoLAN\VLC\locale\ko\

C:\Program Files (x86)\Google\Update\Offline\backup.exe

"C:\Program Files (x86)\Google\Update\Offline\backup.exe" C:\Program Files (x86)\Google\Update\Offline\

C:\Program Files\VideoLAN\VLC\locale\ko\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\ko\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\ko\LC_MESSAGES\

C:\Users\Admin\Videos\backup.exe

C:\Users\Admin\Videos\backup.exe C:\Users\Admin\Videos\

C:\Program Files\VideoLAN\VLC\locale\ks_IN\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\ks_IN\backup.exe" C:\Program Files\VideoLAN\VLC\locale\ks_IN\

C:\Program Files (x86)\Internet Explorer\backup.exe

"C:\Program Files (x86)\Internet Explorer\backup.exe" C:\Program Files (x86)\Internet Explorer\

C:\Program Files\VideoLAN\VLC\locale\ks_IN\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\ks_IN\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\ks_IN\LC_MESSAGES\

C:\Users\Public\backup.exe

C:\Users\Public\backup.exe C:\Users\Public\

C:\Program Files (x86)\Internet Explorer\de-DE\backup.exe

"C:\Program Files (x86)\Internet Explorer\de-DE\backup.exe" C:\Program Files (x86)\Internet Explorer\de-DE\

C:\Program Files\VideoLAN\VLC\locale\ku_IQ\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\ku_IQ\backup.exe" C:\Program Files\VideoLAN\VLC\locale\ku_IQ\

C:\Users\Public\Documents\update.exe

C:\Users\Public\Documents\update.exe C:\Users\Public\Documents\

C:\Program Files (x86)\Internet Explorer\en-US\backup.exe

"C:\Program Files (x86)\Internet Explorer\en-US\backup.exe" C:\Program Files (x86)\Internet Explorer\en-US\

C:\Program Files\VideoLAN\VLC\locale\ku_IQ\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\ku_IQ\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\ku_IQ\LC_MESSAGES\

C:\Users\Public\Downloads\backup.exe

C:\Users\Public\Downloads\backup.exe C:\Users\Public\Downloads\

C:\Program Files (x86)\Internet Explorer\es-ES\backup.exe

"C:\Program Files (x86)\Internet Explorer\es-ES\backup.exe" C:\Program Files (x86)\Internet Explorer\es-ES\

C:\Program Files\VideoLAN\VLC\locale\ky\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\ky\backup.exe" C:\Program Files\VideoLAN\VLC\locale\ky\

C:\Program Files (x86)\Internet Explorer\fr-FR\backup.exe

"C:\Program Files (x86)\Internet Explorer\fr-FR\backup.exe" C:\Program Files (x86)\Internet Explorer\fr-FR\

C:\Users\Public\Music\backup.exe

C:\Users\Public\Music\backup.exe C:\Users\Public\Music\

C:\Program Files\VideoLAN\VLC\locale\ky\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\ky\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\ky\LC_MESSAGES\

C:\Program Files (x86)\Internet Explorer\it-IT\backup.exe

"C:\Program Files (x86)\Internet Explorer\it-IT\backup.exe" C:\Program Files (x86)\Internet Explorer\it-IT\

C:\Program Files\VideoLAN\VLC\locale\lg\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\lg\backup.exe" C:\Program Files\VideoLAN\VLC\locale\lg\

C:\Users\Public\Music\Sample Music\System Restore.exe

"C:\Users\Public\Music\Sample Music\System Restore.exe" C:\Users\Public\Music\Sample Music\

C:\Program Files (x86)\Internet Explorer\ja-JP\backup.exe

"C:\Program Files (x86)\Internet Explorer\ja-JP\backup.exe" C:\Program Files (x86)\Internet Explorer\ja-JP\

C:\Program Files\VideoLAN\VLC\locale\lg\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\lg\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\lg\LC_MESSAGES\

C:\Users\Public\Pictures\backup.exe

C:\Users\Public\Pictures\backup.exe C:\Users\Public\Pictures\

C:\Program Files (x86)\Internet Explorer\SIGNUP\backup.exe

"C:\Program Files (x86)\Internet Explorer\SIGNUP\backup.exe" C:\Program Files (x86)\Internet Explorer\SIGNUP\

C:\Program Files\VideoLAN\VLC\locale\lo\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\lo\backup.exe" C:\Program Files\VideoLAN\VLC\locale\lo\

C:\Users\Public\Pictures\Sample Pictures\backup.exe

"C:\Users\Public\Pictures\Sample Pictures\backup.exe" C:\Users\Public\Pictures\Sample Pictures\

C:\Program Files\VideoLAN\VLC\locale\lo\LC_MESSAGES\System Restore.exe

"C:\Program Files\VideoLAN\VLC\locale\lo\LC_MESSAGES\System Restore.exe" C:\Program Files\VideoLAN\VLC\locale\lo\LC_MESSAGES\

C:\Program Files (x86)\Microsoft Analysis Services\backup.exe

"C:\Program Files (x86)\Microsoft Analysis Services\backup.exe" C:\Program Files (x86)\Microsoft Analysis Services\

C:\Users\Public\Recorded TV\backup.exe

"C:\Users\Public\Recorded TV\backup.exe" C:\Users\Public\Recorded TV\

C:\Program Files\VideoLAN\VLC\locale\lt\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\lt\backup.exe" C:\Program Files\VideoLAN\VLC\locale\lt\

C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\backup.exe

"C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\backup.exe" C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\

C:\Users\Public\Recorded TV\Sample Media\backup.exe

"C:\Users\Public\Recorded TV\Sample Media\backup.exe" C:\Users\Public\Recorded TV\Sample Media\

C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\System Restore.exe

"C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\System Restore.exe" C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\

C:\Users\Public\Videos\backup.exe

C:\Users\Public\Videos\backup.exe C:\Users\Public\Videos\

C:\Program Files\VideoLAN\VLC\locale\lt\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\lt\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\lt\LC_MESSAGES\

C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\backup.exe

"C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\backup.exe" C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\

C:\Users\Public\Videos\Sample Videos\backup.exe

"C:\Users\Public\Videos\Sample Videos\backup.exe" C:\Users\Public\Videos\Sample Videos\

C:\Program Files\VideoLAN\VLC\locale\lv\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\lv\backup.exe" C:\Program Files\VideoLAN\VLC\locale\lv\

C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Resources\backup.exe

"C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Resources\backup.exe" C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Resources\

C:\Windows\system32\DllHost.exe

C:\Windows\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

C:\Windows\backup.exe

C:\Windows\backup.exe C:\Windows\

C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\System Restore.exe

"C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\System Restore.exe" C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\

C:\Program Files\VideoLAN\VLC\locale\lv\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\lv\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\lv\LC_MESSAGES\

C:\Windows\addins\backup.exe

C:\Windows\addins\backup.exe C:\Windows\addins\

C:\Program Files (x86)\Microsoft Office\backup.exe

"C:\Program Files (x86)\Microsoft Office\backup.exe" C:\Program Files (x86)\Microsoft Office\

C:\Program Files\VideoLAN\VLC\locale\mai\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\mai\backup.exe" C:\Program Files\VideoLAN\VLC\locale\mai\

C:\Program Files (x86)\Microsoft Office\CLIPART\backup.exe

"C:\Program Files (x86)\Microsoft Office\CLIPART\backup.exe" C:\Program Files (x86)\Microsoft Office\CLIPART\

C:\Windows\AppCompat\backup.exe

C:\Windows\AppCompat\backup.exe C:\Windows\AppCompat\

C:\Program Files\VideoLAN\VLC\locale\mai\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\mai\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\mai\LC_MESSAGES\

C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\backup.exe

"C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\backup.exe" C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\

C:\Windows\AppPatch\backup.exe

C:\Windows\AppPatch\backup.exe C:\Windows\AppPatch\

C:\Program Files\VideoLAN\VLC\locale\mk\data.exe

"C:\Program Files\VideoLAN\VLC\locale\mk\data.exe" C:\Program Files\VideoLAN\VLC\locale\mk\

C:\Windows\AppPatch\AppPatch64\backup.exe

C:\Windows\AppPatch\AppPatch64\backup.exe C:\Windows\AppPatch\AppPatch64\

C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\backup.exe

"C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\backup.exe" C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\

C:\Windows\AppPatch\Custom\backup.exe

C:\Windows\AppPatch\Custom\backup.exe C:\Windows\AppPatch\Custom\

C:\Program Files\VideoLAN\VLC\locale\mk\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\mk\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\mk\LC_MESSAGES\

C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\backup.exe

"C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\backup.exe" C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\

C:\Windows\AppPatch\Custom\Custom64\backup.exe

C:\Windows\AppPatch\Custom\Custom64\backup.exe C:\Windows\AppPatch\Custom\Custom64\

C:\Windows\AppPatch\de-DE\backup.exe

C:\Windows\AppPatch\de-DE\backup.exe C:\Windows\AppPatch\de-DE\

C:\Program Files\VideoLAN\VLC\locale\ml\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\ml\backup.exe" C:\Program Files\VideoLAN\VLC\locale\ml\

C:\Program Files (x86)\Microsoft Office\Document Themes 14\backup.exe

"C:\Program Files (x86)\Microsoft Office\Document Themes 14\backup.exe" C:\Program Files (x86)\Microsoft Office\Document Themes 14\

C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\backup.exe

"C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\backup.exe" C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\

C:\Program Files\VideoLAN\VLC\locale\ml\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\ml\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\ml\LC_MESSAGES\

C:\Windows\AppPatch\en-US\System Restore.exe

"C:\Windows\AppPatch\en-US\System Restore.exe" C:\Windows\AppPatch\en-US\

C:\Program Files\VideoLAN\VLC\locale\mn\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\mn\backup.exe" C:\Program Files\VideoLAN\VLC\locale\mn\

C:\Program Files\VideoLAN\VLC\locale\mn\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\mn\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\mn\LC_MESSAGES\

C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\backup.exe

"C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\backup.exe" C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\

C:\Windows\AppPatch\es-ES\backup.exe

C:\Windows\AppPatch\es-ES\backup.exe C:\Windows\AppPatch\es-ES\

C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\backup.exe

"C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\backup.exe" C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\

C:\Program Files\VideoLAN\VLC\locale\mr\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\mr\backup.exe" C:\Program Files\VideoLAN\VLC\locale\mr\

C:\Windows\AppPatch\fr-FR\backup.exe

C:\Windows\AppPatch\fr-FR\backup.exe C:\Windows\AppPatch\fr-FR\

C:\Program Files (x86)\Microsoft Office\MEDIA\backup.exe

"C:\Program Files (x86)\Microsoft Office\MEDIA\backup.exe" C:\Program Files (x86)\Microsoft Office\MEDIA\

C:\Windows\AppPatch\it-IT\backup.exe

C:\Windows\AppPatch\it-IT\backup.exe C:\Windows\AppPatch\it-IT\

C:\Program Files\VideoLAN\VLC\locale\mr\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\mr\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\mr\LC_MESSAGES\

C:\Windows\AppPatch\ja-JP\backup.exe

C:\Windows\AppPatch\ja-JP\backup.exe C:\Windows\AppPatch\ja-JP\

C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\backup.exe

"C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\backup.exe" C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\

C:\Program Files\VideoLAN\VLC\locale\ms\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\ms\backup.exe" C:\Program Files\VideoLAN\VLC\locale\ms\

C:\Windows\assembly\System Restore.exe

"C:\Windows\assembly\System Restore.exe" C:\Windows\assembly\

C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\1033\backup.exe

"C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\1033\backup.exe" C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\1033\

C:\Program Files\VideoLAN\VLC\locale\ms\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\ms\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\ms\LC_MESSAGES\

C:\Windows\assembly\GAC\backup.exe

C:\Windows\assembly\GAC\backup.exe C:\Windows\assembly\GAC\

C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\backup.exe

"C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\backup.exe" C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\

C:\Windows\assembly\GAC\ADODB\backup.exe

C:\Windows\assembly\GAC\ADODB\backup.exe C:\Windows\assembly\GAC\ADODB\

C:\Program Files\VideoLAN\VLC\locale\my\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\my\backup.exe" C:\Program Files\VideoLAN\VLC\locale\my\

C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\1033\backup.exe

"C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\1033\backup.exe" C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\1033\

C:\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\backup.exe

C:\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\backup.exe C:\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\

C:\Program Files\VideoLAN\VLC\locale\my\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\my\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\my\LC_MESSAGES\

C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\backup.exe

"C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\backup.exe" C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\

C:\Windows\assembly\GAC\Extensibility\backup.exe

C:\Windows\assembly\GAC\Extensibility\backup.exe C:\Windows\assembly\GAC\Extensibility\

C:\Program Files\VideoLAN\VLC\locale\nb\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\nb\backup.exe" C:\Program Files\VideoLAN\VLC\locale\nb\

C:\Windows\assembly\GAC\Extensibility\7.0.3300.0__b03f5f7f11d50a3a\backup.exe

C:\Windows\assembly\GAC\Extensibility\7.0.3300.0__b03f5f7f11d50a3a\backup.exe C:\Windows\assembly\GAC\Extensibility\7.0.3300.0__b03f5f7f11d50a3a\

C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\backup.exe

"C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\backup.exe" C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\

C:\Program Files\VideoLAN\VLC\locale\nb\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\nb\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\nb\LC_MESSAGES\

C:\Windows\assembly\GAC\Microsoft.Ink\backup.exe

C:\Windows\assembly\GAC\Microsoft.Ink\backup.exe C:\Windows\assembly\GAC\Microsoft.Ink\

C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\backup.exe

"C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\backup.exe" C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\

C:\Program Files\VideoLAN\VLC\locale\ne\update.exe

"C:\Program Files\VideoLAN\VLC\locale\ne\update.exe" C:\Program Files\VideoLAN\VLC\locale\ne\

C:\Windows\assembly\GAC\Microsoft.Ink\1.0.2201.0__31bf3856ad364e35\backup.exe

C:\Windows\assembly\GAC\Microsoft.Ink\1.0.2201.0__31bf3856ad364e35\backup.exe C:\Windows\assembly\GAC\Microsoft.Ink\1.0.2201.0__31bf3856ad364e35\

C:\Program Files (x86)\Microsoft Office\Office14\backup.exe

"C:\Program Files (x86)\Microsoft Office\Office14\backup.exe" C:\Program Files (x86)\Microsoft Office\Office14\

C:\Windows\assembly\GAC\Microsoft.Ink\1.7.2600.2180__31bf3856ad364e35\data.exe

C:\Windows\assembly\GAC\Microsoft.Ink\1.7.2600.2180__31bf3856ad364e35\data.exe C:\Windows\assembly\GAC\Microsoft.Ink\1.7.2600.2180__31bf3856ad364e35\

C:\Program Files\VideoLAN\VLC\locale\ne\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\ne\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\ne\LC_MESSAGES\

C:\Program Files (x86)\Microsoft Office\Office14\1033\backup.exe

"C:\Program Files (x86)\Microsoft Office\Office14\1033\backup.exe" C:\Program Files (x86)\Microsoft Office\Office14\1033\

C:\Windows\assembly\GAC\Microsoft.mshtml\backup.exe

C:\Windows\assembly\GAC\Microsoft.mshtml\backup.exe C:\Windows\assembly\GAC\Microsoft.mshtml\

C:\Program Files (x86)\Microsoft Office\Office14\1033\Bibliography\backup.exe

"C:\Program Files (x86)\Microsoft Office\Office14\1033\Bibliography\backup.exe" C:\Program Files (x86)\Microsoft Office\Office14\1033\Bibliography\

C:\Program Files\VideoLAN\VLC\locale\nl\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\nl\backup.exe" C:\Program Files\VideoLAN\VLC\locale\nl\

C:\Windows\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\backup.exe

C:\Windows\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\backup.exe C:\Windows\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\

C:\Program Files (x86)\Microsoft Office\Office14\1033\DataServices\backup.exe

"C:\Program Files (x86)\Microsoft Office\Office14\1033\DataServices\backup.exe" C:\Program Files (x86)\Microsoft Office\Office14\1033\DataServices\

C:\Windows\assembly\GAC\Microsoft.StdFormat\backup.exe

C:\Windows\assembly\GAC\Microsoft.StdFormat\backup.exe C:\Windows\assembly\GAC\Microsoft.StdFormat\

C:\Program Files\VideoLAN\VLC\locale\nl\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\nl\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\nl\LC_MESSAGES\

C:\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\backup.exe

C:\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\backup.exe C:\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\

C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\backup.exe

"C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\backup.exe" C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\

C:\Windows\assembly\GAC\mscomctl\backup.exe

C:\Windows\assembly\GAC\mscomctl\backup.exe C:\Windows\assembly\GAC\mscomctl\

C:\Program Files\VideoLAN\VLC\locale\nn\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\nn\backup.exe" C:\Program Files\VideoLAN\VLC\locale\nn\

C:\Windows\assembly\GAC\mscomctl\10.0.4504.0__31bf3856ad364e35\update.exe

C:\Windows\assembly\GAC\mscomctl\10.0.4504.0__31bf3856ad364e35\update.exe C:\Windows\assembly\GAC\mscomctl\10.0.4504.0__31bf3856ad364e35\

C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\update.exe

"C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\update.exe" C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\

C:\Windows\assembly\GAC\MSDATASRC\backup.exe

C:\Windows\assembly\GAC\MSDATASRC\backup.exe C:\Windows\assembly\GAC\MSDATASRC\

C:\Program Files\VideoLAN\VLC\locale\nn\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\nn\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\nn\LC_MESSAGES\

C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Americana\backup.exe

"C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Americana\backup.exe" C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Americana\

C:\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\backup.exe

C:\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\backup.exe C:\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\

C:\Program Files\VideoLAN\VLC\locale\oc\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\oc\backup.exe" C:\Program Files\VideoLAN\VLC\locale\oc\

C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BabyBlue\backup.exe

"C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BabyBlue\backup.exe" C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BabyBlue\

C:\Program Files\VideoLAN\VLC\locale\oc\LC_MESSAGES\update.exe

"C:\Program Files\VideoLAN\VLC\locale\oc\LC_MESSAGES\update.exe" C:\Program Files\VideoLAN\VLC\locale\oc\LC_MESSAGES\

C:\Windows\assembly\GAC\stdole\backup.exe

C:\Windows\assembly\GAC\stdole\backup.exe C:\Windows\assembly\GAC\stdole\

C:\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\backup.exe

C:\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\backup.exe C:\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\

C:\Program Files\VideoLAN\VLC\locale\or_IN\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\or_IN\backup.exe" C:\Program Files\VideoLAN\VLC\locale\or_IN\

C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Biscay\backup.exe

"C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Biscay\backup.exe" C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Biscay\

C:\Windows\assembly\GAC_32\backup.exe

C:\Windows\assembly\GAC_32\backup.exe C:\Windows\assembly\GAC_32\

C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightOrange\backup.exe

"C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightOrange\backup.exe" C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightOrange\

C:\Program Files\VideoLAN\VLC\locale\or_IN\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\or_IN\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\or_IN\LC_MESSAGES\

C:\Windows\assembly\GAC_32\AuditPolicyGPManagedStubs.Interop\backup.exe

C:\Windows\assembly\GAC_32\AuditPolicyGPManagedStubs.Interop\backup.exe C:\Windows\assembly\GAC_32\AuditPolicyGPManagedStubs.Interop\

C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightYellow\backup.exe

"C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightYellow\backup.exe" C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightYellow\

C:\Windows\assembly\GAC_32\AuditPolicyGPManagedStubs.Interop\6.1.0.0__31bf3856ad364e35\update.exe

C:\Windows\assembly\GAC_32\AuditPolicyGPManagedStubs.Interop\6.1.0.0__31bf3856ad364e35\update.exe C:\Windows\assembly\GAC_32\AuditPolicyGPManagedStubs.Interop\6.1.0.0__31bf3856ad364e35\

C:\Program Files\VideoLAN\VLC\locale\pa\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\pa\backup.exe" C:\Program Files\VideoLAN\VLC\locale\pa\

C:\Windows\assembly\GAC_32\BDATunePIA\backup.exe

C:\Windows\assembly\GAC_32\BDATunePIA\backup.exe C:\Windows\assembly\GAC_32\BDATunePIA\

C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Desert\backup.exe

"C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Desert\backup.exe" C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Desert\

C:\Windows\assembly\GAC_32\BDATunePIA\6.1.0.0__31bf3856ad364e35\backup.exe

C:\Windows\assembly\GAC_32\BDATunePIA\6.1.0.0__31bf3856ad364e35\backup.exe C:\Windows\assembly\GAC_32\BDATunePIA\6.1.0.0__31bf3856ad364e35\

C:\Program Files\VideoLAN\VLC\locale\pa\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\pa\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\pa\LC_MESSAGES\

C:\Windows\assembly\GAC_32\CustomMarshalers\backup.exe

C:\Windows\assembly\GAC_32\CustomMarshalers\backup.exe C:\Windows\assembly\GAC_32\CustomMarshalers\

C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\GrayCheck\System Restore.exe

"C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\GrayCheck\System Restore.exe" C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\GrayCheck\

C:\Program Files\VideoLAN\VLC\locale\pl\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\pl\backup.exe" C:\Program Files\VideoLAN\VLC\locale\pl\

C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\backup.exe

C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\backup.exe C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\

C:\Program Files\VideoLAN\VLC\locale\pl\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\pl\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\pl\LC_MESSAGES\

C:\Windows\assembly\GAC_32\ehexthost32\backup.exe

C:\Windows\assembly\GAC_32\ehexthost32\backup.exe C:\Windows\assembly\GAC_32\ehexthost32\

C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Lime\backup.exe

"C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Lime\backup.exe" C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Lime\

C:\Program Files\VideoLAN\VLC\locale\ps\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\ps\backup.exe" C:\Program Files\VideoLAN\VLC\locale\ps\

C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Oasis\backup.exe

"C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Oasis\backup.exe" C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Oasis\

C:\Windows\assembly\GAC_32\ehexthost32\6.1.0.0__31bf3856ad364e35\backup.exe

C:\Windows\assembly\GAC_32\ehexthost32\6.1.0.0__31bf3856ad364e35\backup.exe C:\Windows\assembly\GAC_32\ehexthost32\6.1.0.0__31bf3856ad364e35\

C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Slate\backup.exe

"C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Slate\backup.exe" C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Slate\

Network

N/A

Files

\Users\Admin\AppData\Local\Temp\537978017\backup.exe

MD5 f7aa7857bc365bbd61b237b6d65ebbe8
SHA1 80629f16c110227c978ebded7cbffef46c9989fd
SHA256 468638040618afe5c33e9cf2a07862041c62dc84a937a106c9fc7389f2344e4e
SHA512 70b9b279196bd24a7d59177fac0d6bd5e887c3bfae46c1d99e5d3104bcf6bfe52f449657a012f14fc5e5ffaf0c6d9cbfee8f3e986feacc771a17740772ff60ec

\Users\Admin\AppData\Local\Temp\scoped_dir816_1791373456\CRX_INSTALL\backup.exe

MD5 79388ffd61543deb2fe61c3c2b28fac0
SHA1 5ebe567bd3660d7f309497b09136f9c62c748d99
SHA256 af4ab27c043744081391b27882c7d36d7c8aca006fb8c4ec207ebb3f5df62acd
SHA512 01ceb41eabd005e31aba98ebeac6680d3b0738097ad9162b47afe53780001161fc3b5c7e2ed0f07f2f35a0f73fbb489f7d27c89717b6a1aba0753a98726744dd

C:\Users\Admin\AppData\Local\Temp\temp.zip

MD5 76cdb2bad9582d23c1f6f4d868218d6c
SHA1 b04f3ee8f5e43fa3b162981b50bb72fe1acabb33
SHA256 8739c76e681f900923b900c9df0ef75cf421d39cabb54650c4b9ad19b6a76d85
SHA512 5e2f959f36b66df0580a94f384c5fc1ceeec4b2a3925f062d7b68f21758b86581ac2adcfdde73a171a28496e758ef1b23ca4951c05455cdae9357cc3b5a5825f

C:\Users\Admin\AppData\Local\Temp\temp.zip

MD5 a8847336d7ac4e9930274080a43fc0e2
SHA1 ecfeb2231c27ca19caba4efff6b7acfb25810d26
SHA256 e13e37ad4ac09e3725f96dfc0d507524623f137d70495d8c822e565a4b27f820
SHA512 34481b66cdd77f38d11c86cc60699c4b59fcd6def843b81cf20246147c3d25d8c9a9c6a49fd3ff4dc7e0e3458647058e998a86d2ed324c05a3ed1b3587ccf816

C:\backup.exe

MD5 5a2a0f0090acf818c7371745f4abdc9b
SHA1 64e0d0ded13ec53fa05e902dc8ae2a59256b7c6c
SHA256 ca637bf17005db3e21b232b4b792b93358e6f8b1af38a6e5095e5cca69086283
SHA512 3c63f16f8bf996e8335efdb82515131b435d40be8c4589ff2d42088ba9951d1101c3ea48228098c8c9660fd6acecdbeab363f10133723e537f9e71b772ab1f01

