Trojan.Siggen32.29490

Техническая информация

Для обеспечения автозапуска и распространения

Модифицирует следующие ключи реестра

[HKLM\Software\Classes\QQBrowser.Protocol\shell\open\command] '' = '"%ProgramFiles(x86)%\Tencent\QQBrowser\QQBrowser.exe" -- "%1"'
[HKLM\Software\Classes\QQBrowser.File\shell\open\command] '' = '"%ProgramFiles(x86)%\Tencent\QQBrowser\QQBrowser.exe" -- "%1"'
[HKLM\Software\Classes\QQBrowser.heic\shell\open\command] '' = '"%ProgramFiles(x86)%\Tencent\QQBrowser\QQBrowser.exe" -- "%1"'
[HKLM\SOFTWARE\Classes\Tencent.QQBrowser.Default\.exe\shell\open\command] '' = '"%ProgramFiles(x86)%\Tencent\QQBrowser\QQBrowser.exe" %*'
[HKCU\Software\Classes\Software\Tencent\QQBrowser\shell\open\command] '' = '"%ProgramFiles(x86)%\Tencent\QQBrowser\QQBrowser.exe" -- "%1"'

Создает или изменяет следующие файлы

%WINDIR%\tasks\qqbrowser updater task.job
<SYSTEM32>\tasks\qqbrowser updater task
%WINDIR%\tasks\qqbrowser updater task(core).job
<SYSTEM32>\tasks\qqbrowser updater task(core)

Устанавливает следующие настройки сервисов

[HKLM\SYSTEM\CurrentControlSet\Services\TsQBDrv] 'Start' = '00000002'
[HKLM\SYSTEM\CurrentControlSet\Services\TsQBDrv] 'ImagePath' = '<DRIVERS>\TsQBDrv1.sys'
[HKLM\SYSTEM\CurrentControlSet\Services\TsQBDrv\] 'ImagePath' = '<DRIVERS>\TsQBDrv.sys'
[HKLM\SYSTEM\CurrentControlSet\services\TsQBDrv\] 'Start' = '00000002'
[HKLM\SYSTEM\CurrentControlSet\Services\TxQBService] 'Start' = '00000002'
[HKLM\SYSTEM\CurrentControlSet\Services\TxQBService] 'ImagePath' = '"%ProgramFiles(x86)%\Tencent\QQBrowser\TsService.exe"'

Создает следующие сервисы

'TsQBDrv' <DRIVERS>\TsQBDrv1.sys
'TsQBDrv' <DRIVERS>\TsQBDrv.sys
'TxQBService' %ProgramFiles(x86)%\Tencent\QQBrowser\TsService.exe

Вредоносные функции

Патчит код

в динамической библиотеке

Процесс conkpip.exe, модуль KERNELBASE.dll
Процесс qqbrowser.exe, модуль KERNEL32.dll
Процесс qqbrowser.exe, модуль KERNELBASE.dll
Процесс qbpin.exe, модуль KERNELBASE.dll
Процесс qqbrowser.exe, модуль USER32.dll
Процесс qqbrowser.exe, модуль win32u.dll
Процесс qqbrowser.exe, модуль ADVAPI32.dll
Процесс tsservice.exe, модуль KERNEL32.dll
Процесс tsservice.exe, модуль KERNELBASE.dll

в динамической библиотеке NTDLL

Процесс qqbrowser.exe, модуль ntdll.dll
Процесс tsservice.exe, модуль ntdll.dll

Читает файлы, отвечающие за хранение паролей сторонними программами

%LOCALAPPDATA%\tencent\qqbrowser\user data\default\web data
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cookies
%APPDATA%\mozilla\firefox\profiles.ini

Регистрирует фильтр файловой системы

[HKLM\SYSTEM\CurrentControlSet\Services\TsQBDrv] 'Group' = 'FSFilter Top'

