are these temp files legit? CR_FD3F0.tmp, SETUP_PATCH.PACKED.7z

I found the .tmp folder in appdata/local/temp, and inside was the 7z file setup_patch.packed.7z


Also, in windows/temp there was another .7z file by the same name. The .tmp folder and file had been created at the same time of a google chrome update (same minute). The other .7z file in windows temp was made about10 days go, and I think there was a new update then aswell.


I uploaded the files to virus total. The detection for both was 0/55 however one of them had a negative downvote.
Are these legimate files? The one in windows temp was about 4kb, and the one in the .tmp folder was 2kb.


Using Event Viewer for the first .7Z file, I could find the gupdate service (google updater) was active within 10s of seconds of when these files were modifiedand ceqted. For the second one that was in windows/temp/(another cr_xxxx) I couldnt find a gupdate log in event viewer, howver I found a log for service control manager stating the google update service entering a running state, 20 seconds before the file was created.


It seems to me its googles bidding but I would like a second opinion, thank you

Why would it indicate that? It only appeared after a google chrome update and as I said it is only 2kb. If ypu search it on google one of the first results is about google update, but I want to get clarification. There is also a chrome.7z file (not in local temp). Unless chrome is somehow illegal?

Do you use chrome? If you could, search for .7z on drive. Do any such files appear? If not, if you check shadow volume copies of appdata/local/temp and windows/temp

They dont seem to be the actual update file. But the file was created literally within, if not the same second as a new Google update came in, and when the gupdate service started according to google. I dont use any utorrent or pirates bay for obvious security reasons, and dont download any illegal patches.

https://code.google.com/p/chromium/i...etail?id=30402


As you can see there is reference to it here in a different context, so im trying to confirm whether it is a legit file.

HarriePateman said:

Yeah i have he same, dont worry there legit :)

What directories do you have them in? And are some of them in .tmp folders?

HarriePateman said:

Yeah there in the TEMP Folder :)

Does that include windows/temp and local/temp ? And they in the cr_xxxxx.tmp folders within the above temp folders? E.g

Windows/temp/cr_f6o7d.tmp/setup_patch.packed.7z?