\PerfLogs\backup.exe

MD5 8e1d7b1134636cf1bd696d56ade0ce39
SHA1 07b541f3196f6321dfcd4aed47f23991a0490390
SHA256 1d904009ac2890d87ac2e2a98f8e0abacee3b97a6b961e54ee662d615372a99c
SHA512 f0397c04b00187a1ef7505cc351c0130191f2f6261f8a47b5274e0f67f89676f6774c855843fbbbc391ac50fca880e48c91aa58e1ab3d45adb0bcd4fc207a731

\PerfLogs\Admin\update.exe

MD5 1dea7815623948e9323d83945fb8179f
SHA1 845f88f892f92b4e3d3d1ff0081605eee4637237
SHA256 1a8f9ee5e46fd31d2966cafdff99f0edd560bba760753038642709ec3454c6f3
SHA512 f2ef6b46135de8073af5d3a7b2dbb2090d25196705ffa10483ff066acd73b9c28077ffecf898d2b9179d6640eec3b543e3489a72a7c89c33fa436e615c34e02e

\Program Files\7-Zip\Lang\backup.exe

MD5 b587c46fe9eeb870c9153bf10105228d
SHA1 d2131ce39e1638b35423b21ef5b9d3b5bee8bcd6
SHA256 8ad532fc696fd80776f96d058bcd5a3fb52082f7d21efd7d9e4ffb509234d9b3
SHA512 7418f6405b46055db819ff0aea2089ff58e882e18c651a0c3a6df5b5a0625d3ad697987b6f105a3db49503d28fe7b91e873950b42cba9c564ab5e16b31998e05

memory/1892-2586-0x00000000003B0000-0x00000000003C0000-memory.dmp

memory/2148-3021-0x0000000000260000-0x0000000000270000-memory.dmp

memory/3060-3104-0x00000000001C0000-0x00000000001D0000-memory.dmp

memory/448-3229-0x0000000000220000-0x0000000000230000-memory.dmp

memory/2940-3284-0x00000000001B0000-0x00000000001C0000-memory.dmp

memory/2940-3285-0x00000000001B0000-0x00000000001C0000-memory.dmp

memory/1736-3641-0x0000000077660000-0x000000007775A000-memory.dmp

memory/1736-4863-0x0000000077660000-0x000000007775A000-memory.dmp

memory/1736-4867-0x0000000002B10000-0x0000000002C20000-memory.dmp

memory/1736-4862-0x0000000077760000-0x000000007787F000-memory.dmp

memory/1856-5098-0x0000000000220000-0x0000000000230000-memory.dmp

memory/1856-5099-0x0000000000220000-0x0000000000230000-memory.dmp

memory/748-5730-0x0000000000230000-0x0000000000240000-memory.dmp

memory/748-5729-0x0000000000230000-0x0000000000240000-memory.dmp

memory/2752-6082-0x00000000002D0000-0x00000000002E0000-memory.dmp

memory/1664-6226-0x0000000000220000-0x0000000000230000-memory.dmp

memory/1664-6228-0x0000000000220000-0x0000000000230000-memory.dmp

memory/1736-6369-0x0000000077660000-0x000000007775A000-memory.dmp

memory/1736-6368-0x0000000077760000-0x000000007787F000-memory.dmp

memory/2088-6471-0x0000000000230000-0x0000000000240000-memory.dmp

memory/2088-6472-0x0000000000230000-0x0000000000240000-memory.dmp

memory/2340-6609-0x0000000000220000-0x0000000000230000-memory.dmp

memory/2340-6608-0x0000000000220000-0x0000000000230000-memory.dmp

memory/1176-6901-0x0000000000230000-0x0000000000240000-memory.dmp

memory/1176-6900-0x0000000000230000-0x0000000000240000-memory.dmp

memory/2516-6953-0x0000000000250000-0x0000000000260000-memory.dmp

memory/2800-7064-0x00000000003C0000-0x00000000003D0000-memory.dmp

memory/1500-7337-0x0000000000220000-0x0000000000230000-memory.dmp

memory/1512-7563-0x0000000000220000-0x0000000000230000-memory.dmp

memory/2816-7870-0x0000000000220000-0x0000000000230000-memory.dmp

memory/1500-8205-0x0000000000220000-0x0000000000230000-memory.dmp

memory/1948-8311-0x0000000000220000-0x0000000000230000-memory.dmp

memory/2548-9327-0x0000000000220000-0x0000000000230000-memory.dmp

memory/1668-9654-0x00000000001B0000-0x00000000001C0000-memory.dmp

memory/1668-9653-0x00000000001B0000-0x00000000001C0000-memory.dmp

memory/2208-10038-0x0000000000380000-0x0000000000390000-memory.dmp

memory/2748-10106-0x0000000000220000-0x0000000000230000-memory.dmp

memory/2748-10108-0x0000000000220000-0x0000000000230000-memory.dmp

memory/2120-10282-0x00000000001F0000-0x0000000000200000-memory.dmp

memory/2152-10371-0x0000000000270000-0x0000000000280000-memory.dmp

memory/2024-10551-0x0000000000250000-0x0000000000260000-memory.dmp

memory/2040-10691-0x0000000000260000-0x0000000000270000-memory.dmp

memory/3000-11319-0x0000000000220000-0x0000000000230000-memory.dmp

memory/3000-11325-0x0000000000220000-0x0000000000230000-memory.dmp

memory/2672-11457-0x0000000000220000-0x0000000000230000-memory.dmp

memory/2556-11433-0x00000000001B0000-0x00000000001C0000-memory.dmp

memory/1960-11501-0x0000000000220000-0x0000000000230000-memory.dmp

memory/1736-11545-0x0000000077760000-0x000000007787F000-memory.dmp

memory/1736-11547-0x0000000077660000-0x000000007775A000-memory.dmp

memory/896-12318-0x0000000000220000-0x0000000000230000-memory.dmp

memory/1944-12332-0x00000000002A0000-0x00000000002B0000-memory.dmp

memory/1944-12333-0x00000000002A0000-0x00000000002B0000-memory.dmp

memory/1652-12649-0x0000000000220000-0x0000000000230000-memory.dmp

memory/1652-12648-0x0000000000220000-0x0000000000230000-memory.dmp

memory/1296-13409-0x00000000001B0000-0x00000000001C0000-memory.dmp

memory/832-13465-0x0000000000220000-0x0000000000230000-memory.dmp

memory/1668-13873-0x00000000003B0000-0x00000000003C0000-memory.dmp

memory/1668-13872-0x00000000003B0000-0x00000000003C0000-memory.dmp

memory/2756-14044-0x0000000000220000-0x0000000000230000-memory.dmp

memory/3048-14058-0x0000000000220000-0x0000000000230000-memory.dmp

memory/2756-14045-0x0000000000220000-0x0000000000230000-memory.dmp

memory/1348-14046-0x0000000000220000-0x0000000000230000-memory.dmp

memory/3048-14059-0x0000000000220000-0x0000000000230000-memory.dmp

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-03 04:42

Reported

2024-06-03 04:44

Platform

win10v2004-20240508-en

Max time kernel

27s

Max time network

149s

Command Line

"C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe"

Signatures

Modifies visibility of file extensions in Explorer

evasion
Description Indicator Process Target
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\hr-hr\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\ar-ae\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\Google\Chrome\Application\110.0.5481.104\VisualElements\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins3d\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\pl-pl\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power View Excel Add-in\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\Common Files\microsoft shared\MSInfo\en-US\data.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\Common Files\microsoft shared\ink\sk-SK\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\es\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\zh-Hans\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\Java\jdk-1.8\jre\lib\amd64\update.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\cs-cz\data.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\symbols\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Dictionaries\en_CA\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\hi_contrast\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\Common Files\System\Ole DB\de-DE\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Tracker\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\data.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\fr-ma\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\Java\jre-1.8\legal\jdk\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\Unicode\Mappings\Adobe\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\uk-ua\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\Common Files\microsoft shared\VSTO\10.0\1033\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\it\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\Google\Chrome\Application\110.0.5481.104\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\Java\jre-1.8\bin\dtplugin\update.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\Internet Explorer\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\Java\jdk-1.8\jre\lib\cmm\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Abbreviations\en_US\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\SupplementalDictionaries\en_US\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\Common Files\microsoft shared\ink\de-DE\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Users\Admin\Documents\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\de\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\zh-Hant\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\core\dev\cef\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\root\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Users\Public\Documents\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\Common Files\microsoft shared\ink\fi-FI\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\Common Files\System\ado\fr-FR\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\zh-Hans\data.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\UIThemes\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app-api\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\Common Files\microsoft shared\ink\ar-SA\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\eu-es\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\Java\jre-1.8\lib\cmm\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\Microsoft Office\root\Office16\1033\DataServices\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\files\dev\libs\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\Java\jdk-1.8\jre\lib\applet\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\Java\jre-1.8\lib\applet\data.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Users\Admin\Documents\OneNote Notebooks\My Notebook\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Users\Public\Videos\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\es\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\Internet Explorer\de-DE\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\Java\jdk-1.8\legal\javafx\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\nb-no\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\Common Files\microsoft shared\ink\nb-NO\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\Java\jdk-1.8\legal\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\es-es\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt = "1" C:\Users\Admin\Pictures\Camera Roll\backup.exe N/A

Disables RegEdit via registry modification

evasion
Description Indicator Process Target
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\Java\jdk-1.8\legal\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\Unicode\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\sv-se\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\Google\Chrome\Application\110.0.5481.104\default_apps\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\cs-cz\data.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\Google\Chrome\Application\110.0.5481.104\MEIPreload\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\Java\jre-1.8\legal\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\pt-BR\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\AcroForm\update.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\Java\jre-1.8\lib\amd64\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Common Files\Adobe\Reader\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\root\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\Common Files\DESIGNER\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\Java\jdk-1.8\legal\jdk\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\pt-BR\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Adobe\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\Common Files\microsoft shared\ink\ko-KR\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\Common Files\System\it-IT\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Dictionaries\en_US\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Users\Public\Videos\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\keypad\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\pl\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\Microsoft Office\root\Office16\1033\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\Common Files\microsoft shared\ink\nb-NO\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\Java\jdk-1.8\jre\lib\jfr\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\en-ae\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\Common Files\microsoft shared\ink\sv-SE\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\Common Files\microsoft shared\OFFICE16\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\files\dev\cef\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\tr\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Setup Files\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\app\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\win-scrollbar\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\tr-tr\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\cs-cz\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Users\Admin\Documents\OneNote Notebooks\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\dotnet\host\fxr\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\ko\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\Microsoft Office\root\Integration\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\Microsoft Office\root\Licenses\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Adobe\data.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\Common Files\microsoft shared\VSTO\10.0\1033\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\Google\Chrome\Application\110.0.5481.104\WidevineCdm\_platform_specific\win_x64\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\cs\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\Java\jdk-1.8\jre\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\Annotations\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\Common Files\System\Ole DB\en-US\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\zh-Hans\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Adobe\data.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\zh-Hant\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\Java\jre-1.8\lib\security\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\update.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\win-scrollbar\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\hr-hr\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\Microsoft Office\root\Office16\1033\DataServices\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\Common Files\microsoft shared\VSTO\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\Common Files\microsoft shared\ink\sr-Latn-RS\backup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\backup.exe N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\{27FCB4BE-2E57-4AE2-B305-1F3761327CB9}\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2683013721\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\acrocef_low\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\hsperfdata_Admin\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Low\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Microsoft Visual C++ 2010 x64 Redistributable Setup_10.0.40219\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Microsoft Visual C++ 2010 x86 Redistributable Setup_10.0.40219\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\mozilla-temp-files\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\OneNote\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\OneNote\16.0\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\OneNote\16.0\Exported\backup.exe N/A
N/A N/A C:\backup.exe N/A
N/A N/A C:\PerfLogs\backup.exe N/A
N/A N/A C:\Program Files\backup.exe N/A
N/A N/A C:\Program Files\7-Zip\backup.exe N/A
N/A N/A C:\Program Files\7-Zip\Lang\backup.exe N/A
N/A N/A C:\Program Files\Common Files\backup.exe N/A
N/A N/A C:\Program Files\Common Files\DESIGNER\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ClickToRun\update.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\ar-SA\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\bg-BG\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\cs-CZ\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\da-DK\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\de-DE\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\el-GR\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\en-GB\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\en-US\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\es-ES\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\es-MX\System Restore.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\et-EE\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\fi-FI\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\fr-CA\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\fr-FR\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\auxpad\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\insert\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\keypad\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskclearui\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskmenu\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\osknav\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\osknumpad\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskpred\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\symbols\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\he-IL\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\hr-HR\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\hu-HU\System Restore.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\HWRCustomization\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\it-IT\update.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\ja-JP\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\ko-KR\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\LanguageModel\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\lt-LT\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\lv-LV\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\nb-NO\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\nl-NL\update.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\pl-PL\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\pt-BR\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\pt-PT\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\ro-RO\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\ru-RU\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\sk-SK\backup.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files\Common Files\microsoft shared\VSTO\10.0\1033\backup.exe C:\Program Files\Common Files\microsoft shared\VSTO\10.0\backup.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\ja-JP\data.exe C:\Program Files\Common Files\System\msadc\backup.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\keypad\backup.exe C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\backup.exe N/A
File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\zh-Hans\backup.exe C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\backup.exe N/A
File opened for modification C:\Program Files\Java\backup.exe C:\Program Files\backup.exe N/A
File opened for modification C:\Program Files\Java\jre-1.8\backup.exe C:\Program Files\Java\backup.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Abbreviations\en_US\backup.exe C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Abbreviations\System Restore.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\hr-HR\backup.exe C:\Program Files\Common Files\microsoft shared\ink\backup.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\backup.exe C:\Program Files\Common Files\microsoft shared\backup.exe N/A
File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\backup.exe C:\Program Files\dotnet\shared\backup.exe N/A
File opened for modification C:\Program Files\Java\jre-1.8\lib\fonts\backup.exe C:\Program Files\Java\jre-1.8\lib\backup.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\backup.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\backup.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\backup.exe C:\Program Files (x86)\Common Files\Adobe\Acrobat\data.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Adobe\HelpCfg\System Restore.exe C:\Program Files (x86)\Common Files\Adobe\backup.exe N/A
File opened for modification C:\Program Files\Java\jre-1.8\legal\backup.exe C:\Program Files\Java\jre-1.8\backup.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\backup.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\backup.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\pl-pl\backup.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\backup.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\MSInfo\en-US\data.exe C:\Program Files\Common Files\microsoft shared\MSInfo\backup.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\MSInfo\fr-FR\update.exe C:\Program Files\Common Files\microsoft shared\MSInfo\backup.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\VGX\backup.exe C:\Program Files\Common Files\microsoft shared\backup.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\VSTO\10.0\backup.exe C:\Program Files\Common Files\microsoft shared\VSTO\backup.exe N/A
File opened for modification C:\Program Files\dotnet\shared\Microsoft.NETCore.App\backup.exe C:\Program Files\dotnet\shared\backup.exe N/A
File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\ko\backup.exe C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\backup.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\AcroForm\update.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\backup.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\backup.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\backup.exe N/A
File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\fr\backup.exe C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\backup.exe N/A
File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\ru\backup.exe C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\backup.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Legal\ENU\update.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Legal\backup.exe N/A
File opened for modification C:\Program Files\Java\jdk-1.8\jre\lib\ext\backup.exe C:\Program Files\Java\jdk-1.8\jre\lib\backup.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\ko-kr\backup.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\backup.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\sl-sl\backup.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\backup.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\backup.exe C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\backup.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\sl-SI\backup.exe C:\Program Files\Common Files\microsoft shared\ink\backup.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\TextConv\en-US\backup.exe C:\Program Files\Common Files\microsoft shared\TextConv\backup.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\win8-scrollbar\themes\dark\backup.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\win8-scrollbar\themes\backup.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\Multimedia\backup.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\backup.exe N/A
File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\ja\backup.exe C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\backup.exe N/A
File opened for modification C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\backup.exe C:\Program Files\Java\jdk-1.8\jre\lib\images\backup.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\tr-tr\backup.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\backup.exe N/A
File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\zh-Hant\backup.exe C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\backup.exe N/A
File opened for modification C:\Program Files\Internet Explorer\de-DE\backup.exe C:\Program Files\Internet Explorer\backup.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Integration\Addons\backup.exe C:\Program Files\Microsoft Office\root\Integration\backup.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\pl-pl\backup.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\backup.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\Bibliography\Sort\backup.exe C:\Program Files\Microsoft Office\root\Office16\Bibliography\backup.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\bg-BG\backup.exe C:\Program Files\Common Files\microsoft shared\ink\backup.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\110.0.5481.104\WidevineCdm\_platform_specific\backup.exe C:\Program Files\Google\Chrome\Application\110.0.5481.104\WidevineCdm\backup.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\backup.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\backup.exe N/A
File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\pt-BR\backup.exe C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\backup.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\ENU\backup.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\backup.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\110.0.5481.104\WidevineCdm\_platform_specific\win_x64\backup.exe C:\Program Files\Google\Chrome\Application\110.0.5481.104\WidevineCdm\_platform_specific\backup.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\3082\backup.exe C:\Program Files\Microsoft Office\root\Office16\backup.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\sr-Latn-RS\backup.exe C:\Program Files\Common Files\microsoft shared\ink\backup.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\110.0.5481.104\VisualElements\backup.exe C:\Program Files\Google\Chrome\Application\110.0.5481.104\backup.exe N/A
File opened for modification C:\Program Files\Java\jre-1.8\bin\server\backup.exe C:\Program Files\Java\jre-1.8\bin\backup.exe N/A
File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\it\backup.exe C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\backup.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Resources\backup.exe C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\backup.exe N/A
File opened for modification C:\Program Files\Java\jre-1.8\lib\backup.exe C:\Program Files\Java\jre-1.8\backup.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\ar-ae\backup.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\backup.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\sv-se\backup.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\backup.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\hu-HU\System Restore.exe C:\Program Files\Common Files\microsoft shared\ink\backup.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\da-dk\backup.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\backup.exe N/A
File opened for modification C:\Program Files\7-Zip\backup.exe C:\Program Files\backup.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fr-CA\backup.exe C:\Program Files\Common Files\microsoft shared\ink\backup.exe N/A
File opened for modification C:\Program Files\Common Files\System\Ole DB\backup.exe C:\Program Files\Common Files\System\backup.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\appcompat\appraiser\Telemetry\backup.exe C:\Windows\appcompat\appraiser\backup.exe N/A
File opened for modification C:\Windows\backup.exe C:\backup.exe N/A
File opened for modification C:\Windows\addins\backup.exe C:\Windows\backup.exe N/A
File opened for modification C:\Windows\appcompat\backup.exe C:\Windows\backup.exe N/A
File opened for modification C:\Windows\appcompat\appraiser\backup.exe C:\Windows\appcompat\backup.exe N/A

Enumerates physical storage devices

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\{27FCB4BE-2E57-4AE2-B305-1F3761327CB9}\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2683013721\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\acrocef_low\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\hsperfdata_Admin\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Low\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Microsoft Visual C++ 2010 x64 Redistributable Setup_10.0.40219\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Microsoft Visual C++ 2010 x86 Redistributable Setup_10.0.40219\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\mozilla-temp-files\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\OneNote\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\OneNote\16.0\backup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\OneNote\16.0\Exported\backup.exe N/A
N/A N/A C:\backup.exe N/A
N/A N/A C:\PerfLogs\backup.exe N/A
N/A N/A C:\Program Files\backup.exe N/A
N/A N/A C:\Program Files\7-Zip\backup.exe N/A
N/A N/A C:\Program Files\7-Zip\Lang\backup.exe N/A
N/A N/A C:\Program Files\Common Files\backup.exe N/A
N/A N/A C:\Program Files\Common Files\DESIGNER\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ClickToRun\update.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\ar-SA\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\bg-BG\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\cs-CZ\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\da-DK\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\de-DE\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\el-GR\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\en-GB\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\en-US\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\es-ES\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\es-MX\System Restore.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\et-EE\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\fi-FI\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\fr-CA\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\fr-FR\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\auxpad\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\insert\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\keypad\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskclearui\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskmenu\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\osknav\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\osknumpad\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskpred\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\symbols\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\he-IL\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\hr-HR\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\hu-HU\System Restore.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\HWRCustomization\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\it-IT\update.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\ja-JP\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\ko-KR\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\LanguageModel\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\lt-LT\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\lv-LV\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\nb-NO\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\nl-NL\update.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\pl-PL\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\pt-BR\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\pt-PT\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\ro-RO\backup.exe N/A
N/A N/A C:\Program Files\Common Files\microsoft shared\ink\ru-RU\backup.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 4540 wrote to memory of 2188 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\{27FCB4BE-2E57-4AE2-B305-1F3761327CB9}\backup.exe
PID 4540 wrote to memory of 2188 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\{27FCB4BE-2E57-4AE2-B305-1F3761327CB9}\backup.exe
PID 4540 wrote to memory of 2188 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\{27FCB4BE-2E57-4AE2-B305-1F3761327CB9}\backup.exe
PID 4540 wrote to memory of 4424 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\2683013721\backup.exe
PID 4540 wrote to memory of 4424 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\2683013721\backup.exe
PID 4540 wrote to memory of 4424 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\2683013721\backup.exe
PID 4540 wrote to memory of 1716 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\acrocef_low\backup.exe
PID 4540 wrote to memory of 1716 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\acrocef_low\backup.exe
PID 4540 wrote to memory of 1716 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\acrocef_low\backup.exe
PID 4540 wrote to memory of 408 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\hsperfdata_Admin\backup.exe
PID 4540 wrote to memory of 408 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\hsperfdata_Admin\backup.exe
PID 4540 wrote to memory of 408 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\hsperfdata_Admin\backup.exe
PID 4540 wrote to memory of 2016 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\Low\backup.exe
PID 4540 wrote to memory of 2016 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\Low\backup.exe
PID 4540 wrote to memory of 2016 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\Low\backup.exe
PID 4540 wrote to memory of 1924 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\Microsoft Visual C++ 2010 x64 Redistributable Setup_10.0.40219\backup.exe
PID 4540 wrote to memory of 1924 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\Microsoft Visual C++ 2010 x64 Redistributable Setup_10.0.40219\backup.exe
PID 4540 wrote to memory of 1924 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\Microsoft Visual C++ 2010 x64 Redistributable Setup_10.0.40219\backup.exe
PID 4540 wrote to memory of 2876 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\Microsoft Visual C++ 2010 x86 Redistributable Setup_10.0.40219\backup.exe
PID 4540 wrote to memory of 2876 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\Microsoft Visual C++ 2010 x86 Redistributable Setup_10.0.40219\backup.exe
PID 4540 wrote to memory of 2876 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\Microsoft Visual C++ 2010 x86 Redistributable Setup_10.0.40219\backup.exe
PID 4540 wrote to memory of 2732 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\mozilla-temp-files\backup.exe
PID 4540 wrote to memory of 2732 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\mozilla-temp-files\backup.exe
PID 4540 wrote to memory of 2732 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\mozilla-temp-files\backup.exe
PID 4540 wrote to memory of 2212 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\OneNote\backup.exe
PID 4540 wrote to memory of 2212 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\OneNote\backup.exe
PID 4540 wrote to memory of 2212 N/A C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe C:\Users\Admin\AppData\Local\Temp\OneNote\backup.exe
PID 2212 wrote to memory of 5008 N/A C:\Users\Admin\AppData\Local\Temp\OneNote\backup.exe C:\Users\Admin\AppData\Local\Temp\OneNote\16.0\backup.exe
PID 2212 wrote to memory of 5008 N/A C:\Users\Admin\AppData\Local\Temp\OneNote\backup.exe C:\Users\Admin\AppData\Local\Temp\OneNote\16.0\backup.exe
PID 2212 wrote to memory of 5008 N/A C:\Users\Admin\AppData\Local\Temp\OneNote\backup.exe C:\Users\Admin\AppData\Local\Temp\OneNote\16.0\backup.exe
PID 5008 wrote to memory of 2860 N/A C:\Users\Admin\AppData\Local\Temp\OneNote\16.0\backup.exe C:\Users\Admin\AppData\Local\Temp\OneNote\16.0\Exported\backup.exe
PID 5008 wrote to memory of 2860 N/A C:\Users\Admin\AppData\Local\Temp\OneNote\16.0\backup.exe C:\Users\Admin\AppData\Local\Temp\OneNote\16.0\Exported\backup.exe
PID 5008 wrote to memory of 2860 N/A C:\Users\Admin\AppData\Local\Temp\OneNote\16.0\backup.exe C:\Users\Admin\AppData\Local\Temp\OneNote\16.0\Exported\backup.exe
PID 2188 wrote to memory of 5044 N/A C:\Users\Admin\AppData\Local\Temp\{27FCB4BE-2E57-4AE2-B305-1F3761327CB9}\backup.exe C:\backup.exe
PID 2188 wrote to memory of 5044 N/A C:\Users\Admin\AppData\Local\Temp\{27FCB4BE-2E57-4AE2-B305-1F3761327CB9}\backup.exe C:\backup.exe
PID 2188 wrote to memory of 5044 N/A C:\Users\Admin\AppData\Local\Temp\{27FCB4BE-2E57-4AE2-B305-1F3761327CB9}\backup.exe C:\backup.exe
PID 5044 wrote to memory of 3576 N/A C:\backup.exe C:\PerfLogs\backup.exe
PID 5044 wrote to memory of 3576 N/A C:\backup.exe C:\PerfLogs\backup.exe
PID 5044 wrote to memory of 3576 N/A C:\backup.exe C:\PerfLogs\backup.exe
PID 5044 wrote to memory of 4744 N/A C:\backup.exe C:\Program Files\backup.exe
PID 5044 wrote to memory of 4744 N/A C:\backup.exe C:\Program Files\backup.exe
PID 5044 wrote to memory of 4744 N/A C:\backup.exe C:\Program Files\backup.exe
PID 4744 wrote to memory of 4528 N/A C:\Program Files\backup.exe C:\Program Files\7-Zip\backup.exe
PID 4744 wrote to memory of 4528 N/A C:\Program Files\backup.exe C:\Program Files\7-Zip\backup.exe
PID 4744 wrote to memory of 4528 N/A C:\Program Files\backup.exe C:\Program Files\7-Zip\backup.exe
PID 4528 wrote to memory of 3420 N/A C:\Program Files\7-Zip\backup.exe C:\Program Files\7-Zip\Lang\backup.exe
PID 4528 wrote to memory of 3420 N/A C:\Program Files\7-Zip\backup.exe C:\Program Files\7-Zip\Lang\backup.exe
PID 4528 wrote to memory of 3420 N/A C:\Program Files\7-Zip\backup.exe C:\Program Files\7-Zip\Lang\backup.exe
PID 4744 wrote to memory of 884 N/A C:\Program Files\backup.exe C:\Program Files\Common Files\backup.exe
PID 4744 wrote to memory of 884 N/A C:\Program Files\backup.exe C:\Program Files\Common Files\backup.exe
PID 4744 wrote to memory of 884 N/A C:\Program Files\backup.exe C:\Program Files\Common Files\backup.exe
PID 884 wrote to memory of 4400 N/A C:\Program Files\Common Files\backup.exe C:\Program Files\Common Files\DESIGNER\backup.exe
PID 884 wrote to memory of 4400 N/A C:\Program Files\Common Files\backup.exe C:\Program Files\Common Files\DESIGNER\backup.exe
PID 884 wrote to memory of 4400 N/A C:\Program Files\Common Files\backup.exe C:\Program Files\Common Files\DESIGNER\backup.exe
PID 884 wrote to memory of 2816 N/A C:\Program Files\Common Files\backup.exe C:\Program Files\Common Files\microsoft shared\backup.exe
PID 884 wrote to memory of 2816 N/A C:\Program Files\Common Files\backup.exe C:\Program Files\Common Files\microsoft shared\backup.exe
PID 884 wrote to memory of 2816 N/A C:\Program Files\Common Files\backup.exe C:\Program Files\Common Files\microsoft shared\backup.exe
PID 2816 wrote to memory of 4684 N/A C:\Program Files\Common Files\microsoft shared\backup.exe C:\Program Files\Common Files\microsoft shared\ClickToRun\update.exe
PID 2816 wrote to memory of 4684 N/A C:\Program Files\Common Files\microsoft shared\backup.exe C:\Program Files\Common Files\microsoft shared\ClickToRun\update.exe
PID 2816 wrote to memory of 4684 N/A C:\Program Files\Common Files\microsoft shared\backup.exe C:\Program Files\Common Files\microsoft shared\ClickToRun\update.exe
PID 2816 wrote to memory of 4912 N/A C:\Program Files\Common Files\microsoft shared\backup.exe C:\Program Files\Common Files\microsoft shared\ink\backup.exe
PID 2816 wrote to memory of 4912 N/A C:\Program Files\Common Files\microsoft shared\backup.exe C:\Program Files\Common Files\microsoft shared\ink\backup.exe
PID 2816 wrote to memory of 4912 N/A C:\Program Files\Common Files\microsoft shared\backup.exe C:\Program Files\Common Files\microsoft shared\ink\backup.exe
PID 4912 wrote to memory of 4364 N/A C:\Program Files\Common Files\microsoft shared\ink\backup.exe C:\Program Files\Common Files\microsoft shared\ink\ar-SA\backup.exe