Изменения в файловой системе

Создает следующие файлы

%APPDATA%\tencent\qqbrowser\setuplog\2026-03-21 16_48_40.log
%TEMP%\14abdab25\bin\exportfavhtml.dll
%TEMP%\14abdab25\nsis_skin.gt
%TEMP%\14abdab25\config.xml
%TEMP%\14abdab25\customerjoinplan.txt
%TEMP%\14abdab25\license.txt
%TEMP%\14abdab25\qbpin.exe
%TEMP%\14abdab25\bin\history
%TEMP%\14abdab25\bin\data\manifest
%TEMP%\14abdab25\bin\switch_core
%TEMP%\14abdab25\bin\chrome_100_percent.pak
%TEMP%\14abdab25\bin\chrome_200_percent.pak
%TEMP%\14abdab25\bin\locales\qb\en-us.pak
%TEMP%\14abdab25\bin\locales\en-us.pak
%TEMP%\14abdab25\bin\qb_100_percent.pak
%TEMP%\14abdab25\bin\qb_200_percent.pak
%TEMP%\14abdab25\bin\resources.pak
%TEMP%\14abdab25\bin\locales\qb\zh-cn.pak
%TEMP%\14abdab25\bin\locales\zh-cn.pak
%TEMP%\14abdab25\bin\download.wav
%TEMP%\14abdab25\bin\data\pdf2htmlex-64x64.png
%TEMP%\14abdab25\bin\app.ico
%TEMP%\14abdab25\bin\navi.ico
%TEMP%\14abdab25\bin\navi2.ico
%TEMP%\14abdab25\bin\video.ico
%TEMP%\14abdab25\bin\natives_blob.bin
%TEMP%\14abdab25\bin\snapshot_blob.bin
%TEMP%\14abdab25\bin\1.63.6721.400.manifest
%TEMP%\14abdab25\bin\10.2.2243.400.manifest
%TEMP%\14abdab25\bin\compat.xml
%TEMP%\14abdab25\bin\data\base.css
%TEMP%\14abdab25\bin\data\fancy.css
%TEMP%\14abdab25\bin\data\compatibility.min.js
%TEMP%\14abdab25\bin\data\pdf2htmlex.min.js
%TEMP%\14abdab25\bin\extensions\account-helper.crx
%TEMP%\14abdab25\bin\extensions\cloud-collection.crx
%TEMP%\14abdab25\bin\extensions\commenextension.crx
%TEMP%\14abdab25\bin\extensions\game-box.crx
%TEMP%\14abdab25\bin\extensions\live_box.crx
%TEMP%\14abdab25\bin\extensions\netservice.crx
%TEMP%\14abdab25\bin\extensions\pic_edit.crx
%TEMP%\14abdab25\bin\extensions\qbfixerplugin.crx
%TEMP%\14abdab25\bin\extensions\sidebar_nav.crx
%TEMP%\14abdab25\bin\extensions\translator-common.crx
%TEMP%\14abdab25\bin\extensions\video_box.crx
%TEMP%\14abdab25\bin\frame_icudtl.dat
%TEMP%\14abdab25\bin\icudtl.dat
%TEMP%\14abdab25\bin\tssafeedit.dat
%TEMP%\14abdab25\bin\tsurllib.dat
%TEMP%\14abdab25\bin\pepperflash\manifest.json
%TEMP%\14abdab25\bin\pdf_config.json
%TEMP%\14abdab25\bin\service\tsservice.exe.new
%TEMP%\14abdab25\bin\moduledll\{0508df1f-2ab6-4fac-a99e-45bbbf24e1e6}.qrx
%TEMP%\14abdab25\bin\bugreport.exe
%TEMP%\14abdab25\bin\delayupdate.exe
%TEMP%\14abdab25\bin\qbdelayupdate.exe
%TEMP%\14abdab25\bin\qbroker\qbroker.exe
%TEMP%\14abdab25\bin\qbroker\qbroker64.exe
%TEMP%\14abdab25\bin\qqbrowser.exe
%TEMP%\14abdab25\bin\qqbrowserfix.exe
%TEMP%\14abdab25\bin\qqbrowserliveup.exe
%TEMP%\14abdab25\bin\uninst.exe
%TEMP%\14abdab25\bin\chrome.dll
%TEMP%\14abdab25\bin\chrome_child.dll
%TEMP%\14abdab25\bin\chrome_elf.dll
%TEMP%\14abdab25\bin\d3dcompiler_47.dll
%TEMP%\14abdab25\bin\downloader.dll
%TEMP%\14abdab25\bin\f1assistant.dll
%TEMP%\14abdab25\bin\f1frame.dll
%TEMP%\14abdab25\bin\frameloader.dll
%TEMP%\14abdab25\bin\heicdecodeextend.dll
%TEMP%\14abdab25\bin\libegl.dll
%TEMP%\14abdab25\bin\swiftshader\libegl.dll
%TEMP%\14abdab25\bin\swiftshader\libglesv2.dll
%TEMP%\14abdab25\bin\libglesv2.dll
%TEMP%\14abdab25\bin\pepperflash\pepflashplayer.dll
%TEMP%\14abdab25\bin\plugin\perftools.dll
%TEMP%\14abdab25\bin\prscrn.dll
%TEMP%\14abdab25\bin\prscrnnew.dll
%TEMP%\14abdab25\bin\qbaps.dll
%TEMP%\14abdab25\bin\qbdextend.dll
%TEMP%\14abdab25\bin\qbforceupdate.dll
%TEMP%\14abdab25\bin\qrcode.dll
%TEMP%\14abdab25\bin\driver\tsqbdrvdll.dll
%TEMP%\14abdab25\bin\webp\webpdecodefilter.dll
%TEMP%\14abdab25\bin\widevinecdm\_platform_specific\win_x86\widevinecdmadapter.dll
%TEMP%\14abdab25\bin\driver\amd64\tsqbdrv.sys
%TEMP%\14abdab25\bin\driver\win10_x64\tsqbdrv.sys
%TEMP%\14abdab25\bin\driver\i386\tsqbdrv.sys
%TEMP%\14abdab25\bin\driver\win10_x32\tsqbdrv.sys
%TEMP%\14abdab25\appdata\default\config bookmarks
%TEMP%\14abdab25\appdata\default\features
%TEMP%\14abdab25\appdata\default\history2
%TEMP%\14abdab25\appdata\default\searchfav
%TEMP%\14abdab25\appdata\switch_core
%TEMP%\14abdab25\appdata\default\config bookmarks.zip
%TEMP%\14abdab25\appdata\tradebookmark\current.zip
%TEMP%\14abdab25\appdata\tradebookmark\extension.zip
%TEMP%\14abdab25\appdata\uninstall\blue_btn.png
%TEMP%\14abdab25\appdata\uninstall\blue_btn_long.png
%TEMP%\14abdab25\appdata\uninstall\btn.png
%TEMP%\14abdab25\appdata\uninstall\btn_long.png
%TEMP%\14abdab25\appdata\uninstall\privilege_chrome.png
%TEMP%\14abdab25\appdata\uninstall\privilege_qq.png
%TEMP%\14abdab25\appdata\uninstall\privilege_xunzhang.png
%TEMP%\14abdab25\appdata\uninstall\text_repair.png
%TEMP%\14abdab25\appdata\uninstall\uninstall_repair.png
%TEMP%\14abdab25\appdata\associcon\crx.ico
%TEMP%\14abdab25\appdata\associcon\flv.ico
%TEMP%\14abdab25\appdata\associcon\general.ico
%TEMP%\14abdab25\appdata\associcon\gif.ico
%TEMP%\14abdab25\appdata\associcon\jpg.ico
%TEMP%\14abdab25\appdata\associcon\pdf.ico
%TEMP%\14abdab25\appdata\associcon\png.ico
%TEMP%\14abdab25\appdata\associcon\swf.ico
%TEMP%\14abdab25\appdata\associcon\xml.ico
%TEMP%\14abdab25\appdata\compat.xml
%TEMP%\14abdab25\appdata\qqtrack.xml
%TEMP%\14abdab25\appdata\uninstall\uninstalluiconfig.xml
%TEMP%\14abdab25\appdata\xaml\bookmarkbubble.xaml
%TEMP%\14abdab25\appdata\xaml\bookmarkedit.xaml
%TEMP%\14abdab25\appdata\xaml\cleardialog.xaml
%TEMP%\14abdab25\appdata\xaml\informationbox.xaml
%TEMP%\14abdab25\appdata\xaml\linkpromptdialog.xaml
%TEMP%\14abdab25\appdata\xaml\piccheckdialog.xaml
%TEMP%\14abdab25\appdata\xaml\shareweb.xaml
%TEMP%\14abdab25\appdata\xaml\virtualhome_bottomcategoryleft.xaml
%TEMP%\14abdab25\appdata\xaml\virtualhome_bottomcategoryright.xaml
%TEMP%\14abdab25\appdata\xaml\virtualhome_gameview.xaml
%TEMP%\14abdab25\appdata\xaml\virtualhome_guessinterestview.xaml
%TEMP%\14abdab25\appdata\xaml\virtualhome_horbarsecond.xaml
%TEMP%\14abdab25\appdata\xaml\virtualhome_horbarthird.xaml
%TEMP%\14abdab25\appdata\xaml\virtualhome_newsview.xaml
%TEMP%\14abdab25\appdata\xaml\virtualhome_novelview.xaml
%TEMP%\14abdab25\appdata\xaml\virtualhome_rightverticalbar.xaml
%TEMP%\14abdab25\appdata\xaml\virtualhome_shoppingview.xaml
%TEMP%\14abdab25\appdata\xaml\virtualhome_videoview.xaml
%TEMP%\14abdab25\appdata\dbghelper\dbgeng.dll
%TEMP%\14abdab25\appdata\dbghelper\dbghelp.dll
%TEMP%\14abdab25\union\readtme.txt
%TEMP%\14abdab25\union\binver\widevinecdm\manifest.json
%TEMP%\14abdab25\union\binver\widevinecdm\_platform_specific\win_x86\widevinecdm.dll.sig
%TEMP%\14abdab25\union\binver\widevinecdm\_platform_specific\win_x86\widevinecdmadapter.dll.sig
%TEMP%\14abdab25\union\bin\gamesp\fancyexelauncher.exe
%TEMP%\14abdab25\union\binver\kinst_94_26.exe
%TEMP%\14abdab25\union\binver\word2html.exe
%TEMP%\14abdab25\union\bin\gamesp\fancygame.dll
%TEMP%\14abdab25\union\bin\gamesp\npjlgplayer3.dll
%TEMP%\14abdab25\union\binver\tpgdecodeextend.dll
%TEMP%\14abdab25\union\binver\widevinecdm\_platform_specific\win_x86\widevinecdm.dll
%TEMP%\14abdab25\union\binver\widevinecdm\_platform_specific\win_x86\widevinecdmadapter.dll
%TEMP%\14abdab25\union\binver\wxapkg.dll
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\1.63.6721.400.manifest
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\10.2.2243.400.manifest
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\app.ico
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\bugreport.exe
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\chrome.dll
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\chrome_100_percent.pak
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\chrome_200_percent.pak
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\chrome_child.dll
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\chrome_elf.dll
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\compat.xml
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\d3dcompiler_47.dll
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\data\base.css
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\data\compatibility.min.js
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\data\fancy.css
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\data\manifest
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\data\pdf2htmlex-64x64.png
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\data\pdf2htmlex.min.js
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\delayupdate.exe
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\download.wav
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\downloader.dll
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\driver\amd64\tsqbdrv.sys
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\driver\i386\tsqbdrv.sys
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\driver\tsqbdrvdll.dll
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\driver\win10_x32\tsqbdrv.sys
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\driver\win10_x64\tsqbdrv.sys
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\exportfavhtml.dll
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\extensions\account-helper.crx
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\extensions\cloud-collection.crx
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\extensions\commenextension.crx
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\extensions\game-box.crx
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\extensions\live_box.crx
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\extensions\netservice.crx
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\extensions\pic_edit.crx
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\extensions\qbfixerplugin.crx
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\extensions\sidebar_nav.crx
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\extensions\translator-common.crx
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\extensions\video_box.crx
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\f1assistant.dll
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\f1frame.dll
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\frameloader.dll
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\frame_icudtl.dat
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\heicdecodeextend.dll
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\history
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\icudtl.dat
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\libegl.dll
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\libglesv2.dll
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\locales\en-us.pak
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\locales\qb\en-us.pak
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\locales\qb\zh-cn.pak
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\locales\zh-cn.pak
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\moduledll\{0508df1f-2ab6-4fac-a99e-45bbbf24e1e6}.qrx
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\natives_blob.bin
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\navi.ico
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\navi2.ico
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\pdf_config.json
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\pepperflash\manifest.json
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\pepperflash\pepflashplayer.dll
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\plugin\perftools.dll
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\prscrn.dll
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\prscrnnew.dll
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\qbaps.dll
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\qbdelayupdate.exe
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\qbdextend.dll
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\qbforceupdate.dll
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\qbroker\qbroker.exe
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\qbroker\qbroker64.exe
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\qb_100_percent.pak
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\qb_200_percent.pak
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\qqbrowser.exe
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\qqbrowserfix.exe
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\qqbrowserliveup.exe
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\qrcode.dll
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\resources.pak
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\service\tsservice.exe.new
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\snapshot_blob.bin
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\swiftshader\libegl.dll
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\swiftshader\libglesv2.dll
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\switch_core
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\tssafeedit.dat
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\tsurllib.dat
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\uninst.exe
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\video.ico
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\webp\webpdecodefilter.dll
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\widevinecdm\_platform_specific\win_x86\widevinecdmadapter.dll
%ProgramFiles(x86)%\tencent\qqbrowser\qqbrowser.exe
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\nsis_skin.gt
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\qbpin.exe
%ProgramFiles(x86)%\tencent\qqbrowser\bugreport.exe
%ProgramFiles(x86)%\tencent\qqbrowser\navi.ico
%ProgramFiles(x86)%\tencent\qqbrowser\navi2.ico
%ProgramFiles(x86)%\tencent\qqbrowser\prscrnnew.dll
%ProgramFiles(x86)%\tencent\qqbrowser\uninst.exe
%ProgramFiles(x86)%\tencent\qqbrowser\app.ico
%LOCALAPPDATA%\tencent\qqbrowser\user data\liveup\temp\qqbrowserliveup.exe
%ProgramFiles(x86)%\tencent\qqbrowser\plugin\perftools.dll
%LOCALAPPDATA%\tencent\qqbrowser\user data\qqtrack.xml
%LOCALAPPDATA%\tencent\qqbrowser\user data\compat.xml
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\config bookmarks.zip
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\searchfav
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\features
