We received the file RUPDATE.EXE and detected that RUPDATE.EXE is not good.
RUPDATE.EXE is Adware. You should remove the file RUPDATE.EXE.
Kill the process RUPDATE.EXE and remove RUPDATE.EXE from Windows.
Malware Analysis of RUPDATE.EXE
Full path on a computer: %Temp%\7z2F5D2CD0\application\rupdate.exe
Detected by UnHackMe:
RUPDATE.EXE
Default location: %Temp%\7z2F5D2CD0\application\rupdate.exe
Removal Results: Success
Number of reboot: 1
RUPDATE.EXE is known as:
Adware.BlackFriday
RUPDATE.EXE hash:
- MD5: dea27501e6e517813d50475a77b88685
The file tries to connect to the dangerous web site.
How to quickly detect RUPDATE.EXE presence?
Folders:
- %Appdata%\newSI_4
- %Appdata%\newSI_4\chrome
- %Appdata%\newSI_4\chrome\blackfriday
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\icons
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\includes
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango-ui
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\res
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\__history
- %Appdata%\Rambler
- %Appdata%\Rambler\Holdem
- %Appdata%\Rambler\Holdem\logs
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\icons
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\includes
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\kango
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\kango-ui
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\res
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\__history
- %Local Appdata%\Rambler
- %Local Appdata%\Rambler\RamblerUpdater
- %Temp%\7z2F5D2CD0
- %Temp%\7z2F5D2CD0\application
- %Temp%\7z33354DF4
- %Temp%\7z33354DF4\chrome
- %Temp%\7z33354DF4\chrome\blackfriday
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\icons
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\includes
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango-ui
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\res
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\__history
- %Temp%\mm_1.tmp
- %Temp%\6c94509eda9e190ef178876141ebe462
Files:
- %Appdata%\newSI_4\chrome\blackfriday\config.json
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\background.html
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\extension_info.json
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\icons\button.png
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\icons\icon100.png
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\icons\icon128.png
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\icons\icon32.png
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\icons\icon48.png
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\includes\content.js
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\jquery-1.10.2.min.js
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango\backgroundscript_engine.js
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango\base.js
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango\browser.js
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango\console.js
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango\i18n.js
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango\initialize.js
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango\invoke_async.js
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango\io.js
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango\kango.js
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango\lang.js
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango\legacy.js
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango\message_target.js
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango\messaging.js
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango\storage.js
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango\timer.js
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango\userscript_client.js
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango\userscript_engine.js
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango\utils.js
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango\xhr.js
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango-ui\browser_button.js
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango-ui\context_menu.js
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango-ui\kango_api.js
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango-ui\notifications.js
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango-ui\options.js
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango-ui\remote_popup_host.html
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango-ui\remote_popup_host.js
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango-ui\ui_base.js
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\main.js
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\manifest.json
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\panel.js
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\pingex.js
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\readme.txt
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\res\config.json
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\res\sprite.png
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\__history\pingex.js.~1~
- %Appdata%\newSI_4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\__history\pingex.js.~2~
- %Appdata%\newSI_4\main.ini
- %Appdata%\newSI_4\s_inst.exe
- %Appdata%\Rambler\Holdem\logs\rupdate5.log
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\background.html
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\extension_info.json
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\icons\button.png
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\icons\icon100.png
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\icons\icon128.png
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\icons\icon32.png
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\icons\icon48.png
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\includes\content.js
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\jquery-1.10.2.min.js
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\kango\backgroundscript_engine.js
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\kango\base.js
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\kango\browser.js
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\kango\console.js
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\kango\i18n.js
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\kango\initialize.js
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\kango\invoke_async.js
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\kango\io.js
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\kango\kango.js
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\kango\lang.js
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\kango\legacy.js
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\kango\message_target.js
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\kango\messaging.js
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\kango\storage.js
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\kango\timer.js
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\kango\userscript_client.js
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\kango\userscript_engine.js
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\kango\utils.js
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\kango\xhr.js
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\kango-ui\browser_button.js
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\kango-ui\context_menu.js
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\kango-ui\kango_api.js
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\kango-ui\notifications.js
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\kango-ui\options.js
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\kango-ui\remote_popup_host.html
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\kango-ui\remote_popup_host.js
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\kango-ui\ui_base.js
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\main.js
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\manifest.json
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\panel.js
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\pingex.js
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\readme.txt
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\res\config.json
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\res\sprite.png
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\__history\pingex.js.~1~
- %Local Appdata%\Google\Chrome\User Data\Default\Extensions\gjfhcaepjoeemgkfihjhjdilnoahpcae\1.2.5_0\__history\pingex.js.~2~
- %Local Appdata%\Google\Chrome\User Data\Default\Preferences_bkp
- %Temp%\7z2F5D2CD0\application\rupdate.exe
- %Temp%\7z2F5D2CD0\main.ini
- %Temp%\7z2F5D2CD0\wrapper.exe
- %Temp%\7z33354DF4\chrome\blackfriday\config.json
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\background.html
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\extension_info.json
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\icons\button.png
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\icons\icon100.png
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\icons\icon128.png
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\icons\icon32.png
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\icons\icon48.png
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\includes\content.js
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\jquery-1.10.2.min.js
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango\backgroundscript_engine.js
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango\base.js
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango\browser.js
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango\console.js
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango\i18n.js
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango\initialize.js
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango\invoke_async.js
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango\io.js
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango\kango.js
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango\lang.js
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango\legacy.js
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango\message_target.js
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango\messaging.js
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango\storage.js
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango\timer.js
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango\userscript_client.js
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango\userscript_engine.js
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango\utils.js
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango\xhr.js
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango-ui\browser_button.js
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango-ui\context_menu.js
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango-ui\kango_api.js
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango-ui\notifications.js
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango-ui\options.js
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango-ui\remote_popup_host.html
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango-ui\remote_popup_host.js
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\kango-ui\ui_base.js
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\main.js
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\manifest.json
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\panel.js
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\pingex.js
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\readme.txt
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\res\config.json
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\res\sprite.png
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\__history\pingex.js.~1~
- %Temp%\7z33354DF4\chrome\blackfriday\gjfhcaepjoeemgkfihjhjdilnoahpcae\__history\pingex.js.~2~
- %Temp%\7z33354DF4\main.ini
- %Temp%\7z33354DF4\s_inst.exe
- %Temp%\mm_1.tmp\blackfriday_build.exe
- %Temp%\mm_1.tmp\log.txt
- %Temp%\mm_1.tmp\rambler_silent2.exe
- %Temp%\mm_1.tmp\target.zip