System policy modification

evasion
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System C:\Program Files\Java\jdk-1.8\jre\bin\dtplugin\update.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\update.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System Restore.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\fr-ma\backup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\sk-sk\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskmenu\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions = "1" C:\Program Files\Common Files\microsoft shared\ink\ko-KR\backup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer C:\Program Files\Common Files\microsoft shared\ink\nb-NO\backup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Javascripts\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions = "1" C:\Program Files\Java\jdk-1.8\legal\javafx\backup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\SupplementalDictionaries\en_US\backup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer C:\Program Files\7-Zip\Lang\backup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer C:\Program Files\Common Files\microsoft shared\ink\fr-CA\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions = "1" C:\Program Files\Java\jdk-1.8\jre\lib\security\backup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System C:\Program Files\Common Files\System\msadc\de-DE\backup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Locale\en_US\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\hi_contrast\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\fr-ma\backup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer C:\Program Files\Microsoft Office\root\Licenses\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\Unicode\Mappings\Adobe\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\backup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\Annotations\backup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\Annotations\Stamps\backup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer C:\Program Files\Java\jdk-1.8\jre\lib\amd64\update.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\Java\jre-1.8\legal\javafx\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\ko-kr\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\tr-tr\backup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System C:\Program Files\Common Files\microsoft shared\ink\fi-FI\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions = "1" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\tr\backup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System C:\Program Files\Microsoft Office\root\Office16\1033\backup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Users\Public\Pictures\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\Common Files\microsoft shared\ink\pt-PT\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\hi_contrast\backup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\win8-scrollbar\themes\dark\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions = "1" C:\Program Files\Microsoft Office\root\Document Themes 16\backup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer C:\Program Files\Common Files\microsoft shared\MSInfo\en-US\data.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions = "1" C:\Program Files\Common Files\microsoft shared\MSInfo\it-IT\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions = "1" C:\Program Files\Microsoft Office\root\Office15\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions = "1" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\es\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions = "1" C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\update.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Dictionaries\en_US\backup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer C:\Program Files (x86)\Common Files\Adobe\Acrobat\data.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\Microsoft Office\root\Office16\1033\Bibliography\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions = "1" C:\Program Files\Common Files\microsoft shared\ink\fr-CA\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions = "1" C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\backup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer C:\Program Files\Java\jre-1.8\backup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer C:\Users\Admin\Documents\OneNote Notebooks\My Notebook\backup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Resources\1033\System Restore.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System C:\Program Files\Common Files\microsoft shared\ink\en-US\backup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer C:\Program Files\Common Files\microsoft shared\TextConv\en-US\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\it\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\data.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\zh-cn\System Restore.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\Font\PFM\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions = "1" C:\Program Files\Common Files\microsoft shared\ink\fr-FR\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\auxpad\backup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System C:\Program Files\Common Files\microsoft shared\ink\ru-RU\backup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\fi-fi\backup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\sl-si\backup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Users\Admin\AppData\Local\Temp\OneNote\16.0\Exported\backup.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe

"C:\Users\Admin\AppData\Local\Temp\df7174a3a70e3c3f630298ddf7015f721fa4240f478990572c81fc131bd89a90.exe"

C:\Users\Admin\AppData\Local\Temp\{27FCB4BE-2E57-4AE2-B305-1F3761327CB9}\backup.exe

C:\Users\Admin\AppData\Local\Temp\{27FCB4BE-2E57-4AE2-B305-1F3761327CB9}\backup.exe C:\Users\Admin\AppData\Local\Temp\{27FCB4BE-2E57-4AE2-B305-1F3761327CB9}\

C:\Users\Admin\AppData\Local\Temp\2683013721\backup.exe

C:\Users\Admin\AppData\Local\Temp\2683013721\backup.exe C:\Users\Admin\AppData\Local\Temp\2683013721\

C:\Users\Admin\AppData\Local\Temp\acrocef_low\backup.exe

C:\Users\Admin\AppData\Local\Temp\acrocef_low\backup.exe C:\Users\Admin\AppData\Local\Temp\acrocef_low\

C:\Users\Admin\AppData\Local\Temp\hsperfdata_Admin\backup.exe

C:\Users\Admin\AppData\Local\Temp\hsperfdata_Admin\backup.exe C:\Users\Admin\AppData\Local\Temp\hsperfdata_Admin\

C:\Users\Admin\AppData\Local\Temp\Low\backup.exe

C:\Users\Admin\AppData\Local\Temp\Low\backup.exe C:\Users\Admin\AppData\Local\Temp\Low\

C:\Users\Admin\AppData\Local\Temp\Microsoft Visual C++ 2010 x64 Redistributable Setup_10.0.40219\backup.exe

"C:\Users\Admin\AppData\Local\Temp\Microsoft Visual C++ 2010 x64 Redistributable Setup_10.0.40219\backup.exe" C:\Users\Admin\AppData\Local\Temp\Microsoft Visual C++ 2010 x64 Redistributable Setup_10.0.40219\

C:\Users\Admin\AppData\Local\Temp\Microsoft Visual C++ 2010 x86 Redistributable Setup_10.0.40219\backup.exe

"C:\Users\Admin\AppData\Local\Temp\Microsoft Visual C++ 2010 x86 Redistributable Setup_10.0.40219\backup.exe" C:\Users\Admin\AppData\Local\Temp\Microsoft Visual C++ 2010 x86 Redistributable Setup_10.0.40219\

C:\Users\Admin\AppData\Local\Temp\mozilla-temp-files\backup.exe

C:\Users\Admin\AppData\Local\Temp\mozilla-temp-files\backup.exe C:\Users\Admin\AppData\Local\Temp\mozilla-temp-files\

C:\Users\Admin\AppData\Local\Temp\OneNote\backup.exe

C:\Users\Admin\AppData\Local\Temp\OneNote\backup.exe C:\Users\Admin\AppData\Local\Temp\OneNote\

C:\Users\Admin\AppData\Local\Temp\OneNote\16.0\backup.exe

C:\Users\Admin\AppData\Local\Temp\OneNote\16.0\backup.exe C:\Users\Admin\AppData\Local\Temp\OneNote\16.0\

C:\Users\Admin\AppData\Local\Temp\OneNote\16.0\Exported\backup.exe

C:\Users\Admin\AppData\Local\Temp\OneNote\16.0\Exported\backup.exe C:\Users\Admin\AppData\Local\Temp\OneNote\16.0\Exported\

C:\backup.exe

\backup.exe \

C:\PerfLogs\backup.exe

C:\PerfLogs\backup.exe C:\PerfLogs\

C:\Program Files\backup.exe

"C:\Program Files\backup.exe" C:\Program Files\

C:\Program Files\7-Zip\backup.exe

"C:\Program Files\7-Zip\backup.exe" C:\Program Files\7-Zip\

C:\Program Files\7-Zip\Lang\backup.exe

"C:\Program Files\7-Zip\Lang\backup.exe" C:\Program Files\7-Zip\Lang\

C:\Program Files\Common Files\backup.exe

"C:\Program Files\Common Files\backup.exe" C:\Program Files\Common Files\

C:\Program Files\Common Files\DESIGNER\backup.exe

"C:\Program Files\Common Files\DESIGNER\backup.exe" C:\Program Files\Common Files\DESIGNER\

C:\Program Files\Common Files\microsoft shared\backup.exe

"C:\Program Files\Common Files\microsoft shared\backup.exe" C:\Program Files\Common Files\microsoft shared\

C:\Program Files\Common Files\microsoft shared\ClickToRun\update.exe

"C:\Program Files\Common Files\microsoft shared\ClickToRun\update.exe" C:\Program Files\Common Files\microsoft shared\ClickToRun\

C:\Program Files\Common Files\microsoft shared\ink\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\

C:\Program Files\Common Files\microsoft shared\ink\ar-SA\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\ar-SA\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\ar-SA\

C:\Program Files\Common Files\microsoft shared\ink\bg-BG\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\bg-BG\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\bg-BG\

C:\Program Files\Common Files\microsoft shared\ink\cs-CZ\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\cs-CZ\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\cs-CZ\

C:\Program Files\Common Files\microsoft shared\ink\da-DK\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\da-DK\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\da-DK\

C:\Program Files\Common Files\microsoft shared\ink\de-DE\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\de-DE\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\de-DE\

C:\Program Files\Common Files\microsoft shared\ink\el-GR\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\el-GR\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\el-GR\

C:\Program Files\Common Files\microsoft shared\ink\en-GB\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\en-GB\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\en-GB\

C:\Program Files\Common Files\microsoft shared\ink\en-US\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\en-US\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\en-US\

C:\Program Files\Common Files\microsoft shared\ink\es-ES\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\es-ES\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\es-ES\

C:\Program Files\Common Files\microsoft shared\ink\es-MX\System Restore.exe

"C:\Program Files\Common Files\microsoft shared\ink\es-MX\System Restore.exe" C:\Program Files\Common Files\microsoft shared\ink\es-MX\

C:\Program Files\Common Files\microsoft shared\ink\et-EE\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\et-EE\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\et-EE\

C:\Program Files\Common Files\microsoft shared\ink\fi-FI\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\fi-FI\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\fi-FI\

C:\Program Files\Common Files\microsoft shared\ink\fr-CA\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\fr-CA\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\fr-CA\

C:\Program Files\Common Files\microsoft shared\ink\fr-FR\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\fr-FR\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\fr-FR\

C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\

C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\auxpad\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\auxpad\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\auxpad\

C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\insert\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\insert\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\insert\

C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\keypad\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\keypad\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\keypad\

C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\

C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskclearui\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskclearui\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskclearui\

C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskmenu\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskmenu\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskmenu\

C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\osknav\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\osknav\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\osknav\

C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\osknumpad\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\osknumpad\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\osknumpad\

C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskpred\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskpred\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskpred\

C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\symbols\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\symbols\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\symbols\

C:\Program Files\Common Files\microsoft shared\ink\he-IL\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\he-IL\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\he-IL\

C:\Program Files\Common Files\microsoft shared\ink\hr-HR\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\hr-HR\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\hr-HR\

C:\Program Files\Common Files\microsoft shared\ink\hu-HU\System Restore.exe

"C:\Program Files\Common Files\microsoft shared\ink\hu-HU\System Restore.exe" C:\Program Files\Common Files\microsoft shared\ink\hu-HU\

C:\Program Files\Common Files\microsoft shared\ink\HWRCustomization\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\HWRCustomization\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\HWRCustomization\

C:\Program Files\Common Files\microsoft shared\ink\it-IT\update.exe

"C:\Program Files\Common Files\microsoft shared\ink\it-IT\update.exe" C:\Program Files\Common Files\microsoft shared\ink\it-IT\

C:\Program Files\Common Files\microsoft shared\ink\ja-JP\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\ja-JP\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\ja-JP\

C:\Program Files\Common Files\microsoft shared\ink\ko-KR\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\ko-KR\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\ko-KR\

C:\Program Files\Common Files\microsoft shared\ink\LanguageModel\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\LanguageModel\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\LanguageModel\

C:\Program Files\Common Files\microsoft shared\ink\lt-LT\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\lt-LT\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\lt-LT\

C:\Program Files\Common Files\microsoft shared\ink\lv-LV\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\lv-LV\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\lv-LV\

C:\Program Files\Common Files\microsoft shared\ink\nb-NO\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\nb-NO\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\nb-NO\

C:\Program Files\Common Files\microsoft shared\ink\nl-NL\update.exe

"C:\Program Files\Common Files\microsoft shared\ink\nl-NL\update.exe" C:\Program Files\Common Files\microsoft shared\ink\nl-NL\

C:\Program Files\Common Files\microsoft shared\ink\pl-PL\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\pl-PL\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\pl-PL\

C:\Program Files\Common Files\microsoft shared\ink\pt-BR\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\pt-BR\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\pt-BR\

C:\Program Files\Common Files\microsoft shared\ink\pt-PT\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\pt-PT\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\pt-PT\

C:\Program Files\Common Files\microsoft shared\ink\ro-RO\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\ro-RO\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\ro-RO\

C:\Program Files\Common Files\microsoft shared\ink\ru-RU\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\ru-RU\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\ru-RU\

C:\Program Files\Common Files\microsoft shared\ink\sk-SK\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\sk-SK\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\sk-SK\

C:\Program Files\Common Files\microsoft shared\ink\sl-SI\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\sl-SI\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\sl-SI\

C:\Program Files\Common Files\microsoft shared\ink\sr-Latn-RS\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\sr-Latn-RS\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\sr-Latn-RS\

C:\Program Files\Common Files\microsoft shared\ink\sv-SE\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\sv-SE\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\sv-SE\

C:\Program Files\Common Files\microsoft shared\ink\th-TH\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\th-TH\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\th-TH\

C:\Program Files\Common Files\microsoft shared\ink\tr-TR\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\tr-TR\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\tr-TR\

C:\Program Files\Common Files\microsoft shared\ink\uk-UA\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\uk-UA\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\uk-UA\

C:\Program Files\Common Files\microsoft shared\ink\zh-CN\backup.exe

"C:\Program Files\Common Files\microsoft shared\ink\zh-CN\backup.exe" C:\Program Files\Common Files\microsoft shared\ink\zh-CN\

C:\Program Files\Common Files\microsoft shared\ink\zh-TW\data.exe

"C:\Program Files\Common Files\microsoft shared\ink\zh-TW\data.exe" C:\Program Files\Common Files\microsoft shared\ink\zh-TW\

C:\Program Files\Common Files\microsoft shared\MSInfo\backup.exe

"C:\Program Files\Common Files\microsoft shared\MSInfo\backup.exe" C:\Program Files\Common Files\microsoft shared\MSInfo\

C:\Program Files\Common Files\microsoft shared\MSInfo\de-DE\backup.exe

"C:\Program Files\Common Files\microsoft shared\MSInfo\de-DE\backup.exe" C:\Program Files\Common Files\microsoft shared\MSInfo\de-DE\

C:\Program Files\Common Files\microsoft shared\MSInfo\en-US\data.exe

"C:\Program Files\Common Files\microsoft shared\MSInfo\en-US\data.exe" C:\Program Files\Common Files\microsoft shared\MSInfo\en-US\

C:\Program Files\Common Files\microsoft shared\MSInfo\es-ES\backup.exe

"C:\Program Files\Common Files\microsoft shared\MSInfo\es-ES\backup.exe" C:\Program Files\Common Files\microsoft shared\MSInfo\es-ES\

C:\Program Files\Common Files\microsoft shared\MSInfo\fr-FR\update.exe

"C:\Program Files\Common Files\microsoft shared\MSInfo\fr-FR\update.exe" C:\Program Files\Common Files\microsoft shared\MSInfo\fr-FR\

C:\Program Files\Common Files\microsoft shared\MSInfo\it-IT\backup.exe

"C:\Program Files\Common Files\microsoft shared\MSInfo\it-IT\backup.exe" C:\Program Files\Common Files\microsoft shared\MSInfo\it-IT\

C:\Program Files\Common Files\microsoft shared\MSInfo\ja-JP\backup.exe

"C:\Program Files\Common Files\microsoft shared\MSInfo\ja-JP\backup.exe" C:\Program Files\Common Files\microsoft shared\MSInfo\ja-JP\

C:\Program Files\Common Files\microsoft shared\MSInfo\uk-UA\backup.exe

"C:\Program Files\Common Files\microsoft shared\MSInfo\uk-UA\backup.exe" C:\Program Files\Common Files\microsoft shared\MSInfo\uk-UA\

C:\Program Files\Common Files\microsoft shared\OFFICE16\backup.exe

"C:\Program Files\Common Files\microsoft shared\OFFICE16\backup.exe" C:\Program Files\Common Files\microsoft shared\OFFICE16\

C:\Program Files\Common Files\microsoft shared\OFFICE16\Office Setup Controller\backup.exe

"C:\Program Files\Common Files\microsoft shared\OFFICE16\Office Setup Controller\backup.exe" C:\Program Files\Common Files\microsoft shared\OFFICE16\Office Setup Controller\

C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\backup.exe

"C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\backup.exe" C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\

C:\Program Files\Common Files\microsoft shared\Source Engine\backup.exe

"C:\Program Files\Common Files\microsoft shared\Source Engine\backup.exe" C:\Program Files\Common Files\microsoft shared\Source Engine\

C:\Program Files\Common Files\microsoft shared\Stationery\backup.exe

"C:\Program Files\Common Files\microsoft shared\Stationery\backup.exe" C:\Program Files\Common Files\microsoft shared\Stationery\

C:\Program Files\Common Files\microsoft shared\TextConv\backup.exe

"C:\Program Files\Common Files\microsoft shared\TextConv\backup.exe" C:\Program Files\Common Files\microsoft shared\TextConv\

C:\Program Files\Common Files\microsoft shared\TextConv\en-US\backup.exe

"C:\Program Files\Common Files\microsoft shared\TextConv\en-US\backup.exe" C:\Program Files\Common Files\microsoft shared\TextConv\en-US\

C:\Program Files\Common Files\microsoft shared\Triedit\backup.exe

"C:\Program Files\Common Files\microsoft shared\Triedit\backup.exe" C:\Program Files\Common Files\microsoft shared\Triedit\

C:\Program Files\Common Files\microsoft shared\Triedit\en-US\data.exe

"C:\Program Files\Common Files\microsoft shared\Triedit\en-US\data.exe" C:\Program Files\Common Files\microsoft shared\Triedit\en-US\

C:\Program Files\Common Files\microsoft shared\VC\backup.exe

"C:\Program Files\Common Files\microsoft shared\VC\backup.exe" C:\Program Files\Common Files\microsoft shared\VC\

C:\Program Files\Common Files\microsoft shared\VGX\backup.exe

"C:\Program Files\Common Files\microsoft shared\VGX\backup.exe" C:\Program Files\Common Files\microsoft shared\VGX\

C:\Program Files\Common Files\microsoft shared\VSTO\backup.exe

"C:\Program Files\Common Files\microsoft shared\VSTO\backup.exe" C:\Program Files\Common Files\microsoft shared\VSTO\

C:\Program Files\Common Files\microsoft shared\VSTO\10.0\backup.exe

"C:\Program Files\Common Files\microsoft shared\VSTO\10.0\backup.exe" C:\Program Files\Common Files\microsoft shared\VSTO\10.0\

C:\Program Files\Common Files\microsoft shared\VSTO\10.0\1033\backup.exe

"C:\Program Files\Common Files\microsoft shared\VSTO\10.0\1033\backup.exe" C:\Program Files\Common Files\microsoft shared\VSTO\10.0\1033\

C:\Program Files\Common Files\Services\backup.exe

"C:\Program Files\Common Files\Services\backup.exe" C:\Program Files\Common Files\Services\

C:\Program Files\Common Files\System\backup.exe

"C:\Program Files\Common Files\System\backup.exe" C:\Program Files\Common Files\System\

C:\Program Files\Common Files\System\ado\backup.exe

"C:\Program Files\Common Files\System\ado\backup.exe" C:\Program Files\Common Files\System\ado\

C:\Program Files\Common Files\System\ado\de-DE\backup.exe

"C:\Program Files\Common Files\System\ado\de-DE\backup.exe" C:\Program Files\Common Files\System\ado\de-DE\

C:\Program Files\Common Files\System\ado\en-US\System Restore.exe

"C:\Program Files\Common Files\System\ado\en-US\System Restore.exe" C:\Program Files\Common Files\System\ado\en-US\

C:\Program Files\Common Files\System\ado\es-ES\backup.exe

"C:\Program Files\Common Files\System\ado\es-ES\backup.exe" C:\Program Files\Common Files\System\ado\es-ES\

C:\Program Files\Common Files\System\ado\fr-FR\backup.exe

"C:\Program Files\Common Files\System\ado\fr-FR\backup.exe" C:\Program Files\Common Files\System\ado\fr-FR\

C:\Program Files\Common Files\System\ado\it-IT\backup.exe

"C:\Program Files\Common Files\System\ado\it-IT\backup.exe" C:\Program Files\Common Files\System\ado\it-IT\

C:\Program Files\Common Files\System\ado\ja-JP\data.exe

"C:\Program Files\Common Files\System\ado\ja-JP\data.exe" C:\Program Files\Common Files\System\ado\ja-JP\

C:\Program Files\Common Files\System\de-DE\update.exe

"C:\Program Files\Common Files\System\de-DE\update.exe" C:\Program Files\Common Files\System\de-DE\

C:\Program Files\Common Files\System\en-US\backup.exe

"C:\Program Files\Common Files\System\en-US\backup.exe" C:\Program Files\Common Files\System\en-US\

C:\Program Files\Common Files\System\es-ES\backup.exe

"C:\Program Files\Common Files\System\es-ES\backup.exe" C:\Program Files\Common Files\System\es-ES\

C:\Program Files\Common Files\System\fr-FR\backup.exe

"C:\Program Files\Common Files\System\fr-FR\backup.exe" C:\Program Files\Common Files\System\fr-FR\