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\history2
%LOCALAPPDATA%\tencent\qqbrowser\user data\dbghelper\dbgeng.dll
%LOCALAPPDATA%\tencent\qqbrowser\user data\dbghelper\dbghelp.dll
%LOCALAPPDATA%\tencent\qqbrowser\user data\uninstall\blue_btn.png
%LOCALAPPDATA%\tencent\qqbrowser\user data\uninstall\blue_btn_long.png
%LOCALAPPDATA%\tencent\qqbrowser\user data\uninstall\btn.png
%LOCALAPPDATA%\tencent\qqbrowser\user data\uninstall\btn_long.png
%LOCALAPPDATA%\tencent\qqbrowser\user data\uninstall\privilege_chrome.png
%LOCALAPPDATA%\tencent\qqbrowser\user data\uninstall\privilege_qq.png
%LOCALAPPDATA%\tencent\qqbrowser\user data\uninstall\privilege_xunzhang.png
%LOCALAPPDATA%\tencent\qqbrowser\user data\uninstall\text_repair.png
%LOCALAPPDATA%\tencent\qqbrowser\user data\uninstall\uninstalluiconfig.xml
%LOCALAPPDATA%\tencent\qqbrowser\user data\uninstall\uninstall_repair.png
%LOCALAPPDATA%\tencent\qqbrowser\user data\associcon\crx.ico
%LOCALAPPDATA%\tencent\qqbrowser\user data\associcon\flv.ico
%LOCALAPPDATA%\tencent\qqbrowser\user data\associcon\general.ico
%LOCALAPPDATA%\tencent\qqbrowser\user data\associcon\gif.ico
%LOCALAPPDATA%\tencent\qqbrowser\user data\associcon\jpg.ico
%LOCALAPPDATA%\tencent\qqbrowser\user data\associcon\pdf.ico
%LOCALAPPDATA%\tencent\qqbrowser\user data\associcon\png.ico
%LOCALAPPDATA%\tencent\qqbrowser\user data\associcon\swf.ico
%LOCALAPPDATA%\tencent\qqbrowser\user data\associcon\xml.ico
%APPDATA%\tencent\qqbrowser\tradebookmark\current.zip
%APPDATA%\tencent\qqbrowser\tradebookmark\extension.zip
%ProgramFiles(x86)%\tencent\qqbrowser\gamesp\fancyexelauncher.exe
%ProgramFiles(x86)%\tencent\qqbrowser\gamesp\fancygame.dll
%ProgramFiles(x86)%\tencent\qqbrowser\gamesp\npjlgplayer3.dll
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\kinst_94_26.exe
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\tpgdecodeextend.dll
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\widevinecdm\manifest.json
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\widevinecdm\_platform_specific\win_x86\widevinecdm.dll
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\widevinecdm\_platform_specific\win_x86\widevinecdm.dll.sig
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\widevinecdm\_platform_specific\win_x86\widevinecdmadapter.dll.sig
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\word2html.exe
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\wxapkg.dll
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\qbsafe.dll
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\manifest.json
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\preferences_01
%TEMP%\2177e630-cf50-4467-9aeb-6b345ee91929.tmp
%TEMP%\scoped_dir_1968_16806\live_box.crx
%TEMP%\scoped_dir_1968_16806\crx_install\background.html
%TEMP%\scoped_dir_1968_16806\crx_install\background.js
%TEMP%\scoped_dir_1968_16806\crx_install\favicon.ico
%TEMP%\scoped_dir_1968_16806\crx_install\index.html
%TEMP%\scoped_dir_1968_16806\crx_install\index.js
%TEMP%\scoped_dir_1968_16806\crx_install\popup.css
%TEMP%\scoped_dir_1968_16806\crx_install\manifest.json
%TEMP%\scoped_dir_1968_16806\crx_install\popup.html
%TEMP%\scoped_dir_1968_16806\crx_install\popup.js
%TEMP%\scoped_dir_1968_16806\crx_install\img\1.png
%TEMP%\scoped_dir_1968_16806\crx_install\img\checkbox-checked.png
%TEMP%\scoped_dir_1968_16806\crx_install\img\checkbox.png
%TEMP%\scoped_dir_1968_16806\crx_install\img\follow-btn-1.png
%TEMP%\scoped_dir_1968_16806\crx_install\img\follow-btn.png
%TEMP%\scoped_dir_1968_16806\crx_install\img\icon-back.png
%TEMP%\scoped_dir_1968_16806\crx_install\img\icon-beauty-hot.png
%TEMP%\scoped_dir_1968_16806\crx_install\img\icon-beauty-new.png
%TEMP%\scoped_dir_1968_16806\crx_install\img\icon-beauty.png
%TEMP%\scoped_dir_1968_16806\crx_install\img\icon-beauty-school.png
%TEMP%\scoped_dir_1968_16806\crx_install\img\icon-clear.png
%TEMP%\scoped_dir_1968_16806\crx_install\img\icon-close.png
%TEMP%\scoped_dir_1968_16806\crx_install\img\icon-del.png
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\腾讯软件\qq浏览器\qq浏览器.lnk
%TEMP%\scoped_dir_1968_16806\crx_install\img\icon-del-2.png
%TEMP%\scoped_dir_1968_16806\crx_install\img\icon-down.png
%TEMP%\scoped_dir_1968_16806\crx_install\img\icon-game-hot.png
%TEMP%\scoped_dir_1968_16806\crx_install\img\icon-heart.png
%TEMP%\scoped_dir_1968_16806\crx_install\img\icon-history.png
%TEMP%\scoped_dir_1968_16806\crx_install\img\icon-hold.png
%TEMP%\scoped_dir_1968_16806\crx_install\img\icon-hook.png
%TEMP%\scoped_dir_1968_16806\crx_install\img\icon-hot.png
%TEMP%\scoped_dir_1968_16806\crx_install\img\icon-live.png
%TEMP%\scoped_dir_1968_16806\crx_install\img\icon-living.png
%TEMP%\scoped_dir_1968_16806\crx_install\img\icon-logo-2.png
%TEMP%\scoped_dir_1968_16806\crx_install\img\icon-more-1.png
%TEMP%\scoped_dir_1968_16806\crx_install\img\icon-logo.png
%TEMP%\scoped_dir_1968_16806\crx_install\img\icon-more-2.png
%TEMP%\scoped_dir_1968_16806\crx_install\img\icon-more.png
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\腾讯软件\qq浏览器\~q浏览器.tmp
%TEMP%\scoped_dir_1968_16806\crx_install\img\icon-play.png
%TEMP%\scoped_dir_1968_16806\crx_install\img\icon-my-follow.png
%TEMP%\scoped_dir_1968_16806\crx_install\img\icon-setting.png
%TEMP%\scoped_dir_1968_16806\crx_install\img\icon-sport.png
%TEMP%\scoped_dir_1968_16806\crx_install\img\icon-star.png
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\腾讯软件\qq浏览器\卸载qq浏览器.lnk
%TEMP%\scoped_dir_1968_16806\crx_install\img\icon-success.png
%TEMP%\scoped_dir_1968_16806\crx_install\img\icon-up-1.png
C:\users\public\desktop\qq浏览器.lnk
%TEMP%\scoped_dir_1968_16806\crx_install\img\icon-up-2.png
C:\users\public\desktop\~q浏览器.tmp
%TEMP%\scoped_dir_1968_16806\crx_install\img\icon-up.png
%TEMP%\scoped_dir_1968_16806\crx_install\img\icon-viewer.png
C:\users\public\desktop\上网导航.lnk
%TEMP%\scoped_dir_1968_16806\crx_install\img\icon-zoom.png
%TEMP%\scoped_dir_1968_16806\crx_install\img\logo-128.png
%TEMP%\scoped_dir_1968_16806\crx_install\img\logo-19-red.png
%TEMP%\scoped_dir_1968_16806\crx_install\img\logo-19.png
%TEMP%\scoped_dir_1968_16806\crx_install\img\logo-48.png
%TEMP%\14abdab25\qq浏览器.lnk
%TEMP%\scoped_dir_1968_16806\crx_install\img\recommend-pop-btn.png
%TEMP%\scoped_dir_1968_16806\crx_install\img\qb10-sidebar-act\close1.png
%TEMP%\scoped_dir_1968_16806\decoded_images
%TEMP%\scoped_dir_1968_16806\decoded_message_catalogs
%TEMP%\14abdab25\~q浏览器.tmp
%TEMP%\d10ffde2-ab63-46aa-90d3-fce1e7bde8a0.tmp
%TEMP%\scoped_dir_1968_28089\translator-common.crx
%TEMP%\scoped_dir_1968_28089\crx_install\content.js
%TEMP%\scoped_dir_1968_28089\crx_install\background.js
%TEMP%\scoped_dir_1968_28089\crx_install\manifest.json
%TEMP%\scoped_dir_1968_28089\crx_install\style.css
%TEMP%\scoped_dir_1968_28089\crx_install\style.js
%TEMP%\scoped_dir_1968_28089\crx_install\static\128yiiconblack.png
%TEMP%\scoped_dir_1968_28089\crx_install\static\16yiiconblack.png
%TEMP%\scoped_dir_1968_28089\crx_install\static\48yiiconblack.png
%TEMP%\scoped_dir_1968_28089\crx_install\static\19yiiconblack.png
%TEMP%\scoped_dir_1968_28089\crx_install\static\arrowdown.png
%TEMP%\scoped_dir_1968_28089\crx_install\static\arrowdownnormal.png
%TEMP%\scoped_dir_1968_28089\crx_install\static\arrowdownhover&press.png
%TEMP%\scoped_dir_1968_28089\crx_install\static\arrowdownhover.png
%TEMP%\scoped_dir_1968_28089\crx_install\static\btnclose2.png
%TEMP%\scoped_dir_1968_28089\crx_install\static\btnclose2hover.png
%TEMP%\scoped_dir_1968_28089\crx_install\static\btnclose2normal.png
%TEMP%\scoped_dir_1968_28089\crx_install\static\btn_checkboxoff_hover.png
%TEMP%\scoped_dir_1968_28089\crx_install\static\btn_checkboxoff_normal.png
%TEMP%\scoped_dir_1968_28089\crx_install\static\btn_checkboxoff_press.png
%TEMP%\scoped_dir_1968_28089\crx_install\static\btn_checkboxon_hover.png
%TEMP%\scoped_dir_1968_28089\crx_install\static\btn_checkboxon_normal.png
%TEMP%\scoped_dir_1968_28089\crx_install\static\btn_checkboxon_press.png
%TEMP%\scoped_dir_1968_28089\crx_install\static\favicon.ico
%TEMP%\scoped_dir_1968_28089\crx_install\static\iconarrowdown.png
%TEMP%\scoped_dir_1968_28089\crx_install\static\iconarrowright.png
%TEMP%\scoped_dir_1968_28089\crx_install\static\iconblack.png
%TEMP%\scoped_dir_1968_28089\crx_install\static\iconchange.png
%TEMP%\scoped_dir_1968_28089\crx_install\static\iconchangedisable.png
%TEMP%\scoped_dir_1968_28089\crx_install\static\iconchangehover&press.png
%TEMP%\scoped_dir_1968_28089\crx_install\static\iconchangenormal.png
%TEMP%\scoped_dir_1968_28089\crx_install\static\iconfinsh.png
%TEMP%\scoped_dir_1968_28089\crx_install\static\iconwhite.png
%TEMP%\scoped_dir_1968_28089\crx_install\static\imgerror.png
%TEMP%\scoped_dir_1968_28089\crx_install\static\img_logo.png
%TEMP%\scoped_dir_1968_28089\crx_install\static\img_logo16.png
%TEMP%\scoped_dir_1968_28089\crx_install\static\loading.gif
%TEMP%\scoped_dir_1968_28089\crx_install\static\new_1x.png
%TEMP%\scoped_dir_1968_28089\crx_install\static\new_2x.png
%TEMP%\scoped_dir_1968_28089\crx_install\static\pageselect.png
%TEMP%\scoped_dir_1968_28089\crx_install\static\powered.png
%TEMP%\scoped_dir_1968_28089\crx_install\static\radiobox_c_hover.png
%TEMP%\scoped_dir_1968_28089\crx_install\static\radiobox_c_normal.png
%TEMP%\scoped_dir_1968_28089\crx_install\static\radiobox_c_press.png
%TEMP%\scoped_dir_1968_28089\crx_install\static\radiobox_hover.png
%TEMP%\scoped_dir_1968_28089\crx_install\static\radiobox_normal.png
%TEMP%\scoped_dir_1968_28089\crx_install\static\radiobox_press.png
%TEMP%\scoped_dir_1968_28089\crx_install\page\option\option.js
%TEMP%\scoped_dir_1968_28089\crx_install\static\timg.png
%TEMP%\scoped_dir_1968_28089\crx_install\page\option\filtercontent.js
%TEMP%\scoped_dir_1968_28089\crx_install\page\option\options.html
%TEMP%\scoped_dir_1968_28089\crx_install\page\popup\filtercontent.js
%TEMP%\scoped_dir_1968_28089\crx_install\page\popup\popup.html
%TEMP%\scoped_dir_1968_28089\crx_install\page\popup\popup.js
%TEMP%\scoped_dir_1968_28089\decoded_images
%TEMP%\scoped_dir_1968_28089\decoded_message_catalogs
%TEMP%\88ad5c03-fbcd-4897-bfb7-85eb9d580cba.tmp
%TEMP%\scoped_dir_1968_15429\account-helper.crx
%TEMP%\scoped_dir_1968_15429\crx_install\background.html
%TEMP%\scoped_dir_1968_15429\crx_install\manifest.json
%TEMP%\scoped_dir_1968_15429\crx_install\options.html
%TEMP%\scoped_dir_1968_15429\crx_install\css\options.css
%TEMP%\scoped_dir_1968_15429\crx_install\img\close.png
%TEMP%\scoped_dir_1968_15429\crx_install\img\default-icon.png
%TEMP%\scoped_dir_1968_15429\crx_install\img\hide.png
%TEMP%\scoped_dir_1968_15429\crx_install\img\icon16.png
%TEMP%\scoped_dir_1968_15429\crx_install\img\icon32.png
%TEMP%\scoped_dir_1968_15429\crx_install\img\key.png
%TEMP%\scoped_dir_1968_15429\crx_install\img\logo.png
%TEMP%\scoped_dir_1968_15429\crx_install\img\show.png
%TEMP%\scoped_dir_1968_15429\crx_install\img\search.png
%TEMP%\scoped_dir_1968_15429\crx_install\js\background.js
%TEMP%\scoped_dir_1968_15429\crx_install\js\db.js
%TEMP%\scoped_dir_1968_15429\crx_install\js\find.fill.js
%TEMP%\scoped_dir_1968_15429\crx_install\js\global.js
%TEMP%\scoped_dir_1968_15429\crx_install\js\mark.js
%TEMP%\scoped_dir_1968_15429\crx_install\js\monitor.js
%TEMP%\scoped_dir_1968_15429\crx_install\js\options.js
%TEMP%\scoped_dir_1968_15429\crx_install\js\tool.js
%TEMP%\scoped_dir_1968_15429\decoded_images
%TEMP%\scoped_dir_1968_15429\decoded_message_catalogs
%TEMP%\ba437167-d686-4eea-bbad-02f331b50665.tmp
%TEMP%\scoped_dir_1968_21177\cloud-collection.crx
%TEMP%\scoped_dir_1968_21177\crx_install\background.js
%TEMP%\scoped_dir_1968_21177\crx_install\content.js
%TEMP%\scoped_dir_1968_21177\crx_install\global.css
%TEMP%\scoped_dir_1968_21177\crx_install\manifest.json
%TEMP%\scoped_dir_1968_21177\crx_install\assets\icon-disable.png
%TEMP%\scoped_dir_1968_21177\crx_install\vendor.js
%TEMP%\scoped_dir_1968_21177\crx_install\assets\like.png
%TEMP%\scoped_dir_1968_21177\crx_install\assets\like@2x.png
%TEMP%\scoped_dir_1968_21177\crx_install\assets\like@3x.png
%TEMP%\scoped_dir_1968_21177\crx_install\assets\placehoder.png
%TEMP%\scoped_dir_1968_21177\crx_install\assets\readmode.png
%TEMP%\scoped_dir_1968_21177\crx_install\assets\readmode@3x.png
%TEMP%\scoped_dir_1968_21177\crx_install\assets\un_like@2x.png
%TEMP%\scoped_dir_1968_21177\crx_install\assets\un_like.png
%TEMP%\scoped_dir_1968_21177\crx_install\assets\un_like@3x.png
%TEMP%\scoped_dir_1968_21177\crx_install\assets\_readmode@3x.png
%TEMP%\scoped_dir_1968_21177\crx_install\dialog\dialog.html
%TEMP%\scoped_dir_1968_21177\crx_install\assets\_readmode.png
%TEMP%\scoped_dir_1968_21177\crx_install\list\list.html
%TEMP%\scoped_dir_1968_21177\crx_install\dialog\dialog.js
%TEMP%\scoped_dir_1968_21177\crx_install\list\list.js
%TEMP%\scoped_dir_1968_21177\decoded_images
%TEMP%\scoped_dir_1968_21177\decoded_message_catalogs
%TEMP%\b44fe74d-1db8-4771-b792-4d14b5f283c5.tmp
%TEMP%\scoped_dir_1968_31269\pic_edit.crx
%TEMP%\scoped_dir_1968_31269\crx_install\background.html
%TEMP%\scoped_dir_1968_31269\crx_install\manifest.json
%TEMP%\scoped_dir_1968_31269\crx_install\js\background.js
%TEMP%\scoped_dir_1968_31269\crx_install\js\fabric.min.js
%TEMP%\scoped_dir_1968_31269\crx_install\js\loader.js
%TEMP%\scoped_dir_1968_31269\crx_install\images\128.png
%TEMP%\scoped_dir_1968_31269\crx_install\images\19.png
%TEMP%\scoped_dir_1968_31269\crx_install\images\48.png
%TEMP%\scoped_dir_1968_31269\crx_install\images\editicons2.png
%TEMP%\scoped_dir_1968_31269\crx_install\images\hand_grab.cur
%TEMP%\scoped_dir_1968_31269\crx_install\images\hand_grabbing.cur
%TEMP%\scoped_dir_1968_31269\crx_install\images\loading.png
%TEMP%\scoped_dir_1968_31269\crx_install\images\look.png
%TEMP%\scoped_dir_1968_31269\crx_install\css\style.css
%TEMP%\scoped_dir_1968_31269\decoded_images
%TEMP%\scoped_dir_1968_31269\decoded_message_catalogs
%TEMP%\b33c3ba8-31e5-4f33-9871-d99f69527599.tmp
%TEMP%\scoped_dir_1968_2952\game-box.crx
%TEMP%\scoped_dir_1968_2952\crx_install\manifest.json
%TEMP%\scoped_dir_1968_2952\crx_install\font\icomoon.eot
%TEMP%\scoped_dir_1968_2952\crx_install\font\icomoon.svg