C:\Program Files\Common Files\System\it-IT\backup.exe

"C:\Program Files\Common Files\System\it-IT\backup.exe" C:\Program Files\Common Files\System\it-IT\

C:\Program Files\Common Files\System\ja-JP\backup.exe

"C:\Program Files\Common Files\System\ja-JP\backup.exe" C:\Program Files\Common Files\System\ja-JP\

C:\Program Files\Common Files\System\msadc\backup.exe

"C:\Program Files\Common Files\System\msadc\backup.exe" C:\Program Files\Common Files\System\msadc\

C:\Program Files\Common Files\System\msadc\de-DE\backup.exe

"C:\Program Files\Common Files\System\msadc\de-DE\backup.exe" C:\Program Files\Common Files\System\msadc\de-DE\

C:\Program Files\Common Files\System\msadc\en-US\backup.exe

"C:\Program Files\Common Files\System\msadc\en-US\backup.exe" C:\Program Files\Common Files\System\msadc\en-US\

C:\Program Files\Common Files\System\msadc\es-ES\backup.exe

"C:\Program Files\Common Files\System\msadc\es-ES\backup.exe" C:\Program Files\Common Files\System\msadc\es-ES\

C:\Program Files\Common Files\System\msadc\fr-FR\backup.exe

"C:\Program Files\Common Files\System\msadc\fr-FR\backup.exe" C:\Program Files\Common Files\System\msadc\fr-FR\

C:\Program Files\Common Files\System\msadc\it-IT\backup.exe

"C:\Program Files\Common Files\System\msadc\it-IT\backup.exe" C:\Program Files\Common Files\System\msadc\it-IT\

C:\Program Files\Common Files\System\msadc\ja-JP\data.exe

"C:\Program Files\Common Files\System\msadc\ja-JP\data.exe" C:\Program Files\Common Files\System\msadc\ja-JP\

C:\Program Files\Common Files\System\Ole DB\backup.exe

"C:\Program Files\Common Files\System\Ole DB\backup.exe" C:\Program Files\Common Files\System\Ole DB\

C:\Program Files\Common Files\System\Ole DB\de-DE\backup.exe

"C:\Program Files\Common Files\System\Ole DB\de-DE\backup.exe" C:\Program Files\Common Files\System\Ole DB\de-DE\

C:\Program Files\Common Files\System\Ole DB\en-US\backup.exe

"C:\Program Files\Common Files\System\Ole DB\en-US\backup.exe" C:\Program Files\Common Files\System\Ole DB\en-US\

C:\Program Files\Common Files\System\Ole DB\es-ES\backup.exe

"C:\Program Files\Common Files\System\Ole DB\es-ES\backup.exe" C:\Program Files\Common Files\System\Ole DB\es-ES\

C:\Program Files\Common Files\System\Ole DB\fr-FR\backup.exe

"C:\Program Files\Common Files\System\Ole DB\fr-FR\backup.exe" C:\Program Files\Common Files\System\Ole DB\fr-FR\

C:\Program Files\Common Files\System\Ole DB\it-IT\backup.exe

"C:\Program Files\Common Files\System\Ole DB\it-IT\backup.exe" C:\Program Files\Common Files\System\Ole DB\it-IT\

C:\Program Files\Common Files\System\Ole DB\ja-JP\backup.exe

"C:\Program Files\Common Files\System\Ole DB\ja-JP\backup.exe" C:\Program Files\Common Files\System\Ole DB\ja-JP\

C:\Program Files\Common Files\System\uk-UA\backup.exe

"C:\Program Files\Common Files\System\uk-UA\backup.exe" C:\Program Files\Common Files\System\uk-UA\

C:\Program Files\dotnet\backup.exe

"C:\Program Files\dotnet\backup.exe" C:\Program Files\dotnet\

C:\Program Files\dotnet\host\backup.exe

"C:\Program Files\dotnet\host\backup.exe" C:\Program Files\dotnet\host\

C:\Program Files\dotnet\host\fxr\backup.exe

"C:\Program Files\dotnet\host\fxr\backup.exe" C:\Program Files\dotnet\host\fxr\

C:\Program Files\dotnet\host\fxr\6.0.27\backup.exe

"C:\Program Files\dotnet\host\fxr\6.0.27\backup.exe" C:\Program Files\dotnet\host\fxr\6.0.27\

C:\Program Files\dotnet\host\fxr\7.0.16\backup.exe

"C:\Program Files\dotnet\host\fxr\7.0.16\backup.exe" C:\Program Files\dotnet\host\fxr\7.0.16\

C:\Program Files\dotnet\host\fxr\8.0.2\backup.exe

"C:\Program Files\dotnet\host\fxr\8.0.2\backup.exe" C:\Program Files\dotnet\host\fxr\8.0.2\

C:\Program Files\dotnet\shared\backup.exe

"C:\Program Files\dotnet\shared\backup.exe" C:\Program Files\dotnet\shared\

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.NETCore.App\backup.exe" C:\Program Files\dotnet\shared\Microsoft.NETCore.App\

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\backup.exe" C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System Restore.exe

"C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System Restore.exe" C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\backup.exe" C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\backup.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\backup.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\cs\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\cs\backup.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\cs\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\de\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\de\backup.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\de\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\es\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\es\backup.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\es\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\fr\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\fr\backup.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\fr\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\it\data.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\it\data.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\it\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\ja\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\ja\backup.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\ja\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\ko\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\ko\backup.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\ko\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\pl\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\pl\backup.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\pl\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\pt-BR\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\pt-BR\backup.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\pt-BR\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\ru\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\ru\backup.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\ru\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\tr\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\tr\backup.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\tr\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\zh-Hans\data.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\zh-Hans\data.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\zh-Hans\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\zh-Hant\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\zh-Hant\backup.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\zh-Hant\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\backup.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\cs\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\cs\backup.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\cs\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\de\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\de\backup.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\de\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\es\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\es\backup.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\es\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\fr\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\fr\backup.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\fr\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\it\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\it\backup.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\it\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\ja\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\ja\backup.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\ja\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\ko\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\ko\backup.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\ko\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\pl\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\pl\backup.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\pl\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\pt-BR\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\pt-BR\backup.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\pt-BR\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\ru\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\ru\backup.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\ru\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\tr\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\tr\backup.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\tr\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\zh-Hans\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\zh-Hans\backup.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\zh-Hans\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\zh-Hant\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\zh-Hant\backup.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\zh-Hant\

C:\Program Files (x86)\backup.exe

"C:\Program Files (x86)\backup.exe" C:\Program Files (x86)\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\backup.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\

C:\Program Files (x86)\Adobe\backup.exe

"C:\Program Files (x86)\Adobe\backup.exe" C:\Program Files (x86)\Adobe\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\cs\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\cs\backup.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\cs\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\de\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\de\backup.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\de\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Esl\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Esl\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Esl\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\es\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\es\backup.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\es\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\fr\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\fr\backup.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\fr\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroApp\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroApp\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroApp\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\it\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\it\backup.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\it\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroApp\ENU\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroApp\ENU\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroApp\ENU\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\ja\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\ja\backup.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\ja\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\ko\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\ko\backup.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\ko\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\locales\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\locales\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\locales\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\pl\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\pl\backup.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\pl\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroLayoutRecognizer\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroLayoutRecognizer\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroLayoutRecognizer\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\pt-BR\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\pt-BR\backup.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\pt-BR\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\ru\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\ru\backup.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\ru\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Browser\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Browser\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Browser\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\tr\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\tr\backup.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\tr\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Browser\WCChromeExtn\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Browser\WCChromeExtn\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Browser\WCChromeExtn\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\zh-Hans\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\zh-Hans\backup.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\zh-Hans\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\ENU\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\ENU\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\ENU\

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\zh-Hant\backup.exe

"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\zh-Hant\backup.exe" C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\zh-Hant\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Javascripts\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Javascripts\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Javascripts\

C:\Program Files\dotnet\swidtag\backup.exe

"C:\Program Files\dotnet\swidtag\backup.exe" C:\Program Files\dotnet\swidtag\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Legal\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Legal\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Legal\

C:\Program Files\Google\backup.exe

"C:\Program Files\Google\backup.exe" C:\Program Files\Google\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Legal\ENU\update.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Legal\ENU\update.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Legal\ENU\

C:\Program Files\Google\Chrome\backup.exe

"C:\Program Files\Google\Chrome\backup.exe" C:\Program Files\Google\Chrome\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Locale\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Locale\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Locale\

C:\Program Files\Google\Chrome\Application\backup.exe

"C:\Program Files\Google\Chrome\Application\backup.exe" C:\Program Files\Google\Chrome\Application\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Locale\en_US\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Locale\en_US\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Locale\en_US\

C:\Program Files\Google\Chrome\Application\110.0.5481.104\backup.exe

"C:\Program Files\Google\Chrome\Application\110.0.5481.104\backup.exe" C:\Program Files\Google\Chrome\Application\110.0.5481.104\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\

C:\Program Files\Google\Chrome\Application\110.0.5481.104\default_apps\backup.exe

"C:\Program Files\Google\Chrome\Application\110.0.5481.104\default_apps\backup.exe" C:\Program Files\Google\Chrome\Application\110.0.5481.104\default_apps\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\AcroForm\update.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\AcroForm\update.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\AcroForm\

C:\Program Files\Google\Chrome\Application\110.0.5481.104\Extensions\backup.exe

"C:\Program Files\Google\Chrome\Application\110.0.5481.104\Extensions\backup.exe" C:\Program Files\Google\Chrome\Application\110.0.5481.104\Extensions\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\AcroForm\PMP\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\AcroForm\PMP\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\AcroForm\PMP\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\Annotations\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\Annotations\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\Annotations\

C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\backup.exe

"C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\backup.exe" C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\

C:\Program Files\Google\Chrome\Application\110.0.5481.104\Locales\backup.exe

"C:\Program Files\Google\Chrome\Application\110.0.5481.104\Locales\backup.exe" C:\Program Files\Google\Chrome\Application\110.0.5481.104\Locales\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\Annotations\Stamps\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\Annotations\Stamps\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\Annotations\Stamps\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\Annotations\Stamps\ENU\System Restore.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\Annotations\Stamps\ENU\System Restore.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\Annotations\Stamps\ENU\

C:\Program Files\Google\Chrome\Application\110.0.5481.104\MEIPreload\backup.exe

"C:\Program Files\Google\Chrome\Application\110.0.5481.104\MEIPreload\backup.exe" C:\Program Files\Google\Chrome\Application\110.0.5481.104\MEIPreload\

C:\Program Files\Google\Chrome\Application\110.0.5481.104\VisualElements\backup.exe

"C:\Program Files\Google\Chrome\Application\110.0.5481.104\VisualElements\backup.exe" C:\Program Files\Google\Chrome\Application\110.0.5481.104\VisualElements\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\Multimedia\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\Multimedia\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\Multimedia\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\Multimedia\MPP\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\Multimedia\MPP\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\Multimedia\MPP\

C:\Program Files\Google\Chrome\Application\110.0.5481.104\WidevineCdm\backup.exe

"C:\Program Files\Google\Chrome\Application\110.0.5481.104\WidevineCdm\backup.exe" C:\Program Files\Google\Chrome\Application\110.0.5481.104\WidevineCdm\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\pi_brokers\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\pi_brokers\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\pi_brokers\

C:\Program Files\Google\Chrome\Application\110.0.5481.104\WidevineCdm\_platform_specific\backup.exe

"C:\Program Files\Google\Chrome\Application\110.0.5481.104\WidevineCdm\_platform_specific\backup.exe" C:\Program Files\Google\Chrome\Application\110.0.5481.104\WidevineCdm\_platform_specific\

C:\Program Files\Google\Chrome\Application\110.0.5481.104\WidevineCdm\_platform_specific\win_x64\backup.exe

"C:\Program Files\Google\Chrome\Application\110.0.5481.104\WidevineCdm\_platform_specific\win_x64\backup.exe" C:\Program Files\Google\Chrome\Application\110.0.5481.104\WidevineCdm\_platform_specific\win_x64\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins3d\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins3d\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins3d\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins3d\prc\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins3d\prc\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins3d\prc\

C:\Program Files\Google\Chrome\Application\SetupMetrics\backup.exe

"C:\Program Files\Google\Chrome\Application\SetupMetrics\backup.exe" C:\Program Files\Google\Chrome\Application\SetupMetrics\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Tracker\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Tracker\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Tracker\

C:\Program Files\Internet Explorer\backup.exe

"C:\Program Files\Internet Explorer\backup.exe" C:\Program Files\Internet Explorer\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\UIThemes\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\UIThemes\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\UIThemes\

C:\Program Files\Internet Explorer\de-DE\backup.exe

"C:\Program Files\Internet Explorer\de-DE\backup.exe" C:\Program Files\Internet Explorer\de-DE\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\

C:\Program Files\Internet Explorer\en-US\backup.exe

"C:\Program Files\Internet Explorer\en-US\backup.exe" C:\Program Files\Internet Explorer\en-US\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\

C:\Program Files\Internet Explorer\es-ES\backup.exe

"C:\Program Files\Internet Explorer\es-ES\backup.exe" C:\Program Files\Internet Explorer\es-ES\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\

C:\Program Files\Internet Explorer\fr-FR\backup.exe

"C:\Program Files\Internet Explorer\fr-FR\backup.exe" C:\Program Files\Internet Explorer\fr-FR\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\

C:\Program Files\Internet Explorer\images\backup.exe

"C:\Program Files\Internet Explorer\images\backup.exe" C:\Program Files\Internet Explorer\images\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\app\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\app\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\app\

C:\Program Files\Internet Explorer\it-IT\backup.exe

"C:\Program Files\Internet Explorer\it-IT\backup.exe" C:\Program Files\Internet Explorer\it-IT\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\app\dev\update.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\app\dev\update.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\app\dev\

C:\Program Files\Internet Explorer\ja-JP\update.exe

"C:\Program Files\Internet Explorer\ja-JP\update.exe" C:\Program Files\Internet Explorer\ja-JP\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\app\dev\cef\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\app\dev\cef\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\app\dev\cef\

C:\Program Files\Internet Explorer\SIGNUP\data.exe

"C:\Program Files\Internet Explorer\SIGNUP\data.exe" C:\Program Files\Internet Explorer\SIGNUP\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\app\dev\libs\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\app\dev\libs\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\app\dev\libs\

C:\Program Files\Internet Explorer\uk-UA\backup.exe

"C:\Program Files\Internet Explorer\uk-UA\backup.exe" C:\Program Files\Internet Explorer\uk-UA\

C:\Program Files\Java\backup.exe

"C:\Program Files\Java\backup.exe" C:\Program Files\Java\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\core\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\core\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\core\

C:\Program Files\Java\jdk-1.8\backup.exe

"C:\Program Files\Java\jdk-1.8\backup.exe" C:\Program Files\Java\jdk-1.8\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\core\dev\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\core\dev\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\core\dev\

C:\Program Files\Java\jdk-1.8\bin\backup.exe

"C:\Program Files\Java\jdk-1.8\bin\backup.exe" C:\Program Files\Java\jdk-1.8\bin\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\core\dev\cef\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\core\dev\cef\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\core\dev\cef\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\core\dev\libs\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\core\dev\libs\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\core\dev\libs\

C:\Program Files\Java\jdk-1.8\include\backup.exe

"C:\Program Files\Java\jdk-1.8\include\backup.exe" C:\Program Files\Java\jdk-1.8\include\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\files\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\files\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\files\

C:\Program Files\Java\jdk-1.8\include\win32\backup.exe

"C:\Program Files\Java\jdk-1.8\include\win32\backup.exe" C:\Program Files\Java\jdk-1.8\include\win32\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\files\dev\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\files\dev\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\files\dev\

C:\Program Files\Java\jdk-1.8\include\win32\bridge\System Restore.exe

"C:\Program Files\Java\jdk-1.8\include\win32\bridge\System Restore.exe" C:\Program Files\Java\jdk-1.8\include\win32\bridge\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\files\dev\cef\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\files\dev\cef\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\files\dev\cef\

C:\Program Files\Java\jdk-1.8\jre\backup.exe

"C:\Program Files\Java\jdk-1.8\jre\backup.exe" C:\Program Files\Java\jdk-1.8\jre\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\files\dev\libs\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\files\dev\libs\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\files\dev\libs\

C:\Program Files\Java\jdk-1.8\jre\bin\backup.exe

"C:\Program Files\Java\jdk-1.8\jre\bin\backup.exe" C:\Program Files\Java\jdk-1.8\jre\bin\

C:\Program Files\Java\jdk-1.8\jre\bin\dtplugin\update.exe

"C:\Program Files\Java\jdk-1.8\jre\bin\dtplugin\update.exe" C:\Program Files\Java\jdk-1.8\jre\bin\dtplugin\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\

C:\Program Files\Java\jdk-1.8\jre\bin\plugin2\backup.exe

"C:\Program Files\Java\jdk-1.8\jre\bin\plugin2\backup.exe" C:\Program Files\Java\jdk-1.8\jre\bin\plugin2\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\update.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\update.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\

C:\Program Files\Java\jdk-1.8\jre\bin\server\backup.exe

"C:\Program Files\Java\jdk-1.8\jre\bin\server\backup.exe" C:\Program Files\Java\jdk-1.8\jre\bin\server\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\hi_contrast\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\hi_contrast\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\hi_contrast\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\data.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\data.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\

C:\Program Files\Java\jdk-1.8\jre\legal\backup.exe

"C:\Program Files\Java\jdk-1.8\jre\legal\backup.exe" C:\Program Files\Java\jdk-1.8\jre\legal\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\

C:\Program Files\Java\jdk-1.8\jre\legal\javafx\backup.exe

"C:\Program Files\Java\jdk-1.8\jre\legal\javafx\backup.exe" C:\Program Files\Java\jdk-1.8\jre\legal\javafx\

C:\Program Files\Java\jdk-1.8\jre\legal\jdk\backup.exe

"C:\Program Files\Java\jdk-1.8\jre\legal\jdk\backup.exe" C:\Program Files\Java\jdk-1.8\jre\legal\jdk\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\hi_contrast\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\hi_contrast\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\hi_contrast\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\data.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\data.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\

C:\Program Files\Java\jdk-1.8\jre\lib\backup.exe

"C:\Program Files\Java\jdk-1.8\jre\lib\backup.exe" C:\Program Files\Java\jdk-1.8\jre\lib\

C:\Program Files\Java\jdk-1.8\jre\lib\amd64\update.exe

"C:\Program Files\Java\jdk-1.8\jre\lib\amd64\update.exe" C:\Program Files\Java\jdk-1.8\jre\lib\amd64\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\update.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\update.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\

C:\Program Files\Java\jdk-1.8\jre\lib\applet\backup.exe

"C:\Program Files\Java\jdk-1.8\jre\lib\applet\backup.exe" C:\Program Files\Java\jdk-1.8\jre\lib\applet\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\win8-scrollbar\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\win8-scrollbar\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\win8-scrollbar\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\win8-scrollbar\themes\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\win8-scrollbar\themes\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\win8-scrollbar\themes\

C:\Program Files\Java\jdk-1.8\jre\lib\cmm\backup.exe

"C:\Program Files\Java\jdk-1.8\jre\lib\cmm\backup.exe" C:\Program Files\Java\jdk-1.8\jre\lib\cmm\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\win8-scrollbar\themes\dark\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\win8-scrollbar\themes\dark\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\win8-scrollbar\themes\dark\

C:\Program Files\Java\jdk-1.8\jre\lib\deploy\backup.exe

"C:\Program Files\Java\jdk-1.8\jre\lib\deploy\backup.exe" C:\Program Files\Java\jdk-1.8\jre\lib\deploy\

C:\Program Files\Java\jdk-1.8\jre\lib\ext\backup.exe

"C:\Program Files\Java\jdk-1.8\jre\lib\ext\backup.exe" C:\Program Files\Java\jdk-1.8\jre\lib\ext\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\win-scrollbar\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\win-scrollbar\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\win-scrollbar\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\win-scrollbar\themes\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\win-scrollbar\themes\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\win-scrollbar\themes\

C:\Program Files\Java\jdk-1.8\jre\lib\fonts\backup.exe

"C:\Program Files\Java\jdk-1.8\jre\lib\fonts\backup.exe" C:\Program Files\Java\jdk-1.8\jre\lib\fonts\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\win-scrollbar\themes\dark\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\win-scrollbar\themes\dark\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\win-scrollbar\themes\dark\

C:\Program Files\Java\jdk-1.8\jre\lib\images\backup.exe

"C:\Program Files\Java\jdk-1.8\jre\lib\images\backup.exe" C:\Program Files\Java\jdk-1.8\jre\lib\images\

C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\backup.exe

"C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\backup.exe" C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\

C:\Program Files\Java\jdk-1.8\jre\lib\jfr\backup.exe

"C:\Program Files\Java\jdk-1.8\jre\lib\jfr\backup.exe" C:\Program Files\Java\jdk-1.8\jre\lib\jfr\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\

C:\Program Files\Java\jdk-1.8\jre\lib\management\update.exe

"C:\Program Files\Java\jdk-1.8\jre\lib\management\update.exe" C:\Program Files\Java\jdk-1.8\jre\lib\management\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\

C:\Program Files\Java\jdk-1.8\jre\lib\security\backup.exe

"C:\Program Files\Java\jdk-1.8\jre\lib\security\backup.exe" C:\Program Files\Java\jdk-1.8\jre\lib\security\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\

C:\Program Files\Java\jdk-1.8\jre\lib\security\policy\backup.exe

"C:\Program Files\Java\jdk-1.8\jre\lib\security\policy\backup.exe" C:\Program Files\Java\jdk-1.8\jre\lib\security\policy\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\ar-ae\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\ar-ae\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\ar-ae\

C:\Program Files\Java\jdk-1.8\jre\lib\security\policy\limited\backup.exe

"C:\Program Files\Java\jdk-1.8\jre\lib\security\policy\limited\backup.exe" C:\Program Files\Java\jdk-1.8\jre\lib\security\policy\limited\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\ca-es\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\ca-es\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\ca-es\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\cs-cz\data.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\cs-cz\data.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\cs-cz\

C:\Program Files\Java\jdk-1.8\jre\lib\security\policy\unlimited\backup.exe

"C:\Program Files\Java\jdk-1.8\jre\lib\security\policy\unlimited\backup.exe" C:\Program Files\Java\jdk-1.8\jre\lib\security\policy\unlimited\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\da-dk\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\da-dk\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\da-dk\

C:\Program Files\Java\jdk-1.8\legal\backup.exe

"C:\Program Files\Java\jdk-1.8\legal\backup.exe" C:\Program Files\Java\jdk-1.8\legal\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\de-de\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\de-de\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\de-de\

C:\Program Files\Java\jdk-1.8\legal\javafx\backup.exe

"C:\Program Files\Java\jdk-1.8\legal\javafx\backup.exe" C:\Program Files\Java\jdk-1.8\legal\javafx\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\en-ae\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\en-ae\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\en-ae\

C:\Program Files\Java\jdk-1.8\legal\jdk\backup.exe

"C:\Program Files\Java\jdk-1.8\legal\jdk\backup.exe" C:\Program Files\Java\jdk-1.8\legal\jdk\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\en-gb\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\en-gb\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\en-gb\

C:\Program Files\Java\jdk-1.8\lib\backup.exe

"C:\Program Files\Java\jdk-1.8\lib\backup.exe" C:\Program Files\Java\jdk-1.8\lib\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\en-il\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\en-il\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\en-il\

C:\Program Files\Java\jre-1.8\backup.exe

"C:\Program Files\Java\jre-1.8\backup.exe" C:\Program Files\Java\jre-1.8\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\es-es\System Restore.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\es-es\System Restore.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\es-es\

C:\Program Files\Java\jre-1.8\bin\backup.exe

"C:\Program Files\Java\jre-1.8\bin\backup.exe" C:\Program Files\Java\jre-1.8\bin\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\eu-es\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\eu-es\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\eu-es\

C:\Program Files\Java\jre-1.8\bin\dtplugin\update.exe

"C:\Program Files\Java\jre-1.8\bin\dtplugin\update.exe" C:\Program Files\Java\jre-1.8\bin\dtplugin\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\fi-fi\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\fi-fi\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\fi-fi\

C:\Program Files\Java\jre-1.8\bin\plugin2\backup.exe

"C:\Program Files\Java\jre-1.8\bin\plugin2\backup.exe" C:\Program Files\Java\jre-1.8\bin\plugin2\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\fr-fr\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\fr-fr\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\fr-fr\

C:\Program Files\Java\jre-1.8\bin\server\backup.exe

"C:\Program Files\Java\jre-1.8\bin\server\backup.exe" C:\Program Files\Java\jre-1.8\bin\server\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\fr-ma\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\fr-ma\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\fr-ma\

C:\Program Files\Java\jre-1.8\legal\backup.exe

"C:\Program Files\Java\jre-1.8\legal\backup.exe" C:\Program Files\Java\jre-1.8\legal\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\he-il\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\he-il\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\he-il\

C:\Program Files\Java\jre-1.8\legal\javafx\backup.exe

"C:\Program Files\Java\jre-1.8\legal\javafx\backup.exe" C:\Program Files\Java\jre-1.8\legal\javafx\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\hr-hr\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\hr-hr\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\hr-hr\

C:\Program Files\Java\jre-1.8\legal\jdk\backup.exe

"C:\Program Files\Java\jre-1.8\legal\jdk\backup.exe" C:\Program Files\Java\jre-1.8\legal\jdk\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\hu-hu\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\hu-hu\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\hu-hu\

C:\Program Files\Java\jre-1.8\lib\backup.exe

"C:\Program Files\Java\jre-1.8\lib\backup.exe" C:\Program Files\Java\jre-1.8\lib\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\it-it\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\it-it\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\it-it\

C:\Program Files\Java\jre-1.8\lib\amd64\backup.exe

"C:\Program Files\Java\jre-1.8\lib\amd64\backup.exe" C:\Program Files\Java\jre-1.8\lib\amd64\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\ja-jp\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\ja-jp\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\ja-jp\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\ko-kr\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\ko-kr\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\ko-kr\

C:\Program Files\Java\jre-1.8\lib\applet\data.exe

"C:\Program Files\Java\jre-1.8\lib\applet\data.exe" C:\Program Files\Java\jre-1.8\lib\applet\

C:\Program Files\Java\jre-1.8\lib\cmm\backup.exe

"C:\Program Files\Java\jre-1.8\lib\cmm\backup.exe" C:\Program Files\Java\jre-1.8\lib\cmm\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\nb-no\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\nb-no\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\nb-no\

C:\Program Files\Java\jre-1.8\lib\deploy\backup.exe

"C:\Program Files\Java\jre-1.8\lib\deploy\backup.exe" C:\Program Files\Java\jre-1.8\lib\deploy\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\nl-nl\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\nl-nl\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\nl-nl\

C:\Program Files\Java\jre-1.8\lib\ext\backup.exe

"C:\Program Files\Java\jre-1.8\lib\ext\backup.exe" C:\Program Files\Java\jre-1.8\lib\ext\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\pl-pl\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\pl-pl\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\pl-pl\

C:\Program Files\Java\jre-1.8\lib\fonts\backup.exe

"C:\Program Files\Java\jre-1.8\lib\fonts\backup.exe" C:\Program Files\Java\jre-1.8\lib\fonts\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\pt-br\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\pt-br\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\pt-br\

C:\Program Files\Java\jre-1.8\lib\images\backup.exe

"C:\Program Files\Java\jre-1.8\lib\images\backup.exe" C:\Program Files\Java\jre-1.8\lib\images\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\root\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\root\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\root\

C:\Program Files\Java\jre-1.8\lib\images\cursors\backup.exe

"C:\Program Files\Java\jre-1.8\lib\images\cursors\backup.exe" C:\Program Files\Java\jre-1.8\lib\images\cursors\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\ro-ro\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\ro-ro\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\ro-ro\

C:\Program Files\Java\jre-1.8\lib\jfr\backup.exe

"C:\Program Files\Java\jre-1.8\lib\jfr\backup.exe" C:\Program Files\Java\jre-1.8\lib\jfr\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\ru-ru\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\ru-ru\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\ru-ru\

C:\Program Files\Java\jre-1.8\lib\management\backup.exe

"C:\Program Files\Java\jre-1.8\lib\management\backup.exe" C:\Program Files\Java\jre-1.8\lib\management\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\sk-sk\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\sk-sk\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\sk-sk\

C:\Program Files\Java\jre-1.8\lib\security\backup.exe

"C:\Program Files\Java\jre-1.8\lib\security\backup.exe" C:\Program Files\Java\jre-1.8\lib\security\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\sl-si\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\sl-si\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\sl-si\

C:\Program Files\Java\jre-1.8\lib\security\policy\backup.exe

"C:\Program Files\Java\jre-1.8\lib\security\policy\backup.exe" C:\Program Files\Java\jre-1.8\lib\security\policy\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\sl-sl\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\sl-sl\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\sl-sl\

C:\Program Files\Java\jre-1.8\lib\security\policy\limited\backup.exe

"C:\Program Files\Java\jre-1.8\lib\security\policy\limited\backup.exe" C:\Program Files\Java\jre-1.8\lib\security\policy\limited\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\sv-se\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\sv-se\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\sv-se\

C:\Program Files\Java\jre-1.8\lib\security\policy\unlimited\backup.exe

"C:\Program Files\Java\jre-1.8\lib\security\policy\unlimited\backup.exe" C:\Program Files\Java\jre-1.8\lib\security\policy\unlimited\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\tr-tr\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\tr-tr\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\tr-tr\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\uk-ua\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\uk-ua\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\uk-ua\

C:\Program Files\Java\jre8\backup.exe

"C:\Program Files\Java\jre8\backup.exe" C:\Program Files\Java\jre8\

C:\Program Files\Java\jre8\lib\backup.exe

"C:\Program Files\Java\jre8\lib\backup.exe" C:\Program Files\Java\jre8\lib\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\zh-cn\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\zh-cn\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\zh-cn\

C:\Program Files\Microsoft Office\backup.exe

"C:\Program Files\Microsoft Office\backup.exe" C:\Program Files\Microsoft Office\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\zh-tw\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\zh-tw\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\zh-tw\

C:\Program Files\Microsoft Office\Office16\backup.exe

"C:\Program Files\Microsoft Office\Office16\backup.exe" C:\Program Files\Microsoft Office\Office16\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app-api\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app-api\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app-api\

C:\Program Files\Microsoft Office\PackageManifests\backup.exe

"C:\Program Files\Microsoft Office\PackageManifests\backup.exe" C:\Program Files\Microsoft Office\PackageManifests\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app-api\dev\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app-api\dev\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app-api\dev\

C:\Program Files\Microsoft Office\root\backup.exe

"C:\Program Files\Microsoft Office\root\backup.exe" C:\Program Files\Microsoft Office\root\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\

C:\Program Files\Microsoft Office\root\Client\backup.exe

"C:\Program Files\Microsoft Office\root\Client\backup.exe" C:\Program Files\Microsoft Office\root\Client\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\

C:\Program Files\Microsoft Office\root\Document Themes 16\backup.exe

"C:\Program Files\Microsoft Office\root\Document Themes 16\backup.exe" C:\Program Files\Microsoft Office\root\Document Themes 16\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\ar-ae\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\ar-ae\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\ar-ae\

C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\backup.exe

"C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\backup.exe" C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\

C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\backup.exe

"C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\backup.exe" C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\ca-es\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\ca-es\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\ca-es\

C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\backup.exe

"C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\backup.exe" C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\cs-cz\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\cs-cz\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\cs-cz\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\da-dk\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\da-dk\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\da-dk\

C:\Program Files\Microsoft Office\root\fre\backup.exe

"C:\Program Files\Microsoft Office\root\fre\backup.exe" C:\Program Files\Microsoft Office\root\fre\

C:\Program Files\Microsoft Office\root\Integration\backup.exe

"C:\Program Files\Microsoft Office\root\Integration\backup.exe" C:\Program Files\Microsoft Office\root\Integration\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\de-de\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\de-de\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\de-de\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\en-ae\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\en-ae\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\en-ae\

C:\Program Files\Microsoft Office\root\Integration\Addons\backup.exe

"C:\Program Files\Microsoft Office\root\Integration\Addons\backup.exe" C:\Program Files\Microsoft Office\root\Integration\Addons\

C:\Program Files\Microsoft Office\root\Licenses\backup.exe

"C:\Program Files\Microsoft Office\root\Licenses\backup.exe" C:\Program Files\Microsoft Office\root\Licenses\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\en-gb\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\en-gb\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\en-gb\

C:\Program Files\Microsoft Office\root\Licenses16\backup.exe

"C:\Program Files\Microsoft Office\root\Licenses16\backup.exe" C:\Program Files\Microsoft Office\root\Licenses16\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\en-il\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\en-il\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\en-il\

C:\Users\backup.exe

C:\Users\backup.exe C:\Users\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\es-es\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\es-es\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\es-es\

C:\Program Files\Microsoft Office\root\loc\update.exe

"C:\Program Files\Microsoft Office\root\loc\update.exe" C:\Program Files\Microsoft Office\root\loc\

C:\Program Files (x86)\Common Files\backup.exe

"C:\Program Files (x86)\Common Files\backup.exe" C:\Program Files (x86)\Common Files\

C:\Users\Admin\backup.exe

C:\Users\Admin\backup.exe C:\Users\Admin\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\eu-es\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\eu-es\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\eu-es\

C:\Program Files\Microsoft Office\root\Office15\backup.exe

"C:\Program Files\Microsoft Office\root\Office15\backup.exe" C:\Program Files\Microsoft Office\root\Office15\

C:\Program Files (x86)\Common Files\Adobe\backup.exe

"C:\Program Files (x86)\Common Files\Adobe\backup.exe" C:\Program Files (x86)\Common Files\Adobe\

C:\Users\Admin\3D Objects\backup.exe

"C:\Users\Admin\3D Objects\backup.exe" C:\Users\Admin\3D Objects\

C:\Program Files\Microsoft Office\root\Office16\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\backup.exe" C:\Program Files\Microsoft Office\root\Office16\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\fi-fi\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\fi-fi\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\fi-fi\

C:\Program Files (x86)\Common Files\Adobe\Acrobat\data.exe

"C:\Program Files (x86)\Common Files\Adobe\Acrobat\data.exe" C:\Program Files (x86)\Common Files\Adobe\Acrobat\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\

C:\Users\Admin\Contacts\backup.exe

C:\Users\Admin\Contacts\backup.exe C:\Users\Admin\Contacts\

C:\Program Files\Microsoft Office\root\Office16\1033\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\1033\backup.exe" C:\Program Files\Microsoft Office\root\Office16\1033\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\Font\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\Font\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\Font\

C:\Program Files (x86)\Common Files\Adobe\ARM\backup.exe

"C:\Program Files (x86)\Common Files\Adobe\ARM\backup.exe" C:\Program Files (x86)\Common Files\Adobe\ARM\

C:\Users\Admin\Desktop\backup.exe

C:\Users\Admin\Desktop\backup.exe C:\Users\Admin\Desktop\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\fr-fr\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\fr-fr\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\fr-fr\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\fr-ma\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\fr-ma\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\fr-ma\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\Font\PFM\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\Font\PFM\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\Font\PFM\

C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\backup.exe

"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\backup.exe" C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\

C:\Users\Admin\Documents\backup.exe

C:\Users\Admin\Documents\backup.exe C:\Users\Admin\Documents\

C:\Program Files\Microsoft Office\root\Office16\1033\Bibliography\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\1033\Bibliography\backup.exe" C:\Program Files\Microsoft Office\root\Office16\1033\Bibliography\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\he-il\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\he-il\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\he-il\

C:\Program Files (x86)\Common Files\Adobe\HelpCfg\System Restore.exe

"C:\Program Files (x86)\Common Files\Adobe\HelpCfg\System Restore.exe" C:\Program Files (x86)\Common Files\Adobe\HelpCfg\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\SaslPrep\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\SaslPrep\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\SaslPrep\

C:\Users\Admin\Documents\OneNote Notebooks\backup.exe

"C:\Users\Admin\Documents\OneNote Notebooks\backup.exe" C:\Users\Admin\Documents\OneNote Notebooks\

C:\Program Files\Microsoft Office\root\Office16\1033\DataServices\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\1033\DataServices\backup.exe" C:\Program Files\Microsoft Office\root\Office16\1033\DataServices\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\hr-hr\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\hr-hr\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\hr-hr\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\

C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\backup.exe" C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\

C:\Program Files (x86)\Common Files\Adobe\HelpCfg\en_US\backup.exe

"C:\Program Files (x86)\Common Files\Adobe\HelpCfg\en_US\backup.exe" C:\Program Files (x86)\Common Files\Adobe\HelpCfg\en_US\

C:\Users\Admin\Documents\OneNote Notebooks\My Notebook\backup.exe

"C:\Users\Admin\Documents\OneNote Notebooks\My Notebook\backup.exe" C:\Users\Admin\Documents\OneNote Notebooks\My Notebook\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\hu-hu\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\hu-hu\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\hu-hu\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\Unicode\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\Unicode\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\Unicode\

C:\Program Files (x86)\Common Files\Adobe\Reader\backup.exe

"C:\Program Files (x86)\Common Files\Adobe\Reader\backup.exe" C:\Program Files (x86)\Common Files\Adobe\Reader\

C:\Program Files\Microsoft Office\root\Office16\1036\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\1036\backup.exe" C:\Program Files\Microsoft Office\root\Office16\1036\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\it-it\update.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\it-it\update.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\it-it\

C:\Users\Admin\Downloads\backup.exe

C:\Users\Admin\Downloads\backup.exe C:\Users\Admin\Downloads\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\Unicode\ICU\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\Unicode\ICU\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\Unicode\ICU\

C:\Program Files (x86)\Common Files\Adobe\Reader\DC\data.exe

"C:\Program Files (x86)\Common Files\Adobe\Reader\DC\data.exe" C:\Program Files (x86)\Common Files\Adobe\Reader\DC\

C:\Program Files\Microsoft Office\root\Office16\3082\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\3082\backup.exe" C:\Program Files\Microsoft Office\root\Office16\3082\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\ja-jp\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\ja-jp\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\ja-jp\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\Unicode\Mappings\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\Unicode\Mappings\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\Unicode\Mappings\

C:\Users\Admin\Favorites\backup.exe

C:\Users\Admin\Favorites\backup.exe C:\Users\Admin\Favorites\

C:\Program Files\Microsoft Office\root\Office16\ADDINS\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\ADDINS\backup.exe" C:\Program Files\Microsoft Office\root\Office16\ADDINS\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\ko-kr\System Restore.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\ko-kr\System Restore.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\ko-kr\

C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\backup.exe

"C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\backup.exe" C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\

C:\Users\Admin\Links\backup.exe

C:\Users\Admin\Links\backup.exe C:\Users\Admin\Links\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\Unicode\Mappings\Adobe\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\Unicode\Mappings\Adobe\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\Unicode\Mappings\Adobe\

C:\Program Files\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\backup.exe" C:\Program Files\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\nb-no\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\nb-no\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\nb-no\

C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\backup.exe

"C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\backup.exe" C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\

C:\Users\Admin\Music\update.exe

C:\Users\Admin\Music\update.exe C:\Users\Admin\Music\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\Unicode\Mappings\Mac\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\Unicode\Mappings\Mac\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\Unicode\Mappings\Mac\

C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\System Restore.exe

"C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\System Restore.exe" C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\nl-nl\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\nl-nl\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\nl-nl\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\Unicode\Mappings\win\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\Unicode\Mappings\win\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\Unicode\Mappings\win\

C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\backup.exe

"C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\backup.exe" C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\

C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\backup.exe" C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\

C:\Users\Admin\OneDrive\backup.exe

C:\Users\Admin\OneDrive\backup.exe C:\Users\Admin\OneDrive\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\pl-pl\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\pl-pl\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\pl-pl\

C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Adobe\data.exe

"C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Adobe\data.exe" C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Adobe\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Setup Files\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Setup Files\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Setup Files\

C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\update.exe

"C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\update.exe" C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\

C:\Users\Admin\Pictures\backup.exe

C:\Users\Admin\Pictures\backup.exe C:\Users\Admin\Pictures\

C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\backup.exe

"C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\backup.exe" C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Setup Files\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Setup Files\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Setup Files\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\pt-br\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\pt-br\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\pt-br\

C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power View Excel Add-in\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power View Excel Add-in\backup.exe" C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power View Excel Add-in\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\root\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\root\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\root\

C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\backup.exe

"C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\backup.exe" C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\

C:\Users\Admin\Pictures\Camera Roll\backup.exe

"C:\Users\Admin\Pictures\Camera Roll\backup.exe" C:\Users\Admin\Pictures\Camera Roll\

C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\backup.exe" C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\ro-ro\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\ro-ro\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\ro-ro\

C:\Users\Admin\Pictures\Saved Pictures\backup.exe

"C:\Users\Admin\Pictures\Saved Pictures\backup.exe" C:\Users\Admin\Pictures\Saved Pictures\

C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Abbreviations\System Restore.exe

"C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Abbreviations\System Restore.exe" C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Abbreviations\

C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Cartridges\System Restore.exe

"C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Cartridges\System Restore.exe" C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Cartridges\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\ru-ru\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\ru-ru\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\ru-ru\

C:\Users\Admin\Saved Games\data.exe

"C:\Users\Admin\Saved Games\data.exe" C:\Users\Admin\Saved Games\

C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Abbreviations\en_CA\System Restore.exe

"C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Abbreviations\en_CA\System Restore.exe" C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Abbreviations\en_CA\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\sk-sk\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\sk-sk\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\sk-sk\

C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\en\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\en\backup.exe" C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\en\

C:\Users\Admin\Searches\backup.exe

C:\Users\Admin\Searches\backup.exe C:\Users\Admin\Searches\

C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Abbreviations\en_GB\backup.exe

"C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Abbreviations\en_GB\backup.exe" C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Abbreviations\en_GB\

C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Resources\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Resources\backup.exe" C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Resources\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\sl-si\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\sl-si\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\sl-si\

C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Abbreviations\en_US\backup.exe

"C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Abbreviations\en_US\backup.exe" C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Abbreviations\en_US\

C:\Users\Admin\Videos\backup.exe

C:\Users\Admin\Videos\backup.exe C:\Users\Admin\Videos\

C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Resources\1033\System Restore.exe

"C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Resources\1033\System Restore.exe" C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Resources\1033\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\sl-sl\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\sl-sl\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\sl-sl\

C:\Users\Public\backup.exe

C:\Users\Public\backup.exe C:\Users\Public\

C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Dictionaries\backup.exe

"C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Dictionaries\backup.exe" C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Dictionaries\

C:\Program Files\Microsoft Office\root\Office16\AugLoop\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\AugLoop\backup.exe" C:\Program Files\Microsoft Office\root\Office16\AugLoop\

C:\Users\Public\Documents\backup.exe

C:\Users\Public\Documents\backup.exe C:\Users\Public\Documents\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\sv-se\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\sv-se\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\sv-se\

C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Dictionaries\en_CA\backup.exe

"C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Dictionaries\en_CA\backup.exe" C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Dictionaries\en_CA\

C:\Program Files\Microsoft Office\root\Office16\Bibliography\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\Bibliography\backup.exe" C:\Program Files\Microsoft Office\root\Office16\Bibliography\

C:\Users\Public\Downloads\backup.exe

C:\Users\Public\Downloads\backup.exe C:\Users\Public\Downloads\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\tr-tr\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\tr-tr\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\tr-tr\

C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Dictionaries\en_GB\backup.exe

"C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Dictionaries\en_GB\backup.exe" C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Dictionaries\en_GB\

C:\Users\Public\Music\backup.exe

C:\Users\Public\Music\backup.exe C:\Users\Public\Music\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\uk-ua\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\uk-ua\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\uk-ua\

C:\Program Files\Microsoft Office\root\Office16\Bibliography\Sort\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\Bibliography\Sort\backup.exe" C:\Program Files\Microsoft Office\root\Office16\Bibliography\Sort\

C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Dictionaries\en_US\backup.exe

"C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Dictionaries\en_US\backup.exe" C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Dictionaries\en_US\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\zh-cn\System Restore.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\zh-cn\System Restore.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\zh-cn\

C:\Users\Public\Pictures\backup.exe

C:\Users\Public\Pictures\backup.exe C:\Users\Public\Pictures\

C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\backup.exe" C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\

C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\SupplementalDictionaries\backup.exe

"C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\SupplementalDictionaries\backup.exe" C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\SupplementalDictionaries\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\zh-tw\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\zh-tw\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\zh-tw\

C:\Users\Public\Videos\backup.exe

C:\Users\Public\Videos\backup.exe C:\Users\Public\Videos\

C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\SupplementalDictionaries\en_CA\backup.exe

"C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\SupplementalDictionaries\en_CA\backup.exe" C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\SupplementalDictionaries\en_CA\

C:\Program Files\Microsoft Office\root\Office16\BORDERS\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\BORDERS\backup.exe" C:\Program Files\Microsoft Office\root\Office16\BORDERS\

C:\Windows\backup.exe

C:\Windows\backup.exe C:\Windows\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\

C:\Windows\addins\backup.exe

C:\Windows\addins\backup.exe C:\Windows\addins\

C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\SupplementalDictionaries\en_GB\update.exe

"C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\SupplementalDictionaries\en_GB\update.exe" C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\SupplementalDictionaries\en_GB\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\

C:\Program Files\Microsoft Office\root\Office16\Configuration\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\Configuration\backup.exe" C:\Program Files\Microsoft Office\root\Office16\Configuration\

C:\Windows\appcompat\backup.exe

C:\Windows\appcompat\backup.exe C:\Windows\appcompat\

C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\SupplementalDictionaries\en_US\backup.exe

"C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\SupplementalDictionaries\en_US\backup.exe" C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\SupplementalDictionaries\en_US\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\

C:\Windows\appcompat\appraiser\backup.exe

C:\Windows\appcompat\appraiser\backup.exe C:\Windows\appcompat\appraiser\

C:\Program Files\Microsoft Office\root\Office16\Document Parts\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\Document Parts\backup.exe" C:\Program Files\Microsoft Office\root\Office16\Document Parts\

C:\Program Files (x86)\Common Files\Java\update.exe

"C:\Program Files (x86)\Common Files\Java\update.exe" C:\Program Files (x86)\Common Files\Java\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\ar-ae\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\ar-ae\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\ar-ae\

C:\Windows\appcompat\appraiser\Telemetry\backup.exe

C:\Windows\appcompat\appraiser\Telemetry\backup.exe C:\Windows\appcompat\appraiser\Telemetry\

C:\Program Files\Microsoft Office\root\Office16\Document Parts\1033\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\Document Parts\1033\backup.exe" C:\Program Files\Microsoft Office\root\Office16\Document Parts\1033\

C:\Program Files (x86)\Common Files\Java\Java Update\backup.exe

"C:\Program Files (x86)\Common Files\Java\Java Update\backup.exe" C:\Program Files (x86)\Common Files\Java\Java Update\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\ca-es\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\ca-es\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\ca-es\

C:\Windows\appcompat\encapsulation\backup.exe

C:\Windows\appcompat\encapsulation\backup.exe C:\Windows\appcompat\encapsulation\

C:\Program Files\Microsoft Office\root\Office16\Document Parts\1033\16\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\Document Parts\1033\16\backup.exe" C:\Program Files\Microsoft Office\root\Office16\Document Parts\1033\16\

C:\Program Files (x86)\Common Files\Microsoft Shared\backup.exe

"C:\Program Files (x86)\Common Files\Microsoft Shared\backup.exe" C:\Program Files (x86)\Common Files\Microsoft Shared\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\cs-cz\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\cs-cz\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\cs-cz\

C:\Program Files (x86)\Common Files\Microsoft Shared\DAO\backup.exe

"C:\Program Files (x86)\Common Files\Microsoft Shared\DAO\backup.exe" C:\Program Files (x86)\Common Files\Microsoft Shared\DAO\

C:\Program Files\Microsoft Office\root\Office16\FPA_f14\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\FPA_f14\backup.exe" C:\Program Files\Microsoft Office\root\Office16\FPA_f14\

C:\Windows\appcompat\Programs\backup.exe

C:\Windows\appcompat\Programs\backup.exe C:\Windows\appcompat\Programs\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\da-dk\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\da-dk\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\da-dk\

C:\Program Files (x86)\Common Files\Microsoft Shared\Filters\backup.exe

"C:\Program Files (x86)\Common Files\Microsoft Shared\Filters\backup.exe" C:\Program Files (x86)\Common Files\Microsoft Shared\Filters\

C:\Windows\apppatch\backup.exe

C:\Windows\apppatch\backup.exe C:\Windows\apppatch\

C:\Program Files\Microsoft Office\root\Office16\FPA_f2\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\FPA_f2\backup.exe" C:\Program Files\Microsoft Office\root\Office16\FPA_f2\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\de-de\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\de-de\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\de-de\

C:\Windows\apppatch\AppPatch64\backup.exe

C:\Windows\apppatch\AppPatch64\backup.exe C:\Windows\apppatch\AppPatch64\

C:\Program Files\Microsoft Office\root\Office16\FPA_f3\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\FPA_f3\backup.exe" C:\Program Files\Microsoft Office\root\Office16\FPA_f3\

C:\Program Files (x86)\Common Files\Microsoft Shared\ink\backup.exe

"C:\Program Files (x86)\Common Files\Microsoft Shared\ink\backup.exe" C:\Program Files (x86)\Common Files\Microsoft Shared\ink\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\en-ae\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\en-ae\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\en-ae\

C:\Windows\apppatch\Custom\backup.exe

C:\Windows\apppatch\Custom\backup.exe C:\Windows\apppatch\Custom\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\en-gb\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\en-gb\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\en-gb\

C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\backup.exe

"C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\backup.exe" C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\

C:\Program Files\Microsoft Office\root\Office16\FPA_f33\System Restore.exe

"C:\Program Files\Microsoft Office\root\Office16\FPA_f33\System Restore.exe" C:\Program Files\Microsoft Office\root\Office16\FPA_f33\