%TEMP%\scoped_dir_1968_2952\crx_install\font\icomoon.ttf
%TEMP%\scoped_dir_1968_2952\crx_install\font\icomoon.woff
%TEMP%\scoped_dir_1968_2952\crx_install\img\128.png
%TEMP%\scoped_dir_1968_2952\crx_install\img\16.png
%TEMP%\scoped_dir_1968_2952\crx_install\img\48.png
%TEMP%\scoped_dir_1968_2952\crx_install\img\hot.png
%TEMP%\scoped_dir_1968_2952\crx_install\img\profile.png
%TEMP%\scoped_dir_1968_2952\crx_install\js\background.js
%TEMP%\scoped_dir_1968_2952\crx_install\js\content.js
%TEMP%\scoped_dir_1968_2952\crx_install\js\manifest.js
%TEMP%\scoped_dir_1968_2952\crx_install\js\popup.js
%TEMP%\scoped_dir_1968_2952\crx_install\js\vendor.js
%TEMP%\scoped_dir_1968_2952\crx_install\pages\background.html
%TEMP%\scoped_dir_1968_2952\crx_install\pages\popup.html
%TEMP%\scoped_dir_1968_2952\decoded_images
%TEMP%\scoped_dir_1968_2952\decoded_message_catalogs
%TEMP%\fa6256a5-23dc-419e-a21e-6e3f36ac587e.tmp
%TEMP%\scoped_dir_1968_6094\sidebar_nav.crx
%TEMP%\scoped_dir_1968_6094\crx_install\background.html
%TEMP%\scoped_dir_1968_6094\crx_install\manifest.json
%TEMP%\scoped_dir_1968_6094\crx_install\js\mark.js
%TEMP%\scoped_dir_1968_6094\crx_install\js\site_bg.js
%TEMP%\scoped_dir_1968_6094\crx_install\js\global.js
%TEMP%\scoped_dir_1968_6094\crx_install\js\monitor.js
%TEMP%\scoped_dir_1968_6094\crx_install\js\tool.js
%TEMP%\scoped_dir_1968_6094\decoded_images
%TEMP%\scoped_dir_1968_6094\decoded_message_catalogs
%TEMP%\1c491731-2609-47e1-9542-cb6ba3aeb9ad.tmp
%TEMP%\57e0f6fc-6f85-4119-8eb9-d8886fd5562a.tmp
%TEMP%\scoped_dir_1968_27425\commenextension.crx
%TEMP%\scoped_dir_1968_27425\crx_install\background.html
%TEMP%\scoped_dir_1968_27425\crx_install\background.js
%TEMP%\scoped_dir_1968_27425\crx_install\manifest.json
%TEMP%\scoped_dir_1968_27425\decoded_images
%TEMP%\scoped_dir_1968_27425\decoded_message_catalogs
%TEMP%\79418eb5-130c-4be8-b657-4a10698c546e.tmp
%TEMP%\scoped_dir_1968_24203\video_box.crx
%TEMP%\scoped_dir_1968_24203\crx_install\background.html
%TEMP%\scoped_dir_1968_24203\crx_install\background.js
%TEMP%\scoped_dir_1968_24203\crx_install\favicon.ico
%TEMP%\scoped_dir_1968_24203\crx_install\index.html
%TEMP%\scoped_dir_1968_24203\crx_install\index.js
%TEMP%\scoped_dir_1968_24203\crx_install\manifest.json
%TEMP%\scoped_dir_1968_24203\crx_install\option.css
%TEMP%\scoped_dir_1968_24203\crx_install\option.js
%TEMP%\scoped_dir_1968_24203\crx_install\options.html
%TEMP%\scoped_dir_1968_24203\crx_install\popup.css
%TEMP%\scoped_dir_1968_24203\crx_install\popup.html
%TEMP%\scoped_dir_1968_24203\crx_install\popup.js
%TEMP%\scoped_dir_1968_24203\crx_install\img\128.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\19-red.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\16.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\19.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\48.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\btn-follow.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\check.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\checkbox-checked.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\icon-board.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\checkbox.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\icon-clear.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\icon-clock.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\icon-close.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\icon-comic.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\icon-del-2.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\icon-del.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\icon-down.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\icon-hold.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\icon-hot.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\icon-logo-2.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\icon-logo.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\icon-mike.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\icon-movie-1.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\icon-movie-2.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\icon-movie.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\icon-new-1.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\icon-new.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\icon-num-1.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\icon-num.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\icon-over.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\icon-play-1.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\icon-play-2.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\icon-play-3.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\icon-setting.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\icon-play.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\icon-soon.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\icon-star.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\icon-up.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\icon-tv.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\icon-variety.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\icon-vip.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\icon-zoom.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\no-history.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\recommend-follow-btn.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\sample2.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\sample1.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\sample3.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\sample4.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\setting-logo.png
%TEMP%\scoped_dir_1968_24203\crx_install\img\switch.png
%TEMP%\scoped_dir_1968_24203\decoded_images
%TEMP%\scoped_dir_1968_24203\decoded_message_catalogs
%ProgramFiles(x86)%\tencent\qqbrowser\qqbrowserconfig.dat
%TEMP%\4e533caf-5938-4a30-a31c-ca219488c206.tmp
%TEMP%\scoped_dir_1968_30678\qbfixerplugin.crx
%TEMP%\scoped_dir_1968_30678\crx_install\manifest.json
%TEMP%\scoped_dir_1968_30678\crx_install\qbfixerplugin.dll
%TEMP%\scoped_dir_1968_30678\decoded_images
%TEMP%\scoped_dir_1968_30678\decoded_message_catalogs
%TEMP%\a6bf94f2-4b8e-4fcd-a873-a14ffce8fced.tmp
%TEMP%\scoped_dir_1968_11990\netservice.crx
%TEMP%\scoped_dir_1968_11990\crx_install\manifest.json
%TEMP%\scoped_dir_1968_11990\crx_install\netservice.dll
%TEMP%\scoped_dir_1968_11990\decoded_images
%TEMP%\scoped_dir_1968_11990\decoded_message_catalogs
%ProgramFiles(x86)%\tencent\qqbrowser\tsservice.exe.new
<DRIVERS>\tsqbdrv.sys
%ProgramFiles(x86)%\tencent\qqbrowser\driver\tsqbdrvdll.dll
%ALLUSERSPROFILE%\microsoft\crypto\rsa\s-1-5-18\d42cc0c3858a58db2db37658219e6400_8cf7b530-613e-439b-a8c5-ccfc0e745400
%APPDATA%\tencent\qqbrowser\lastchecktime
%LOCALAPPDATA%\tencent\qqbrowser\user data\switch_core
%LOCALAPPDATA%\tencent\qqbrowser\user data\switch_core-journal
%LOCALAPPDATA%\tencent\qqbrowser\user data\switch_core_manual-journal
%LOCALAPPDATA%\tencent\qqbrowser\user data\switch_core_manual
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\web data-journal
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\quick links-journal
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\top sites-journal
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\quick links
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\web data
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\top sites
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\history
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\history-journal
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\favicons-journal
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\favicons
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\0dcbf0fa-d662-4669-9afe-94c488825fe5.tmp
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\previews_opt_out.db-journal
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\previews_opt_out.db
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\aa96610d-eb14-440b-aaaa-261d66aef5a9.tmp
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\shortcuts-journal
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\shortcuts
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\thumbnails\manifest-000001
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\thumbnails\000001.dbtmp
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\thumbnails\log
%TEMP%\e365d.tmp
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\1f79dca2-11ae-4357-b83f-6651c25c88b1.tmp
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\data_reduction_proxy_leveldb\manifest-000001
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\download service\entrydb\manifest-000001
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\download service\entrydb\000001.dbtmp
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\download service\entrydb\log
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\network action predictor-journal
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\network action predictor
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\data_reduction_proxy_leveldb\000001.dbtmp
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\data_reduction_proxy_leveldb\manifest-000002
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\data_reduction_proxy_leveldb\000002.dbtmp
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\data_reduction_proxy_leveldb\log
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cookies-journal
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cookies
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\visited links
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\index
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\data_0
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\data_1
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\data_2
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\data_3
%LOCALAPPDATA%\tencent\qqbrowser\user data\onlinesetup\sso-f1\ini343b.tmp.qbl
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\current session
%LOCALAPPDATA%\tencent\qqbrowser\user data\onlinesetup\sso-f1\sso-f1.zip.qbl
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000001
%TEMP%\{982aa3e9-f701-41a7-b751-95d79f4303e6}
%LOCALAPPDATA%\tencent\qqbrowser\user data\onlinesetup\sso-f1\qqbrowserota.exe
%TEMP%\nsr4d80.tmp
%TEMP%\nsx4da1.tmp\installhelper.dll
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\b57ee778-42b7-446d-ba63-c3f7cc5ec1a8.tmp
%TEMP%\3f961b66-0159-42e9-bd0e-9ac98bf60b0b.tmp
%TEMP%\ef78a1d8-0d58-40f4-86b1-fa294b9838fe.tmp
%TEMP%\scoped_dir3620_13940\3f961b66-0159-42e9-bd0e-9ac98bf60b0b.tmp
%TEMP%\c396bc3c-2fa0-4908-be37-849ae033ec3d.tmp
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000002
%LOCALAPPDATA%\tencent\qqbrowser\user data\sso\ssocommon.dll
%TEMP%\80718195-6ac8-4f16-ae84-da42dc480d4c.tmp
%TEMP%\scoped_dir3620_19431\c396bc3c-2fa0-4908-be37-849ae033ec3d.tmp
%LOCALAPPDATA%\tencent\qqbrowser\user data\sso\ssoplatform.dll
%TEMP%\nsx4da1.tmp\system.dll
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\71a2905c-8a37-4c22-b937-e8dba201cc66.tmp
%LOCALAPPDATA%\tencent\qqbrowser\user data\moduledll\{37c546ca-de49-42e8-a373-fcea361cdb3c}\qrx4580.tmp.qbl
%LOCALAPPDATA%\tencent\qqbrowser\user data\moduledll\{37c546ca-de49-42e8-a373-fcea361cdb3c}\9.0.0.20\manifest.json
%LOCALAPPDATA%\tencent\qqbrowser\user data\moduledll\{37c546ca-de49-42e8-a373-fcea361cdb3c}\9.0.0.20\{80b2cb1d-c9cb-4536-a634-dbf8fb6e773d}
%TEMP%\scoped_dir3620_13940\crx_install\manifest.json
%TEMP%\scoped_dir3620_13940\crx_install\qbatmain.js
%TEMP%\scoped_dir3620_13940\decoded_images
%TEMP%\scoped_dir3620_13940\decoded_message_catalogs
%TEMP%\scoped_dir3620_19431\crx_install\manifest.json
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\extension rules\manifest-000001
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\extension rules\000001.dbtmp
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\extension rules\log
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\extension rules\000003.log
%LOCALAPPDATA%\tencent\qqbrowser\user data\55b5e2a3-737b-444c-8aee-1145e90996f5.tmp
%APPDATA%\microsoft\crypto\rsa\s-1-5-21-4226853953-3309226944-3078887307-1000\7c4526ebe57110bae6cb41ec9869ac2c_8cf7b530-613e-439b-a8c5-ccfc0e745400
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\9feb7aba-45b2-4778-8fbf-4c8c40dc0c08.tmp
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\9b499b6a-53be-4944-b45e-6aeb396654b3.tmp
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\local storage\leveldb\manifest-000001
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\local storage\leveldb\000001.dbtmp
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\local storage\leveldb\log
%TEMP%\scoped_dir3620_19431\crx_install\background.html
%TEMP%\scoped_dir3620_19431\crx_install\background.js
%TEMP%\scoped_dir3620_19431\crx_install\index.html
%TEMP%\scoped_dir3620_19431\crx_install\popup.html
%TEMP%\scoped_dir3620_19431\crx_install\css\activity-tab.css
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\extension state\manifest-000001
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\extension state\000001.dbtmp
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\extension state\log
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\extension state\000003.log
%TEMP%\scoped_dir3620_19431\crx_install\css\basic.css
%TEMP%\scoped_dir3620_19431\crx_install\css\dream-guid.css
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\gpucache\index
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\gpucache\data_0
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\gpucache\data_1
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\gpucache\data_2
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\gpucache\data_3
%TEMP%\scoped_dir3620_19431\crx_install\css\comparision.css
%TEMP%\scoped_dir3620_19431\crx_install\css\dream-tab.css
%TEMP%\scoped_dir3620_19431\crx_install\css\reset.css
%TEMP%\scoped_dir3620_19431\crx_install\css\unslider-dots.css