C:\Windows\apppatch\Custom\Custom64\backup.exe

C:\Windows\apppatch\Custom\Custom64\backup.exe C:\Windows\apppatch\Custom\Custom64\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\en-il\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\en-il\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\en-il\

C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\backup.exe

"C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\backup.exe" C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\

C:\Program Files\Microsoft Office\root\Office16\FPA_f4\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\FPA_f4\backup.exe" C:\Program Files\Microsoft Office\root\Office16\FPA_f4\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\es-es\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\es-es\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\es-es\

C:\Windows\apppatch\CustomSDB\backup.exe

C:\Windows\apppatch\CustomSDB\backup.exe C:\Windows\apppatch\CustomSDB\

C:\Program Files\Microsoft Office\root\Office16\FPA_f7\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\FPA_f7\backup.exe" C:\Program Files\Microsoft Office\root\Office16\FPA_f7\

C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\backup.exe

"C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\backup.exe" C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\eu-es\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\eu-es\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\eu-es\

C:\Windows\apppatch\de-DE\backup.exe

C:\Windows\apppatch\de-DE\backup.exe C:\Windows\apppatch\de-DE\

C:\Program Files\Microsoft Office\root\Office16\FPA_FA000000006\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\FPA_FA000000006\backup.exe" C:\Program Files\Microsoft Office\root\Office16\FPA_FA000000006\

C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\backup.exe

"C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\backup.exe" C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\

C:\Windows\apppatch\en-US\backup.exe

C:\Windows\apppatch\en-US\backup.exe C:\Windows\apppatch\en-US\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\fi-fi\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\fi-fi\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\fi-fi\

C:\Program Files\Microsoft Office\root\Office16\FPA_FA000000008\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\FPA_FA000000008\backup.exe" C:\Program Files\Microsoft Office\root\Office16\FPA_FA000000008\

C:\Program Files (x86)\Common Files\Microsoft Shared\ink\HWRCustomization\backup.exe

"C:\Program Files (x86)\Common Files\Microsoft Shared\ink\HWRCustomization\backup.exe" C:\Program Files (x86)\Common Files\Microsoft Shared\ink\HWRCustomization\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\fr-fr\System Restore.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\fr-fr\System Restore.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\fr-fr\

C:\Windows\apppatch\es-ES\backup.exe

C:\Windows\apppatch\es-ES\backup.exe C:\Windows\apppatch\es-ES\

C:\Program Files\Microsoft Office\root\Office16\FPA_FA000000009\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\FPA_FA000000009\backup.exe" C:\Program Files\Microsoft Office\root\Office16\FPA_FA000000009\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\fr-ma\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\fr-ma\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\fr-ma\

C:\Program Files\Microsoft Office\root\Office16\FPA_FA000000011\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\FPA_FA000000011\backup.exe" C:\Program Files\Microsoft Office\root\Office16\FPA_FA000000011\

C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\backup.exe

"C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\backup.exe" C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\

C:\Windows\apppatch\fr-FR\backup.exe

C:\Windows\apppatch\fr-FR\backup.exe C:\Windows\apppatch\fr-FR\

C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\backup.exe

"C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\backup.exe" C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\

C:\Program Files\Microsoft Office\root\Office16\FPA_FA000000050\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\FPA_FA000000050\backup.exe" C:\Program Files\Microsoft Office\root\Office16\FPA_FA000000050\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\he-il\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\he-il\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\he-il\

C:\Windows\apppatch\it-IT\backup.exe

C:\Windows\apppatch\it-IT\backup.exe C:\Windows\apppatch\it-IT\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\hr-hr\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\hr-hr\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\hr-hr\

C:\Program Files\Microsoft Office\root\Office16\FPA_w1\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\FPA_w1\backup.exe" C:\Program Files\Microsoft Office\root\Office16\FPA_w1\

C:\Program Files (x86)\Common Files\Microsoft Shared\ink\uk-UA\backup.exe

"C:\Program Files (x86)\Common Files\Microsoft Shared\ink\uk-UA\backup.exe" C:\Program Files (x86)\Common Files\Microsoft Shared\ink\uk-UA\

C:\Windows\apppatch\ja-JP\System Restore.exe

"C:\Windows\apppatch\ja-JP\System Restore.exe" C:\Windows\apppatch\ja-JP\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\hu-hu\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\hu-hu\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\hu-hu\

C:\Program Files\Microsoft Office\root\Office16\Library\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\Library\backup.exe" C:\Program Files\Microsoft Office\root\Office16\Library\

C:\Program Files (x86)\Common Files\Microsoft Shared\MSEnv\backup.exe

"C:\Program Files (x86)\Common Files\Microsoft Shared\MSEnv\backup.exe" C:\Program Files (x86)\Common Files\Microsoft Shared\MSEnv\

C:\Windows\AppReadiness\backup.exe

C:\Windows\AppReadiness\backup.exe C:\Windows\AppReadiness\

C:\Program Files (x86)\Common Files\Microsoft Shared\MSEnv\PublicAssemblies\backup.exe

"C:\Program Files (x86)\Common Files\Microsoft Shared\MSEnv\PublicAssemblies\backup.exe" C:\Program Files (x86)\Common Files\Microsoft Shared\MSEnv\PublicAssemblies\

C:\Program Files\Microsoft Office\root\Office16\Library\Analysis\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\Library\Analysis\backup.exe" C:\Program Files\Microsoft Office\root\Office16\Library\Analysis\

C:\Windows\assembly\backup.exe

C:\Windows\assembly\backup.exe C:\Windows\assembly\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\it-it\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\it-it\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\it-it\

C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\backup.exe

"C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\backup.exe" C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\

C:\Program Files\Microsoft Office\root\Office16\Library\SOLVER\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\Library\SOLVER\backup.exe" C:\Program Files\Microsoft Office\root\Office16\Library\SOLVER\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\ja-jp\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\ja-jp\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\ja-jp\

C:\Windows\assembly\GAC\backup.exe

C:\Windows\assembly\GAC\backup.exe C:\Windows\assembly\GAC\

C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\backup.exe

"C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\backup.exe" C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\ko-kr\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\ko-kr\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\ko-kr\

C:\Windows\assembly\GAC\ADODB\backup.exe

C:\Windows\assembly\GAC\ADODB\backup.exe C:\Windows\assembly\GAC\ADODB\

C:\Program Files\Microsoft Office\root\Office16\LivePersonaCard\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\LivePersonaCard\backup.exe" C:\Program Files\Microsoft Office\root\Office16\LivePersonaCard\

C:\Program Files (x86)\Common Files\Microsoft Shared\Stationery\backup.exe

"C:\Program Files (x86)\Common Files\Microsoft Shared\Stationery\backup.exe" C:\Program Files (x86)\Common Files\Microsoft Shared\Stationery\

C:\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\backup.exe

C:\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\backup.exe C:\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\nb-no\data.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\nb-no\data.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\nb-no\

C:\Program Files\Microsoft Office\root\Office16\LivePersonaCard\images\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\LivePersonaCard\images\backup.exe" C:\Program Files\Microsoft Office\root\Office16\LivePersonaCard\images\

C:\Program Files (x86)\Common Files\Microsoft Shared\TextConv\backup.exe

"C:\Program Files (x86)\Common Files\Microsoft Shared\TextConv\backup.exe" C:\Program Files (x86)\Common Files\Microsoft Shared\TextConv\

C:\Windows\assembly\GAC\Extensibility\backup.exe

C:\Windows\assembly\GAC\Extensibility\backup.exe C:\Windows\assembly\GAC\Extensibility\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\nl-nl\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\nl-nl\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\nl-nl\

C:\Program Files\Microsoft Office\root\Office16\LivePersonaCard\images\default\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\LivePersonaCard\images\default\backup.exe" C:\Program Files\Microsoft Office\root\Office16\LivePersonaCard\images\default\

C:\Program Files (x86)\Common Files\Microsoft Shared\TextConv\en-US\backup.exe

"C:\Program Files (x86)\Common Files\Microsoft Shared\TextConv\en-US\backup.exe" C:\Program Files (x86)\Common Files\Microsoft Shared\TextConv\en-US\

C:\Windows\assembly\GAC\Extensibility\7.0.3300.0__b03f5f7f11d50a3a\backup.exe

C:\Windows\assembly\GAC\Extensibility\7.0.3300.0__b03f5f7f11d50a3a\backup.exe C:\Windows\assembly\GAC\Extensibility\7.0.3300.0__b03f5f7f11d50a3a\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\pl-pl\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\pl-pl\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\pl-pl\

C:\Program Files (x86)\Common Files\Microsoft Shared\Triedit\backup.exe

"C:\Program Files (x86)\Common Files\Microsoft Shared\Triedit\backup.exe" C:\Program Files (x86)\Common Files\Microsoft Shared\Triedit\

C:\Program Files\Microsoft Office\root\Office16\LogoImages\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\LogoImages\backup.exe" C:\Program Files\Microsoft Office\root\Office16\LogoImages\

C:\Windows\assembly\GAC\Microsoft.mshtml\backup.exe

C:\Windows\assembly\GAC\Microsoft.mshtml\backup.exe C:\Windows\assembly\GAC\Microsoft.mshtml\

C:\Program Files (x86)\Common Files\Microsoft Shared\Triedit\en-US\backup.exe

"C:\Program Files (x86)\Common Files\Microsoft Shared\Triedit\en-US\backup.exe" C:\Program Files (x86)\Common Files\Microsoft Shared\Triedit\en-US\

C:\Program Files\Microsoft Office\root\Office16\MEDIA\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MEDIA\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MEDIA\

C:\Windows\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\System Restore.exe

"C:\Windows\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\System Restore.exe" C:\Windows\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\pt-br\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\pt-br\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\pt-br\

C:\Program Files (x86)\Common Files\Microsoft Shared\VC\backup.exe

"C:\Program Files (x86)\Common Files\Microsoft Shared\VC\backup.exe" C:\Program Files (x86)\Common Files\Microsoft Shared\VC\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\root\data.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\root\data.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\root\

C:\Windows\assembly\GAC\Microsoft.StdFormat\backup.exe

C:\Windows\assembly\GAC\Microsoft.StdFormat\backup.exe C:\Windows\assembly\GAC\Microsoft.StdFormat\

C:\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\backup.exe

C:\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\backup.exe C:\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\ar\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\ar\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\ar\

C:\Program Files (x86)\Common Files\Microsoft Shared\VGX\backup.exe

"C:\Program Files (x86)\Common Files\Microsoft Shared\VGX\backup.exe" C:\Program Files (x86)\Common Files\Microsoft Shared\VGX\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\ro-ro\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\ro-ro\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\ro-ro\

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\backup.exe

"C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\backup.exe" C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\ru-ru\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\ru-ru\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\ru-ru\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\bg\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\bg\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\bg\

C:\Windows\assembly\GAC\mscomctl\backup.exe

C:\Windows\assembly\GAC\mscomctl\backup.exe C:\Windows\assembly\GAC\mscomctl\

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\AppInfoDocument\backup.exe

"C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\AppInfoDocument\backup.exe" C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\AppInfoDocument\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\ca\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\ca\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\ca\

C:\Windows\assembly\GAC\mscomctl\10.0.4504.0__31bf3856ad364e35\backup.exe

C:\Windows\assembly\GAC\mscomctl\10.0.4504.0__31bf3856ad364e35\backup.exe C:\Windows\assembly\GAC\mscomctl\10.0.4504.0__31bf3856ad364e35\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\sk-sk\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\sk-sk\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\sk-sk\

C:\Windows\assembly\GAC\MSDATASRC\backup.exe

C:\Windows\assembly\GAC\MSDATASRC\backup.exe C:\Windows\assembly\GAC\MSDATASRC\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\cs\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\cs\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\cs\

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\AppInfoDocument\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\backup.exe

"C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\AppInfoDocument\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\backup.exe" C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\AppInfoDocument\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\sl-si\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\sl-si\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\sl-si\

C:\Program Files\Microsoft Office 15\backup.exe

"C:\Program Files\Microsoft Office 15\backup.exe" C:\Program Files\Microsoft Office 15\

C:\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\backup.exe

C:\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\backup.exe C:\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\backup.exe

"C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\backup.exe" C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\da\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\da\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\da\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\sl-sl\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\sl-sl\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\sl-sl\

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\AddInSideAdapters\backup.exe

"C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\AddInSideAdapters\backup.exe" C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\AddInSideAdapters\

C:\Program Files\Microsoft Office 15\ClientX64\backup.exe

"C:\Program Files\Microsoft Office 15\ClientX64\backup.exe" C:\Program Files\Microsoft Office 15\ClientX64\

C:\Windows\assembly\GAC\stdole\update.exe

C:\Windows\assembly\GAC\stdole\update.exe C:\Windows\assembly\GAC\stdole\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\de\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\de\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\de\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\sv-se\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\sv-se\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\sv-se\

C:\Program Files\Mozilla Firefox\backup.exe

"C:\Program Files\Mozilla Firefox\backup.exe" C:\Program Files\Mozilla Firefox\

C:\Program Files\Microsoft Office\Updates\backup.exe

"C:\Program Files\Microsoft Office\Updates\backup.exe" C:\Program Files\Microsoft Office\Updates\

C:\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\update.exe

C:\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\update.exe C:\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\AddInViews\backup.exe

"C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\AddInViews\backup.exe" C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\AddInViews\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\tr-tr\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\tr-tr\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\tr-tr\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\el\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\el\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\el\

C:\Program Files\Mozilla Firefox\browser\backup.exe

"C:\Program Files\Mozilla Firefox\browser\backup.exe" C:\Program Files\Mozilla Firefox\browser\

C:\Program Files\Microsoft Office\Updates\Apply\backup.exe

"C:\Program Files\Microsoft Office\Updates\Apply\backup.exe" C:\Program Files\Microsoft Office\Updates\Apply\

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\System Restore.exe

"C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\System Restore.exe" C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\

C:\Windows\assembly\GAC_32\backup.exe

C:\Windows\assembly\GAC_32\backup.exe C:\Windows\assembly\GAC_32\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\uk-ua\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\uk-ua\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\uk-ua\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\en-us\System Restore.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\en-us\System Restore.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\en-us\

C:\Program Files\Mozilla Firefox\browser\features\backup.exe

"C:\Program Files\Mozilla Firefox\browser\features\backup.exe" C:\Program Files\Mozilla Firefox\browser\features\

C:\Program Files\Microsoft Office\Updates\Apply\FilesInUse\backup.exe

"C:\Program Files\Microsoft Office\Updates\Apply\FilesInUse\backup.exe" C:\Program Files\Microsoft Office\Updates\Apply\FilesInUse\

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\backup.exe

"C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\backup.exe" C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\es\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\es\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\es\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\zh-cn\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\zh-cn\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\zh-cn\

C:\Windows\assembly\GAC_32\CustomMarshalers\update.exe

C:\Windows\assembly\GAC_32\CustomMarshalers\update.exe C:\Windows\assembly\GAC_32\CustomMarshalers\

C:\Program Files\Microsoft Office\Updates\Apply\FilesInUse\B53A34F1-FF5D-4EF4-BFFA-089E897035BB\backup.exe

"C:\Program Files\Microsoft Office\Updates\Apply\FilesInUse\B53A34F1-FF5D-4EF4-BFFA-089E897035BB\backup.exe" C:\Program Files\Microsoft Office\Updates\Apply\FilesInUse\B53A34F1-FF5D-4EF4-BFFA-089E897035BB\

C:\Program Files\Mozilla Firefox\browser\VisualElements\backup.exe

"C:\Program Files\Mozilla Firefox\browser\VisualElements\backup.exe" C:\Program Files\Mozilla Firefox\browser\VisualElements\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\zh-tw\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\zh-tw\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\zh-tw\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\et\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\et\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\et\

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTO\backup.exe

"C:\Program Files (x86)\Common Files\Microsoft Shared\VSTO\backup.exe" C:\Program Files (x86)\Common Files\Microsoft Shared\VSTO\

C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\backup.exe

C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\backup.exe C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\

C:\Program Files\Microsoft Office\Updates\Download\backup.exe

"C:\Program Files\Microsoft Office\Updates\Download\backup.exe" C:\Program Files\Microsoft Office\Updates\Download\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\libs\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\libs\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\libs\

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTO\10.0\backup.exe

"C:\Program Files (x86)\Common Files\Microsoft Shared\VSTO\10.0\backup.exe" C:\Program Files (x86)\Common Files\Microsoft Shared\VSTO\10.0\

C:\Program Files\Mozilla Firefox\defaults\backup.exe

"C:\Program Files\Mozilla Firefox\defaults\backup.exe" C:\Program Files\Mozilla Firefox\defaults\

C:\Windows\assembly\GAC_32\ISymWrapper\backup.exe

C:\Windows\assembly\GAC_32\ISymWrapper\backup.exe C:\Windows\assembly\GAC_32\ISymWrapper\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\eu\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\eu\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\eu\

C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\backup.exe

"C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\backup.exe" C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\libs\jquery.ui.touch-punch\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\libs\jquery.ui.touch-punch\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\libs\jquery.ui.touch-punch\

C:\Program Files\Mozilla Firefox\defaults\pref\backup.exe

"C:\Program Files\Mozilla Firefox\defaults\pref\backup.exe" C:\Program Files\Mozilla Firefox\defaults\pref\

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTO\10.0\1033\backup.exe

"C:\Program Files (x86)\Common Files\Microsoft Shared\VSTO\10.0\1033\backup.exe" C:\Program Files (x86)\Common Files\Microsoft Shared\VSTO\10.0\1033\

C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\B53A34F1-FF5D-4EF4-BFFA-089E897035BB\backup.exe

"C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\B53A34F1-FF5D-4EF4-BFFA-089E897035BB\backup.exe" C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\B53A34F1-FF5D-4EF4-BFFA-089E897035BB\

C:\Windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\backup.exe

C:\Windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\backup.exe C:\Windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\libs\jquery.ui.touch-punch\0.2.2\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\libs\jquery.ui.touch-punch\0.2.2\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\libs\jquery.ui.touch-punch\0.2.2\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\fi\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\fi\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\fi\

C:\Program Files\Mozilla Firefox\fonts\backup.exe

"C:\Program Files\Mozilla Firefox\fonts\backup.exe" C:\Program Files\Mozilla Firefox\fonts\

C:\Program Files (x86)\Common Files\Oracle\backup.exe

"C:\Program Files (x86)\Common Files\Oracle\backup.exe" C:\Program Files (x86)\Common Files\Oracle\

C:\Program Files (x86)\Google\backup.exe

"C:\Program Files (x86)\Google\backup.exe" C:\Program Files (x86)\Google\

C:\Program Files (x86)\Common Files\Oracle\Java\backup.exe

"C:\Program Files (x86)\Common Files\Oracle\Java\backup.exe" C:\Program Files (x86)\Common Files\Oracle\Java\

C:\Windows\assembly\GAC_32\Microsoft.Ink\backup.exe

C:\Windows\assembly\GAC_32\Microsoft.Ink\backup.exe C:\Windows\assembly\GAC_32\Microsoft.Ink\

C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\B53A34F1-FF5D-4EF4-BFFA-089E897035BB\root\backup.exe

"C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\B53A34F1-FF5D-4EF4-BFFA-089E897035BB\root\backup.exe" C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\B53A34F1-FF5D-4EF4-BFFA-089E897035BB\root\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\fr\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\fr\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\fr\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\libs\require\System Restore.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\libs\require\System Restore.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\libs\require\

C:\Program Files\Mozilla Firefox\gmp-clearkey\backup.exe

"C:\Program Files\Mozilla Firefox\gmp-clearkey\backup.exe" C:\Program Files\Mozilla Firefox\gmp-clearkey\

C:\Program Files (x86)\Google\CrashReports\backup.exe

"C:\Program Files (x86)\Google\CrashReports\backup.exe" C:\Program Files (x86)\Google\CrashReports\

C:\Windows\assembly\GAC_32\Microsoft.Ink\6.1.0.0__31bf3856ad364e35\backup.exe

C:\Windows\assembly\GAC_32\Microsoft.Ink\6.1.0.0__31bf3856ad364e35\backup.exe C:\Windows\assembly\GAC_32\Microsoft.Ink\6.1.0.0__31bf3856ad364e35\

C:\Program Files (x86)\Common Files\Oracle\Java\javapath\backup.exe

"C:\Program Files (x86)\Common Files\Oracle\Java\javapath\backup.exe" C:\Program Files (x86)\Common Files\Oracle\Java\javapath\

C:\Program Files\Microsoft Office\root\rsod\backup.exe

"C:\Program Files\Microsoft Office\root\rsod\backup.exe" C:\Program Files\Microsoft Office\root\rsod\

C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\B53A34F1-FF5D-4EF4-BFFA-089E897035BB\root\vfs\backup.exe

"C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\B53A34F1-FF5D-4EF4-BFFA-089E897035BB\root\vfs\backup.exe" C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\B53A34F1-FF5D-4EF4-BFFA-089E897035BB\root\vfs\

C:\Program Files\Mozilla Firefox\gmp-clearkey\0.1\backup.exe

"C:\Program Files\Mozilla Firefox\gmp-clearkey\0.1\backup.exe" C:\Program Files\Mozilla Firefox\gmp-clearkey\0.1\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\gl\data.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\gl\data.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\gl\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\libs\require\2.1.15\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\libs\require\2.1.15\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\libs\require\2.1.15\

C:\Program Files\Microsoft Office\root\Templates\backup.exe

"C:\Program Files\Microsoft Office\root\Templates\backup.exe" C:\Program Files\Microsoft Office\root\Templates\

C:\Windows\assembly\GAC_32\Microsoft.Interop.Security.AzRoles\backup.exe

C:\Windows\assembly\GAC_32\Microsoft.Interop.Security.AzRoles\backup.exe C:\Windows\assembly\GAC_32\Microsoft.Interop.Security.AzRoles\

C:\Program Files (x86)\Google\Temp\backup.exe

"C:\Program Files (x86)\Google\Temp\backup.exe" C:\Program Files (x86)\Google\Temp\

C:\Program Files (x86)\Common Files\Services\backup.exe

"C:\Program Files (x86)\Common Files\Services\backup.exe" C:\Program Files (x86)\Common Files\Services\

C:\Program Files\Mozilla Firefox\uninstall\backup.exe

"C:\Program Files\Mozilla Firefox\uninstall\backup.exe" C:\Program Files\Mozilla Firefox\uninstall\

C:\Program Files\Microsoft Office\root\Templates\1033\backup.exe

"C:\Program Files\Microsoft Office\root\Templates\1033\backup.exe" C:\Program Files\Microsoft Office\root\Templates\1033\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\misc\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\misc\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\misc\

C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\B53A34F1-FF5D-4EF4-BFFA-089E897035BB\root\vfs\Windows\backup.exe

"C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\B53A34F1-FF5D-4EF4-BFFA-089E897035BB\root\vfs\Windows\backup.exe" C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\B53A34F1-FF5D-4EF4-BFFA-089E897035BB\root\vfs\Windows\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\he\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\he\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\he\

C:\Program Files (x86)\Google\Update\backup.exe

"C:\Program Files (x86)\Google\Update\backup.exe" C:\Program Files (x86)\Google\Update\

C:\Windows\assembly\GAC_32\Microsoft.Interop.Security.AzRoles\2.0.0.0__31bf3856ad364e35\backup.exe

C:\Windows\assembly\GAC_32\Microsoft.Interop.Security.AzRoles\2.0.0.0__31bf3856ad364e35\backup.exe C:\Windows\assembly\GAC_32\Microsoft.Interop.Security.AzRoles\2.0.0.0__31bf3856ad364e35\

C:\Program Files (x86)\Common Files\System\backup.exe

"C:\Program Files (x86)\Common Files\System\backup.exe" C:\Program Files (x86)\Common Files\System\

C:\Program Files\MSBuild\backup.exe

"C:\Program Files\MSBuild\backup.exe" C:\Program Files\MSBuild\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\

C:\Program Files\Microsoft Office\root\Templates\1033\GettingStarted16\backup.exe

"C:\Program Files\Microsoft Office\root\Templates\1033\GettingStarted16\backup.exe" C:\Program Files\Microsoft Office\root\Templates\1033\GettingStarted16\

C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\B53A34F1-FF5D-4EF4-BFFA-089E897035BB\root\vfs\Windows\assembly\backup.exe

"C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\B53A34F1-FF5D-4EF4-BFFA-089E897035BB\root\vfs\Windows\assembly\backup.exe" C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\B53A34F1-FF5D-4EF4-BFFA-089E897035BB\root\vfs\Windows\assembly\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\hi\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\hi\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\hi\

C:\Program Files\MSBuild\Microsoft\backup.exe

"C:\Program Files\MSBuild\Microsoft\backup.exe" C:\Program Files\MSBuild\Microsoft\

C:\Program Files (x86)\Google\Update\1.3.36.151\backup.exe

"C:\Program Files (x86)\Google\Update\1.3.36.151\backup.exe" C:\Program Files (x86)\Google\Update\1.3.36.151\

C:\Program Files (x86)\Common Files\System\ado\update.exe

"C:\Program Files (x86)\Common Files\System\ado\update.exe" C:\Program Files (x86)\Common Files\System\ado\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\hr\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\hr\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\hr\