%TEMP%\scoped_dir3620_19431\crx_install\css\unslider.css
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000003
%TEMP%\scoped_dir3620_19431\crx_install\css\tips.css
%TEMP%\scoped_dir3620_19431\crx_install\js\popup-activity.js
%TEMP%\scoped_dir3620_19431\crx_install\js\popup-feeds.js
%TEMP%\scoped_dir3620_19431\crx_install\js\popup-basic.js
%TEMP%\scoped_dir3620_19431\crx_install\js\popup-item.js
%TEMP%\scoped_dir3620_19431\crx_install\js\popup-page.js
%TEMP%\scoped_dir3620_19431\crx_install\js\popup-tips.js
%TEMP%\scoped_dir3620_19431\crx_install\js\popup-style.js
%TEMP%\scoped_dir3620_19431\crx_install\js\popup.js
%TEMP%\scoped_dir3620_19431\crx_install\img\arrow-down-2x.png
%TEMP%\scoped_dir3620_19431\crx_install\img\arrow-down.png
%TEMP%\scoped_dir3620_19431\crx_install\img\arrow-down-3x.png
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000004
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000005
%TEMP%\scoped_dir3620_19431\crx_install\img\bg-collect-invalid.svg
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000006
%TEMP%\scoped_dir3620_19431\crx_install\img\bg-collect-mini.svg
%TEMP%\scoped_dir3620_19431\crx_install\img\bg-collect-valid-hover.svg
%TEMP%\scoped_dir3620_19431\crx_install\img\bg-collect-mini0.svg
%TEMP%\scoped_dir3620_19431\crx_install\img\bg-collect-valid-hover0.svg
%TEMP%\scoped_dir3620_19431\crx_install\img\bg-collect-valid.svg
%TEMP%\scoped_dir3620_19431\crx_install\img\car-3x.jpg
%TEMP%\scoped_dir3620_19431\crx_install\img\car-2x.jpg
%TEMP%\scoped_dir3620_19431\crx_install\img\car.jpg
%TEMP%\scoped_dir3620_19431\crx_install\img\car-red-border.svg
%TEMP%\scoped_dir3620_19431\crx_install\img\del-hover-2x.png
%TEMP%\scoped_dir3620_19431\crx_install\img\del-hover.png
%TEMP%\scoped_dir3620_19431\crx_install\img\del-hover-3x.png
%TEMP%\scoped_dir3620_19431\crx_install\img\del-static-2x.png
%TEMP%\scoped_dir3620_19431\crx_install\img\del-static-3x.png
%TEMP%\scoped_dir3620_19431\crx_install\img\del-static.png
%TEMP%\scoped_dir3620_19431\crx_install\img\icon-close.png
%TEMP%\scoped_dir3620_19431\crx_install\img\icon-shopping nor-2x.png
%TEMP%\scoped_dir3620_19431\crx_install\img\icon-setting-car.png
%TEMP%\scoped_dir3620_19431\crx_install\img\icon-shopping press-2x.png
%TEMP%\scoped_dir3620_19431\crx_install\img\icon-shopping-128px-2x.png
%TEMP%\scoped_dir3620_19431\crx_install\img\icon-shopping-128px.png
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000007
%TEMP%\scoped_dir3620_19431\crx_install\img\icon-shopping-16-2x.png
%TEMP%\scoped_dir3620_19431\crx_install\img\icon-shopping-16-3x.png
%TEMP%\scoped_dir3620_19431\crx_install\img\icon-shopping-16.png
%TEMP%\scoped_dir3620_19431\crx_install\img\icon-shopping-48px-2x.png
%TEMP%\scoped_dir3620_19431\crx_install\img\icon-shopping-48px.png
%TEMP%\scoped_dir3620_19431\crx_install\img\icon-shopping-nor.png
%TEMP%\scoped_dir3620_19431\crx_install\img\icon-shopping-press.png
%TEMP%\scoped_dir3620_19431\crx_install\img\loading-2x.png
%TEMP%\scoped_dir3620_19431\crx_install\img\loading-3x.png
%TEMP%\scoped_dir3620_19431\crx_install\img\loading.png
%TEMP%\scoped_dir3620_19431\crx_install\img\right-hover-2x.png
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000008
%TEMP%\scoped_dir3620_19431\crx_install\img\right-hover-3x.png
%TEMP%\scoped_dir3620_19431\crx_install\img\right-hover.png
%TEMP%\scoped_dir3620_19431\crx_install\img\setting.png
%TEMP%\scoped_dir3620_19431\crx_install\img\setting2x.png
%TEMP%\scoped_dir3620_19431\crx_install\img\setting3x.png
%TEMP%\scoped_dir3620_19431\crx_install\img\similer-show-icon.svg
%TEMP%\scoped_dir3620_19431\crx_install\img\similer-red-border.svg
%TEMP%\scoped_dir3620_19431\crx_install\lib\report.js
%TEMP%\scoped_dir3620_19431\crx_install\lib\template.js
%TEMP%\scoped_dir3620_19431\crx_install\lib\jquery.js
%TEMP%\scoped_dir3620_19431\crx_install\lib\unslider-min.js
%TEMP%\scoped_dir3620_19431\crx_install\js\frontend\common.js
%TEMP%\scoped_dir3620_19431\crx_install\js\frontend\events.js
%TEMP%\scoped_dir3620_19431\crx_install\js\frontend\dict.js
%TEMP%\scoped_dir3620_19431\crx_install\js\frontend\fragment.js
%TEMP%\scoped_dir3620_19431\crx_install\js\frontend\init.js
%TEMP%\scoped_dir3620_19431\crx_install\js\frontend\reportmsg.js
%TEMP%\scoped_dir3620_19431\crx_install\img\guid\chart-discount.svg
%TEMP%\scoped_dir3620_19431\crx_install\img\guid\chart-coupon.svg
%TEMP%\scoped_dir3620_19431\crx_install\img\guid\chart-similer.svg
%TEMP%\scoped_dir3620_19431\crx_install\img\guid\guid-btn-jd.svg
%TEMP%\scoped_dir3620_19431\crx_install\img\guid\guid-btn-taobao.svg
%TEMP%\scoped_dir3620_19431\crx_install\img\logo\1haodian.png
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\sync extension settings\hlppekcioiicbfafmmgikkdkljnjpiao\manifest-000001
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\sync extension settings\hlppekcioiicbfafmmgikkdkljnjpiao\000001.dbtmp
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\sync extension settings\hlppekcioiicbfafmmgikkdkljnjpiao\log
%TEMP%\scoped_dir3620_19431\crx_install\img\logo\amazon.png
%TEMP%\scoped_dir3620_19431\crx_install\img\logo\dangdang.png
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\media cache\index
%TEMP%\scoped_dir3620_19431\crx_install\img\logo\gome.png
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\media cache\data_0
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\media cache\data_1
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\media cache\data_2
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\media cache\data_3
%TEMP%\scoped_dir3620_19431\crx_install\img\logo\jd.png
%TEMP%\scoped_dir3620_19431\crx_install\img\logo\jumei.png
%TEMP%\scoped_dir3620_19431\crx_install\img\logo\suning.png
%TEMP%\scoped_dir3620_19431\crx_install\img\logo\kaola.jpg
%TEMP%\scoped_dir3620_19431\crx_install\img\logo\taobao.png
%TEMP%\scoped_dir3620_19431\crx_install\img\logo\tmall.png
%TEMP%\scoped_dir3620_19431\crx_install\img\tips\icon_shopping.png
%TEMP%\scoped_dir3620_19431\crx_install\img\logo\vip.png
%TEMP%\scoped_dir3620_19431\crx_install\img\tips\show_button.png
%TEMP%\scoped_dir3620_19431\crx_install\img\tips\tips_add_coupon.png
%TEMP%\scoped_dir3620_19431\crx_install\img\tips\tips_close_button.png
%TEMP%\scoped_dir3620_19431\crx_install\img\tips\tips_add_similer.png
%TEMP%\scoped_dir3620_19431\crx_install\img\tips\tips_coupon.png
%TEMP%\scoped_dir3620_19431\crx_install\img\tips\tips_add_discount.png
%TEMP%\scoped_dir3620_19431\crx_install\img\tips\tips_discount.png
%TEMP%\scoped_dir3620_19431\crx_install\img\logo\16x\jd.png
%TEMP%\scoped_dir3620_19431\crx_install\img\logo\16x\tmall.png
%TEMP%\scoped_dir3620_19431\crx_install\img\logo\16x\taobao.png
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000009
%TEMP%\scoped_dir3620_19431\decoded_images
%TEMP%\scoped_dir3620_19431\decoded_message_catalogs
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_00000a
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_00000b
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_00000c
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_00000d
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_00000e
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_00000f
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000010
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\local extension settings\hhpcbicladjgggnafdhakomeffbblhkf\manifest-000001
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000011
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\local extension settings\hhpcbicladjgggnafdhakomeffbblhkf\000001.dbtmp
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\local extension settings\hhpcbicladjgggnafdhakomeffbblhkf\log
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000012
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\encryptedstorage-journal
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\encryptedstorage
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\local extension settings\hhpcbicladjgggnafdhakomeffbblhkf\000003.log
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000013
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000014
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000015
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000016
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000017
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000018
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\local storage\leveldb\000003.log
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000019
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_00001a
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_00001b
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_00001c
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_00001d
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_00001e
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\local extension settings\oohmllamapleipciefcaljoodihcpkff\manifest-000001
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\local extension settings\oohmllamapleipciefcaljoodihcpkff\000001.dbtmp
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\local extension settings\oohmllamapleipciefcaljoodihcpkff\log
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\local extension settings\oohmllamapleipciefcaljoodihcpkff\000003.log
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_00001f
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000020
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000021
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000022
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000023
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000024
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000025
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000026
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\5d3d707e-24f5-440a-b9a8-88d245d6e6db.tmp
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000027
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000028
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000029
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_00002a
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_00002b
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_00002c
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_00002d
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_00002e
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\media cache\f_000001
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_00002f
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\media cache\f_000002
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\media cache\f_000003
%LOCALAPPDATA%\tencent\qqbrowser\user data\465423df-b7ef-4891-a6a7-bacb74670a70.tmp
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\media cache\f_000004
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000030
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\media cache\f_000005
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000031
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000032
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\media cache\f_000006
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\indexeddb\https_daohang.qq.com_0.indexeddb.leveldb\manifest-000001
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\indexeddb\https_daohang.qq.com_0.indexeddb.leveldb\000001.dbtmp
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\indexeddb\https_daohang.qq.com_0.indexeddb.leveldb\log
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\indexeddb\https_daohang.qq.com_0.indexeddb.leveldb\000003.log
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\quotamanager-journal
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\quotamanager
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\media cache\f_000007
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000033
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000034
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\media cache\f_000008
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\databases\databases.db-journal
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\databases\databases.db
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000035
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000036
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000037
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000038
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000039
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_00003a
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_00003b
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_00003c
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_00003d
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_00003e
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_00003f
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000040
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000041
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000042
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000043
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\session storage\manifest-000001
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\session storage\000001.dbtmp
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\session storage\log
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\session storage\000003.log
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\8baca934-48f0-4725-b243-657a91f861df.tmp
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000044
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000045
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\cache\f_000046
%LOCALAPPDATA%\tencent\qqbrowser\user data\5946c17b-2ccb-4ce1-b2eb-cb923f23f796.tmp
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\5bcb4fe9-f185-4f65-b330-e946bfaf3f67.tmp
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\d87e1467-9e5a-455e-80cc-7095a3286a7c.tmp
%LOCALAPPDATA%\tencent\qqbrowser\user data\86f530ab-73bf-4396-927b-8f982fd8fa32.tmp