C:\Windows\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\backup.exe

C:\Windows\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\backup.exe C:\Windows\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\

C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\B53A34F1-FF5D-4EF4-BFFA-089E897035BB\root\vfs\Windows\assembly\GAC_MSIL\backup.exe

"C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\B53A34F1-FF5D-4EF4-BFFA-089E897035BB\root\vfs\Windows\assembly\GAC_MSIL\backup.exe" C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\B53A34F1-FF5D-4EF4-BFFA-089E897035BB\root\vfs\Windows\assembly\GAC_MSIL\

C:\Program Files\Microsoft Office\root\Templates\1033\ONENOTE\backup.exe

"C:\Program Files\Microsoft Office\root\Templates\1033\ONENOTE\backup.exe" C:\Program Files\Microsoft Office\root\Templates\1033\ONENOTE\

C:\Program Files\Microsoft Office\root\Templates\1033\ONENOTE\16\backup.exe

"C:\Program Files\Microsoft Office\root\Templates\1033\ONENOTE\16\backup.exe" C:\Program Files\Microsoft Office\root\Templates\1033\ONENOTE\16\

C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\backup.exe

"C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\backup.exe" C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\css\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\css\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\css\

C:\Program Files (x86)\Common Files\System\ado\de-DE\backup.exe

"C:\Program Files (x86)\Common Files\System\ado\de-DE\backup.exe" C:\Program Files (x86)\Common Files\System\ado\de-DE\

C:\Program Files (x86)\Google\Update\Download\backup.exe

"C:\Program Files (x86)\Google\Update\Download\backup.exe" C:\Program Files (x86)\Google\Update\Download\

C:\Windows\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5f7f11d50a3a\backup.exe

C:\Windows\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5f7f11d50a3a\backup.exe C:\Windows\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5f7f11d50a3a\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\hu\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\hu\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\hu\

C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\B53A34F1-FF5D-4EF4-BFFA-089E897035BB\root\vfs\Windows\assembly\GAC_MSIL\Microsoft.AnalysisServices.SPClient.Interfaces\backup.exe

"C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\B53A34F1-FF5D-4EF4-BFFA-089E897035BB\root\vfs\Windows\assembly\GAC_MSIL\Microsoft.AnalysisServices.SPClient.Interfaces\backup.exe" C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\B53A34F1-FF5D-4EF4-BFFA-089E897035BB\root\vfs\Windows\assembly\GAC_MSIL\Microsoft.AnalysisServices.SPClient.Interfaces\

C:\Program Files\Microsoft Office\root\Templates\1033\ONENOTE\16\Stationery\backup.exe

"C:\Program Files\Microsoft Office\root\Templates\1033\ONENOTE\16\Stationery\backup.exe" C:\Program Files\Microsoft Office\root\Templates\1033\ONENOTE\16\Stationery\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\images\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\images\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\images\

C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\B53A34F1-FF5D-4EF4-BFFA-089E897035BB\root\vfs\Windows\assembly\GAC_MSIL\Microsoft.AnalysisServices.SPClient.Interfaces\13.0.0.0__89845DCD8080CC91\backup.exe

"C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\B53A34F1-FF5D-4EF4-BFFA-089E897035BB\root\vfs\Windows\assembly\GAC_MSIL\Microsoft.AnalysisServices.SPClient.Interfaces\13.0.0.0__89845DCD8080CC91\backup.exe" C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\B53A34F1-FF5D-4EF4-BFFA-089E897035BB\root\vfs\Windows\assembly\GAC_MSIL\Microsoft.AnalysisServices.SPClient.Interfaces\13.0.0.0__89845DCD8080CC91\

C:\Windows\assembly\GAC_32\MSBuild\backup.exe

C:\Windows\assembly\GAC_32\MSBuild\backup.exe C:\Windows\assembly\GAC_32\MSBuild\

C:\Program Files (x86)\Common Files\System\ado\en-US\backup.exe

"C:\Program Files (x86)\Common Files\System\ado\en-US\backup.exe" C:\Program Files (x86)\Common Files\System\ado\en-US\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\id\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\id\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\id\

C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\backup.exe

"C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\backup.exe" C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\

C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\backup.exe

"C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\backup.exe" C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\

C:\Program Files\Microsoft Office\root\Templates\Presentation Designs\backup.exe

"C:\Program Files\Microsoft Office\root\Templates\Presentation Designs\backup.exe" C:\Program Files\Microsoft Office\root\Templates\Presentation Designs\

C:\Windows\assembly\GAC_32\MSBuild\3.5.0.0__b03f5f7f11d50a3a\backup.exe

C:\Windows\assembly\GAC_32\MSBuild\3.5.0.0__b03f5f7f11d50a3a\backup.exe C:\Windows\assembly\GAC_32\MSBuild\3.5.0.0__b03f5f7f11d50a3a\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\

C:\Program Files (x86)\Common Files\System\ado\es-ES\backup.exe

"C:\Program Files (x86)\Common Files\System\ado\es-ES\backup.exe" C:\Program Files (x86)\Common Files\System\ado\es-ES\

C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\110.0.5481.104\backup.exe

"C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\110.0.5481.104\backup.exe" C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\110.0.5481.104\

C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\backup.exe

"C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\backup.exe" C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\it\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\it\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\it\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\

C:\Program Files (x86)\Common Files\System\ado\fr-FR\backup.exe

"C:\Program Files (x86)\Common Files\System\ado\fr-FR\backup.exe" C:\Program Files (x86)\Common Files\System\ado\fr-FR\

C:\Program Files\Microsoft Office\root\vfs\update.exe

"C:\Program Files\Microsoft Office\root\vfs\update.exe" C:\Program Files\Microsoft Office\root\vfs\

C:\Program Files (x86)\Google\Update\Install\backup.exe

"C:\Program Files (x86)\Google\Update\Install\backup.exe" C:\Program Files (x86)\Google\Update\Install\

C:\Windows\assembly\GAC_32\mscorlib\update.exe

C:\Windows\assembly\GAC_32\mscorlib\update.exe C:\Windows\assembly\GAC_32\mscorlib\

C:\Program Files (x86)\Common Files\System\ado\it-IT\backup.exe

"C:\Program Files (x86)\Common Files\System\ado\it-IT\backup.exe" C:\Program Files (x86)\Common Files\System\ado\it-IT\

C:\Program Files\Reference Assemblies\backup.exe

"C:\Program Files\Reference Assemblies\backup.exe" C:\Program Files\Reference Assemblies\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\ja\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\ja\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\ja\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\ar-ae\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\ar-ae\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\ar-ae\

C:\Program Files (x86)\Google\Update\Install\{878BCDD2-1ABC-4948-8DA1-C8645DF0F833}\backup.exe

"C:\Program Files (x86)\Google\Update\Install\{878BCDD2-1ABC-4948-8DA1-C8645DF0F833}\backup.exe" C:\Program Files (x86)\Google\Update\Install\{878BCDD2-1ABC-4948-8DA1-C8645DF0F833}\

C:\Program Files (x86)\Common Files\System\ado\ja-JP\backup.exe

"C:\Program Files (x86)\Common Files\System\ado\ja-JP\backup.exe" C:\Program Files (x86)\Common Files\System\ado\ja-JP\

C:\Program Files\Microsoft Office\root\vfs\Common AppData\backup.exe

"C:\Program Files\Microsoft Office\root\vfs\Common AppData\backup.exe" C:\Program Files\Microsoft Office\root\vfs\Common AppData\

C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\backup.exe

C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\backup.exe C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\ca-es\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\ca-es\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\ca-es\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\kk\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\kk\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\kk\

C:\Program Files\Reference Assemblies\Microsoft\update.exe

"C:\Program Files\Reference Assemblies\Microsoft\update.exe" C:\Program Files\Reference Assemblies\Microsoft\

C:\Program Files\Microsoft Office\root\vfs\Common AppData\Microsoft\backup.exe

"C:\Program Files\Microsoft Office\root\vfs\Common AppData\Microsoft\backup.exe" C:\Program Files\Microsoft Office\root\vfs\Common AppData\Microsoft\

C:\Program Files (x86)\Google\Update\Offline\backup.exe

"C:\Program Files (x86)\Google\Update\Offline\backup.exe" C:\Program Files (x86)\Google\Update\Offline\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\cs-cz\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\cs-cz\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\cs-cz\

C:\Program Files (x86)\Common Files\System\de-DE\backup.exe

"C:\Program Files (x86)\Common Files\System\de-DE\backup.exe" C:\Program Files (x86)\Common Files\System\de-DE\

C:\Windows\assembly\GAC_32\PresentationCore\backup.exe

C:\Windows\assembly\GAC_32\PresentationCore\backup.exe C:\Windows\assembly\GAC_32\PresentationCore\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\ko\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\ko\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\ko\

C:\Program Files\Reference Assemblies\Microsoft\Framework\backup.exe

"C:\Program Files\Reference Assemblies\Microsoft\Framework\backup.exe" C:\Program Files\Reference Assemblies\Microsoft\Framework\

C:\Program Files\Microsoft Office\root\vfs\Common AppData\Microsoft\OFFICE\backup.exe

"C:\Program Files\Microsoft Office\root\vfs\Common AppData\Microsoft\OFFICE\backup.exe" C:\Program Files\Microsoft Office\root\vfs\Common AppData\Microsoft\OFFICE\

C:\Program Files (x86)\Common Files\System\en-US\System Restore.exe

"C:\Program Files (x86)\Common Files\System\en-US\System Restore.exe" C:\Program Files (x86)\Common Files\System\en-US\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\da-dk\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\da-dk\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\da-dk\

C:\Program Files (x86)\Internet Explorer\backup.exe

"C:\Program Files (x86)\Internet Explorer\backup.exe" C:\Program Files (x86)\Internet Explorer\

C:\Windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\update.exe

C:\Windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\update.exe C:\Windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\

C:\Program Files (x86)\Common Files\System\es-ES\backup.exe

"C:\Program Files (x86)\Common Files\System\es-ES\backup.exe" C:\Program Files (x86)\Common Files\System\es-ES\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\lt\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\lt\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\lt\

C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\backup.exe

"C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\backup.exe" C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\

C:\Program Files (x86)\Internet Explorer\de-DE\backup.exe

"C:\Program Files (x86)\Internet Explorer\de-DE\backup.exe" C:\Program Files (x86)\Internet Explorer\de-DE\

C:\Program Files\Microsoft Office\root\vfs\Common AppData\Microsoft\OFFICE\Heartbeat\backup.exe

"C:\Program Files\Microsoft Office\root\vfs\Common AppData\Microsoft\OFFICE\Heartbeat\backup.exe" C:\Program Files\Microsoft Office\root\vfs\Common AppData\Microsoft\OFFICE\Heartbeat\

C:\Windows\assembly\GAC_32\srmlib\backup.exe

C:\Windows\assembly\GAC_32\srmlib\backup.exe C:\Windows\assembly\GAC_32\srmlib\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\de-de\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\de-de\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\de-de\

C:\Program Files (x86)\Common Files\System\fr-FR\data.exe

"C:\Program Files (x86)\Common Files\System\fr-FR\data.exe" C:\Program Files (x86)\Common Files\System\fr-FR\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\lv\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\lv\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\lv\

C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\de\backup.exe

"C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\de\backup.exe" C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\de\

C:\Program Files (x86)\Internet Explorer\en-US\backup.exe

"C:\Program Files (x86)\Internet Explorer\en-US\backup.exe" C:\Program Files (x86)\Internet Explorer\en-US\

C:\Program Files\Microsoft Office\root\vfs\Common AppData\Microsoft Help\backup.exe

"C:\Program Files\Microsoft Office\root\vfs\Common AppData\Microsoft Help\backup.exe" C:\Program Files\Microsoft Office\root\vfs\Common AppData\Microsoft Help\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\en-ae\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\en-ae\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\en-ae\

C:\Program Files (x86)\Common Files\System\it-IT\backup.exe

"C:\Program Files (x86)\Common Files\System\it-IT\backup.exe" C:\Program Files (x86)\Common Files\System\it-IT\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\ms\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\ms\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\ms\

C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\es\backup.exe

"C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\es\backup.exe" C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\es\

C:\Windows\assembly\GAC_32\srmlib\1.0.0.0__31bf3856ad364e35\backup.exe

C:\Windows\assembly\GAC_32\srmlib\1.0.0.0__31bf3856ad364e35\backup.exe C:\Windows\assembly\GAC_32\srmlib\1.0.0.0__31bf3856ad364e35\

C:\Program Files (x86)\Internet Explorer\es-ES\backup.exe

"C:\Program Files (x86)\Internet Explorer\es-ES\backup.exe" C:\Program Files (x86)\Internet Explorer\es-ES\

C:\Program Files\Microsoft Office\root\vfs\Fonts\backup.exe

"C:\Program Files\Microsoft Office\root\vfs\Fonts\backup.exe" C:\Program Files\Microsoft Office\root\vfs\Fonts\

C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\fr\backup.exe

"C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\fr\backup.exe" C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\fr\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\en-gb\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\en-gb\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\en-gb\

C:\Windows\assembly\GAC_32\System.Data\update.exe

C:\Windows\assembly\GAC_32\System.Data\update.exe C:\Windows\assembly\GAC_32\System.Data\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\nl\System Restore.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\nl\System Restore.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\nl\

C:\Program Files (x86)\Common Files\System\ja-JP\backup.exe

"C:\Program Files (x86)\Common Files\System\ja-JP\backup.exe" C:\Program Files (x86)\Common Files\System\ja-JP\

C:\Program Files\Microsoft Office\root\vfs\Fonts\private\backup.exe

"C:\Program Files\Microsoft Office\root\vfs\Fonts\private\backup.exe" C:\Program Files\Microsoft Office\root\vfs\Fonts\private\

C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\it\backup.exe

"C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\it\backup.exe" C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\it\

C:\Program Files (x86)\Internet Explorer\fr-FR\backup.exe

"C:\Program Files (x86)\Internet Explorer\fr-FR\backup.exe" C:\Program Files (x86)\Internet Explorer\fr-FR\

C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\backup.exe

C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\backup.exe C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\en-il\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\en-il\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\en-il\

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\backup.exe

"C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\backup.exe" C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\

C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\ja\backup.exe

"C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\ja\backup.exe" C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\ja\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\no\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\no\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\no\

C:\Program Files (x86)\Common Files\System\msadc\backup.exe

"C:\Program Files (x86)\Common Files\System\msadc\backup.exe" C:\Program Files (x86)\Common Files\System\msadc\

C:\Program Files (x86)\Internet Explorer\images\backup.exe

"C:\Program Files (x86)\Internet Explorer\images\backup.exe" C:\Program Files (x86)\Internet Explorer\images\

C:\Windows\assembly\GAC_32\System.Data.OracleClient\backup.exe

C:\Windows\assembly\GAC_32\System.Data.OracleClient\backup.exe C:\Windows\assembly\GAC_32\System.Data.OracleClient\

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\DESIGNER\backup.exe

"C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\DESIGNER\backup.exe" C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\DESIGNER\

C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\backup.exe

"C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\backup.exe" C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\es-es\data.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\es-es\data.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\es-es\

C:\Program Files (x86)\Internet Explorer\it-IT\data.exe

"C:\Program Files (x86)\Internet Explorer\it-IT\data.exe" C:\Program Files (x86)\Internet Explorer\it-IT\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\pl\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\pl\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\pl\

C:\Windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\backup.exe

C:\Windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\backup.exe C:\Windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\backup.exe

"C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\backup.exe" C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\

C:\Program Files (x86)\Common Files\System\msadc\de-DE\backup.exe

"C:\Program Files (x86)\Common Files\System\msadc\de-DE\backup.exe" C:\Program Files (x86)\Common Files\System\msadc\de-DE\

C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\backup.exe

"C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\backup.exe" C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\

C:\Program Files (x86)\Internet Explorer\ja-JP\backup.exe

"C:\Program Files (x86)\Internet Explorer\ja-JP\backup.exe" C:\Program Files (x86)\Internet Explorer\ja-JP\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\eu-es\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\eu-es\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\eu-es\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\pt\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\pt\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\pt\

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\DW\backup.exe

"C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\DW\backup.exe" C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\DW\

C:\Windows\assembly\GAC_32\System.EnterpriseServices\backup.exe

C:\Windows\assembly\GAC_32\System.EnterpriseServices\backup.exe C:\Windows\assembly\GAC_32\System.EnterpriseServices\

C:\Program Files (x86)\Common Files\System\msadc\en-US\backup.exe

"C:\Program Files (x86)\Common Files\System\msadc\en-US\backup.exe" C:\Program Files (x86)\Common Files\System\msadc\en-US\

C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\de\backup.exe

"C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\de\backup.exe" C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\de\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\fi-fi\data.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\fi-fi\data.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\fi-fi\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\pt-BR\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\pt-BR\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\pt-BR\

C:\Program Files (x86)\Internet Explorer\SIGNUP\backup.exe

"C:\Program Files (x86)\Internet Explorer\SIGNUP\backup.exe" C:\Program Files (x86)\Internet Explorer\SIGNUP\

C:\Program Files (x86)\Common Files\System\msadc\es-ES\backup.exe

"C:\Program Files (x86)\Common Files\System\msadc\es-ES\backup.exe" C:\Program Files (x86)\Common Files\System\msadc\es-ES\

C:\Windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\backup.exe

C:\Windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\backup.exe C:\Windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\EQUATION\backup.exe

"C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\EQUATION\backup.exe" C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\EQUATION\

C:\Program Files (x86)\Internet Explorer\uk-UA\backup.exe

"C:\Program Files (x86)\Internet Explorer\uk-UA\backup.exe" C:\Program Files (x86)\Internet Explorer\uk-UA\

C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\es\backup.exe

"C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\es\backup.exe" C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\es\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\fr-fr\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\fr-fr\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\fr-fr\

C:\Program Files (x86)\Common Files\System\msadc\fr-FR\backup.exe

"C:\Program Files (x86)\Common Files\System\msadc\fr-FR\backup.exe" C:\Program Files (x86)\Common Files\System\msadc\fr-FR\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\ro\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\ro\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\ro\

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\EQUATION\1033\backup.exe

"C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\EQUATION\1033\backup.exe" C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\EQUATION\1033\

C:\Windows\assembly\GAC_32\System.Printing\backup.exe

C:\Windows\assembly\GAC_32\System.Printing\backup.exe C:\Windows\assembly\GAC_32\System.Printing\

C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\fr\System Restore.exe

"C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\fr\System Restore.exe" C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\fr\

C:\Program Files (x86)\Common Files\System\msadc\it-IT\backup.exe

"C:\Program Files (x86)\Common Files\System\msadc\it-IT\backup.exe" C:\Program Files (x86)\Common Files\System\msadc\it-IT\

C:\Windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\backup.exe

C:\Windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\backup.exe C:\Windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\ru\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\ru\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\ru\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\fr-ma\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\fr-ma\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\fr-ma\

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\EURO\backup.exe

"C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\EURO\backup.exe" C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\EURO\

C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\it\backup.exe

"C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\it\backup.exe" C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\it\

C:\Program Files (x86)\Microsoft\backup.exe

"C:\Program Files (x86)\Microsoft\backup.exe" C:\Program Files (x86)\Microsoft\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\sk\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\sk\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\sk\

C:\Program Files (x86)\Microsoft\Edge\backup.exe

"C:\Program Files (x86)\Microsoft\Edge\backup.exe" C:\Program Files (x86)\Microsoft\Edge\

C:\Program Files (x86)\Common Files\System\msadc\ja-JP\backup.exe

"C:\Program Files (x86)\Common Files\System\msadc\ja-JP\backup.exe" C:\Program Files (x86)\Common Files\System\msadc\ja-JP\

C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\ja\backup.exe

"C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\ja\backup.exe" C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\ja\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\he-il\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\he-il\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\he-il\

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Filters\backup.exe

"C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Filters\backup.exe" C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Filters\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\sl\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\sl\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\sl\

C:\Windows\assembly\GAC_32\System.Transactions\data.exe

C:\Windows\assembly\GAC_32\System.Transactions\data.exe C:\Windows\assembly\GAC_32\System.Transactions\

C:\Program Files (x86)\Microsoft\Edge\Application\backup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\backup.exe" C:\Program Files (x86)\Microsoft\Edge\Application\

C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\RedistList\backup.exe

"C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\RedistList\backup.exe" C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\RedistList\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\hr-hr\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\hr-hr\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\hr-hr\

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\GRPHFLT\backup.exe

"C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\GRPHFLT\backup.exe" C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\GRPHFLT\

C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\backup.exe

C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\backup.exe C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\sr-Cyrl-BA\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\sr-Cyrl-BA\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\sr-Cyrl-BA\

C:\Program Files (x86)\Common Files\System\Ole DB\backup.exe

"C:\Program Files (x86)\Common Files\System\Ole DB\backup.exe" C:\Program Files (x86)\Common Files\System\Ole DB\

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\backup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\backup.exe" C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\hu-hu\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\hu-hu\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\hu-hu\

C:\Program Files\VideoLAN\backup.exe

"C:\Program Files\VideoLAN\backup.exe" C:\Program Files\VideoLAN\

C:\Windows\assembly\GAC_32\System.Web\backup.exe

C:\Windows\assembly\GAC_32\System.Web\backup.exe C:\Windows\assembly\GAC_32\System.Web\

C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\backup.exe

"C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\backup.exe" C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Help\backup.exe

"C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Help\backup.exe" C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Help\

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\BHO\backup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\BHO\backup.exe" C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\BHO\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\sr-Cyrl-RS\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\sr-Cyrl-RS\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\sr-Cyrl-RS\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\it-it\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\it-it\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\it-it\

C:\Program Files\VideoLAN\VLC\data.exe

"C:\Program Files\VideoLAN\VLC\data.exe" C:\Program Files\VideoLAN\VLC\

C:\Windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\backup.exe

C:\Windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\backup.exe C:\Windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\

C:\Program Files (x86)\Common Files\System\Ole DB\en-US\backup.exe

"C:\Program Files (x86)\Common Files\System\Ole DB\en-US\backup.exe" C:\Program Files (x86)\Common Files\System\Ole DB\en-US\

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\backup.exe

"C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\backup.exe" C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\EBWebView\backup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\EBWebView\backup.exe" C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\EBWebView\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\ja-jp\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\ja-jp\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\ja-jp\

C:\Windows\assembly\GAC_64\backup.exe

C:\Windows\assembly\GAC_64\backup.exe C:\Windows\assembly\GAC_64\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\sr-Latn-RS\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\sr-Latn-RS\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\sr-Latn-RS\

C:\Program Files\VideoLAN\VLC\hrtfs\backup.exe

"C:\Program Files\VideoLAN\VLC\hrtfs\backup.exe" C:\Program Files\VideoLAN\VLC\hrtfs\

C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\backup.exe

"C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\backup.exe" C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\EBWebView\x64\backup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\EBWebView\x64\backup.exe" C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\EBWebView\x64\

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\1033\backup.exe

"C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\1033\backup.exe" C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\1033\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\ko-kr\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\ko-kr\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\ko-kr\

C:\Windows\assembly\GAC_64\CustomMarshalers\backup.exe

C:\Windows\assembly\GAC_64\CustomMarshalers\backup.exe C:\Windows\assembly\GAC_64\CustomMarshalers\

C:\Program Files\VideoLAN\VLC\locale\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\backup.exe" C:\Program Files\VideoLAN\VLC\locale\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\sv\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\sv\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\sv\

C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\backup.exe

"C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\backup.exe" C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\EBWebView\x86\backup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\EBWebView\x86\backup.exe" C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\EBWebView\x86\

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\Cultures\System Restore.exe

"C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\Cultures\System Restore.exe" C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\Cultures\

C:\Windows\assembly\GAC_64\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\backup.exe

C:\Windows\assembly\GAC_64\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\backup.exe C:\Windows\assembly\GAC_64\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\nb-no\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\nb-no\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\nb-no\

C:\Program Files\VideoLAN\VLC\locale\ach\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\ach\backup.exe" C:\Program Files\VideoLAN\VLC\locale\ach\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\th\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\th\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\th\

C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\backup.exe

"C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\backup.exe" C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Extensions\backup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Extensions\backup.exe" C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Extensions\

C:\Windows\assembly\GAC_64\ISymWrapper\backup.exe

C:\Windows\assembly\GAC_64\ISymWrapper\backup.exe C:\Windows\assembly\GAC_64\ISymWrapper\

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\backup.exe

"C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\backup.exe" C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\nl-nl\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\nl-nl\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\nl-nl\

C:\Program Files\VideoLAN\VLC\locale\ach\LC_MESSAGES\data.exe

"C:\Program Files\VideoLAN\VLC\locale\ach\LC_MESSAGES\data.exe" C:\Program Files\VideoLAN\VLC\locale\ach\LC_MESSAGES\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\tr\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\tr\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\tr\

C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\data.exe

"C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\data.exe" C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_proxy\backup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_proxy\backup.exe" C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_proxy\

C:\Windows\assembly\GAC_64\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\backup.exe

C:\Windows\assembly\GAC_64\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\backup.exe C:\Windows\assembly\GAC_64\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Cartridges\data.exe

"C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Cartridges\data.exe" C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Cartridges\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\uk\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\uk\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\uk\

C:\Program Files\VideoLAN\VLC\locale\af\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\af\backup.exe" C:\Program Files\VideoLAN\VLC\locale\af\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\pl-pl\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\pl-pl\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\pl-pl\

C:\Program Files (x86)\Common Files\System\uk-UA\backup.exe

"C:\Program Files (x86)\Common Files\System\uk-UA\backup.exe" C:\Program Files (x86)\Common Files\System\uk-UA\

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\backup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\backup.exe" C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\

C:\Windows\assembly\GAC_64\Microsoft.Ink\backup.exe

C:\Windows\assembly\GAC_64\Microsoft.Ink\backup.exe C:\Windows\assembly\GAC_64\Microsoft.Ink\

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Resources\backup.exe

"C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Resources\backup.exe" C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Resources\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\vi\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\vi\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\vi\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\pt-br\update.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\pt-br\update.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\pt-br\

C:\Program Files\VideoLAN\VLC\locale\af\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\af\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\af\LC_MESSAGES\

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Locales\backup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Locales\backup.exe" C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Locales\

C:\Windows\bcastdvr\backup.exe

C:\Windows\bcastdvr\backup.exe C:\Windows\bcastdvr\

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Resources\1033\backup.exe

"C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Resources\1033\backup.exe" C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Resources\1033\

C:\Windows\assembly\GAC_64\Microsoft.Ink\6.1.0.0__31bf3856ad364e35\backup.exe

C:\Windows\assembly\GAC_64\Microsoft.Ink\6.1.0.0__31bf3856ad364e35\backup.exe C:\Windows\assembly\GAC_64\Microsoft.Ink\6.1.0.0__31bf3856ad364e35\

C:\Windows\assembly\GAC_64\Microsoft.Interop.Security.AzRoles\backup.exe

C:\Windows\assembly\GAC_64\Microsoft.Interop.Security.AzRoles\backup.exe C:\Windows\assembly\GAC_64\Microsoft.Interop.Security.AzRoles\

C:\Program Files\VideoLAN\VLC\locale\am\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\am\backup.exe" C:\Program Files\VideoLAN\VLC\locale\am\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\zh-CN\System Restore.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\zh-CN\System Restore.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\zh-CN\

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\MEIPreload\backup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\MEIPreload\backup.exe" C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\MEIPreload\

C:\Windows\Branding\backup.exe

C:\Windows\Branding\backup.exe C:\Windows\Branding\

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\en-us\backup.exe

"C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\en-us\backup.exe" C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\en-us\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\root\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\root\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\root\

C:\Windows\assembly\GAC_64\Microsoft.Interop.Security.AzRoles\2.0.0.0__31bf3856ad364e35\backup.exe

C:\Windows\assembly\GAC_64\Microsoft.Interop.Security.AzRoles\2.0.0.0__31bf3856ad364e35\backup.exe C:\Windows\assembly\GAC_64\Microsoft.Interop.Security.AzRoles\2.0.0.0__31bf3856ad364e35\

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\Office Setup Controller\backup.exe

"C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\Office Setup Controller\backup.exe" C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\Office Setup Controller\

C:\Program Files\Microsoft Office\root\Office16\MSIPC\zh-TW\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\MSIPC\zh-TW\backup.exe" C:\Program Files\Microsoft Office\root\Office16\MSIPC\zh-TW\

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\MLModels\backup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\MLModels\backup.exe" C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\MLModels\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\ro-ro\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\ro-ro\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\ro-ro\

C:\Program Files\VideoLAN\VLC\locale\am\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\am\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\am\LC_MESSAGES\

C:\Windows\Branding\Basebrd\backup.exe

C:\Windows\Branding\Basebrd\backup.exe C:\Windows\Branding\Basebrd\

C:\Windows\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\update.exe

C:\Windows\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\update.exe C:\Windows\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\ru-ru\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\ru-ru\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\ru-ru\

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\Office Setup Controller\Office.en-us\backup.exe

"C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\Office Setup Controller\Office.en-us\backup.exe" C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\Office Setup Controller\Office.en-us\

C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\backup.exe" C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\

C:\Windows\Branding\Basebrd\de-DE\backup.exe

C:\Windows\Branding\Basebrd\de-DE\backup.exe C:\Windows\Branding\Basebrd\de-DE\

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Notifications\backup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Notifications\backup.exe" C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Notifications\

C:\Program Files\VideoLAN\VLC\locale\am_ET\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\am_ET\backup.exe" C:\Program Files\VideoLAN\VLC\locale\am_ET\

C:\Windows\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5f7f11d50a3a\backup.exe

C:\Windows\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5f7f11d50a3a\backup.exe C:\Windows\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5f7f11d50a3a\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\sk-sk\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\sk-sk\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\sk-sk\

C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Redshift\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Redshift\backup.exe" C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Redshift\

C:\Windows\Branding\Basebrd\en-US\update.exe

C:\Windows\Branding\Basebrd\en-US\update.exe C:\Windows\Branding\Basebrd\en-US\

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\PlatformCapabilities\backup.exe

"C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\PlatformCapabilities\backup.exe" C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\PlatformCapabilities\

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\PlayReadyCdm\backup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\PlayReadyCdm\backup.exe" C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\PlayReadyCdm\

C:\Program Files\VideoLAN\VLC\locale\am_ET\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\am_ET\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\am_ET\LC_MESSAGES\

C:\Windows\assembly\GAC_64\MSBuild\backup.exe

C:\Windows\assembly\GAC_64\MSBuild\backup.exe C:\Windows\assembly\GAC_64\MSBuild\

C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Redshift\lib\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Redshift\lib\backup.exe" C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Redshift\lib\

C:\Windows\Branding\Basebrd\es-ES\backup.exe

C:\Windows\Branding\Basebrd\es-ES\backup.exe C:\Windows\Branding\Basebrd\es-ES\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\sl-si\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\sl-si\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\sl-si\

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\PROOF\backup.exe

"C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\PROOF\backup.exe" C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\PROOF\

C:\Windows\assembly\GAC_64\MSBuild\3.5.0.0__b03f5f7f11d50a3a\System Restore.exe

"C:\Windows\assembly\GAC_64\MSBuild\3.5.0.0__b03f5f7f11d50a3a\System Restore.exe" C:\Windows\assembly\GAC_64\MSBuild\3.5.0.0__b03f5f7f11d50a3a\

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\PlayReadyCdm\_platform_specific\backup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\PlayReadyCdm\_platform_specific\backup.exe" C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\PlayReadyCdm\_platform_specific\

C:\Program Files\VideoLAN\VLC\locale\an\update.exe

"C:\Program Files\VideoLAN\VLC\locale\an\update.exe" C:\Program Files\VideoLAN\VLC\locale\an\

C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Redshift\lib\OpenSSL64.DllA\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Redshift\lib\OpenSSL64.DllA\backup.exe" C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Redshift\lib\OpenSSL64.DllA\

C:\Windows\Branding\Basebrd\fr-FR\backup.exe

C:\Windows\Branding\Basebrd\fr-FR\backup.exe C:\Windows\Branding\Basebrd\fr-FR\

C:\Windows\assembly\GAC_64\mscorlib\backup.exe

C:\Windows\assembly\GAC_64\mscorlib\backup.exe C:\Windows\assembly\GAC_64\mscorlib\

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\PlayReadyCdm\_platform_specific\win_x64\backup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\PlayReadyCdm\_platform_specific\win_x64\backup.exe" C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\PlayReadyCdm\_platform_specific\win_x64\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\sl-sl\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\sl-sl\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\sl-sl\

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Smart Tag\backup.exe

"C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Smart Tag\backup.exe" C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Smart Tag\

C:\Program Files\VideoLAN\VLC\locale\an\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\an\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\an\LC_MESSAGES\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\sv-se\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\sv-se\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\sv-se\

C:\Windows\Branding\Basebrd\it-IT\backup.exe

C:\Windows\Branding\Basebrd\it-IT\backup.exe C:\Windows\Branding\Basebrd\it-IT\

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Smart Tag\1033\data.exe

"C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Smart Tag\1033\data.exe" C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Smart Tag\1033\

C:\Windows\assembly\GAC_64\mscorlib\2.0.0.0__b77a5c561934e089\backup.exe

C:\Windows\assembly\GAC_64\mscorlib\2.0.0.0__b77a5c561934e089\backup.exe C:\Windows\assembly\GAC_64\mscorlib\2.0.0.0__b77a5c561934e089\

C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\backup.exe" C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\backup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\backup.exe" C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\

C:\Program Files\VideoLAN\VLC\locale\ar\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\ar\backup.exe" C:\Program Files\VideoLAN\VLC\locale\ar\

C:\Windows\Branding\Basebrd\ja-JP\backup.exe

C:\Windows\Branding\Basebrd\ja-JP\backup.exe C:\Windows\Branding\Basebrd\ja-JP\

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Smart Tag\LISTS\backup.exe

"C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Smart Tag\LISTS\backup.exe" C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Smart Tag\LISTS\

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Extensions\data.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Extensions\data.exe" C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Extensions\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\tr-tr\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\tr-tr\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\tr-tr\

C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\backup.exe" C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\

C:\Windows\assembly\GAC_64\PresentationCore\update.exe

C:\Windows\assembly\GAC_64\PresentationCore\update.exe C:\Windows\assembly\GAC_64\PresentationCore\

C:\Program Files\VideoLAN\VLC\locale\ar\LC_MESSAGES\data.exe

"C:\Program Files\VideoLAN\VLC\locale\ar\LC_MESSAGES\data.exe" C:\Program Files\VideoLAN\VLC\locale\ar\LC_MESSAGES\

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\identity_proxy\backup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\identity_proxy\backup.exe" C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\identity_proxy\

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Smart Tag\LISTS\1033\backup.exe

"C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Smart Tag\LISTS\1033\backup.exe" C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Smart Tag\LISTS\1033\

C:\Windows\Branding\Basebrd\uk-UA\backup.exe

C:\Windows\Branding\Basebrd\uk-UA\backup.exe C:\Windows\Branding\Basebrd\uk-UA\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\uk-ua\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\uk-ua\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\uk-ua\

C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\1033\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\1033\backup.exe" C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\1033\

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Locales\backup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Locales\backup.exe" C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Locales\

C:\Windows\assembly\GAC_64\PresentationCore\3.0.0.0__31bf3856ad364e35\backup.exe

C:\Windows\assembly\GAC_64\PresentationCore\3.0.0.0__31bf3856ad364e35\backup.exe C:\Windows\assembly\GAC_64\PresentationCore\3.0.0.0__31bf3856ad364e35\

C:\Program Files\VideoLAN\VLC\locale\as_IN\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\as_IN\backup.exe" C:\Program Files\VideoLAN\VLC\locale\as_IN\

C:\Windows\Branding\shellbrd\backup.exe

C:\Windows\Branding\shellbrd\backup.exe C:\Windows\Branding\shellbrd\

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Source Engine\backup.exe

"C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Source Engine\backup.exe" C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Source Engine\

C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\LibCurl64.DllA\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\LibCurl64.DllA\backup.exe" C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\LibCurl64.DllA\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\zh-cn\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\zh-cn\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\zh-cn\

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\MEIPreload\backup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\MEIPreload\backup.exe" C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\MEIPreload\

C:\Windows\assembly\GAC_64\srmlib\backup.exe

C:\Windows\assembly\GAC_64\srmlib\backup.exe C:\Windows\assembly\GAC_64\srmlib\

C:\Program Files\VideoLAN\VLC\locale\as_IN\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\as_IN\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\as_IN\LC_MESSAGES\

C:\Windows\CbsTemp\backup.exe

C:\Windows\CbsTemp\backup.exe C:\Windows\CbsTemp\

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\TEXTCONV\data.exe

"C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\TEXTCONV\data.exe" C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\TEXTCONV\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\zh-tw\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\zh-tw\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\zh-tw\

C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\LibCurl64.DllA\OpenSSL64.DllA\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\LibCurl64.DllA\OpenSSL64.DllA\backup.exe" C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\LibCurl64.DllA\OpenSSL64.DllA\

C:\Windows\assembly\GAC_64\srmlib\1.0.0.0__31bf3856ad364e35\backup.exe

C:\Windows\assembly\GAC_64\srmlib\1.0.0.0__31bf3856ad364e35\backup.exe C:\Windows\assembly\GAC_64\srmlib\1.0.0.0__31bf3856ad364e35\

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\MLModels\backup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\MLModels\backup.exe" C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\MLModels\

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\backup.exe

"C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\backup.exe" C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Notifications\backup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Notifications\backup.exe" C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Notifications\

C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\OpenSSL64.DllA\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\OpenSSL64.DllA\backup.exe" C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\OpenSSL64.DllA\

C:\Program Files\VideoLAN\VLC\locale\ast\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\ast\backup.exe" C:\Program Files\VideoLAN\VLC\locale\ast\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\

C:\Windows\Containers\backup.exe

C:\Windows\Containers\backup.exe C:\Windows\Containers\

C:\Windows\assembly\GAC_64\System.Data\backup.exe

C:\Windows\assembly\GAC_64\System.Data\backup.exe C:\Windows\assembly\GAC_64\System.Data\

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\AFTRNOON\backup.exe

"C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\AFTRNOON\backup.exe" C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\AFTRNOON\

C:\Windows\Containers\serviced\backup.exe

C:\Windows\Containers\serviced\backup.exe C:\Windows\Containers\serviced\

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Trust Protection Lists\backup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Trust Protection Lists\backup.exe" C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Trust Protection Lists\

C:\Program Files\Microsoft Office\root\Office16\OneNote\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\OneNote\backup.exe" C:\Program Files\Microsoft Office\root\Office16\OneNote\

C:\Program Files\VideoLAN\VLC\locale\ast\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\ast\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\ast\LC_MESSAGES\

C:\Windows\assembly\GAC_64\System.Data\2.0.0.0__b77a5c561934e089\backup.exe

C:\Windows\assembly\GAC_64\System.Data\2.0.0.0__b77a5c561934e089\backup.exe C:\Windows\assembly\GAC_64\System.Data\2.0.0.0__b77a5c561934e089\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\css\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\css\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\css\

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\ARCTIC\backup.exe

"C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\ARCTIC\backup.exe" C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\ARCTIC\

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Trust Protection Lists\Mu\backup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Trust Protection Lists\Mu\backup.exe" C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Trust Protection Lists\Mu\

C:\Program Files\Microsoft Office\root\Office16\osfFPA\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\osfFPA\backup.exe" C:\Program Files\Microsoft Office\root\Office16\osfFPA\

C:\Windows\Cursors\backup.exe

C:\Windows\Cursors\backup.exe C:\Windows\Cursors\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\

C:\Windows\assembly\GAC_64\System.Data.OracleClient\backup.exe

C:\Windows\assembly\GAC_64\System.Data.OracleClient\backup.exe C:\Windows\assembly\GAC_64\System.Data.OracleClient\

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\AXIS\backup.exe

"C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\AXIS\backup.exe" C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\AXIS\

C:\Program Files\VideoLAN\VLC\locale\be\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\be\backup.exe" C:\Program Files\VideoLAN\VLC\locale\be\

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Trust Protection Lists\Sigma\backup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Trust Protection Lists\Sigma\backup.exe" C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Trust Protection Lists\Sigma\

C:\Windows\assembly\GAC_64\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\backup.exe

C:\Windows\assembly\GAC_64\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\backup.exe C:\Windows\assembly\GAC_64\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\

C:\Windows\debug\backup.exe

C:\Windows\debug\backup.exe C:\Windows\debug\

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\BLENDS\backup.exe

"C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\BLENDS\backup.exe" C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\BLENDS\

C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\backup.exe" C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\

C:\Program Files\VideoLAN\VLC\locale\be\LC_MESSAGES\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\be\LC_MESSAGES\backup.exe" C:\Program Files\VideoLAN\VLC\locale\be\LC_MESSAGES\

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\VisualElements\backup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\VisualElements\backup.exe" C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\VisualElements\

C:\Windows\de-DE\backup.exe

C:\Windows\de-DE\backup.exe C:\Windows\de-DE\

C:\Program Files\VideoLAN\VLC\locale\bg\backup.exe

"C:\Program Files\VideoLAN\VLC\locale\bg\backup.exe" C:\Program Files\VideoLAN\VLC\locale\bg\

C:\Windows\assembly\GAC_64\System.EnterpriseServices\backup.exe

C:\Windows\assembly\GAC_64\System.EnterpriseServices\backup.exe C:\Windows\assembly\GAC_64\System.EnterpriseServices\

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\dark\backup.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\dark\backup.exe" C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\dark\

C:\Program Files\Microsoft Office\root\Office16\PersonaSpy\backup.exe

"C:\Program Files\Microsoft Office\root\Office16\PersonaSpy\backup.exe" C:\Program Files\Microsoft Office\root\Office16\PersonaSpy\

Network

Country Destination Domain Proto
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 228.249.119.40.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 2.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 58.55.71.13.in-addr.arpa udp
NL 23.62.61.194:443 www.bing.com tcp
US 8.8.8.8:53 194.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 183.59.114.20.in-addr.arpa udp
US 8.8.8.8:53 206.23.85.13.in-addr.arpa udp
US 8.8.8.8:53 240.221.184.93.in-addr.arpa udp
US 8.8.8.8:53 31.243.111.52.in-addr.arpa udp

Files

C:\Users\Admin\AppData\Local\Temp\{27FCB4BE-2E57-4AE2-B305-1F3761327CB9}\backup.exe

MD5 3d1cd701a65636dabbbeec9dd33b6fac
SHA1 18e05308bade346d8e35f0bee334e4e99dd8cca4
SHA256 68797e276109024f2bba3fd629d0f123c6a81bd61029091698f9dc977f42b07c
SHA512 be9f96c43ed95a7229326f1b54729e60b1d850e25333e84df09a5dd6e98aa6720d19973ca4ab6b0a423d1a49104ba6f90dc4866fedd9e1737fe997711d69189a

C:\Users\Admin\AppData\Local\Temp\mozilla-temp-files\backup.exe

MD5 d64853f15976d752543f6c28ee8528c3
SHA1 f0095cbe169940cf4d132922e914cc2d24969125
SHA256 6a056d17f4f7e31c443011fa5f9d736bd580300d9c939f92df9931b846ba0979
SHA512 b2da2cbee4afbcfc04ce113d8deb15d7817c3174171cdc8b1593bba42a54a08a5c1eb13fa659a39e32e89ba181d62305c9064b72394a1ba36a48c1063c4702e6

C:\Users\Admin\AppData\Local\Temp\OneNote\16.0\backup.exe

MD5 75d06d8e8d58fc2535b5dd252621e1fd
SHA1 859c7cd9fe0dca44a497a3157512d06ffa4e1e2f
SHA256 f3384c327d48b43785f6234b73ba8fd98f356fadf4d2d2c35f6798da5e5e11e5
SHA512 bc8fd66903ed4333ed656471dd00b15a82bbe02833488182d763ca225dd24dd4edfac5f68f2ac508f4ea1fee116c319585609d4affc26ce86f286b338a742c1d

C:\Users\Admin\AppData\Local\Temp\OneNote\16.0\Exported\backup.exe

MD5 a6812f38252f7f32452eb0a18a8a3f29
SHA1 3e12f24693af7b58e2b83d5a784f9c061d2d1d92
SHA256 725fda48837ec9bebdc85afbc1d73997742bab43afa3261fbcea41d3e7d77078
SHA512 1335ef7457f5a83370fb27a1f93728b7038595ab38f7bc05678608404ff6a47c716e2749b66026e49de076a268ddb743c1479032aab7c3812c4033133e4225f6

C:\backup.exe

MD5 f94079ce9e618345d82fc92d3dda5292
SHA1 dad3b09a1575d7893e13610f9e87d1c8e45cb631
SHA256 74c1ec2ee9b329a7c1fb063882474a081f350ecef9e2f9678cc645c539f06d7b
SHA512 2acee5f6e427faf48385e6a3e2e1b3f686b313fe5b84fbee1a34f5f10f753e632e2f34d4b1ee5ff091cf4425b86f9cbe01bf0058bd4ab91e8956f4b7ea5cafe2

C:\PerfLogs\backup.exe

MD5 ecdf5fad289b8cd0b51ddc88bc97c420
SHA1 4217bde50b842142f177bc8d18ab493fc3989e26
SHA256 5ae7e054fd9ec08c355ec9a88dfb0e6431444c31c51be1bbc4da7c838af12576
SHA512 27ace491c2989d016ef3eafa84cb0d77d79a43d239269b2ae12d4b80f2aedcb5392a86bf74af2c4571937699e7a94f4e73ee8234b7616f5e5e2cd87191663d68

C:\Users\Admin\AppData\Local\Temp\temp.zip

MD5 76cdb2bad9582d23c1f6f4d868218d6c
SHA1 b04f3ee8f5e43fa3b162981b50bb72fe1acabb33
SHA256 8739c76e681f900923b900c9df0ef75cf421d39cabb54650c4b9ad19b6a76d85
SHA512 5e2f959f36b66df0580a94f384c5fc1ceeec4b2a3925f062d7b68f21758b86581ac2adcfdde73a171a28496e758ef1b23ca4951c05455cdae9357cc3b5a5825f

C:\Users\Admin\AppData\Local\Temp\temp.zip

MD5 b40abdf042aa851f4b28f79b53d7cefc
SHA1 5b54666cad2a3447af29caeb6b3974514b64ee74
SHA256 43bb84eb4d6d2332a16f75702b6223813e4db315d31091298dd0edf7274d9308
SHA512 66bcb5498a7f75809e25e2c7e95749d2d2bf65820526756d4a7cf09355926d2353e0366456c159eb4cb48bdca9d2dc0ee298f5937fd40d8a46b8ff041d586055

C:\Program Files\7-Zip\backup.exe

MD5 b9bf59443a6a6715f16f9158e88c6d7d
SHA1 9d827a80cd0328d392d489ff50e5231004ff69aa
SHA256 d117e3b7b975510972f881a72c0c4ac4ce03e306e8fff85c108f80c37f2aa69e
SHA512 e7a719100572916baca036d4ef67295670c95da66742f888931b9b5ef6891584d0c8da0dba53f21494022be545edaa5a8fe15cbb2d7a2f92880fb7311799b008

C:\Program Files\7-Zip\Lang\backup.exe

MD5 f4dbcde2d1247e43fb23c2ecccc517d0
SHA1 f8dce667ea4c2545bcbd17e6ef6b7958ebbb3b89
SHA256 2fa832f7d50031652f9d7f65d9e89c8636642246fb5bd9975b7df9c5050634d5
SHA512 a66a1bfbe91292a56bb8e19eda862cee7e82fb61f62496572d0b7064897d74742f27f82d5cb7a5defde94e51d2f0852774360aaa17eab43c03dfbb4aa471b904

C:\Program Files\Common Files\microsoft shared\backup.exe

MD5 724c7ae4ea14e5798cb0ea53197fd7c3
SHA1 b0d3d959608ea1c71db60ec433de1db7c20cba4f
SHA256 fa1609889200233f7a671d891f4982f23a8a5ee890db082d292f29462a148489
SHA512 4a82f83bd0353b6541705a8ea70dd65e64bea69dbb3331d9992c19dc572b84574e4071659243a397c1c824d852c303dde557f2ddcfe3227e32b27317e296680a

C:\Program Files\Common Files\microsoft shared\ClickToRun\update.exe

MD5 4fadbb730492373fa2fb9d9dc1f10cbf
SHA1 aa8d24fcf95ae0ba8f5b1cfe866efc6268a69e7e
SHA256 7eb49fb385bb81751c35d36805527b9cb61bbc93dfd402f398472b30671c604f
SHA512 ab76762710d9143e8631cfa41f18597b52c707d572c8b52aceaa94c6fcc647a22b13b83f670200f3bc75471dcbe7f8d4e92841116cb7f4e4228923cdc91cda24

C:\Program Files\Common Files\microsoft shared\ink\ar-SA\backup.exe

MD5 63c83e8e4b80f84d866980537f2bc2e6
SHA1 1b3a1ad503bd6529feb551a5ca8036ee587b5a76
SHA256 d6eea6553472ad5c8eb8b754ad24d761c1a448aca3e2155af60f789285d4db67
SHA512 4adc466d319b8c0cae80cbcea55938eb9160cbb532f1ee3adc67fcb21a9d3bcc6fe1658313e069e09aba09a4db3e90a11968811c606d273ca1d66b818b7a5443

C:\Program Files\Common Files\microsoft shared\ink\et-EE\backup.exe

MD5 db5008005bcff26dbeaa4c1e7ff74942
SHA1 3cc140ee5d581e5d3e37914710a1ddc5bcd0fcae
SHA256 71505832db37844e3d2f1504bf32b909660c90ab160a95457ef2ccf661e6420a
SHA512 8b85f00d9494c948e73f468ac6067f68feae8ed8e34f6f999a43be0aa4a11a9aa9cae418ba81e917a32bfcc3cca2018272dd24de39e6aa188a2b1d5267692ee9