Удаляет файлы, которые сам же создал

%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\manifest.json
%TEMP%\2177e630-cf50-4467-9aeb-6b345ee91929.tmp
%TEMP%\scoped_dir_1968_16806\decoded_images
%TEMP%\scoped_dir_1968_16806\decoded_message_catalogs
%TEMP%\scoped_dir_1968_16806\live_box.crx
%TEMP%\d10ffde2-ab63-46aa-90d3-fce1e7bde8a0.tmp
%TEMP%\scoped_dir_1968_28089\decoded_images
%TEMP%\scoped_dir_1968_28089\decoded_message_catalogs
%TEMP%\scoped_dir_1968_28089\translator-common.crx
%TEMP%\88ad5c03-fbcd-4897-bfb7-85eb9d580cba.tmp
%TEMP%\scoped_dir_1968_15429\account-helper.crx
%TEMP%\scoped_dir_1968_15429\decoded_images
%TEMP%\scoped_dir_1968_15429\decoded_message_catalogs
%TEMP%\ba437167-d686-4eea-bbad-02f331b50665.tmp
%TEMP%\scoped_dir_1968_21177\cloud-collection.crx
%TEMP%\scoped_dir_1968_21177\decoded_images
%TEMP%\scoped_dir_1968_21177\decoded_message_catalogs
%TEMP%\b44fe74d-1db8-4771-b792-4d14b5f283c5.tmp
%TEMP%\scoped_dir_1968_31269\decoded_images
%TEMP%\scoped_dir_1968_31269\decoded_message_catalogs
%TEMP%\scoped_dir_1968_31269\pic_edit.crx
%TEMP%\b33c3ba8-31e5-4f33-9871-d99f69527599.tmp
%TEMP%\scoped_dir_1968_2952\decoded_images
%TEMP%\scoped_dir_1968_2952\decoded_message_catalogs
%TEMP%\scoped_dir_1968_2952\game-box.crx
%TEMP%\fa6256a5-23dc-419e-a21e-6e3f36ac587e.tmp
%TEMP%\scoped_dir_1968_6094\decoded_images
%TEMP%\scoped_dir_1968_6094\decoded_message_catalogs
%TEMP%\scoped_dir_1968_6094\sidebar_nav.crx
%TEMP%\1c491731-2609-47e1-9542-cb6ba3aeb9ad.tmp
%TEMP%\57e0f6fc-6f85-4119-8eb9-d8886fd5562a.tmp
%TEMP%\scoped_dir_1968_27425\commenextension.crx
%TEMP%\scoped_dir_1968_27425\decoded_images
%TEMP%\scoped_dir_1968_27425\decoded_message_catalogs
%TEMP%\79418eb5-130c-4be8-b657-4a10698c546e.tmp
%TEMP%\scoped_dir_1968_24203\decoded_images
%TEMP%\scoped_dir_1968_24203\decoded_message_catalogs
%TEMP%\scoped_dir_1968_24203\video_box.crx
%TEMP%\4e533caf-5938-4a30-a31c-ca219488c206.tmp
%TEMP%\scoped_dir_1968_30678\decoded_images
%TEMP%\scoped_dir_1968_30678\decoded_message_catalogs
%TEMP%\scoped_dir_1968_30678\qbfixerplugin.crx
%TEMP%\a6bf94f2-4b8e-4fcd-a873-a14ffce8fced.tmp
%TEMP%\scoped_dir_1968_11990\decoded_images
%TEMP%\scoped_dir_1968_11990\decoded_message_catalogs
%TEMP%\scoped_dir_1968_11990\netservice.crx
%TEMP%\14abdab25\appdata\associcon\crx.ico
%TEMP%\14abdab25\appdata\associcon\flv.ico
%TEMP%\14abdab25\appdata\associcon\general.ico
%TEMP%\14abdab25\appdata\associcon\gif.ico
%TEMP%\14abdab25\appdata\associcon\jpg.ico
%TEMP%\14abdab25\appdata\associcon\pdf.ico
%TEMP%\14abdab25\appdata\associcon\png.ico
%TEMP%\14abdab25\appdata\associcon\swf.ico
%TEMP%\14abdab25\appdata\associcon\xml.ico
%TEMP%\14abdab25\appdata\compat.xml
%TEMP%\14abdab25\appdata\dbghelper\dbgeng.dll
%TEMP%\14abdab25\appdata\dbghelper\dbghelp.dll
%TEMP%\14abdab25\appdata\default\config bookmarks
%TEMP%\14abdab25\appdata\default\config bookmarks.zip
%TEMP%\14abdab25\appdata\default\features
%TEMP%\14abdab25\appdata\default\history2
%TEMP%\14abdab25\appdata\default\searchfav
%TEMP%\14abdab25\appdata\qqtrack.xml
%TEMP%\14abdab25\appdata\switch_core
%TEMP%\14abdab25\appdata\tradebookmark\current.zip
%TEMP%\14abdab25\appdata\tradebookmark\extension.zip
%TEMP%\14abdab25\appdata\uninstall\blue_btn.png
%TEMP%\14abdab25\appdata\uninstall\blue_btn_long.png
%TEMP%\14abdab25\appdata\uninstall\btn.png
%TEMP%\14abdab25\appdata\uninstall\btn_long.png
%TEMP%\14abdab25\appdata\uninstall\privilege_chrome.png
%TEMP%\14abdab25\appdata\uninstall\privilege_qq.png
%TEMP%\14abdab25\appdata\uninstall\privilege_xunzhang.png
%TEMP%\14abdab25\appdata\uninstall\text_repair.png
%TEMP%\14abdab25\appdata\uninstall\uninstalluiconfig.xml
%TEMP%\14abdab25\appdata\uninstall\uninstall_repair.png
%TEMP%\14abdab25\appdata\xaml\bookmarkbubble.xaml
%TEMP%\14abdab25\appdata\xaml\bookmarkedit.xaml
%TEMP%\14abdab25\appdata\xaml\cleardialog.xaml
%TEMP%\14abdab25\appdata\xaml\informationbox.xaml
%TEMP%\14abdab25\appdata\xaml\linkpromptdialog.xaml
%TEMP%\14abdab25\appdata\xaml\piccheckdialog.xaml
%TEMP%\14abdab25\appdata\xaml\shareweb.xaml
%TEMP%\14abdab25\appdata\xaml\virtualhome_bottomcategoryleft.xaml
%TEMP%\14abdab25\appdata\xaml\virtualhome_bottomcategoryright.xaml
%TEMP%\14abdab25\appdata\xaml\virtualhome_gameview.xaml
%TEMP%\14abdab25\appdata\xaml\virtualhome_guessinterestview.xaml
%TEMP%\14abdab25\appdata\xaml\virtualhome_horbarsecond.xaml
%TEMP%\14abdab25\appdata\xaml\virtualhome_horbarthird.xaml
%TEMP%\14abdab25\appdata\xaml\virtualhome_newsview.xaml
%TEMP%\14abdab25\appdata\xaml\virtualhome_novelview.xaml
%TEMP%\14abdab25\appdata\xaml\virtualhome_rightverticalbar.xaml
%TEMP%\14abdab25\appdata\xaml\virtualhome_shoppingview.xaml
%TEMP%\14abdab25\appdata\xaml\virtualhome_videoview.xaml
%TEMP%\14abdab25\bin\1.63.6721.400.manifest
%TEMP%\14abdab25\bin\10.2.2243.400.manifest
%TEMP%\14abdab25\bin\app.ico
%TEMP%\14abdab25\bin\bugreport.exe
%TEMP%\14abdab25\bin\chrome.dll
%TEMP%\14abdab25\bin\chrome_100_percent.pak
%TEMP%\14abdab25\bin\chrome_200_percent.pak
%TEMP%\14abdab25\bin\chrome_child.dll
%TEMP%\14abdab25\bin\chrome_elf.dll
%TEMP%\14abdab25\bin\compat.xml
%TEMP%\14abdab25\bin\d3dcompiler_47.dll
%TEMP%\14abdab25\bin\data\base.css
%TEMP%\14abdab25\bin\data\compatibility.min.js
%TEMP%\14abdab25\bin\data\fancy.css
%TEMP%\14abdab25\bin\data\manifest
%TEMP%\14abdab25\bin\data\pdf2htmlex-64x64.png
%TEMP%\14abdab25\bin\data\pdf2htmlex.min.js
%TEMP%\14abdab25\bin\delayupdate.exe
%TEMP%\14abdab25\bin\download.wav
%TEMP%\14abdab25\bin\downloader.dll
%TEMP%\14abdab25\bin\driver\amd64\tsqbdrv.sys
%TEMP%\14abdab25\bin\driver\i386\tsqbdrv.sys
%TEMP%\14abdab25\bin\driver\tsqbdrvdll.dll
%TEMP%\14abdab25\bin\driver\win10_x32\tsqbdrv.sys
%TEMP%\14abdab25\bin\driver\win10_x64\tsqbdrv.sys
%TEMP%\14abdab25\bin\exportfavhtml.dll
%TEMP%\14abdab25\bin\extensions\account-helper.crx
%TEMP%\14abdab25\bin\extensions\cloud-collection.crx
%TEMP%\14abdab25\bin\extensions\commenextension.crx
%TEMP%\14abdab25\bin\extensions\game-box.crx
%TEMP%\14abdab25\bin\extensions\live_box.crx
%TEMP%\14abdab25\bin\extensions\netservice.crx
%TEMP%\14abdab25\bin\extensions\pic_edit.crx
%TEMP%\14abdab25\bin\extensions\qbfixerplugin.crx
%TEMP%\14abdab25\bin\extensions\sidebar_nav.crx
%TEMP%\14abdab25\bin\extensions\translator-common.crx
%TEMP%\14abdab25\bin\extensions\video_box.crx
%TEMP%\14abdab25\bin\f1assistant.dll
%TEMP%\14abdab25\bin\f1frame.dll
%TEMP%\14abdab25\bin\frameloader.dll
%TEMP%\14abdab25\bin\frame_icudtl.dat
%TEMP%\14abdab25\bin\heicdecodeextend.dll
%TEMP%\14abdab25\bin\history
%TEMP%\14abdab25\bin\icudtl.dat
%TEMP%\14abdab25\bin\libegl.dll
%TEMP%\14abdab25\bin\libglesv2.dll
%TEMP%\14abdab25\bin\locales\en-us.pak
%TEMP%\14abdab25\bin\locales\qb\en-us.pak
%TEMP%\14abdab25\bin\locales\qb\zh-cn.pak
%TEMP%\14abdab25\bin\locales\zh-cn.pak
%TEMP%\14abdab25\bin\moduledll\{0508df1f-2ab6-4fac-a99e-45bbbf24e1e6}.qrx
%TEMP%\14abdab25\bin\natives_blob.bin
%TEMP%\14abdab25\bin\navi.ico
%TEMP%\14abdab25\bin\navi2.ico
%TEMP%\14abdab25\bin\pdf_config.json
%TEMP%\14abdab25\bin\pepperflash\manifest.json
%TEMP%\14abdab25\bin\pepperflash\pepflashplayer.dll
%TEMP%\14abdab25\bin\plugin\perftools.dll
%TEMP%\14abdab25\bin\prscrn.dll
%TEMP%\14abdab25\bin\prscrnnew.dll
%TEMP%\14abdab25\bin\qbaps.dll
%TEMP%\14abdab25\bin\qbdelayupdate.exe
%TEMP%\14abdab25\bin\qbdextend.dll
%TEMP%\14abdab25\bin\qbforceupdate.dll
%TEMP%\14abdab25\bin\qbroker\qbroker.exe
%TEMP%\14abdab25\bin\qbroker\qbroker64.exe
%TEMP%\14abdab25\bin\qb_100_percent.pak
%TEMP%\14abdab25\bin\qb_200_percent.pak
%TEMP%\14abdab25\bin\qqbrowser.exe
%TEMP%\14abdab25\bin\qqbrowserfix.exe
%TEMP%\14abdab25\bin\qqbrowserliveup.exe
%TEMP%\14abdab25\bin\qrcode.dll
%TEMP%\14abdab25\bin\resources.pak
%TEMP%\14abdab25\bin\service\tsservice.exe.new
%TEMP%\14abdab25\bin\snapshot_blob.bin
%TEMP%\14abdab25\bin\swiftshader\libegl.dll
%TEMP%\14abdab25\bin\swiftshader\libglesv2.dll
%TEMP%\14abdab25\bin\switch_core
%TEMP%\14abdab25\bin\tssafeedit.dat
%TEMP%\14abdab25\bin\tsurllib.dat
%TEMP%\14abdab25\bin\uninst.exe
%TEMP%\14abdab25\bin\video.ico
%TEMP%\14abdab25\bin\webp\webpdecodefilter.dll
%TEMP%\14abdab25\bin\widevinecdm\_platform_specific\win_x86\widevinecdmadapter.dll
%TEMP%\14abdab25\config.xml
%TEMP%\14abdab25\customerjoinplan.txt
%TEMP%\14abdab25\license.txt
%TEMP%\14abdab25\nsis_skin.gt
%TEMP%\14abdab25\qbpin.exe
%TEMP%\14abdab25\qq浏览器.lnk
%TEMP%\14abdab25\union\bin\gamesp\fancyexelauncher.exe
%TEMP%\14abdab25\union\bin\gamesp\fancygame.dll
%TEMP%\14abdab25\union\bin\gamesp\npjlgplayer3.dll
%TEMP%\14abdab25\union\binver\kinst_94_26.exe
%TEMP%\14abdab25\union\binver\tpgdecodeextend.dll
%TEMP%\14abdab25\union\binver\widevinecdm\manifest.json
%TEMP%\14abdab25\union\binver\widevinecdm\_platform_specific\win_x86\widevinecdm.dll
%TEMP%\14abdab25\union\binver\widevinecdm\_platform_specific\win_x86\widevinecdm.dll.sig
%TEMP%\14abdab25\union\binver\widevinecdm\_platform_specific\win_x86\widevinecdmadapter.dll
%TEMP%\14abdab25\union\binver\widevinecdm\_platform_specific\win_x86\widevinecdmadapter.dll.sig
%TEMP%\14abdab25\union\binver\word2html.exe
%TEMP%\14abdab25\union\binver\wxapkg.dll
%TEMP%\14abdab25\union\readtme.txt
%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\widevinecdm\_platform_specific\win_x86\widevinecdmadapter.dll_del_917265
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\0dcbf0fa-d662-4669-9afe-94c488825fe5.tmp
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\data_reduction_proxy_leveldb\manifest-000001
%TEMP%\e365d.tmp
%TEMP%\ef78a1d8-0d58-40f4-86b1-fa294b9838fe.tmp
%TEMP%\80718195-6ac8-4f16-ae84-da42dc480d4c.tmp
%TEMP%\nsx4da1.tmp\installhelper.dll
%TEMP%\nsx4da1.tmp\system.dll
%LOCALAPPDATA%\tencent\qqbrowser\user data\moduledll\{37c546ca-de49-42e8-a373-fcea361cdb3c}\qrx4580.tmp
%LOCALAPPDATA%\tencent\qqbrowser\user data\onlinesetup\sso-f1\ini343b.tmp
%LOCALAPPDATA%\tencent\qqbrowser\user data\onlinesetup\sso-f1\qqbrowserota.exe
%LOCALAPPDATA%\tencent\qqbrowser\user data\onlinesetup\sso-f1\sso-f1.zip
%TEMP%\scoped_dir3620_13940\3f961b66-0159-42e9-bd0e-9ac98bf60b0b.tmp
%TEMP%\scoped_dir3620_13940\decoded_images
%TEMP%\scoped_dir3620_13940\decoded_message_catalogs
%TEMP%\3f961b66-0159-42e9-bd0e-9ac98bf60b0b.tmp
%TEMP%\scoped_dir3620_19431\crx_install\img\icon-shopping-48px.png
%TEMP%\scoped_dir3620_19431\c396bc3c-2fa0-4908-be37-849ae033ec3d.tmp
%TEMP%\scoped_dir3620_19431\decoded_images
%TEMP%\scoped_dir3620_19431\decoded_message_catalogs
%TEMP%\c396bc3c-2fa0-4908-be37-849ae033ec3d.tmp

Перемещает следующие файлы

%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\widevinecdm\_platform_specific\win_x86\widevinecdmadapter.dll в %ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\widevinecdm\_platform_specific\win_x86\widevinecdmadapter.dll_del_917265
%ProgramFiles(x86)%\tencent\qqbrowser\tsservice.exe.new в %ProgramFiles(x86)%\tencent\qqbrowser\tsservice.exe
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\aa96610d-eb14-440b-aaaa-261d66aef5a9.tmp в %LOCALAPPDATA%\tencent\qqbrowser\user data\default\google profile.ico
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\thumbnails\000001.dbtmp в %LOCALAPPDATA%\tencent\qqbrowser\user data\default\thumbnails\current
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\1f79dca2-11ae-4357-b83f-6651c25c88b1.tmp в %LOCALAPPDATA%\tencent\qqbrowser\user data\default\google profile.ico
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\download service\entrydb\000001.dbtmp в %LOCALAPPDATA%\tencent\qqbrowser\user data\default\download service\entrydb\current
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\data_reduction_proxy_leveldb\000001.dbtmp в %LOCALAPPDATA%\tencent\qqbrowser\user data\default\data_reduction_proxy_leveldb\current
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\data_reduction_proxy_leveldb\000002.dbtmp в %LOCALAPPDATA%\tencent\qqbrowser\user data\default\data_reduction_proxy_leveldb\current
%LOCALAPPDATA%\tencent\qqbrowser\user data\onlinesetup\sso-f1\ini343b.tmp.qbl в %LOCALAPPDATA%\tencent\qqbrowser\user data\onlinesetup\sso-f1\ini343b.tmp
%LOCALAPPDATA%\tencent\qqbrowser\user data\onlinesetup\sso-f1\sso-f1.zip.qbl в %LOCALAPPDATA%\tencent\qqbrowser\user data\onlinesetup\sso-f1\sso-f1.zip
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\b57ee778-42b7-446d-ba63-c3f7cc5ec1a8.tmp в %LOCALAPPDATA%\tencent\qqbrowser\user data\default\translate ranker model
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\71a2905c-8a37-4c22-b937-e8dba201cc66.tmp в %LOCALAPPDATA%\tencent\qqbrowser\user data\default\bookmarks_01
%LOCALAPPDATA%\tencent\qqbrowser\user data\moduledll\{37c546ca-de49-42e8-a373-fcea361cdb3c}\qrx4580.tmp.qbl в %LOCALAPPDATA%\tencent\qqbrowser\user data\moduledll\{37c546ca-de49-42e8-a373-fcea361cdb3c}\qrx4580.tmp
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\extension rules\000001.dbtmp в %LOCALAPPDATA%\tencent\qqbrowser\user data\default\extension rules\current
%LOCALAPPDATA%\tencent\qqbrowser\user data\55b5e2a3-737b-444c-8aee-1145e90996f5.tmp в %LOCALAPPDATA%\tencent\qqbrowser\user data\local state
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\9feb7aba-45b2-4778-8fbf-4c8c40dc0c08.tmp в %LOCALAPPDATA%\tencent\qqbrowser\user data\default\secure preferences
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\9b499b6a-53be-4944-b45e-6aeb396654b3.tmp в %LOCALAPPDATA%\tencent\qqbrowser\user data\default\preferences_01
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\local storage\leveldb\000001.dbtmp в %LOCALAPPDATA%\tencent\qqbrowser\user data\default\local storage\leveldb\current
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\extension state\000001.dbtmp в %LOCALAPPDATA%\tencent\qqbrowser\user data\default\extension state\current
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\sync extension settings\hlppekcioiicbfafmmgikkdkljnjpiao\000001.dbtmp в %LOCALAPPDATA%\tencent\qqbrowser\user data\default\sync extension settings\hlppekcioiicbfafmmgikkdkljnjpiao\current
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\local extension settings\hhpcbicladjgggnafdhakomeffbblhkf\000001.dbtmp в %LOCALAPPDATA%\tencent\qqbrowser\user data\default\local extension settings\hhpcbicladjgggnafdhakomeffbblhkf\current
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\local extension settings\oohmllamapleipciefcaljoodihcpkff\000001.dbtmp в %LOCALAPPDATA%\tencent\qqbrowser\user data\default\local extension settings\oohmllamapleipciefcaljoodihcpkff\current
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\5d3d707e-24f5-440a-b9a8-88d245d6e6db.tmp в %LOCALAPPDATA%\tencent\qqbrowser\user data\default\transportsecurity
%LOCALAPPDATA%\tencent\qqbrowser\user data\465423df-b7ef-4891-a6a7-bacb74670a70.tmp в %LOCALAPPDATA%\tencent\qqbrowser\user data\local state
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\indexeddb\https_daohang.qq.com_0.indexeddb.leveldb\000001.dbtmp в %LOCALAPPDATA%\tencent\qqbrowser\user data\default\indexeddb\https_daohang.qq.com_0.indexeddb.leveldb\current
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\session storage\000001.dbtmp в %LOCALAPPDATA%\tencent\qqbrowser\user data\default\session storage\current
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\8baca934-48f0-4725-b243-657a91f861df.tmp в %LOCALAPPDATA%\tencent\qqbrowser\user data\default\preferences_01
%LOCALAPPDATA%\tencent\qqbrowser\user data\5946c17b-2ccb-4ce1-b2eb-cb923f23f796.tmp в %LOCALAPPDATA%\tencent\qqbrowser\user data\local state
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\5bcb4fe9-f185-4f65-b330-e946bfaf3f67.tmp в %LOCALAPPDATA%\tencent\qqbrowser\user data\default\transportsecurity
%LOCALAPPDATA%\tencent\qqbrowser\user data\default\d87e1467-9e5a-455e-80cc-7095a3286a7c.tmp в %LOCALAPPDATA%\tencent\qqbrowser\user data\default\preferences_01
%LOCALAPPDATA%\tencent\qqbrowser\user data\86f530ab-73bf-4396-927b-8f982fd8fa32.tmp в %LOCALAPPDATA%\tencent\qqbrowser\user data\local state

Подменяет следующие файлы

%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\widevinecdm\_platform_specific\win_x86\widevinecdmadapter.dll
%TEMP%\scoped_dir3620_19431\crx_install\img\icon-shopping-48px.png

Сетевая активность

Подключается к

'dl###1.qq.com':80
'go.###wser.qq.com':443
'wu#.##owser.qq.com':443
'qb###.imtt.qq.com':80
'pb.##gou.com':443
'pu##.#rowser.qq.com':8080
'pl####.browser.qq.com':80
'dl###r.qq.com':80
'gs##tic.com':443
'cm.###wser.qq.com':443
'da###ng.qq.com':80
'cm.###wser.qq.com':80
'pl####.browser.qq.com':443
'ne####.browser.qq.com':80
'da###ng.qq.com':443
'ne####.browser.qq.com':443
'pk#.goog':80
'st##.qq.com':80
'ai.##obao.com':443
'v.##.com':80
's.####k.taobao.com':443
'jd.com':80
'pc####ser.dd.qq.com':443
'jd.com':443
'ev###.#rowser.qq.com':80
'st##.qq.com':443
'oc##.#igicert.cn':80
'im#.#licdn.com':443
'ka#########8344701.file.myqcloud.com':443
'st####.res.qq.com':443
'tp###.html5.qq.com':8080
'hm.##idu.com':443
'm4.#####cimg.browser.qq.com':80
'so##u.com':443
'te##.##atic.res.qq.com':443
'op####e.imtt.qq.com':443
'ed##.###.#hiyan.tencent-cloud.net':443
'ga##.#rowser.qq.com':80
'ba#.#es.qq.com':80
'h.###ce.qq.com':443
'da###ng2.qq.com':443
'pu#######.zhiyan.tencent-cloud.net':443
'sn####ake.qq.com':443
'ho####t.imtt.qq.com':443
'to####s.imtt.qq.com':443
'be####.cdn.qq.com':443
'ae###.qq.com':443
'ho#####ad.html5.qq.com':443
'ip###.l.qq.com':443
'ot####.beacon.qq.com':443
'i.###s.qq.com':443
'localhost':5283
'v.###.qq.com':443
'pg##.gtimg.cn':443
'ad####d.gdtimg.com':443
'in###.gtimg.com':443
'localhost':5284
'localhost':5285
'localhost':5286
'localhost':5287
'localhost':5288
'localhost':5289

TCP

Запросы HTTP GET

http://dl###1.qq.com/invc/tt/QQBrowser_Setup_10.2.2243.400_UseByDownloader.exe
http://dl###1.qq.com/invc/tt/ps/SSO9_0D509142F12D72120A6EF1E99A27EB9E.qbzip
http://pk#.goog/gsr1/gsr1.crt
http://st##.qq.com/stdl/qbExtension/qqbrowser/Extensions/production/{37C546CA-DE49-42E8-A373-FCEA361CDB3C}_9.0.0.20_{37C546CA-DE49-42E8-A373-FCEA361CDB3C}.qrx
http://v.##.com/favicon.ico?pt########
http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?aa##############
http://da###ng.qq.com/favicon.ico?fr#######
http://www.jd.com/favicon.ico
http://oc##.#igicert.cn/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRdfbJlK8FvT8EKTy%2FQWk9HlJQmegQUKyMWgRtHiYqQeuzoMtRsjnL5ziUCEAY9XaiIXrdCruw7tiB2ybg%3D
http://ha###.#rowser.qq.com/download?q=############
http://st##.qq.com/stdl/unioncms/300031/jsonfile_300031.json?t=#############

Запросы HTTP POST

http://pl####.browser.qq.com/plugin
http://pl####.browser.qq.com/plugin_report

Другие

'ba##.#rowser.qq.com':443
'wu#.##owser.qq.com':443
'pb.##gou.com':443
'gs##tic.com':443
'da#####.browser.qq.com':443
'br###er.qq.com':443
'ai.##obao.com':443
's.####k.taobao.com':443
'dl###r.qq.com':443
'jd.com':443
'ba#.#es.qq.com':443
'im#.#licdn.com':443
'cd#.#fa.qq.com':443
'tp###.html5.qq.com':8080
'so##u.com':443
'op####e.imtt.qq.com':443
'ed##.###.#hiyan.tencent-cloud.net':443
'ga##.#rowser.qq.com':443
'co####.browser.qq.com':443
'h.###ce.qq.com':443
'pu#######.zhiyan.tencent-cloud.net':443
'sn####ake.qq.com':443
'ho####t.imtt.qq.com':443
'be####.cdn.qq.com':443
'to####s.imtt.qq.com':443
'ae###.qq.com':443
'ho#####ad.html5.qq.com':443
'ip###.l.qq.com':443
'ot####.beacon.qq.com':443
'i.###s.qq.com':443
'rp#.#dt.qq.com':443
'ad####d.gdtimg.com':443
'in###.gtimg.com':443
'hm.##idu.com':443

UDP

DNS ASK dl###1.qq.com
DNS ASK go.###wser.qq.com
DNS ASK wu#.##owser.qq.com
DNS ASK qb#####c.imtt.qq.com
DNS ASK qb###.imtt.qq.com
DNS ASK pb.##gou.com
DNS ASK qq.com
DNS ASK pu##.#rowser.qq.com
DNS ASK google.com
DNS ASK dl###r.qq.com
DNS ASK ha###.#rowser.qq.com
DNS ASK pl####.browser.qq.com
DNS ASK da###ng.qq.com
DNS ASK gs##tic.com
DNS ASK sa####owsing.qq.com
DNS ASK cm.###wser.qq.com
DNS ASK ne####.browser.qq.com
DNS ASK br###er.qq.com
DNS ASK pk#.goog
DNS ASK st##.qq.com
DNS ASK ex######n.browser.qq.com
DNS ASK pc####ser.dd.qq.com
DNS ASK ai.##obao.com
DNS ASK vi###.#rowser.qq.com
DNS ASK ev###.#rowser.qq.com
DNS ASK v.##.com
DNS ASK eg###.qq.com
DNS ASK jd.com
DNS ASK s.####k.taobao.com
DNS ASK oc##.#igicert.cn
DNS ASK im#.#licdn.com
DNS ASK ka#########8344701.file.myqcloud.com
DNS ASK re#.##owser.qq.com
DNS ASK st####.res.qq.com
DNS ASK so##u.com
DNS ASK tp###.html5.qq.com
DNS ASK m4.#####cimg.browser.qq.com
DNS ASK hm.##idu.com
DNS ASK ed##.###.#hiyan.tencent-cloud.net
DNS ASK te##.##atic.res.qq.com
DNS ASK op####e.imtt.qq.com
DNS ASK i.####ser.qq.com
DNS ASK ba#.#es.qq.com
DNS ASK ga##.#rowser.qq.com
DNS ASK co####.browser.qq.com
DNS ASK ba##.#rowser.qq.com
DNS ASK h.###ce.qq.com
DNS ASK da###ng2.qq.com
DNS ASK pu#######.zhiyan.tencent-cloud.net
DNS ASK da#####.browser.qq.com
DNS ASK sn####ake.qq.com
DNS ASK kd#.qq.com
DNS ASK ho####t.imtt.qq.com
DNS ASK be####.cdn.qq.com
DNS ASK to####s.imtt.qq.com
DNS ASK cd#.#fa.qq.com
DNS ASK ho#####ad.html5.qq.com
DNS ASK ip###.l.qq.com
DNS ASK ae###.qq.com
DNS ASK ql.##mapp.com
DNS ASK ot####.beacon.qq.com
DNS ASK i.###s.qq.com
DNS ASK pg##.gtimg.cn
DNS ASK ad####d.gdtimg.com
DNS ASK rp#.#dt.qq.com
DNS ASK v.###.qq.com
DNS ASK in###.gtimg.com
DNS ASK up####.browser.qq.com
DNS ASK up#######-tgw.browser.qq.com

Другое

Ищет следующие окна

ClassName: 'Chrome_MessageWindow' WindowName: 'QB_5E407EF8-E1A4-4520-927B-1657800B77FE'
ClassName: 'Chrome_MessageWindow' WindowName: '%LOCALAPPDATA%\Tencent\QQBrowser\User Data'
ClassName: '' WindowName: 'QB_5E407EF8-E1A4-4520-927B-1657800B77FE'

Создает и запускает на исполнение

'%ProgramFiles(x86)%\tencent\qqbrowser\qqbrowser.exe' --make-default-browser --install-browser
'%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\qbpin.exe' pin "%TEMP%\14abdab25\QQ浏览器.lnk"
'%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\qbpin.exe' pin_start "%TEMP%\14abdab25\QQ浏览器.lnk"
'%ProgramFiles(x86)%\tencent\qqbrowser\qqbrowser.exe' --from-installer --import-topsites --import-cfg --no-sandbox
'%ProgramFiles(x86)%\tencent\qqbrowser\qqbrowser.exe' --from-installer --import-topsites --import-cfg --no-sandbox --frame-processstart=1774136949.600264 --disable-gpu-early-init --type=assistant --cred=131072 /prefetch:8
'%ProgramFiles(x86)%\tencent\qqbrowser\qqbrowser.exe' --from-installer --import-topsites --import-cfg --no-sandbox --frame-processstart=1774136949.600264 --disable-gpu-early-init --lang=zh-CN --no-first-run --first-launch --qb-browser-process --ch...
'%ProgramFiles(x86)%\tencent\qqbrowser\tsservice.exe' -installandrun
'%ProgramFiles(x86)%\tencent\qqbrowser\tsservice.exe'
'%ProgramFiles(x86)%\tencent\qqbrowser\qqbrowser.exe' --type=renderer --extension-process --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --no-sandbox --field-trial-handle=2948,405003...
'%ProgramFiles(x86)%\tencent\qqbrowser\qqbrowser.exe' --type=renderer --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --no-sandbox --field-trial-handle=2948,4050034950400361173,165797...
'%ProgramFiles(x86)%\tencent\qqbrowser\qqbrowser.exe' --type=utility --field-trial-handle=2948,4050034950400361173,16579775202829888603,131072 --lang=zh-CN --no-sandbox --no-sandbox --frame-version=10.2.2243.400 --service-request-channel-token=D8B...
'%LOCALAPPDATA%\tencent\qqbrowser\user data\onlinesetup\sso-f1\qqbrowserota.exe' /handle=131312 /moduleid=1
'%ProgramFiles(x86)%\tencent\qqbrowser\qqbrowser.exe' --type=dll-extension --mojo-channel-token=3620.0F94BA00.1854023068 /prefetch:7
'%ProgramFiles(x86)%\tencent\qqbrowser\qqbrowser.exe' --type=dll-extension --mojo-channel-token=3620.0F94BA00.870000509 /prefetch:7
'%ProgramFiles(x86)%\tencent\qqbrowser\qqbrowser.exe' --type=utility --field-trial-handle=2948,4050034950400361173,16579775202829888603,131072 --lang=zh-CN --service-sandbox-type=utility --no-sandbox --frame-version=10.2.2243.400 --service-request...
'%ProgramFiles(x86)%\tencent\qqbrowser\qqbrowser.exe' --type=utility --field-trial-handle=2948,4050034950400361173,16579775202829888603,131072 --lang=zh-CN --service-sandbox-type=utility --no-sandbox --frame-version=10.2.2243.400 --utility-allowed...
'%ProgramFiles(x86)%\tencent\qqbrowser\qqbrowser.exe' --type=gpu-process --field-trial-handle=2948,4050034950400361173,16579775202829888603,131072 --disable-gpu-watchdog --no-sandbox --disable-d3d11 --use-gl=swiftshader-webgl --disable-accelerated...
'%LOCALAPPDATA%\tencent\qqbrowser\user data\liveup\temp\qqbrowserliveup.exe'
'%ProgramFiles(x86)%\tencent\qqbrowser\qqbrowser.exe' --type=utility --field-trial-handle=2948,4050034950400361173,16579775202829888603,131072 --lang=zh-CN --no-sandbox --no-sandbox --frame-version=10.2.2243.400 --service-request-channel-token=80A...

Запускает на исполнение

'%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Tencent\QQBrowser\10.2.2243.400\webp\WebpDecodeFilter.dll" (со скрытым окном)
'%ProgramFiles(x86)%\tencent\qqbrowser\qqbrowser.exe' --make-default-browser --install-browser (со скрытым окном)
'%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\qbpin.exe' pin "%TEMP%\14abdab25\QQ浏览器.lnk" (со скрытым окном)
'%ProgramFiles(x86)%\tencent\qqbrowser\10.2.2243.400\qbpin.exe' pin_start "%TEMP%\14abdab25\QQ浏览器.lnk" (со скрытым окном)
'%LOCALAPPDATA%\tencent\qqbrowser\user data\liveup\temp\qqbrowserliveup.exe' (со скрытым окном)

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней