zloader | hxxps://www[.]ijinshan[.]com/

Analysis

max time kernel
967s
max time network
1116s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
12-04-2023 13:54

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://www.ijinshan.com/

Score

10^/10

zloader bootkit botnet discovery evasion persistence spyware stealer trojan upx

Malware Config

Signatures

Zloader, Terdot, DELoader, ZeusSphinx
Zloader is a malware strain that was initially discovered back in August 2015.
trojan botnet zloader
Checks for common network interception software 1 TTPs
Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.
evasion

Software Discovery
T1518

Blocklisted process makes network request 3 IoCs

flow	pid	Process
1711	26996	msiexec.exe
1715	26996	msiexec.exe
1717	26996	msiexec.exe

Downloads MZ/PE file

Drops file in Drivers directory 54 IoCs

description	ioc	Process
File created	C:\Windows\system32\drivers\kisknl64_ev.sys	dubayoung_101_101.exe
File created	C:\Windows\system32\drivers\kisnetflt64.sys	dubayoung_101_101.exe
File opened for modification	C:\Windows\SysWOW64\drivers\kisknl.sys	kxescore.exe
File opened for modification	C:\Windows\system32\drivers\etc\hosts.ics	kscan.exe
File created	C:\Windows\system32\drivers\ksapi64.sys	dubayoung_101_101.exe
File created	C:\Windows\system32\drivers\kusbquery64.sys	dubayoung_101_101.exe
File created	C:\Windows\system32\drivers\kavbootc.sys	dubayoung_101_101.exe
File created	C:\Windows\system32\drivers\kisboot.sys	dubayoung_101_101.exe
File created	C:\Windows\system32\drivers\kdhacker64_ev.sys	dubayoung_101_101.exe
File opened for modification	C:\Windows\system32\drivers\knbdrv.sys	liebao.exe
File created	C:\Windows\system32\drivers\KNBDrv64.sys	liebao.exe
File created	C:\Windows\system32\drivers\ksapi64_ev.sys	liebao.exe
File created	C:\Windows\system32\drivers\ksskrpr.sys	dubayoung_101_101.exe
File opened for modification	C:\Windows\system32\drivers\etc\hosts	kscan.exe
File created	C:\Windows\system32\drivers\ksapi64_arm.sys	dubayoung_101_101.exe
File opened for modification	C:\Windows\system32\drivers\ksapi.sys	liebao.exe
File opened for modification	C:\Windows\system32\drivers\ksapi64.sys	liebao.exe
File created	C:\Windows\system32\drivers\ksapi.sys	dubayoung_101_101.exe
File created	C:\Windows\system32\drivers\ksapi64_ev.sys	dubayoung_101_101.exe
File created	C:\Windows\system32\drivers\knbdrv_ev.sys	liebao.exe
File created	C:\Windows\system32\drivers\kusbquery.sys	dubayoung_101_101.exe
File created	C:\Windows\system32\drivers\kavbootc64_ev.sys	dubayoung_101_101.exe
File created	C:\Windows\system32\drivers\kisnetflt.sys	dubayoung_101_101.exe
File created	C:\Windows\system32\drivers\kisnetm64.sys	dubayoung_101_101.exe
File opened for modification	C:\Windows\SysWOW64\drivers\KAVBase.sys	dubayoung_101_101.exe
File created	C:\Windows\system32\drivers\ksapi_ev.sys	dubayoung_101_101.exe
File created	C:\Windows\system32\drivers\kdhacker64_arm.sys	dubayoung_101_101.exe
File created	C:\Windows\system32\drivers\knbdrv64_ev.sys	liebao.exe
File created	C:\Windows\system32\drivers\kavbootc_ev.sys	dubayoung_101_101.exe
File created	C:\Windows\system32\drivers\kisknl64_arm.sys	dubayoung_101_101.exe
File created	C:\Windows\system32\drivers\kisnetm.sys	dubayoung_101_101.exe
File created	C:\Windows\system32\drivers\kdhacker.sys	dubayoung_101_101.exe
File created	C:\Windows\system32\drivers\kisnetm64_arm.sys	dubayoung_101_101.exe
File created	C:\Windows\system32\drivers\kdhacker64.sys	dubayoung_101_101.exe
File created	C:\Windows\system32\drivers\khwinfo.sys	dubayoung_101_101.exe
File opened for modification	C:\Windows\system32\drivers\khwinfo.sys	dubayoung_101_101.exe
File created	C:\Windows\system32\drivers\kisboot64.sys	dubayoung_101_101.exe
File created	C:\Windows\system32\drivers\kisnetm64_ev.sys	dubayoung_101_101.exe
File created	C:\Windows\system32\drivers\kdhacker_ev.sys	dubayoung_101_101.exe
File created	C:\Windows\system32\drivers\ksapi_ev.sys	liebao.exe
File created	C:\Windows\system32\drivers\kavbootc64_arm.sys	dubayoung_101_101.exe
File created	C:\Windows\system32\drivers\kisnetm_ev.sys	dubayoung_101_101.exe
File opened for modification	C:\Windows\system32\drivers\ksapi64.sys	KNBCenter.exe
File created	C:\Windows\system32\drivers\kisnetmxp.sys	dubayoung_101_101.exe
File created	C:\Windows\system32\drivers\knbdrv.sys	liebao.exe
File created	C:\Windows\system32\drivers\kisknl_ev.sys	dubayoung_101_101.exe
File opened for modification	C:\Windows\system32\drivers\kisknl.sys	kxescore.exe
File created	C:\Windows\system32\drivers\khwinfo64.sys	dubayoung_101_101.exe
File created	C:\Windows\system32\drivers\kisknl64.sys	dubayoung_101_101.exe
File created	C:\Windows\system32\drivers\kisnetflt64_arm.sys	dubayoung_101_101.exe
File opened for modification	C:\Windows\system32\drivers\KNBDrv.sys	KNBCenter.exe
File created	C:\Windows\system32\drivers\kiscore.sys	dubayoung_101_101.exe
File created	C:\Windows\system32\drivers\kavbootc64.sys	dubayoung_101_101.exe
File created	C:\Windows\system32\drivers\kisknl.sys	dubayoung_101_101.exe

Modifies Windows Firewall 1 TTPs 1 IoCs

evasion

Modify Existing Service

T1031

pid	Process
43252	netsh.exe

Sets file execution options in registry 2 TTPs 28 IoCs

persistence

Registry Run Keys / Startup Folder

T1060

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ksetupwiz.exe	dubayoung_101_101.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\KXESCORE.EXE	dubayoung_101_101.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\kavlog2.exe	dubayoung_101_101.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\SCOMREGSVRV8.EXE	dubayoung_101_101.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\kisaddin.exe	dubayoung_101_101.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\KISCALL.EXE	dubayoung_101_101.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\KSETUPWIZ.EXE	dubayoung_101_101.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\kxetray.exe	dubayoung_101_101.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\UNINST.EXE	dubayoung_101_101.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\KAVLOG2.EXE	dubayoung_101_101.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\kislive.exe	dubayoung_101_101.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\uninst.exe	dubayoung_101_101.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\KISADDIN.EXE	dubayoung_101_101.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\KRECYCLE.EXE	dubayoung_101_101.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ksignsp.exe	dubayoung_101_101.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\KXETRAY.EXE	dubayoung_101_101.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\scomregsvrv8.exe	dubayoung_101_101.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\kdrvmgr.exe	dubayoung_101_101.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\KSCAN.EXE	dubayoung_101_101.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\KDRVMGR.EXE	dubayoung_101_101.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\KISLIVE.EXE	dubayoung_101_101.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\kscan.exe	dubayoung_101_101.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\kxescore.exe	dubayoung_101_101.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\kiscall.exe	dubayoung_101_101.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\kismain.exe	dubayoung_101_101.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\KISMAIN.EXE	dubayoung_101_101.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\krecycle.exe	dubayoung_101_101.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\KSIGNSP.EXE	dubayoung_101_101.exe

Sets service image path in registry 2 TTPs 7 IoCs

persistence

Registry Run Keys / Startup Folder

T1060

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SYSTEM\ControlSet002\Services\kisknl\ImagePath = "\\??\\C:\\Windows\\system32\\drivers\\kisknl.sys"	kxescore.exe
Set value (str)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\knbcenter\ImagePath = "C:\\Users\\Admin\\AppData\\Local\\liebao\\8.0.0.21681\\knbcenter.exe"	liebao.exe
Set value (str)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\knbcenter\ImagePath = "C:\\Users\\Admin\\AppData\\Local\\liebao\\8.0.0.21681\\KNBCenter.exe"	knbcenter.exe
Set value (str)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\KNBDrv\ImagePath = "\\??\\C:\\Windows\\system32\\drivers\\KNBDrv.sys"	KNBCenter.exe
Set value (str)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\KDHacker\ImagePath = "\\??\\c:\\program files (x86)\\kingsoft\\kingsoft antivirus\\security\\kxescan\\kdhacker64_arm.sys"	kxescore.exe
Set value (str)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\KDHacker\ImagePath = "\\??\\c:\\program files (x86)\\kingsoft\\kingsoft antivirus\\security\\kxescan\\kdhacker64_ev.sys"	kxescore.exe
Set value (str)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\kisknl\ImagePath = "\\??\\C:\\Windows\\system32\\drivers\\kisknl.sys"	kxescore.exe

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
behavioral1/files/0x0006000000024601-27419.dat	acprotect

Checks computer location settings 2 TTPs 23 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Control Panel\International\Geo\Nation	kismain.exe
Key value queried	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Control Panel\International\Geo\Nation	keyemain.exe
Key value queried	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Control Panel\International\Geo\Nation	kismain.exe
Key value queried	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Control Panel\International\Geo\Nation	kismain.exe
Key value queried	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Control Panel\International\Geo\Nation	krecommend.exe
Key value queried	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Control Panel\International\Geo\Nation	kdesk.exe
Key value queried	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Control Panel\International\Geo\Nation	zmq_plugin_setup.exe
Key value queried	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Control Panel\International\Geo\Nation	kismain.exe
Key value queried	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Control Panel\International\Geo\Nation	kxetray.exe
Key value queried	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Control Panel\International\Geo\Nation	kxemain.exe
Key value queried	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Control Panel\International\Geo\Nation	kismain.exe
Key value queried	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Control Panel\International\Geo\Nation	rcmdhelper.exe
Key value queried	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Control Panel\International\Geo\Nation	kdesk.exe
Key value queried	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Control Panel\International\Geo\Nation	cmgamebox.exe
Key value queried	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Control Panel\International\Geo\Nation	kdesk64.exe
Key value queried	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Control Panel\International\Geo\Nation	setup.exe
Key value queried	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Control Panel\International\Geo\Nation	kwallpaper.exe
Key value queried	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Control Panel\International\Geo\Nation	kismain.exe
Key value queried	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Control Panel\International\Geo\Nation	keyemain.exe
Key value queried	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Control Panel\International\Geo\Nation	liebao.exe
Key value queried	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Control Panel\International\Geo\Nation	createshortcut.exe
Key value queried	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Control Panel\International\Geo\Nation	kdeskpkg.exe
Key value queried	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Control Panel\International\Geo\Nation	kxecenter.exe

Executes dropped EXE 64 IoCs

pid	Process
4880	kinstui_160_3.exe
2208	dubayoung_101_101.exe
4508	kwtpanel.exe
3800	kavlog2.exe
5140	ksoftmgr.exe
636	kislive.exe
2700	kxescore.exe
4740	kxescore.exe
5392	kxetray.exe
5436	kxemain.exe
3924	kxecenter.exe
3052	knewvip.exe
6052	knewvip.exe
2716	kwtpanel.exe
1072	kupdata.exe
5748	kismain.exe
5636	kwsprotect64.exe
5444	kwtpanel.exe
2364	kxetray.exe
6896	kscan.exe
4508	kwtpanel.exe
7936	knewvip.exe
10620	kismain.exe
11180	kxetray.exe
10636	keyemain.exe
11296	keyemain.exe
15856	kdrvmgr.exe
16696	kxecenter.exe
16704	kxecenter.exe
18340	kislive.exe
19624	kismain.exe
19692	kxetray.exe
19748	kxemain.exe
20400	kismain.exe
20448	kxetray.exe
19600	kxemain.exe
20680	kupdata.exe
23224	kismain.exe
2640	kxetray.exe
4648	keyemain.exe
23664	keyemain.exe
23856	kwtpanel.exe
23988	kwtpanel.exe
24208	kismain.exe
24316	kxetray.exe
23980	kcalendar.exe
23996	kaccfavorite.exe
24720	kwtpanel.exe
24828	kwtpanel.exe
25484	rcmdhelper.exe
24856	kwtpanel.exe
24928	kcddltool.exe
24916	kupdata.exe
24924	kupdata.exe
24800	kupdata.exe
27024	kpwdeval.exe
26984	liebao.exe
29216	knotifycenter.exe
29632	knotifycenter.exe
27900	kdeskpkg.exe
30576	kdeskcore.exe
30428	kdeskmenu64install64.exe
30456	kwallpaper.exe
30972	kdesk.exe

Loads dropped DLL 64 IoCs

pid	Process
2208	dubayoung_101_101.exe
3800	kavlog2.exe
3800	kavlog2.exe
5140	ksoftmgr.exe
5140	ksoftmgr.exe
636	kislive.exe
636	kislive.exe
5140	ksoftmgr.exe
5140	ksoftmgr.exe
5140	ksoftmgr.exe
5140	ksoftmgr.exe
5140	ksoftmgr.exe
5140	ksoftmgr.exe
5140	ksoftmgr.exe
636	kislive.exe
2700	kxescore.exe
2700	kxescore.exe
2700	kxescore.exe
2700	kxescore.exe
2700	kxescore.exe
2700	kxescore.exe
2700	kxescore.exe
2700	kxescore.exe
2700	kxescore.exe
4740	kxescore.exe
4740	kxescore.exe
4740	kxescore.exe
4740	kxescore.exe
4740	kxescore.exe
4740	kxescore.exe
4740	kxescore.exe
4740	kxescore.exe
4740	kxescore.exe
5140	ksoftmgr.exe
4740	kxescore.exe
4740	kxescore.exe
4740	kxescore.exe
4740	kxescore.exe
4740	kxescore.exe
4740	kxescore.exe
4740	kxescore.exe
4740	kxescore.exe
4740	kxescore.exe
4740	kxescore.exe
4740	kxescore.exe
4740	kxescore.exe
4740	kxescore.exe
4740	kxescore.exe
4740	kxescore.exe
4740	kxescore.exe
4740	kxescore.exe
4740	kxescore.exe
4740	kxescore.exe
4740	kxescore.exe
4740	kxescore.exe
4740	kxescore.exe
4740	kxescore.exe
4740	kxescore.exe
4740	kxescore.exe
4740	kxescore.exe
4740	kxescore.exe
4740	kxescore.exe
4740	kxescore.exe
4740	kxescore.exe

Modifies system executable filetype association 2 TTPs 16 IoCs

persistence

Modify Registry

T1112

Change Default File Association

T1042

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\ duba_64bit	dubayoung_101_101.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\ duba_32bit	dubayoung_101_101.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\ duba_32bit\ = "{D21D88E8-4123-48BA-B0B1-3FDBE4AE5FA4}"	dubayoung_101_101.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\ duba_64bit	kxemain.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\ duba_32bit\ = "{D21D88E8-4123-48BA-B0B1-3FDBE4AE5FA4}"	kxemain.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\ duba_64bit	kxetray.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\ duba_32bit	kxetray.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\lnkfile\IsShortcut	kscan.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\piffile\IsShortcut	kscan.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\ duba_64bit\ = "{DDEA5705-1BB0-4C03-AC1E-8FF9716A0D51}"	kxemain.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\ duba_32bit	kxemain.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\ duba_64bit\ = "{DDEA5705-1BB0-4C03-AC1E-8FF9716A0D51}"	kxetray.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\ duba_32bit\ = "{D21D88E8-4123-48BA-B0B1-3FDBE4AE5FA4}"	kxetray.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\ duba_64bit\ = "{DDEA5705-1BB0-4C03-AC1E-8FF9716A0D51}"	dubayoung_101_101.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\ duba_32bit	kxemain.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\ duba_32bit	kxetray.exe

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials in Files
T1081

Registers COM server for autorun 1 TTPs 17 IoCs

persistence

Registry Run Keys / Startup Folder

T1060

description	ioc	Process
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{DDEA5705-1BB0-4C03-AC1E-8FF9716A0D51}\InprocServer32	kxemain.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{DDEA5705-1BB0-4C03-AC1E-8FF9716A0D51}\InprocServer32	kxetray.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{DDEA5705-1BB0-4C03-AC1E-8FF9716A0D51}\InprocServer32	kxetray.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\WOW6432Node\CLSID\{0002DF01-0000-0000-C000-000000000046}\LocalServer32	KNBCenter.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B5E436BC-642A-4BF6-B725-26038AF26E89}\InprocServer32	kdeskmenu64install64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{DDEA5705-1BB0-4C03-AC1E-8FF9716A0D51}\InprocServer32\ThreadingModel = "Apartment"	kxetray.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B5E436BC-642A-4BF6-B725-26038AF26E89}\InprocServer32\ThreadingModel = "Apartment"	kdeskmenu64install64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{DDEA5705-1BB0-4C03-AC1E-8FF9716A0D51}\InprocServer32	dubayoung_101_101.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{DDEA5705-1BB0-4C03-AC1E-8FF9716A0D51}\InprocServer32\ = "c:\\program files (x86)\\kingsoft\\kingsoft antivirus\\kavmenu64.dll"	dubayoung_101_101.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{DDEA5705-1BB0-4C03-AC1E-8FF9716A0D51}\InprocServer32\ThreadingModel = "Apartment"	dubayoung_101_101.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{DDEA5705-1BB0-4C03-AC1E-8FF9716A0D51}\InprocServer32	kxemain.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{DDEA5705-1BB0-4C03-AC1E-8FF9716A0D51}\InprocServer32\ThreadingModel = "Apartment"	kxemain.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{DDEA5705-1BB0-4C03-AC1E-8FF9716A0D51}\InprocServer32\ = "c:\\program files (x86)\\kingsoft\\kingsoft antivirus\\kavmenu64.dll"	kxetray.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{DDEA5705-1BB0-4C03-AC1E-8FF9716A0D51}\InprocServer32\ = "c:\\program files (x86)\\kingsoft\\kingsoft antivirus\\kavmenu64.dll"	kxemain.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B5E436BC-642A-4BF6-B725-26038AF26E89}\InprocServer32\ = "c:\\program files (x86)\\kingsoft\\kingsoft antivirus\\app\\kdesk\\kdeskmenu64.dll"	kdeskmenu64install64.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\CLSID\{0002DF01-0000-0000-C000-000000000046}\LocalServer32	KNBCenter.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\WOW6432Node\CLSID\{0002DF01-0000-0000-C000-000000000046}\LocalServer32\ = "\"C:\\Users\\Admin\\AppData\\Local\\liebao\\liebao.exe\""	KNBCenter.exe

UPX packed file 21 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/files/0x000700000002316d-1476.dat	upx
behavioral1/files/0x000700000002316d-1487.dat	upx
behavioral1/files/0x000700000002316d-1488.dat	upx
behavioral1/memory/2208-1497-0x00000000001E0000-0x0000000000664000-memory.dmp	upx
behavioral1/memory/2208-1607-0x00000000001E0000-0x0000000000664000-memory.dmp	upx
behavioral1/memory/2208-1634-0x00000000001E0000-0x0000000000664000-memory.dmp	upx
behavioral1/memory/2208-1971-0x00000000001E0000-0x0000000000664000-memory.dmp	upx
behavioral1/memory/2208-2435-0x00000000001E0000-0x0000000000664000-memory.dmp	upx
behavioral1/memory/2208-2966-0x00000000001E0000-0x0000000000664000-memory.dmp	upx
behavioral1/memory/2208-3003-0x00000000001E0000-0x0000000000664000-memory.dmp	upx
behavioral1/memory/2208-3116-0x00000000001E0000-0x0000000000664000-memory.dmp	upx
behavioral1/memory/2208-3339-0x00000000001E0000-0x0000000000664000-memory.dmp	upx
behavioral1/memory/2208-3498-0x00000000001E0000-0x0000000000664000-memory.dmp	upx
behavioral1/memory/6896-5813-0x0000000009BB0000-0x0000000009D60000-memory.dmp	upx
behavioral1/memory/6896-5819-0x0000000009BB0000-0x0000000009D60000-memory.dmp	upx
behavioral1/memory/6896-6506-0x0000000009BB0000-0x0000000009D60000-memory.dmp	upx
behavioral1/files/0x0006000000023dad-18126.dat	upx
behavioral1/memory/27900-18287-0x0000000000400000-0x00000000005E8000-memory.dmp	upx
behavioral1/memory/27900-19964-0x0000000000400000-0x00000000005E8000-memory.dmp	upx
behavioral1/memory/27900-22363-0x0000000000400000-0x00000000005E8000-memory.dmp	upx
behavioral1/files/0x0006000000024601-27419.dat	upx

Adds Run key to start application 2 TTPs 9 IoCs

persistence

Registry Run Keys / Startup Folder

T1060

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run	kdeskpkg.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\kdesk = "\"c:\\program files (x86)\\kingsoft\\kingsoft antivirus\\app\\kdesk\\kdesk.exe\" -autorun"	kdeskpkg.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run	kdesk64.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\kwallpaper = "\"C:\\program files (x86)\\kingsoft\\kingsoft antivirus\\app\\kdesk\\kwallpaper.exe\" -autorun"	kwallpaper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run	dubayoung_101_101.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\kxesc = "\"c:\\program files (x86)\\kingsoft\\kingsoft antivirus\\kxetray.exe\" -autorun"	dubayoung_101_101.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\kwallpaper = "\"C:\\program files (x86)\\kingsoft\\kingsoft antivirus\\app\\kdesk\\kwallpaper.exe\" -autorun"	kdesk64.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\猎豹游戏盒子 = "C:\\Users\\Admin\\AppData\\Roaming\\CmGamebox\\cmgamebox.exe /from:1"	cmalarmsvc.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run	kwallpaper.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks whether UAC is enabled 1 TTPs 1 IoCs

evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	kupdata.exe

Drops desktop.ini file(s) 4 IoCs

description	ioc	Process
File created	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\desktop.ini	dubayoung_101_101.exe
File opened for modification	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\desktop.ini	dubayoung_101_101.exe
File created	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\desktop.ini	kdeskpkg.exe
File opened for modification	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\desktop.ini	kdeskpkg.exe

Enumerates connected drives 3 TTPs 64 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\W:	kcalendar.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\G:	kcalendar.exe
File opened (read-only)	\??\J:	kcalendar.exe
File opened (read-only)	\??\O:	kcalendar.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\E:	kscan.exe
File opened (read-only)	\??\W:	kscan.exe
File opened (read-only)	\??\w:	kscan.exe
File opened (read-only)	\??\G:	kscan.exe
File opened (read-only)	\??\S:	kscan.exe
File opened (read-only)	\??\U:	kscan.exe
File opened (read-only)	\??\X:	kscan.exe
File opened (read-only)	\??\U:	kcalendar.exe
File opened (read-only)	\??\b:	kscan.exe
File opened (read-only)	\??\g:	kscan.exe
File opened (read-only)	\??\y:	kscan.exe
File opened (read-only)	\??\K:	kscan.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\m:	kscan.exe
File opened (read-only)	\??\s:	kscan.exe
File opened (read-only)	\??\O:	kscan.exe
File opened (read-only)	\??\Q:	kcalendar.exe
File opened (read-only)	\??\T:	kcalendar.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\I:	kscan.exe
File opened (read-only)	\??\L:	kscan.exe
File opened (read-only)	\??\V:	kcalendar.exe
File opened (read-only)	\??\A:	kscan.exe
File opened (read-only)	\??\Y:	kscan.exe
File opened (read-only)	\??\B:	kscan.exe
File opened (read-only)	\??\Q:	kscan.exe
File opened (read-only)	\??\R:	kscan.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\l:	kscan.exe
File opened (read-only)	\??\x:	kscan.exe
File opened (read-only)	\??\V:	kscan.exe
File opened (read-only)	\??\D:	kxetray.exe
File opened (read-only)	\??\I:	kcalendar.exe
File opened (read-only)	\??\L:	kcalendar.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\D:	kxemain.exe
File opened (read-only)	\??\t:	kscan.exe
File opened (read-only)	\??\p:	kscan.exe
File opened (read-only)	\??\F:	kscan.exe
File opened (read-only)	\??\H:	kscan.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\f:	kscan.exe
File opened (read-only)	\??\n:	kscan.exe
File opened (read-only)	\??\P:	kscan.exe
File opened (read-only)	\??\E:	kcalendar.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\a:	kscan.exe
File opened (read-only)	\??\r:	kscan.exe
File opened (read-only)	\??\N:	kcalendar.exe
File opened (read-only)	\??\R:	kcalendar.exe
File opened (read-only)	\??\E:	msiexec.exe

Writes to the Master Boot Record (MBR) 1 TTPs 3 IoCs

Bootkits write to the MBR to gain persistence at a level below the operating system.

bootkit persistence

Bootkit

T1067

description	ioc	Process
File opened for modification	\??\PhysicalDrive0	dubayoung_101_101.exe
File opened for modification	\??\PhysicalDrive0	kupdata.exe
File opened for modification	\??\PhysicalDrive0	kinstui_160_3.exe

Drops file in System32 directory 15 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C86BD7751D53F10F65AAAD66BBDF33C7	kxescore.exe
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506	KNBCenter.exe
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5	cmalarmsvc.exe
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C86BD7751D53F10F65AAAD66BBDF33C7	kxescore.exe
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE	cmalarmsvc.exe
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCookies	cmalarmsvc.exe
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft	kxescore.exe
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506	KNBCenter.exe
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5	cmalarmsvc.exe
File created	C:\Windows\SysWOW64\ZMQActiveX.ocx	msiexec.exe
File opened for modification	C:\Windows\SysWOW64\config\KAVEventLog.EVT	kavlog2.exe
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache	kxescore.exe
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData	kxescore.exe
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content	kxescore.exe
File created	C:\Windows\SysWOW64\ZMQLaunch.exe	msiexec.exe

Checks for VirtualBox DLLs, possible anti-VM trick 1 TTPs 5 IoCs

Certain files are specific to VirtualBox VMs and can be used to detect execution in a VM.

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\VBoxMiniRdrDN	dubayoung_101_101.exe
File opened (read-only)	\??\VBoxMiniRdrDN	kxescore.exe
File opened (read-only)	\??\VBoxMiniRdrDN	kxetray.exe
File opened (read-only)	\??\VBoxMiniRdrDN	kupdata.exe
File opened (read-only)	\??\VBoxMiniRdrDN	kdeskpkg.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\hiavpwidgets.dll	kxemain.exe
File created	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\kfastpdfshell.exe.z	kxemain.exe
File created	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\data\cookieccfg.ini	kxetray.exe
File created	C:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\vipapp\crm\vcruntime140.dll0	cmlive.exe
File opened for modification	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\log\kxecenter.kpurevipcore.dll.log	kxecenter.exe
File created	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\xlmodule\download\dl_peer_id.dll	kxecenter.exe
File created	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\depdlls\api-ms-win-crt-runtime-l1-1-0.dll	kdeskpkg.exe
File created	C:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\kwallpaperplayer.exe.z	cmlive.exe
File opened for modification	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\debug.log	knewvip.exe
File opened for modification	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\data\softassist.db-journal	kxetray.exe
File created	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\kaccfavoriteindex.dat.z	kxemain.exe
File created	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_cmgamebox\cmgamebox\krecommend.exe	kxemain.exe
File created	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\data\kdesk\res\60012.xml	kdeskpkg.exe
File opened for modification	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\cmgamebox\kdumpcfg.dat	kxemain.exe
File opened for modification	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\app\fastvc\imageformats\qtiff.dll	kxemain.exe
File created	C:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\vipapp\crm\microsoft.vc80.mfc.manifest0	cmlive.exe
File created	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\pictures\397b0664b6e524aaad3221ad587d889e_w2_1440_1080.jpg	kxetray.exe
File created	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\ressrc\chs\dpiimg\2.0\kwallpaperui\833_2.0.png	kdeskpkg.exe
File created	C:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\kdeskrcmdhelper.exe.z	cmlive.exe
File created	C:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\data\scanctrl.ini.z	cmlive.exe
File opened for modification	C:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\kdtutil.dll0	cmlive.exe
File opened for modification	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\webui\Icon\btbg.gif	kxescore.exe
File opened for modification	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kusrtrst.dat	kxescore.exe
File created	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\app\khealtheye\data\popup\4f8de7323566a1204da40d40695dcd32.png	kxetray.exe
File created	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\data\kwallpaper\gameresources\ui\menu\images\white.png	kdeskpkg.exe
File created	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\cmgamebox\data\uninst.ico	kxemain.exe
File opened for modification	C:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\cmlive.log	cmlive.exe
File created	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\data\softicon\softicon48\61000068.png	kxetray.exe
File opened for modification	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\data\softicon\cd0e0b44f5385d02336bb4093625e066	kxetray.exe
File created	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\ucrtbase.dll	dubayoung_101_101.exe
File created	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\data\kuefreq\70001884.dat	kxemain.exe
File created	C:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\assets.cwp0	cmlive.exe
File created	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\data\kuefreq\70001869.dat	kxemain.exe
File opened for modification	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\log\kupdata.KSoftPurifyEngine.dll.log	kupdata.exe
File created	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\avformat-58.dll.z	kxemain.exe
File created	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_cmgamebox\cmgamebox\msvcp80.dll.z	kxemain.exe
File created	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\data\kwallpaper\res\skin\weini_frame.png	kdeskpkg.exe
File created	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\ressrc\chs\uplive.svr	kdeskpkg.exe
File created	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\reboot_update\vipapp\crm\msvcp140.dll	cmlive.exe
File opened for modification	C:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\vipapp\crm\plugins\kvip.pln0	cmlive.exe
File opened for modification	C:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\platforms\qwindows.dll0	cmlive.exe
File created	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\ressrc\chs\dpiimg\2.0\kdesk64\159_2.0.png	kdeskpkg.exe
File created	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\install_res\chs\203.xml	kdeskpkg.exe
File created	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\plugins\imageformats\qico.dll	dubayoung_101_101.exe
File created	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kdhacker64_ev.sys	dubayoung_101_101.exe
File created	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\xlmodule\xldl.dll.z	kxecenter.exe
File created	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\kcdpt\canceled.ini	kxescore.exe
File created	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\security\ksde\kisnetflt64.sys	dubayoung_101_101.exe
File created	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\app\khealtheye\operation\cas\kctrl.dat	kxetray.exe
File opened for modification	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\data\softicon\softicon48\2b8d5c2127a5b367b0c5690faf9c2229	kxetray.exe
File created	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_tianmao_icon.png	dubayoung_101_101.exe
File opened for modification	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\app\khealtheye\data\healthbaseinfo.dat	kxetray.exe
File created	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\app\khealtheye\kdumprep.exe	kxetray.exe
File created	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\ressrc\chs\dpiimg\2.0\kwallpaperui\1100_2.0.png	kdeskpkg.exe
File created	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\reboot_update\avformat-58.dll	cmlive.exe
File opened for modification	C:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\cef\pepperflash\manifest.json	cmlive.exe
File created	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\data\kuefreq\60001448.dat	kxemain.exe
File opened for modification	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\log\kdnsresolver.dll.log	kxemain.exe
File created	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\update\kav\kav\data\bootoptpoptheme\word\8.png	kislive.exe
File created	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\ressrc\chs\dpiimg\2.0\kwallpaper\323_2.0.png	kdeskpkg.exe
File created	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\softmgrcache\kuehead.dat	kxetray.exe
File created	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\depdlls\api-ms-win-crt-filesystem-l1-1-0.dll	kdeskpkg.exe
File created	\??\c:\program files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\msvcr80.dll.z	kxemain.exe
File created	C:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\data\icon\infoc\kfmt_icon.dat0	cmlive.exe

Drops file in Windows directory 12 IoCs

description	ioc	Process
File opened for modification	C:\Windows\Debug\WIA\wiatrace.log	mspaint.exe
File created	C:\Windows\Fonts\ksdb.otf	kxetray.exe
File created	C:\Windows\Installer\e630257.msi	msiexec.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log	msiexec.exe
File created	C:\Windows\Installer\inprogressinstallinfo.ipi	msiexec.exe
File created	C:\Windows\Installer\SourceHash{A17F6AE5-CF7A-4F62-864C-87D507AC5231}	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI4C04.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\e630257.msi	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI334A.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI44B0.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\	msiexec.exe
File created	C:\Windows\Installer\e63025a.msi	msiexec.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

Checks SCSI registry key(s) 3 TTPs 3 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000	taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName	taskmgr.exe

Checks processor information in registry 2 TTPs 21 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	kwallpaperui.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	dubayoung_101_101.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	kxetray.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	kupdata.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	kcalendar.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	kwallpaperui.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	kwallpaperui.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	kdeskpkg.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	kwallpaper.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	kwallpaper.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	kwallpaper.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	kxescore.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	kupdata.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	kcalendar.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	kcalendar.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	kxetray.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	kdeskpkg.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	dubayoung_101_101.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	kxescore.exe
Key opened	\Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0	kxescore.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	kxescore.exe

Enumerates system info in registry 2 TTPs 16 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	dubayoung_101_101.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	kxescore.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	kxetray.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	kupdata.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	kupdata.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	kdeskpkg.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	kxetray.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	kupdata.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	kxescore.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	dubayoung_101_101.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	kdeskpkg.exe

Modifies Internet Explorer settings 1 TTPs 20 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Software\Microsoft\Internet Explorer\GPU	krecommend.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\SOFTWARE\Microsoft\Internet Explorer\GPU\AdapterInfo = "vendorId=\"0x1414\",deviceID=\"0x8c\",subSysID=\"0x0\",revision=\"0x0\",version=\"10.0.19041.546\"hypervisor=\"No Hypervisor (No SLAT)\""	krecommend.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\krecommend.exe = "9000"	krecommend.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Software\Microsoft\Internet Explorer\IESettingSync	ksoftmgr.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\SOFTWARE\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	ksoftmgr.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\knotifycenter.exe = "10000"	knotifycenter.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Software\Microsoft\Internet Explorer\GPU	knotifycenter.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\SOFTWARE\Microsoft\Internet Explorer\GPU\AdapterInfo = "vendorId=\"0x1414\",deviceID=\"0x8c\",subSysID=\"0x0\",revision=\"0x0\",version=\"6.2.19041.546\"hypervisor=\"No Hypervisor (No SLAT)\""	knotifycenter.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\knotifycenter.exe = "10000"	knotifycenter.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\knotifycenter.exe = "10000"	knotifycenter.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\knotifycenter.exe = "10000"	knotifycenter.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\SOFTWARE\Microsoft\Internet Explorer\Download\CheckExeSignatures = "yes"	kscan.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\krecommend.exe = "9000"	krecommend.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\krecommend.exe = "9000"	krecommend.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\krecommend.exe = "9000"	krecommend.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\SOFTWARE\Microsoft\Internet Explorer\IESettingSync\SlowSettingTypesChanged = "2"	ksoftmgr.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	ksoftmgr.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\SOFTWARE\Microsoft\Internet Explorer\GPU\AdapterInfo = "vendorId=\"0x1414\",deviceID=\"0x8c\",subSysID=\"0x0\",revision=\"0x0\",version=\"6.2.19041.546\"hypervisor=\"No Hypervisor (No SLAT)\""	knotifycenter.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Software\Microsoft\Internet Explorer\GPU	knotifycenter.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\cmgamebox.exe = "11000"	cmgamebox.exe

Modifies data under HKEY_USERS 64 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA	kxescore.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs	kscan.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs	kscan.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs	KNBCenter.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust	kxescore.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates	kscan.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs	KNBCenter.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs	kxescore.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs	kscan.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs	KNBCenter.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates	kxescore.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates	kscan.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root	kscan.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs	kscan.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs	KNBCenter.exe
Key deleted	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1e	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing	kxescore.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot	kxescore.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs	kxescore.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs	kxescore.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs	kscan.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates	KNBCenter.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates	KNBCenter.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs	KNBCenter.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates	KNBCenter.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs	KNBCenter.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust	KNBCenter.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs	kxescore.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates	kxescore.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs	kxescore.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs	kxescore.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs	kscan.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed	KNBCenter.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs	KNBCenter.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates	KNBCenter.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates	kxescore.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs	kscan.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing	KNBCenter.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1f	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs	kxescore.exe
Key created	\REGISTRY\USER\.DEFAULT\Software	KNBCenter.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs	kxescore.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs	kscan.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople	kscan.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs	kxescore.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed	kscan.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates	kscan.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA	KNBCenter.exe
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\1E\52C64B7E	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs	kscan.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root	KNBCenter.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs	kxescore.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates	kxescore.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople	kxescore.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs	kxescore.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs	kscan.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot	kscan.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates	kscan.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust	kscan.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA	KNBCenter.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs	kxescore.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs	kscan.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates	KNBCenter.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed	KNBCenter.exe

Modifies registry class 64 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4238149048-355649189-894321705-1000\{80885CF1-8E6F-4B87-9D33-9EC14A16ABDA}	kwallpaperplayer.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{74D5AF72-5E23-427B-9451-13209F8D94AE}\TypeLib\ = "{7F725F47-81D2-43ED-B5C9-76415E9E2ADA}"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.pptx\Shell\ kother_to_pdf\ = "转换为PDF格式"	kxetray.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Liebao.URL\URL Protocol	KNBCenter.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.xlsx\Shell\ kother_to_pdf\command\ = "\"c:\\program files (x86)\\kingsoft\\kingsoft antivirus\\kismain.exe\" /vip:pdfconverter /from:14 /type:22 /kpath:\"%1\""	kxetray.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{D21D88E8-4123-48BA-B0B1-3FDBE4AE5FA4}\ = "CKavMenuShell Class"	kxetray.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\.xht	liebao.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\5EA6F71AA7FC26F468C4785D70CA2513\Version = "17170432"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\ duba_32bit	dubayoung_101_101.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\ duba_32bit	kxemain.exe
Key created	\REGISTRY\MACHINE\Software\Classes\WOW6432Node\Interface\{74D5AF72-5E23-427B-9451-13209F8D94AE}	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\5EA6F71AA7FC26F468C4785D70CA2513\DeploymentFlags = "3"	msiexec.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\mhtmlfile\shell\ = "open"	KNBCenter.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\.svg	liebao.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\.webp\OpenWithProgids\Liebao.URL	liebao.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Liebao.URL\shell\open\ddeexec\Application	KNBCenter.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{E0BEFEA7-0A23-4AB2-8CC1-EF89BBBC4E12}\InprocServer32	msiexec.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\.htm\ = "Liebao.HTML"	KNBCenter.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\.htm\OpenWithProgids\Liebao.URL	liebao.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\http\shell\open\ddeexec\Application	KNBCenter.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.pdf\Shell\ print\ = "打印(&P)"	kxetray.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\ duba_32bit	kxetray.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\ftp\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\liebao\\liebao.exe\" \"%1\""	KNBCenter.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Liebao.HTML\DefaultIcon	KNBCenter.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{9B7A98EC-7EF9-468c-ACC8-37C793DBD7E0}\Implemented Categories\{9B4EEDF7-FC98-4fa0-8440-9D1BC57B5F2F}\user_type = "1"	kxescore.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\.xhtml	liebao.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Drive\shellex\ContextMenuHandlers\KDeskMenuShell\ = "{B5E436BC-642A-4BF6-B725-26038AF26E89}"	kdeskmenu64install64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{DDEA5705-1BB0-4C03-AC1E-8FF9716A0D51}\InprocServer32	kxemain.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.jpeg\Shell\ kother_to_pdf\ = "转换为PDF格式"	kxetray.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\*\Shellex\ContextMenuHandlers\ duba_64bit	kxetray.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\.xhtml\ = "Liebao.HTML"	KNBCenter.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Liebao.HTML\shell\open\ddeexec\Application	KNBCenter.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\http\URL Protocol	KNBCenter.exe
Key created	\REGISTRY\MACHINE\Software\Classes\WOW6432Node\Interface\{70DBEBE6-3F66-4895-B11D-F7B5F66A5CD8}	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\WOW6432Node\Interface\{70DBEBE6-3F66-4895-B11D-F7B5F66A5CD8}\ProxyStubClsid32	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.docx\Shell\ kother_to_pdf\Icon = "c:\\program files (x86)\\kingsoft\\kingsoft antivirus\\data\\img\\pdf_convert_to_pdf.ico"	kxetray.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.ppt\Shell	kxetray.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{7F725F47-81D2-43ED-B5C9-76415E9E2ADA}\1.0\FLAGS\ = "2"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shellex\ContextMenuHandlers\ duba_64bit\ = "{DDEA5705-1BB0-4C03-AC1E-8FF9716A0D51}"	kxetray.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shellex\ContextMenuHandlers\ duba_32bit\ = "{D21D88E8-4123-48BA-B0B1-3FDBE4AE5FA4}"	kxetray.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.000ktppt\ShellNew\command = "\"c:\\program files (x86)\\kingsoft\\kingsoft antivirus\\kismain.exe\" /officetemplate -permission_name=\"ktemplate\" -url=\"https://minisite.keniu.com/classify?cat1=1&channel=duba&source=kmini_duba_newfile_ppt\" \"%1\""	kxetray.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.zzzktexcel\ShellNew\iconpath = "\"c:\\program files (x86)\\kingsoft\\kingsoft antivirus\\data\\excel.ico\""	kxetray.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\lnkfile\IsShortcut	kscan.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8F7EDCBC-4CE3-4473-A65D-F9E3C57A271D}	krecommend.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{79B5BC47-CEA1-4772-B433-7D1B3139F278}\Implemented Categories	kinstui_160_3.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{744AA5FE-F7AB-7D8D-CA80-79D2BE6F27F7}	kscan.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\.shtml\OpenWithProgids\Liebao.URL	liebao.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.000ktppt\ShellNew\iconpath = "\"c:\\program files (x86)\\kingsoft\\kingsoft antivirus\\data\\ppt.ico\""	kxetray.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8AB9CCC4-75EC-438b-B6C0-D8D78882A12D}\Implemented Categories\{6BC04964-67B7-4d50-BB9B-3653A5C305B3}	kdeskpkg.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Liebao.URL\Application\ApplicationCompany = "The Chromium Authors"	liebao.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\ftp\shell\open\ddeexec	KNBCenter.exe
Key created	\REGISTRY\MACHINE\Software\Classes\.mht	KNBCenter.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{74D5AF72-5E23-427B-9451-13209F8D94AE}	MsiExec.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.doc\Shell	kxetray.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{74D5AF72-5E23-427B-9451-13209F8D94AE}\ = "_DZMQActiveX"	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.doc\Shell\ kother_to_pdf	kxetray.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\ktexcel\shell\open\command	kxetray.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\WOW6432Node\CLSID\{0002DF01-0000-0000-C000-000000000046}	KNBCenter.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Liebao.URL\shell	KNBCenter.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{0002DF01-0000-0000-C000-000000000046}\ = "Internet Explorer(Ver 1.0)"	KNBCenter.exe
Key created	\REGISTRY\MACHINE\Software\Classes\WOW6432Node\CLSID\{E0BEFEA7-0A23-4AB2-8CC1-EF89BBBC4E12}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4}	msiexec.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\ duba_32bit	kxemain.exe

Modifies system certificate store 2 TTPs 5 IoCs

evasion spyware trojan

Install Root Certificate

T1130

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43	kxescore.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43\Blob = 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	kxescore.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43\Blob = 04000000010000001000000087ce0b7b2a0e4900e158719b37a893720300000001000000140000000563b8630d62d75abbc8ab1e4bdfb5a899b24d431d00000001000000100000004f5f106930398d09107b40c3c7ca8f1c0b000000010000001200000044006900670069004300650072007400000014000000010000001400000045eba2aff492cb82312d518ba7a7219df36dc80f6200000001000000200000003e9099b5015e8f486c00bcea9d111ee721faba355a89bcf1df69561e3dc6325c090000000100000034000000303206082b0601050507030206082b0601050507030306082b0601050507030406082b0601050507030106082b06010505070308530000000100000040000000303e301f06096086480186fd6c020130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c00f00000001000000140000006dca5bd00dcf1c0f327059d374b29ca6e3c50aa62000000001000000bb030000308203b73082029fa00302010202100ce7e0e517d846fe8fe560fc1bf03039300d06092a864886f70d01010505003065310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d312430220603550403131b4469676943657274204173737572656420494420526f6f74204341301e170d3036313131303030303030305a170d3331313131303030303030305a3065310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d312430220603550403131b4469676943657274204173737572656420494420526f6f7420434130820122300d06092a864886f70d01010105000382010f003082010a0282010100ad0e15cee443805cb187f3b760f97112a5aedc269488aaf4cef520392858600cf880daa9159532613cb5b128848a8adc9f0a0c83177a8f90ac8ae779535c31842af60f98323676ccdedd3ca8a2ef6afb21f25261df9f20d71fe2b1d9fe1864d2125b5ff9581835bc47cda136f96b7fd4b0383ec11bc38c33d9d82f18fe280fb3a783d6c36e44c061359616fe599c8b766dd7f1a24b0d2bff0b72da9e60d08e9035c678558720a1cfe56d0ac8497c3198336c22e987d0325aa2ba138211ed39179d993a72a1e6faa4d9d5173175ae857d22ae3f014686f62879c8b1dae45717c47e1c0eb0b492a656b3bdb297edaaa7f0b7c5a83f9516d0ffa196eb085f18774f0203010001a3633061300e0603551d0f0101ff040403020186300f0603551d130101ff040530030101ff301d0603551d0e0416041445eba2aff492cb82312d518ba7a7219df36dc80f301f0603551d2304183016801445eba2aff492cb82312d518ba7a7219df36dc80f300d06092a864886f70d01010505000382010100a20ebcdfe2edf0e372737a6494bff77266d832e4427562ae87ebf2d5d9de56b39fccce1428b90d97605c124c58e4d33d834945589735691aa847ea56c679ab12d8678184df7f093c94e6b8262c20bd3db32889f75fff22e297841fe965ef87e0dfc16749b35debb2092aeb26ed78be7d3f2bf3b726356d5f8901b6495b9f01059bab3d25c1ccb67fc2f16f86c6fa6468eb812d94eb42b7fa8c1edd62f1be5067b76cbdf3f11f6b0c3607167f377ca95b6d7af112466083d72704be4bce97bec3672a6811df80e70c3366bf130d146ef37f1f63101efa8d1b256d6c8fa5b76101b1d2a326a110719dade2c3f9c39951b72b0708ce2ee650b2a7fa0a452fa2f0f2	kxescore.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43\Blob = 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	kxescore.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43\Blob = 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	kxescore.exe

Suspicious behavior: AddClipboardFormatListener 3 IoCs

pid	Process
5392	kxetray.exe
23996	kaccfavorite.exe
39132	fastvc.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
824	chrome.exe
824	chrome.exe
936	chrome.exe
936	chrome.exe
212	mspaint.exe
212	mspaint.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe
2208	dubayoung_101_101.exe

Suspicious behavior: GetForegroundWindowSpam 12 IoCs

pid	Process
2208	dubayoung_101_101.exe
4880	kinstui_160_3.exe
5436	kxemain.exe
12060	taskmgr.exe
23664	keyemain.exe
23996	kaccfavorite.exe
27024	kpwdeval.exe
30516	kdesk64.exe
35928	kwallpaperui.exe
38532	cmlive.exe
39132	fastvc.exe
5392	kxetray.exe

Suspicious behavior: LoadsDriver 16 IoCs

pid	Process
672	Process not Found
672	Process not Found
672	Process not Found
672	Process not Found
672	Process not Found
672	Process not Found
672	Process not Found
672	Process not Found
672	Process not Found
672	Process not Found
672	Process not Found
672	Process not Found
672	Process not Found
32824	KNBCenter.exe
672	Process not Found
672	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 16 IoCs

pid	Process
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe

Suspicious behavior: SetClipboardViewer 1 IoCs

pid	Process
35368	lbtoast.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	824	chrome.exe
Token: SeCreatePagefilePrivilege	824	chrome.exe
Token: SeShutdownPrivilege	824	chrome.exe
Token: SeCreatePagefilePrivilege	824	chrome.exe
Token: SeShutdownPrivilege	4580	chrome.exe
Token: SeCreatePagefilePrivilege	4580	chrome.exe
Token: SeShutdownPrivilege	824	chrome.exe
Token: SeCreatePagefilePrivilege	824	chrome.exe
Token: SeShutdownPrivilege	824	chrome.exe
Token: SeCreatePagefilePrivilege	824	chrome.exe
Token: SeShutdownPrivilege	824	chrome.exe
Token: SeCreatePagefilePrivilege	824	chrome.exe
Token: SeShutdownPrivilege	824	chrome.exe
Token: SeCreatePagefilePrivilege	824	chrome.exe
Token: SeShutdownPrivilege	824	chrome.exe
Token: SeCreatePagefilePrivilege	824	chrome.exe
Token: SeShutdownPrivilege	824	chrome.exe
Token: SeCreatePagefilePrivilege	824	chrome.exe
Token: SeShutdownPrivilege	824	chrome.exe
Token: SeCreatePagefilePrivilege	824	chrome.exe
Token: SeShutdownPrivilege	824	chrome.exe
Token: SeCreatePagefilePrivilege	824	chrome.exe
Token: SeShutdownPrivilege	824	chrome.exe
Token: SeCreatePagefilePrivilege	824	chrome.exe
Token: SeShutdownPrivilege	824	chrome.exe
Token: SeCreatePagefilePrivilege	824	chrome.exe
Token: SeShutdownPrivilege	824	chrome.exe
Token: SeCreatePagefilePrivilege	824	chrome.exe
Token: SeShutdownPrivilege	824	chrome.exe
Token: SeCreatePagefilePrivilege	824	chrome.exe
Token: SeShutdownPrivilege	824	chrome.exe
Token: SeCreatePagefilePrivilege	824	chrome.exe
Token: SeShutdownPrivilege	824	chrome.exe
Token: SeCreatePagefilePrivilege	824	chrome.exe
Token: SeShutdownPrivilege	824	chrome.exe
Token: SeCreatePagefilePrivilege	824	chrome.exe
Token: SeShutdownPrivilege	824	chrome.exe
Token: SeCreatePagefilePrivilege	824	chrome.exe
Token: SeShutdownPrivilege	824	chrome.exe
Token: SeCreatePagefilePrivilege	824	chrome.exe
Token: SeShutdownPrivilege	824	chrome.exe
Token: SeCreatePagefilePrivilege	824	chrome.exe
Token: SeShutdownPrivilege	824	chrome.exe
Token: SeCreatePagefilePrivilege	824	chrome.exe
Token: SeShutdownPrivilege	824	chrome.exe
Token: SeCreatePagefilePrivilege	824	chrome.exe
Token: SeShutdownPrivilege	824	chrome.exe
Token: SeCreatePagefilePrivilege	824	chrome.exe
Token: SeShutdownPrivilege	824	chrome.exe
Token: SeCreatePagefilePrivilege	824	chrome.exe
Token: SeShutdownPrivilege	824	chrome.exe
Token: SeCreatePagefilePrivilege	824	chrome.exe
Token: SeShutdownPrivilege	824	chrome.exe
Token: SeCreatePagefilePrivilege	824	chrome.exe
Token: SeShutdownPrivilege	824	chrome.exe
Token: SeCreatePagefilePrivilege	824	chrome.exe
Token: SeShutdownPrivilege	824	chrome.exe
Token: SeCreatePagefilePrivilege	824	chrome.exe
Token: SeShutdownPrivilege	824	chrome.exe
Token: SeCreatePagefilePrivilege	824	chrome.exe
Token: SeShutdownPrivilege	824	chrome.exe
Token: SeCreatePagefilePrivilege	824	chrome.exe
Token: SeShutdownPrivilege	824	chrome.exe
Token: SeCreatePagefilePrivilege	824	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
4880	kinstui_160_3.exe
5392	kxetray.exe
4880	kinstui_160_3.exe
5392	kxetray.exe
5392	kxetray.exe
12060	taskmgr.exe
12060	taskmgr.exe
12060	taskmgr.exe
12060	taskmgr.exe
12060	taskmgr.exe
12060	taskmgr.exe
12060	taskmgr.exe
12060	taskmgr.exe
12060	taskmgr.exe

Suspicious use of SetWindowsHookEx 64 IoCs

pid	Process
824	chrome.exe
824	chrome.exe
824	chrome.exe
824	chrome.exe
412	chrome.exe
212	mspaint.exe
212	mspaint.exe
212	mspaint.exe
212	mspaint.exe
4880	kinstui_160_3.exe
2208	dubayoung_101_101.exe
4508	kwtpanel.exe
636	kislive.exe
5140	ksoftmgr.exe
3800	kavlog2.exe
5140	ksoftmgr.exe
5140	ksoftmgr.exe
2700	kxescore.exe
5392	kxetray.exe
5436	kxemain.exe
3924	kxecenter.exe
3052	knewvip.exe
6052	knewvip.exe
2716	kwtpanel.exe
5748	kismain.exe
5636	kwsprotect64.exe
5444	kwtpanel.exe
2364	kxetray.exe
5392	kxetray.exe
4508	kwtpanel.exe
7936	knewvip.exe
10620	kismain.exe
11180	kxetray.exe
10636	keyemain.exe
11296	keyemain.exe
15856	kdrvmgr.exe
5392	kxetray.exe
16696	kxecenter.exe
16704	kxecenter.exe
18340	kislive.exe
19748	kxemain.exe
20400	kismain.exe
20448	kxetray.exe
19600	kxemain.exe
5436	kxemain.exe
23224	kismain.exe
2640	kxetray.exe
4648	keyemain.exe
23664	keyemain.exe
23856	kwtpanel.exe
23988	kwtpanel.exe
24208	kismain.exe
24316	kxetray.exe
23980	kcalendar.exe
5636	kwsprotect64.exe
23996	kaccfavorite.exe
23996	kaccfavorite.exe
23996	kaccfavorite.exe
23996	kaccfavorite.exe
24720	kwtpanel.exe
24828	kwtpanel.exe
25484	rcmdhelper.exe
24856	kwtpanel.exe
27024	kpwdeval.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 824 wrote to memory of 2328	824	chrome.exe	84
PID 824 wrote to memory of 2328	824	chrome.exe	84
PID 4580 wrote to memory of 4344	4580	chrome.exe	88
PID 4580 wrote to memory of 4344	4580	chrome.exe	88
PID 824 wrote to memory of 2460	824	chrome.exe	89
PID 824 wrote to memory of 2460	824	chrome.exe	89
PID 824 wrote to memory of 2460	824	chrome.exe	89
PID 824 wrote to memory of 2460	824	chrome.exe	89
PID 824 wrote to memory of 2460	824	chrome.exe	89
PID 824 wrote to memory of 2460	824	chrome.exe	89
PID 824 wrote to memory of 2460	824	chrome.exe	89
PID 824 wrote to memory of 2460	824	chrome.exe	89
PID 824 wrote to memory of 2460	824	chrome.exe	89
PID 824 wrote to memory of 2460	824	chrome.exe	89
PID 824 wrote to memory of 2460	824	chrome.exe	89
PID 824 wrote to memory of 2460	824	chrome.exe	89
PID 824 wrote to memory of 2460	824	chrome.exe	89
PID 824 wrote to memory of 2460	824	chrome.exe	89
PID 824 wrote to memory of 2460	824	chrome.exe	89
PID 824 wrote to memory of 2460	824	chrome.exe	89
PID 824 wrote to memory of 2460	824	chrome.exe	89
PID 824 wrote to memory of 2460	824	chrome.exe	89
PID 824 wrote to memory of 2460	824	chrome.exe	89
PID 824 wrote to memory of 2460	824	chrome.exe	89
PID 824 wrote to memory of 2460	824	chrome.exe	89
PID 824 wrote to memory of 2460	824	chrome.exe	89
PID 824 wrote to memory of 2460	824	chrome.exe	89
PID 824 wrote to memory of 2460	824	chrome.exe	89
PID 824 wrote to memory of 2460	824	chrome.exe	89
PID 824 wrote to memory of 2460	824	chrome.exe	89
PID 824 wrote to memory of 2460	824	chrome.exe	89
PID 824 wrote to memory of 2460	824	chrome.exe	89
PID 824 wrote to memory of 2460	824	chrome.exe	89
PID 824 wrote to memory of 2460	824	chrome.exe	89
PID 824 wrote to memory of 2460	824	chrome.exe	89
PID 824 wrote to memory of 2460	824	chrome.exe	89
PID 824 wrote to memory of 2460	824	chrome.exe	89
PID 824 wrote to memory of 2460	824	chrome.exe	89
PID 824 wrote to memory of 2460	824	chrome.exe	89
PID 824 wrote to memory of 2460	824	chrome.exe	89
PID 824 wrote to memory of 2460	824	chrome.exe	89
PID 824 wrote to memory of 2460	824	chrome.exe	89
PID 824 wrote to memory of 4144	824	chrome.exe	90
PID 824 wrote to memory of 4144	824	chrome.exe	90
PID 4580 wrote to memory of 2768	4580	chrome.exe	91
PID 4580 wrote to memory of 2768	4580	chrome.exe	91
PID 4580 wrote to memory of 2768	4580	chrome.exe	91
PID 4580 wrote to memory of 2768	4580	chrome.exe	91
PID 4580 wrote to memory of 2768	4580	chrome.exe	91
PID 4580 wrote to memory of 2768	4580	chrome.exe	91
PID 4580 wrote to memory of 2768	4580	chrome.exe	91
PID 4580 wrote to memory of 2768	4580	chrome.exe	91
PID 4580 wrote to memory of 2768	4580	chrome.exe	91
PID 4580 wrote to memory of 2768	4580	chrome.exe	91
PID 4580 wrote to memory of 2768	4580	chrome.exe	91
PID 4580 wrote to memory of 2768	4580	chrome.exe	91
PID 4580 wrote to memory of 2768	4580	chrome.exe	91
PID 4580 wrote to memory of 2768	4580	chrome.exe	91
PID 4580 wrote to memory of 2768	4580	chrome.exe	91
PID 4580 wrote to memory of 2768	4580	chrome.exe	91
PID 4580 wrote to memory of 2768	4580	chrome.exe	91
PID 4580 wrote to memory of 2768	4580	chrome.exe	91
PID 4580 wrote to memory of 2768	4580	chrome.exe	91
PID 4580 wrote to memory of 2768	4580	chrome.exe	91

C:\Windows\Explorer.EXE
C:\Windows\Explorer.EXE
1⤵
PID:3164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" "--simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT'" https://www.ijinshan.com/
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:824
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb01689758,0x7ffb01689768,0x7ffb01689778
    3⤵
    PID:2328
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1768 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:2
    3⤵
    PID:2460
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2136 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:8
    3⤵
    PID:4144
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2200 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:8
    3⤵
    PID:3468
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3104 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:1
    3⤵
    PID:3344
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3112 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:1
    3⤵
    PID:4524
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=3748 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:1
    3⤵
    PID:4956
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=4768 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:1
    3⤵
    PID:1476
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4912 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:8
    3⤵
    PID:4380
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5076 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:8
    3⤵
    PID:5016
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5668 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:8
    3⤵
    PID:3068
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5664 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:8
    3⤵
    PID:3308
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=5676 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:1
    3⤵
    PID:4404
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=3856 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:1
    3⤵
    PID:4104
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2540 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:8
    3⤵
    PID:4244
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=4424 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:1
    3⤵
    PID:1900
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=3320 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:1
    3⤵
    PID:4932
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=5652 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:1
    3⤵
    PID:1448
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=4588 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:1
    3⤵
    PID:2864
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5372 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:8
    3⤵
    PID:4908
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5760 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:8
    3⤵
    PID:4176
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6364 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:8
    3⤵
    PID:3148
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6372 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:2
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:936
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6452 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:8
    3⤵
    - Modifies registry class
    - Suspicious use of SetWindowsHookEx
    PID:412
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6552 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:8
    3⤵
    PID:4860
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6288 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:8
    3⤵
    PID:2188
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5808 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:8
    3⤵
    PID:2044
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=28 --mojo-platform-channel-handle=6260 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:1
    3⤵
    PID:1500
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=29 --mojo-platform-channel-handle=6092 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:1
    3⤵
    PID:2436
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=30 --mojo-platform-channel-handle=5972 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:1
    3⤵
    PID:1736
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6120 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:8
    3⤵
    PID:4204
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=3292 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:8
    3⤵
    PID:4104
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2768 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:8
    3⤵
    PID:2300
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5784 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:8
    3⤵
    PID:2208
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6008 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:8
    3⤵
    PID:3720
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3100 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:8
    3⤵
    PID:5080
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=37 --mojo-platform-channel-handle=6012 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:1
    3⤵
    PID:4772
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=38 --mojo-platform-channel-handle=6520 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:1
    3⤵
    PID:4712
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=39 --mojo-platform-channel-handle=5572 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:1
    3⤵
    PID:1564
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4604 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:8
    3⤵
    PID:64
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5864 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:8
    3⤵
    PID:2280
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5684 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:8
    3⤵
    PID:1404
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6700 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:8
    3⤵
    PID:4548
- - C:\Users\Admin\Downloads\kinstui_160_3.exe
    "C:\Users\Admin\Downloads\kinstui_160_3.exe"
    3⤵
    - Executes dropped EXE
    - Writes to the Master Boot Record (MBR)
    - Modifies registry class
    - Suspicious behavior: GetForegroundWindowSpam
    - Suspicious use of SendNotifyMessage
    - Suspicious use of SetWindowsHookEx
    PID:4880
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5684 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:8
    3⤵
    PID:1644
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6780 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:8
    3⤵
    PID:4560
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6920 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:8
    3⤵
    PID:2052
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6636 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:8
    3⤵
    PID:4624
- - C:\Users\Admin\Downloads\dubayoung_101_101.exe
    "C:\Users\Admin\Downloads\dubayoung_101_101.exe"
    3⤵
    - Drops file in Drivers directory
    - Sets file execution options in registry
    - Executes dropped EXE
    - Loads dropped DLL
    - Modifies system executable filetype association
    - Registers COM server for autorun
    - Adds Run key to start application
    - Drops desktop.ini file(s)
    - Writes to the Master Boot Record (MBR)
    - Checks for VirtualBox DLLs, possible anti-VM trick
    - Drops file in Program Files directory
    - Checks processor information in registry
    - Enumerates system info in registry
    - Modifies registry class
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious behavior: GetForegroundWindowSpam
    - Suspicious use of SetWindowsHookEx
    PID:2208
  - - \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kislive.exe
      "c:\program files (x86)\kingsoft\kingsoft antivirus\kislive.exe" -initwd
      4⤵
      PID:4508
  - - \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kxescore.exe
      "c:\program files (x86)\kingsoft\kingsoft antivirus\kxescore.exe" /start kxescore
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Suspicious use of SetWindowsHookEx
      PID:2700
  - - \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kislive.exe
      "c:\program files (x86)\kingsoft\kingsoft antivirus\kislive.exe" -skipcs3 -autorun
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Drops file in Program Files directory
      Suspicious use of SetWindowsHookEx
      PID:636
  - - \??\c:\program files (x86)\kingsoft\kingsoft antivirus\ksoftmgr.exe
      "c:\program files (x86)\kingsoft\kingsoft antivirus\ksoftmgr.exe" -preload
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Modifies Internet Explorer settings
      Suspicious use of SetWindowsHookEx
      PID:5140
  - - \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kavlog2.exe
      "c:\program files (x86)\kingsoft\kingsoft antivirus\kavlog2.exe" -install
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Drops file in System32 directory
      Suspicious use of SetWindowsHookEx
      PID:3800
  - - \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kxemain.exe
      "c:\program files (x86)\kingsoft\kingsoft antivirus\kxemain.exe" /noplayanimat
      4⤵
      Checks computer location settings
      Executes dropped EXE
      Modifies system executable filetype association
      Registers COM server for autorun
      Enumerates connected drives
      Drops file in Program Files directory
      Modifies registry class
      Suspicious behavior: GetForegroundWindowSpam
      Suspicious use of SetWindowsHookEx
      PID:5436
    - - C:\program files (x86)\kingsoft\kingsoft antivirus\kismain.exe
        
        "C:\program files (x86)\kingsoft\kingsoft antivirus\kismain.exe" -Setting_FileTrust
        5⤵
        Checks computer location settings
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:20400
      - C:\program files (x86)\kingsoft\kingsoft antivirus\kxetray.exe
        
        "C:\program files (x86)\kingsoft\kingsoft antivirus\kxetray.exe" /kismain -setting_filetrust
        6⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:20448
    - - \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kismain.exe
        
        "c:\program files (x86)\kingsoft\kingsoft antivirus\\kismain.exe" /khealthctrl /from:1 /product:1
        5⤵
        Checks computer location settings
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:23224
      - C:\program files (x86)\kingsoft\kingsoft antivirus\kxetray.exe
        
        "C:\program files (x86)\kingsoft\kingsoft antivirus\kxetray.exe" /kismain /khealthctrl /from:1 /product:1
        6⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:2640
    - - C:\program files (x86)\kingsoft\kingsoft antivirus\kwtpanel.exe
        
        "C:\program files (x86)\kingsoft\kingsoft antivirus\kwtpanel.exe" /weatherpanel /src:12
        5⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:23856
      - C:\program files (x86)\kingsoft\kingsoft antivirus\kwtpanel.exe
        
        "C:\program files (x86)\kingsoft\kingsoft antivirus\kwtpanel.exe" /queryweather:force /locate /aqirank
        6⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:23988
      - C:\program files (x86)\kingsoft\kingsoft antivirus\kwtpanel.exe
        
        "C:\program files (x86)\kingsoft\kingsoft antivirus\kwtpanel.exe" /queryweather:carecity
        6⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:24720
      - C:\program files (x86)\kingsoft\kingsoft antivirus\kwtpanel.exe
        
        "C:\program files (x86)\kingsoft\kingsoft antivirus\kwtpanel.exe" /queryweather:force /locate /aqirank
        6⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:24828
      - C:\program files (x86)\kingsoft\kingsoft antivirus\kwtpanel.exe
        
        "C:\program files (x86)\kingsoft\kingsoft antivirus\kwtpanel.exe" /queryweather:force /locate /aqirank
        6⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:24856
    - - \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kismain.exe
        
        "c:\program files (x86)\kingsoft\kingsoft antivirus\\kismain.exe" /khealthctrl /from:1 /product:1
        5⤵
        Checks computer location settings
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:24208
      - C:\program files (x86)\kingsoft\kingsoft antivirus\kxetray.exe
        
        "C:\program files (x86)\kingsoft\kingsoft antivirus\kxetray.exe" /kismain /khealthctrl /from:1 /product:1
        6⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:24316
    - - C:\program files (x86)\kingsoft\kingsoft antivirus\kcalendar.exe
        
        "C:\program files (x86)\kingsoft\kingsoft antivirus\kcalendar.exe" /from:28 /FixTime
        5⤵
        Executes dropped EXE
        Enumerates connected drives
        Checks processor information in registry
        Suspicious use of SetWindowsHookEx
        
        PID:23980
    - - C:\program files (x86)\kingsoft\kingsoft antivirus\kaccfavorite.exe
        
        "C:\program files (x86)\kingsoft\kingsoft antivirus\kaccfavorite.exe" testdefault /from:6
        5⤵
        Executes dropped EXE
        Suspicious behavior: AddClipboardFormatListener
        Suspicious behavior: GetForegroundWindowSpam
        Suspicious use of SetWindowsHookEx
        
        PID:23996
    - - C:\program files (x86)\kingsoft\kingsoft antivirus\kpwdeval.exe
        
        "C:\program files (x86)\kingsoft\kingsoft antivirus\kpwdeval.exe"
        5⤵
        Executes dropped EXE
        Suspicious behavior: GetForegroundWindowSpam
        Suspicious use of SetWindowsHookEx
        
        PID:27024
    - - C:\program files (x86)\kingsoft\kingsoft antivirus\liebao.exe
        
        "C:\program files (x86)\kingsoft\kingsoft antivirus\liebao.exe"
        5⤵
        Drops file in Drivers directory
        Sets service image path in registry
        Checks computer location settings
        Executes dropped EXE
        
        PID:26984
      - C:\Users\Admin\AppData\Local\liebao\8.0.0.21681\ManualUpgrade.exe
        
        "C:\Users\Admin\AppData\Local\liebao\8.0.0.21681\ManualUpgrade.exe" --skin_updater
        6⤵
        
        PID:30160
      - C:\Users\Admin\AppData\Local\liebao\liebao.exe
        
        "C:\Users\Admin\AppData\Local\liebao\liebao.exe" --install-complete
        6⤵
        
        PID:31300
        
        C:\Users\Admin\AppData\Local\liebao\8.0.0.21681\liebao.exe
        
        "C:\Users\Admin\AppData\Local\liebao\8.0.0.21681\liebao.exe" --install-complete
        7⤵
        
        PID:31692
      - C:\Users\Admin\AppData\Local\liebao\8.0.0.21681\createshortcut.exe
        
        "C:\Users\Admin\AppData\Local\liebao\8.0.0.21681\createshortcut.exe" -action:2 -path:"C:\Users\Admin\AppData\Local\liebao\8.0.0.21681\liebao.exe" -name:猎豹安全浏览器 -param:"--ico2 -sc=quicklaunchpinedshortcut -fixlaunch=0" -appid:Liebao
        6⤵
        Checks computer location settings
        
        PID:31088
      - C:\Users\Admin\AppData\Local\liebao\8.0.0.21681\knbcenter.exe
        
        "C:\Users\Admin\AppData\Local\liebao\8.0.0.21681\knbcenter.exe" /install
        6⤵
        
        PID:32096
      - C:\Users\Admin\AppData\Local\liebao\8.0.0.21681\knbcenter.exe
        
        "C:\Users\Admin\AppData\Local\liebao\8.0.0.21681\knbcenter.exe" /start
        6⤵
        Sets service image path in registry
        
        PID:32792
      - C:\Users\Admin\AppData\Local\liebao\liebao.exe
        
        "C:\Users\Admin\AppData\Local\liebao\liebao.exe" --make-default-browser
        6⤵
        
        PID:32800
        
        C:\Users\Admin\AppData\Local\liebao\8.0.0.21681\liebao.exe
        
        "C:\Users\Admin\AppData\Local\liebao\8.0.0.21681\liebao.exe" --make-default-browser
        7⤵
        Modifies registry class
        
        PID:32880
        
        C:\Users\Admin\AppData\Local\liebao\8.0.0.21681\liebao.exe
        
        C:\Users\Admin\AppData\Local\liebao\8.0.0.21681\liebao.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\liebao\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\liebao\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\liebao\User Data" --annotation=plat=Win32 --annotation=prod=liebao --annotation=ver=8.0.0.21681 --initial-client-data=0x21c,0x220,0x224,0x218,0x228,0x6292c9c0,0x6292c9d0,0x6292c9dc
        8⤵
        
        PID:33008
        
        C:\Users\Admin\AppData\Local\liebao\8.0.0.21681\liebao.exe
        
        "C:\Users\Admin\AppData\Local\liebao\8.0.0.21681\liebao.exe" --type=gpu-process --field-trial-handle=1660,16580394068348157738,12135150989888316444,131072 --gpu-preferences=KAAAAAAAAADgAAAwAAAAAAAAYAAAAAAAEAAAAAAAAAAAAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAFAAAAEAAAAAAAAAAAAAAABgAAABAAAAAAAAAAAQAAAAUAAAAQAAAAAAAAAAEAAAAGAAAA --service-request-channel-token=3121957602361990614 --mojo-platform-channel-handle=1708 --ignored=" --type=renderer " /prefetch:2
        8⤵
        
        PID:34108
        
        C:\Users\Admin\AppData\Local\liebao\8.0.0.21681\liebao.exe
        
        "C:\Users\Admin\AppData\Local\liebao\8.0.0.21681\liebao.exe" --type=utility --field-trial-handle=1660,16580394068348157738,12135150989888316444,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --service-request-channel-token=9634595606283173656 --mojo-platform-channel-handle=1776 --ignored=" --type=renderer " /prefetch:8
        8⤵
        
        PID:34168
    - - C:\program files (x86)\kingsoft\kingsoft antivirus\app\kwppacket\kdeskpkg.exe
        
        "C:\program files (x86)\kingsoft\kingsoft antivirus\app\kwppacket\kdeskpkg.exe"
        5⤵
        Checks computer location settings
        Executes dropped EXE
        Adds Run key to start application
        Drops desktop.ini file(s)
        Checks for VirtualBox DLLs, possible anti-VM trick
        Drops file in Program Files directory
        Checks processor information in registry
        Enumerates system info in registry
        Modifies registry class
        
        PID:27900
      - \??\c:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\kdeskmenu64install64.exe
        
        "c:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\kdeskmenu64install64.exe" /install:kdeskmenu64.dll /forcedMode:true
        6⤵
        Executes dropped EXE
        Registers COM server for autorun
        Modifies registry class
        
        PID:30428
      - \??\c:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\kdesk.exe
        
        "c:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\kdesk.exe" /action:6 /from:33
        6⤵
        Checks computer location settings
        
        PID:30800
        
        C:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\kdesk64.exe
        
        "C:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\kdesk64.exe" "c:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\kdesk.exe" /action:6 /from:33
        7⤵
        Checks computer location settings
        Suspicious behavior: GetForegroundWindowSpam
        
        PID:30516
        
        C:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\kwallpaperplayer.exe
        
        "C:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\kwallpaperplayer.exe" -parent=67344 -src="C:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\data\kwallpaper\res\action6_guide_video.mp4" -wallpaper=0 -rect="0,0,389,242" -loop=0 -pause_time=2000 -start_time=0 -vol=50
        8⤵
        Modifies registry class
        
        PID:33568
        
        C:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\kwallpaper.exe
        
        "C:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\kwallpaper.exe" /showmode:2 /tab:1 /from:33
        8⤵
        Checks computer location settings
        Adds Run key to start application
        Checks processor information in registry
        
        PID:35972
        
        C:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\kwallpaperui.exe
        
        "C:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\kwallpaperui.exe" /from:33
        9⤵
        Checks processor information in registry
        Suspicious behavior: GetForegroundWindowSpam
        
        PID:35928
        
        C:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\kwallpaperui.exe
        
        "C:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\kwallpaperui.exe" --type=renderer --disable-gpu-compositing --force-device-scale-factor=1 --no-sandbox --lang=en-US --lang=zh-CN --log-file="C:\Users\Admin\AppData\Roaming\kdesk\log\kwallpaperui.libcef.log" --log-severity=disable --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="35928.0.1973599087\1651676362" /prefetch:1
        10⤵
        
        PID:37324
        
        C:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\kwallpaperui.exe
        
        "C:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\kwallpaperui.exe" --type=renderer --disable-gpu-compositing --force-device-scale-factor=1 --no-sandbox --lang=en-US --lang=zh-CN --log-file="C:\Users\Admin\AppData\Roaming\kdesk\log\kwallpaperui.libcef.log" --log-severity=disable --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="35928.1.1011377861\524767859" /prefetch:1
        10⤵
        
        PID:37932
        
        C:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\kwallpaperui.exe
        
        "C:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\kwallpaperui.exe" --type=utility --channel="35928.2.2048289762\867102249" --lang=en-US --no-sandbox --no-sandbox --lang=zh-CN --log-file="C:\Users\Admin\AppData\Roaming\kdesk\log\kwallpaperui.libcef.log" --log-severity=disable /prefetch:8
        10⤵
        
        PID:39788
        
        C:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\keyemain.exe
        
        "C:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\keyemain.exe" /time:8 /silent:1
        9⤵
        
        PID:36036
      - C:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\kdesk64.exe
        
        "C:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\kdesk64.exe" /from:7 /mode:3 /operation:1
        6⤵
        
        PID:35872
    - - C:\Users\Admin\AppData\Roaming\CmGamebox\cmgamebox.exe
        
        "C:\Users\Admin\AppData\Roaming\CmGamebox\cmgamebox.exe" /runtype:dpdinst /from:9
        5⤵
        Checks computer location settings
        
        PID:31120
      - C:\Users\Admin\AppData\Roaming\CmGamebox\cmalarmsvc.exe
        
        "C:\Users\Admin\AppData\Roaming\CmGamebox\cmalarmsvc.exe" -i -c
        6⤵
        
        PID:21408
      - C:\Users\Admin\AppData\Roaming\CmGamebox\cmgamebox.exe
        
        C:\Users\Admin\AppData\Roaming\CmGamebox\cmgamebox.exe /from:9 /newinst
        6⤵
        Modifies Internet Explorer settings
        
        PID:32076
        
        C:\Users\Admin\AppData\Roaming\CmGamebox\cmdownloader_fast.exe
        
        C:\Users\Admin\AppData\Roaming\CmGamebox\cmdownloader_fast.exe cmgamebox_auto http://zhwan.liebao.cn/cmgamebox/dl/fast.7z C:\Users\Admin\AppData\Local\Temp\{EBD6AF99-8903-44EB-980C-0BF05DC6A841}.7z
        7⤵
        
        PID:33072
    - - \??\c:\program files (x86)\kingsoft\kingsoft antivirus\app\fastvc\fastvc.exe
        
        "c:\program files (x86)\kingsoft\kingsoft antivirus\app\fastvc\fastvc.exe" /from:4
        5⤵
        Suspicious behavior: AddClipboardFormatListener
        Suspicious behavior: GetForegroundWindowSpam
        
        PID:39132
      - \??\c:\program files (x86)\kingsoft\kingsoft antivirus\app\fastvc\ffprobe.exe
        
        "c:\program files (x86)\kingsoft\kingsoft antivirus\app\fastvc\ffprobe.exe"
        6⤵
        
        PID:39908
      - \??\c:\program files (x86)\kingsoft\kingsoft antivirus\app\fastvc\sox.exe
        
        "c:\program files (x86)\kingsoft\kingsoft antivirus\app\fastvc\sox.exe"
        6⤵
        
        PID:38684
      - \??\c:\program files (x86)\kingsoft\kingsoft antivirus\app\fastvc\ffmpeg.exe
        
        "c:\program files (x86)\kingsoft\kingsoft antivirus\app\fastvc\ffmpeg.exe"
        6⤵
        
        PID:39764
  - - \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kxetray.exe
      "c:\program files (x86)\kingsoft\kingsoft antivirus\kxetray.exe" /autorun /kislive /devmgr /install
      4⤵
      Checks computer location settings
      Executes dropped EXE
      Modifies system executable filetype association
      Registers COM server for autorun
      Enumerates connected drives
      Checks for VirtualBox DLLs, possible anti-VM trick
      Drops file in Program Files directory
      Drops file in Windows directory
      Checks processor information in registry
      Enumerates system info in registry
      Modifies registry class
      Suspicious behavior: AddClipboardFormatListener
      Suspicious behavior: GetForegroundWindowSpam
      Suspicious use of SendNotifyMessage
      Suspicious use of SetWindowsHookEx
      PID:5392
    - - \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kxecenter.exe
        
        "c:\program files (x86)\kingsoft\kingsoft antivirus\kxecenter.exe"
        5⤵
        Executes dropped EXE
        Drops file in Program Files directory
        Suspicious use of SetWindowsHookEx
        
        PID:3924
      - \??\c:\program files (x86)\kingsoft\kingsoft antivirus\knewvip.exe
        
        "knewvip.exe" --open_opction=1 --from=1 --start
        6⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:6052
    - - \??\c:\program files (x86)\kingsoft\kingsoft antivirus\knewvip.exe
        
        "knewvip.exe" --open_opction=1 --from=1 --start
        5⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:3052
      - \??\c:\program files (x86)\kingsoft\kingsoft antivirus\knewvip.exe
        
        "c:\program files (x86)\kingsoft\kingsoft antivirus\knewvip.exe" --type=utility --channel="3052.0.251564132\190525781" --lang=en-US --no-sandbox --no-sandbox --lang=zh-CN --log-file="c:\program files (x86)\kingsoft\kingsoft antivirus\debug.log" /prefetch:8
        6⤵
        Executes dropped EXE
        Drops file in Program Files directory
        Suspicious use of SetWindowsHookEx
        
        PID:7936
    - - \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kwtpanel.exe
        
        "c:\program files (x86)\kingsoft\kingsoft antivirus\kwtpanel.exe" /queryweather:force /locate
        5⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:2716
    - - \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kismain.exe
        
        "c:\program files (x86)\kingsoft\kingsoft antivirus\kismain.exe" /khealthctrl /from:21 /product:1 /time:2 /silent:1 /eyemode:1
        5⤵
        Checks computer location settings
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:5748
      - C:\program files (x86)\kingsoft\kingsoft antivirus\kxetray.exe
        
        "C:\program files (x86)\kingsoft\kingsoft antivirus\kxetray.exe" /kismain /khealthctrl /from:21 /product:1 /time:2 /silent:1 /eyemode:1
        6⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:2364
    - - \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kwsprotect64.exe
        
        "kwsprotect64.exe" (null)
        5⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:5636
    - - \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kwtpanel.exe
        
        "c:\program files (x86)\kingsoft\kingsoft antivirus\kwtpanel.exe" /queryweather:force /locate
        5⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:5444
    - - \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kwtpanel.exe
        
        "c:\program files (x86)\kingsoft\kingsoft antivirus\kwtpanel.exe" /queryweather:force /locate
        5⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:4508
    - - \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kismain.exe
        
        "c:\program files (x86)\kingsoft\kingsoft antivirus\\kismain.exe" /kismain /khealthctrl /from:21 /product:1 /time:2 /silent:1 /eyemode:1
        5⤵
        Checks computer location settings
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:10620
      - C:\program files (x86)\kingsoft\kingsoft antivirus\kxetray.exe
        
        "C:\program files (x86)\kingsoft\kingsoft antivirus\kxetray.exe" /kismain /kismain /khealthctrl /from:21 /product:1 /time:2 /silent:1 /eyemode:1
        6⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:11180
    - - \??\c:\program files (x86)\kingsoft\kingsoft antivirus\app\khealtheye\keyemain.exe
        
        "c:\program files (x86)\kingsoft\kingsoft antivirus\app\khealtheye\keyemain.exe" /kismain /kismain /khealthctrl /from:21 /product:1 /time:2 /silent:1 /eyemode:1 /product:1
        5⤵
        Checks computer location settings
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:10636
      - C:\program files (x86)\kingsoft\kingsoft antivirus\app\khealtheye\keyemain.exe
        
        "C:\program files (x86)\kingsoft\kingsoft antivirus\app\khealtheye\keyemain.exe" /kismain /kismain /khealthctrl /from:21 /product:1 /time:2 /silent:1 /eyemode:1 /product:1 /runas:1
        6⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:11296
    - - \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kdrvmgr.exe
        
        "c:\program files (x86)\kingsoft\kingsoft antivirus\kdrvmgr.exe" /i /kavbootc
        5⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:15856
    - - \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kxecenter.exe
        
        "c:\program files (x86)\kingsoft\kingsoft antivirus\kxecenter.exe"
        5⤵
        Executes dropped EXE
        Drops file in Program Files directory
        Suspicious use of SetWindowsHookEx
        
        PID:16696
    - - \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kxecenter.exe
        
        "c:\program files (x86)\kingsoft\kingsoft antivirus\kxecenter.exe"
        5⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:16704
    - - \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kislive.exe
        
        "kislive.exe" /autorun /std /skipcs3
        5⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:18340
    - - \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kxemain.exe
        
        "c:\program files (x86)\kingsoft\kingsoft antivirus\kxemain.exe" /kismain /open_from:1
        5⤵
        Executes dropped EXE
        Drops file in Program Files directory
        Suspicious use of SetWindowsHookEx
        
        PID:19748
    - - \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kxemain.exe
        
        "c:\program files (x86)\kingsoft\kingsoft antivirus\kxemain.exe" /kismain -setting_filetrust
        5⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:19600
    - - \??\c:\program files (x86)\kingsoft\kingsoft antivirus\app\khealtheye\keyemain.exe
        
        "c:\program files (x86)\kingsoft\kingsoft antivirus\app\khealtheye\keyemain.exe" /kismain /khealthctrl /from:1 /product:1 /product:1
        5⤵
        Checks computer location settings
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:4648
      - C:\program files (x86)\kingsoft\kingsoft antivirus\app\khealtheye\keyemain.exe
        
        "C:\program files (x86)\kingsoft\kingsoft antivirus\app\khealtheye\keyemain.exe" /kismain /khealthctrl /from:1 /product:1 /product:1 /runas:1
        6⤵
        Executes dropped EXE
        Suspicious behavior: GetForegroundWindowSpam
        Suspicious use of SetWindowsHookEx
        
        PID:23664
    - - \??\c:\program files (x86)\kingsoft\kingsoft antivirus\rcmdhelper.exe
        
        "c:\program files (x86)\kingsoft\kingsoft antivirus\rcmdhelper.exe" /pinstartmenu /pin:"C:\ProgramData\Microsoft\Windows\Start Menu\Programs\金山毒霸\强力卸载软件.lnk"
        5⤵
        Checks computer location settings
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:25484
    - - \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kxecenter.exe
        
        "c:\program files (x86)\kingsoft\kingsoft antivirus\kxecenter.exe"
        5⤵
        
        PID:38684
    - - \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kxecenter.exe
        
        "c:\program files (x86)\kingsoft\kingsoft antivirus\kxecenter.exe"
        5⤵
        Checks computer location settings
        
        PID:43668
      - C:\program files (x86)\kingsoft\kingsoft antivirus\ksoftmgr.exe
        
        "C:\program files (x86)\kingsoft\kingsoft antivirus\ksoftmgr.exe" /silent /autoclean
        6⤵
        
        PID:45552
        
        C:\Windows\SysWOW64\netsh.exe
        
        "C:\Windows\System32\netsh.exe" firewall add allowedprogram "C:\program files (x86)\kingsoft\kingsoft antivirus\xlmodule\download\minithunderplatform.exe" "minithunderplatform" enable
        7⤵
        Modifies Windows Firewall
        
        PID:43252
        
        C:\program files (x86)\kingsoft\kingsoft antivirus\xlmodule\download\MiniThunderPlatform.exe
        
        "C:\program files (x86)\kingsoft\kingsoft antivirus\xlmodule\download\MiniThunderPlatform.exe" -StartTP
        7⤵
        
        PID:38788
    - - \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kxecenter.exe
        
        "c:\program files (x86)\kingsoft\kingsoft antivirus\kxecenter.exe"
        5⤵
        
        PID:43664
    - - \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kxecenter.exe
        
        "c:\program files (x86)\kingsoft\kingsoft antivirus\kxecenter.exe"
        5⤵
        
        PID:31092
    - - \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kxecenter.exe
        
        "c:\program files (x86)\kingsoft\kingsoft antivirus\kxecenter.exe"
        5⤵
        
        PID:43640
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5604 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:8
    3⤵
    PID:17508
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=3764 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:8
    3⤵
    PID:17624
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6036 --field-trial-handle=1844,i,2695384966848277324,4766405841200760378,131072 /prefetch:8
    3⤵
    PID:17632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe"
  2⤵
  - Enumerates system info in registry
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of WriteProcessMemory
  PID:4580
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0x100,0x104,0x108,0xfc,0xd8,0x7ffb01689758,0x7ffb01689768,0x7ffb01689778
    3⤵
    PID:4344
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1660 --field-trial-handle=1968,i,12965123504312978250,1164563951790442016,131072 /prefetch:2
    3⤵
    PID:2768
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1916 --field-trial-handle=1968,i,12965123504312978250,1164563951790442016,131072 /prefetch:8
    3⤵
    PID:4196
- C:\Windows\system32\mspaint.exe
  "C:\Windows\system32\mspaint.exe" "C:\Users\Admin\Downloads\minato-aqua-birthday-virtual-youtuber-thumb.jpg"
  2⤵
  - Drops file in Windows directory
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of SetWindowsHookEx
  PID:212
- C:\Windows\system32\taskmgr.exe
  "C:\Windows\system32\taskmgr.exe" /7
  2⤵
  - Checks SCSI registry key(s)
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious use of SendNotifyMessage
  PID:12060
- C:\Program Files (x86)\kingsoft\kingsoft antivirus\kismain.exe
  "C:\Program Files (x86)\kingsoft\kingsoft antivirus\kismain.exe" /open_from:1
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  PID:19624
- - C:\Program Files (x86)\kingsoft\kingsoft antivirus\kxetray.exe
    "C:\Program Files (x86)\kingsoft\kingsoft antivirus\kxetray.exe" /kismain /open_from:1
    3⤵
    - Executes dropped EXE
    PID:19692

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:2640

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x448 0x4b4
1⤵
PID:4460

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
1⤵
PID:3616
- C:\Windows\system32\dashost.exe
  dashost.exe {a550d399-2bcc-4d86-950627a2ab30a6aa}
  2⤵
  PID:4968

\??\c:\program files (x86)\kingsoft\kingsoft antivirus\kxescore.exe
"c:\program files (x86)\kingsoft\kingsoft antivirus\kxescore.exe" /service kxescore
1⤵
- Drops file in Drivers directory
- Sets service image path in registry
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- Checks for VirtualBox DLLs, possible anti-VM trick
- Drops file in Program Files directory
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Modifies system certificate store
PID:4740
- \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kupdata.exe
  "c:\program files (x86)\kingsoft\kingsoft antivirus\kupdata.exe" -magiccube_update
  2⤵
  - Executes dropped EXE
  PID:1072
- \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kscan.exe
  "c:\program files (x86)\kingsoft\kingsoft antivirus\kscan.exe"
  2⤵
  - Drops file in Drivers directory
  - Executes dropped EXE
  - Modifies system executable filetype association
  - Enumerates connected drives
  - Modifies Internet Explorer settings
  - Modifies data under HKEY_USERS
  - Modifies registry class
  PID:6896
- \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kupdata.exe
  "c:\program files (x86)\kingsoft\kingsoft antivirus\kupdata.exe" -active 2
  2⤵
  - Executes dropped EXE
  - Checks whether UAC is enabled
  - Writes to the Master Boot Record (MBR)
  - Checks for VirtualBox DLLs, possible anti-VM trick
  - Drops file in Program Files directory
  - Checks processor information in registry
  - Enumerates system info in registry
  PID:20680
- \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kcddltool.exe
  "c:\program files (x86)\kingsoft\kingsoft antivirus\kcddltool.exe"
  2⤵
  - Executes dropped EXE
  PID:24928
- \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kupdata.exe
  "c:\program files (x86)\kingsoft\kingsoft antivirus\kupdata.exe" -systemsupport [32:add:17692_16,17713_16,17741_16,17763_16,18362_16,18363_16;][64:add:17692_16,17713_16,17741_16,17763_16,18362_16,18363_16;]
  2⤵
  - Executes dropped EXE
  PID:24916
- \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kupdata.exe
  "c:\program files (x86)\kingsoft\kingsoft antivirus\kupdata.exe" -lockscreenmonitor
  2⤵
  - Executes dropped EXE
  PID:24924
- \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kupdata.exe
  "c:\program files (x86)\kingsoft\kingsoft antivirus\kupdata.exe" -uninstallrepair
  2⤵
  - Executes dropped EXE
  PID:24800
- \??\c:\program files (x86)\kingsoft\kingsoft antivirus\knotifycenter.exe
  "c:\program files (x86)\kingsoft\kingsoft antivirus\\knotifycenter.exe" -product:12
  2⤵
  - Executes dropped EXE
  - Modifies Internet Explorer settings
  PID:29216
- \??\c:\program files (x86)\kingsoft\kingsoft antivirus\knotifycenter.exe
  "c:\program files (x86)\kingsoft\kingsoft antivirus\\knotifycenter.exe" -product:12
  2⤵
  - Executes dropped EXE
  - Modifies Internet Explorer settings
  PID:29632
- \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kupdata.exe
  "c:\program files (x86)\kingsoft\kingsoft antivirus\kupdata.exe" -lockedbrowser
  2⤵
  PID:35692
- \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kislive.exe
  "c:\program files (x86)\kingsoft\kingsoft antivirus\kislive.exe" -autorun -uselocal
  2⤵
  PID:37452
- \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kupdata.exe
  "c:\program files (x86)\kingsoft\kingsoft antivirus\kupdata.exe" -modifyswsc
  2⤵
  PID:43396
- \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kupdata.exe
  "c:\program files (x86)\kingsoft\kingsoft antivirus\kupdata.exe" -highvalue
  2⤵
  PID:44444
- \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kupdata.exe
  "c:\program files (x86)\kingsoft\kingsoft antivirus\kupdata.exe" -fixbluescreen
  2⤵
  PID:43284
- \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kupdata.exe
  "c:\program files (x86)\kingsoft\kingsoft antivirus\kupdata.exe" -send 1
  2⤵
  PID:43276
- \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kfixstar.exe
  "c:\program files (x86)\kingsoft\kingsoft antivirus\kfixstar.exe" -app:pop -task:pure_vip_noad_pop -wait:0 -mask:0 -param:{"popname":"kinternet_protect_pop"}
  2⤵
  PID:43256

\??\c:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\kdeskcore.exe
"c:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\kdeskcore.exe" /service cmcore
1⤵
- Executes dropped EXE
PID:30576
- \??\c:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\kwallpaper.exe
  "c:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\kwallpaper.exe" /gen_svr_id
  2⤵
  - Executes dropped EXE
  PID:30456
- \??\c:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\kdesk.exe
  "c:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\kdesk.exe" -autorun
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  PID:30972
- - C:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\kdesk64.exe
    "C:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\kdesk64.exe" "c:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\kdesk.exe" -autorun
    3⤵
    - Adds Run key to start application
    PID:30232
- C:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\kwallpaper.exe
  "C:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\kwallpaper.exe" /sync_prodnoti
  2⤵
  PID:36160
- C:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\keyemain.exe
  "C:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\keyemain.exe" /time:8 /silent:1 /runas:1
  2⤵
  PID:36144
- C:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\cmlive.exe
  "C:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\cmlive.exe" /checkupdate /parenthwnd:133046
  2⤵
  - Drops file in Program Files directory
  - Suspicious behavior: GetForegroundWindowSpam
  PID:38532
- \??\c:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\keyemain.exe
  "c:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\keyemain.exe" /reportactive:1
  2⤵
  PID:54132
- \??\c:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\kwallpaperui.exe
  "c:\program files (x86)\kingsoft\kingsoft antivirus\app\kdesk\kwallpaperui.exe" /report_cmd_with_active
  2⤵
  PID:54240

C:\Users\Admin\AppData\Roaming\CmGamebox\cmalarmsvc.exe
C:\Users\Admin\AppData\Roaming\CmGamebox\cmalarmsvc.exe
1⤵
- Adds Run key to start application
- Drops file in System32 directory
PID:31100
- C:\Users\Admin\AppData\Roaming\CmGamebox\krecommend.exe
  "C:\Users\Admin\AppData\Roaming\CmGamebox\\krecommend.exe" /product:9 /type:1 /sence:15
  2⤵
  - Modifies Internet Explorer settings
  - Modifies registry class
  PID:32404
- C:\Users\Admin\AppData\Roaming\CmGamebox\krecommend.exe
  "C:\Users\Admin\AppData\Roaming\CmGamebox\\krecommend.exe" /product:9 /type:1 /sence:14
  2⤵
  - Checks computer location settings
  - Modifies Internet Explorer settings
  PID:31988
- - C:\Users\Admin\AppData\Roaming\CmGamebox\plugin\zmq_plugin_setup.exe
    "C:\Users\Admin\AppData\Roaming\CmGamebox\plugin\zmq_plugin_setup.exe"
    3⤵
    - Checks computer location settings
    PID:35020
  - - C:\Users\Admin\AppData\Local\Temp\RarSFX0\setup.exe
      "C:\Users\Admin\AppData\Local\Temp\RarSFX0\setup.exe" /qn
      4⤵
      Checks computer location settings
      PID:35652
    - - C:\Windows\SysWOW64\msiexec.exe
        
        "C:\Windows\SysWOW64\msiexec.exe" -I "C:\Users\Admin\AppData\Local\Temp\RarSFX0\ZMQ37BoxInstaller.msi" /qn
        5⤵
        
        PID:34896
- C:\Users\Admin\AppData\Roaming\CmGamebox\krecommend.exe
  "C:\Users\Admin\AppData\Roaming\CmGamebox\\krecommend.exe" /product:9 /type:3 /sence:49
  2⤵
  PID:54172
- C:\Users\Admin\AppData\Roaming\CmGamebox\krecommend.exe
  "C:\Users\Admin\AppData\Roaming\CmGamebox\\krecommend.exe" /product:9 /type:1 /sence:1
  2⤵
  PID:54180

C:\Users\Admin\AppData\Local\liebao\8.0.0.21681\KNBCenter.exe
C:\Users\Admin\AppData\Local\liebao\8.0.0.21681\KNBCenter.exe
1⤵
- Drops file in Drivers directory
- Sets service image path in registry
- Registers COM server for autorun
- Drops file in System32 directory
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: LoadsDriver
PID:32824
- C:\Users\Admin\AppData\Local\liebao\8.0.0.21681\lbtoast.exe
  "C:\Users\Admin\AppData\Local\liebao\8.0.0.21681\lbtoast.exe" -type:clipboard
  2⤵
  - Suspicious behavior: SetClipboardViewer
  PID:35368
- C:\Users\Admin\AppData\Local\liebao\8.0.0.21681\DesktopTips.exe
  "C:\Users\Admin\AppData\Local\liebao\8.0.0.21681\DesktopTips.exe" --html-popup --channel=f2328d30-a8bf-4393-8b3c-d156af88dc42
  2⤵
  PID:36500
- C:\Users\Admin\AppData\Local\liebao\8.0.0.21681\kupdata.exe
  "C:\Users\Admin\AppData\Local\liebao\8.0.0.21681\kupdata.exe"
  2⤵
  PID:54500

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x448 0x4b4
1⤵
PID:35320

C:\Windows\system32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
1⤵
- Blocklisted process makes network request
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Windows directory
- Modifies data under HKEY_USERS
- Modifies registry class
PID:26996
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding EEA4538F4C4F2D0E40A740527C336919
  2⤵
  PID:35948
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding 5C4E41DE448C360377EABA20F73DF914 M Global\MSI0000
  2⤵
  - Modifies registry class
  PID:37056

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Bootkit

T1067

Change Default File Association

T1042

Modify Existing Service

T1031

Registry Run Keys / Startup Folder

T1060

Privilege Escalation

Defense Evasion

Install Root Certificate

T1130

Modify Registry

T1112

Credential Access

Credentials in Files

T1081

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

Software Discovery

T1518

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Config.Msi\e630259.rbs

Filesize
14KB

MD5
0001e722803d03cf1789b5e6b2f6bf5b

SHA1
e29097b315c1009ebb3dff6501e2968d64937e94

SHA256
a11f0db3e4f1a814eb35808e829b50d7539ff380688efb68afe7568e0e60e9be

SHA512
b8d0bc7a787db6e694fa37329b0ce08b1d9304347fe30932acebbd03b7a16f55c3d290accda6b5c7369a468a808cd1734b3cce69fa884aeda08118cf9c24a977

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\fastvc\api-ms-win-crt-private-l1-1-0.dll

Filesize
72KB

MD5
8ff98e2ceb2724d9c7ce121a75036560

SHA1
5d0eb20c46c4c1ce1c188a5c3cfaf416617a58ff

SHA256
80ec395c2c5ad8b9728784d6aec611e0ce7a5ddefebef093235b420fdb74a7ab

SHA512
c029a78834236a6a4616ee93e0d06e44e880560c354a4872489d24497133462e8629c03af707825fc6fd447437922c863e5395f0851d5b19585bffa42d9ce4ec

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\cmlive.log

Filesize
7KB

MD5
ebdc35291e6066effa54aa782f0be693

SHA1
942a33bc98cfa08e8f36f401123b137570ae5962

SHA256
aaa61c9c5d3bf017bc594d3ae59099106eed54502e6e12a7312e53f74f369df9

SHA512
48e6293aff6bfbc3133d30b036308699d370d338978f67344c166710469cb9de79f7096b34863b3a3313322c7e15491f03cfce9a9a51dc9c9774c526a82b0c21

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\ressrc\chs\bk\kuninst\460000.png

Filesize
1KB

MD5
994343d6820502306cf2696985b24d5d

SHA1
69db0ae02a4aa600e7e25ac63daacb03b2097828

SHA256
3a116e59ec49bbf9da5efaa439855767725aad6ff6ea83a030f93c813b3d4efa

SHA512
6bb4e2d9a54b6ea891418594989bb509fc8eb7c59cf836e8795393f954dce6fdb18af21e9099bbd40db533aa0388d248ca40df9b02947e15017ab4dc7d22c37c

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\indexpcmastercn.txt

Filesize
293B

MD5
164efb26c4a1350f60fc7c58e57ce648

SHA1
d949995e4b67823e192b8445667679d03f2031a1

SHA256
e437cfc980e54b256a7c205fa4e283c4d1c8e4ab5c92df52172854fec0670eb9

SHA512
3a107d97e4c00da0e5cda449955c4529cc29362f195383c283f87d680c43d96194abf3d9a79f86139c0ac1b4b5a63f3a45adf57f8042b254937887dcff016f2a

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\indexpcmastercn_fast.txt

Filesize
298B

MD5
8a82b192c61bae6708c8e4185d16b27f

SHA1
7c5625274157dec2b0c424ffe9deee0f929cc1aa

SHA256
2dedf06bb43c595d59baee5a4f609356d684e84cd295e73e183bd13a80481c50

SHA512
77331846921251105f22f5999062a6e714c52c6ef4cfaa7d7db260aca4f29193537c3e9c10ec32a25844effaeaf214ec6a9e11e9b5011ca6bfcb5329d39efaa7

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\assets.cwp

Filesize
19.9MB

MD5
77a93b7b163ca0b721dec808d91861ca

SHA1
85e3a37387504f5ca38cbf3eebc14acb48271589

SHA256
b0f152e796674307f785f9003d47622c46b37564fa31d4bfc1d793cc6e132b14

SHA512
390b1958fbec184d792e2fac8cbf62721004b258ad33527029d370b174ee348ba740851ec6f32c7a35ddaeb1257efc05f95db8b808f804c622bb8ffe137e0ce0

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\avcodec-58.dll

Filesize
13.7MB

MD5
85160d0287beb73daebaa318ccb7604d

SHA1
8229b7f4008ee5934ad8cae0424453b126815f23

SHA256
244b1b79c94516aaaad637e27f55fdb59bd85da31685d8d3262875f422b73f92

SHA512
5868cebfe822b6a52b999b2fe92cb425a16853a7cc0f5c520e41d4063f3f757b28dfa48437015dd1f41e3bebdcbddc18f5c266973ee1895f150ac2ff68325aae

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\avformat-58.dll

Filesize
2.9MB

MD5
9e8a964f9c8ab86fb69b49bc430d18b1

SHA1
4dc57fff7d0e5946d4f3424ee6b5c9740d489188

SHA256
383f0272407be62831268e5d022c75bac151d0bee55893be784f3d207be910dc

SHA512
6cb5795fa367600b81c0402576c67fd0504c98c1125b729d3381ce4ca5e2da9c209e323392d9c2ae8a1dec8d552b08e4c916c02767345ebd9876787878ebd0b5

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\avutil-56.dll

Filesize
1.2MB

MD5
a532de8bdfc90053d22851ee3fa6941d

SHA1
b8abfba267efb0131a975494144aa0353d477a10

SHA256
77af2f07c203062a152936478cc83d5830283b630176ba1ed9227be52884acc9

SHA512
9a6bfe6d8d2c4b95a0029272164f1384f21c14337261785499385c225870b43469290e964d99105a355b820a197014b342906c266ce2b1f560c302136149a152

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\capricorn\cfgmap.xml

Filesize
959B

MD5
0d2b147883a8d86e355d99c875fa5f85

SHA1
7f5afce2c7ae8bee580d9357ef5827510e9a1e15

SHA256
ea740aede409cf22e55a8268c872df7e61cfde7002ccd8016f7122ec794d31be

SHA512
ceb63173105e93e904340dcee7ce808ee84f8776913c92c24d0a896efc29be740e0200e2e18652c18f343bbdd88a3d1137c149d72df2ca3fd395a9385ed1eca9

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\capricorn\scenes.xml

Filesize
2KB

MD5
3c47040319e761229bb7c1dfef36abc4

SHA1
26ad4c7e3b8bd564723acee3b1c5986f10c8f4a3

SHA256
3b54713f2e2b3e6998ad524a48fcd6c5abe8dadcf4641b5fa656924956d2f785

SHA512
f9905518b554b7c0df1ef427b9c15b910995116ce3648d8a84776b76cbc07a4a1a77ec076c8ea3211f15423512a8bf87c5e1e287c9adb78ff95b411558cb809a

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\cef\cef.pak

Filesize
2.2MB

MD5
4d991b6db94e823aac8cef6eb1959662

SHA1
84856f2eba08c5ad2df6a946e0eb7519bc9fb6cc

SHA256
2e07dc909efb9d9316e15452f168581966bdc7ad8fb607d3d3a339aaa8dc0266

SHA512
9842bf88339eaed96f81e82b1f1b15f6fe259449097e44f5d7738cd0aa79786da5e0b777d84b9a6a1c08bf3d0edfcf71c9cb396bd6c78145c5dfd171b8384f1f

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\cef\cef_100_percent.pak

Filesize
141KB

MD5
ad2ddfc39c78eedc734af6506a579a8c

SHA1
64e66d48ab3a98503948202dec3ff2f35470cd5b

SHA256
58f7ce00d589aaaebfaf3d0badac45924545e49f2d1531156f282eac7abb11b5

SHA512
7482b0c4c51bf4d3c3389a6ccf9c59307911ba793116bac04077594d9b3d6f54a07e6187764201fba8bb31ede88b9ff65ab6867a2526e0f8e7b16136f7978367

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\cef\cef_200_percent.pak

Filesize
227KB

MD5
66fa52c0523ae2ec18c37960e4eb3e6a

SHA1
61ac3e8e84a7f84790a835998873431c4a086bd9

SHA256
25006f654d50e7e63f4557357437eff5f6bda3dc6e8bf86cf0bd5b02fdbf2a28

SHA512
e8cfdc0937982245e9d31d2d62ed39e7e3b86c9fee41482597cb6c77cd54ea4eff6e35362d81a32dbe54baffefeeca31a4259ce9ea7c06e65904f3816dc65d58

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\cef\ffmpegsumo.dll

Filesize
774KB

MD5
0af80195bd55cf2ff4bee6f627bc4b87

SHA1
812775938ccd4832f7dd24615012e821980993be

SHA256
bdcf99b3c8b6ea7a798723e4df45edd3e688b04e33721c05ef2eccd182e45609

SHA512
aed08fe1b9c9a2eb0ea5d0117477e9d199d1d6962c5363ea11e139d581f603d77e99c1b771f26a1e87024a0666e43660ce20873cc0a4d25e831f3ad01176dba0

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\cef\icudt.dll

Filesize
1.5MB

MD5
bd92edc14bc80757a2fe870f64a0e410

SHA1
5fa7cabf509d721d8ed3a55940fd66339ce2b94c

SHA256
5a18d4ab46d46103438ce1387023df093cc7e2d0b561aaf2f1a37ab8e1542d14

SHA512
eb4007cafcb70d79f9950f2230a667479db3f2c0e9be1b48dcaa199a0c0294c460a846dde691505bd8d0a17e750a446aa45d455ea8f01d1d7f5d1d00e403ea0c

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\cef\icudtl.dat

Filesize
9.7MB

MD5
d03ad9a1189d190119209072d048e428

SHA1
aa954098e3ae4c00f67bace45b39a7b4a8242c6a

SHA256
2857fbe46d007307b1e204c6eb1b7e4988973b958ec8edb07445988f332c1ab5

SHA512
4f73a2c0ceef525e5947dc6eeb7608db40e535eeadb37d83842bdd638eb4d9114f3654d8094c0b72c66ae4bb0214b0947cd4fe2b56426f778c07f3cac5faea21

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\cef\kwebui.dll

Filesize
271KB

MD5
8d9312d0d2c81ddc7df573dc1079450d

SHA1
b53e7b082e178b40b25ed579013178bbc52a6d2a

SHA256
9c93bdb293f0a5e4d5c6f9942e83ede9238739670b3bada6d469c868d0213a6b

SHA512
e6f77d1d8d62e0a07342f03d93d26fa92bd458f292f273181b48ac24d5f0ec4ab8b7a97f32871a7be53ec6316ebf5441b9bebe3c253ddaaf85f5865c26dff12c

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\cef\libEGL.dll

Filesize
80KB

MD5
273fc43312fab63b37ff4044690dd6fb

SHA1
836692dd9906a4b2a6bd32ab0245a3265c32999a

SHA256
69c46214bdcef60dd7344db055120ecd0300244b2de9c075cf5f22321fa3f845

SHA512
29a7f9366ea2e24f47a49f5c293a7fd8623b05497289bfbeb2f65d781e4fa130fd9999babf624c02a31fac090ce8d886ce73882b97d304d6eb8eb4032917c49e

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\cef\libGLESv2.dll

Filesize
1.6MB

MD5
16a44df8cc75fc370df98fac97c2720b

SHA1
388c38a15ceb6f9695650772a006eaf763cae122

SHA256
38e5a12709002cbd39d11bfff3d1745e02d6aa948e77f7a800626caccd083843

SHA512
1dad6668ce9950e1172bc9f2d8eae00d2bcfd50ebcafe3fa85de1464be96ee1f9de168745a6bd9618084865ffe2e9e46b7d6ee8342d0f5a74911031ca6ef525c

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\cef\libcef.dll

Filesize
47.6MB

MD5
e43565f16a598cbb171ba1448bf27d39

SHA1
606bb78316ca941631e94cae82b59674fca0addd

SHA256
d775a0bb53b862b4b28d73e5a4bf01259b2d79c52ed75ce0bce84399abc821b9

SHA512
34bcf3da7e6c2a57c82aab9cac417159d71855eb1646a13e45426560826b8c82710011775c80fad505fa9a5c74618e6a599148303d5fde467461ac47d3d40c34

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\cef\locales\en-us.pak

Filesize
39KB

MD5
ea20f7ef299ca680a72e9163c8ed0093

SHA1
f9ef3b9cc76f34f83142e1fcb67bf5c3f9031953

SHA256
a76263a6b5c969a0b0a2cc90bdb86d35f3adaddef41884fa84832c24b0940192

SHA512
c0d217475e81a629abce4cc3557f1ae3422eefcb27c71a36cdba607036977492eb5c28f31f3b9e9724fbda78661d29f27db816d18b86efc845b015298a6fe53d

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\cef\locales\zh-cn.pak

Filesize
38KB

MD5
c3fd82ec2cddcf7192e9de8d9834dbc5

SHA1
f4cdb9879deef57d188b859744e4b1badfca7edc

SHA256
77650516087c2a6c43e7b775beb8148d8f9e6906dbe6bbcf5c3678fcbc02fa9a

SHA512
0542acd610c055fcf68e5c94a616df4b1fb0a0684b9c168f158e2ac97f1ed830fe68753c215d2837be0c5553cb5cf0f3522aa7990e6c91995a7f85293fadfe8e

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\cef\locales\zh-tw.pak

Filesize
39KB

MD5
1a09c6b7412b2a5d7f1b379dd4fcba1b

SHA1
58ac3377bcbc8fda31a0f77809128c9f0ecd82c5

SHA256
1f4b6a83d0e2ccebb596d010f5146fe3a45fcadcef786d696479e33be8c9c905

SHA512
a444b9ad2f7f9f7c3fa20537b6385d2c31d9674e1b9bd02a5f018bed6877145ec1cf8497a51e48c77dea64441ea5190bcb45dad87acc91cdaab7525f463fd9e9

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\cef\natives_blob.bin

Filesize
402KB

MD5
8f4d6515f4d321313a39a659c3c5ff01

SHA1
f4c95f1abd24c715a3dd4b3e4c9cff5decda7250

SHA256
7d9c0c4d88618bdd16bb0681fdec1dd736e2ed1141ae527a27b22fb93f27848f

SHA512
3c00eb9a8ca8d076140df0071cfa702e1c032edbc20481bb7f7b7a88c1a82c959b8ac901182c2f9d235f55b4528c8e12b1e765119f1e784645c61f66c1c2b007

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\cef\pepperflash\manifest.json

Filesize
1KB

MD5
f76b31b3d215cf95b96cb585e814ed22

SHA1
6cc2069b6d373fd993b432f46b057df1a8538dbd

SHA256
9635d61bf446ace4da060f491d0141d0ce66f9af4f71aaa85b45340a015f9d2a

SHA512
0272f40baefbfc5b1eb8db6628ab28c796431c0ad2cf2fdea652b23417f5faa1dc1014a9145ec4b47b40dfec4801837057a23ab46fb1d76b0a6b711c1fcf973a

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\cef\pepperflash\pepflashplayer.dll

Filesize
15.6MB

MD5
0271af376d1eeeab5f939e7ab648f789

SHA1
cfa5b55f252e4efb242cf206dc396bb4aeb98324

SHA256
2e93fa269ce04572c112ed6b0a50db2c959f278f058b59b193178285085baeae

SHA512
3da2b1549732658b9c3c980de6e83347886a58da339bbc697c931ce38e9beef9c41e96808fd10a80ec39e21396fc3ee591eaac6e56ceda4171a5eeed9722cf94

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\cfgameplay.dll

Filesize
1.4MB

MD5
1bf053ea73f7c4c5fd9c8288aca803f1

SHA1
2278e3257182d8dc35d3492caf69b1e68a7840b0

SHA256
5a35c392069575e6eb5d0a511f92ee5c138b0cf73f8dd7e187a17b34ba2ecebb

SHA512
cafc9bb93a2fea5626903b2abca653b1d4b0d438afd19c100c3b09bcbf9d238a5e043e1934626463100a9c6cb8046fb54aeb38978af5ff148a794cb6c388a580

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\cfgpmw.dll

Filesize
44KB

MD5
a51d246b24ebc56c5115ea496c74b0d3

SHA1
66052bee7c23e425499477bf54ff79ddf0ea93d6

SHA256
4e184b0b982a5256c969785d408b8d171be9c2b4c8e8ff72b67749174f96fa96

SHA512
ee256855f9c9fe317f695197a865ef227c648bb32adb43d6722d530f8c79e7e13a66c68760d5542ecd789112f4afa5edf637e8daf8212b8e4fcc0d7d14a0ea1d

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\cfschd.dll

Filesize
602KB

MD5
cb3c218b60a853775016a4d33bc3037b

SHA1
37c9d87d0c1db5ed6aaf8327007add32d2eaea2d

SHA256
dcea58bfcca81c498ec6052e7e78dbe64b899ad8ac4d06a5498977fb4b06ec67

SHA512
a93c9d0baf380f9c0fe8ba3809f7653e88aa7aad8c3da7018794f2fa40ead947bd7a72bdf927daa2101a418a52368fa9264b95cc8bf255c86c172fa2ec9ab9db

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\cfsearch.exe

Filesize
468KB

MD5
cd72c2f17fac1d03cbf31fbc4b2f3cc9

SHA1
0067b66995d2f1c724ba1c8f2499c96ed699cbf1

SHA256
cd0e82ee077469ddabf466bdaf17d07ae377df4f401d4fb00326d4d490238d1f

SHA512
14b6594d34cd99f7197455232e8481c5ba26b12580e3a0fdef83faacec7c34f6ab7d15bd81bfa1b61f8c63c76088752391651d0a183b052a9e7e6b5459ea06a5

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\cfsrch.dll

Filesize
187KB

MD5
85747ce61d109c1978482efb97ae7bf2

SHA1
b8fad4abd7ba4b1d32a15d9fe393a2515c1d56e3

SHA256
11734d243869597e70c1868865b80235dc5d3e69e88059b496d873c74010d855

SHA512
2f3a4e23caf8a1b03925e558efcbc237dce8298c56720329a4e563211f679c88cdf995b8d0290ab7a4749cb747be4dd298af230d79f44791676fa9c6bf397734

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\cfthmw.dll

Filesize
222KB

MD5
75f7e479c96dfaf026d5097cdc7d2707

SHA1
861f9d5034e6a33bb76b17294654e2156894a6af

SHA256
4e6bf696b56c4de24a3dc759f64503e181449dd227f7ae49be4a340e24e22684

SHA512
f839d4844fdea1c7a559894272fdb49062060cd964f60e50134f27607806f632877db9830b7fb0511f3b063432a144890d6690694864a0c5d01500eeffefaa7b

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\cftodo.dll

Filesize
651KB

MD5
dce61a8819d35ed12d5983c916da4d7b

SHA1
07325e82617303776af4c298cf08f49bd0365235

SHA256
17b16283195bd8ee32793783cc60fbd98f33b206b5d65a8c5efc83b0c953626a

SHA512
88fe40597e6b2652f6505aae8a69cb9e3a9ec8ab025c73637e15f106c33402b154c47ef180124a0c019017f5e70f6c197930ae03b0f7197f342c51ab2cc97066

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\cfwebplayer.dll

Filesize
63KB

MD5
00807993987b24fd73254c7b6b663688

SHA1
1468c4f9c154dd5115feeea63c4dbc578f95aa3a

SHA256
8b9bf7d050fa92104113ff279246756cf53bb0441c35642aeb1620575199f51a

SHA512
6271e3fbb8b83804370d7cb1d931b4d1957bc8f9eaa2c47df6472cad73847aff6795f5dbce8886c5e9e5d012c03107f82d76c5ba99e81a94df0aaefd6666a58a

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\cfwgpme32.dll

Filesize
121KB

MD5
fb414d78f2df83b76f10b4f1c595edaa

SHA1
fcda14991403601554dc631cd16cd9cdc7af0fff

SHA256
6a9c3f2ca692c2cd0dbf66925630a3ac5dcc66ad522a80ebeaece7f352851c19

SHA512
f919e69c1a90bd3ae48abad49124be476ad4779a71c63c57c5d35393118da1580f3b346cc070981db914f0a442748cd4acb7a9655d236551ba910d88373c841d

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\cfwgpme64.dll

Filesize
153KB

MD5
b95ecb2c202257fceae165c25377d414

SHA1
d8d3ba5127e5914467ff2184aff09cd510dab852

SHA256
dc1d3e693503ce2aee448ebfa9b36eee735ceccaed05bea8612cb1d834603626

SHA512
f65ff8d8f9a9ea89dfcb8be131ee5b36e88a67b66be45224860ed27bfc61a7a4315f24824572a500023e13979f6818db2f9b825e813ac0356188842e3fbe345b

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\cfwjse.dll

Filesize
293KB

MD5
ee2f2ed6c779e6eac706de5b540c058b

SHA1
245ff6e2652691b3b68fadd7157c3de787fd5ab2

SHA256
47f9f163aef415cabf07245c9181dc69794a33f35633e28e4f02b4853d3e370f

SHA512
e989f54480a0724aaff0601bdb602cc19303ddbcffebc4121c6dd4f023de3dace15bf0764f01acf04ebfde0e68f99353f13d63d637f47017a75ce654be3ac8ba

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\cfwpen.dll

Filesize
4.1MB

MD5
b915e861131d341867246f8fac630198

SHA1
dcc2bac2a2dbdc071470e4c20af138aa13aa32e2

SHA256
b1db53c9b6ea58db626853b9d95bd602bae2f84487e50ecee10bd2f7d4ab60c1

SHA512
4bebf28dd2db1ead60cf1be168016448deb20c531e8b942b054b9816bd5b7c0f00d64a5c17fa7da111437bdb818c3001631dc74f99547847f7fe66a572fd03c9

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\cfwregsvr64.exe

Filesize
131KB

MD5
634c94d8f2f202bbefa3d66a3635d51a

SHA1
09a371a75ad8ccee639ed9ca305e4399e7ccecd9

SHA256
af7777e8feed6d35c40c8a5653412f78e4f247f671c844ccee536a683d83be1b

SHA512
fec8e3c13c63f26fec332f28ac4ab78ad5c2cf35ac6ef08151c8399d45fd2ef0470328d600418790db8aa2f3cc3771b46d7baa67a791a30d0ee1da6341f1757e

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\cfwthmd64.dll

Filesize
637KB

MD5
fe2925a2b9d53506584a6ede11f5623f

SHA1
9ef5625d24eee9a34f36497249a433a4307d932f

SHA256
cc2841a5163ae1403ca71f81f25d392f7729aea33d50992e290d5155e964f0e1

SHA512
72c02ea1916c876ceaa7c32fb1613142e78294700c451e2be87e934a0d7e651b1caa35500db0d3e6af11d5e10a10804447a0288b6a820b1372aac00b8ade208b

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\cfwthme64.dll

Filesize
1.9MB

MD5
2f5ed325c6a5cbfa0e67193df2fe9f47

SHA1
2138c811cdeba92e16b1dcea9867b9b0622f205d

SHA256
c752d01859a9f392194edf8f8d4490389e84050ca06eaea32ae86f5e8266b2aa

SHA512
04e05eed0630340018c8dc34d1975e15c821841328ee2d20224636536dc1f6a4101b18183d47924b0d0bc6ff195be82b32d5dc87eacf162c9397730f4e628bf7

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\cfwthmim.dll

Filesize
337KB

MD5
e2f19a3706c415368e7cbf75c478ae8b

SHA1
9c6e8b5947fa70a960615807cddc31b6e5233831

SHA256
bf7ded57e8bd172cafa17bf763f99e9d30146b11bc69f449a675ea63f6724630

SHA512
42e97b342564deb79e82694b935d48d351fc95011562476e3be2d1aca45f3ea521c776101cb91658e71325a9c7c072354c4875859ee3da9e66455913bd7194bb

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\cfwthmsm64.dll

Filesize
190KB

MD5
92188bb75c7128c1f0a90ef3c6c45a59

SHA1
6b44303cff7956623a7c75a80cce363ac8b75ab4

SHA256
b4eafe35a1fe099147473b310683a5faf38ee7c4c29938ab4a0e310a233f6f10

SHA512
87d757995ebb6aef2d3175a774f300621df9ffe6365582997a7243f2b27da1f1e9699b13e52d5bcb3c00dd42fa908b279bf1b71a591d5addfca44266a76a0b74

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\crmserver.dll

Filesize
2.1MB

MD5
b6a6d247a9cbfd538a04fd1cff45463c

SHA1
2694a6c1d671c6ee7b91dda58604dc5eb4933386

SHA256
1c73be0a1718f276c8b278113a6f14529a756d059d0a8a04544f0a5c519172aa

SHA512
54b12fe71b2e842497436e333d98d604776469c9be9e80001c96cc86157b90fe54ef116a5b3ce964a2d418d0f7e9faa609c9a63fd93926dd773f47bb92f95276

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\data\cfsearch\filterextension.json

Filesize
1KB

MD5
bce9687cf20d5f768fb6c2afe13bb5e3

SHA1
d0b92d07157db857c56168efe5e90fb3aedb669e

SHA256
8a0299e1da655f4d6dd791312e6c14bf2b7fa3e23639f543f9f790ce0d213b7d

SHA512
67cd3e25819183de416f8b8469bc00804823c707bd19b03d41a1a42a3ef67be26ade2e5bfa443f188f136c8ed645f4fb5871980412e951ebdb0f58cdd61fdeb0

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\data\confirmdesc.dat

Filesize
352B

MD5
263f1e0c581b62fa817a178c9d904fa5

SHA1
ae7be0dfcb18ef62fd538e0e8c0244144fafe48b

SHA256
50b01987fde582a6f76313bf1fc3a9e637b36cf6f4b96bf69e91c53c203e9475

SHA512
6a9970b444fab277da7a08ef8cb2b516e13532918fa2daeb23b4fc1872b8b052aa5ad4a07b99dcc8385103a643ba7a2dc611256c37a09b3135a54e1e8ffee0c8

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\data\desktip\deskrcm.dat

Filesize
192B

MD5
2a5b7f557172a3430a36705a911b0fe0

SHA1
c0555bf5a28dbb771cffc092fe3193e002bc8843

SHA256
6238c833e8fa572a074e4434ec950da022de20febc59081180fde488b438cc53

SHA512
8f9679ac8669035e4b64b26cc964db61cde0e65a2d56aa57aa7523eda358664c2ddbfecdff2bea7ffebbe4d1c37574e57fa5c698dfc6d929828299ac86e28e23

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\data\dtcfg.dat

Filesize
33B

MD5
2d1615dbce9b07295d943db504be3620

SHA1
5f65a7e71c1524f806198abc5b9156969612a4f4

SHA256
13ab9aeb051be3b2945765fbf93b5c92db5b3210a65046f90af6e934bb41f7ff

SHA512
9aad065d67ef0c64b91466f549a7dc955a3599ef3895c4768062ba45fbb47f0116474d4ececd14950fbf7ececcfc92b2e154b8147581a233fc67bf8ad2695b20

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\data\feedbackdatacfg.dat

Filesize
5KB

MD5
25a9a625ad1e2e9d24f2e13861598276

SHA1
0fb0f6edd0ee7410cf6e087823b8345f55771d86

SHA256
437ec258835a32a2bdceb5e3dc8b659a1174e525d780c628bd5d43a13dd064de

SHA512
9b95c941bb7ea361ec24fd4375cf1cad6e3c3ced33d70dea31ddcfe6e8274154235581b0e4bce5b6fe68d396b37c6a11f1f4392bac7277bd4517954e2c2bcc69

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\data\icon\infoc\kctrl_icon.dat

Filesize
176B

MD5
39d925d84a23ec0dcf9c15a36bfce14c

SHA1
4ab618a700a9ba673762ab71d9788fdd22245f09

SHA256
a1d281eeb515d955ddf78cd4c5f42300504cb3d81ad8d48026079bf72cea7e2c

SHA512
6f64e0db8b04383daed86a9a3d98e97ff1947f91ae3914e710feab08f4d4955ced9fb0bb7376856de983dec11277452ae73a1778c43959967f7b3d8eb6b4cd5f

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\data\icon\infoc\kfmt_icon.dat

Filesize
263B

MD5
bcac49555b0705f5660d31e27a081709

SHA1
f516e36332463ae31f37042c4ddc0447f87c2c15

SHA256
bda89e63e60626bcb1ee72382b18dfda6f05350ad24342bc3e463ecc6b2e5c22

SHA512
ec65a8838d00c2dfc3cfdab4afe1be837814c864107706305e86bb4a5441b06d34fc7c6aef823519a276630b182ed39255b5400173b4168283a437828ea94aa9

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\data\kdesk\kswitch.dat

Filesize
9KB

MD5
8a1986a68470f97e68db02c860c0c234

SHA1
803a48339d0864e99d20278f6f47d1be5d248bc9

SHA256
e13983c7b6db0d1ee7b5f57cf5e74f70ae5e89022a333e768c11e47582ffcce0

SHA512
c43a21417d1d2d05eeca19866fdd5d535249967a4c98f8071d8317acadf1f36c5427df269ca038baf54ea08af217a88b1e82f210fea41424527b7ba0ec887c3c

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\data\kfastpdfcfg.dat

Filesize
251B

MD5
7ff072cceaf2589decfebd4f8f951b35

SHA1
729fca651cceabb8c67f8829a871e5a12c7bc100

SHA256
4f6a6bb2cc506f4259b6a05b18c4e014033ea66c7f8cdd5cee3a4dc55474f11b

SHA512
8d75988799184edd68b97ff3f758a5b8b4f958a24f57c5cd7b198c11d43d13f125f29beec6a47d3b646315a30769ac2966ec75d3b358fbbd824dad08f06fb23a

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\data\kperfcfg.xml

Filesize
799B

MD5
56115fb8f52d0c457a256b538c51eb31

SHA1
d65f10714741ea38bbeec2c5a4742728108f7670

SHA256
6d56b7b090fcb816aebcff12dac7d2fe80a6d8e2f1ba309dad3451ee5b221858

SHA512
ef9c4eb446ebf5b4567d571830cbc2f1117e3aeb8415385c005a6b33dd767be771431618e5ec3ab44e2cfe9b71499d343ff43706aac6d25662ceaec2c41256e3

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\data\ksdkbasecfg.dat

Filesize
15KB

MD5
6886caa9396b0b07357ebc7ce0ad8d13

SHA1
511a73a2d702374df4ff0a7d231a0ee4d39fb231

SHA256
18675e9a8710ca1358992f13dd8d31621ac8160de469101ba594c4f2d5bde3aa

SHA512
276c631572db84f6be18678ed5ca2431fb5942a7f0457b59d08d5b240d169c1e5639c615dbaba15042d9f35db07a27960c16b8fc0911a260b796e8352a7ddf38

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\data\kvip\gamesdb_dc.dat

Filesize
951KB

MD5
4a88ba467e9c03421d6bde109e057613

SHA1
9cbea97990c2604f9698ecbbead2791c0c562f72

SHA256
7404d3aac58833c29a96a24ff50eda8759d807be19803838c0e8bb67ed5e42f5

SHA512
ce56a0cf28a3f71be1de294d375aa395cc5c0feea3c83ee3942c53806f15212d830fe5556c244020694fb9f3f443b7731d492f1b97aa8cba94acfa808e7eafc8

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\data\kvip\kvipdskrule.dat

Filesize
1KB

MD5
171f3a0eebc221efb3ef2c57e732ed89

SHA1
c1d4099d0b196d5b6a21b15399c74f07312f297e

SHA256
7e4b80884bd761ba6dd7124fecfb4738ccff28306540bb1857d547dda585af1e

SHA512
27ff70fc6ab2cd436201bf3761008b7fed69ad891bfbb431f33cb55d608f41da8324478132bcfaeaffdece796041f4b9f4da724faf5e48ba1b9276dd5ce79b53

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\data\kvip\kvipgameico.zip

Filesize
46KB

MD5
5d76208b19c49ffa61caa7feb133ccd3

SHA1
f0223dc41ca4f71c3a59cfce018e51f70e9f5b7b

SHA256
9416b5aef4cdc3e5ba41a80e3208140d23adde1beb81867d406f41fc1eb11151

SHA512
ace0e091db69a6f501be55fa29f0ee087963316640dbc43455d03f66f36a9c495929190208ec912969c283bee990f62e46360588411235aa0dff50c63c75c1a1

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\data\kwallpaper\cfwpen\config\scenegroup_fix_config.json.dat

Filesize
623KB

MD5
2edc6aee0af85f76495863f5a6a865e8

SHA1
f6a02ff287f8ff2e48a010526c004cd93e9755c4

SHA256
19b3a2ac2d9f5323b5bb67660da8f897407bbc11111ddcf475bdf919f0507339

SHA512
4dea3ea47dc261cec706428f34baf02a4f81214f104396f310e0c638eab16ac1711ff0420a4f89ecb89b1976fe5a1feb6e8c593986fd31ae66274f235967bcd6

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\data\kwallpaper\res\800000.png

Filesize
1KB

MD5
d66229d42799a32b76eaa6fcf0fac02f

SHA1
4748b1820349fee377c8c7fb834135e376abf140

SHA256
9512548a195b22cb190aa3cf1c92e253ad04ee54ffb0451b6b4efcebc9e488e1

SHA512
600aa60c325419696da02ba54e12670796bae010d425bd79720d8cbff39b05138cc59f737a0b8ed63fbcac372ed57f778c5729ada53f09cfae85790652004612

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\data\pop_ctrl_cfg.dat

Filesize
238B

MD5
3ee907a996946a9e9a7ecd63e2086e7a

SHA1
060ffcfb9db60efae1a1e00f3c305584ba853833

SHA256
2033502dbb5f1cd29072ab8d196d778b0b92255eb2f5d670756949ad8aaed570

SHA512
76837df1a74858d62bc284a5f11864aae4e26bfc8c0f71949fcf260b83e196be7204355085e91c93d571fb668e8dd267da1067e49f603578f431ee81a92a9d63

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\data\softpurify.dat

Filesize
247KB

MD5
dd00d70da02ff30fe390fd5fa7b708ea

SHA1
a9e6acd2f8e436b08551eab37cda32348dc61589

SHA256
8b2c442f8a46872bb0d9b62bbef884db6345e35aff6a51976c3d2edffe9642e1

SHA512
808545dd7896a5afa01da62e93d7babd074a7b7373d916df3ad9f48c02fe90956f20fc455427e83000e51c746888887455f3d6e27c83fb66988bc7dff4b78ab8

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\data\theme\infoc\kfmt_startmenu.dat

Filesize
232B

MD5
80a3f4186455eab876541440895e73c4

SHA1
38e4dfd3b6f73832dd4960b0e64849572cde081a

SHA256
2629974a8c59241a7e44fe8c560db16915845137b60831c518490f6cd3a21145

SHA512
1da7d45b28ae5c2fdbaa852faf8416c51d53289af6171f451db813c7f52b7ae4047bbed6de7ede5eac3cef0b433b92078c62849f7778d23a635adae7fe803f6c

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\data\theme\startmenu\startmenulang.ini

Filesize
291KB

MD5
5fddb8b6e34fc81bc066e3fa73210f6c

SHA1
de961b7002631a65456fed0d1b778ba83697f51c

SHA256
84e8ea5510d93212be16245e2e0770f53220fbaa28b87c89fe066a391862b261

SHA512
1bccc05c9e7a4aa3daf74a871f1aabbdaa361b95f48e7b8c96ecb5979516a24f321492851b8527c693bbd98304dc05e354fce208edc3cdf18d707b85ce07f975

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\data\wallpaper2.dat

Filesize
2KB

MD5
695c936d1497bb64870fa5b1b5fab6e9

SHA1
cff5805a402bb86fdfc1fd34dde6d340a4164af6

SHA256
b74d9a2eb6732f23d6b0d39dc78f70ff9b620df77d050c696b4ffdd17328771c

SHA512
ac7366cddf697f8a1b29409d9067bc514c4b79adddad3e5686d9b4b075900202e76b6472d61b3b1c0d12a4262348f07188beb760e3230f8d1feb473933929a41

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\data\wallpapertext.dat

Filesize
643B

MD5
e2f02762df3d9e2aed0f1aac505f1217

SHA1
3db3af092e4006237cc20033e0a6583b4afc4116

SHA256
d3bc50c81a7948b6a549b18d02521499bf662a58be8cedb413a05fc9f3cbfa3c

SHA512
79a825098b9e15576bbc7f41be87e0356e05c6afa9d3102d1da586cfcc8ed07fe76d81e5bc1b9df83d2f56aaca2948a9b77da3d79aaeb3647f0d4302e4465721

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\depdlls\qt5core.dll

Filesize
5.1MB

MD5
468fc92c639e8decb92c5d922893dfd7

SHA1
6d89126af205e6a2e9b8aef596f4408877ccde75

SHA256
77b9291c690f3158ab7081ed6b0a305491335c90ee91a4cd7cad8bdbbf8b5e87

SHA512
2d256d405ce7440544915819cad0a89968880a0be77901fcc8bb50f7e5a8bd1b8f0550cfe78d0bdcefa72c138a22ecccec3a90d416d579d15be11b46dbf95422

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\depdlls\qt5gui.dll

Filesize
5.4MB

MD5
beeb01b125b29a9928c295c627476b3c

SHA1
291187e8b67289dea56cb3987d050dc53c735c21

SHA256
54676733869b6795706fdddf5b373e93eb4225b145501038e2b243d2c0aa7f60

SHA512
4d9121a810897abe1cce511bbd89876b09c52fafa539c8254832041dcf707a3964e8b355c3ee5d429ee71149d80bf9ae2d942f5c14362dfffdc4f26a5829780b

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\depdlls\qt5sql.dll

Filesize
162KB

MD5
219069a4f827a34318a3affbb04b5693

SHA1
fb329d9a2d0d65a46000c72d291fe2fbb66a6411

SHA256
d4bcf80e2d82b34e398f9c7df2dbc38256401450ca68cffabb12ee2c1226b490

SHA512
edc0a81887b762baaced0b98c8b2ea360ce0db8882e777af80325664ca2c29f7e36f8b18e927beecc9ee5148ffa31ee35a192cff3d9f36c48de35f707008407a

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\depdlls\qt5widgets.dll

Filesize
4.3MB

MD5
b2cfb652137642e4c426a84105c7e13a

SHA1
eec9ff651858ff905fc9cf859bbfbaec9fe0d312

SHA256
71b8d58f6d2ff9eeca7c855f706d84b7ef401c4f1f4aae650884a5a50338341c

SHA512
24ac89d4782f239a42962bf93d55437d147fbd12790c0b0eaf84808dc663773d9f6a1ebfe99cc9ae1d67e08d082d3c047bb7b456a5997cefb6b777d3622beafe

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\freeimage.dll

Filesize
5.4MB

MD5
7686faab09e03f0692963c21fe8236a0

SHA1
7e63d0a22b2d603bd0dd17922aa3e68699e1765a

SHA256
85e1147564ce5e9a673854882cdca7931210032f488c80a452e7a878acd32da9

SHA512
1b2a96a7043a85ce505415b507460f43783e7a1a2a591da4231dde71cc2058a55da28eb73c1ed808d6940aa61ab50266b82f0d07e74752dc69b56bb140c8c6f8

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\imageformats\qico.dll

Filesize
34KB

MD5
e1a20e84d0f75a7f5386fa04a8aec307

SHA1
456bb57220f965f2611ac0192fc6d5724a38c3bb

SHA256
e4cae377016b1fc3487ede765f431b31c0561c12ae9d6643f00775fc292c1481

SHA512
83c09692624b8e56789db4b75edd484e94d29cf0d2c569cdc26de34018463c2abe1198646a5a8576355c47cf506d9173de0ab7e4ae1bf416342cad58c507b7fb

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\index.txt

Filesize
184KB

MD5
418e9c75312cb37a28e4d1e0382393a2

SHA1
aee3377ff3035f2feca75e5bb035e66e65c5d8aa

SHA256
72f420ec82744583527d862b77f1042e5e478e12ad8400a21cf8ee8b3dbecba8

SHA512
d6699b2744906d35b599ca1f811a10ac6cf52499a87b09120d82566c3ed647ff2663410fb98947ac17ae3e38b8eb1d9f369c3e6981a0a03542f5b7b7cf6fc85f

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\infoc.dll

Filesize
86KB

MD5
bb42cd9468b4cf829e6b6ea9a814ca71

SHA1
c104299c7d27adab1396223cf2ab07937d6fb623

SHA256
951f7bbae91fe02e17e1fdaa97d44f65f484ddd6f41016bff012c3b05f4d2d2f

SHA512
6602e768766db648673952d64e34e3a81dde2c6ea0138a6ee54eb84b1ed47862a90b3ceaa8087bfd9073b2880d3c3370df29a2ff640ac13edac41f5e484ab0af

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\infocenter.exe

Filesize
939KB

MD5
67691452c53f6571e4e66590e236eaae

SHA1
06dd27ed4165dac4778f9f169325cdb1c38885b2

SHA256
6ed450d1151b71116a4924b89c837ebb105def52e359faa4c242d1718f04676e

SHA512
abe287902fa3ea3a3d7fce3feb4984058252007ad77b86640663dff25d3f86b1bd4fe0c61915421e8efae946a1a7afff972802c8363a189f1d04f446776fdd42

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\install.xml

Filesize
6KB

MD5
7b712e12dd9a3ce08772886872b40316

SHA1
224bbf86c9883c637fbc570bf2e340a3e8dccbf9

SHA256
2de564c1d931319674ee2b84d9607b8246414da07131a269c1b2eeb55ff9cbde

SHA512
40a9f453d4ec9e7a0c0c671faea8c49501552548191b1b13decac5fd4e98f7d2491a0e2d7a25cdd3ef788042d4d52ddbb3440a5d3342618224a96ec96c440efa

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\kadblock.dll

Filesize
1.2MB

MD5
044500ab4d186213874543b3a4bed229

SHA1
fcb3bc421dc11c5aa605c0e1e1dde30fc3e7d798

SHA256
19ca2a3eda887ef4626b440a3dd4fd2835aa1e3aa38f193c2864934af7d6875c

SHA512
9e073eb26ed225997ace4cbd7f288d1d2e21f5bf9c9518f552f8023ccd6ddfc750560873fe2d565fe8a6d43e0f2023da583bcd4597a57000e193b50fc61bc5ce

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\kadblock\knewadblockrule.dat

Filesize
1.8MB

MD5
36b28963a17478698bb7470c3fe88fd8

SHA1
d491027ed7506596e0119f2e9ec4ab4ca2f8ecbd

SHA256
039db38de4d47076e210018d26a54786e92c0f07f094eafe2fa9a80fa58c28dd

SHA512
5d7cbd85d69e8301c4c5ef7ad9115ce06d109709b727e59b4e58aa1fe824c31903a6eb84cc2ab3c43c6ce9126b28f990a99da87d845441cf59425e22e52bb9d1

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\kcdpt\whconfig.dat

Filesize
3KB

MD5
db16ebf791b72cc6951dad5dd75a2485

SHA1
11554843ed6165b943d033bd3baeaac0aa1909e5

SHA256
d4ff79d0b7abac169b5ecde74b129f2993ca0351bff84c015b1f7f1e79337d46

SHA512
94943a4217e8857e50d7c2b0a42afc50eaba74f20213e0c18f5d8ede950dd82795889d42b9637c398e0559195492a5008db23e5546765c84daf7a5ff51b14c95

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\kcefweb.dll

Filesize
363KB

MD5
5f7702aa1fe288f5eeb8b065c968c295

SHA1
9767c498eff52ab4d62b8e4b656e987d2cba46b9

SHA256
8f5bec6eb320766796aed10a3c6aaea2d83d47b0f5d7690db7e915b8ccb304a8

SHA512
de7dfbc274e9d6ecaccbbafe61c2ee8b2c000ab91a19769822eae3899dfdde8a8dd4c0c785299507967e7ed7af6737c5a8ff87534dcfa11f7d56e0a10133ee13

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\kdesk.exe

Filesize
4.1MB

MD5
ffe6ae5443cb7da9e44da470cbfca18e

SHA1
788f77a7d19f67d7c4066c19b6f726403d7daafa

SHA256
702a4edbb1b0813474671fec0b4062557477d6912bd627c92a40c92de68ea38a

SHA512
44d6b57d8d8a753ff843b952ca17c3afa95a326727cc6441dbaf6827316340c2faee0f8e7d105c7651a3e493ff5b2720b578d18a22cbcaf2e5d88cf3ce2492e8

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\kdesk64.exe

Filesize
6.8MB

MD5
50dfd204a7ba66927d990bae5df68c7f

SHA1
c28a94557371d473a08c80f531f1d5ea218d77c1

SHA256
c60704a8504875b2b7228221b94e13aafc4ebb6c6bc34b55d028b39808889301

SHA512
d70467d0339dbcf5df917dcb39ebd1aff167cbf49e4f02cc9dc11f1fd5e21a72bc54a25ad930ec91f92378db99575546374dda59367a12a8f3703b073ae44251

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\kdeskassist.exe

Filesize
311KB

MD5
4c7a920a72757158f3b3b63fdc46c7ed

SHA1
3c9e6330c5817c4517c5fa26856d5fb0c5836532

SHA256
a13b8f18bea6a677ce686a784d15529fd5333e7045e89fd77dd1486e7bc22007

SHA512
a941b6000e22ebc7b31322ece25ed754434cd97b44677eda2f1ed1683af9bb42bb15a3b303eaaa83a623c65e6b9cb1e69c67e2a27698ded1ff70b5265ba1d75e

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\kdeskcomp.dll

Filesize
575KB

MD5
1a79431d019a80dd6f7c35baeb653fb5

SHA1
34f54f5ff76294766d369735fa9c2728bd37d656

SHA256
e94dc62bdca9301da682d0e4846caf4a997ef7006c81ad4de63fb3c55346aab2

SHA512
1fdc4cb243cd841e6ee9ac604d72900a727038553e25de77758060530996cd5e19bdd0893b68836177c87ecd74569b9492cd5d361756187d23eddd6997e9b1a9

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\kdeskcore.exe

Filesize
681KB

MD5
20a8474785d8407fc90ca34024fc37a4

SHA1
f453a3a2c2ea63f42d4ce9bee1f8e2b50cbc8f2b

SHA256
530cdd60b4fb416c4449e19fbe1826b8f2ccdf2429ce4001e4e794bc238f75c2

SHA512
d4c2d12e9e9e763ad0abe4d247fbc208d3b73c6fe4473593682c935864fa60b0352ce1e484db5b7220487e31942fa4e3fa43b29ed804be95fb2dbffde4243eec

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\kdeskrcmdext.dll

Filesize
1.0MB

MD5
c68000706e287818ce97ee3d317f5c04

SHA1
b7d6d2464ff28661ba1e0e5a9e994bfb6da924c6

SHA256
a7fcfdf037b288245823229e43f706232c5b80fa42486663d5b0abe88d1903a1

SHA512
d4128ed8ff8cfedd0af5063ea50dba856bebbf4a3c3a52627ecd4c019dcb318a16ed514a8732b5ae087c6fc5ebdf821cf32fe8a57dc4066719d7dc4df468d07a

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\kdeskrcmdext64.dll

Filesize
1.6MB

MD5
516511f97946b3e1817f6ee47d28e654

SHA1
e06d252e696c83e5a2ef6b4e337154e13117e246

SHA256
4941f71cf82e6fcd150d881c0a37cc3d300ac6bb2cddfe2934b58c4d3922ccb1

SHA512
42cfac28437a44dd53df509d6e3626e5cb2056d191d6046d832710bf949796fc539593a13b43a64a86b62bcce9e49057b264b36f8ec3fbdfb8bf23ba5bccf193

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\kdeskrcmdhelper.exe

Filesize
270KB

MD5
835a1769bd55adae672fb1d1892d7d9e

SHA1
b9d57a2d58bda72ebb57cad925872f0dd58037ef

SHA256
a84786f6fb84bf7040c5bc10ba006a34e567de8b0dad404f6dc63dc7d368faf6

SHA512
2e9e42d8762ec60562bde5997b77c8c7e169826ca2d6d7759202f6ff2046d56c2385d716c55628141f9f3ac1dbd1533bb7d311ee02f54805ee072043c3efb553

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\kdtutil.dll

Filesize
182KB

MD5
f033b819b611cf6fb216ee951c4fcc2d

SHA1
e747f2e3ffb658bb6267b7da3107cd915555173a

SHA256
f0134a3d896e9e02db2f181f2a6bf32115c2b62533c6486e7c0705ca1f9f5d04

SHA512
c2599cf6ff0770258b495043930bb2de72b845131796b005a9a384c4bf0d5d86170aa9ad94dc68948db3394218071988e06eddfa070d1e2eada28d8ad71a1ed7

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\kdtutil64.dll

Filesize
183KB

MD5
1f076c39535cb34b88d3223a026f2225

SHA1
6b6e05348291a7ccd002eb068bb8860d1f0f5059

SHA256
a101d039c1ba5d59a524e45302066e6d22fa068de896169a2ced7a719bf069ce

SHA512
e0c30db7ef29f191d958df1fe01eb58e1a447fe3ddc13b72c44e0f33e005f85a2dd72d78434a6bf51cb236f6efadcb4781644ab7a73749876c395225dbda1593

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\keyemain.scr

Filesize
234KB

MD5
27a2323a0440534e23f523ced240ffbe

SHA1
d51e5105b36d9f61bb71ee00382661bb7486daf5

SHA256
df303b7aba2791ea34420106b0a553e48ff445e941e41e4f9906c630cb9215a5

SHA512
ab0cc2a433e0f4d1c004af428b8d973d28d868f5ea3f36b82043cf1b22e54f97fcc93bdffebeb5c886d77135b053ab985c18c17e898727685bc88dfba65debaa

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\keyeprotect.dll

Filesize
4.0MB

MD5
dc9f3323bfb2881071f2d08af57f66e3

SHA1
3e97f4d44b2742e1d7a7c0e32de737bea3355d11

SHA256
e609401ac85eca38b44412080305086ee02e3da17d1f0ee90de295e99d6908e3

SHA512
c4b0a04a915d77e2f5a6e9bc949277e5a88716b085685b3425feb64e64955efa0901059459ebe74a6c7616aefe053d25952a6a96ded81e24f4c6dc3aab7ffdc1

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\kfeedbackreport.dll

Filesize
1.5MB

MD5
009b536abbf2b97c3fdabcb1f93ebfdf

SHA1
89705fff48ee548d5f50b11f3b968f3cca5efd4a

SHA256
b0514d8276babbcb46a2275ca8e075ae8c10fc60927d8b1dc3405288043b461c

SHA512
a8fefb2776a0dcb27055e285498f6628b46f9224b06729669abde2869253a5a9573c361332c197b2687919de359695f8a4aaf05254f241f2fc56155360c06a2a

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\khealthctrlspread.exe

Filesize
418KB

MD5
11eed0abfbee1a07de5bec5c688255a7

SHA1
4bcd7471e26b38f26cd953b878305fbeb6d334a7

SHA256
06b87efb9e46bcd8b2ed892a10e3728f92922d66855adeb1fbc75e5b0366a16a

SHA512
b5999af494b4381677423f2905db50413ee3896afe7c540cd8d1fe3a987a98b6a616f48c6f6d5c89e4754ab7b0d00d2eaf9b26562ddbc22444bfc14681f90f1c

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\kintercept.exe

Filesize
1.2MB

MD5
1a5bfc056403f43bb667c7b7c8ea8cd6

SHA1
0fdbaf31416749a0dadcdc1a2b1468c10f11fe0d

SHA256
323909c13333527a86c4c95659d7c5551272883ab86cf35b4342226801d9716e

SHA512
6f1f4ab14722fdc81a366c08feaa3d4430931dbcadcbb9f79992348a3d4fe4f345d4dad0e326057cee7bef5b3c249723e6809929e51c772c4a4fb17c232d6b64

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\knotifycenter.exe

Filesize
2.1MB

MD5
a840bc26a10a79108efb221ecb8d0e70

SHA1
6fd16d278bdc0d0b61c355348249c3c4f41f8657

SHA256
3b52964e7dd05367cd32790107db0116958a3002ad9319feec32b7c9c33aa03c

SHA512
ebb2e0470163b4d8c25b98dcc8df3d40d83788d6de34cdb795f8f0ef5027eaa6e2c6b0b3bcdc10542e0741f00afdb256663e08168e57a6bcb5544dc5730d5791

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\knotifyinvoker.dll

Filesize
347KB

MD5
ff00ac91953e600124893b250c86ba25

SHA1
1a8b5864d3ad8964b6f9997a66a83b88b2cc56b5

SHA256
77e0c1bc6e40ba4067e448ccb04e0df5c5f8f0bf2bd352fd275dd0f42b27ae2c

SHA512
8f907f43d77dedb102d2640405a6b5d363f2ab4da3cad7bc0824ec8a666dcad78503b3daf4a17abca155393d72f8723a45b51d162dd7478c2c223200f9bcf9d8

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\kofficeaddin.dll

Filesize
1.1MB

MD5
54bce079f4e421e822ec3ffe61687091

SHA1
f5625eae725983c471c82519acae0257a5740536

SHA256
2b5f15a3911233004dc084e9cd6f61bb1a2e7a9a27c27f781571a01300890d4a

SHA512
ed210eb49d0bf07eb07e66b2aa0613545fd90ab6e699d68f4ccd56e72fef1ee7a265b8d331c2c30cdac33905d9058acaad5df51ddeef37ebf68dc924275cc964

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\kofficeaddin64.dll

Filesize
1.6MB

MD5
011ef4d9bfd237c8acc62ee923b876b7

SHA1
18beacb3489696d263df6a381dcc6b31c2b8ca59

SHA256
226457bca27b6d5f526d0f7c463a91246ce8935ca1ab501d857a1a63d6217ae3

SHA512
c2f1ef5b526145ca1a10c99ccb43bfd71a815e3fade24005301577736a0b34b0335e156acd7e60c08a3e0fa8a100eaebc1f0b9b99806992d3936b5af5eb9d976

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\kpdfmenu.dll

Filesize
693KB

MD5
db05f0969db1be8ecbd833d1af84acb3

SHA1
1980554e9c88e6c6d16cb2f2919faeabdd6d9e39

SHA256
3b6a27b2d7b867e25f4632afff6feb7a280af8ea6b71040bcd3fc266cb852d44

SHA512
61d6c8ea34d8ac04a9f9f2981652766b2729e4a56a4fac451cf2e4c5971ab1b2d0c0db64efd7cd43164c6d13291336cd21a1bf0b18a970c4b6e594104ef90e0c

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\kpdfmenu64.dll

Filesize
1.9MB

MD5
9140bc8a0f9734da33d356b29fa2a9cb

SHA1
54c32dcfd0ea7d6ef33ca0f38273d343e50ea417

SHA256
6f0ae8392efe88c51b11059812bc4371f3156730ddc9a3efb1e27e62aaf0bfa8

SHA512
479c994ee1868a5dce62bcd5a62444a3528255be326da194f148507bd653e95a0144aaa47a1c01491df9acea4c4c380945c40c09eb9ee9686d896fa730942b63

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\kpdfsdk.dat

Filesize
1KB

MD5
4cfadedd4c342e07af57574701c5fcdb

SHA1
491ba49852e10c4e8d1b653c860684f3e4e0186e

SHA256
36c479d942fd511de9e25f40c013b96b03588f3c21e5fcb2b5d86a2fe4e757c0

SHA512
f7f6e435e3c3b238a376a106a4b384969d58a7a077eb82257c25af75614509c1566d8d24a49f631263d606693715a77b53888d243e434ce79eb7e4e7fa24630f

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\kpdfsdk.exe

Filesize
650KB

MD5
29b52fb89daa2dd6918a3cb375f2363e

SHA1
6e0870cd0f1e06ab431a9cee14e4ab42868e80d4

SHA256
7f72601c6ab48b3b038d5148612716d8fbd1fb1c9502eb74973b72fe9a8d0ee3

SHA512
8905db3efa15ddd3ebb4ed2be182cea9ba3599f038f81224cce0272cf2d71f04efe454297aac620e217d1f8ae6a4545eb6c4cd41fae08d443ebb99fc359c42b9

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\kpdftoolupd.dll

Filesize
403KB

MD5
956a69129c1938eb36d49992ae21181c

SHA1
b946c70cb2bb39085d5f91ca2862fa68e0c7c861

SHA256
2d27502a6195717adfb4f5d765c3842b34489268df91c56cec259035775dad79

SHA512
22c4e2c1e918cec8a2bceacf4c050de6054af4e8d322c0ceec501bc11651f4a4acbf4b3c3d72b5fc564dc8f23bb40e8c04a0751fc6a080eb73ac2178fe81ec87

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\kproc_adblock.dll

Filesize
1.0MB

MD5
f1d863f93e1f698f968f7bff270b05ed

SHA1
a77e3dfd30b24d77a2c5b53670ed55cf4881e179

SHA256
88a750e06d7fec5c4fbaaa7192f8457d9ca4a0cd23fc50dbe19bf43a766ea1ca

SHA512
b40c631f18ab195d48b97dff5a8933c3e0041d078f3fd8f821ef8dbf1ef779892d7d005329f499ebab16858001a2f174dc0e6e9a5b7113e707e2087811cc4881

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\kresmgr.dll

Filesize
145KB

MD5
d54b7c32ba97ad8ff287fc79dd44f9b9

SHA1
1a59b21c1aab8e2ee66718743309c4d1798285b1

SHA256
3fdf4efc92ef3c63567039879e1ecacbfb5ca08a5d069c3383b04c82b1491ba1

SHA512
73fafad4fe9dc8428e33eb4dd3feae01dac4ff3fd6468957dcf547002ac723d43c0536d310e6cda334939b0e57510e2ec75b5d88c3219289e3d1f0f23bec3039

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\ksdkbase.dll

Filesize
171KB

MD5
66eeb41cb2d8266d7c371c8c28e8dea5

SHA1
308914c3eb77fcd0965c3c2bf8daf172c417b70a

SHA256
84b67e604fdfc6883a414bd6ef8ce43008b1cfdb50ffd596e915eba59417a2a1

SHA512
325b6955bb7bfe572c840e2465d6d537344a27b1388790eedac19525e1b82f316cbdaaa693f3a8e5e5c271627765cdcec34919501f8abdbe9873b99d3a1ee162

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\kskinmgr.dll

Filesize
1013KB

MD5
78a6d2d6ec8eec4a7e5d1e5dfebbb64e

SHA1
eef04c735b0beb4c4fc53fa4e0fd22ec7663ddc2

SHA256
550a70d9c0faaaf692ef7cc1b76f0688d34daf862134a9548485287a6ca37e05

SHA512
289e09d0a40c56684d111e96f6cd6151d025bb1bfa2567c63010bcf70ec76f0ab8e4dc29f6d831fc1c11fb5a939359d52ef9373d6aec2363e8d9ffb4a3b24871

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\ksoftpurifier.exe

Filesize
3.2MB

MD5
85b708c17fc12728bab6adfa074b4ce7

SHA1
f451b45cacda9c85ca58aab9d90db01e865d7a65

SHA256
0437f0b3786c676ef4eab9a6f67245669dcbbf6d7b874a1917bc85e348749053

SHA512
e5ee8d11421856691f0a5a142d1b313ae94cf76a1f7887353767f283d51f93fdd346d329bc1fb5422b63de1b028647963146df5317da82801b917580be05fd23

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\ksoftpurifyengine.dll

Filesize
860KB

MD5
055bdac44907b746535cc34225780405

SHA1
46c7bf130bf696c1bac596d1ebb253ff7c88bee7

SHA256
8c47f4b44c770bf41250b4b02f366590268c95c0ae957601023fcb5c2f221f2f

SHA512
cd5fdba7d525489f7c3e863b9f90317db0bca0c7110331d96a9f104911f22bc79858edafdf03a9bbd7736cd1734ac45eab25460115d6de6da6a0ead5f466ae8a

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\kssyspec.dll

Filesize
1.3MB

MD5
16c6613a10b25f37028f7b88c49d9dba

SHA1
d6c8082078f42cab685e493b27426800673bfeaf

SHA256
7d929af0302f3154c528fed4af2c04006d7220bb1cf4d1cb86b0e3f8388a66ad

SHA512
ac2f1bb02e0ee87c31ed018f5a3c37073c372e80abb8ecff1d54850146d3028f312f891ab1c575527786ef1b36644b244e308dcd78ed7ec65c0bfb859b3bb093

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\kwallpaper.exe

Filesize
3.7MB

MD5
a9b73033e00a0858db86fd5352dcdf61

SHA1
d297d2c1c439bab6689a1433cbea170cfd81760a

SHA256
1d74d0d79a87319ab49186d1c8877353ef5f19fe0cf8185816693e6ed45759ef

SHA512
6a358256c519de18aa289a8e010484869b749bfa788c573d525b3379f9a71cc2fcdae4966c09953ca68a75aff8990a7c2127bb52bea4733153fb9705ebfd7d77

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\kwallpaperex.exe

Filesize
383KB

MD5
88b4324967b423bc7befb5dcfec97e6a

SHA1
d547d8d061d067226a3b43eef62244e660715510

SHA256
0c8178c87c40a1290f8f5723b7dc3ff47272a8b72ce6b6c7c704e003bdf9ff53

SHA512
0784d1d4b788dda6bb2059c3d166424f947584e4a6180a59fb8c9692f9eda48c8f3dc8e11492b9150e350787535fb46b3737ccc3e24e22ada17cc7df3fd18b9c

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\kwallpaperplayer.exe

Filesize
123KB

MD5
aa3fa147028373f1243a31645c4d415a

SHA1
841ae2848b613d9550c013d9cbb2eecc31bfee7a

SHA256
c302bdbbe52aa553b317070104f5a748fd214761d08dd9e60e3dbe3c73be7e47

SHA512
9dd92385015a397db8266b4f5ee41fb6f01943a54443875c770b24bfb720b502be0fd51984ecafdfba6ad915a8c78b273e80846cc6378688bdbc9484199a30f9

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\kwallpaperui.exe

Filesize
4.2MB

MD5
4fc368323a5b7eaefd9cf65c9a072efd

SHA1
7d625f7f9cdbe36a7c0bfca2386a4b6abb5a3027

SHA256
d083bd32e528d078605ab03c0704e14d173468483ff9a0e2d8d1d0f19e275f1d

SHA512
c20babbc775d0e5850d454e9f436279638569e981da4d8f33174ca8dc839e640759bbb350a09dc0e619efabb233dd150b51ebc311edd9207aebccc54ad323f54

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\kweatherquerierex.dll

Filesize
119KB

MD5
38b9ccf7783b763a6cd4062c41331920

SHA1
a09d199168f16c2251a39793ce19352ac69c5c49

SHA256
eed07a2cea4b7eab891bcef2e8a470b590498148ce6a48374ef5c2f66fd9ca21

SHA512
2bf0faad93929343d1c9a695d3a8d7f7140fe8631ee08c50119fda03b1a641c8d1b3a7c01ad4da920f74f498f9e7ecac04475afc4dacb2df484e56d11d104506

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\kwpplayer.dll

Filesize
421KB

MD5
afe2f5d103f56a6aeb0558dc6005fa43

SHA1
0372e41428a1e323655ef5dddba22e7f6f1594a3

SHA256
0c09935dc6213e16b6488e0e33f10e8e5ef493707bf1e749de097876698b3c51

SHA512
1c20f4591a41ef1b0f2fba677308aabd5e396690c977a2177248a37bafce1a3092fb069bd05e8fe163b2a1ddc1d527dc46c50a54320badbc3a147a701613b2a2

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\operation\cas\kfmt.datx

Filesize
34KB

MD5
ed27eb17b47244321664f585545606b3

SHA1
76616fe407dad37b9548103fae2b94a197242777

SHA256
878758159f39971b583e0960dd0d0c8a859176d7a0e3efe8f9e0990d916f303d

SHA512
3fa75df4e0730fb9adf5e1280e12fc4b52379077fc67f856cfde831e7d13d527b1c9b990aff0616e603e634a6f0d41a120f4d4d958de8c7cb9f60fb7337b81fb

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\platforms\qwindows.dll

Filesize
1.1MB

MD5
041c2772b1b47bb765fb06c1a9047b44

SHA1
73ef7caef952d1bc481a2537a57fb2a8933d6704

SHA256
87c54e273373193b22b59d96ea3d5d0985840b820e9d06acde96926ccc1882dd

SHA512
7c5a967fc425ba67f243b62b85a91e8c0c0e80c9873f8c5847940a499d9b315330e01c3a7dbd5c806516f8d04e0fc36379def32591e629fcaf7855ecfb69c66e

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\ressrc\chs\dpiimg\2.0\kdesk64\210001_2.0.png

Filesize
217B

MD5
5824fc562aef6252f2b43dd675fde514

SHA1
23cb54944354ab813c37334bfea0bcb8b241dc29

SHA256
fb613ad369d7cebc5d79fa109dc6b0e4e1450779185ecf818c7b1527ce045e1b

SHA512
d62a606909d9812798ca357af640e20a757ad38293427b11247053fe3bb9165bc5471e469abe59a730db815efd8dd6c2bd98add8c69304c391ba58334e40ceeb

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\ressrc\chs\dpiimg\2.0\kdesk64\210002_2.0.png

Filesize
198B

MD5
a6c10538f002201632827ea10dfcfcfe

SHA1
f4a6b0a043a2b66a7c5b23640b60731551e77ba9

SHA256
70b119a608077f6045f8c0ab775399be7931fbf2b209142406fe3978c4e17ac3

SHA512
cf546dbd349b42b188535761b1176505b88a85cee0b801d9f741219564a049ec8ae63ff37c68a56e4ae46d128d3f7fc562c92ee76c2d93bd6763ea95013864b3

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\ressrc\chs\dpiimg\2.0\kwallpaperui\800000_2.0.png

Filesize
3KB

MD5
b0a677b78180614bf3fc478672d0dd3e

SHA1
fcdb859f679d9ab1b2760a9aaeb281ec745a1f2f

SHA256
467a65c6f72444ab644d899f22082d5f255e1e70e27783e5865aad9cfb07ac9e

SHA512
45420059d1be3dfe8e1018599b828fd48f308411a58c746b91b7fc87b2f64a23a9653de27b31a63139a6cf5173c8b868ff2bc530e78105c04d8af7c508b390ae

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\ressrc\chs\upcfg.dat

Filesize
47B

MD5
76766402f38bcd5166da94c12aade7be

SHA1
7ec1a8f829405d126fd18960c38d48e06e8e38ec

SHA256
5f6ddcc8e1982af31815cbfbb5a8241bc0a1d9678f9d94a130bd0ccec2c0431a

SHA512
321209472d29e9727d19a73c6fd1e00ef4e53908243ca44c57f1b314466ec84452d51ba39d02bfaa86fa7d5404b2999f4c12c3d4d71038b80d5d658f62d5593a

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\ressrc\chs\uplive.svr

Filesize
416B

MD5
7198e312b79bcb2d0a5a6916bcf72c5f

SHA1
f17b179e58b19fa01e0b0a6f19038b8f6e5afb34

SHA256
980f51b4c613401def7ad4e12be5592014d05b388c24f3ea5d849325c0a550be

SHA512
268d79ecfc329f9f125afeb9cb3cea12d9cb12f76765789b083948502535a239ad2a0db83d6768f7c16ccb4b1217eefe7f14c706be83067e1399953ca4456bb9

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\sdl.dll

Filesize
267KB

MD5
b406be6c5ed811a921774b2ae5bac8fd

SHA1
7344756a21485816fda852adca54596730ae4a7d

SHA256
0788027f7c37141bf77b6f6328ff105bb5bbfbf46c9ee16292781b9c93593d14

SHA512
aa8e8d316cd9a58bc81d9f9c151e7005848f71f1cc4abd07f389a5b74351a35d69306ef3990007aaa5a55e683e6728fc81bdd674b444770cdc9a2d6386e29d30

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\sqldrivers\qsqlite.dll

Filesize
1.1MB

MD5
31889fd271bed507bf330511f0e086a0

SHA1
7569bd1dfda41930f26ebff4959d1f2d3a4e33d0

SHA256
78222afc4fa197be8dccd1a90a7885fcbf83aaf591c6f981f4ca4dd0b31183a4

SHA512
728aca2934f9f4f777716492f58783f1ff790be45aed33b2be4e1297e6c466e45c7939e5d81507b34f6f5d38a022899e933a0dc936c941e3ddc7c2bd06a71834

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\swresample-3.dll

Filesize
558KB

MD5
1f6ba4e6e4a17b22f6970dd1491a1ed6

SHA1
bf8f905ec89b2a384fdb888a4227d22cf63d9489

SHA256
f930dc840470f4bbf3c17fd78ee889b38f93fbcd5e92f6350d4734209d2d936c

SHA512
032a6c5450690b762182d41a53dcbf67a16bdebf2c97e3ca3b752eb566e09210c2b6bb32be0903a20fd36ab8533eea795dc4f0b4d64a7f058e23c071504940f4

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\swscale-5.dll

Filesize
1012KB

MD5
e3d52d2a1828ade961daec2d1a2848ae

SHA1
6921d1067f2ddd34d37080fce7954a1b379f66fd

SHA256
68a9c5ef10706faaa15a0687fa7ee6c5910cf773a2dcf09c956551c798da8a49

SHA512
9fc5283cdef4945b3386de21013b301610437962ac4b2febeaf69ba34ece6dc9abb9ef34ce0cf206107804a88a0f749391391d0697fc6bbd9ea9d8e88b0fe9ff

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\sysslim_16.ico

Filesize
1KB

MD5
9c15da8e01a1da8c53343abb6587c523

SHA1
190cfcce59cce0a66effca08a9825f6ae2974252

SHA256
f41f552117af88eafd31edb3c5c465a468ad29fb0b494aa7efa14d88f49b0d27

SHA512
f68e652b4d16f4aa386d7236918a7f93f0091dd90663f03378a93d89082bdc4e8237e7fcb0b02765e63a5361718fcdad6d54a5c57f7d27e3a9b30816bf30817a

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\thirdpartylegalnotices.txt

Filesize
93KB

MD5
ce0d4bc67d484b7351cc29577171ca6c

SHA1
08520d07707d21fe56891589b447f43086f6a183

SHA256
f3c31d9a4c59939ac4c5bc5667d493096206bafd43b059ac23c62609053863fc

SHA512
c381be5d2dbd6c28d0e1fe581abbfd3f6285a954ba92a5b3b5eb3c84d1bfeb1196e10e2799561bf63bd939065295ad3f1996c0d9f137c17aa2b0c642e8b2c8b1

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\v8.dll

Filesize
12.0MB

MD5
b00db3d4ad012bfeb8b2b5d0663c70ce

SHA1
02e3112518e5df4a4627d6a836ebee60832cb7bf

SHA256
6477edb1d9e8ac652bec1b0475c6e7c3e426dd3d8872a045a561a9050e3b4344

SHA512
015f2a7b4096610f2a1ef16ec28ba5c1c46a4424c94c8c607dfaebfeb288efb72c57572e2f5592578e2e0f3ec7f3ec6d005e499fb6cf16a44beeba334f6ceef3

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\v8_libbase.dll

Filesize
115KB

MD5
4b0cf41f1aa2b422694917d48d726b0c

SHA1
fd4596e587cd30159ee59d92123173d04e3bf3e5

SHA256
ae9c2dae4411521fa9f008bccd16bcddd8c113859259340d416195dc947628cd

SHA512
a7594386e211e229105af43e2e34098371db209fc4b69b24b969aa9715178d9e0dde389a37335f71b07ec16f784fb49bae770d374a57c22d90a92d1b54a7c63c

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\v8_libplatform.dll

Filesize
74KB

MD5
aac1bb0de1b12ca6ef211d7974f9412f

SHA1
cf30614722d3a165148cdf99e575e21ecf4c4932

SHA256
8c1754d1354a47a1dcdad2546fcae3298cd907025fab01065b9dffbda43843ab

SHA512
d47b5bf81d690268ee9b718f0859d30674c228c2f2e6f48986c543cd5331f4b4d8f2dee05629528a952ad8d603815e0b62b88fdfebacfeb336a1689274b7a804

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\vipapp\crm\kcrm.exe

Filesize
1.4MB

MD5
b45d766c8fdc83c784bb5e0fe003ec61

SHA1
5a2fa2834070ff213a1e98b10ef63ffa827d9669

SHA256
801a434a4f89824d85c65d3ffe2986567e9f8bfcbd5e5b6d5d6b1e7b22746ebf

SHA512
7e3dc9b50140111b4019c11227b392be99dcecf7c7c091518bc644b609ea75d7d2e1d7a5542fdec667feac76d96b50371cf79813219028a412fde0186f7ac68c

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\vipapp\crm\kcrm.ini

Filesize
587B

MD5
2d039967380fc120eb84809526dba2c7

SHA1
6bb3b8e08d608dcc76b547f41e229dc0f768d252

SHA256
e46695fdf54afd38407c28ad853e12bf93255161e9d8288d84756bebd4cf2716

SHA512
f5936f21337fa128a81fc98b1a7674e3e3853c3935ba0a63ba861353d5f549a82bc72ce49691a222a4b6362b066f6536e78035fdcc953349ada474f7c6b0b1a7

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\vipapp\crm\ksyshelper.exe

Filesize
179KB

MD5
0083093946053abfaf17a51eec3a2d11

SHA1
9e5e8ffa9b8c21c71196fab302152c5437d80ecd

SHA256
0a6657e0daa972e556698a6828cd92f27159c92279287006440c3c1fc64d2037

SHA512
147b13760144153453ea9f5154c3a891885a24ca82bb021902cb7242bf8abb19937330c84f70841a9a0904cea9abd49150b40c84bc67e1c594d7fee9ea1ea005

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\vipapp\crm\kwebx.rz

Filesize
238KB

MD5
0589993ba49b173351054503a736a5b5

SHA1
684e153363926db95a93ee93e9988860ec428dd2

SHA256
dfa92b84e598be91d4bb77db6ceb9a801d5259d13ce403f95ba693056df3e4f5

SHA512
7f427ea764de5ae30b4a454eb84099099a00c1cc2531e2a6201c98bd6e785545caba740628945b4726ec6a83983611c893cf208f7a50ec1cbc7b49ce7387b3b3

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\vipapp\crm\msvcp80.dll

Filesize
549KB

MD5
4b93629aa707c6f6ff61ca9c3b729c80

SHA1
6abae5d7e9805b2c461cd595a18de5ce76159967

SHA256
b9bfb37c45a9abd36da98bf94476f7ea33b0a1cec5e58db99504b62371209681

SHA512
cc928427c7747be832f5ebbabb4e5be3a28039be2a0e487747fda7607c52b69833f47e02ff766f67249489e1d36ebe386c9ff949a554265cadb420807d9a3670

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\vipapp\crm\msvcr80.dll

Filesize
625KB

MD5
1bdf3a3737df9f160f45ca40dd3de9c4

SHA1
b9c5aaa84e31e234c8fb4042d472c652f16a06df

SHA256
7a61303cadc238cceb9ff3f03a7d9848d905e01734195b9a5ef354f3b773693a

SHA512
0d068fc39ffca45d311c09883e829342a66eaf736f3619a62091862fdf8278cfc40a074f2c0a6edbb24984850214d0dda6ac7b3b3636ecc70f6f5a3b5a17ea76

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\vipapp\crm\plugins\base.pln

Filesize
307KB

MD5
4bd7c6f46801562057268185e88693db

SHA1
c95c4b7e23fbfaaebc5c8a3dc6e91eedfa6c692f

SHA256
0287f32a74208ae2767ef4f58e73b8a10d85fe3364bfe3c14a03bff08942df95

SHA512
cbfa58e4f8c3d4ecc3cd7fa52884cbd753a2997a3b138b5c5531129737723f430e8554726d4bbeced00f7682adf10fe808015d45c5b68e31919989ebfbecfd9b

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\vipapp\crm\plugins\kcrmcore.pln

Filesize
946KB

MD5
c7f2ebb9c4d399fd9d1b781e109393e7

SHA1
2158e4e7897c4bc1c64f23cb04abf5aa81b4c7ef

SHA256
30e8267b81377c3a8d795cccf223154167f30ac8759ae578c070954735fb8b1f

SHA512
0cddffcce9ac17c62e14b7dc68a6a5d63dd59d6387638c590321cf6c0e8a4d15ae6fd2676d805a3007553fd02b2ae5a438f822ba3f6dc63b3b0e6b5368f6f7d8

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\vipapp\crm\plugins\kvip.pln

Filesize
532KB

MD5
0ca695d0f4a93c4343de31a978292d5f

SHA1
7b3ecbe0ac818d879b721a635bbe867e4a69fc3e

SHA256
38df785c26903a9d53ae392860f9053a8c685a101950f930760ba4a9c37f8254

SHA512
41464233b52699212d599d774ad057851d18527f03997c4009cdd954090070771931fe3d1e052ffef1361f8bad7c397f8a77388a1b63d1c6cea635430bd1ab31

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\zlib.dll

Filesize
113KB

MD5
391f4cb5e1308caff8fd17c901f2f64a

SHA1
d0df6bd875bdacdbb4ae3579cf6c33da356f9735

SHA256
6089c58c84075547dcdcbf657c487270d9677dadfb77a628eab395853e4cf25a

SHA512
5f17738317e65fb156ee7093a1b2e5a00bd6bdd0c2a04493babc5134b22470427e125d28f0c284368f506f51574ac33a15ca80cc595c905645ce7f6805fc7746

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn\zlib1.dll

Filesize
82KB

MD5
f38057c71a717422ad70cf43bc8450e4

SHA1
3847fc111a97724b8f048b303ce1061903350d13

SHA256
d5f40dae542bc0552d244e4b1525b29a4d6ec908ea77ad314b932326f4359581

SHA512
466f42433c4f6785abceca41950e4cf6d443a9b06f8fcc98b471e78ee650090d7b25eddf746192986ecc0c93ab124b8ce8ef9d1ea580ab0b33ed35046a167166

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn_fast\hmpgconfig.ini

Filesize
980B

MD5
786a1715ba1d313969c6a6d2432c5396

SHA1
18abbdfcf1dd71feb55143193b3aa47c6cd01d08

SHA256
f7eb7fe2fba0fb45b24137ca3a597ed40288b10487dd61ab604cb65c0c173a01

SHA512
2b777a5f490a7430620c5cdbdc52fb8e85bfafdb3653f5540f31983a7c20eac9ac7f8c5c0635348f10d77447d0d0a5b4e9bc32ad2ad40518e4d1f5d81788364e

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\cm\pcmastercn_fast\index.txt

Filesize
156B

MD5
c9f276582f2254c1e2ff23a436fb1654

SHA1
c53709a3a46546c246da9cdfc0d6ec6b60322031

SHA256
b29e1468932085f996ae453a787454a82319a8942510aec955a0f61aead3da0b

SHA512
03db1bafd603c192685fef1b06d857b3e2d9181e89b613f4ce2c25e981ae2908073837592dd5d4a95c3d53959e3f5d4bd33f5f942381d7d774e48984fda18538

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\reboot_update\cef\cef_extensions.pak

Filesize
4.1MB

MD5
6e727928ebeeeb5847c65c15c41802ed

SHA1
d22ba6f8e3160484dd40fd5f4eb685182f404d88

SHA256
221a97daf8263321ceb9ce244452fc97b865b561e399b23d42682fef4785ea7f

SHA512
d39e98d8d2e9afc84f8188e27e412079667df2174da14f93f451396ea1a27fd5abf9fb8218ff02c94b56c60e7e5e59a5819d50d2463ef6f6ad71d29cf1f155a8

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\reboot_update\cef\d3dcompiler_43.dll

Filesize
2.0MB

MD5
1c9b45e87528b8bb8cfa884ea0099a85

SHA1
98be17e1d324790a5b206e1ea1cc4e64fbe21240

SHA256
2f23182ec6f4889397ac4bf03d62536136c5bdba825c7d2c4ef08c827f3a8a1c

SHA512
b76d780810e8617b80331b4ad56e9c753652af2e55b66795f7a7d67d6afcec5ef00d120d9b2c64126309076d8169239a721ae8b34784b639b3a3e2bf50d6ee34

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\reboot_update\cef\d3dcompiler_47.dll

Filesize
3.5MB

MD5
02e034cd47aa9a633f6aaef348dbbba0

SHA1
424682cf2f3878c0195f0f4cd250856a0ef871b8

SHA256
ff86503cdb204570491a81bd45fd9812652ba20a1bbbaf2533b7203fc4469854

SHA512
0ffb5efaef0780be68633957a40e27c76625a6558a14d0671c85ac3cf8810f3c1e79f3281084dc05034b69447e999c420c1d248503001454c62d0eff320fd6e1

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\reboot_update\cfavp.dll

Filesize
80KB

MD5
a94106a81d9d83e8dea39d55a4b05313

SHA1
2ed9fbb2075fcb24d2f48210b3e3d5c0bed8214b

SHA256
f45c05e6496e2c3be82949109324c46ad801595befda92eee9d18b2338837ebf

SHA512
e699bab43fa9a0503eab8daabad44bb1a8c894e09f583c778237a86b01e0394fbcb79feb8678f3894c802de2409f7d40be816ea7a2a7da0407bb39dd4ee7dc65

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\reboot_update\data\kwallpaper\res\160011.xml

Filesize
1KB

MD5
a4cf476710855b49608596f8be1bef9d

SHA1
ea78bcd35676cecd6e0f8778fb764212e060afa9

SHA256
27a52ca6447d0fbd24bf4419197e6c20828320063fa4a2e773fa24d628463da9

SHA512
3ddda7da035aeeb5799d3b867efb936af97560eabe49b81901384c91c9ee7882249fa6f8cc5de14885d707df51dc15d60f7cddcb9910d5661c1abc2b21d7b437

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\reboot_update\data\scanctrl.ini

Filesize
503B

MD5
3a6e61d701c01f51c3f5087857d42ac2

SHA1
3905d59194b08bfe51bd01edf4c8685cbb317558

SHA256
8c8877937cc2aa6173313369c149e176f7c224c65695c3d70aa90b075b1f48f5

SHA512
48223d3cc0d403a25bd0da6a6beb6b6eccafb863e5e163254269c986548cec6a3d3ccc96e2f52b65b3c6011ae887a0ae64e38d95069aba9bd19017b5b8e972b6

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\reboot_update\data\theme\infoc\kctrl_startmenu.dat

Filesize
170B

MD5
988bb457829222d52388813b1ea4d9c6

SHA1
5d773fa7d7d4409b5d87487ac40342659ff64e06

SHA256
2b94bd91061b7e9b17aaba344259d1215b0d8b74c284996fceecaa81466be956

SHA512
8447b704c6161da501e25845b2b99f72ed4a3892c0d2880995ea0fef880ce65fafca93014cade814c87e1977b755807241e14fc49bf068d45a82b9554b00fcaa

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\reboot_update\kconditionengine.dll

Filesize
1.2MB

MD5
06a41700dc958711f09ce6c15f5ab278

SHA1
8fef208fc21e395d533261f68b13dc634c067a4b

SHA256
e1087aa50e1259411ae655afbbbb19dcacc273a8129dd751b0688f4683557cee

SHA512
667d9e30a1699e955853b3b9faa9dc6f2d4016bfe794d17f73cd8df8e566acf5c89f241218ae8a2f869d02df16f361a1e544f5baf6d69923b8894c88f6a84ac2

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\reboot_update\kdgui2.dll

Filesize
2.4MB

MD5
59226ce82b666f828ce47c6bdc322937

SHA1
db6a613277037b1d65f00d5d320be40dc3f521fd

SHA256
4e04705199c1b3b9de067dc9fe62936807fad0dc2a7f30c4189e7af0506567f4

SHA512
a2b8f135eb4487dd6f76417b8d92d0d13cde63f60aad1677789222bd68e5a144453af6e815b46972f3056142e55b92ceabbd68e07291cc71962d30ebc891c026

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\reboot_update\kxebase.dll

Filesize
69KB

MD5
c0511cebf17cae081a3007e91be40618

SHA1
9af56bff8ff587c673fd772c44188597bf3ddff1

SHA256
c2ffb57a3de656d1a37d888d32605c98cfea31ad1112805f19f68ec7371a7753

SHA512
1e0656f390a0cc85e1731a18d65a454716100f0d069c04cf87c6ee5fe247a000b75510809d135eaf228b3b60d4022fa3af8c27fd549d9a895441cde6c6ca145d

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\reboot_update\vipapp\crm\msvcp140.dll

Filesize
440KB

MD5
e0dd94aada0b034b212de071c33054da

SHA1
6c4f1b3f66d07bbcdcf41eb39b1480bb335efcc8

SHA256
08442853f19ce4ff3acae37d87eab33ef81c4c6da62a3432d43253ba79842b64

SHA512
76c877056f448e5dab820e990cc186ba886b2d331d689a99295aaff31a63aadb941c2693b0be98d53bd06cd8041a270eb82ddedfbde305cd9a85bcbe42fcf5a2

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\reboot_update\vipapp\crm\packages\kcrm.kpk

Filesize
10KB

MD5
1b14f7c8d9660af6c4a5db9314264267

SHA1
b15db781badc9af078dcb7ac0fb5cdc197ec1eb8

SHA256
6ddef0435132a3a1d0c9e231ad27ec099901ab32427b09d100cfece490c5bff1

SHA512
7bbacd16b684b5458ab84d49b77799112f1966e26d2184556897e64ef07857804b4de829a63b360da3ca1e556096b31626b5f6c66795d16778b629617a52c378

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\kdesk\update\reboot_update\vipapp\crm\vcruntime140.dll

Filesize
74KB

MD5
87dd91c56be82866bf96ef1666f30a99

SHA1
3b78cb150110166ded8ea51fbde8ea506f72aeaf

SHA256
49b0fd1751342c253cac588dda82ec08e4ef43cebc5a9d80deb7928109b90c4f

SHA512
58c3ec6761624d14c7c897d8d0842dbeab200d445b4339905dac8a3635d174cdfb7b237d338d2829bc6c602c47503120af5be0c7de6abf2e71c81726285e44d6

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\khealtheye\data\popup\2f6938b1d3bf1282d0dedc0f3f8c9a80.png

Filesize
16KB

MD5
2f6938b1d3bf1282d0dedc0f3f8c9a80

SHA1
a62d6f5e388b2ff1fc0ad98d7230b7ef036943ba

SHA256
a2fd9ddd00da88f2d38b0e27776a726aba0e98e2ddf26e5fa48d3ca9e5cc756e

SHA512
cb995ae3ce5901ccbaf2486f28dcef9fc6fedd6f809c4f67ce072cbeb2c2cea7cdefe392f9785c8cf7ec46de086b5f0bf8e16c95662fb690d663ed7ec798758f

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\khealtheye\ressrc\chs\newcitys.xml

Filesize
261KB

MD5
f46ebb941e3a40b0475a3c7ea8dac289

SHA1
d2525bc6a7501c7522cc6d667c8b81cdd8f55236

SHA256
afe77cb40a877c9e5b1f4965fb4e7d131bd22336c37bc82a74ea7a43e8f33978

SHA512
c68b4b3bdb875091f4c400e852565a5306eed23ac9f941f6f640f260ea7a9c0e0df1510747838a87c8c58b0cf0eee9bcc683ab09050f750ebb5fd776f062876f

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\bdmisc.dat

Filesize
58B

MD5
d553931bb993e0fed4ca3f23ad75eec8

SHA1
9fbabe8e203c947cd38f4462f9d15d1e92a0f953

SHA256
ebe028befd1404414f1c706be9abaac10f01a6cb8847fd696932d302d93e7137

SHA512
56218d81570cd6ed4ec5ea869d0dd5aca966ac3844c246ea9acb8cb111b1fc33bcce7d2df247492abdfc73e211ee0b677a3f10bfdcbe7e91f52d97458992adc2

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\calendar\kcalendarsetting.ini

Filesize
131B

MD5
b5b0186d30749fd0c4293d7f3fb9d391

SHA1
9edfdef2918c2714a4820d3116200d89fffa3b8f

SHA256
0becfa9e0befa1ddfc8f8553baabaaee7936a4968a626be28a5f75d546250757

SHA512
7e4da41679d1cfda255b9c191d786faf2cca7b8427ef85faa68dab9f006c51ee47d47a68e45497450df9c05adc9a3f001308f86492ac8efdb6782a235c9487ea

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\calendar\kcalendarsetting.ini

Filesize
131B

MD5
66ee2c89fcc24365cd5fc96325d789f9

SHA1
8b7314e0c3e385d430d473c78acfd94162d65020

SHA256
67be873ce9ce4747353ab15b10624d26e59ad529f5551c8eff9fca8abc0d43f6

SHA512
a8fc51668c9f573652de7ad59d2ab6d4e4526a03abdad4f6d539bea52bdc141121b58ec4dda0b7b3b962f311b3676134128bde38d26990d19b2b00f53ed4f98d

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\calendar\kcalendarsetting.ini

Filesize
149B

MD5
e45d419253d81784bdb7edbb8781d7b4

SHA1
ee609abf32a1ff4b6a4179a1e76a0a4248bad19c

SHA256
d8bf75b0454adf89fd485bb2420f476d8750f5807faa5e7eae28c6a7bc565cd7

SHA512
846ef1e7c2632ea50484d57e1ea4215d72f6a7a75515f01ae1c065f7969b3f78b281627218f4459070f9a2654a433e80d6484a5a73d98c87818db60f728f7ab3

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\calendar\kcalendarsetting.ini

Filesize
201B

MD5
b02e715abde3cf0e86177432bf0e148c

SHA1
6aeafe5327ded0ba9d56c4cc9c8c4b58be380e18

SHA256
293c5057dad9c5fb051df25b71b5ad9636c0a3c39ace09165e067af44657a2dc

SHA512
57fb93c7b18753472f61a0a7577930fb24a5f5a0baf6f2f9113bb932640d410fcc5ce6db2a87bc63c53161b0efd404e4d75416c00bfe73ef5a460e0e12fc4441

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\calendar\kcalendarsetting.ini

Filesize
228B

MD5
cfb6ff9a684939c7aa157e76cd47c98a

SHA1
7d0bbd6a9054e02105974c559db7bc7db1771ef6

SHA256
f8a4e8d3f6849ac50c7cb9591dff644e752188741076da7b7bf9323eb9fd12d5

SHA512
2c7e3e35732f539e65daa908e4554ec2ffd3e948ba0a449462bdb7a40b0fdfe82a22dc02ad06d2d226af3d243a46b32f4bcad7ffcf50bb473709e3296b268a6b

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\calendar\kcalendarsetting.ini

Filesize
68B

MD5
f02f0697dbe4ff406396e2f8993fa238

SHA1
529ece07f46a23a8afca53103718239690b3aced

SHA256
9366579a29cb11c991a44cfc60c1fdb10af802020315a4d2f2ec9ff71e7671c7

SHA512
85fa218f130250df57ea8cc1edc430aa6af4a89752498116f8b8747c9946091bade9211831c4623913496bf0031e6e26a3b93e1c34c4855c89ba9e0d28b75ace

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\clearplugin\ksreng3.dll

Filesize
1.6MB

MD5
c311541054375feb0cc2f327b806d924

SHA1
5d69cebec2294837322f16d6422db2ec23e493e8

SHA256
8a213dd4dbe21f5fe055fcd3966ee170d0a44abcb5f183cb43a8689ec9f18b69

SHA512
a0711911ed7b421ab7504295bf4d2f066a4206c705d03634f1264613ff5fe4b6b1cddb953ebb1d628aef08a0fced98889cabd7f3e6fec97ff2e8d5e84110f06e

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\competing_pop_cloud_cfg.ini

Filesize
336B

MD5
630c19f1dda2a3d946af7ac244639c30

SHA1
9b25286e33f69d8696d5df1d77392758ed4932c2

SHA256
bb17e33e6de581672a3ce40eedc69fc899eadd49993c5aa96ef12a8e79d02736

SHA512
b9756cde549f861508d84b0dd7df45ee9dfc1019bd91029c7efabd221673df77979dda398b8eca0b1c300acd26763debb1da5ed29f1fa14945ff0427271f3a57

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\floatskin\user.ini

Filesize
80B

MD5
25e7b49da666f24aed85042b977eabeb

SHA1
0253b6385010b5c7cfa7ff28d0a0534c5a144354

SHA256
d1f1614c316eef5a259e250284be9bcf79230145a2d3a3f3ef6eb4a4f0926005

SHA512
1315885046bceb66781bc82026409eb7573eaf19b236359d4fb5db5da634a837e18915b01db2186c8abc620f044f9bc780db62380b87022a05c9e3e07171e007

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\floatwinsetting.ini

Filesize
35B

MD5
feeac5d6fbee0b26a583bb2e0e4df453

SHA1
bacdddb967627db6a37dcf13299ca36fcb7e1a61

SHA256
9291a221a60ecc514b128cc063612599a29b939221dc16c0641c25739c0a4c8c

SHA512
7fd897d734b64517c0e450f3ad659c630759797d20c425a731add8752acfa4f9315b80036d9d05319fa589aabdd978112815584ae5ab00cd4641cd276bd27266

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\kclearak.dat_t

Filesize
1KB

MD5
b4c5d9e35fbbc1f6f0e0fe3aaf3554f0

SHA1
f3638d4cf3792b97f20c688e82b119c483231da4

SHA256
4d464e349abc5e6a43648b17207d0c0e68b86e306e9b33078b614b8b27079aa9

SHA512
147c488bbb11b250f31a2ec0bfcf99fe223f4da063cb666f74e0ab1526d9fcffd09b4ddc7d313bb7a5b189a663532842ea563787ffc4f00d84cdda6f0cf6f8cf

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\ksoft_category.dat

Filesize
1KB

MD5
45f9909e7261402dbc1f08ffb62bf496

SHA1
861a144319f5970e7eb6e646c6d1d254f2a7a9eb

SHA256
eb21495614f85a5b5e9e760de29af3ce8fd2500bc42f3fe8f4902205811a8a18

SHA512
2df8be16128eedda2d27a85694a1e250adf66d88ee1bf164df3650fcb974589dba08405491bb08e04ae3e841d42b9b29befb644f47234458f1148b196404265d

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\ksoftmgr.ini

Filesize
98B

MD5
5ca8c7bff8f3b6acca0ce893d1959811

SHA1
e7e3d7faa71ec71354e029b58313bf2f1c2c125b

SHA256
223e57b9d91505a06f7a702558d20d3678afb7053d3f50f0ba82f241fb6e0998

SHA512
da93a05b043cf847eec8a3b375761e8466df6399e28a7fb5af2c16d91410c4b2e8cece360404bd9be52cee4850e5541b2b0285b1a432175615171d24ca255fa5

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\ksoftmgr.ini

Filesize
153B

MD5
f75e0d1a19ec72bffdbe6e35e32cec40

SHA1
3a1177ce5ded89dcf892669fad7cf7be27bf2497

SHA256
8c7b96c2eb54884248b26cc1a4fa767f4ba50a7042f31f9a992bd33c677073dd

SHA512
fad92443c92086236889fb1e08a827b19887caf4413062eb28cda367af6eb2ce814d442984ec84fc7e795d66253d0866f4b888756212f5e76b3c375b3115bf1a

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\ksoftmgr.ini

Filesize
253B

MD5
1db60c994bb91d7648e27ea276fba478

SHA1
d4a7b3bcc0d2dbdb52a9d17d9cf9c39f4302fdaf

SHA256
0a4c77f9b60e34b0afeed93154152ec42b12ee70f49a0f1192a5c69b8ba35b0c

SHA512
5f9df2c0abe9c5a00c39f1a9368f69f2a7a95e6015c76189010110e896cc9c67d102dec1bcb8b24462a1da4e297ae6df851f6ff1eaf72cb20b68d5a1375120ae

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\ksoftmgr.ini

Filesize
253B

MD5
dc742b87c9654cde22351aa737a43cac

SHA1
2812d14d45a6849fc5e769b9a99677ba423782b2

SHA256
1ef6b32dac9bc08f6b845ed076856d5da1e0d50e1db8252ceba67e3dca6c96ba

SHA512
ac65b06820a5c558a95bae89c8d31928c35f593171cde011a6702fca752f8da9cfe6e0e19e1b61f55cb35459504cb75409d4a87f76ccad92c6d0f44542585033

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\ksoftmgr.ini

Filesize
253B

MD5
591be3c5899f6118b5751d7750b17d6c

SHA1
9c866ea7277e6e9414644ccefeb110b359fc4cd6

SHA256
9dc9a5f2e596c7f08006fecaf23d466f91e776774e5c33f8f294b43cc39e24c3

SHA512
adc5914f2fdca7af5463c087eb072e79bcb65a4b0120f25acaff99ccf7d3063eca73dfcccf16dd3f77623847a632b58e98a3650ccec8ca4f5d9b78905de64114

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\ksoftmgr.ini

Filesize
307B

MD5
84a6f2342bf04bf7842a44d461ffe33d

SHA1
694cafad6af1ab5b2194e026e66aec078de1c70e

SHA256
80aabfaa0aaf7e831638e33cc9d11dd1dbfa6f8303902d82aab209cff7abb7f6

SHA512
df58e4a74d53b542f265e38bd5a3f1f522e6aff0de88192e6750fde0b0380e9e83482cfc16e146f9fa28ca3113612c6537449d3695c783216c1abeac3f988709

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\ksoftmgr.ini

Filesize
307B

MD5
0e744709b51ab6ab63d748c5ba2200e9

SHA1
92972b4a88a8108a5a10e9f8a333b84df8298a4f

SHA256
2be95f1493fcc0de62aab99d500a4fa021bd0752e4932830daae7ff390626d1e

SHA512
166fd3cf5ce1d564175e5f8affaef9aba0e133be0ce7dd51e9e71aede3fcf11d94d2aa5a3f2040657e27fdd8de100bc04b123edb5092311e851fa8f0869078b4

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\ksoftmgrun.dat

Filesize
3KB

MD5
a3b1711fe1805fbbea5d5f320cc91153

SHA1
ba62ecf537663cd07b0984983161f25bb1609e2d

SHA256
c6228a2c038b48fbb9654a6536b0c17c4fbd7c914e49af784b4e6ab09c9f84b5

SHA512
6b180ed94e4b26e709815e71ec8bb5b73705643b414983e1b0b24a5a74a5195a43a563317f790566a3e4f6895dee06c158223dffd70f7d33599134a4763aad70

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\kuefreq\kuefreq.dat

Filesize
314KB

MD5
d4d6945e0ba97fcb489e5cc5c22a8a5f

SHA1
f7ba84977bfa7b0611040281d76a24cf393cd125

SHA256
c5c41017be722808873434d03615b1ffafba76a3daf0b6347bb095f43a4edd34

SHA512
6fcb56fb390d112e5793ea8f47dc584d06e759b01a362038ac2e6f4c3c77bdc49bd8efc577cb2e30f770a353de18d2e2fa2856bb1ed6923215196be82b70006a

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\kuefreq\kuehead.dat

Filesize
208KB

MD5
24142ca7a7b6ccc4ec81b8c1d9268b63

SHA1
3c748264e2d13597a65ffa199b1ade03ef7b49ea

SHA256
517e2a492c352bf2bdcda4279203b76810522e10190a91ee77cbd94d6684df4c

SHA512
da335726d3307fa46138c110a9833e6382f4ad8a5047c18ac897c614dc87aaf8486f185b64b171b5a784c24544fd06515dcb30ad72eb16c43515e228e0d21425

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\pdfuser.dat

Filesize
41B

MD5
df316adb306934ba57e3464f5d867343

SHA1
c66277d328fc825cdaa77fe401073039f8d63205

SHA256
00aa92c45a471688061fa54abdbd0a3ed593fb8f4dc825ff76c34a138e84bd93

SHA512
1d9fc105c4393fd317430bbbcc5f3ce0aeb87f7397d70fd0a0f646e42b203248440e674c3627d901bea0212584b82fb96c15843ce7cbb34dfcd1bad4182d9b9e

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\popdata.ini

Filesize
39B

MD5
1bff0ffacf68c975f60920ba5e77e17c

SHA1
a14ea201b0b7ba7a64f0c9cc0b16f1a9c1d896ee

SHA256
c6cfc88b538950b257f8e761cbc7619c9ef592c028789b1ec5b0f877363251b6

SHA512
8689742fb1571d56404757872919abe7ae9b6481e2f31008c950a07eccd5397e8a90bac81826f7bdc3196a10da0575924e537c56b18af9b04d33ef92fb0b5ad0

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\prcycl_cfg.ini

Filesize
31B

MD5
7cbc85731220494230c8894f2b160892

SHA1
71c61d27c30b545c698730f7c1db5081882fd34e

SHA256
79bdded576888a95a09a8b176aae45a0380991a3b4064fff3875a4d39056e14b

SHA512
cd3ab2ed639783d5825b20deb0f47650d437dc265a60905870f18c70d593d01b2a1f8bb8a0233d40681b268e68e35f1ca18811a34726abdfb37fe5fb28f08ea4

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\rcmdlocal.dat

Filesize
109B

MD5
a68821c48f8a55d162f6e1d02732b66b

SHA1
a3126e94cc2125f0bc750e99acbca594d498e7ed

SHA256
5bc50f463e2f3f68f4c79bf4815be8f895058809365c6a8b4fb6017a21d88c22

SHA512
0e6972e8993683eafc572ff68ebbe7d94556e25ebbad9a0f4ae51fb38b6fca779908d7cb07f9813afc62f2f2cfb9768f69845c619ce3848cf6c7d698b54af118

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\rcmdlocal.dat

Filesize
223B

MD5
0c519fd193b2ab51b8d4ca10638d3da1

SHA1
e5d19cffd788b8910d57184e62c6f2c6d3a155dd

SHA256
49756038b32ef0894be054e82df85e3e529f0d8957ec5d1f32ff924d79c66b54

SHA512
39ee0886f7e0f4d050dbf57abe6d19363ba403cb35c8fc6f2fcfbfcdcb7508b0bc36c13d6d06021381b895902c8c3a0ee6ada9ef739452c05405f38639fb5ff1

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\rcmdlocal.dat

Filesize
249B

MD5
cd70a3457f55e339e78ab3e6ae2313e9

SHA1
821bf8a5b79fab14e29e69b8b3e3a8ea9231aea2

SHA256
12194ffe05d2403dce45fbe6c7452679153b0eb89a6f418e13771df3c625fe40

SHA512
2ea7ea75513c01b9955cde486679002a59bfc97b9fcdd5bb8444b573d5b037d669396b80edf127984798735dacb2a0206630c7e2a95bf0360a547f8297980bfb

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\softicon\index

Filesize
52B

MD5
c883b6f2f6a49386ccdae3738f598dce

SHA1
2c2f00068a260b2c9422b98705f438f3ea061496

SHA256
8f057a2ead6b580a9061fd12a618f7d1e66af96d26d82677160254a17b927ab5

SHA512
0a9642ae43304f1809c9dfc314d7a41cc58a52837a084183edf9957d1510d3ca6f159000cf4144cb700f5b9e41fae56466b18651889c19db230c12b47278c4ed

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\softicon\softicon32\05528c57037308d6ba50f6fe69baad0e

Filesize
485B

MD5
f097d6c94b4894885b10423e5bbea49e

SHA1
4cc0cd82614f798d14d9807d9aa6bbfb3f249674

SHA256
13280019d3936487c624e3c05a7bd2990f7a1c8a040fab2896d6a2c665a6acb5

SHA512
9fa9da746e423269312dc1a58b2e98a8e66c879af9c9a864a51979a7d4fc3532597273ff1b4b7528fdf39e7cc5bcd46677b6eb03ff638e2cd1d22f664f205885

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\softicon\softicon32\60047501.png

Filesize
2KB

MD5
a73d74b4e028192863d0c81be701b800

SHA1
723962e7b648ca36de5b9675aba2a2720e649763

SHA256
ef179d377d1eac82f905a07a0640fa31ff6f77b72a708a8838c05c2fd1aa2264

SHA512
32ba082ab73721e7b5ec8b5d22eb4afe78a9dd6fa23733fb3b569785e44954b815c4ed5358303ee566e2a257cd98ef66ff49b8f814447dc5aa850606af6a3def

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\softicon\softicon32\61000039.png

Filesize
332B

MD5
b69edc76bf0369e7da56edf2b6fdc42f

SHA1
ed78ea28fd4166aca9246c7bdb0cdf33aa4cc4a9

SHA256
ffa772ea01d9e8a08063fc22b2611d9d76ae44951d0f20041ad764d99684e05e

SHA512
83ba6c61544a9b7695765779db9f0850cfae229905b64b0284fcfdfc2eb2303bf3042d428e1b4de63df844dd172d8dca9bc2c5c643cebb22497b594c9235be53

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\softicon\softicon32\61000061.png

Filesize
2KB

MD5
37ef2a62fd5163c4780808f2b59082f8

SHA1
56f928ca5adac423f84f40a57905770ae540a307

SHA256
e6f4ce4eaaefe7c37706772656ea914db2057032a01b477eb98dcec227778b63

SHA512
d1ad9658c4c3d6988215c49c6c418634babd33ee253b15ac10b7f352b040bde7353c2c6eaea2f036ebf13ca8ac9933d37e069710d081ada560d638269a772dc8

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\softicon\softicon32\61000087.png

Filesize
1KB

MD5
e041f488ceac35aca21d0a2ad2b8237a

SHA1
a921ff6c4eccbd376055a004a5acca1f6451d837

SHA256
1a3ab3dc1922dc30a498fbe5126b289476fdb0bb24b3195a708731e18f7c6d4a

SHA512
6313146205ae33977df7fc50e9918f1f37170a8f3146a710aef1764b18548f3756ccc5905d963a1c752b474ca36156614e01e6dec818ce8414c281abeb174edb

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\softicon\softicon32\70000420.png

Filesize
1KB

MD5
806e0227af062f166da01c080e7c0dfc

SHA1
37a6ea3cfcd88cdea6b60f0aa07a1a48c1b38617

SHA256
3cc115c02d6b7bf30b04b99bb558a8b0683d93201bbc89ca52a05fef8c07ed8e

SHA512
632e1eb1f9ecb3bbf73ba931f20010fac12b7f47730f6121c92c2342d9a78a935f8e6c91bf8865d2079dcdb2d787f52dfa449a2bb6aa67eb6b0064962562972b

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\softicon\softicon32\70000705.png

Filesize
2KB

MD5
9155e12bef0a6893b7c6747b29c3fdb0

SHA1
e8c3f1dc565b4b5ffef5f49f15e491efe768db1a

SHA256
241ee3e3cd0ffd2c6cfb9a8e3d38614b05f2407d45cee773bc3e5ea8b61adaf7

SHA512
81d388653207a394f530f6313beeee6194f1bbd2aeaf087bbc41697ff356a77fe47d7e05e0a0b5e9ddd403947f2d8f1755951854a9d91a43347050305b5e5bc0

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\softicon\softicon32\70001055.png

Filesize
1KB

MD5
905c8a084da76fa95549d09a7e2e08ef

SHA1
f3b70ed11f2ba2604b6773428dda1cb07836f3ae

SHA256
6bd9dc3bea515d74dac2fa5760ac29440e76a12c213f63aa2d79a67e4381da2b

SHA512
c0b803cba05c928d13a24b5fc551815e62fdc28eeceec08c496b9ed9a41027b23badd7de8a98a9d28d4f4559f8ce2497953906fce79ce477fb8041af708c250a

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\softicon\softicon48\19c15340749ca358fdb92f46158db218

Filesize
5KB

MD5
aeaeb73ae95e931af89941fc3afb79c6

SHA1
527153477bca329a9138fded190491e5f8cd443b

SHA256
662cf2a3152baf8b08d107063bf5784800a4ee4612a63bbf88f76793a01edc43

SHA512
9aa2ce1d775efd3893f4384ef3f9be772db06cc071f523459da545abf379e2f480ef78579b873a9e97631ddbfed351f515e64b51d7772ba80695f3697829b9aa

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\softicon\softicon48\25a3102184128b20a39c86790aa9443a

Filesize
1KB

MD5
b2b0d7965e3716484152d682e0f83ad0

SHA1
1b06b55c2aa5983888defaa7317b0a9239aa43ae

SHA256
fc5ef4fac8d71e952c1e4572b3091eddc8ade201db2cf58bc03c1347089a3bb3

SHA512
ea851643d756eda1176375ff91b54b64255ced35047951635e02c1ff6d58b1437f91f76104d5c2e6c91da0b3e902df76bc963fbd8d8b26c114ecbb51d6db23b0

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\softicon\softicon48\2cca43177e295e1b99cd45103d7aaec9

Filesize
447B

MD5
9eed7ee718ac390ae76db85e41a57a3e

SHA1
d7b50618c5d51bcb57a26ed2e69532fc651d1b5a

SHA256
743696ba4e6adec09893a4d49233e724e91ec75e668d59f8ee31b24fca749c37

SHA512
4ab12d79e12f0b95e20f08be56255ed75c23598dc29fb5d5f813391bd0dcdc827d803f837a65f65dba6948564af9d1afff1bc1b0a5bd9f48d7673bffb80c425e

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\softicon\softicon48\509d8f2814d58674a22dbfa8ec77580c

Filesize
3KB

MD5
adbcd6d29b26f33cf40316e3174d0e63

SHA1
2e8e3b0d9df93c945ea16c47ce246fd7ba8fae2c

SHA256
1578f6129c3d7fc5e6332c1b0decd3db22d67bf9107039203f96cff1dbd00b8b

SHA512
5c526c9b3422e7a83d1c0b4ee851777d3bb3f952b618e224768e19bc7314a2b25536fc7efaa41c59d9c84e1a769037feabed24e1fc5efea6ee9d70343df9a02c

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\softicon\softicon48\87dee79bfd3b3433a30c7ac45d6e6ce2

Filesize
2KB

MD5
cf8e7ee868bd56d8b343f03161a58c48

SHA1
ad01b6b2f7c108514e4f6acaecd094b460a5e1ca

SHA256
285130aa81074dbdab44ad19e0d14210adf7e074c29eb59c0f0760e3094d2ccf

SHA512
8946b477167178207f567cb62d09a30b6d04bbedade85bc82054aad175cf3ba5c8e5a76021b15a35b69c56fe1dd69851d65c187384d0fe88c1f598703d41cd44

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\softmgr\software_reg_data.db

Filesize
5KB

MD5
5a8cc167c2a6831dec5ed390a2cf0a03

SHA1
e9c3248e9429d0f134696b4152ad94f3d880dfbf

SHA256
8e92adf9a3e82bb775991bc5d53969e08ea6f080c609250fa37a361f400828f5

SHA512
93cdabd9ff97e14218ebf21f111975727916881587a1238f7a63792827f6618acc1f1badff8640b5052b66b9a47c659b2e5c14a10fd9936eb920357faa934963

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\softmgr\software_reg_data.db

Filesize
11KB

MD5
cbb968dd90d842fa247afaaef78544f5

SHA1
c546b76e5c180995a614238ab42237149722ccea

SHA256
69411fb19cfc10e73f235be1605da67d0f5e07b911ebd670fcc84b2a1c2072ed

SHA512
f0d559cadf725d18e31418f040fac4770e79eb731926bc0f3e654b77a9faefffeff0957011b0ead2535f076b7b1e5234a6882beacc3549c0a700aa81dccea311

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\softmgr\software_reg_data.db

Filesize
11KB

MD5
cc771f34798857fc9f942d00f46d91a8

SHA1
961c45e5a58a88c57c19acd01f4d8c6fdde8740e

SHA256
c52c7f91bf4e28c35f7f2edea3529168331518d7ec84603b1d5c477e7bac1a0d

SHA512
fd2d3779d7489d830819221cc1ed46cb4244c128083c3a71a9a812816d160b45c4805e8670cf787c80a8ebefb03304718ee20398d0cc7a019989bc86dc755c6c

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\softmgr\software_reg_data.db

Filesize
12KB

MD5
826f4aee75e427eda1af8b82390c410d

SHA1
0d66791d2c528743c9f974f5439f0f8bdbf8e187

SHA256
14d306c565ca5e29cb248ab75cc94821964c403171625a86c6566da26e309faf

SHA512
dc2dd0b10c34ccac570ffd748418bbb6f7f73faaa2745c5a1fff605de6edb5b9ffabc406bc0fdb551d35dbfd19ae1cc72ca44e9bfa4d16826469bd7ebb5d8cc4

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\softmgr\software_reg_data.db

Filesize
16KB

MD5
5cb147b7c531df33ffbde7af4a0ec9a1

SHA1
3c8b24cc4372a08cd4246f62905e75dc2fe031d8

SHA256
90b91d74763668bde47c1ef0c43e319e7ffdfb289f8e6f4c1f3cfd7646128793

SHA512
dcaf1589111d6694d8761e6421d0dea314fb22d6b196ed3ddf7e446a744fb69e3611144bfcea401c66c23f1306ac10ae7e80714ca854d502a1f6203c8442bcbd

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\softmgr\software_reg_data.db

Filesize
16KB

MD5
555892a816a1ddfed85bbcb0ed030131

SHA1
a9c50314e66220ea342a65a0e2afcfb6fa6c08cf

SHA256
4f062abc2eaca8a164d3ec08cdaa21db1a143b355c124db53c12c1e468f5bf2a

SHA512
5d90fde589af7ab1ad1b4bbada15389e1745d0fab977d8d2f616fe4543c4fc019a8c9a7ec5071a39038fb1bd64a521a245df0cb044711872d7957a8bd2512488

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\softmgr\software_reg_data.db

Filesize
18KB

MD5
bc264c4651f62d474b844a7624ed5b7e

SHA1
da009e8dee5617c93b199f764cd2ab47303ec9ad

SHA256
442037fa1986041c797858ae4cc3a310226746fe0ffee674b764e7eb4a83cd7b

SHA512
547085fb07b0046f2ba92b9b7cb248dcec57167a428e2993784da53e10c8e59e8ca6b4d9167302fd405d97c6757869ad8da61990c6227c1a0bf81c535be3db56

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\softmgr\software_reg_data.db

Filesize
18KB

MD5
bc264c4651f62d474b844a7624ed5b7e

SHA1
da009e8dee5617c93b199f764cd2ab47303ec9ad

SHA256
442037fa1986041c797858ae4cc3a310226746fe0ffee674b764e7eb4a83cd7b

SHA512
547085fb07b0046f2ba92b9b7cb248dcec57167a428e2993784da53e10c8e59e8ca6b4d9167302fd405d97c6757869ad8da61990c6227c1a0bf81c535be3db56

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\softmgr\software_reg_data.db

Filesize
18KB

MD5
71d7b5435e127f9c47ef858572bb0dbc

SHA1
bd21889526609904f13848eaaef357f2dcc85e16

SHA256
838c3fdf3c4ac0d8e9f4396e8992c07154044aa9208eb58efd446e2f450caf87

SHA512
ffaa2e4f9c8d4c708b93629bc3d25919dd777429712f1d651499ca7a87e6a4ebf71abab42101f39597055a6c66701d74c000dd304ad55faecbc59ff35783ce04

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\softmgr\software_reg_data.db

Filesize
20KB

MD5
a245f0d63a7969485e07ca2cc789be79

SHA1
2af5dcd7fcc27d03fe7b05682804f2f1e2444fb9

SHA256
9a3585a747b16d2b74f41b3a1da7827c5c747f98f9a46b9f3273afc879951e3b

SHA512
a4f1dea86a0937352df9aeb42245932da9a0d91304fa7fdce00d1596d187a435adc48cc97285cde745be3c4d5232ef2a72c33a4a62853661c4fdb8c214d36fdc

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\softmgr\software_reg_data.db

Filesize
20KB

MD5
c1d28bc12c2cd322824ba28bae1c60ef

SHA1
2869c7c6f2506bcfb1fdc1ac0881c1dc0d0be8a8

SHA256
8c90198347db07b91d7d88369d7e8ed7c002d602c1b880427a2602b41acfa86d

SHA512
f756c942c457bccd8f31547eb4beea3f2cc2dfc27c317d21dbfef15cd4499d98b2128f50ba889217d1410d3cdcf4b455b7160c7de69c49ac905f706b8866c5fe

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\softmgr\software_reg_data.db

Filesize
23KB

MD5
a3fcdcf5fa2845af83e0baf22e130be9

SHA1
d07a8ac14250b2abc5c8f23419cfe771cf9b71f5

SHA256
031455ab0c9c6c5e6b0ff934548a9aac7286d05e5b6e2b09165c6bb677a95137

SHA512
484d81feaaa501b4ff9c51ad3b56c39acee42cdc180929debec988225614490e9ab164c1a82fd657a9af417014cf0ac5821748dddea78dd5b7ebb440abb49b63

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\softmgr\software_reg_data.db

Filesize
23KB

MD5
8a4a2d93d10082423046e381b2749c1e

SHA1
d8ad8f774eb8433f3f764bb2fd61a82fe15bf45f

SHA256
792cc57b6e4aab591252647b8e2c1f1e596ebc31dc80263848dc553b1c648c04

SHA512
20443a6960ab56130f467e0b6dc64752ebd672c59378215a623f7f119af87f4db68c430d7b8700ad8042349677d4d13d1dbffd85668ce425c50f288a35720aff

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\softmgr\software_reg_data.db

Filesize
23KB

MD5
23c545efea1db09cfe0a9aadd60c836a

SHA1
0fa38f64e25b0f6d797c138a36358e0b4797101f

SHA256
4e57e55c7f5c05e3bc8d69bda2c9948f50ea092da1e8cfe487611830c3798676

SHA512
0dc169100e5baf8db158265802d4edb9ceb97268e282469164f4f10416f784b3ade9049e5e0a23dc4f5595aab332a481b4f98cd56f5b94835f54816f61d4404b

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\softmgr\software_reg_data.db

Filesize
23KB

MD5
23c545efea1db09cfe0a9aadd60c836a

SHA1
0fa38f64e25b0f6d797c138a36358e0b4797101f

SHA256
4e57e55c7f5c05e3bc8d69bda2c9948f50ea092da1e8cfe487611830c3798676

SHA512
0dc169100e5baf8db158265802d4edb9ceb97268e282469164f4f10416f784b3ade9049e5e0a23dc4f5595aab332a481b4f98cd56f5b94835f54816f61d4404b

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\softmgr\software_reg_data.db

Filesize
27KB

MD5
d58beba67ff82c3f7c4461a1494f54d9

SHA1
e3ff517504e455c739a7603149956ff43cf20672

SHA256
edcb163804cf8bb185c31bde0a96b8f9d5084608426c3810e159675602e5a439

SHA512
cf12c46f3318a6c437ab5fff04c4c423dd97110ced54f459f7e9ab902eac57c727a73223a48b8de05461cfd47b9172ca7b08e53058929b93aa42cc0b0c23ca74

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\softmgr\software_reg_data.db

Filesize
29KB

MD5
ab597286f8d59a77586cda412a84d9c1

SHA1
2e393df411865f4bb85fc93aa4087e668f4e18b6

SHA256
6164d1600fc26f976785cbba870e6495ea997fe5b8455c4451485fb8ef420683

SHA512
633c6686c2e2ebd2e24866970be48efffbd7dc866e73bc23ba9ffdda584ae5b7e568e58a525f334de988ad32daef2469e3594811d92790f77203ed3a01956fc0

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\softmgr\software_reg_data.db

Filesize
31KB

MD5
2a265214d38d533dbc9ba1d48f8e79f3

SHA1
34c074fb70eb6f40d1dc56688b924569fd0165d7

SHA256
1c2576e9c17b74f0f996e79789bf7652bbc6673c217c396204580aeb98a182ee

SHA512
b844eb4c756665c914e162f43593365c9fd86a678bfd3b2a34e0eb008ae035e68c0fa1cef2ff17dc9d4fe0575e053e4efcb36e737914a6672e85645bb165ab8c

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\softmgr\software_reg_data.db

Filesize
32KB

MD5
b44de2d49fbe58c0a01e9d894bcefee3

SHA1
4a131f36e35bcf070c664a9256f3e72e3ff645bc

SHA256
093c6170952a07401cb10cf6f40c7c80ccecbd5982e6378446742f6b4deb21fe

SHA512
c6c40c9983f55c76080222237ed8aa9f06eb30ce11b28b8a86c875f1d4633777020bda2532c7ddfa1640a2dc01a2538c1b2d5ebc8d5d0e755a90f6756c6128d8

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\softmgr\software_reg_data.db

Filesize
34KB

MD5
f862170c12bd6f5ac5c1aa5864355455

SHA1
06f7f497c8c028cea88ba2f3542df4d568f0a3a8

SHA256
742980e6193c1391874f09b118714303578295f3d63f4bd5a555e6dd477c78a7

SHA512
30ca83cdf2d38684a9369b7f84cf6bdee8d304db77bdb6289ad2ef9fa00d899ba7fd5295d0259c7355dc3b483ff745edb0fc6ea46216393dc80aef49c8b564de

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\softmgr\software_reg_data.db

Filesize
38KB

MD5
dc26579f412693d6661d643b8ff38b0f

SHA1
22cf6c175a98b3d9d9d81581c1af5c26988e8e7a

SHA256
0e6a3898cc9f86d139435d3ed6c0ac18d4e883f395dafbcee8b8da6444c056f6

SHA512
d88a4ac38b4e24faa4225e854dab45161e81d35a8438de9aa0f9e888254016b4d53880adddf6014f83c1d990ca919f80c4af532eace1e54cd836232a3dac5e9d

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\softmgr\software_reg_data.db

Filesize
43KB

MD5
e193e371064759aaaf763c1aeb63107b

SHA1
859f0bd5fa9f2073e9625a94062c771d7a89a7a1

SHA256
0975793dc5c9b17acece2eb2ee7536cd046fa8a22cf3529b0aaeb19d3d5d7652

SHA512
1cb36d361ffb93629e022694ed8c8b37491edf0d286d58419861f64f8bb003e1c27c08213d45f8162e566938985ba0b3ed6f5a67c975e65600da32cc56c998b9

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\softmgr\software_reg_data.db

Filesize
51KB

MD5
c4a60a0cc12109bfacf358a1208d336c

SHA1
dff48538603d3e8ee9fe4c115f8ce346f6f437da

SHA256
03a271cc5851bbaa774f23351473a3c2738713c880ecc353853f198daa6bcea6

SHA512
db75b309a3a60946f0b81de90ff4c6392234d39f1db8a4f12aa0c4d17011ed8e821cbaf4f03c361942248391dfe6e5b44427bb46cf6f88abb7097bb27b0c886c

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\softmgr\software_reg_data.db

Filesize
51KB

MD5
a103324a920b144fd66881a5c6559267

SHA1
fcc716fcc330cd6b7b087844714a1cc4a7141438

SHA256
db1652da1ed611bb406816cc59f52cb57b8f8ca1b8421b52dde7c1a202089ad0

SHA512
c4be85ba11181fa2b66314145c38cd318d225d5e5e71095b97e0482a56d18df2abfaf53da2031a6227ba6a1b1027d416d0479157d81033b3ac94846a9db9acb4

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\softmgr\software_reg_data.db

Filesize
51KB

MD5
a103324a920b144fd66881a5c6559267

SHA1
fcc716fcc330cd6b7b087844714a1cc4a7141438

SHA256
db1652da1ed611bb406816cc59f52cb57b8f8ca1b8421b52dde7c1a202089ad0

SHA512
c4be85ba11181fa2b66314145c38cd318d225d5e5e71095b97e0482a56d18df2abfaf53da2031a6227ba6a1b1027d416d0479157d81033b3ac94846a9db9acb4

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\softmgr\software_reg_data.db

Filesize
61KB

MD5
c2eb6955ca1bfc9abac06f31b47fafb1

SHA1
9c6bddb0562334ac63d7421c8b2888aee3e20f45

SHA256
b9aa2d7a5c79beb04d78cb757ce1f5edd3caa78669f42b30bc6651dc5c3fa0c4

SHA512
56ed442e19b3039535f74a0f471930d081c31ad7ab54c0dba22a81d91010703158306b6ec5d2da016bd55e19fb71264061ec807993f2545861206278dc8e1690

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kadblock\kadblockcfg.ini

Filesize
69B

MD5
b62a8a310c4d88d06b6469edaf9edb78

SHA1
ee0106fb57240187141ee874bc6e8f7c5bd479c3

SHA256
536ad1032746f5125cb2e7cff99a42f0af1e96ed727c68e8024a2a6c224f7f7a

SHA512
5aa03cc9f0e76fa377b667e15e2203f559f25449b874d6ff974c318e9f490f03e67b2ba714dc62593c88bb2f98d87a0693d720158af58a74f542e630f53e352f

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kavlog2.exe

Filesize
641KB

MD5
181f72925c3c8041866a4b603d3aba0a

SHA1
1c7f7b515cd460176cc6f4561eb945a8e169c1d1

SHA256
9ca1d4d0e848d194d6a7392faad4b33158b5997db475048cf1359ea39559a06a

SHA512
810f78acd427df9306ba4c57c030270f0cdde66c006c5274f137d47f3ce0769191ebafd15b00d39785fe9b31273c354d277d86bc3fada49e0d16262f82599fa6

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kavmenu.dll

Filesize
1.8MB

MD5
0309130a40f38d2537af8767e1cebbd0

SHA1
2551d266afb6aaf7b18bdb0b4b92fde2442f14f1

SHA256
152c1a5381cb55c1f967cc26a9d87273b5180665d566b9da7c4ac7103c08155e

SHA512
d193a1fac73329ae6a6b68a9f8bc989acf172ca4bf51088231888540e186d0f74aa65d63b93fa8d3756384ea7089c48a39974d6fd1c5e4640437a86ee340e49d

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kcdpt\cache\taskfinish.xml

Filesize
15B

MD5
feca4fa3a262c130f39b4bdb79758505

SHA1
456264d74552dcd4af050ef9698a57bc843b35cc

SHA256
af5eee8d443f9bb1c65311e179123bd2c0352856148313414964ca2d9d4395c2

SHA512
79d70344e05d5fee3a555edae66b2c9a292c659aab45ff33267373eed62a7af8552256e2d72e2230646b7b2446e2067b42005f8ac6df57629f6fe146468c5c45

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kcdpt\canceled.ini

Filesize
160B

MD5
82362b2261a26c84555a1a3105c6a572

SHA1
a8aa04c7e5ca9d55fdfb4fb289433f99ef7c4978

SHA256
f181979e2bfeadb09a5866d8f1fea6f9924a99a18b99e0aa8ee3aa5eb8d0fe5e

SHA512
80fc07094477b8deff74ed3440a1e119710ecf763939d910d1bd6b99f42bb88877f183e1c2c489ac2d806ef686d213a4b6e0a6dd82f1885901d002e61c3d7991

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kcdpt\data\12\12451\kcmpp.dat

Filesize
448B

MD5
0e683b6bd0977270d7cc77feeac975ac

SHA1
68c4345af064f01ccaa702f240918646690695d1

SHA256
f18a9418661018b7e5fa934470a2108a9dcb8c31ab8d94abab705990684bd9f0

SHA512
d0384e58e0b65fc3aebd0a66686ebf9c5bc572d6030ab2710db20025682fb31a9f64c90a53d48f1edda5b80f5d0213578e478d347a1ee61d7362dc46df117387

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kcdpt\runrecord.ini

Filesize
48B

MD5
df0cd7458ac975da0bbff3761862df81

SHA1
3700a936014ff49679c20e2814fdc35924f99644

SHA256
f7082a7512ab026735755c1d920cf6f0b5b251855a7d56f98ac607706c18601e

SHA512
e729f0681f97a7b2d73f8d3e13fb178005670e7a3a62fa1dea765fa56134a19dca43ceeeb0d6cddbe7fb8279bd70431bcc6222f5c602533be86861bba0f4dc25

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\khwinfo.sys

Filesize
84KB

MD5
dd49083bdbf01aeb27e016b24f7a9def

SHA1
12f7d872cd9fdc6bb27faf0344e4096ee964ea85

SHA256
1da74199d24e406b5b725fc396b5256aeb246cc21556fe6898d7ae03c86f0155

SHA512
607bec12ce15c4237617ef5496faa30d028593caeb690d176d397e990d940fa4b05104e548da8e600f13f376f4f59978893524235dffb7320262e5d69d9051d3

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kislive.exe

Filesize
4.5MB

MD5
cb70f03e850b4c3f3a676c8550a1ebe9

SHA1
f70cf95246ba17ae9d5fbe525f73fa9cf5283c72

SHA256
2322e82b400e4745677292193d0b5c83d1499b43b5d6745a827572902a1f6bcf

SHA512
e8bd549699a74116c91e3d0121c14feda4a2c6d3e0558afe4788ee080c257a2cb747d17759bff07bba918cf9d0a8c3b1cee31d1bbac168ea945ec584b88e4165

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kislive.log

Filesize
14KB

MD5
b465065e381e9bc1aafb2b7521b60ddb

SHA1
05dd4032514dc97f7a522c3e51106254381b4dad

SHA256
572b4043508ea07b1ea98baedb4ddbe620f123b7439caa73bb29fd7efdf01f1b

SHA512
46d862f480cea9bdc43c7975722c6cdd14df457a3df4f4f2825aa895d33ede773873faab873d8a42c472ba17a6b233a5c94cb270d84dc067ec5c02b10624dea3

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kismain.exe

Filesize
566KB

MD5
f0a42e7792c39ca42b9de018316924fb

SHA1
91b2fe0229f01aa750d740b5d5cf00ef94fc3ffb

SHA256
908af03d74a454ee5e106ca166702009cf283f16ee5e2dc977341818ea321744

SHA512
62ffad8752def97b17b36c09791a17b7c74341d30bf3573353a398b2f2bd557335745660ee780d1e535f4a21a3fdd1c29df1ea51aaf1ddc500efdf64120cd2a4

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ksgmerge.dll

Filesize
366KB

MD5
c10eeaa1e89a548551897f7a74c5af39

SHA1
d33756a0bd89a1ee5659fd54766d6ca8b7e9c5dd

SHA256
3ac20aa01bf093c7620f947b572d468298082e26e0a1a9dd2bed4a029f47ffda

SHA512
e15bfd79c6ffdb03f9cb3bf625e60f302225dbe95304d7aabedf715a309145c3fc059f0811599e6de707dc4f88e9443f7d8009deab82b33516eaa7cc5a3ff5e1

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ksoftmgrproxy.exe

Filesize
112KB

MD5
672ef18ab1da9991ca630908955e08ec

SHA1
ea8239e5caa45a74e281eb6c450545fe71d3139c

SHA256
5beca4d72982e0c57083ebf282fbff018d97b9d8d88d2bbdf76b1ddb4ec5bf4a

SHA512
8b3a8b42f7410b8fa31b32368bed9542ab86df52649665966755b69a41f1f71ca79c738a5f17b1fad4724222b1938b01bdff5c2957426f84b9b0b19b805eb072

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\data\kxedataindex.dat

Filesize
38B

MD5
e611e071ec56b432439460b51da1a898

SHA1
2f0cd2a723145892ed14e6280143b655f109e8e0

SHA256
e66db4e328417f624aae40674a2e69e0b65d42615bf84001a9abec3f6bdc1b63

SHA512
b712735456e8eca388e40a9d55fd218c3d1e2486e2c1a863e244b0e9116555f2c201384e3573b3c1c883f088e9451b899335fb2246f260574ef0778d1f291478

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\data\security\kxescan\unknown.fsg

Filesize
549KB

MD5
c6bc6e12f5ddaa088f90933d59aa9b49

SHA1
d56f4872c32646fa68855fba79f2825ac6253fd7

SHA256
e232a77c2581496cb7f9ba04ad5998b93271b7e3968c283e387628fa84b9d4ac

SHA512
8eaed427cccc87e62b6bc8db7423c2c3ab72e5fcd61385e1dcfcff6a8c55feaf5d56ad51736facbc349e6cdfbbbcc239e0139fbcd19084238e9e3d193924e793

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\indexkav.datx

Filesize
384B

MD5
96e5f554d8782d86ff7276686afb43fd

SHA1
33beaec5070e68bdd0814d2247b27dc7e1944995

SHA256
8cef3d705ab9ebf39957d428a29e54aab93540dcf57cb3f6f1fba9f5adb862a3

SHA512
e8adb6e4355867a52ceaf7eb6debfbeadd4b45b70d54574c6c38d974984907dba3337002fdee95f624f20e1d89c1d3b23e995410dc5270f8701745487eed3520

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\data\calendar\huangli.db

Filesize
1.7MB

MD5
75f27321d14e868584bf4d1b9d984959

SHA1
5eab0ea43b701ff82b12c0f8b5b48909acd2c39b

SHA256
eb90601b9b0d3dd37badd6510464edc03642c98aa6bbcdfe1fa71d8f0e242def

SHA512
52d1677eb0b185521f7992c633df9aac30e7017b2692fc4f68fd1ccdeadd4b5bbfc62899db27d48a0b9ab28398cf850fea6841b5172f645f1150ab287fcf0cd1

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\data\calendar\kcalendarcfg.ini

Filesize
5KB

MD5
03b5057a586676407a32621ddbf39fd7

SHA1
06f0c9050cc99a3d34c5ab0c2aa34c185f74fd5f

SHA256
b5573e430216356939f4c24adf288600c2dfbe36ec3d00d3df233f2c2ccbc4b7

SHA512
5a0b445da2256ddcc03f1764c64d0374fb4ef30612a8867fb6604ec85531656c588b20dea6044599f5297cb7392573282f3e222184876e2868ee6bddf5c21e0e

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\data\fireeye.xml

Filesize
28KB

MD5
a3e63fa330e3d2fd549cb08056c92d4d

SHA1
a6eff4309186043dc57fd681029c3d3bb62c89a5

SHA256
ce3658fc6a59c39dafc845f9043e6292a8bba8608bed12ce21d368215c38b866

SHA512
8ff28e8e32d566b4d2af241ab1dec5c3093452de01710e508c69f20dc8cd3bee24af41090600d1e1b47cbdea57f6e2f928f7c9dd52c76831b87e909da2fc286d

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\data\img\kaccfavorite.ico

Filesize
197KB

MD5
0d3c053e5a402d580afa29b8073a4747

SHA1
7fbb701b3ab38e5373058c4bbe7ab83765f0eee3

SHA256
5c3863af40a510e0b44e1f54b4fcdd1f11d315ac7cb9c1d398b922299571852b

SHA512
46c192769cf95a8892bd3ec1789bb18a9bd9110b35457d945f6c072903f2dc2fe6c7b83e2e319959d503cac86ae4b5b54e2db9911fce6dbcbe9da5b7111d18fa

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\kaccfavorite.exe

Filesize
2.6MB

MD5
28ab5eb5986146f848c6efeddd7076ec

SHA1
a6bda093a349977176ec849c92efa73a0a5dccd7

SHA256
1b10ee02cb9a29c03d47826bcff0afd7cddda8ccb1297aa502baa0b7f61abe02

SHA512
5fb9a7f89783f1a69776401bce21f21fea6b3d6856501395fa2ec078b961c78cc709f02691bde4df2b1bb58522ad6a7286ef507d6d56a83e3137dd3a4fd7db3a

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\kaccfavoriteindex.dat

Filesize
61B

MD5
9a7be2b034b35b3f73df03ec2005ca35

SHA1
c13ca534255647ecb4e631ebea8b47f78113bd42

SHA256
1a9ce1f732608fa0cfd7472f73c2036676fa754b13e23644fec7b9302a8f0386

SHA512
989a8056f02f096b3445e48c7ab2440f2ea620748a6e3366e8c1be576820e2818bf22a1d83ba2afad95c06530ef56001909d9a33488e58dbe1f56784b3c37610

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\kcalendar.dll

Filesize
370KB

MD5
9bd7e0d899745fc123475d514499c8eb

SHA1
145802a92109382982024824d295ef38a2646711

SHA256
a12d6ed7e1ee59af87ea96d7e6198e501b5c0e81db8c108e37fe66a57e02487c

SHA512
69a426e9d6a5cf90fcd9dc43ac3241b226336f3e240a2dee7da45ade58c38b65d3a0ff61e77078f42950d032f7abcc4e1dc275a6e17bf15158f50cf6522afa47

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\kcalendar.exe

Filesize
2.1MB

MD5
a31f8ac88b054afc90c965a38700c85d

SHA1
57ce9b70dcee76d0f699133165046ba491333cb7

SHA256
212974276e526af93d544734981f4b7846da8b2715cd725a7a1e8545a68db0c4

SHA512
e1e1b67c74d5a3d4972660c28b2a703b5c1e564a723c24db7783b7ab4a15a24bb2e53a9ebf94a0dacbdbfbcb5bdfab08335e1c99b6a887137e9191091316d72a

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\kcalendar64.dll

Filesize
550KB

MD5
35ed56ce9df85e9efecaef1764a8d741

SHA1
37d8cb13982cb84577f39567ce4adf1b5ac89e18

SHA256
bf2013e56db6fbe7734ec92d67dbf4dbfdcd6b226701d217bb1f36c22a7f72d7

SHA512
104bc6f073f4cd38da049f3faded2bbeadcbd58f056efe63daebba7b01f22f8c2660ddc182cdc605fc07a2c2790d64e96080dd99ce6511384e96a660995fc15d

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\kcalendarindex.dat

Filesize
199B

MD5
ae3287970d6e52eb743d6a9e3f36b46c

SHA1
f6455a40dd6899cf767c4e71fc6cd538e91f3949

SHA256
4e052aade6d200d40ad6782341af5f8d35522208e48962bca4152b462a001a4e

SHA512
deba0d6737e300554ae6a9eeac841dc656a8e4cbb5ceba9be58aa68e4d9f4afaa18bc2d955c7807689598794f462f45e9090a1fd950fefe191096e096b39f131

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\kcalhost.dll

Filesize
142KB

MD5
511cb3c30b9688e39be4c8eca25d52a4

SHA1
c74d259329a0a100a589f90f63da35066376cffe

SHA256
fc459602139ce46779c86645f485e211d2ddb3b83536f1f1d87c2aba2a640fae

SHA512
4e4d0752cebec13a000a0356f68477839ad097a23703cb94731fc338a06c970060bad3dfe3598ea26748556b08fb6eaf6a6b5aa344fd355c498a069b1d8b7bd7

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\kcalloader.dll

Filesize
186KB

MD5
2ba1282440a830f1a965a15e50dc20c8

SHA1
a2cf2ea32adbe074ad0f2e847b762b8436de06c1

SHA256
b77531c0c6e1fe29bcc8ef7b982b31a895ac28a547bf838aaa38bc5a03f589f8

SHA512
b4f4eae349afb71f697a2f50d6513537cb5587a9f60bedba2c784f5a75efb3bc4082ffda8ae2358a8dc9e0d3b34c637e6610e364b9502fbec1dfa12f81fd0cae

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\kcalloader64.dll

Filesize
246KB

MD5
8d4f9256e7550df953d23265219f3736

SHA1
292f1d7e12b92ce3e644407b950f11621454e938

SHA256
c86fd835d1d439040d12acac1cddd11fabeefc5c9141f67497900172b2ca3cf5

SHA512
9fe6896e1fc645a4684f8a736d0c43ae2276b44d2daee2de93859989a8999b25e5d320933caef9b5047cc6431a87d0e48f95e27617ae706395e2c32e88d824c4

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\khackfix.ini

Filesize
2KB

MD5
47e0a2c6bfc955c8fae93cfd569f7ed4

SHA1
5a3e07351f3d5a69cccb25d5ef35bddcd1ebacca

SHA256
6c01414f220d3b622ea2ac40f8604107fa29b6958dc6e1e11982dc89a581d2a8

SHA512
3b95a7c31db9119979577f28b0d42a1d13bc0ec3f384581b4563c48ddcde31338146026d61517d27bdbd81e0500fed82a1cb6c962417904336c734867b528869

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\kscanindex.dat

Filesize
278B

MD5
f455a4fa5b71c4a915ec0f7d1943d992

SHA1
909f208bffb8b30294529cf529392a663c8bf720

SHA256
2be5c3257737ec8e755ba03e2bba907fe7f8be10ef5f2e40d64d60700bb2be68

SHA512
ca74b5e2091002173a9f3d676c8445b68e28f04eff08252fe111cbb6f64591470839a84afd443d0071465fb005dfa22e565d7a47b558d1734aba413102bf1675

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\ksd.nlb

Filesize
1.0MB

MD5
56883c10ab37503b06ce949e5eff6090

SHA1
9b3bf7316f87bb4c2508e9006b8d8d05c65693dd

SHA256
2e42681c22e4014f4d22adca24ea0b7d67de4d6c258e292220ab1e6da5fe6a3e

SHA512
8b38a9a3ede44c0e122b578738ec05c678744d6100306612e0c1c4ba5313a127c6de6f8e03f7942f4a78da0e8381a91957d558e81e4c98205021d37d3e4eed25

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\ksoftmgr.exe

Filesize
5.0MB

MD5
f9508e8a5992854d7df35a96dff0672d

SHA1
b56fb65a0837f335c916527a863a6a6403fe1506

SHA256
a82c5a6cd5ee4d0c5b9a7610df72db3af77b4e3c6b56bdd7fa98d2017178ae43

SHA512
ebe93fc366788273804a0264aa604da665567a4b6df541e3334dfbfd2f8732f27d92b4e907fde9a8635be7dada62945082936c02d4ca2ec2d0b41440741bb3d1

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\ksoftmgrengine.dll

Filesize
1.2MB

MD5
9ad9038ae746316c7f33a6e847b0f2db

SHA1
3c17bcf0a2884de0e5995eccd18021f61e955ef7

SHA256
a56988f392e134582f011659fc86d8c4f5a6bed88a9031ee2de10391a0a9b301

SHA512
2cc234d1a232539b8f94409d3c4077e152f0f07919ed0acd7120aebe8f2d8b1ebcc82c3484b3af691de8f9ce9bdbd1527d197fc482846e92ab5408ba68d580ae

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\ksoftmgrindex.dat

Filesize
424B

MD5
ae912ffaa86c998f26436793d6273408

SHA1
21c3dc6f4661393dff7cfbb79198c0dcba433970

SHA256
57b0a5957785f7d92cbaef27a762ea1179e35a80183633ad3a46e4b1f18bffc3

SHA512
d1b2d2c16037a09d526b5f17d6a251fddd24ec8d8449751f41f4b9d58a287e79f1c17c78edc09cba5baa36885e08f27cb50bb0dad1ebd19d4803fbaeb0f9367f

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\security\kxescan\data.fsg

Filesize
1.8MB

MD5
36f046a0841be77040a4a3e8361bd0c1

SHA1
0c974dd4c2cb7831cb9e0989b31090ba90421eb8

SHA256
165aba252c4d3a30956fa0794b9d877578391568d7452b92dab0b3b4f4c3a405

SHA512
7297d6bb6ae18baae26b8b79e48fe9afd0f75284d9744c340be9a57e372c8363d87aea705825843d67b8e936b1033b0ca4dc7b38f1f6d5792b5198ec48368d64

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\security\kxescan\kanthack.dll

Filesize
845KB

MD5
eda8da37ef986fe8586e0870eb056568

SHA1
e846185fdd25d8b19f12a9279e2620e0f980ce95

SHA256
1399c6ba0af3d8a5a38f9dc843666b7e1bd3c2fbf770b71dae34010c4c819ff0

SHA512
4c06e8513cb59a6b08523f6401d5a2047b3fc694e9aa2dd8d5ebb75c83ad6a41c7c9c6b338b16ccdb77c3e97ba29fa337c5cc50a9699ba01c976dcde6d977b09

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\security\kxescan\kdhacker.sys

Filesize
160KB

MD5
8e4b5938efdd97b05d3a6a6f79e089f8

SHA1
51484bf89c9d1ffe1c0a41b5cde489a3657dba23

SHA256
d17071c6054c10f2113bcd196b42fa8f41ca15cb566fd73a2c5adc80fd0d54b1

SHA512
86aa2d6798f72dfc26d91d5ce10415a9d8c1bac3cf9ef9f397b077e99c78d90b8cc25cb82e6076db33df200387a826f7ab612f8346239c0ff11184bea4dcdaeb

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\security\kxescan\kdhacker64.sys

Filesize
206KB

MD5
c804d76c7e713fb52c4dff5b91963f60

SHA1
5e340ec0b16a88fd5a512460b237de85a0378e68

SHA256
85f1772cdffdb0a0637ea40c75128a1589a8512502a09264fdeb98ca99359174

SHA512
54f5dedcf468f049fe6af016b2663f88d4fb1115ac95c4385af092569142250517ac6f4e17381b23d840436574d0a00469386ac69a5dd9a32dbca1de3bc6b0f4

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\security\kxescan\kdhacker64_ev.sys

Filesize
209KB

MD5
97bae4de0d8345d9136b96be1c2bc8d2

SHA1
ed38d792131268257b55b2240cd54833d65dae2d

SHA256
5c5e45078917376da280513e27e8bd9c7c6455d2d3f348ea2493656eb0d0dbfd

SHA512
47e8b25f84cda487126011ef7bb6fa16655d71f169d16ff10e86fe168ef30d2064f94b801e4cba7082376baec8b21f0e037f733eb86c2a65dcd0c040f6768b21

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\security\kxescan\kdhacker_ev.sys

Filesize
163KB

MD5
6bd477759b3c29250b7fbfdaee833671

SHA1
f1e463b57d3f07fd65aebadf61865a4732d9a067

SHA256
9040998e2f723a1a96d5233de87f8611c3d911a44e8d1144096c623e55929aee

SHA512
6ff9f9b95f25830cd5b91a342084011c87151b4e7946f7bb637eb69a2e7212637e7227f9d72b4e77a30a706b25b6c667d0e84096669a33e9bacd19b14476f9e1

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\security\kxescan\ksextfix.dll

Filesize
1.1MB

MD5
b614374aaeb180787b7f6b35b644b027

SHA1
66161ffba4d819865bc4b2137f31d201c74f06c5

SHA256
9382eff5e94320d6352feabe9eb2f86b0a26a094171a9151fdb2641a007a27cd

SHA512
562e8fe9ae67dc6e9a5efbb4c57227a4e737c3e16298f8005a5e36c8f2a50d234620e54c69dc48fce91f2b5bd4f2b77c1d8b70bb43556cd1207552d98bc318f6

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\security\kxescan\ksinst.dll

Filesize
337KB

MD5
0cd1672cb4f70e04b83430271e3dda79

SHA1
95b19cd16d38a8117620fea12e7641d0b016548c

SHA256
67f92a2f6061d7829a955cbe3d2f281ca3ea594f47c83f5563d3b13f0c0a7d3b

SHA512
6c1f0ba5dd7af9248e96a4637db7a5eb598fe8549970be0629fcd04b8382ba28f1121da605576071e4dae8aafce48aa9abef08b9efec8545835a01003ceaecfc

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\security\kxescan\ksolescanner.dll

Filesize
134KB

MD5
1c67e001f01983c2c80ae006328f8d73

SHA1
0ac0e3a282cc75b3850856be59fa03e5f8c439b1

SHA256
e555bf4984e82affcbf3c44c4df5f5e5e1aa5f22fffdfa277d016cc62d8ea1c8

SHA512
3b02dce3cf2e706e4d93a4f6b80abf178a1389b48f1036c38350b535150fd39fcc1c8cdfee3a96de7d04defa823fe049a9209af2572774b91cb2f1c4947de39b

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\security\kxescan\kusbscan.dll

Filesize
1.0MB

MD5
a33ef9fa11cbb6fc550551bb541ea7cf

SHA1
3cdda29332a6705b6ec362310e6d456e3e31e529

SHA256
ec2903db615fddf4278178854cd8147d042d3cee3540ea422baae503ffa46830

SHA512
5c3d1a436b5fa1d0e4c0fd21f0cfcac09d6fb18e9396d807100f9ac3fe00a7f4c1776ebf2949770719ece3687eac26e4e5affbf388dbc85d1a2090d391d92e34

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\xlmodule\download\dl_peer_id.dll

Filesize
89KB

MD5
dba9a19752b52943a0850a7e19ac600a

SHA1
3485ac30cd7340eccb0457bca37cf4a6dfda583d

SHA256
69a5e2a51094dc8f30788d63243b12a0eb2759a3f3c3a159b85fd422fc00ac26

SHA512
a42c1ec5594c6f6cae10524cdad1f9da2bdc407f46e685e56107de781b9bce8210a8cd1a53edacd61365d37a1c7ceba3b0891343cf2c31d258681e3bf85049d3

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\xlmodule\download\download_engine.dll

Filesize
3.3MB

MD5
e164d5cc3d566708caf1aa2c0e842347

SHA1
52346ebc204cedee1f1f45e36da46267fc081ac7

SHA256
3245995a4d7417a8dffff27f416f8c2f8ae15eb9d8a57a6cd371f366f2c9b808

SHA512
08a65b118b791f537ae0d445a484889e57a6ae955917de92de79feef3ba01c52147824b5cc3d298d3413cb2ff140535e51182a63c1e4bef97dde3c0025634e54

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\xlmodule\download\id.dat

Filesize
40B

MD5
0843102ba1b5adcc115c9096effdf581

SHA1
cfedf5c200e0519b574e32acc54d14d8596edc2c

SHA256
bf23607faf99ce7287ad0b0999bd8aa61831e572642acdee1caecc80055c031c

SHA512
74cdf11c1095f67210c28601f7298d805ff1118e72a83069155264eaa03b01640f326bcc14c6c16ff30ad270ca199d449921c39049bd7cef7ba69c8a508ca53e

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\xlmodule\download\minithunderplatform.exe

Filesize
262KB

MD5
9f1d3dfac55080c712c0281fb2eeeb47

SHA1
9109f9457f811d8d0e887469ffc9c2af793e8090

SHA256
a5622e2bf46cc2ec90c4dca70372f051bfb5bf55da3788b5dfca9429529d285b

SHA512
7e2df7f2aff2d95ca1dbe0dfb7c8c9388c7e8c023c8b9af9b6997140cefcca63fe5980a438b70da03ab6672c94033fb4e50d407c54530b5ce0b9169c39c50879

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\xlmodule\download\minizip.dll

Filesize
19KB

MD5
7fd4f79aca0b09fd3a60841a47ca96e7

SHA1
6a84b131399d207bf00605d33f938617b1a7c391

SHA256
fc10c877e2bcfab35758446a72a8db704d8e8455470d65a6de5492c10c8d6786

SHA512
d3933d77c61b6d38546ac9d38c7975f9575eb25ac8673da18d6707669676612ea0be0a673633ad703ec4fe9b30a37d63dd21f33ee782fa3cf984046e483069f7

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\xlmodule\download\msvcp71.dll

Filesize
492KB

MD5
a94dc60a90efd7a35c36d971e3ee7470

SHA1
f936f612bc779e4ba067f77514b68c329180a380

SHA256
6c483cbe349863c7dcf6f8cb7334e7d28c299e7d5aa063297ea2f62352f6bdd9

SHA512
ff6c41d56337cac074582002d60cbc57263a31480c67ee8999bc02fc473b331eefed93ee938718d297877cf48471c7512741b4aebc0636afc78991cdf6eddfab

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\xlmodule\download\msvcr71.dll

Filesize
340KB

MD5
ca2f560921b7b8be1cf555a5a18d54c3

SHA1
432dbcf54b6f1142058b413a9d52668a2bde011d

SHA256
c4d4339df314a27ff75a38967b7569d9962337b8d4cd4b0db3aba5ff72b2bfbb

SHA512
23e0bdd9458a5a8e0f9bbcb7f6ce4f87fcc9e47c1ee15f964c17ff9fe8d0f82dd3a0f90263daaf1ee87fad4a238aa0ee92a16b3e2c67f47c84d575768edba43e

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\xlmodule\download\xlbughandler.dll

Filesize
98KB

MD5
92154e720998acb6fa0f7bad63309470

SHA1
385817793b9f894ca3dd3bac20b269652df6cbc6

SHA256
1845df41da539bca264f59365bf7453b686b9098cc94cd0e2b9a20c74a561096

SHA512
37ba81f338af7de7ef2ac6bcf67b3aec96f9b748830ee3c0b152029871f7701e917b94a6b51acd7be6f8f02aea2b25f3b14ced1a218bf4868af04f5207bb5fff

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\xlmodule\download\xlbugreport.exe

Filesize
242KB

MD5
67c767470d0893c4a2e46be84c9afcbb

SHA1
00291089b13a93f82ee49a11156521f13ea605cd

SHA256
64f8d68cc1cfc5b9cc182df3becf704af93d0f1cc93ee59dbf682c75b6d4ffc0

SHA512
d5d3a96dec616b0ab0cd0586fa0cc5a10ba662e0d5e4de4d849ac62ca5d60ec133f54d109d1d130b5f99ae73e7abfb284ec7d5ba55dca1a4f354c6af73c00e35

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\xlmodule\download\xlzlib1.dll

Filesize
58KB

MD5
89f6488524eaa3e5a66c5f34f3b92405

SHA1
330f9f6da03ae96dfa77dd92aae9a294ead9c7f7

SHA256
bd29d2b1f930e4b660adf71606d1b9634188b7160a704a8d140cadafb46e1e56

SHA512
cfe72872c89c055d59d4de07a3a14cd84a7e0a12f166e018748b9674045b694793b6a08863e791be4f9095a34471fd6abe76828dc8c653be8c66923a5802b31e

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\xlmodule\xldl.dll

Filesize
282KB

MD5
69fa23f05b7200185eba28f8ee5c5d89

SHA1
247bc859c90175d94d397f96af896168516af861

SHA256
62a7dacc4f1614995c2121e308de94418768571b80b8cdf1f80a2b0050df2567

SHA512
a5b6c8852c0a06d84bde38e4b460df3a8df6c59ad00f0e5926af511af15e12b72e8c2de2695de32b630203ded7ae503c60ae5f567780f58d77dc8e0c16e2ec04

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_cmgamebox\cmgamebox\cmalarmsvc.exe

Filesize
116KB

MD5
be98e91c480874445bf8b05b2080dc51

SHA1
a247bee089aa0ea470a1bc70af852c789c8a0519

SHA256
5097b482d3e6cd9d39a279346d61d6e78050531e840a69e83095fbf199929320

SHA512
121d2bac390b06e7f6e184f265dd015e93b6d5fe90e1e034b27f6af40438a4ac7a96d78b36d2795e670de6f348f8368ab7511c0ca7e22c60118d8c6cb00b0e46

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_cmgamebox\cmgamebox\cmalarmsvcplugin.dll

Filesize
812KB

MD5
399b5211ca249e57eda27eb372f0feb5

SHA1
02df4a72dff4acb7a49d7b4655d77ad8fbd4f502

SHA256
7650b9c8d653d0c213027c449278db01ba0f0fed2e0e0f8031e94996cd1dc5d2

SHA512
2219c50ae456a9c0c669454df01616456fb8f766d3a3e881364ff86792071c0b56b2aeb71f13f2567500d571c6ecb8243d3c75144610b174bdd34e45ee739549

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_cmgamebox\cmgamebox\cmdownloader_fast.exe

Filesize
306KB

MD5
9e1aaab346063408ee7fbd40d566f616

SHA1
8d3fbc6b178b16e8493f15c4c0eb578e33040248

SHA256
ed1b403ac6e5d0219392d255beaf84ac45d4b9af4d42942305b8b289d11a1923

SHA512
97f99dc25065c078d97033ef38286e563f9a9dd6dbed4cb90816e8f28a67ed0077f791e588e40c4334c896e0813e2ac6549db40e10f95fb7b70de65599bfcf58

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_cmgamebox\cmgamebox\cmgamebox.exe

Filesize
8.3MB

MD5
78a1fcfac8328f37483428380c4f85dc

SHA1
ff1eda611f4cad1fe3f48d830ee3c48f6e552664

SHA256
2d4a4f10c7391fb49f45eea9c1208d95b9cca3079b7f92cc9b59d311967ec554

SHA512
d23137be796b9c4994e44b62f4825c7c4d1422f7c10e80065eacb8bd80500bf848d1b66d1304a74845473799c61530781c69a3a654610fd90cb98c607ad14666

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_cmgamebox\cmgamebox\cmlive.exe

Filesize
1.1MB

MD5
961ce20b9f617489531c3468d8617c83

SHA1
e42c1b9f995c68f03f95ebd553121e8d5d299a8b

SHA256
2385b2ce01dd92d6ee6c65c965beb65f02d35aef4b9666a2b83e4dba07a773d8

SHA512
e564c68f15f5e353764001abefbd297c50bac1c41fc535537f3ec62d28fdae95ae688c4d438e819c1571253616e6f5cbe2f1fd0fd728e361396a30c4e5226f56

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_cmgamebox\cmgamebox\config\phoenixcfg.xml

Filesize
182B

MD5
0960ead0f2fa3297be5cd6013744c1b0

SHA1
d745b4b9955ec37dc897a4516c9294a5bcec5fa4

SHA256
3d2bbb4c5f3d1e52dac5c169b38a2af1da92a7ccca8f7586c696b1625e80f720

SHA512
789a1a15f705f6ac5a0d40c093fdd00329e0db4a2801cccebf0f0392215cc074eac8fb9eb155d5ea003876fa806ded8d8b64e05cc3df71cfb14bcfaa50bb466f

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_cmgamebox\cmgamebox\data\speed_filter_game.dat

Filesize
277B

MD5
d0b256690b17d684c9fb71766209e50e

SHA1
2f9ca16cf4d00d6fe19225f245c83cf034d45f17

SHA256
4e037f0beded941b8a09f6eefaac639756db8f8645d4ea050c6720bab2b47d97

SHA512
08668b8afe5018997cf8791b2ebd862b4a2598ba746ffc7e753003dd692ebfee9c156d452336a19e62aed4fdad1aa9dd838b32cdfd070c3de901355c9f487299

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_cmgamebox\cmgamebox\data\uninst.ico

Filesize
100KB

MD5
cb1e2d0085d6b51f0b5eeb9ba768f801

SHA1
6c0f7b2f04b786442cabaa5a981c45212f24fe84

SHA256
f0c6d4bba9ce4b203d42157947a399017fdf945dbacd25ab3a974e347efff066

SHA512
134b35350ba2fe7161bb2606eceeab9fff08f17848704529c51c42e932cda60a827800729b2626c4487d7b4833efde80134adccc7dc4b480b39ff024d62f9889

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_cmgamebox\cmgamebox\html\error.html

Filesize
805B

MD5
881168174cf89eee3af1aac3ab9d0c4b

SHA1
97e9d9e5524cf14919c57fc311ed54a2381d6198

SHA256
096dc86f415f5a4ac2d02ca6ea059bbb98169875db60f0134653bd3f26aef27f

SHA512
af036cee84fe7cd2b787e19241543d06afd9e4efea3bfb4435bbced675ba64e5dd9926fcb9cb36f36b5d48157ed5d156db2f8749dce88e4d73b805656dbc1df7

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_cmgamebox\cmgamebox\html\images\bg_03.png

Filesize
44KB

MD5
7289d7af0b5c1fb202923aa277ac2f6c

SHA1
5f16238a34a594d41b29796e3e2c66ed65e407e7

SHA256
144a5d31daddfcf3a0b27ebb0b34ca88e76958b42dc678cb50952de46f053a7c

SHA512
3bb5248079dd95b4e6b71d24ae1d5febdf7d090e4708d744675438eb9d19e577e43399b8ddb413b0a2b8002228e28ff6a6af34932f380eeca8721ca7af758c15

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_cmgamebox\cmgamebox\html\images\bg_04.png

Filesize
30KB

MD5
0511572cffa1132044c15e402b276f04

SHA1
86f715136136d956edbe574ec6e993a7112f94dc

SHA256
49329ce3a2ac679352d0ca70bf0cd9a89e9a7a1c801f528ef8e91c560dbbac07

SHA512
43f7f7b49443012b5fc26839a4c7ce042b51b6c4d5238a54e0513b3a4d9662b59305280a9513ba95d13630758bd35ae3d3d162f04a53e2960e7abfe841267b74

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_cmgamebox\cmgamebox\html\index.html

Filesize
637B

MD5
a1e3306e76357a4f5ca10266b37ae298

SHA1
47ad5993e0270c0d825cad1a0432005c389a4d15

SHA256
f98c968a1e633b7ecb2bd037e58a50996dd37bc011943570048b799986684b41

SHA512
9b489d6b9d059cf5e81154422f9626e34a7b9f8601911b53b5b46cd011b29967181de931b90dea0f1b8a7aa9ceb31f3f76cc2ee2b227c9bc1f1fbc9d4875a664

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_cmgamebox\cmgamebox\installer\uninst.exe

Filesize
9.1MB

MD5
b9a1674205947467a3d6f4e19ea15549

SHA1
7da3b01bbdc6c2b50f785fd384c0f040bd84c752

SHA256
f9a49d144cc1196bb5bd61b1ec13cd60df634c026a034169dfa5d03129d52feb

SHA512
113360d4748ec3d59c05075c75b5d02b670ab3aaa121bdbe63a4121f20dcebff941e034d961d43f1b3647b0e6d962ac54108cc14fea56865c84936bde522d6d5

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_cmgamebox\cmgamebox\kdump.dll

Filesize
266KB

MD5
c26263ea7526ebb3455f2bf22e44bb7d

SHA1
0ac9dacdbd4345b341dcb01b34619a27854de8e7

SHA256
f0e90d633cd848a8f11788902850bd90caf40d92b22b0baacf6f9b5cfdc4287d

SHA512
52d783db44a83d019656c4b53c075c99c5c4cfae1c0866a2e3e4332180fcfdd6f6a33170142c6e879b0a3a6e64e916582e0260fbb88ef907927beae073f65ed8

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_cmgamebox\cmgamebox\kdumpcfg.dat

Filesize
173B

MD5
e64f6bc643eb142c9b580945db54be97

SHA1
4e54509bb8ccbd87a2424624ee17a768ef900724

SHA256
2e2d7c281637a946394efe166f10e17ba4490a4b68c9b8f07bc9388e02c6e10e

SHA512
cd8124989c665e528887b41b64ad194892d01abba8b640973e57c0525749fd8e95cab58bf57a5a9da8fd8b837f44381279d8f826ed20f8a054ef88027e5087eb

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_cmgamebox\cmgamebox\kdumprep.exe

Filesize
246KB

MD5
43f98fb3fae6ba16452f42de2d958e6f

SHA1
e5bb37f0b3f9cf25dfa4e00dcb2522c3b4cc1c13

SHA256
2a13d9bd289a66743b5e6ba9bdd46c3ae94bb374a9c64fe5bdced6fa3b69a49b

SHA512
6357c49de1bc5b7d13ea83a5c62d7c2f5bd79aeeb2d3da3106d1722196df897362a639da131a9302a426b9fe46efba9bf02109e86cd069bc1f9a5405656649c6

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_cmgamebox\cmgamebox\kdumprepn.exe.z

Filesize
218KB

MD5
1acbb6a455d4c548d2ed292455951063

SHA1
203198bd3bdc0064fe09fa3286602aaa2392c33c

SHA256
186652b58fd1252c9a07f7299e50346238e68e99fcb39d4c2e311199bda7ed6a

SHA512
e8ec51518208b0c1f6aa56536876a42e3efb656c426ef3f45250dbd1bf0b5131b7fb5082f01b8eaff7a82e32071e1307e25074940f6d69174c1cea30d4292c3f

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_cmgamebox\cmgamebox\kkeysprite.dll

Filesize
98KB

MD5
8c622b80ec9afeab918d682ab37d1289

SHA1
08a09d19faacefb5d720a1b380f817db544c93e9

SHA256
f139bf656e52bd217ccb717b84a08fa99096ae507bbddf99327fe297cc9b003a

SHA512
ec9c0d3e06a479b44afd3a05f26c7a1ea4cbb88396573177bcfe16881af39064fcf7346c431e28587698125215f1d672bb0b757271796a20e5ffab57e1121ef3

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_cmgamebox\cmgamebox\krecommend.exe

Filesize
3.2MB

MD5
f36341cb4d3b9ffaaa07366f30f09404

SHA1
fae785c0b463ce2a476a847ac0b1ab399972cf68

SHA256
730cb926471245ff09c649f653d9d1ae9f857fc40efc3be59ca5ab0741131fa0

SHA512
030a16e182073a5c8f86b8464768d950000fed984ab555d5f4b744b9641167fb1cb3c418f5bf2c10db3e61543cd8f37447a362dfbcd7358284ca1660568413be

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_cmgamebox\cmgamebox\license.txt

Filesize
1KB

MD5
6e41b975194786c6b19d598b71f2d1c7

SHA1
8b882d288ca246b65c91647f4761f924385fa0f5

SHA256
494fbb89f018c80e7b69b0c01ac6d66a117a4b619cd40e8d7265ac31ff8e2b68

SHA512
9ccb6b696da593f68d569dfb99f02307a5c57f0b3eb03bc790e9494a01ff249a089d3ce40907bd86baa97cb5c8e2bfa8b55c7c5bb2340ed63b4753128a70545c

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_cmgamebox\cmgamebox\microsoft.vc80.crt.manifest.z

Filesize
580B

MD5
b31f7dd345cb395de727db86c068fe7e

SHA1
0a36c47f41c2bdbecec4c8801cb9145f2d73d9df

SHA256
a2b687fa338f4d9acc673f35a8105e91a6e1b38f2cede0376f9bc9af56da76f9

SHA512
048bb227b207044d835735af921e086c2cf8232709d49aa92d4b467b94dd380c03f58b8571d23e79687c30c89f6f749a4571b43ac2332e7b73e094fcb921580b

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_cmgamebox\cmgamebox\microsoft.vc80.mfc.manifest.z

Filesize
513B

MD5
dd85ea6dd9a8af853baabac6d6524a8f

SHA1
3b4c970806a5b7dd2b998ae48030a79884e48ca2

SHA256
28bddff15b951ad6a255c04c2f2600010ae7ebbbb6ef37869629d5d1072e4c95

SHA512
1ef8f86e206fe062c57c20cfdbc1487450264fd32c830aa43c001b29494a25657b2a6fa790e91b99629734f1559d06d6c5b80bfa7d0e589778d1963fe5c41f2c

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_cmgamebox\cmgamebox\msvcp80.dll.z

Filesize
144KB

MD5
1e711815ff036fd3903512b98c8faee4

SHA1
15335c92957606f8df82bb7dd2b1f29c594cdf95

SHA256
c76e4aef6338452c95f4218b801cf72f96dca8833d91301ce99d0b1e8ed75078

SHA512
25a8b189fa2853eaa1836cad7e03fafff26d2934f96b227d1e8c3f8dc726038aa0d87c5867e2487f978da1687a175b001ac3362a5355a8b8cc1e70953e464fce

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_cmgamebox\cmgamebox\msvcr80.dll.z

Filesize
310KB

MD5
ab6f4588545d4c9d818182a25b7faa53

SHA1
a6b07b49266801258bbfc5211f99d2908decf879

SHA256
9724645de7528f04edbd29d4a7cd3128cfa4e30ba5f9b7f3c74a843a924916c7

SHA512
7193a61732df4f898e908a37ef4eab377b95bf18672826f0d6a5acb7666902fbdf4581054a22149fc4d01eb366bac8eeb6183d5117787cdf1f4ad94d20dd90bc

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_cmgamebox\cmgamebox\phoenix.exe

Filesize
972KB

MD5
a56d844f38642e4d4d447d1833fb7a9e

SHA1
597b8234d865b3d92c15487e4e70e78aea9edf02

SHA256
d9637fe18c465703d581aa2bcfe914747095bba1aee1b1597c848d7d44b2d06f

SHA512
2bec4348eb741ee934ef1dbd718048fa0b4c7e4edb064af8eeb10ef91482c738c92cf1a5707d3c68b63ee89d9f3b77b2157725001c8bf3c28c32d60591108aa8

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_cmgamebox\cmgamebox\ressrc\chs\upcfg.dat

Filesize
40B

MD5
3239f834c5499d4b6050c6ed81a0d3c6

SHA1
9aecd56c83d1d3e05d8178711cd21c1006d682a9

SHA256
96e508ff8ea1abce706ab371629bd98a2db09f47d0d8de9c9b9c3bbb2cb87166

SHA512
805b700ba8a8c35bac59963e61a6467a8ad46a732775400815c59b38e00f67aac05afda8cf5cff200502a6c1d9ca00d799fa82e814f4d5297ff86e2505c78198

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_cmgamebox\cmgamebox\ressrc\chs\uplive.svr

Filesize
39B

MD5
335caa3d0862d82462a3588a6a8516c8

SHA1
f745352c04cc9d9309d5c0e0b05a91ae1c779333

SHA256
c19ee4ea0eec853da64fba9405d1f6026cae1599cfb04bcdda3195a6e513bd38

SHA512
9d1edf9891bb7e09557c7227cfefad96f862f2c7c5a92d6fa897826c9d35f9c9e62bd09a449f8522bded120d0f440c07691a59c04ffef3b82b0d72c698c2df7a

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_cmgamebox\cmgamebox\soui-sys-resource.dll

Filesize
107KB

MD5
702feceb0ad007fd21ac845836dd1d09

SHA1
856894bf4c2e0b7ba81042d7b55209e3d5757ca0

SHA256
9a994c1fdf08dfe59993927392690faf108c977e9d01b7f72c88576e3f3dc0eb

SHA512
2169a69831e886c2aa3a17cf00e41d14284783b00ec10bf3c695868a282b5cf3f5de705a050fbf2c1ded55d666e1788bec05dd4f84551193cc453dddfb063c10

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_cmgamebox\cmgamebox\themes\1.png

Filesize
49KB

MD5
768cab5cebf9d446ff6357a8973d5170

SHA1
077c42981aad06fa4f1cbd2c41daade964d25dce

SHA256
94b4b474f830ba1c11a1cf79efbe9c3b99d8ab1fb67acc73a098a049e688e1a9

SHA512
f9281fcd2b937bd4efa73c9970938b625aedab093f8c1b921f2b73b67fea0f5fdea241857336f3a6f0f87fb3be625823012cc24bb881dd02934f50cd35beea7a

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_cmgamebox\cmgamebox\themes\2.png

Filesize
26KB

MD5
b98a7791bce2df2fafade9d0b81ebce3

SHA1
4f885263f9b3bbcbcded01dcaa0b4f12911ec70f

SHA256
a091eb77aed4ed3d88209a71b68b4b38ca07b40130f38321df7ea960dfbacb06

SHA512
1dfd656d4ffab5b95e0d1f7a0db6a8d7b0c72e83e7dcd0ed8d09ff6593c9636605d9495d7b16971eb5b867f2d486b7344881bfbd895e260a2d8d52a3e9c8f7a1

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_cmgamebox\cmgamebox\themes\3.png

Filesize
13KB

MD5
94b3800b7ea7dad6b03f078e6108c4c2

SHA1
43cfc3dcef2fa9bc946d7d85519f7fcdd1b52d7f

SHA256
18995a56ddbb5bcd831a39b712aac474c06376af336c53549eb63598aa43e636

SHA512
79183919b40fb977977265dfd1d11ef68d94301fed16865bb7a75ccbeaddda20b2d4e11926537b070e5bdb6ea7a4ba52933cac4c2767fac5080b78bf4fb7e11a

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_cmgamebox\cmgamebox\themes\4.png

Filesize
34KB

MD5
3949ff028ff5e805e702173793b54ede

SHA1
cb684799dd68f204c434f8d8fdfcc2215c3aa863

SHA256
27c0172a01790efccb9cdf80325a4355805602f41a142570e36b945a2bd64a25

SHA512
45c275ba6e672f5c88873d1ec19e37dcbfef01c49eba36734af2eac087fb69614d6e5693f477b7e99bcfe373e9be04d344e3a6057175b2c5c1be4079b3634b59

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_cmgamebox\cmgamebox\themes\5.png

Filesize
49KB

MD5
bb503125c5462dbcbdd564b9a728b910

SHA1
9f0fe6dc213c369b0b210c1949988680b70b473a

SHA256
b79cc2323412d153c9da18cd38af34b305db27daf67133679e0a72f71205529f

SHA512
37137489dc7478b88897b5ce3f6acda0d61712a363972913605877515183eff1eaf14da7d2a650a575837876afe704b4fc1cb68e3e167d470286f851e7a4943c

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_cmgamebox\cmgamebox\themes\skin_config.xml

Filesize
122B

MD5
bd03a9319bba705fce12057f91343f70

SHA1
763cf0b6cb880c49fb82fd3cc86ef0fa150bc409

SHA256
390ae5a7cdb221be555411a47b86d745b2a0a829d7d084b2883ae38da81c6454

SHA512
ec7227ab5dcd7ddb76b1a66d663770fc1e61b4d0538c24a284c3cb0979adb44856e377c31e1c7f3c66233cbe9f5d9a0aa52dcf77dfe71ca46f9505ab56d8c636

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_commonfast\data\calendar\holiday.xml

Filesize
57KB

MD5
51859c2e3d88694282de21058450a235

SHA1
3c5e94b417bcbaa68e56076a503013265ca1e816

SHA256
7ac43af376b41cdc2a1cd85288e13a6400af93b1ebcecebf1329aa4e44f323d6

SHA512
3a7b7938ebb8fa2fc55216aa6144b2454ee5e9179d69466ba93e73a9fec06f49c953904fc956645368520df31fc0da70da759dcdb4bd5552e4270b7af8491453

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\data\catconfig.json

Filesize
2KB

MD5
a37f2831aaebd53dd4f0a7cfddbae5ef

SHA1
bfca65fe7492488032b3365efdd600810ef7393f

SHA256
ee2017fd5c5d6cce66d677d2ac3065480bfeb40633dd36a3791e5c5736b86776

SHA512
beea80ee9589fbec7ca73bf2520d1fd94a89ffa0e6436359a23ddda075325a120ea7a0038f560dfba29fba8482ee975afafaa8a4c005a147ae96c077f0785b9e

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\data\config.dat

Filesize
1KB

MD5
e4c5f09962669694b5f33f2adcc3ecfd

SHA1
605f9c599849701199d03d50993f2d5b0c175b9b

SHA256
511bde0fd17efd5472a8015f1e13075eee1c88e7778232f0e423c937b2aa4ac5

SHA512
e8e7e3e0b53abee3fbb16b0d16690d4a07662ada64c9b46072e5fbb3d46fcf37130c81da0fee1756c7f0e970ad7eeaea044d5f689fe93da55b78894d7294c39b

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\data\cookieccfg.ini

Filesize
200B

MD5
109ae32ef5314a3aad71a3ecfa6cc9c4

SHA1
c1d9a9c3d5ad487dde660ec7e20df716433d3b4d

SHA256
bb85c58d1f4d1abd8466dbaccbf8960a162283a40b5ae4d111faf29d8f0d4d1b

SHA512
6d982cb02181676cb65199d64594ed18d209c37e90dee75b1f5cada091917478b945847e8f69d5ee2e20b54f32ffaacdcf04d43b53737724e669255aeecce8b2

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\data\healthbaseinfo.dat

Filesize
2KB

MD5
4750a803dcc076463d8efce73cc83670

SHA1
321da10ac05638be7ffe8681c390a367c8c75385

SHA256
d2c7b5818a6fff7c7c75af7da7c401d4542f617b2e40a06bb537045174a8dde3

SHA512
6b584dab876d06301e91de656e68b2e36f1fd83f825eb1733ae23c822c7202d9b8a2c75125cc35e1431a9cf3038ec8c7ca0c3341894c971ed90a340cdbed30ae

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\data\healthctrlcfg.dat

Filesize
5KB

MD5
a6d4ae85b19f4fc73d400026380d8023

SHA1
5236e85098428677ab583fbfb05661944efcc9e4

SHA256
eff29822784bae0abb3334f12759b2df431ace371b42f8a56fad4159ba0639ae

SHA512
012a638f019ff0203389d2ed406c75ab0833b1669513b8bcfdc88c6210bf03649fdb61c68d7e37e22701cdcd3a60503c2d6d46fb263576dfccfd21255584db13

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\data\healthctrlwallpaper.dat

Filesize
6KB

MD5
f41714ffe8ed909828047c965dcef786

SHA1
f6d11fb0291837441fa336474b7af3f3c5bff37d

SHA256
abe82f6d4ecfb57e09216ef2c8b3a9afcbe550234d67cf8831be4504b01ef568

SHA512
4889038f3ab5cf613c19c4219b9491177dbae8f8f29b93a75181d887dfaa6b5db51a8aaa43e253577fd0736911517ecbf3bf358473cc96b31f2780202d43a4e9

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\data\healthminiappinfo.dat

Filesize
1KB

MD5
d24e2e354ee2fe39e25b971c91cad466

SHA1
12da15cc49194bde943367ae0a95bdfebb096803

SHA256
5bf7246e1da7d68ff333bda00c1ed89d8fced85527c886b0457415bbad0e86bc

SHA512
0f797fac22badab5502d25d2752f5497d9cf745b577f1fd80b1f8ac84f7456d485a851410f21001f1e1ff1c94f81e8186801545ea756a212eef2129d87c293c2

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\data\healthreadbookinfo.dat

Filesize
1KB

MD5
eba30250456bbb017f3684e88346e878

SHA1
83f39d98eff265bd988eb1e100249c09e28143c4

SHA256
2791703abc0d9eda4844fefa18b7c89a417a6e6ba4139b13f690efdab6b29e76

SHA512
943f9bd0f4bfd42882b4b1a0325da81190c2d3688be9571c96d19dd7317bd39bc3e4a0273f951d8b6d02f2fad824ad02a08e71d3bf2802903d78beb2be3f0fef

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\data\healthwallpaperinfo.dat

Filesize
891B

MD5
a64dbbfc48915f165d0bbf0868709410

SHA1
aabd7b06adebb2a02fbfb831298ba79e6d78e8b7

SHA256
53c6795f6c966be8f80f82ca73a442de7d199fcc6b3e8d3540e5a4d52d339158

SHA512
1951f727ed0e4f8ea18d6a1fdd6b0db13891e6a1ec8d7124060cc426256ebde0355233b7f270d0b3c8ad4dc72186b4597b6235e04e80aee04f0ff62ffbbc3e90

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\data\icon\e19ec282af370fd0aa9e130a869af043.png

Filesize
1KB

MD5
e19ec282af370fd0aa9e130a869af043

SHA1
e90ece49de54d8a429b0d72ddcc6cb50998edab4

SHA256
3be1eb76842a9ad44d1f99eb02cabc35a44a12579b48c03493a2288440fe96c6

SHA512
03a9137de0d3fa50dbbd5a9c4a0c18e4c3cced6e07f995c8248858ba68fc9c3bad79af5eaa051436c29e43e1ae02e24261df60670c6074fb319b0b52ab618a88

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\data\khealthfastpiccfg.dat

Filesize
40B

MD5
12f13867fd427282184df48a51ee13df

SHA1
63c34fb8d50df752852b5c497f9f584906e482da

SHA256
75a23ffc9fb643d1138f17b29615577137b10ef8c7d62c507d9b0fddda932fb0

SHA512
7ca42638e8483b89f8485715b32939f01fdd2a5983344cc55df7db6f0e450aeac472ed99dd0f77952e67f3d5603cca6d7148db12f31aba2f31cba5429defa18d

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\data\open_url_tool_cfg.xml

Filesize
1KB

MD5
5c7a822dc6a8e978799bc43d6a5bc609

SHA1
d5c0ec1a1e66d73d3e9b7f8136a534954de84004

SHA256
7bd556be90353fef9af8aba8d53b1519ea7e438ae9e773736b4a8633a39667eb

SHA512
64ebf06e9d8ffcd78daabcd64c31137fe60ce0fb46dfdfde38b73da5c57ac53907faaacdc0f59e3207e4e9b5917d95fc2fc265c61a786eb935760292345da79b

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\data\popup\4f8de7323566a1204da40d40695dcd32.png

Filesize
8KB

MD5
4f8de7323566a1204da40d40695dcd32

SHA1
66fe68f8c3017f267d309712d1957b18034da121

SHA256
1792c78663fc5c1c528436d8cd80eed2f055f853f96b3bf4c3df176ac4b7ac80

SHA512
2462aa6a4f37aba9077b2700e906376bd594ffe1dac764901d31032250edb4e6c2536b51d7d4818abcd881a6bd38a93accd0e68e3200fb5f0da22672ed6286de

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\data\popup\acdd67bbdeae4300c8106cb8beeb03e6.png

Filesize
6KB

MD5
acdd67bbdeae4300c8106cb8beeb03e6

SHA1
6cd9e624dea9160933bbc054351c415c4fd32096

SHA256
1d030e0282ebdeafa5ee4c20b723037275907b09f0dc0bb87bb30067a6fa4909

SHA512
dab6e07bd5f14aad36cbdaa2819e07fa1f4a127a381b8d84ff467d02e0ef48eab1df4e8c4adc11425faf70bb4ede5f3898012584d8e0daf9e2e2a96c26fb201a

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\data\popup\e57ac4487de2ddc6f95fa4253fd1f777.png

Filesize
6KB

MD5
e57ac4487de2ddc6f95fa4253fd1f777

SHA1
1c727882277d79013db6c1f3e3a73d15fcd92c53

SHA256
f708b9e8f36e6e3df4bc0db5510c23edf62b48de863c891a54cd3c8abf98008d

SHA512
d265aff89928ab1780bc3a8c4369417dfbbca222444297f4ca9de2c1112f3720a781d29c9b4a9d329dd3928c000c41d62bff0f26e42b0fea76f2d25b54c2f5c4

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\feedback.exe

Filesize
483KB

MD5
042d0a929244a3370a4a2ee4cb849ea4

SHA1
73f15e91c11585dd74913f855f81898fce32da59

SHA256
9845bb2d855aa76a97b0a1c80ab7f275f5fe53c412f463548967765e144aa0fe

SHA512
4599a123545ef9a3fffd4f16ab00f280d299ce6e72f6cc311bc08dbb2b804d8a77ef5fb7b0d59e13b913c48fa0b4a1168c67f02c59a39a4b19bbe8bf8931865a

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\installconfig.xml

Filesize
3KB

MD5
aa30b25902776ffc8c6c856e3ddec050

SHA1
fcd14f8d2b8a044be0092f84352221be9f8a18be

SHA256
7eec7048ada0c2efd1a2ff71c04b17c50f212d5268d155edf659be4e6be6fcce

SHA512
8610dba7518c7ce4896bcf0b80df465ae46a3a2c6bfdfe1dbeed5bf7cf9cfa168565999a5d8b0175f0efb7b11c4eccc1f06a29e95f14664edbfb9889fe8c1bb1

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\kdump.dll

Filesize
255KB

MD5
087c8bd51ba4ab19d82c989a78310e62

SHA1
6e7c3198cab04772ce2905ae1f5199e50618133b

SHA256
b66b86c985feeebcb2cfccdaab5ada58dbeac799352636782aae29ae9503ea55

SHA512
cf53c13e40145bd8434b26967d67f07faec97bbe9d221d41c35591886faf8efebec6a9d254741d1d6601bfea74d472d166ccd1ee69249ffc4659f9f453ad41de

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\kdumpcfg.dat

Filesize
221B

MD5
5ede788189846ea212c0539fb993a737

SHA1
22cb4a03cfb44f74b8cfece174b1aa8b94370d40

SHA256
d4ea2af1be485717887c812c2a603645250237e8596e0ff961e3bb5cfab3ebb4

SHA512
7a4be12397fe28df1ba99aefb0521578af343213184b68535d33f16cc33197871e6b998ad61251fb0838e809a7147362ba1b38250668bea7d939158b410eda73

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\kdumprep.exe

Filesize
235KB

MD5
9d0507346dea816f4bea4c35c2153db9

SHA1
56959a37b2b216f2977f8a6ae0fd2d43de5dd261

SHA256
b1de636935a6b5f6fb5a3183c56bfad4bca83e771b80d89b09a94d6b7dfe6851

SHA512
25ce62d464dca6a7c34ac3f423597c87e8d53191fd16df40fcbd7febcc96a29b3829bcf5c61b3986b3b163eda04b664fbb755a8ec22ae218ef81d292804d2fd8

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\kdumprepn.exe

Filesize
399KB

MD5
b9229684c5578711e21bdd9f08b809f2

SHA1
fea4c9cbf04e0d6e88319d5c032580ce724cf6bd

SHA256
6753b7fa7e5081eaa6770033e08b2249d9d207f6c258969c4a916378503da1ab

SHA512
239a64ae38681da3212904abd0eecadb3cbde94c660182c75ef15224496ba2ed5b699367bf78db12116e694badd2682de9b143a3f0068f3a4eced1c0211623d9

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\keasyipcn.dll

Filesize
103KB

MD5
93743861a54413c1454845b3b6f50f4d

SHA1
b0be47cde5aa95b5d911107bf1af98109a7bef74

SHA256
63e3807a73157f64db94e975569597665ece35f7234137adc21fa62a85eaa5a0

SHA512
a02707c680ddb5c1645fde212fc75e11b687d8dafddc83f7ae7824f8c425d2c13b1af0e3adb079de904e46d6f9477a6fc09fd6662643c1bc139cb496e873e83b

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\keyemain.exe

Filesize
115KB

MD5
3da4f9f47e31dc494893f197e5f94214

SHA1
d46dda011b9d5696b31fb914f105009cdaabe5cc

SHA256
20977d9581fdefb6b5b204f6c7f92000ace6775ca05e848a53d442df778b76fa

SHA512
41d20b87c0c6644305c431d067187fa4ff3fc005ee33ea246319777f593980dd58ac5585f280bbe032621789740f0d100de7006cbfd3a72c29ede4ae03511cab

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\keyeprotect.dll

Filesize
3.6MB

MD5
84ef4ab3cc2ebec2519d1c5209db19a1

SHA1
17674d7bc51ea4c16774d27859cec2fe4b03c5ef

SHA256
63c9b6ab765a64bf7b30270ddc8a207cf52b3d12fef35ac0cfa98e3b77b5e46e

SHA512
d1f1b826b335f917e871fd2dfa7e61036f36fce60b8efb032fb65af032e36133c8bfaa7b61c108455380c2a29ea5592cbc7288b0e39222bfdd6ae0be13e32bd4

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\keyeprotect.ico

Filesize
10KB

MD5
8b171c51d105d7c8cd374b9dbc6ef31d

SHA1
a0b8c8babd417708138f09cc47e0a9a07706f083

SHA256
068d6c5a20bdd8940de30cc55bd213824d1c292ba024c75a4133c40212487a6a

SHA512
c56f1fc91eda6829dbb708e29207d4b0feb1b9b460939c8ebae6b2b79f5c68922b5d4a5dc7244b14b1ddbddacffb946f2e0c53ddc78c3d6283c0280cd0fe45a6

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\khealthctrlspread.exe

Filesize
423KB

MD5
d68a141e8f915b072191faf3461939f7

SHA1
e3cbfd248385d4860d4ee921d728821793d6c72b

SHA256
204d1dae18789bb9d89c724be4552c0524e32d596ed4da093ec0206a56ebbd43

SHA512
9786b99e32475636bd4c1cf9ef434cfbc59bcb821c16fa258a62ecef02acfcc1bbf15f9a26f84c20b69a8ee8f44c49f56a2c04f5c71cd8638bac3de9870c00dc

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\kschrodingercat.dll

Filesize
104KB

MD5
a2af3c6760de3238ad83c639b0792dec

SHA1
4460bf767685e80f448c00bc75ba95095cf1ddd0

SHA256
869d31ebf186c280360c84a6a855d1a6078a8963f91e0b811b0a704e4f06d5f8

SHA512
32b0d4787de44882be72a3af8535e0f8c400e4bed4711879da0917c707d34e94c831a76607730e3b3419fced21a2a7d4b02073bab0f99ca9584040e3b0b12aea

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\kskinmgr.dll

Filesize
979KB

MD5
2d96ab48f7c0723ded2f7cffa8d372fc

SHA1
ac3e09575bfb5ee62af65236eb71009ff76c12e9

SHA256
838dacb030e9c07d5ac63f356c2ee72c59b5948cf4bf9cd6e9a86b5e7218fb50

SHA512
fc0b33c3e536c8f1c09fde0d2e484026119920e934473c7d5a1077964731a60a138270987ccbf53b9312c49680553e7e1a1ac5f679af28416d2691b6e3a577e3

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\ktoolupd.dll

Filesize
403KB

MD5
367d58b976fd3e6243bfa2f1d28a715d

SHA1
90064af13044622c07758756d8963e599828f2c8

SHA256
e6211028f7884a82b20955df0be4f8a15d82cf0cc9f83b295d3382c6894760e9

SHA512
205b5e7229fb7272e3bcbb6a6b9160c3fb4625a285ad25defec08f93b269abeafcde6c61f7e54ca7e8e8a50380ec7fbe6ae84a7d7d813a369be1494812f73d13

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\kweatherquerier.dll

Filesize
2.0MB

MD5
c1c8590e90d8dddf8cf0b2d11629cb8f

SHA1
08e76e4a7e5da126b924100edffbf70474ac2633

SHA256
9cdea920418cf1034e223f95f58ee0ecf6529b586a4bb49708b59d7c7c7b1c26

SHA512
66e893d7d5c8f3f35efa8438ceede24afbd8de527b13c1c8bc811315bdbcc5c5a73934970ee7c3a27c2dfd2adebf9e60e4bd9f89fffd9f3156a68a6de8f1583c

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\kweibotool.exe

Filesize
2.1MB

MD5
c9e251d506cce505a97c86827526f173

SHA1
5cb748650bf8e095b52a5f141b9ea117aab9c7e5

SHA256
5547cdf8d15394b9f5d14c2c418ad2acfdb55011d9c60bcef6a20df9fb723886

SHA512
01a4dba50c83b1b56ee890dd3159df5dd9af9577a9a0cfffce0bce73b42a3ce0fa789b617792970c11701b92df4771cb92b057fc60ff5b0a4d03815e504bb1e5

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\lockscreen.ico

Filesize
53KB

MD5
058e69e95ae633b4d58da66af983f869

SHA1
133df55f4d498ec09c7fd7b4f03b82780b1cf2e2

SHA256
694b9253edaedccef2dad1b021ca89e9bb04b923faf0714dc62e6b9c63561d72

SHA512
1a85027f3b784698482befd3c3d3a00fd17403d97884a093d531659d87849732c590c0b872f740c7e65b5f191d1760677131cdc660f70868f77530cd0c2c1b7b

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\microsoft.vc80.crt.manifest

Filesize
1KB

MD5
89ca53ae1155058a5f93234b13b17c7d

SHA1
19dcabde08615877b189fc9988b0f90ef1d9f075

SHA256
d736c413543b6b168dc59769840ae95b5726d428f69a23af1659dea8fb4236c8

SHA512
fdc2d720cade768f0a519223da86c05fd43387e3fc9cc02c421048d85fcec17fc5eb181d102137b96e3185c9567bd7aadbbde60568ad5c98e8a51826aab349d4

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\microsoft.vc80.mfc.manifest

Filesize
1KB

MD5
7a1160b8c147e8a38747f4f41302fdf9

SHA1
fd11056b4ace12aec06a75ff308e429bdae53551

SHA256
c9b16fe35ce84550b8e933a893dd19cc7d54684a72bb38c71bdb44eb4d133830

SHA512
2aa25f3c76888c0d1a60c55b9f6738f5276008aaddacbbb1a451ae416e0339e2e79474d89ee3c5ca8f13f80b16088bc994a9a1b8825691f8ccf5c851d47da27e

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\msvcp80.dll

Filesize
536KB

MD5
4c8a880eabc0b4d462cc4b2472116ea1

SHA1
d0a27f553c0fe0e507c7df079485b601d5b592e6

SHA256
2026f3c4f830dff6883b88e2647272a52a132f25eb42c0d423e36b3f65a94d08

SHA512
6a6cce8c232f46dab9b02d29be5e0675cc1e968e9c2d64d0abc008d20c0a7baeb103a5b1d9b348fa1c4b3af9797dbcb6e168b14b545fb15c2ccd926c3098c31c

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\msvcr80.dll

Filesize
612KB

MD5
e4fece18310e23b1d8fee993e35e7a6f

SHA1
9fd3a7f0522d36c2bf0e64fc510c6eea3603b564

SHA256
02bdde38e4c6bd795a092d496b8d6060cdbe71e22ef4d7a204e3050c1be44fa9

SHA512
2fb5f8d63a39ba5e93505df3a643d14e286fe34b11984cbed4b88e8a07517c03efb3a7bf9d61cf1ec73b0a20d83f9e6068e61950a61d649b8d36082bb034ddfc

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\operation\cas\kctrl.dat

Filesize
6KB

MD5
2f4dad059d34c04fb92193a0c9367fc9

SHA1
ab44de9401503e9c5bb94812a66f43b17eee8a90

SHA256
3e86f6b52af463d77a1f68f0adaa5453f3f15927fcb01e91136b343612639403

SHA512
845e409d506e59d3258b10ebaba0b7c969502b1814429b94d302dcde77bfa7818b3ce59185d378b6c7f5a1a5acc8d193f41259d5416bd57db94547047c782ba4

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\operation\cas\kfmt.datx

Filesize
452B

MD5
8b4ae81cd6bf592ec87a5e579dd4fb80

SHA1
4e244bb4fe120948b2b82119b0f09f053963602a

SHA256
798be9d39a079312d234022375ca3ca3f557fcb89c10bfd5a8e09d3274b834ab

SHA512
b7c489939b77f093922f3b0b464a05608229806160e01dcb7c6faaaf8b12158f45a286e0ce49186b7e27428ec53b4e5eda8b15d712a8af17e681ec232c533c45

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\operation\cas\kinfoc.dll

Filesize
175KB

MD5
2662d891a2c9b5ea150ef6f8b31bd252

SHA1
036eedaa6c28a2f65fd4e64c3a1be906a411f28f

SHA256
597fbf0bfe7f9b7a8cca617eeddfebc393c5c986fd5f7d6ef38d98ca464e721d

SHA512
fa3abe644ee677860708b4635dfac073cdcc274c114326bba12c239e0a29604dc3053afc3d16ada9cf77d6e888fdd0398c40343a8e7951b45069622f84daaca4

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\pictures\397b0664b6e524aaad3221ad587d889e.jpg

Filesize
626KB

MD5
397b0664b6e524aaad3221ad587d889e

SHA1
1813838562b3ad9dcf6c48ab420d811d20d10552

SHA256
1c8a1837fdea102cd6a299b87aace44679d6bd1f2d880b8b3196252c8d6f21a4

SHA512
91ab29f8e9380c6b8820da6afbd400c5f66dc8923ca62eb466313f2e5e52a687b2f7e20ad0e4c1b6732695295655407bc0f2c9fd36781bf774fd385fa7e23669

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\pictures\397b0664b6e524aaad3221ad587d889e_w2_1440_1080.jpg

Filesize
704KB

MD5
6db5874ad9cb7cc8913164441820dc52

SHA1
bdb61f9aa2667403ef9324691e2a1fafcae96071

SHA256
091fff8cb3149f74133c347907cffb57235a9a70b6d3cbd12588216d088e660b

SHA512
b5a07b8b62266c428376c050efd72332680601071cc63b17d4527e37a059731d3525f9cc000c46149909d63e2eb3a8460f65bb68959f859784aa6d24b033662f

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\rcmdhelper.exe

Filesize
829KB

MD5
c875b8f8665265f6cd129ba84b215654

SHA1
b7f1a8fd1ad75eb1ddc73cf6685ba93245278e37

SHA256
72105bdaaa466f7716756eaacd798442af8b3b57d6b6246547489af6c4c0c769

SHA512
f04be0e5eecf3396792ae11b655d6efd3ec78c12584ab48ec7ce910584a8ee178f6fd32ebbf9e597e51f1fa900ae923258591b5ba36c7bee1fea33882c85d208

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\rcmdhelper64.exe

Filesize
173KB

MD5
3de163159021dc91a71dc876e0cdb7bd

SHA1
9523b254a93be10dae8fb043984c221ddfecefd4

SHA256
c23903990ec3e1c35da3ec419aeda3222b9f99734ecffd195ade7117bec9d1df

SHA512
2a4220705241752613f46d8fecc8d92bbd59f76eb4b704176ecb0f23d9f9e97c70a1ab693070e5f1cc35bc3a68fc74dad6586ebde45700d83406e832df421d87

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\ressrc\chs\citys.xml

Filesize
255KB

MD5
c9281cdf4b732091c122b9ed769f4ff7

SHA1
aba30bd7d2cfd0779e629b21b8faf4451c6be084

SHA256
c2d714adb53578bd99f4c9f08c402094615705138d5295caeaabe253a64af6a0

SHA512
7c7673da0a28f637ebd34741d210459a07e52abca6ada3766c549b3ddf71a133fc32fd007e0202d30541fba2c62c8fe8d09064a9d05bc17e8ff6f98d08c14b0d

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\ressrc\chs\cityupdateinfo.ini

Filesize
23B

MD5
8aa4eaf5639af0e88e5cc7745b9f63d1

SHA1
2250350d8ecc520df61463e9adbb88c0efb8f5f3

SHA256
5ec8a797f6824824d03d1a2f6c4e1cc6285a5c8508f73e40685d3230f3170e03

SHA512
6b9c03fa36c98356f9fb2f15cfede6525b0f8496ddd97918f195cd5de2da6cc8ff5a413027d76d6dfd49ff85b3826d8af9d72cd2047580c76ad246296db54c9b

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\ressrc\chs\dpisetting.ini

Filesize
136B

MD5
db3cb2a936a1a667d62a51525bd23f5b

SHA1
5087c81542dc065083266e3b3626613d2645540a

SHA256
17b41b18f365971db97de9175721ab706e903978a7ac72f404505267d2c39a79

SHA512
2520ca8bbc2ea5d04e058037a5672a6ad3b3ecdb35c62c29be13976f0c2aa20727f57bbb5bcda6fa87362b02c1a157608ad8bc568edd3224cd2793e785ed97c0

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_keyeprotect\app\khealtheye\ressrc\chs\uplive.svr

Filesize
41B

MD5
06adbc72c8b61d717233fd700fd86680

SHA1
d58888b17ff2cffff4e0cc4e6cd1066d74f8c91c

SHA256
7f33766d13ce6cb226178c1dbe36c5b8bbd7f51b25391a15e16b391f5eb43e74

SHA512
4a59db600f8ad64abc3907c8f39ee3f8196ced2bdc8b2a4a494354850f0e5076da21dedf39dd59251af60ae730db33140cdbd9d689e8f2f6803940eee5c6f533

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\Qt5Core.dll

Filesize
5.1MB

MD5
80a95eac18b0d41d393b3f72cf03cce0

SHA1
724eb57bcea953e132577ac540aa4ed0851dde17

SHA256
2059ae8af9b3adc40e3fbac46edce469a5a3340b1a42c0e2b0f79fcfab838ed2

SHA512
b17d526b2ae9e39d4dd3fe452ae9e2460801b542b4e6d396a0cb86b7486d10615d673ac85ca313190ea9626832a736eadbec4017608c9fbcc6966749ea84540a

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\Qt5Gui.dll

Filesize
5.7MB

MD5
df758556c1235d3a7e0cfac2e060a465

SHA1
91fa26c8641cc13acb7030179ad286c73dbe2c02

SHA256
a383bc6b268d1e1b344414ddbdd400843649c61ad45c6018ca81ec0ef535b0dd

SHA512
9d14cb74388fcd49e28ff35e399c4c244440bd9ab31ae68459a6a613da7c42c1172e0f4c13f11dc30602759a6b8c815a80dcbab3d9d75f15f18cda4f62849467

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\Qt5Multimedia.dll

Filesize
577KB

MD5
8bd149a3aff0d27bb4f118d27fddf90a

SHA1
9655106129ca2682cb429a57a8857209bcfdd4bf

SHA256
fc49eacaca86f5edae1a85a295319fefb54c261a93f632c3c20e89a53ff40fb0

SHA512
ae13b845c1507e88cc333e813e15e9c0751d1b5dd723f55fab459e75976756b00ba46481efc0f6946e8ca2b40579492dc4f4516dfcd1a7865374134fa41ca75b

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\Qt5MultimediaQuick.dll

Filesize
101KB

MD5
ad1c639e6367714afbc16919e6e51766

SHA1
097892c0fa704c8a7a2935c86ce25638abda956d

SHA256
df0b434724744ec0bdb1f9812d68819e39c78e709338d5253555b7cf9dc001a5

SHA512
9b9a519e7b2743dfdf22f9f9644bd833dc1ee46b6c9837bc4302f5ff938383a47f59615192a1fb4695e3986795de2ba726eefab08c335be03da2ad058bf6ee9a

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\Qt5MultimediaWidgets.dll

Filesize
84KB

MD5
99ad21c058aeafeace2820b6382b2bef

SHA1
08f011cc5a2d543fc7f3a05076c99fe272f383be

SHA256
bae75dbc26b698a80fe473af45ee70f0a817290f431ff80d9a0af4bf8733b464

SHA512
edd64edef692bca130c24d4faec7d95f9721bbcf03da79de8a1b2a9fa1e3a844fea7f7ef92f02981c803f207aa0033f94815b9fa6a412041fa133e852c72e5d4

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\Qt5Network.dll

Filesize
1.0MB

MD5
4ccc16253f60fc8c06475bf936c8d168

SHA1
143aef75820abba5bcf80eba477079ccd7e14a1b

SHA256
df013042c338346b30d2e33a9895a6de8d6a6ee785406996b4a523957ab10a2e

SHA512
c5f881711c183e87ab069430634f9bd98851324fbe27563472d4dd59b05096e5cd3134d178d79083b8c98943e509fdc5c14696d60b9470be233b1fbfe4c6a4b1

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\Qt5OpenGL.dll

Filesize
263KB

MD5
b51ec2b10cea260c18b4996fc0e25f89

SHA1
7f5f6a7706d2a0cf46e054c4b1bae12a3925d869

SHA256
97797eca46ddee364fe91a7691987895f19539b6667d1ada2da85a61b29cc059

SHA512
4cf83e235aa235709cf72b18ea1d269b3dedbed695d41e3d0be527ce08289256986fd7b430725a8652afc98ddaf8beb07c517210c987fbddab04fd5841d7d692

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\Qt5Qml.dll

Filesize
3.0MB

MD5
d3939d46d3756542c4eab1df9207a776

SHA1
51a3ee6299a765a29dec03c45058d8499bda0685

SHA256
caae45fcf9538b4d5994491a322aacc9854bdedf054b681cd21d8ee38d143673

SHA512
b33e904536859ca78d7667a9c0888bbb41467405cf4dd66ee6910f65b33828439aa904d2aa35fe23cf11d330e056104869af20791150a82587cadd638cdf3ff0

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\Qt5QmlModels.dll

Filesize
345KB

MD5
76fa20efdd6dc4b7d6978db8f161acbf

SHA1
ab9924581c1ef8f470176e7a5fab9c6c2b5aeb9e

SHA256
114b9181f3aa55f448030492c63260da3d1e72a2551f3d55d1f8e5b88fb9f336

SHA512
7ea19c4ddddfea9fc98b28e95953ebb212545b52f633c3cc0f08513b9de7fc2a88e9a7c0200462eaab12cf02d72d203e030ebd8a190581048be3a3628ea8029e

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\Qt5QmlWorkerScript.dll

Filesize
48KB

MD5
ddc3cdcf3d9d2889bc5710067abbe9b5

SHA1
a0f12a4e49bed351624c6c9ad90a938a06dbc4c0

SHA256
3b532caf148737916dfe3fb47b79b28e5e56be2a6715460dd6c8f7b68730adb5

SHA512
e69dfdc12a3260fe782ac597258b6f65f1aa6abb9d56ef66364d6dd121fedfa11fd5b7803fc3c3bee99a554b27f807e4afd1b8f1c3162f2c1b8ec6c448e06917

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\Qt5Quick.dll

Filesize
3.4MB

MD5
07be85d99d1abe75bd0221c1ce03c4bb

SHA1
bcb35e6937499afd08805d5e634ea222b0a0e86c

SHA256
544d0ac18788f8d72615c5e084034066f9966d3050c300b38a667fcb8f0e7e34

SHA512
d5aac5e1a95d20e9e9b74c8dc1a6465b62601ed5b95d979b3540ac7e1ac388458dbf00d82933c810e03780655623ba084a5f0a13988b82af98c871081260939f

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\Qt5QuickWidgets.dll

Filesize
64KB

MD5
6639d3adcf8b2f5d2fa92be0d0ead5c6

SHA1
4110a950156e1b0eaa603d9fce1a8bef89586b94

SHA256
d7801522275f8cb210626e78f7bc3c5e60ae4613f579ad610fc8ed9c2e24ef04

SHA512
ef71236ec3a429810ae770f3e5f62b7205cb5f5c36ed60b574d1a89626e0ed00768f0700b7d490b62a84e1d3fbbae37eb3682f85e7644f8f4634ad11e9f3d160

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\Qt5Sql.dll

Filesize
158KB

MD5
0e4a538c40342b1b5400b67785d6839c

SHA1
cb0a67980f084881e982440885a01ca2b5d9d436

SHA256
6735a19f950e21d0c32dbde4ab08d47e4b6a5cb6fc7d0262869ae2be43296e67

SHA512
52efb011f12fcdac792243d00d8bda3d97eec263da4354659a5d4335470f32a2623814f101568d0daa944b589347c96b18e3e4ed2f632919ed167e32f44a46a1

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\Qt5Svg.dll

Filesize
257KB

MD5
de6a4075f6a9a248eb83f72a91e9c30e

SHA1
b3d15b21fa125c58fd9dc82428ef412c3b63e0bc

SHA256
15f65ed1524ab6638a2045efbdc7c0e0be347d5b98025284eceb98cc2dad32e9

SHA512
ddec5dadd12df84ad64679453b02c719df1b83fe0f46b9a4dc8a5e12024f099c221d3f9b543816926cde8daaea697bea3004522c90bb1c91a2ae8528e47d3f30

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\Qt5Widgets.dll

Filesize
4.3MB

MD5
cd41b766612b7b65df6f062a405a33fb

SHA1
609ae9a2ae8ad4c41c5d1282157354610e4768ab

SHA256
bf37ab90776ba011ef345913ebf5bc1176b651b846f0288b6a25716e676d82a5

SHA512
c78094f2cc9f06652d8e9794e19ac3529b830b0438324fc8fa9c33802344e429aec4f1168c9c0285ec3e545f36415a1489cf86a6faaa927593180b6c13753e91

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\api-ms-win-crt-convert-l1-1-0.dll

Filesize
15KB

MD5
522226c519cdd233360bf0ce80b0ceba

SHA1
88d3c41b531173239c86cdbad4d397b5fadb956b

SHA256
c8947fe1f9e44f98057014021be674dcaea46986bf8851c91e328361aa545c80

SHA512
faa029d329f5b821718720437cdf4ad3912d9f50ed69f4948d44d3e09ccbef8569a0a321985d84241463761ac21c021629eb2ccd798bdd433469353c210becc1

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\api-ms-win-crt-environment-l1-1-0.dll

Filesize
11KB

MD5
e37ec711d51aaf9fd8570739ed8a1ac0

SHA1
3a7b7a662850e183e2b579ed4488667639395ac0

SHA256
eeb87d714ed1a495d52968184c101b1d9e1d4aabe889d28aaa1537d26b8adceb

SHA512
9a92315389b73c54d3f3b081f08c7d1b26b496ffbabdc34e4b6806ad19307fb2b84c4744f7dd9c2a5c62f738c69857c24f3e01c88ba5bdb9eefa9ada65ea1878

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\api-ms-win-crt-filesystem-l1-1-0.dll

Filesize
13KB

MD5
bcbe1bd34aa5e3e585e8a186ece49fa0

SHA1
82c969eaf6745884c852dff1e163d1b74f90e7ee

SHA256
27eaa00a330a3ca527d9c34c9a6eb189d57ac377a6072bd6be38543ccdd75e7c

SHA512
a124d5cfe78f3992be6bbfceea69059afe2442f61829dcc7cf1538fd5539ef903d074a3d86f82bc0598f1221a32831211743951497e4441063029dd074ae37da

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\api-ms-win-crt-heap-l1-1-0.dll

Filesize
12KB

MD5
db9feff915f895be960e9d1d47639324

SHA1
8a46259d75f077b55c3e02eea4fff350a1ae31bf

SHA256
b3515498bd44eb4b4587776768af7febd4bc54f50b6e1ff2946fa8d7fdc3cd1b

SHA512
a0a860e1bae1e304a9c4391f1249bbe605364bfb3244c20c038fe5d190410b9c68f4d96dd309765dc6fce61c5d584bd7dc5653694b1942e969e22e455ccfdf75

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\api-ms-win-crt-locale-l1-1-0.dll

Filesize
11KB

MD5
b05d416f3162d1686914606e9c794997

SHA1
3b79e6ec36baf9973352eb774e5a6ad73d738925

SHA256
a0b9227b6c9ef44e3738c9e47aff5516f7f556fbc7476f848e399cf0f68d3ce2

SHA512
de38390feb8c3900ecf07fe6d5a9f9401c52d1fe85fea19f715c67342e6cc0f5a209e22c93b099cd95b5104d3eeb9934880e9b35dd7ac1e225e5b4d3ff733dba

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\api-ms-win-crt-math-l1-1-0.dll

Filesize
21KB

MD5
924e2f51de0177d08aabab725421d70c

SHA1
b7e759fc6cd7bcb41649960b742f40de7576d11a

SHA256
0ef13a28de5fc6032aed80272c05641e1a38516fc54d3dbc1641d0e6b4cf3d4c

SHA512
a1ba68d16907b9f4d78991408da9ec867d7786c3571ad1afaa632417a4b24050faedb17129837f7638af4f61340a6c3990499edd11cd3996bd10f002e4473e93

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\api-ms-win-crt-multibyte-l1-1-0.dll

Filesize
19KB

MD5
74126d3bed0e43de875b66c63c608f42

SHA1
3dd58986f3fe528dad91d141b82d891bf7444965

SHA256
0bac9ecdc77baed81807412de80972aca22f21f20f90ca005f4610d93500cdae

SHA512
04f2bd09cae5c2e00adb3ce15ec86886ba68308591f66c1f20a8fea8d24d826516a5e3bf8fef70a57302f20ac046427e2feee20a6f8d4b68d441eb3fb1f7c75f

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\api-ms-win-crt-runtime-l1-1-0.dll

Filesize
15KB

MD5
d07f2e1ff3ca24a06adde429a0130e50

SHA1
fcea1fa4334488460834ad279efba222a722e385

SHA256
adb0e883642fe6bb4aaf98ac81c4b157486819496ca8f7ad31c68bfa142d59f8

SHA512
14202ef2febcf8043bc88a6db9117c0f2c5a4be584c46fc8cad5210953346ec1ee02cc2b538e7d25f544118ebd36844f1c49800b3e98a9304593d610f143737e

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\api-ms-win-crt-stdio-l1-1-0.dll

Filesize
17KB

MD5
1d96a0d2ef83c6c1176806c02f96384a

SHA1
643e09d74913d00b24f77f6e8c80a6bf76b56eeb

SHA256
a7adba66ba14cf68830f756e775e1a863f7ec7f3570d879693d801158b32ab45

SHA512
84f17e30e92a336f8e6f5aaa414a059247ab977e25ec91233246e32b7d72b45b95df76025c63b0950d03199676210f84f7ab2d798c1a7eac33eca278c1bc4f78

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\api-ms-win-crt-string-l1-1-0.dll

Filesize
17KB

MD5
0e9d1bce1bb8a5e25b505ce7b52cce74

SHA1
290ee10a234a658cfcf440eb10f609fceb249775

SHA256
22b7f2d26228695dc5afd1535d31ed8e1315c752b85d974274ea719f33c9f8cb

SHA512
5254b52746911b8255637ceab1cc5d8731d0f450b36aa51514e2707c5ee3db42bdccfee7d2e001d591fbf7c8e85e3b282f1f693f6b7fa682024f5a29f6207f25

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\api-ms-win-crt-time-l1-1-0.dll

Filesize
13KB

MD5
e5de5f75ff6739ac9aabbdd4740b22a9

SHA1
e141b4b284eea70634f32bda4dd5a19c5b6acdfc

SHA256
23505ac75348f8b31acea586c3c1b8cf31d242368993912eb4cd4290ba0d874c

SHA512
cf339b2dbfbc36de4f99e49248319f073154a5e91a60f4331f4e00a09c2ab769d4378bb18fbad5e43654f95044844f2011b5695d7149753626454514b99be690

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\api-ms-win-crt-utility-l1-1-0.dll

Filesize
11KB

MD5
3a2e6016ff209066f3129543660be0b5

SHA1
4e227a17a3f13ce09a44d74b98605025cfcd7886

SHA256
096532918f21f8c107253ea9652d127a7eca79a1c6d80e5b4ea66d083d5ce6b0

SHA512
9671b45a3e1f975b0696d79bf08a32d5e851859573fd193f6af5403de6a3bd82a172c75b4e37627f9638f6a9fe245dafc27fd0abf69a2b0d281a582418b6f6b7

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\audio\qtaudio_wasapi.dll

Filesize
85KB

MD5
4965eeb64ec5962d8f9489dd4bd3b09c

SHA1
3cbd8c448257abaf26422ca1b9b6f34751369c8d

SHA256
1bd01f0edcb075a3655acfd49d3294629888148e640113920a21eb4a0f729b97

SHA512
8ec0898e9347c68a645053bc71b2720ba8e07a3e75245ed43266596ced24e816ea1920b2f6bd4c37e9f1abc9bd94455fe2cfbd1c35c6249cc321d9ba5a535314

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\audio\qtaudio_windows.dll

Filesize
51KB

MD5
25b9396f139a6dc6c87a3a754f3e9424

SHA1
930be886a115c48213fc694b48efb4922c6c321a

SHA256
30e33a86b3ac5bf7996c82451ba10f20fc05c7f8ae8a87ab750221994d84fad4

SHA512
f33f9d0054d2dda6cc1d1450a70350ff6a2a639433e2fb22d76bfc0a90de5ed6e898549406ea2c6a079ae09af6bd5e0916bdc0a42c33934c87f1fbd5f08cafb7

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\avcodec-58.dll

Filesize
32.3MB

MD5
d206d957aa8f55589267f45293d56ce6

SHA1
833014cb46c78baeab0fa00ac778f0788844cdda

SHA256
c17ed08ad6208cfdd214294bcf51aaeadd762707e46db60a4571db7138859115

SHA512
98368829b37bf91e56f20cd80f493192339949da227953facab5859d83dfa45c0f8d2ba5ca0df03ccecfc8dd53ead526bae50201d33623d34c9422bc380641d7

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\avdevice-58.dll

Filesize
1.5MB

MD5
fb37c44c69b3e37f40db2126d7a08e11

SHA1
ab562e17ec0d17ba42c71739d283495758743424

SHA256
c88b5cb227c8cac2e79907e438e9136d5c8a923b1c04a45fe283ecfcb166e1a1

SHA512
48359a79255a1862bed8996324cc2f59fc37906f973eaed5be942538d4e1972c99b539f3cd3a920d76f16746c65440192c19ad27ed24cce91b854d9e6ed4b268

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\avfilter-7.dll

Filesize
18.3MB

MD5
6992aa0cd7d3bf92f17c2b7b7124a73c

SHA1
1436965468c6c85cda748be8277bfcb42e1cd54b

SHA256
5c49e605a3d0f049f89d1b395a3addec9a006a0ad1e491707ef160a34ba1b420

SHA512
2601d9cc92009364cb980bee013375bb4934e7f483a7d320b39b1afa46f6d3f13aacd39db816221e76f389f54b084ec8063d3be616d3e9a86b515b728088c15a

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\avformat-58.dll

Filesize
9.9MB

MD5
fb591aa88f440fdfeb87f0eccde9e48b

SHA1
fe3a38af9ba952ad9106e6f86141273a4b538bcf

SHA256
b5006f29d6887346dd279c3409b3e50cba6b8c15dd29a59c22ca419e97f60eb7

SHA512
c5958ce07c96b0dd5c57c8bc9bdf2b109c8e42756d0e24a4c3984d411be72317c40d407bcd02454153e09dc1cc6452c13b497de9528ea059bdb2becfa2b3931e

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\avutil-56.dll

Filesize
1.4MB

MD5
d9f3867d89a567520dfdc13b7366deb6

SHA1
8ddfb241e091d0eb748053dbdef5b24e8e8e4deb

SHA256
b3de288d95588f4276ce2fb5c5731b3a0916b9dbb45a30e091a3f09d18d82772

SHA512
c01dbfce243957104c03c33e3ddba0cfe13ba2aad9a39faacd762e08f4379088ffc8dc3e231800d4fceaba4b172fd5bd5742adcfaf0b52530cfdb26a1ab8af9f

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\bearer\qgenericbearer.dll

Filesize
42KB

MD5
7fc5ddd87e1bff3df34f4d872d12ed8b

SHA1
b1339b487573aa94bfc1d3a0d99de0842d2bd273

SHA256
d72b4ab1119a5cec8a9f30cd0e0dba015077c7158a24aec91f65ad7f7325d5bb

SHA512
6e46454dda0cb8bcd7101d7500c439983025e962c06d0d8288d50b51da443f48e4a7727fa95eb691355313733079c162c6746df42af1484ff8d7393e9c060530

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\d3dcompiler_47.dll

Filesize
3.5MB

MD5
cd8a3be4d5871171fd0b107132d97be8

SHA1
415258c10477a49d0c046a12123ff7abe957612e

SHA256
4a62063a3c7efcf0faa3800a93fcd26728ef753d3b83bc919c12cebfb582f0f0

SHA512
4acb09bf0c4c8e704fa6e2a20d98c5ff17ef77fc30b8c86b975f5aff8d6448c6e521588106b7810a2c0ab4c5af63519821da590830b37cf2faec380c8ae9e2af

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\data\fastvc.ini

Filesize
61B

MD5
0462a796ef1d8bf708a96bfaa86a15da

SHA1
086c1d77ad58201ca970806e0f124bc013ffbad3

SHA256
99ab89efb73505d1a882b165f4fbdbe4493f0096aa0db8838477ad452f932e1d

SHA512
66dd86c69d6af6d2305086c6eb2231eb6489c14aa3bc8a6dcb377506447c1ec9a0853612f0031c6ad9c2ab10949fe1aa5dbea91cf5ad7da3b3bdeb81c103b239

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\fastvc.exe

Filesize
4.4MB

MD5
7b20825a61c785adfe11b07356ed4613

SHA1
c49e36214e3563871db79fded5801677c459d372

SHA256
c5e2955c871ef5afdc97334506d434089c8e7241d16424d0aaa836b9304c0b7d

SHA512
5b596e412dc4f2d386fbeb451a480e76b19c8af31eee150112dcd5b44308cb77c37bd8dcd28460640186c154a8fb71786c7f2200dcaeb06f85ef4f009ede9e75

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\fastvc.exe.manifest

Filesize
406B

MD5
7cb71b006fcdcf8ade80e31fd5ab8060

SHA1
655380fb2cca01b0ca707f748fc7dcf006732518

SHA256
be8918559280a2e74748bf8f6238b568ed7cbf75183b2180a6a8a979a1ebf243

SHA512
ce095bb84dbf2e72304471f97e80799185fab42b843f95bd84df4b97764786687807f057dc4434287c8982937329e664f7de476445ff6e2cbf298d7a44b48d55

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\ffmpeg.exe

Filesize
359KB

MD5
0ef51762fb2db93578851e8e26bf680a

SHA1
3dca3b0269d7c035d0883c01cd2c45761416a705

SHA256
cf092b2018730479bb52c96a5ff0eb97b18a3ab77b150099c05298d98d5fe696

SHA512
545072e1b1865180ca03997c1a8e93f2522cbf21098e329f52b8900cf12ef95b77182425ee09607829ed605bb973c5e5fa59e6075c2b0f80f93f39fc80ee6f29

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\ffprobe.exe

Filesize
194KB

MD5
611387fe6355ba06070b5dfe09b23972

SHA1
0af1845e98c6277fc99559398f945a7d6b0c6bdf

SHA256
3c1820a5f895bbab770df7ca1542c273ec848342a2da3723f967dee1e3e359f4

SHA512
4780b6a3a7b7a73c2a3997973db540fcd17cbb5db2eb1aad23a865010811858ba0e5eb3de3964f57fb24a779b5eb35caa7f2942836071dbfa3000be8408b537e

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\fphelper.exe

Filesize
370KB

MD5
9cdaf81408c036f8b2c6ea2864b0dc95

SHA1
d4cef9f09c6bb86c22f4b04f29183310d07d8941

SHA256
637f8035cbbd1fb436be0905fe3e818d27b4e7bb4754a96f3e401c8629d86669

SHA512
f7afc4aa34bbcf197cf528cdaec36bf2cf4d6600e3876ae8ca62da4259ee72aa04bd18c002ec3f26608d69ccf13d0b953811e1dbabee2705f403921b70db916a

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\hiavp.dll

Filesize
1.2MB

MD5
b50731ba9b221feaa61fff5adf0dd42e

SHA1
ebe64ba9d934b5d2c83a13b20b1c1e0bfa5368a3

SHA256
2704613d3e42b1b158f57eeaa9b5a9f2f8a2c0186af66ba92fc6b490952b38e4

SHA512
34da970747a36a09e22a5e779617fd8e8eef703dbe4a283cbd3ab6b9352fe23cb6710ee68b937a29fded322a8b397953d03433ea13d065d4df1e4fb48511aea4

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\hiavpwidgets.dll

Filesize
209KB

MD5
557f1eac997b97b4510b36e6ead0955f

SHA1
953496fb2f24c18cf24d724374031dcb3f0c0e60

SHA256
40f8e54dbcb441be75b5cf3b1e6d3dc2d4d084e627edf38e1e8881e2c5b37c88

SHA512
fdcf06b696f5bd67559dd86ac169cea8a265acac9aad053ce2c1370187c0eaaae3e2d203e1c9ef8f03fd49d133f0aec42f27b87ee78ad9c37b5942db25c4d567

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\iconengines\qsvgicon.dll

Filesize
33KB

MD5
cbb125a9d9e0c25a40b486a969ec74be

SHA1
7bfa36aa8e80f9eccd01f032d9e9874a7a039bfb

SHA256
96a639a5645d5426a6a0d40db99ccbdd7b3fb3192b8f12bb13fc7c8d9f1c88e0

SHA512
c71f921138fe1a13cde16838e0a738680961ff7a3b889602cb854759652358f945dd9eff002600472c47afed700917eb551deacce8412311a3d2e2223d7fab90

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\imageformats\qgif.dll

Filesize
32KB

MD5
a7d24e2226ff09208e22fc6f70bf0de7

SHA1
d183a06caad8e22b8a3b3dbeba07e6b43d0d8af6

SHA256
6356257682fb64d28ad68debea96e1a0104c273e8838953459a110933f0a84be

SHA512
017f52fc7069950f1a125f866057739e121525510232595cfdbc7e420bff6ae1f1e72e3473fadc2a7a8a6a8c632b8b9781639a3f6408aafb55c65dfbc89a16b8

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\imageformats\qicns.dll

Filesize
38KB

MD5
4921c4deb08a7bfb11cbafd79b9a0951

SHA1
7bdd64b930071e88abf1ee70339adc745809d06c

SHA256
a04327e191d90885f248eac9a466a4fbaec7e108cb57e95e2260295af205945b

SHA512
4a4f17b87d486e11df3b23324a0bcb04b98ba150841a1251fe68a52f3495dd64026e8a52c85abe892decc373b6b50b631035baa493e26a07ffb59c91624ee5b4

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\imageformats\qico.dll

Filesize
30KB

MD5
a7c0175bfe4b8a3915c4a204f20d7264

SHA1
70687b64518cdac9007e57c5ea088d23f0d6998b

SHA256
8cf7fc943170701e89eb9d52f8b777846b00d69f7ba2ad96aae891269bdc00bf

SHA512
11709c9f095f0ea400c6c7183d3def99b64ce07638209f217e639395307532fe8df9d9c502fa210a87e0e0851318bd440c4482c730b71c589f24d30099c4463c

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\imageformats\qjpeg.dll

Filesize
363KB

MD5
35aa301af3284b1349c4229b8937c895

SHA1
c14051da721e891a28ea2d4ee23678b7048d4324

SHA256
8a7b522660c91aa5463c5a9534c9b4959e3055448e6b9428ed8f1352549b088c

SHA512
a023a17a6ae626269b851c4e4be15ca1a860e357036697201510f890fa3bd16b45d786011c2df452183dbf6941db21b7cab88d6f54a6d08f3826e51aa1c65f2d

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\imageformats\qsvg.dll

Filesize
26KB

MD5
6b075bb67a915c50093b89ba996b1c02

SHA1
1f26a560d60f6b9475a1d4acc4737b53c54811e0

SHA256
f60b4f470b0bb6d1cb4bc7d7a60051a93d744a65abeb81c7c09cbd22dce32ba0

SHA512
5ea74e2058b199c2a919635ab2bac7463fc772dd6575075fa29918b378a17d3b981b33b8795f5802cd55150546771d76a1892e8501a0a5cd1591bcb9917c63c3

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\imageformats\qtga.dll

Filesize
25KB

MD5
dda99560eb549500a7a956600329e9e6

SHA1
de8ed4bd4e056489c3c9a59eb817bb44e3317854

SHA256
864f62d6fad1bdcaeff0030fb2319f6ffaa56c52987f3035e271481265c7fa47

SHA512
ba5aab6d015922b7fb64ce07b37795508bcc312dee793a754ca63c57df3afa25116bfdeb462466c32d5671b082bbecb548d834b2a95f661c7c825e2e184e6176

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\imageformats\qtiff.dll

Filesize
344KB

MD5
92fa4e8fdab9c29224430665b21b048c

SHA1
2f54831bea28e31a7b8bfb9a72a9191db1d77720

SHA256
11c2c7010ef07b4a2d0ccd221b8e6e36b2c66b00a6d039d7b8b95d91628188fb

SHA512
6b13681c4980f11db1792b771513edc7ab2a01a2a4b7d7c11fc0fba3208bd7956e415279ae231b0e3a636fbb8d4dca7094712480e9fe921f0703341fceef5f71

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\imageformats\qwbmp.dll

Filesize
24KB

MD5
a7b5469be6935428a3c4176f8d439b48

SHA1
fd8bdec6fd6542b9f113a7503e101575d21455a2

SHA256
1dc7a6bbaf06c357fa0da3077e433a88aafca8fab6f430ae6fb0088469322d91

SHA512
bed71e415b22697720548f6a1693394ff4c7372b4456df32662541adbb843f408b8388122b5738207f908b5adc203fd09d0000388738c188e382cce75f3110c0

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\imageformats\qwebp.dll

Filesize
401KB

MD5
aad2065bde3f11cf7ebc2f335e849c60

SHA1
d2a96f88daf83551b874503d904c2cd796cde9ca

SHA256
6bb98432034173b0855db97ddc77500d8290868d55df704ccdc9ff4650454acb

SHA512
32618cbbb913cadcb3dc4a9554d156e330f690c755f273b26d044b1c119df6e051ed823258e2fb8d95953dcd7da4fc2396c154710fab545103becfefd42d5d3a

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\installconfig.dat

Filesize
14KB

MD5
a2577e2223946433ebac3aee2d3ef954

SHA1
3be326ec750d8fc18be28e016c8ee70abdcd4347

SHA256
48958142815ee4fc675fb392fd8fd5a55642f9155da1e09ad1cda35794f41554

SHA512
25b94c6cedf021589dfd2192afe1e750deca5c2b7bee479dbc83502f3b4099081bc251370494dcc629be8ee894a70b7a262650b58c7e757fa9b0b1826cca6fe6

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\kfastpdfshell.exe

Filesize
530KB

MD5
d52bcdfc8f348472a0523f2d2bc657a4

SHA1
9c7b1b114e75e0f038fcfe926e57ec20d9351e12

SHA256
6fcab53a125f10990607241084ed77f87cd0b4bace46ff096a3aae0a54168fd4

SHA512
28268f81146055e3f1489d2f6e933a2a0f298df3842b08863b1b917015c3043cddf9aaa1680b7dd2d1b18218287475c726dbcc6a5c1b7ebb46dcbaf45abcaed2

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\libEGL.dll

Filesize
21KB

MD5
e0e4011346a86083a0ec8eb01136d0ba

SHA1
b9fb0d74c5cb3749d1838cac43f08f6718216970

SHA256
411966ce4f8febb2fe3ab84b97ed9fb9062ab60c6211fc3b3e4a25a5ee607ecb

SHA512
959708c61cda4e51074c29b23add0ac5f2eb86ec5c6128ee35214d7130d94a8a85bd97697dc0f447a1bfafb886e995bf6e63e0fe56be182abcde60ede9c13f43

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\libGLESv2.dll

Filesize
2.8MB

MD5
cb9b4e963a78fbfb70e13bdf30509235

SHA1
51f79ddfe15e18439e0f9b9291fb389378788235

SHA256
de7dabf9c1bc8d0bf448efae15f9fbb32fa3bcd0dc676f1f7696b8de0662b6f4

SHA512
fab47ea198a92e595e97ec00c1a7bf7f28140812c1ad3b858becba0d90581b36bdf9a5308037be01234b299ed30f9eb76d654d594d239897ea7226bf71c6c017

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\libgcc_s_dw2-1.dll

Filesize
120KB

MD5
94ef439cce97003ebf7b4354f5250863

SHA1
f687c22a7b5317c6377a5629283895921f99736f

SHA256
7692465251ab928dacbfdcf589c1ddf078250cfa30affd5816efc80bb4a6d89d

SHA512
496ffab3079dfe5228b42ce599adf509006a037e6b83afb6a806d2a7f4d9a195af382a0159a60db724bc02220659d30476466c5b7951d0f6c1db388669e63799

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\libgomp-1.dll

Filesize
171KB

MD5
7e7ec22fb9f32439df15dd01d45ec434

SHA1
9fbcedb2fcab35c104b8189caca339d83ce8b7a1

SHA256
a4009098f29909e15cb1374c656437ffc03847c099b9ef481c20e8022d95bfc9

SHA512
05359bc87cbcfd10aa0e534b3f70afea0af8764350742bb4a51a989f76da5b7c2b2396f6bb4f7928f46aea2c544a08515aabed0167c10f76b5a26ae8f8e8ace7

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\libwinpthread-1.dll

Filesize
52KB

MD5
e872bca8655e099fb79dd25afb5d0879

SHA1
9b2da596b9fbd8f4b422f43f2d948cab9050e9b2

SHA256
aa22f0e39b7617694821066f4d6fc69923ed3f4717ad1136fe5b8c0ff388db0e

SHA512
0b5b8d0527988f397277cfcb93d377014e1fd7ab51ce23f3ff0c293ee859d89a21765ccfb3612c14bcd6b610aab2468f6fb420f91a67c633c9d6c2ce40ed25f1

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\mediaservice\dsengine.dll

Filesize
252KB

MD5
9303c7f0b04e6486e97956b2a8bc14aa

SHA1
41df9b131092ce64fb0827e3f3b4045434d2c50a

SHA256
79f8a83c9a4e62579015132fb25a601066fe632e7db33fd8b9b9dd7922d6c42b

SHA512
51b78070b56e975531529d811e64bb40674771edb6bdff04e0c0ab45cb33fb55b581a49064bdd5cfc45c9de06dc36287f2335c4fbc266c2ae1077a85851c9ac3

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\mediaservice\qtmedia_audioengine.dll

Filesize
54KB

MD5
a7628deeab574a182d3b9452f73107e2

SHA1
716391ff7fa074da3ed2c34c03f263b95a7d89bb

SHA256
cef229e86e43256c02cc27e4f172cfe111948a2328f3cbafd70ace434f7f7ab4

SHA512
15062968f89bd896d45e99c667e47493c49ab14fc20013d06eb5851d161230edd45c228b0d5e3f8134e1b1a0293c6524892dc56f6c307e2106330ab44fa9e64c

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\mediaservice\wmfengine.dll

Filesize
176KB

MD5
88411671de82b06cd1fecd715c47b499

SHA1
1a2f54fe3eba0abc7bcc6b3cae75a301f5d6f33d

SHA256
d560e88ce312deb07780d375236d86ec1059c934c90819b3858c57170a866cc8

SHA512
6e84a14f735a7df51544daac761a3b4d9238707d6432a8f1cdd1e65b9d2447811ed16020b47f1992e71d0eda3a98ffb9e8cc3ea1c5dbd59972e65749a0bc291b

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\msvcp140.dll

Filesize
426KB

MD5
2f46ad0426bff9a9e9cc720a40ed5c5d

SHA1
167ac77f15111b8fdaf16040dadfa0afecc43a24

SHA256
e6b49cf028fc615c4c3c730e916960662ff44c721c8f83ebe2220db0b0689bb8

SHA512
32c396e2ad4aa42827f2a3ca023887a4e1f9f7dc93127a55babe1409611bf7f0e9dcc4e347123a80c724e1f23433b715a7e05f52a38a88070a9de6311c8ba6da

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\msvcp140_1.dll

Filesize
20KB

MD5
8a6e236bc60d19d7af6f7dda85f3b656

SHA1
e2f99bf2827262e6a1ae87080e7d2a2fd7a28b5b

SHA256
53fcb5b86b362e655762b37c8bfdb6a54fb0b84205732e56476032cf328b8f4b

SHA512
1bd45eb4d25d508b44b3c52856ee5902b541c483a7192f731c4810567e40719cd418d217fc4a43a5c3321e1eec43b114a0e42fdf20f114f1dc493f51053ae316

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\msvcp80.dll

Filesize
542KB

MD5
59b9905f64c19dbb1eeef5b964300445

SHA1
fc8594c7660731455ea42f4952ab545aa735a129

SHA256
11a963b832ad6904ba39d320f56eadf98558602a30e8a0ac1d95b5ca7fe2821e

SHA512
93d82c1dc7f14acf669452a3eed30abc8f0a95cad37c530770da97b4e3c796af935a159cb37d4a279c83ffc751bc4effb45ab112c30ae6429df355a78c5d7c97

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\msvcr80.dll

Filesize
618KB

MD5
7cc83e64ecf8dcd57f98af9a940a6561

SHA1
b4353ca147859501a8c4e6d3799805768f65bd06

SHA256
28ebb51cab1d078e8b05cd47c8d78a225b0e3f00f7eefa278307a2607a4f9135

SHA512
4cf6bc91f44d49460b21ff675fe7ecc799003dbe897fe958823f72c962d89028f8738dba972009d62a98a1121326077f01860e60342009839d47cce6403403c0

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\msvcrt.dll

Filesize
758KB

MD5
14c8b0d022cdd56939e5385cbcab60a6

SHA1
b47a20174d1dab0e2901c42bfbed251be633280c

SHA256
a80846377f8e6baad467f4b0064cf929cf51629baaf47044b7cb3f3c4e627476

SHA512
d43a4333ad0c7e1a99cbb6c069843865b354cd9bf2d5460ce0400e1af38d7a24be12e33215dbfcaabc16c082758ea3772cda28086fe0405fa08ddf7bb91b21f7

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\node.dll

Filesize
27.4MB

MD5
eac1daac4facf03d6cd135e045989cfc

SHA1
d52cab8f4728d28f9def0de10f547f0d71f87d4a

SHA256
d8dc1d9032df0d96761604a8b0793a4af82b79e06d215dbc9f5f60c2e6fc0cac

SHA512
93355ced8ff1561263231d3a0b7a1a08ebd94d4abfe0a4efb7f2485f37dfb0562a60e52f5e904de1690d76ce301d18c23ea1e966a40c660e8b46da153393d93d

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\platforms\qwindows.dll

Filesize
1.2MB

MD5
1e6793d71eb9deb7ad943aabbbb17240

SHA1
0132e7d887c4f6f4c41d5e685644fd8c700d87fe

SHA256
6b9e0cc5f72b8fddd16ae0ef7a14e64bc0eafcdb4d5f74b2c12194241d66407d

SHA512
e681370cda413c90ace86d48f7c769ca1121e55688eddb6c46750f362498f30aa7fd5a7e1fe4facd2bc8a2598f0bb37847b634c05963eafba6f0a8048b777d89

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\playlistformats\qtmultimedia_m3u.dll

Filesize
27KB

MD5
e02bd998fb2c1b560be09a3aba538a42

SHA1
adfa6d9b7a4b660d11441ecd10714e24b8b6f68a

SHA256
fbe285abc139f368dde2ab314cfa8def9a6e0ee869a86e15c418231f9daf57b2

SHA512
a201baba1ccf427d58640a20c8fb98d959dff512b17c31e291914aef116aecc3affb6ab8d5c12ba9d14875015b292618ee9f58212022939415c48664542fc99a

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\postproc-55.dll

Filesize
132KB

MD5
43bdb9d7c5e572b1e1b8f067ccd9fd94

SHA1
bfebe7e0fe2e8ad7217bb5b44a1f0bd617a0674b

SHA256
7452c9dda051e3ced02d79bfcd97876188d07cb037145723cde80c0a192732e8

SHA512
83aecd20861f31881747b4bae7d5dc2b962afe17d8566ce6ddc72c08d08c11e9ed726d5f9df29d7d44bcf80ff9d89bc2d19c184590495a1ce716641c344c7c0e

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\product.ini

Filesize
275B

MD5
8afabe5adb3582bbc3b97ab3ddc1f291

SHA1
83f99201a4c0a2a0c33dee6ca60c982e55d79192

SHA256
d3f7c989dea98b650f190a16c87c5709e8c2b66fd616078e014e686ac065f066

SHA512
06207d5efc4a0a23f9bfc6d59ffcbdb2fb944b6d5e11a2ce395de09c62198a90093d6d75ff53bc86fd4352878c4bf1a8c8936241864ea026b13839eff7d89420

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\qml\QtMultimedia\Video.qml

Filesize
17KB

MD5
8d98ef9242625655d7bcc563bd2cba5b

SHA1
0c8a712780e2809575a6fc5047ad4d383155fa9f

SHA256
601a5eb469133e4813506e3de7d59e8f6ca3d1c808dfdf660263462620ff813e

SHA512
3fd06cf3d97b7acae76ba6c81cda4b8b1ffbdde0f83a0b676f7f4695fa3e819f177f3c3c4a3a112bdfd42c3460351a1db32abb8aa3d23384edcbe2ad17144868

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\qml\QtMultimedia\declarative_multimedia.dll

Filesize
234KB

MD5
10eb2aada9ed5f659e79224d6753affc

SHA1
c49a94862bbf229c45b6d912c1d284df3fad6630

SHA256
9c51ab26fd65c0218e9151a52a73847dae1c71ef0d905bd88a8821eec6c7ce9d

SHA512
edf7d6d4dab879351bc300aae3fa91401aa5a0c65a7c2a08c60d7265803b1cf936b72e752645bb17e93b3d5ebfc091fe0e219f5f436e8b809502e4013a678088

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\qml\QtMultimedia\plugins.qmltypes

Filesize
77KB

MD5
41df66ad5f8bed5fbfb6719a4bf6f3ba

SHA1
b3d8a12ac7ac5cd29908f60a06b24c81f617b5b1

SHA256
34185224c6f82d8de0656bac43ea855316267b862ee129f134b3ac53a54a0ece

SHA512
5cc89f3904b6516a10589b7dd1fe512537f6ff31384a4075269c2ce57e872dad3bb3e01290359b95e96ae64517b5ef5146932200ce5d3071b5f808b5e4a9e6ae

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\qml\QtMultimedia\qmldir

Filesize
140B

MD5
44e34fa143bfaa33f9dd6ebd13ef0466

SHA1
df857a43b313c8d531ffc3c7bd33c14625bcd06a

SHA256
be3831209463405a965a7c66a178d4fffd0c2f10de168ebf851cc0965d2c20d3

SHA512
bb2c2f3c95508bd6326ac3e29a3765fe8c6ed9b88adc54bfad1ea851a957e7575a4e0a254da4b65d30ac82b081e338a9e60b8b62f6a7c7a5073892303beee8de

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\qml\QtQuick.2\plugins.qmltypes

Filesize
204KB

MD5
c60656a16edaa0c775d142f14116f4c6

SHA1
f3cfd0eb7c8568fa33362849ec69658cd58f9560

SHA256
ac2660f35d78523a96f14c321c703dc93cecdc4eb345e5a37c3eb29db05ffee1

SHA512
efb3262734fc100dbae80c0803855298e8a31ecb2ce2bc062ab7a946a8170b834e9f1283265bad4e327f0b378b676ccbd0f5d917a11395480a31ec1253608444

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\qml\QtQuick.2\qmldir

Filesize
111B

MD5
fcedccc4408c301dc6b1fe45721353ac

SHA1
1f8e8e590505274d317573ca074aecdb70b3c596

SHA256
7e844000c1f61db37173ee953012981d533c950e7fb772c2672ca74dcfdb914b

SHA512
4c4fdc7ebaa3da4de15832859d92a7aab19ef7e7b5ed9c7858642c0bfd4145be2962ecd2fc12b150a5f81797e8e47197a076a46afe936eb29e4d2f41f78077d6

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\qml\QtQuick.2\qtquick2plugin.dll

Filesize
20KB

MD5
e064dfd82f6d37163fde01c18906a956

SHA1
d65141402d9a792d5d14a1421f88f10410f5f0af

SHA256
16b2909d64f493d870b84c64e05353b54f645bf11944e04b7205ad026c3e2f63

SHA512
5f35b20e5c5131034d9507b67f9c094793a551195d21f1e22a4f0cc5f42eee353d8982ef4de994b4f22be751e539362b6513b81570a77b035baf07ad06b61c47

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\sdl2.dll

Filesize
988KB

MD5
6a58017397257cd1673eae10d3146a53

SHA1
611f07a7fe024e12428ca701aa860f8f8cb923b7

SHA256
6f5d9415565a7d291f2e03a2b671d1a8d66d5f59c2f5a8c111952d1014f94ba0

SHA512
e7127713893c339d2ce00c7f76782f41657664dab1c4ec273570bdb9be8a73fd7f32659ef92e4386a818120a1e087249ed1044c80a2124cd9bf0920140ee4a4c

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\sox.exe

Filesize
2.4MB

MD5
345cc8612ef017743c2e044c59625f3d

SHA1
15d3375e586054f55e74841a0327af5b604776af

SHA256
09ee1e881805bda1c9b1dd9a0a46bf9e7418f0d79bfb82def98bb689d7358e9d

SHA512
dbf2d30906902e4fc32da66d355b71329033a6bf7940f252e7897676862ecbb2f4cc4f6f8977156198c5ad93c630124e636a72bb65dbc9f46f06d3be2e7d93f6

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\styles\qwindowsvistastyle.dll

Filesize
129KB

MD5
355b1d5fe2613c1cbf74d3b6f7c6c415

SHA1
fdb82b34e26c01e50c13e57f2cc4238d5c00640e

SHA256
2b7baab53240a523ba7cd405ee36d8f50a0e64e7e0f81df463d983e60abc7e1c

SHA512
7a8f5ca4b2e8d2e6d822a5a6cbad01dbf0ee3e853338467f194aae697e10eec181f0e5e18323a271aae317b34b8a4006b30d30af6da26ad7904a52981f13f2e8

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\swresample-3.dll

Filesize
535KB

MD5
7fc4b03ec607ceef70a04c3b1b9b69b0

SHA1
0bf5c5a2e4ccdb3c50068ff5783769e3e3c470f4

SHA256
f0ed7eed66eda7b44756927a9340ef7d4efc809181b68dda5e6df1ebdd69050a

SHA512
b5c0f61f99ce927b45f309dcdc5d10101ff47970170ef63dcfc24c0cde537903ef3da3982aceebab63bde39274b27a6e196a89bf26f0e369892298c68446f2bc

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\swscale-5.dll

Filesize
586KB

MD5
da063f0c42cb1cfddda1d1e2c4f08382

SHA1
dd93f12facee1dfc77957b1b02d679aecf72ab4d

SHA256
342251f4b2a889a9df8c957a6493f5bbe45d98ba525a71421b600ea9c0f02b47

SHA512
3b8b01349c6daf128f4a6104e6ca20881acf7dc05f79d1e63b607ca9ca9bc68aecde2fc07c5c3cf9cb4ebcb9780c1950c9ab06d59dfbffc995fcd4439bf435ec

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\ucrtbase.dll

Filesize
1.1MB

MD5
29c9f59033067b7d9465318416ce9902

SHA1
e262dfb76103322f12bc7b87507cb45b96459818

SHA256
7e1943a3fee74db5564b3f96007bd997bc3e8248b45b27baa88d5ddeaef55737

SHA512
d38bd0566305c160fb078c0199cd1b1868ecbf7b271f1efb5a592528503e05381b2e949ea97259ed9155da5ce6234c3ceb81e8271614970cc4704100f9bb0dc4

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\vcruntime140.dll

Filesize
74KB

MD5
5f9d90d666620944943b0d6d1cca1945

SHA1
08ead2b72a4701349430d18d4a06d9343f777fa6

SHA256
9ec4afad505e0a3dad760fa5b59c66606ae54dd043c16914cf56d7006e46d375

SHA512
be7a2c9dae85e425a280af552dbd7efd84373f780fa8472bab9a5ff29376c3a82d9dfa1fef32c6cf7f45ba6e389de90e090cb579eebff12dcfe12e6f3e7764d1

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\xaudio2_redist\dsetup.dll

Filesize
87KB

MD5
9e0711bed229b60a853bcc5d10deaafc

SHA1
2bea53988bd35c5df5c9edcef0bc234c37289477

SHA256
def6f245762be36cf18b435ba8b7ebc224b9c21d1a1db606a8e8fafdaa97bba0

SHA512
c0b31872e52c8f4270d991c70d1a1c9ef9a4bbee4807c54c05a449cd1607506ab16ff1e74b378651b36e3276322c86cd843565c8a1aa33a49c47322ef4df0185

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\xaudio2_redist\dsetup32.dll

Filesize
1.7MB

MD5
0f58ccd58a29827b5d406874360e4c08

SHA1
ba804292580be6186774e7f92e6dfb104e46bf25

SHA256
642d9e7db6d4fc15129f011dce2ea087bf7f7fb015aececf82bf84ff6634a6fb

SHA512
3e3d4f2de5dc5addc86765a2f888487ea0c9ee0208fac60187ddaa9a2bfd73cfd7734836d32805fa43222470c8f6cb9a10e2a099aef72c67ad7c789096e57ce4

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\xaudio2_redist\dxdllreg_x86.cab

Filesize
41KB

MD5
a025c67403dc2c2bcd709aa9435faeb1

SHA1
0433ee289e96a0d83a0c66ec35cf906a3e063884

SHA256
8ad77a4d9c76f65cd62337588f847cc1e0ca6ca9735937f3a781f7395e9566a1

SHA512
56bced81de59d413238b01396fafa6442ef6db0afaf237a699966df4753ed1a0b555450fa308f6965689a67f9fb5efb5d377d5f602a8d453ecceddca41072b45

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\xaudio2_redist\dxsetup.exe

Filesize
524KB

MD5
ddce338bb173b32024679d61fb4f2ba6

SHA1
50e51f7c8802559dd9787b0aebc85f192b7e2563

SHA256
046041aba6ba77534c36bb0c2496408d23c6a09f930c46b392f1edc70dfd66de

SHA512
7a63925278332c8e7949555383b410d8848a7834b85f34d659e351ba78cbe4d2ec09caccb2178d801b9b68725c9cbae48a6a1f07f0804a0c41eb51df79b7eca4

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\xaudio2_redist\dxupdate.cab

Filesize
91KB

MD5
8adf5a3c4bd187052bfa92b34220f4e7

SHA1
b52be74c4489159bd343d3c647f28da1fd13d9b9

SHA256
13393a91201e69e70a9f68d21428453fff3951535dec88f879270269cfe54d6f

SHA512
3e2f2fe4b5742a4cf6ee2f6b8c0ca734fd0b3c5431dff112c907231846dd3eebee7b9b8117f0256119614282cc7a4896474a199563078481d48a1204ca96f92d

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\xaudio2_redist\jun2010_xaudio_x64.cab

Filesize
270KB

MD5
edeb828a8e54a9f3851007d80bc8dd6e

SHA1
358e429ac3b125cc7fe4f9ea46cdca4583cbb1a9

SHA256
51500283f69e97f5beddb073ba2a9017de3d30379c0dcc4d11dd2236ce07b317

SHA512
8cf68e1a09c257f7fc29991331a128c159634ea86e36b6be8c2a0caf5ef1fda8e1c79639f099ba32650a9fcb26478f113227ee7ead84bfbd728665eb1a522537

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\xaudio2_redist\jun2010_xaudio_x86.cab

Filesize
271KB

MD5
9d2da3b1055120af7c2995896f5d51ed

SHA1
2df40d48c69d7cfb4e0c19f07a019f5f123303fa

SHA256
7b4332207563beba1103744b6db5399ad150e9e6838f9d5a71497e7eb3645ebf

SHA512
deb76247b3003fc59c0a95cc2a47d6dd56e2d75aec81c3ab6ca6c0c513fb054e8025c871e97b7d7f2c823df54a2fe8202f4c0caf677251070b8bce40d2db70f5

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kmediasdk\app\fastvc\zlib1.dll

Filesize
154KB

MD5
309533555feae51cb8be8f767aa3dab9

SHA1
96d66926bd52b45f95cbb619ae4a4c217116109b

SHA256
1d4800ea259d34f4892e95c92c0530ac5fe02519a0bdb05d3323343952cea667

SHA512
1189500cf3104e71fd3350c3a6159393e1fd0cb00877ed5be52a596ddee269d33e795dcfe7594c43754fe854e327e9ff521d88fdb66ab456c49bc78a6a4c2fc7

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kwppacket\app\kwppacket\kdeskpkg.exe

Filesize
29.7MB

MD5
e8688e0fd2befe606cf0e396505b192c

SHA1
7069da5bb542a06d321b4483911aaa784db11ff1

SHA256
77e93d0938d19401de33b6ded6aae0f9652d9283f5fe3b0e63192eadcd456c3c

SHA512
d7d684608788a28112c57efa489ad41990fae0bfc02320c27a498bd8386b07227dda25813189a5f55800583fdc442aab7fcc41f697a807f1fd7318e470e50eb3

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_kwppacket\app\kwppacket\kwpfile.ini

Filesize
30B

MD5
83d52814a78a6c21a8f191c285737e93

SHA1
2087c4420a92913c4909b8e87f46c41764ebad75

SHA256
92097f90c7abc4489012eaa3677192bbf125b14799ccf10c6e1c3d5274ee5c66

SHA512
6ce1d7859a25e8ce4147e5dd99b5688db02405295ece845d231373f1b417585c1573d9d6859bb78d14207aa66c60c3e750fd501f15e7af0f3aad05f2382475e5

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kcom_passwordscan2\kpwdeval.exe

Filesize
1.1MB

MD5
3308c71e9fb9d2b190466caac6dba62a

SHA1
6bafdec09465dfe260c407ff75c3c27a386f4002

SHA256
fd45ef264202b0c0d3f52bd5838a6af3010f120b935d4b6040e34d3a5856acca

SHA512
ce06d93d13db97e699bbe97074df1ec51a8e27a301b0d00913784ea2ef05b21512c39d44769e46c8867972e086809db5689375ae8930149777ae7d6ff5600661

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kws.log

Filesize
1KB

MD5
b9b4cc91ef113ff9c9c8e139a3b668a8

SHA1
26531f030307fd1cd505b7a04975538480feb4c5

SHA256
ec4742ccc55aafd08b02150123ca509e427630cc7d359b240096c45ffbff60ab

SHA512
3ad6e0812b7f8a79aaff0b35b48a4993da5a4c8fd461a2fb8afd3e19ff7037097dfdc1ee128afc238f03e67ff6688b3b5df791769fa2c422b1baffe09f9a612b

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kwsprotect64.exe

Filesize
333KB

MD5
dcd8d9a9aee4a0d3c73f63fba06e981f

SHA1
e929f5e825b3e59b2ec8b2c64f9c35899c50c670

SHA256
722f47bd2bc24111de338fb84cab63da57fcb6733a3f4f2f159a1ef3319cf9da

SHA512
0612592168a753bda074ecc8c7001cf126e2a8f10ac310f8191e59e5b41f1cf57037ecabb49be3c8ef86282f450c85b6881bff72a4661062ca00623756322015

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kwsprotect64.log

Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kxecom.kid

Filesize
1B

MD5
7215ee9c7d9dc229d2921a40e899ec5f

SHA1
b858cb282617fb0956d960215c8e84d1ccf909c6

SHA256
36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068

SHA512
f90ddd77e400dfe6a3fcf479b00b1ee29e7015c5bb8cd70f5f15b4886cc339275ff553fc8a053f8ddc7324f45168cffaf81f8c3ac93996f6536eef38e5e40768

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kxescore.exe

Filesize
243KB

MD5
eca86176fe1c08ceba9252ce98dc5873

SHA1
3402166af2012fe0f9bf65844a0fb5c8f4d0f0f3

SHA256
356f7122e58f5eb665148270ce6f30b63216c5d662f266b26b033b42bf6b9448

SHA512
9da31bfec245ff08958ae43e02655f26905b42b326b3e17b0bffafdadbc5f67ec22f848456a20c4951c26e17b5de8b23b965cbe268dd498e305c3f223157f171

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kxetray.exe

Filesize
2.5MB

MD5
c8aee704073feb712645748ed10d3a5a

SHA1
82b75fc4e930e4f8fb0aecac60e184559132d325

SHA256
3b52f036f31228fad3160e5a79a3d01c45c549c5452fd64967381abc6a1443dc

SHA512
f5e023f1687ecea85eb09e76a3bd42fc5a9f8d7fbca55e9dd84e018c8428b7a44ed63ce052db45298b3f50ac7220660f96fb0d8d3dfec797a8462bdfdbc27d45

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\liebao.exe

Filesize
82.7MB

MD5
66ae7c7bb0d47d56cab5cb8242f99faa

SHA1
339e9b705037db67a8b6fb0bc1ef7e38777c1e25

SHA256
c33585f6bb794c5d10cb382dea112fc8bb30c2926fd63000121fee3a34ee010c

SHA512
69ffe8cf61d26b3b0963594b7bd9993897e8a77ddca6144fff6eea37aa498cad343cfbd28dc3681ff39c346b1a8aae1fe05b0f9153990d13fc5a79a31127f744

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\log\autostarts.db

Filesize
16KB

MD5
57a6cf97d6465620669ca0eb57fcb4dd

SHA1
1d501a2b6c7eeb1174f85f14d0fe4df8f298c5ad

SHA256
78b6d63393db517c18a1558114767e76165c7847ec6f676e0ba0e6cc49a3d1e8

SHA512
ef268155e33b7107f84410f0e3724547d00249911b601a2265cebf23705b43683b4cb9f6fcb842b160d7b94dfcdaddfcec59983cfb26b1375a601f886ce02a5d

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\log\autostarts.db

Filesize
20KB

MD5
3386740de66d4a0bf28b4cfb7c03ea33

SHA1
50661abdba75535e1be541baf67e5cd0564c189e

SHA256
dc028397556feeeb7c3d388a3bebb2b7a4d75b6c9ef952dc323d7999e10dfa8b

SHA512
0135ec965fc9bc73d03ea777c836380f1a2603f634230c26d7b6b85b19c1958139ad46e7d8c456d6c85e8c7b9289d29621f1fee4396b7dacdd1fcd5a607d4ffe

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\log\autostarts.db

Filesize
20KB

MD5
c9f856dfa73432f664919f6636b0a6a6

SHA1
e16a41ce64b627c8088c5f0bc35d435d2433bdbd

SHA256
764736a524693cc12cc6609338d93610d5084047f446dc59f23cb82b9f837baa

SHA512
7ee1675fa95b7858dcd33f0bea49cff14d1b91a01de665034eaefb5fe3096f7d4a016ee6381bedc86f7cae44ce1d882cc81c518290a7a5171f3e7d27a591f659

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\log\autostarts.db

Filesize
20KB

MD5
8ed1c8afe2880ee300f2c14a346411de

SHA1
5952ebeb58d94a1ce8b5e2dca221a076d66e3155

SHA256
90a5a9557ec3dd2dae35814fbe578a1b0da30d45ce951dc7c17b99f396097d5c

SHA512
abe8cb10d859d8c9f16a046a20beb868df46aa9c141f5afc0880cff0bf8e96cc6d7cbd1831736b0dbc2287050aac173b56bcc9df5c4aa303e88783b983f138e8

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\log\autostarts.db

Filesize
24KB

MD5
43c05cc899e5aba554a66f978cdfae9c

SHA1
44933e0c1da945ffc4f9e5b992af5f5a3525abca

SHA256
a18e5222d18d07a186d03bb444e6f6bac9dc4f3a53f0d516d908d03e67a8ab77

SHA512
d968d8a0cd1c73e7bbeed7eaea511f6df62b800f1e5a831d799e1f2745bb6818e400e469f0540f521ffb2b7bd1c9371cc5f9d2bfe8a30883db3600a1e9b018c5

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\log\autostarts.db

Filesize
24KB

MD5
a7fd5f9f6c9ed2fd1d7803ee75e89352

SHA1
2545e75f52346b9075215b9e3295fab3e6702ecb

SHA256
d9479198015f100fa0bd617dd836f6c386de4ec72bb0b3a789059741c3630c72

SHA512
e95bde72671da628be0ebdec8da7254fb97e454a67743a8e6b3241224e52c7aee172e1db29712181ef50ebd9a2db9b7154f9a0c1f938834ac956e588701e27bf

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\log\autostarts.db

Filesize
28KB

MD5
431218e7d3086c5cc01155fcea5c85f0

SHA1
8f409d52af46c131cfe4f1c671c12f562e93ee29

SHA256
d015a37b3a03be13dc9fbcd849d2f77eeaffd28d9c07d8da03fa362a509207a3

SHA512
2efdff89e90663cea34017a0d8b23e55c154bab3e7dd9bb69c2d640f7295b36eb1df8e997beebf611624bf75c0c8da8808294d8ea0b6b6e9ffae65a49f3c9217

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\qsindex.dat

Filesize
19B

MD5
61d440a52785de703b772fac1afea40f

SHA1
b2cdabe9323e26e2ba8ce23d6eb15f69b35b737e

SHA256
93be62b02f5f8b883cb7b4ee7dc8dab9755fa6da74db186f661229f4a38617f9

SHA512
14788e5a059e7254010cef2ba89ae452331516ba2abdb24b4d1877f9aa8b487ef2d94684ae1e56adabda1909d1102856fb1abe82bb9105bb890361b7f18f40b5

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ressrc\chs\ktoolcommon.ini

Filesize
742B

MD5
786fec80cb42e3929fdd6dd81edd2144

SHA1
2662edfd2cf1c688efcbd9144d44b281cd8832f2

SHA256
855b4bf5637219a478e2768b80f6a8c28cadfee5a5e76621da3f6a6186119a6b

SHA512
acc6ae57d64e1e63b039c666b5bdff976f2753758f087999b9fa482277be0c8ea22a8f9859fd89577609ff42dbecfd3cb0452e81eb3ee8ac346d9123448b7ef6

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ressrc\chs\ktoolcommon.ini

Filesize
784B

MD5
167df59239378679ae0a95155c1d2c22

SHA1
2bd1c44170f574653f7e3f5160b4acbfbf730057

SHA256
bb0ab253f8551f62648932a5afe94cfae78fb04f1915a228456c2d04fd9754a0

SHA512
81c0a91e70d6ef092d94403d68f0fa9541a210d36388b9b572c4646097521945a660e5166f08f68862099297ff05a86e09a9699fa4b7f4f68d0dca9f8b2d4f38

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ressrc\chs\ktoolcommon.ini

Filesize
826B

MD5
748330f95da8f5ba5107cd0b9a8645c6

SHA1
c6f6b4cf30b73fe8f8b7061331148ff9e0bdcec8

SHA256
9ae06c5dad88fc1f956b108bad305a592f61b35d76f2eb4c903a27926b89633a

SHA512
f89ad89f04cc1fde9a0d9f572959d91ef4f696ffa9a5304c11474673b6aa6d9956a9af021e488ba551f55f2cbb1e13eb3678125db388e44c99f302ebe7d07cec

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ressrc\chs\ktoolcommon.ini

Filesize
854B

MD5
12ba1dcd1e075bca827a747fdbddea78

SHA1
70672a39468eb8addfcf106b6904ebbb749e09b4

SHA256
16bc2db917144b885660fafd111e364bfd35fe3b871a2e60c500723260155a1c

SHA512
bd8d3c8d2bb3556df1f2fc7bb1b249e0ad2777e0b91f7e826349717e04d83bb2cb302c5d5890911d4d4ed1352fe06b8a064515b222d4ccace0b04d3f3b9e4319

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ressrc\chs\ktoolcommon.ini

Filesize
888B

MD5
7c246256b14a0f0e5c8ca73ae1d22933

SHA1
2352d52f12420e86618a105058b3227a5ca8e324

SHA256
3e61089327214f987547837df2383fca86c732c248665cc5091d00b0cc4f2635

SHA512
ec3066a856509852574548e0f7eb5eb0a6b8046244e33360d30fe80d303f46cb8324572d2500f850a11d154da05f3f8e8c282e7ce0686cc95afabbbe2b74079e

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ressrc\chs\ktoolcommon.ini

Filesize
928B

MD5
0da558f49c5d8215555eb0efc994aeaa

SHA1
ce7c00035177b8a0719b4af77ae32144de4cb3d4

SHA256
98c500e6a5c6964588ce3841b651aea6f18442787264bc2707ae6723b4592a7a

SHA512
bff6b1c9493c21842c155e4c9ceafaf9332d3313082d61714d961326cec842c454bd91691ebf8e9cba7ecb822b3120fb2820202e2380f04908572a1a6cc545d5

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ressrc\chs\ktoolcommon.ini

Filesize
704B

MD5
a1fe01fd748cce4a3211b733208a6b15

SHA1
e0a546286ff3380a19dfc475ac6317eee7a7a9f4

SHA256
00d2179a3e6fa233da4102499e42f0e5a1ee871fdcb165c8cbfc7e73fe29216e

SHA512
086b11148437ecb27a5126ee3d3d44626bc9d0c71dbb02c1cd2253d423b51f83d24d08c8e768452eddf2c3b58b49d57008a06fcfc055113a8ccf454917dd815e

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ressrc\chs\newcitys.xml

Filesize
255KB

MD5
018d360105e015f057c6f8136d70c36b

SHA1
2e3ddd848dcd46615dd7a0d6247afc76f431893f

SHA256
b735b08e0ff33d7c36f7512c16f1b4795a9da5465ae53981f112e7c48c4840ce

SHA512
458b1b66ee131c5cebb92f73b64757c399d7178f46975fb2ccf80a6b94873d5cc1c1a190db3955d3e449fba1b6d75cfde1ca795485685fb0e491038eed89836b

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kavbootc.sys

Filesize
49KB

MD5
44a332318c9a823b85d1f5257dcc7ad9

SHA1
80a6e8cbd957f5280cdc69d4b1a441aba6bc6bf6

SHA256
ca615ede1d1356ac566189d4ba553f77ea074c4acb53d60b6f3144c8bfadde0c

SHA512
50b733732188c4ec42684fde06e9fc266d41c51c0009935c2fa9a301d80256122e9cab08e5b765e9270aa96138870c0881548cabd8891e42baadcbe416194c20

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\ksde\deconfig.ini

Filesize
25B

MD5
b3d85a3ab72edefdeacdec2ec9e3230d

SHA1
fdeab036f6e261a8280a2734f0d517316a19ed18

SHA256
1f7fc967b7273e304fcf59fea080b93f83cde765cc85e63895d97cc4bce18703

SHA512
b5d2d6e6ce67cf60ba4cf5d386a264c9327f83c358462b1cbbb6eebb4633d6a02fbc40070035df33b73e0b947d2e70f3a217336d4b3c04f1d4d79f911800c12f

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\ksde\kisknl.sys

Filesize
260KB

MD5
e06bdda791e2b7b71dd5a7826ff053a1

SHA1
490be50168acb1a2977663ee9073e79c6e8cd7b6

SHA256
d9a7822c8484ff99d34f857a28e627fc8e8458a9e554be5a2267a5259f261d68

SHA512
a0bb661a070ab631b5d021211ae9f558192aebcf892b4e2c9d4723ad033874d6c27b6b2da388f7c1462e71a27838dd729439646340e30bdc0328fcf25489b267

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kfcfileinfo.che

Filesize
115KB

MD5
3c44752ed80f0419da64fbdd575d72fa

SHA1
799096bd5160811e69157a688e3d4c2b6eec8d93

SHA256
9ec1660db84ba68a884e32f6c446722b1c39985b7813432976fd7dc27943ec33

SHA512
4bf17d9c10d9e44392ef6e83f69c4881b269a9a674d7d418cf589b0646c152eb7f12167fd2e9cc8b8b57bb17624acc6b01a8c53971f451554e180a9bd3eca27f

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kfcfileinfo.che

Filesize
45KB

MD5
d64444aaf71c688348c658d0d793fe0d

SHA1
ef9218a2cc089aaa06b71d4062629b8769325fa1

SHA256
202691a83f4d805a1ed0125a8e97fd8e9d4bab4ce21e1757eb95830f2f880e38

SHA512
26da8e99064a9d654fe47e7980255cbef8536b508986f3c752e2dcbe01ccf8e1cd18cfe6ea3485c8b6c6c0fbd32663f469bdd4a96c0a8f00a96fabff10363118

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kfcfileinfo.che

Filesize
45KB

MD5
6b49436a2447df411087e3afb8b47da3

SHA1
4a4ef0c9af934f643e758a9f88539ed9be3231bd

SHA256
c4805a71cb82c38cb5899e1253b622da7b768e9b9f369e818d46369b59d50728

SHA512
04d629af56fe7070e21ab71ce2110817b788d65038a600e48b5d54243ec7255d6b71b0ac506d171001fe1707dbedab8411ab1edc22ccd4d1afdfbc5805a1fe38

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kfcfileinfo.che

Filesize
65KB

MD5
9a10fc6052ecf9f6ecc12c1c62de017d

SHA1
126fd478653fcf97fbd6a42e81e4cf20e11783e7

SHA256
04f080d7c461c0f313f6d943b9df2e25868bc12ad8944f68b944ded83adebb61

SHA512
1a58b653e7a6709825082a3f2d0f0fabb87455eb8bee173dc32eba273547970e4fcee6d076fcfb0ca5c547879d569d53792a2c00f157d9fd1f8d69f79d8ebb7a

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kfcmicrosign.che

Filesize
376B

MD5
3c5f6d44a7c05492076536d218ae7f50

SHA1
5eade9b8b458107baf16fb28fdd6651693d03d76

SHA256
77d7fa1a2414db8a0a40ee91e0ed9034691f8d7013566f48c5c5759efd29b3dd

SHA512
a6ca32b03e72d0b7bf0579e57358446e12b81e061655f51666c2dbf24c3674b35d2b034c7bbf71621d5392a373283322ec185cc8c288f3f2ba578bafbdc1e510

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\ksecachecfg.ini

Filesize
108B

MD5
63a4aaa6ae89aa99cf714589e51a2bf1

SHA1
1aa184b1f0e129eaf5785c2fa544af81cc724e00

SHA256
bf01284e0019ebfc83a748f324c6c4829b9009c32c09c865b0f7c2f51119f7e3

SHA512
cc6eea0e2372d8e1283fe5a7c2663ecb3c308c0e99eb07bcb40bf9f3acb1706380d84933f7073383f643023324578227919194cfec5e8a0acec73ef991d70afe

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kseset.dat

Filesize
159B

MD5
5f345862a3fb0b35c5935795b88846b6

SHA1
54c1303023245780656639228f52e9944bdfad07

SHA256
23e932cde22a342a05e00c82b92b638863a6b1dd2a07aeee87ef549173a529e4

SHA512
3f412a44f8e6ca81e926157e5e20f03d97817ea88528ebe738a4a8283ffebd2751acbd194af03ea3932b98b002e5e7a750b4e3a3f2df6fbc000cca5713d4e80e

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kseset.dat

Filesize
166B

MD5
17911c95f98e5ed4ba81f2b19b6d5fa6

SHA1
a4b638723f6c17a6d250afaeb1ba622e43178eab

SHA256
39b5b055dd70b82a76bb937d20aff1dcce952a50ef4fa48cb7f7a7c913b57b07

SHA512
e69ccfb2bfa099894e58636e8a006f7b1027420ee02c3911723b2bf3fc9c82acbb5e5d45a6aa3760b13a9747bc88f9bccb2edf538ad73c2343d7580f49a28290

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kseset.dat

Filesize
189B

MD5
7988de82eecadc09c1a6b3057ddc5169

SHA1
4eb5995e5870383127ba2bfc6a65e69ba469484a

SHA256
64a7d01a3c403ae300c522075b97dffcf3800251a2208e884253202314b0b31f

SHA512
634663a14aabe946e27ba71a21488d8c121960419d75554b4d5bdc2a4904c7376c2d49c43334067497336774bb3e5ee104168398284afbd481b74f7db3cb7fa9

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kseset.dat

Filesize
195B

MD5
a87d575445e683d306203ac46520e4b4

SHA1
84582fc3c84cffc971a21323eb22b327446d6a60

SHA256
35b05bdb1a3c5d43d4a4cfa36200265ad8e8213b0a0586864902f8700fdc9bcc

SHA512
096f5ea2600350b7916c26b4c1adde10364d9b2ec496c383785dc21d6345b848e0c1406993544f83a1f63c857331383077708a584f7b4b6895c85439e7b3addf

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kseset.dat

Filesize
206B

MD5
363088549680db9427da55c037767b99

SHA1
933e9a97548edcde43a1bb15d97b25929a6c5377

SHA256
3a3ae8ca683eb97b775703b4d6d84fd371f85ce2ab954871a7d78240a108c9cb

SHA512
e5f58478a7136aa1051861b4eebed484116b23f58fc527d8c9da8b1618f63846105c5bbd04356c2cea431466ed445c2a1a2915c34d84227513a9ac4259fabc6e

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kseset.dat

Filesize
211B

MD5
c3ace8c7265322b67a16603a41689390

SHA1
59aa2dcf3717380296e045dc2e2c9af7f0433f2c

SHA256
7b818360fe68ac6f5d97e3e5870a2bdf2aec1a99b288a58acf08577da3d007c7

SHA512
1eca32e58266920b1c6821084d3dbc485b182b4bf3b50bda32a5d9a8369185c83880ff7ebb309d07209d0c98e505016908318fac3d9b9349c4455204d0bd5b4c

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kseset.dat

Filesize
223B

MD5
6222f6899109a0497311bb875315744b

SHA1
f6a949226102738655b00fc46ae2d218d38de8a0

SHA256
aae5bd65493d238f5d0fc9c51d9cad224e3eb638dd7619f2beaff6b06e7bf0c8

SHA512
0d26185cb01107e8bb3148c7a3d180818487da420e20cf6f68986492030f764de20f558085b33dcd49e3554f4af2523424a667ee2723c33280380b23344f5608

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kseset.dat

Filesize
294B

MD5
e31ed2ed3962a78e0edebeb700303349

SHA1
1d02ea6db092770ee70b58cd52f9177c173ebb75

SHA256
376d30822752314b9fddfcc37c352eab0892b505f18fc90bb5c1ec11bb908071

SHA512
aa2cd20cdbe4e410e479331145cf9e8b5c89e2273cd5de3e62e2f3079054a45ba6b0818991b7b62f8fcd0b595977cfc201efa20a47555f28c4152216e4d9e062

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kusrtrst.dat

Filesize
107B

MD5
403ea32bfba77cc8762d7123b5ff9303

SHA1
5c87a029875795b12622b34646d4afe811b4dab0

SHA256
17cb64671b53f6b3f08a6d08a4d54f416c37717de4a54820e9492dab219e3e8f

SHA512
f7b25849556c337d6c0c28d998b4a13c87216cbc058b1c6c9906d7d8fe75ea510009a43f4d38601c9976ff2b4b42c610a72e1324554e975594a0cb79e9e99f50

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kusrtrst.dat

Filesize
107B

MD5
250127c390a431f5ac534daf5823018d

SHA1
600c053a561e1100bd76a66aa0242c618615c039

SHA256
4f8d19d054d81aaf937709b4072de93765fe398298efb95a3c431ac69b46dea1

SHA512
813a34f44a6d4f0f85086deafd671a9312691be759e9e27db97f8a86732aacad8a3c659adcf80f766133d22b84428d42d264754643eec30e2cdc15d3394fd868

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kusrtrst.dat

Filesize
107B

MD5
0e64c48064a25c9ef9d8ae4e56188b91

SHA1
b7147b126cce0b07bdafe4bc5212fcf580ce24b1

SHA256
9b82cef50798e776480d98b63aaac48e9a61f9f1f49954172775a7070a7900ed

SHA512
bc0e93b46809155bc8e1f4c3d22dbc3a59fdf410431ac196b9c9e500146935b469ec8acd7ccbd078f2b3554e48033d9c267a9001875cab3e15e01126353c525c

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\softmgrcache\tmp\45552_2012\60047640.dat

Filesize
2KB

MD5
bfa3e6e1bfb488ba1ce54cb4552ec3a0

SHA1
91364eedee5015a6889a9029c9c5218f26d97cd8

SHA256
d0ac3129f9c41a5c1594b450934719ef01f54e8679cca6aef7a7a639f6f31694

SHA512
bed85aa5540e93e291c2002079e215b932b11d93aa1eb17b7258bdf5d816aec0f1955a05040fe80e80256e8792b949b21db4549f021a234aea12f75216fdec86

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\softmgrcache\tmp\45552_2012\70001788.dat

Filesize
268B

MD5
2431a2e9c094ee1552172cefde6a4783

SHA1
c25d5be6b64ab462b51f9a8d961428ed15242bfb

SHA256
fc095f93d992040781607318fd7af85d7ea667a3990a59b7538e6214fcec38f3

SHA512
2a28dc82c725742274d6a86bc015fbb47a4d67a0e37bdff8e14554a6f4bc6a2ef3c0aca9755dbab68d72cab2e35f195d954b76545bf2247f6f10dbc6e4752407

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\softmgrcache\tmp\5392_16136\60047639.dat

Filesize
2KB

MD5
d3f730892dfab327b9427472dd598eb5

SHA1
daddec77679320fe2d957ece66e91aeb5915ad59

SHA256
70209d55346abca8dfd313c0ccb2f02f894d235d01e4d9404abefdff10193948

SHA512
8b4cc71cb6971103e8adc9caeeee26c9be57878472a94d3444c0275c49d0759f832520a405558f3412eb9b46349a923c7e0c4d3ee4a83e16ecd87a40481ee3ab

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\softmgrcache\tmp\60047639_45552_2012.zip

Filesize
1KB

MD5
1788c7567ed66b709214b9024c6a9aa7

SHA1
8f5cfe39d732ae4bc8bb6b641590c98bf718ffa3

SHA256
cd7e1e84946321ed3b72b19734c29799cc447f0dafb5e5e49eaa7a8492e92254

SHA512
abc1447f6753f59deecf1eee74d3739a2dbd123f217a95e8d1552118adcb8a7ad75c58b7c8f08355c10914af9c121974b5a0e54f1c5ebf7d8734e18e6e88bafd

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\softmgrcache\uninstallinfo.dat

Filesize
84B

MD5
018055e2a53219472a77785991711a61

SHA1
97627e693146920fb3cc7dadce626a9bf541fc7a

SHA256
34ccdcf1dd6a3b9c495d029ab6ccce1817d1df3789dd9a6fced643730b32d393

SHA512
3fc676eeda4e0d3cd92ea2ece2d5499156c9cd6ef208817182aeb5a93496f787a07462faba84cf9c6336cbe92a8be990cfd6358e27b415253e708a13fba628a5

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\update\kav\data\index.txt

Filesize
1KB

MD5
a4185a63fe9960a3a1542f1a6e6a7c30

SHA1
4c5c9cec2f061b345556be4c2a8c6aa134fce64b

SHA256
047859dbd189f567d4f0f790f4d8f00503a01cadd65a5b3fc1c76ddf6556580c

SHA512
0108dfa18c3761541760cd7a8dba081e5c439f6786cbc71664d98f974723a029079813341a287c3af74c5d4516b33ca12f74d39fa0d488c2ffce53b00b9428e5

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\update\kav\indexdata.txt

Filesize
94B

MD5
7942118bcb07d9603fc1840f886a1322

SHA1
824062e6ced40abc7f22d1ec224f3d904f2db3c2

SHA256
95897476ffc95d483e647b955dec6d2b5ec1709216bf744fe86408f2e60651a8

SHA512
76bb87254ce474dccc0af72d526989d9f0f53d926d2670382a862da5f194298d91b1e6eef5eff60e29412d172740d92350ae741868b0850b475de29968893e5e

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\update\kav\indexkav.txt

Filesize
286B

MD5
1b928880780234ef0e481d280e3bd9c1

SHA1
8ef0fe16be693ce2c2cf617454c1d03ffcbeefd7

SHA256
55181fec98d93ef7b84a1f63dd12444577742b6ddbaabc837af6e7f24e744ca4

SHA512
8925b4ef92b4143c9641b5cce351dac8da169510b77fe698eef92363b5a756135dca7d8a621d84e482a950864552cc637f7b491541cc77db37de6494eaf26575

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\update\kav\indexkcom_common.txt

Filesize
101B

MD5
2427a180dc2ad08dd090380c314b197c

SHA1
d7dd8102501849a8e2e79a2c1f2dfb5a69a5884d

SHA256
0a274cda66d88d878d008639f33b8903669e348ed1fac94e8c210d6b5e2f17ad

SHA512
6e8d8e715d5e197759b0c6c8dbd880d548cce439ae122f5ce96b71629e54270ff87fd7e91501d233b3714438cfe5192fa05c8bf16e45e5e04ad5be0aac079bc3

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\update\kav\indexkcom_commonfast.txt

Filesize
105B

MD5
fddabee818320a11b805e543be537563

SHA1
8f301922f80f67dea9c009d02288e2e3323acbc7

SHA256
41422e6d850e1a5c6d76c31a387c76a13f7c5ba0f3ba5f13a0efe30220339669

SHA512
a6ca225e8364a15e9f3223d50cdfbecf291c6c923ac3458eaf7336ded676a32ee717d41c2dc1eb61291ed64b15c28b3c14468b0d6b869ef9ca49e61b76d2e9b5

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\update\kav\indexkcom_driver_manager.txt

Filesize
109B

MD5
549c84b5e6fa2e5ae7825d91a2704f17

SHA1
07fbd51f2624e9c6b7a311a83033e8bcc5ac6334

SHA256
6f6d5e0c5b21e2688cf74180a76ef2dda42aeaa3db87593381b06d6ab245431f

SHA512
e74f6c97d1549b1854934a5e9838a08e04e130b04b4dbe35c12f3cc2731abab173aec46f4e8e18ac67abd0593afe1eed21c006bd70d03e3ef52248708cfd501d

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\update\kav\indexkcom_kcrm.txt

Filesize
99B

MD5
e554ae6527cb9c4d799bf6969f684dd1

SHA1
e4375142c183e9119ae7392fa2dba68c54308bab

SHA256
256ac4994e87c7f909d5730adb044e5ee3d1e06650dad8556e7a35e0359863ab

SHA512
1fda2a2e8ca440d043949a456befde4f11a82dc90d473c62992b79609e18bd63b8a5454d9c0077238d15591cfecedaf8b2dbb2a8f30a2a910d41c29f2ea629b6

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\update\kav\indexkcom_kfastpic.txt

Filesize
103B

MD5
72832692e3cd0eb8269fcbfc627fcdff

SHA1
5428e810ea131915bbf043f35f70e3a3b9e0e949

SHA256
83f12d50bedd89fba7d1e7ee4ff2ac62885e188fd1a88e72dd42f9e436ebc07b

SHA512
7ed75ca3ed70812fec80fca990f9ed1ed72ccb147bf1e18dff81bb93ae50412987c523557029c0290f74f6302299472dfd2290172148719fa48d8489ebfa92a1

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\update\kav\indexkcom_khackfix.txt

Filesize
103B

MD5
9e1de80658f96e01df66d1d0ff3624c6

SHA1
5e00d81b822eca9af72b9ee259601448d6e15b49

SHA256
d2c40cb7f6285d82e0329c3e3c5b8e3a3e87a7adb58c072181c334a098cb988e

SHA512
0504b41ab098ab5bba4016d747c387adfa2b954d480d40ad500f941a6887da20b52a609a3433ff7bc42d0ae7905074d004a0de62b0fa1d0981ebf2fccfcf8dcd

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\update\kav\indexkcom_kvm3.txt

Filesize
99B

MD5
2900ed249860d33cdbbcc86667bca201

SHA1
11767b5b8f8bcc34c4226c654d956f453ad8b4e0

SHA256
167b71793f677e687cccd0601f24e3b99dbeba5c02bfe8f92dbcf31ee9b47596

SHA512
56f5d57286ba53a3377369d5f4284c4676f4175b3048408d3eafc86799a5fccbb6844bb7d5654f6ef37fec0e8f81299c58c2fefe14ebf461530926354abea959

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\update\kav\indexkcom_virtualassist.txt

Filesize
108B

MD5
302fddcaa37b7645dfffc62a8ea11323

SHA1
f77aa98abb709c9efc17dd4953b05629c61c7170

SHA256
8ef973965213ea72605407b52c25c3cb2b6372892a992facc43828ebc4150881

SHA512
5fb13bf6a48e0f7498963d281ecec68277824362af9ebbd17ec1e72d5ee3bcd439bfaab309f8f6f5fd9547c7588c035cdfdd58227f825ca0171256037244308d

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\update\kav\indexkxeapp.txt

Filesize
196B

MD5
a8a918ef9e81eb1618714bf7d57948b1

SHA1
2bd049e73d84a1f9bfaedb9df956c3df8716b41c

SHA256
ce32cdf2c7cb07671a1785ff90c813a90ca752b836a24f34c79b482ecaef83c9

SHA512
7b886087dfde2cf4b5b0b5e741f03c9db878a15477eb0b6b03a0f61a44dcc209b0a3f6f048e6950b3901b37bbc2590aa4072e28b19ecb72eec5a134d4a5615d5

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\update\kav\indexkxecom.txt

Filesize
196B

MD5
5541e14b02818317066dbec50d2d0096

SHA1
9755e01403a44a905dfda77c1767c737d0f30b78

SHA256
92c9a1bc63c87cb11aa2720be8fd2639bdcd02ebb33afce03fd9fe449dbfff57

SHA512
5e578666cf196246ed4194aeb5ef62782f759d152d2cb92a702d591693d8e51f12e4e1a14404dc515980340e4bfc3a6ff7a3207f6f3b1f9457a36f00e8b1fb1a

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\update\kav\kav\index.txt

Filesize
264KB

MD5
abb201eb2d7090a0ad6884f46b67b59d

SHA1
6228ddc326c8db7b000f606bed07765d6457edd5

SHA256
08dd9c0904a9d5da66afeb80277a084a8d4d19f8ccae0fc5245b8881bf9c6dc7

SHA512
2e6286d6b3ade38f1f9c1ad857a051d7e798ef8db1228ddc12e92bd21de79b685abd7d4ce5684b8f4ec782f47d42665c60f89201ca30440eca2d3c583758e048

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\update\kav\kcom_common\index.txt

Filesize
1KB

MD5
975ea590ef30e8af809f07d8293ca7b3

SHA1
c4fa51c02745563ce48ba701050c0390feb7e3d0

SHA256
fa663cfcdf6bbf0f32790d507cacc573593e701d94785b00c2b462ee643dd3e4

SHA512
c814efbb11ef9a0181efecba98896e3a60029533bf0cf6b5a7a37a787d56b7794a7440b1a9a99a7cecd173e3be2d0ae22affb45abcdafca72925d9832342b793

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\update\kav\kcom_commonfast\index.txt

Filesize
10KB

MD5
ba105f73fb59e7caf3704684144011ae

SHA1
e564ab2c0dd45ba9facf5325f1c7e2453868c6f9

SHA256
98c5dfe0de74d97164faa5798898966dac809203fe0274c727253ad89f81a26d

SHA512
fc79e72c1bd883a2fc7d922f6de19c17141314a921ddd032454fc002d8883b64ec4e66fd5928180131b5c0d131053fb10561b551c13d423a0ce772c887fc0246

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\update\kav\kcom_driver_manager\index.txt

Filesize
8KB

MD5
a3962b23d3998cf9fd25dd2b3ccd2301

SHA1
ec3f1706cc81feca26ff6ea1201b06288f4449ca

SHA256
303a2503aae82bfa818dfb90194841c17f56d05061df87ebde63a322b270ca2f

SHA512
bcb32c87bc9536bd442568f71ae7c7876eedc409174ecada49afcab124703a6672b15242c766bd5e73246e116d85acace9de75c97f0ca6e12f28f58ba8cd45e2

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\update\kav\kcom_kcrm\index.txt

Filesize
2KB

MD5
d5650b9c4a38709b4c3f169640c6a7c7

SHA1
9e0f04776e6024ede15965b616eabaa412c5cb18

SHA256
ca56b926669c3b4f3b035c0d85e2e56200d9409031a800ca0713da32add65c0b

SHA512
1ff7cbf5fb47274e6d133aeb8db792952f97b60af9b3461060548d025b884986c1d625a4bdd792862e7ae17da2d18f1a5f4b90f4db929fd83f55fccb96d01052

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\update\kav\kcom_kfastpic\index.txt

Filesize
16KB

MD5
5a958ef7b664ad4291b50e34aeb4c36d

SHA1
2e1e40f0a8e870e7a84b87ef91201a73ab7b5909

SHA256
792c186a5068fac32997c66a03704fa1de05961329e6f3f3512ac6ca8a58994b

SHA512
80003ac55e36515a39b38b6b6c6e7db0286ec4f44d4a932029c7a882a9449af2333c63d60e57ba7b7e88048aa42497a7d59386b2143b03040f5ed29db20f739e

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\update\kav\kcom_khackfix\index.txt

Filesize
170B

MD5
6caa455f27f669c79de82aeb837c5cd6

SHA1
b6a109eba968b41ca3249f9c58d30be53ccb85f1

SHA256
d8108d7b92fa9710fc58eeea5f5bbd42416f9242af91e42b8be002c5041c6aba

SHA512
2ca382db475b7ecbd3b347254a1bf7a675e9ca70530779d6ff8cc5feb72d111ae0f030ad5ca713b7cb6f08c377b79c0b9ecf351798451f2000bcb94f663d5471

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\update\kav\kcom_kvm3\index.txt

Filesize
2KB

MD5
0cb47cc49f4dd8f2f3af2013984eceb4

SHA1
adebefe3c8cdc808a2e157ab1fa4670f6422923a

SHA256
6c2a9ed459cbff5f325ded7ccfb63a8639e2cc3dc9e0f96051e09d8f1a8fbf28

SHA512
6508422df4e10c3c74e02a7f04360d7cca9c55aa70d2db812a4d149d22fde11a969bea8d076e70f55c8aa361dad058fa51e00db0330d23294acb3bf058227e5d

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\update\kav\kcom_virtualassist\index.txt

Filesize
14KB

MD5
85f26d040a43f73bc563db0bf7dd67fc

SHA1
e740baf059386d76332d1de048529f479d37871b

SHA256
a56af8a23be20f781ca9cc30aaf30bbbf71dabf48fc22148a08fc7016f7427da

SHA512
f7598707555209f54493247361e89d0bd25b059c8c8638dc6370b23780e5a48dde026e20dcae1d0c05b42643be706da74ddbc208f2212577e0f0e7dac26f72e4

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\update\kav\ksg\Signs.ini

Filesize
5KB

MD5
6a3b8280a6c4572a3474acc606ddd13a

SHA1
65c124765d11955a0e5b282a5fd87e2ac4326fb5

SHA256
3c9543d43f4722980d9f0ee0d174ef34c9c998935b3a0e24541c1ef88479a3be

SHA512
558e521318f85e55d079144ae58d6bd9beacdaa64c6d1d70deb8f5d9f56f68b71bc73a63892efb7b7caa2242af0f6366b17a8c7346d76698a4193a3bec518793

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\update\kav\kxeapp\index.txt

Filesize
58KB

MD5
a2f6f89003ded687cb7195e019bd22e1

SHA1
795f6fd8df34e93d8cdeb223b8f4c3ccceb0fdce

SHA256
a9982aff428e45c2078a8233c775fc6b30547af43de6dd5599249850aace6d1e

SHA512
970f01d1880724227c5c4704bd40833fed6b76967d9cdf3090f36e4182d3fd71aec9b4851e3c7fbbc1331bba1345adefb44cca93d9c54444ef244d38feb75853

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\update\kav\kxecom\index.txt

Filesize
8KB

MD5
1ec3d8c7031ad8c017eeb558a56499e9

SHA1
d050f4ab363c61356603ca2957348b54267cc582

SHA256
c6d659e308294d4f1c7a0e50812d5c8099fba71a500ae801e998c82b961dbe88

SHA512
362fe23fa594b667edcc91efe1a78fda916b58c9c8e1e72f37f0cd0a3562b80453a7eccae155cddad9affab436f9a1c0b7a3c0f18dfd7b5411915e5714ab4c2a

Download Submit
C:\Program Files (x86)\kingsoft\kingsoft antivirus\xlmodule\download\atl71.dll

Filesize
87KB

MD5
79cb6457c81ada9eb7f2087ce799aaa7

SHA1
322ddde439d9254182f5945be8d97e9d897561ae

SHA256
a68e1297fae2bcf854b47ffa444f490353028de1fa2ca713b6cf6cc5aa22b88a

SHA512
eca4b91109d105b2ce8c40710b8e3309c4cc944194843b7930e06daf3d1df6ae85c1b7063036c7e5cd10276e5e5535b33e49930adbad88166228316283d011b8

Download Submit
C:\ProgramData\Kingsoft\KIS\hg.dat

Filesize
53B

MD5
ef87c7159f87028056a0cf70662d52f6

SHA1
eeb13ba788f08b02ba2af889d32ba9aa4989c33e

SHA256
c0dc76cecedf3b8922ffd6a4ef7414588de6fe1c38ead87ce63336067cc24f4d

SHA512
2d52c6e28037e5493780ca9d3b940c4819ff598df439f88614934c081114f3ad08bed5a81fc12dbeabda3432aba92a7e00cb91ae94a965c174147ed89d5a06de

Download Submit
C:\ProgramData\Kingsoft\KIS\kich\149-45d4afa6-6436bae3-8c-duba_funbox.ich

Filesize
4B

MD5
ae4701b1483b1e2d4d348df5335604e6

SHA1
c5fee8f1135f5577ce49929966549e629e975983

SHA256
2005e455e8ae3fda512098771aa93b337903c3a47824ce9949bb3e7037062f46

SHA512
dbf00a009763af47dd543fd2619491ba768456ec9d9d86c1a419149a6d44988fed0d37aa5e5e8ec684bc3f0e9012820b8c52c9553c843dac049aefa1ab5fba0f

Download Submit
C:\ProgramData\Kingsoft\kfc\kfc_common.ini

Filesize
38B

MD5
c2c5c41bcb813f1da9e56696db32e5fa

SHA1
cd1437f804bd2e5f7295280f66dd5036ad5709e9

SHA256
bb27f310353806ce4b090e23628c7f53e33b0b458560305d089f66f330f4e88e

SHA512
7ec12674c53bb1100d8cccef9179577b303aeb79f4f13d1174d78027ba17a69fddf21ceebaf0a0024d249922d8798d426f5bb56cd0bd688c7ca43ce9c2190b41

Download Submit
C:\ProgramData\Kingsoft\kfc\kfc_dw.ksg

Filesize
257KB

MD5
29a8c69cf4ec9d1d3f09c540ad54e3aa

SHA1
484c357aca6ecc7ce6a759d226ba234b674d3e30

SHA256
17fe2e67b1370b2c73520fa5c595120e279d824c0c79b1f4f62bc5ede52b0790

SHA512
8a7b5a43ea2305338f7e540ec99fdb54e8aa60063e0fc13aaa05d6a65a820b9eea72ed72d7e2a18b246fc40bbc5af5779bf57fd39e6361ad1f521174020039f8

Download Submit
C:\ProgramData\Kingsoft\kfc\kfc_dw.ksg.rpf

Filesize
259KB

MD5
48687ee263335e24ea31f21e52c48cd7

SHA1
3f92baab1608a26f2364362d2b507c119f8690cd

SHA256
2bec1120de1304d66b6c8e40c670c2e7cfda95892628b1f9462d67fd8d0541b8

SHA512
57717a83922465bbba8398d92b53908a4497324c272a4c83581662f9de8bf165803483cc50194e2d28098bdf250ce06373994d0b49fcda3fe513d9646bbb41ce

Download Submit
C:\ProgramData\Kingsoft\ksbw\ksbw_wib.fsg

Filesize
256KB

MD5
47d8dd713a9e27bda9ede09a5b9f2fd8

SHA1
14b667c96eec8ef8d9ef2404b6ce6ef22b70f843

SHA256
722586f2ead7f8e14bbc95e5f84a069255a3c21449daa03109ff81c6bae96365

SHA512
0d37217f4a384d2e9ba876029f50ead9a01dc6d629de5482d2527e14881e836aef8ad53f677147c5a946964697bcf1826784bcb967bed29618cf1e3ee847f089

Download Submit
C:\ProgramData\Kingsoft\ksbw\temp\fsf20CE.tmp

Filesize
434B

MD5
073e77efd41529adfdff8333e268eaba

SHA1
9903f0e34550a1fb7789d4a7088e01c12eb1657b

SHA256
f62882d049634daec2498053a061b96ff92bd6d80ce6354ef9c6fe7caf2f42a9

SHA512
4009ca292604b0ea42df93f4f93c72c8c24628dfb89b17a9952d676ef58d2ef684aa923fa24f11306921002f8fbe0188d3c21928c58d0c787e121ef8ae21b2c3

Download Submit
C:\ProgramData\Kingsoft\ksbw\temp\fsf786.tmp

Filesize
1KB

MD5
6bec9610c099fc1227337c86a8771dc2

SHA1
441245d51f256fea37c04f8fb297eebc2be7b2a1

SHA256
9f3472caa87629385c7b4d509cb17b1502998cd12e9da6310b8a53ec18f17834

SHA512
916520ae7367e9bd743acf4d1ea40939d5f4ded1242da2cd9f5543e9618ca989436a13feb93f898ee325646463871563f600d80fc544b48fd92ed3dea8975701

Download Submit
C:\ProgramData\Kingsoft\kvip\cacert.pem

Filesize
230KB

MD5
2aeba46562a9b9117a9217520f67adc0

SHA1
b50ee9dc259dac8309b342a3b97cf21aada827a6

SHA256
435ac8e816f5c10eaaf228d618445811c16a5e842e461cb087642b6265a36856

SHA512
d499afb6d5a50fa3f82a2cddd0c1b2f0a804ea7c1a811c7fac73453032b9a3a9d59ec1b34d08060448b493a30af1bc49f332fd651c8865b144ed7817ae90c489

Download Submit
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\金山毒霸\查看实时天气.lnk

Filesize
1KB

MD5
4226c3d72029b51b93e9888fd0a5806f

SHA1
7fb09b519c37361256044932eb0afd916ccea97d

SHA256
167f70514dfd48538c24e8074afc8128d8da6a66f54d600618f5309401e0c960

SHA512
f13eb5921accd0645f935459dc359fe4ecb2388b05930aeefbbe404ff0a8e57c6c1060454f23f9e8bc01ddb918b708f2fd7275dce7dc76d45e91b30db27ad2f5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

Filesize
40B

MD5
bab948aab646d615b0fbbb90b55433ab

SHA1
0ee46cc7db939e55dcc3a5cd17e2fb893ece7a34

SHA256
e02daa351bf7a75dc1b7e9b11c5d716b89f108058e70326f0a8b7b8ba489ce0e

SHA512
a1f82c1aba6d15216d2313673a200d1fd24f99577b06245f4e326df99ab0bd4c3c509b2ddab14753225b47f4c973ce5ac0e08c90c75430bc65c61c48a5969fed

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

Filesize
40B

MD5
bab948aab646d615b0fbbb90b55433ab

SHA1
0ee46cc7db939e55dcc3a5cd17e2fb893ece7a34

SHA256
e02daa351bf7a75dc1b7e9b11c5d716b89f108058e70326f0a8b7b8ba489ce0e

SHA512
a1f82c1aba6d15216d2313673a200d1fd24f99577b06245f4e326df99ab0bd4c3c509b2ddab14753225b47f4c973ce5ac0e08c90c75430bc65c61c48a5969fed

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

Filesize
40B

MD5
bab948aab646d615b0fbbb90b55433ab

SHA1
0ee46cc7db939e55dcc3a5cd17e2fb893ece7a34

SHA256
e02daa351bf7a75dc1b7e9b11c5d716b89f108058e70326f0a8b7b8ba489ce0e

SHA512
a1f82c1aba6d15216d2313673a200d1fd24f99577b06245f4e326df99ab0bd4c3c509b2ddab14753225b47f4c973ce5ac0e08c90c75430bc65c61c48a5969fed

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

Filesize
40B

MD5
bab948aab646d615b0fbbb90b55433ab

SHA1
0ee46cc7db939e55dcc3a5cd17e2fb893ece7a34

SHA256
e02daa351bf7a75dc1b7e9b11c5d716b89f108058e70326f0a8b7b8ba489ce0e

SHA512
a1f82c1aba6d15216d2313673a200d1fd24f99577b06245f4e326df99ab0bd4c3c509b2ddab14753225b47f4c973ce5ac0e08c90c75430bc65c61c48a5969fed

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

Filesize
40B

MD5
bab948aab646d615b0fbbb90b55433ab

SHA1
0ee46cc7db939e55dcc3a5cd17e2fb893ece7a34

SHA256
e02daa351bf7a75dc1b7e9b11c5d716b89f108058e70326f0a8b7b8ba489ce0e

SHA512
a1f82c1aba6d15216d2313673a200d1fd24f99577b06245f4e326df99ab0bd4c3c509b2ddab14753225b47f4c973ce5ac0e08c90c75430bc65c61c48a5969fed

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000f

Filesize
64KB

MD5
1067041b8fa46bae06ebeac837cb67ed

SHA1
9a1e51cfe25d04692592f1dc13ce75058db813d3

SHA256
e6f3a928b555e72664e65ac8d3455b7ace51ce76f205975f98daff89b3a5d533

SHA512
d16c71f87ebcdc4553cb5aa4283f84ba02178e80d237a99d56ec416377031af4354582d459abac88df5b06239e3fb4625466b478bbf67ac5f6f001e82fa58882

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000010

Filesize
37KB

MD5
47ae9b25af86702d77c7895ac6f6b57c

SHA1
f56f78729b99247a975620a1103cac3ee9f313a5

SHA256
9bde79a1b0866f68d6baa43f920e971b5feb35a8e0af7ffadc114366f8538224

SHA512
72b5296e3dd1c5b4c42d8c3e4a56693819779167b9f02bc2d5f5a626b519a9cf10bee59846d614c929c42094b65d13039f6024f6cb1c023e740969aaefd060c4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000031

Filesize
487KB

MD5
04af7e0c4b22706cd9c18ce7c641a9ba

SHA1
04dcb5be450b01cd249623b10c619ff84b5042f1

SHA256
e5dcba92291636ac552584a7f97597ef936b441499fab8d7efc92a289cb33a93

SHA512
1df3ad28bfa52f98c3912c5535d06ed94d55cfabccb66c9f71d07a1503ecfa969863aaef49818d75820109b3865264de881f203c205ef1aa8bbe04b54823cd4c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004b

Filesize
45KB

MD5
ee928e992877929cf7f6b33b9af16b3e

SHA1
d0db85f7f49f4e30cdb49140ed97bd44349024d3

SHA256
f8ae4a69a583780b27893082498d70989d7a1ca0d1522900ad77815a416e03ac

SHA512
e0e8a780570bf7565cbff42ecd7d2f7a4e3b4ead42e3c2c4e6937d8e1e619992e403ca8406cdb49aaf15b8ed2c0ccdc4f25e4f301432ce89ec9571f0ee02fa09

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000067

Filesize
226KB

MD5
70dbfd369e4d3675a72fb5360eaea2c6

SHA1
16f5f56ba247f0493af4c21530f88cadeefceef7

SHA256
807f5d7439c6597eccce7f711619568671f2aad428b6667abdc42ec2bb35bfff

SHA512
2afcc50feb472f9baef4f5a9775284ac4ccc229fd0e5fca411307f061ebf5725d4f8a48f90d1eb3e53b8d259f551847687b13a345dfb425dc7bdffa2e1a97f8c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00006c

Filesize
1024KB

MD5
99fd464db477823d7b9902fda33639f2

SHA1
6b3e3026f624e417a58d9c40937524d16d9db097

SHA256
866ea42fdbd1eff5c9c9fee9b0b8917d112d68ea971e24e3158e0fa7c97df2ad

SHA512
464cd8838cb5fa35213c990e43471d556ff02913518e0ca1d69a51a5fbc777a66fe976b2aacf84ef351dbe694f8dafd14a9e8d039aa7d54fb849f004e46a1ba9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000070

Filesize
857KB

MD5
df2b21be8fa1ec3d78768d02bfc91c7c

SHA1
3630c9c4aa277169f5625dcdd38ef8582e51e86e

SHA256
60f6a02fcf0c0c52f00144d8abe8717ec9f24ea19da838a6aad92831ba650d1b

SHA512
5e8a501dec58ac41ec07a15276ee1a95235eb0552fa21ff8851cd8d62976c275d48060a848a638ce6d5f9c88a4eae9da6953e50dd5e450cc3e8f1581fbc3f018

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000071

Filesize
60KB

MD5
dab692eebde9ad4fcb505543bdf4c98d

SHA1
61023098b8866682ed0888dfcca2d39aa3733ed3

SHA256
76f46b79093e40c2216e23b73466e8f1d7f2b76918670c648436b3eda36c7cb2

SHA512
0a2f4dd86ec4f6e986d5ea085e1818fee7c70fba045b73fd1399f467e5e1e9370cfa41b1e3f6bff36815d9e1a4bba80610dc1398e9784bf7ab7fa567781f0639

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000072

Filesize
28KB

MD5
2d043f9b978a792c5a61163fdf3061c6

SHA1
33ba8a13c83be373e1703b4b6d072ca54d9ef870

SHA256
b5c1a94ce78972b313db079b89d218ae9de17e1267e63345e8ebfc887c60d067

SHA512
95509bdc255942af5348c853703f795a48e082447b52ca8d47b539b464b7109fc148dc674233239de2eb3e44b83f45b8ee6c20478f02374b2274dc4dbd173f8b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000089

Filesize
56KB

MD5
752dcbf9abcd58ee05b8e25cdab0fd36

SHA1
595b00e4b3e56108ed3b1e44be58d72f75c3e728

SHA256
91a6e4907565d2d4d13bf983c3cebb6b708c269ff3734c1383ec40cecdccbdb8

SHA512
8bbf50dbd630555f9edfb6e4a74202373e9ea30273e994d8bd3721e72d1e6054204a7069c90c382669d989bc16cf805265dab00e0719f97366b1bd5801d30508

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000099

Filesize
240KB

MD5
934d36abf3faac962bf1bc6a4b9c4a39

SHA1
e3e0c13a907b0b0f80f5884c82d43a9281766c0b

SHA256
99dd8928b0f572ed99adae0b77717013f4e5ef869eb3568aa4ca01d3f17bf885

SHA512
6047dab1fdcec524c37f92d9ad6ac87d2e2ec031b06d1c6723ce5670ee1a479e38f6f4757b20736b4de14e8d04317b339b439b418d8a13436afec681e4272750

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00009d

Filesize
257KB

MD5
b3955f80bce575d215c73b5b3bde6d98

SHA1
9a3bf988d8fde0f9a9020ff13c48d2463f7aa30a

SHA256
9dfcbf2d5bb368163aa83f1af606017f146812fc0e41ce9bcd0b923a433d5e51

SHA512
ae08c84130dc6c730885b9e3ad071fc478b188e7a1acf8bf67d7fba23a611e9172dda9fba0881783537f3b2a359aa3e4376f438181c3e2d927616087c13227f8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
72a46b833101213d45ce24842f9ce20b

SHA1
19ae174bceb3a236f7ce260130f72208a8083de5

SHA256
0a7e744b3364b8259b4d769da77c32b3075fd998f6c96c29d8c6e20aa09ea5df

SHA512
09b429ebc2a00792a2d65bb5a0d72ec50deae56825487a6ffef0b4c0961a91d926641aa66af94911f51ce552d5ff506e57b8cc43c1e671246c6feb316130c9d2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
9baf78bce89360e3c29d75fc886c17e3

SHA1
33a7c3d5d748b48a960d40eb06bad0a5891cf722

SHA256
04b5e85410041e118e54e3f5c1cedf28133cfb09e3a6fb7fcbc80f0be8c6b2f8

SHA512
7ff8e6ddb145b562924161224019983646fd1ee1abc8da5c35aecb2888be0a37f4edb9de1b82ebd74fc770521f664c140a6cebb0ab5a47e3b00fffdcb56fcf6a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
21cc7437c2a0a0b64f3d60f9aee1e10a

SHA1
55524e561763ea6250bfac5e4642670e92ad8165

SHA256
fd24faed67ceb28f23fcca0b9bca2f6c3506460b2dada710dfdb32d2306f33c0

SHA512
c0d47233b84041a702af837a1bb861d14e1cbb77e9707c284c923b18e7a44099bd1550bbc911c9c5b0222252dbb8ffb34f5abd14f547d0cd7dac51961d404ec1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
753afc9f87435713fe1ef879c7981f2c

SHA1
95ad9f5a178f8b597bf3847696783de9e8957e66

SHA256
4421e8da9a8455ce3e5a6d9835009840e0136786856633475d108331e27e33b4

SHA512
c5343d120eb09090301b26cca1f26b0dbbab4c9ebd3c49cc4acaab1e22c7d2e6d19a7fe801e8f969d80dbe707f4931bb8641b0331487f6e48441bf46a0d51e0a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
c2d94b6e33425bcd192af594945e828f

SHA1
7aac1553f8c1ac3446044f82de6a526cb979cd54

SHA256
09ce1be0ce0b1a928908cbc03bcd1ec678f6abf1bc30fd43721a5e31f6490122

SHA512
be865ccd805e19eecc77b06ba9088a6606634ae8e4a8d3e864c1c658f62d40c7e4474d970102eaa0cbc4af545201c0fad8cd3ad29aa78651367a5ae077bdf29a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\9d7f2cde-f07b-4d06-a74f-dd851913eb92.tmp

Filesize
9KB

MD5
853059289632cd829e75802b708a85df

SHA1
20dd7c53b0ab82952bf406ebe429fc4f7bbd61da

SHA256
172f05bd96989075e2b7217df8eb4e11f5ce0eabf3762f55d4906478860f4b0d

SHA512
de890d506bab2077743e5233f9d9e4bcfc4ce8c8fc2f5dee18ceb5f61d830d9cf8c5c7e714624ce89d8f584b873f2b970037d604244fb09fca14d53aadeab88f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
11KB

MD5
c7a39b97141e16d9509d229f968d5eb8

SHA1
159be2bf5ed1f9589749b56e77a0a5cb6744a044

SHA256
f3a3171b9bdbb46d89bcb12c1bf0f840177f180f201effa4e5d0a76f0f913ff7

SHA512
9e3d22107d18b21f0bf5e69eaff9cdcf4cab83b1cf1883c53763c21cb72694e85d58352514ddd165681d5babe791f590ec2dbca3a9b103b47ff27e293126644d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
a21e4451127b15e3cfb6e89cb3f239a0

SHA1
c7df1b5a5a476c453a850610d502222665775b68

SHA256
e8f05b77a127662a656d3a7f294a9309919c0971a922247a46a91860cbc59c62

SHA512
7c44eba8b4898c8c4b778d6914f3e1056a05ca75a884108d73c45d07e096ee86b30eb94dbf71b56ef2368e85fff14e8ea57eb39ac612ed29a4c3c266bfc690a1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
10KB

MD5
67819b4daaf951240213c96348a2e151

SHA1
79c032c8b63d020b44b34043bd930e3765830d8a

SHA256
a475cd39b8dcfdbffb75b7b6bab1ad6f53b18d0e3a547f8530dcc2aaf78deec5

SHA512
a2e3ef17d50bde6dc4e67163258df09cebd5d42e74db5546d97aeb378328d244e86bc5be2cf1ce1df9cdc0b5c5124d925d88db5b19911ee9f1bfab5b84880080

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
371B

MD5
f092a980bb5b41cca684c9011942b8b2

SHA1
92de0c04e5339732a484610bc026062240b99e0c

SHA256
35d85d95ab550620339f920279d09200d6bdb63b7369852f9b1def3a798b74c0

SHA512
50f094bf586e2a09ab4b82a0f2f28dda5069591a9229bc7489507393692ebb73075ca2acf7202a289cdd66fd0fba317359680d8615300390cba955aa57bb28e8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
539B

MD5
b639b97eeadc85512bbe53ca63facf4d

SHA1
cd4aff89c6bee21af6a41eeae7110eb47dd7ad6b

SHA256
6982d019d176c290e3cf2b7a8315ae50efde64e5739bf798bce9f9c2c313e4c3

SHA512
d9fd303ab8e1a06d558abab3ccaa923c04dcbc38fe2aecb6c9130f35f7e9dd46ea2b0b09471ec48ccfa9f0f664755171cb8471b18d6d331c5332d3be0be195a6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
0fc4e414deb49311a07ee612ef49b837

SHA1
6809b5cfd92bfe1d4e8a8c0b0c76675f61b607b1

SHA256
b219287da9770945b1037a108d6e397ef5a4a70f827ea01ecce18501839b7353

SHA512
0f69167dbad0c65eebbd6a60e776d22544bf593fb80c72b9c8c9a787a2ee4ceb3504f333f28aadf8f7570d7f85da689b1bfb124de8e73fc40a650221257fb81b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
95c4b8e37ff54550de61bad73d02a14b

SHA1
87941750371ac352540ecb840213756bbdb2d587

SHA256
9458c051a4b75f84aaee60f13b0dd48473acbe0c9450bbbe46ae2b8528b293e6

SHA512
954fbe41fd07b411ea157bd4700f29715e9fef554833a993f5748c553e44865579301059c62cdb7e508718d1cf529e522e147cd6764a1e2966d5395e0c801da4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
6e2fba647898e25132bb40af817df90d

SHA1
627196caf394cc375f3bb93e9df9b1f4b29c5edd

SHA256
38044ee1e9af49a5e5a721369629b6743864512b30bf25fb60d4889169d18459

SHA512
e5e65008d0e51b6395fbebf6c7b1c6be2bec27df57349089bdf92ab390152be1553da575d88d18a1b2f9c21fda079b25fd6f3fceb578e1e6e898127b05276770

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
e03a7055678d88b7b4a26cbbc157691b

SHA1
803dd6368bd7e9c75a49348397a051816b6522a1

SHA256
f4d7c9b54835b893dc91fa7ffe9e2e3c58f98abaa9c36e65a4de314f0be8eb6b

SHA512
68990b4cbe51fee5545bd61f30b174ff64bc28417ccd8a4e3b9106fe87892dee7b9ac015845b3a04b7e5fa8ae4d91e26e010bf72174e9319498425b686ceb343

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
707B

MD5
fe42436157dbe680ba622fab34a7c3b9

SHA1
b99cfba666de7c531c503e4ef70f4febc7677784

SHA256
b0caf9c23bbb9b3f6ea6d50fafd1845b6c7ac73ac5224fa97b260ee0fccbad6f

SHA512
6c6760eb826e43547828956b9e91fdf2be1c2f1198a76528c5e2c93586ee6e160e34288267b41554a3c4e454a5139b4b9cc54d301209895df3b2727d3e61cfab

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
707B

MD5
8c74344a50e8fd66344f0ab2c84d7d00

SHA1
f8d4d1cab01b2ab348ee17cc1b626c7e1da56740

SHA256
29b537dc8884c6172ea1a8c180823b94c3cb0d196e18a35ed3ff3a45761e8eb6

SHA512
297d2b9cff20b54de3dd71df7370f7f19dc6ef55ef223564d691f62f50696a2a267a37ff5c4403260b872df4fe61c3e922d5640e8bdc0c6c47b8944111a7ff88

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
574ba1513a6e688fec68b78b15bc5547

SHA1
112f4b1437a01bb9888c97ccc978de5207f64b82

SHA256
89b5f3af188b5811f1c4825607872b2724b6cefa5915e1c48c855c3b4dfa6c6c

SHA512
d57371780354eb5d97a8e248761caf88a1f6ab17b44d41d733d618a0fc8c4fa45cb2754d716461d3a1e1b9b494ec8eee6abd096f06c99532118a45d910f66d0a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
3470d35cb1cd28f8c3303680e929a6f9

SHA1
1535fd7a44109b8ad7c7dce357c5167e24491d88

SHA256
7450b45bc26783cc585c689a0cc63fc497c638efad220cc9253d75e93f17f3fa

SHA512
c32c8fe6328078c9567aef7b82aff54ed029a5808f8f4a57f3bc1cb711081dfed2258f1418bdd87ca0d3178f1b75814545aeb7db38534bf24f5d6fe26c5b6ae5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
707B

MD5
fea549b662a37b694e2408a09de0c260

SHA1
7c2975b7192dff823639899a19ac7b4693c39bb7

SHA256
01b79b278524535e34731749b64967e921171a5782656226284b680e49fcb37b

SHA512
43e0b2059c0560f643a0191af59efa651ff925e9f7309777b535e5554f22b1f8b7eb9ddfb53a7587213cdbee5cac58599bd3a42a7a540a14070de39e1fdfa071

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
027d209858d5efe7134ee668728d1f25

SHA1
950c33ba77c32b94df7628e9ca8df0e9323aba9e

SHA256
d97c6c88c084e0fa82dfe463cb1bcc5ca630ad00fa4e1ddd850ff6abd57c930a

SHA512
128ed2d56e379c6c1e36e779336356666c7e11d16cc3ae5afa6556e9094b9b58b0bb2e653583bc34a72b72316e3f48d802659ae5206f6caeb037d46834b96138

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
3bc7a62ba7542dec32b2183d653d12e5

SHA1
31a79617313e54e9020b0670e8bdb3490e26bb22

SHA256
d87668c59509ac008ff3ccf2077d4620ca336457a5e742cfd0c7bdd645d7fb56

SHA512
8785bb5f3810b87034cf23eec997eb0d3f51c2d2dd8ee39a7282c4b886ac58e21c49484927dc1610645b78daf95d4894e5eb3e3c2dc5ef5d0815ecdfe9c6040f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
731f566ed6cb48b6d31fb340d738f2be

SHA1
9b71f35168cc3a6361207bbe84f5ab3fe4eed175

SHA256
0e1b997a42da34cb278e8738f4f0bb8572cb456d5d44626d1f635db81b5fba50

SHA512
6165193c5a8b66b6bd8fc7b9a020bf5f72f11f9ea3f774a727ab064d86d64e7556e9bdd58eff08fc65ec77eb378ea620f27dd2d26bd87a37dbcbe75255a50361

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\d6fda9b6-07e2-484c-89c6-a55cc5f84e63.tmp

Filesize
1KB

MD5
a520002e83708871c5fdea1dc7f61e76

SHA1
6988a6722f742f7ef82762e19129891bd408ddec

SHA256
7f64fd112e66590e64a4a5b31646c4b199a52b24226ca324d36ebe57c099da17

SHA512
0dcdee40f22bd161fe76194d6707b8a98128738e8f4a267c79afd6895caae8d32827ceeb2c0447ae068c6340f27a9c74e320d2881201dbe950eb0c515b85ce20

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
0405ce83d0364f11a40d052fa0b71ef3

SHA1
e2e7b711b72724fedf4467e79274235070dbb203

SHA256
dfae132d5c9615deeec8e67cd21f0d3a86fc4138630b0ec544ee9c2c3d3bc23d

SHA512
1b2967659c3f8c0a20f443bd90be56d5d901cfb5eca1cd5f7f02f9eab1531b1b1a63db9ab97d3f4f6989fac951bfd420fcb2901067c5d53f24bd03261aebf5f5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
50dbcab6fc57bf76e81db60711d6295c

SHA1
7d3ac9a575c4f50126f134e781295967e2627637

SHA256
d7e47ba11a543f62752d1c9de15c0b54c6f6dac3fc20e0d221e10168d1058d3c

SHA512
903a30e2e905ed188925143dc84bbfcf71388701da60357fff704d2fd8ec13adb562e2ad0934def85cdfdd8d36ae8e8367c5b43c45e295f4011e596aab1ec80a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
5a8c8627acbef7007397c8390abe9711

SHA1
f676af0483f7c3762fe41d222b95cbf53ac917fe

SHA256
17dde103fc761b73564d0f3138d545d274536161f4fc1efa50fe5df47906f727

SHA512
4cd4b5462bded8f9cd781d32bd4eaee9ccb134c2a704b5a3f76dd0fcdb0f3add6ae99e5a57bb439b702994331b664195a994a60c7a0bfdbf3585b65f31bd2b4d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
6042097e3489d772b0ae636483f2fd20

SHA1
a0d3fe7bc7e03fba11e93ef3aea2e77a68c44960

SHA256
600cc2efd4dd89480a603c4b9d605d1a23aa308d38536afc81dcee2b267c48f4

SHA512
14b39021d1b2f2c36a7f1db58117efc17f74067c53fbc9112d1c03d976901edc31384b07f5a046e35bb998dc48e5a73964650ec7c245f045868c8cbadcb2b46f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
2a5fa77f3fff66570c1399eaeb8c1337

SHA1
526dea2e2598d1f64abecccf78464c0586ba2004

SHA256
26f0cf1a23c1f6560919690a24f541bf4d9054d97aaf9cf69444bbff722d3dc9

SHA512
2d9714cd4a8b3d5c8fb3fa18a1a455148acd76a1d58436116a709762b8d96f1b2ff2a6fc60b6423d3c733471c4178d73ba7d0a07a4f8a4277ef2c2c09b0673ea

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
4ae37bfae1212be5639717643ef101f7

SHA1
543c1234cd26289f0de00ccc3c96ae807cfdd99f

SHA256
006d2aa911db793d2a3333b58e0912e63544d772c4fc10e2dccefe1c7fabb2f1

SHA512
49ba84453c6d8d60f3b0b8bb08a66d625ed5b4a1b1c9a753d2ba7c363f122758a4ec92a3f2d9c70eadbf051840b8a9844d764ff517c0b755dea02c58d065819a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
7c79ef0d50fed771e7d0e418982135a9

SHA1
1a95d5b92b3f419abd619710b6891f7133b70b2b

SHA256
950f3f30c1d370d72fa65ece6096c8470b2edb166fc21dcb95ceff35103e8111

SHA512
29310f1a9b1818c55c04f6dc9171acc83a6a7a2e98e53e8f854b4676330c748b4126913826e3e6c1c6de79a4961b38b01c50df4964b00a5e767ab45142921921

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
c58dd57096defe07dafdc0c34a02ab4a

SHA1
93b302a5db7540db956ba0d73cd9bdb81874c65e

SHA256
497544b9b88a41a482d7232b74e12c727b9ee6463cdb008ace9d7c8abd90737a

SHA512
4dfd3f7223c95e12a3a7b8addf46af50f5fcf0239c7386d22af42a6f5f6ac1a0b1d658d69bdafeb2f5584faa401c0a329806013f2b81ce2252526fece26bd645

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
c5698f504ea43b643f80288977b0d8f5

SHA1
908b96e9a5e3d33b055c911b69860f77e6630042

SHA256
8e365f61ace48f2f60a99eec48c9acca5e893ddc6260581050b973683bc6ed2b

SHA512
c0a08293b0dbb1f8204a1334b4c563f547a4a1f955bf126133e2ad2da562aebd9a3f95d14bd8553de07ac8029367a36b457abfc7ba0192f17ce30d3d82dc7608

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
2f14888410befd5cf83f25b3ee9d9059

SHA1
3153f92cc1d9d0f4aa816ff9632c1dab67bf3f20

SHA256
f562b0c20019c0f4b5717c6b6074de83b9c80bad7a1fc1e398c5ca5ca559928c

SHA512
61265ec32b3721e4d6c960bebda1a221d8d6b244589c78eee375acfcc0b51ae02db17cd015f7341fd68943b97649ffdae6357336a1f98e787a949955a149a437

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
f4493c1755392ae1ac46e1de4b5ab7a3

SHA1
ee9244390028215164fbe30b346d4c541e7d68b0

SHA256
64fd82d993de1421a9d73d8e065a13fe2179fcbf00342577e73ed770720a1000

SHA512
a651f6e64c2e35c86db2232da767b8231edb03283df48bd2ed142c89b6f21a2746a2daef1570c7e8ea0191b1a76f0642badb58ba240d67e76ee139898df9b03d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
52b45614bd062d89b0cae42ad4ba7bd1

SHA1
5633cbd1f7e9f90cc54d9e4eff1d35f2e96062fb

SHA256
4948e7f77035251528f6e8237280f25afc4d035ab66039736af5032e495b2d18

SHA512
da7a4b59e22b03513516fef3486b46a37239314a89d41174ca81e4d5c1d0b7e423a9056f4d9e2bbf41162d74bb461b0f51f46523848ebfb0b8c7f8fe02539c93

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
71KB

MD5
180e4f697b04681ecb5c9b0cb0016f87

SHA1
7e0c57576de1fb95d9a6a99f77cc51cf89ebe8ee

SHA256
b115a698d29e3269fe7f7fd4cb71e2a9130b05959dcddda69f1fe1307a8089b1

SHA512
3d4ce641341442c2dae7719d0ab39839bb23e9d0b2c2341a131a9dd8151682128d3a26db7739be5635e50fd53e5f7ded71a568e82895336f2e71aa65d6e30782

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
71KB

MD5
180e4f697b04681ecb5c9b0cb0016f87

SHA1
7e0c57576de1fb95d9a6a99f77cc51cf89ebe8ee

SHA256
b115a698d29e3269fe7f7fd4cb71e2a9130b05959dcddda69f1fe1307a8089b1

SHA512
3d4ce641341442c2dae7719d0ab39839bb23e9d0b2c2341a131a9dd8151682128d3a26db7739be5635e50fd53e5f7ded71a568e82895336f2e71aa65d6e30782

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
199KB

MD5
a69642d362b22b96195607e318617f6a

SHA1
063ab50ec3b080ec32314ee466eaeb28707f1d6d

SHA256
6b7ee62a8c30258981756984b896bfe7d5916cb63d92a24aed40801918539037

SHA512
19ff2cd0db70f9b76768ea65ec67cab2395a25d898c438ccc8e805b2dd2bd5efbd2b945629a597dc4c6469efaf65def688a6e9cd35465151a5b7b0c355c7835e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
199KB

MD5
db7e1d0b5c10b3bb79251b1380ca3895

SHA1
893e980bcdaadeccce868b61a2ace4f2fd86fed2

SHA256
6f3e0ece9cff6e24ac6e5615b510b5dfb3dd93b9eb6c521365d5a0b6d58135b2

SHA512
82ea0af4fe8270657471f339b80be99e0cf72462d0d18d2ca0ee6254c69ebf6c19eabfe70757bb4250d209bdca81e2fdce2feb7f135f8fed4d37f07e32fa2a39

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
199KB

MD5
ed563797bc467f2cb925d7f61d0fe9d5

SHA1
67282d8b98d8a16f54c312e2d8f4f559ad59d991

SHA256
2b4f42286196b186d94e250a71fa60b55f2fccaf06ca981b2d80f3da0328dc67

SHA512
951ebfaba5c3a39efdb4f166181377b02e3e82616348207eac16ec02685f4b29f320fd57d6f069e1c17aeb7240e2516401f124deb9dba6db4b7b69c0eb0bbfc7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
199KB

MD5
46a83abb6fb05d3400924a4d274d61b6

SHA1
e60bb2b38b3ce60893d2d519a0434162c577973a

SHA256
290e923dd3fc8390745734d8a90b503e1293787c05b2b870a3553fd81d77609a

SHA512
4d79527ba5f7c249b0ab22d3491679cb2161d4d81fa4ecced67abfa4eac7ca267184b21104886f0d8705835146e9852e6bf071c49db10972d5e4dc87d59419cd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
199KB

MD5
86f87eb0678df759edb65d052680105a

SHA1
6513443a89c52208c3e191a239d7b8e95e507f03

SHA256
2b5ef7a14cc7233fb652e33ab334ac0e537f98b32e7e47441417d73e00cafc64

SHA512
24effc9915156998f3d92671aa15dbcbe582507327cac67a80ddd32f5779c532e712ea6bab5200a278e87a2203f93ac671817fd4e2075134d7abab14328b4213

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
199KB

MD5
84f0f967fe25ea99a9d55ae989dbf22c

SHA1
845df3e52981449ed68a531c35811c9cca949356

SHA256
a32df7cc7477cac633fcff9f9fada366e85db6846468f9f89b5a94f6e7850fb5

SHA512
f588845a5fc50068511e88a48c63b62e817822604e07110e276dc9831bf523e83a2248529089435f5a16c6002892dc4354d5a831528a38449ca1e921fcb6c012

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
199KB

MD5
8c342e526182d770e8b21edcb49f82d1

SHA1
8ee05ec01c62d61d2c764381d6238bfc169cbdbb

SHA256
43ba0c68fca4d9d91b92741743fced3d9062eeaf09a3b0e8bc75ad8e807f27d7

SHA512
184933d1deaf58f19dcdd0e414cfbfca3509f25c65ec432bb810fee7b85f0fe6fce3ffc4cc1e2d921520df92e31b92f7e0dc527664101684808f712aaca3b97d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
199KB

MD5
330d9ef7251d16283705c4f4641f708c

SHA1
cb527179425bc5be402bcb82d33a26fc747a793e

SHA256
28593af10574ca526cc53347a6454a82e2914c428ac1647904eb29d37efcb0c6

SHA512
a4b7550744f0326f48bfcdc0d9de7e159701d74478df780a76b682d4a82166fd5e5b3f6606e7e64e7bbded6f87d55e34d9d3e4de2b8c82d4c440da7e99197183

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
199KB

MD5
20d75deb120f27fff42b522a8878fea1

SHA1
cd3a56ec3ceb2e7bbb835fc83cca5b73049270e2

SHA256
0fcdbb4bc84c244ea9e8ee6e4cebc821c3f02d44bbffde62fdaf5dc1478cc75b

SHA512
d03a3d37c724bc56550010b96ca8c3569f1e22f4eabb1b04e5b5879d1c8cd76bb34a41c3be54bdf7fc40339fe91947242c2a368925d6e71d2bec33ea859ec014

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
199KB

MD5
f27af62c15df22c6df1ce2432fd0bded

SHA1
8a0acb67004b920761d8d3c6397ce132930ab877

SHA256
23c93056595b1ab47c0c5580fbc70cb415b1f691b5e67754ff4f97a14bd7a454

SHA512
cafd033e79ed5332b1ad24c012b7a178ddfb3b68013232afa0a54710d2601595f34ade124b8c8f8d234919120aafd7863ca4bf042242e5faa114209793ae39e4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
199KB

MD5
49b5118242ec512f6f4e36c8f8c02e60

SHA1
4847a989c489ae9e2417abfbeaf8331179a367ca

SHA256
02af5b5b12dc69d9da063b97398b82dbf9d5e75464771142f4ab3b674650861c

SHA512
c6f9a06bdcb1c4c5d6fd653ce1e03b9e88f0e9fd5ed7410f373891bad65769c4e01a10b696bac6c681b3228ecae4b6efc120887f568cb91728d768450bef5136

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
104KB

MD5
5890d083fe5bb7009db16dc67db030a0

SHA1
e11b64d7c7c1cc58765ce1a658d78ab6ace78c0c

SHA256
205cadb897a60a7f55ceee2523963165ae314e37cacbc86d02add3c64a343c7b

SHA512
b6999b3ffa777f5a5bb5d9af268e121ffe77ab3e210b42e2a6944ce4758ea33ff0536d76898cdd725a9004058d48c68e23c370a6c23022c060682e178c70b17b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
105KB

MD5
8ec4aedec49b4a1deae0b3a20443f848

SHA1
5974afdf5a5c7208fe7819aefaf9e8af406c8bf7

SHA256
88d99c5583a20c0d3f00bb616efaf389a8f7f4a8159fc1b9745ba3580dc8cab7

SHA512
811ef24fc4a2a9f139d38cc9138a30bd3ac820acd62bca71159d3228abb4efa58f3a4c873a6ed7354fb75328ba40564c2b161deb0ffa8965f02b0f65290be6c2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
112KB

MD5
3e1e05475a79473eff7e81fab5c5576f

SHA1
0fc4ed72e289efb034fc938f0af8ea2fb3c3061f

SHA256
f10f977ea871e8e99a008a8466a92426ac656d3846258d51f3e045eb004751d3

SHA512
14062c5540a34c3e10d0be1c9aa3abc1456a325e72c8aefe83c2cb0043b36e5611c1da26c3d7016abdc11f8aeade630046d0bc0165d586c7fbb9e50db826e1fc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
119KB

MD5
1e560dbd8a6dbf8768ef37fbfce8dace

SHA1
e684b808e83dc5dcef43aaa23a9f532e08d79e35

SHA256
dde2bbc2d65759fe0230cb9e4c889079d5b7fb34a94ccd4beefc349c75826dd3

SHA512
40b5128fdf8ac687c742c4f096c25082251ae0636b5b0a9f4a1e72aefc3fc2037dec39a990212a723dcb78b3820445e92ff590603e77d928db80e3bd53ca463e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
112KB

MD5
55d32fa354fc902f80491e69224f4393

SHA1
313e7feb7abfdc15e5978128cb83d50743f3d661

SHA256
0cfb8d1da3b4e1bc5532e82ac5879e175891745ed3864103bf3b5af25f8a6546

SHA512
a719ed256335d9d99fd5e6dc661c53ec2dacabfd3c4ea9efc01e1ffe5ab360ec43069bfba25d9bce63ff1f9dab3cb9563e4c72f26e78338c0611b7930f8c413a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe58cea5.TMP

Filesize
97KB

MD5
0e4fa4b74bdfcd3de149d72783177058

SHA1
d0bd7d81a93b824b453aa4c952a4bce87f1e3c36

SHA256
ff99a3d7efbfde2fddce038ac3c7519b814bece73a17040e023957c958a45d17

SHA512
31ddd3e124281e684e0938a866b54234cd1c925abe848b814f3dfdc7905883656c70b15a9f6ee8c15cffdd6b78c8fa924e17ca9b230aaa6ab0d4e1ab282f4a15

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations

Filesize
86B

MD5
f732dbed9289177d15e236d0f8f2ddd3

SHA1
53f822af51b014bc3d4b575865d9c3ef0e4debde

SHA256
2741df9ee9e9d9883397078f94480e9bc1d9c76996eec5cfe4e77929337cbe93

SHA512
b64e5021f32e26c752fcba15a139815894309b25644e74ceca46a9aa97070bca3b77ded569a9bfd694193d035ba75b61a8d6262c8e6d5c4d76b452b38f5150a4

Download Submit
C:\Users\Admin\AppData\Local\Kingsoft\kwallpaper\IndexedDB\https_wallpaper.zhhainiao.com_0.indexeddb.blob\1\00\2

Filesize
1.8MB

MD5
9450f57e822d8b68f092641b0669e9fd

SHA1
7ac58e09899f28adc4fe6dc0e87315a5b2baeb62

SHA256
1629b9978f550e9e59a10f3002be6a02c9275fad77ea2b8ffe01e8509f5f9957

SHA512
40846d32843dc7a4502c645f35fbd5ed842409ed0863805b3205a798b48ea6554806e5cf4c92035b0ea56a8befa0e1624375f6aa2eec8f84881b1a4888b7b87a

Download Submit
C:\Users\Admin\AppData\Local\Kingsoft\kwallpaper\IndexedDB\https_wallpaper.zhhainiao.com_0.indexeddb.blob\1\00\5

Filesize
668KB

MD5
e4883c537ddc24588ec39d59b5a4f5a0

SHA1
a479092e55337814b2e2a6aba4472f38be225a69

SHA256
c27fac8deb27077b4465c379d05a0bd9a4d724a37beee31e8410b232acad24ec

SHA512
e6fdcf995f39f5639d11eefd37ce6770f564211cf7ee83cec742b6e39043d824f9d8e3fbbb6c8267e4852c81c1160f2d05aa35cad5acebd4979c7ac75057faac

Download Submit
C:\Users\Admin\AppData\Local\Kingsoft\kwallpaper\IndexedDB\https_wallpaper.zhhainiao.com_0.indexeddb.blob\1\00\6

Filesize
2.7MB

MD5
13d1ad42a75caf40653e3b705ffb89ab

SHA1
004c2df52c635450094e45ab5997700dd980f6ec

SHA256
d867b4682eef40d1835ec6a7dea80618492cb3f2d0cae5f193549f2454cc6cf3

SHA512
9175c56d64253463d1ddd987c2adafff31ff63bf1cc37d8aa0b55efd3697133f7d29630780495b06303a69591209a48cb82a21a9aca033ad48f2eea0f6e10047

Download Submit
C:\Users\Admin\AppData\Local\Kingsoft\kwallpaper\IndexedDB\https_wallpaper.zhhainiao.com_0.indexeddb.leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\0BMP3ERH\70003516[1].png

Filesize
3KB

MD5
273f348122f3da79a05a5774899a5906

SHA1
d38b8fe905d67b6964efad48b4a877b1e6345763

SHA256
73f8d564b6a8f361d521ff19c9c358a76ba51d9b8ba0a345e47df6f8f908c342

SHA512
29480865ac01f8cc5a34f90b763feb4eb176ba952436be6a301dab9278d4f316299d8ff493741d5808c70047278340c4b619822add5dc4e74757bd1d0df86651

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\0BMP3ERH\btn[1].js

Filesize
2KB

MD5
bfe37dc1664aa320f588c18f10caf093

SHA1
dd5ff0cf3bf4561fb9368765e8df11251af76d96

SHA256
68a0204dc93709ef4ea49eb739d40ca341d07cc59817a33d7f628f7b15378484

SHA512
1d30d7aa08ce6d864a860f21f3dbdb2d85fa4375f93fd89be7b1aa48c06b76de1b46b3c7bd0ca36bf54c895bd16dd4ae2d4e1e1f1a7f13c8a5edc34c19fd72b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\0BMP3ERH\jquery-1.11.2.min[1].js

Filesize
93KB

MD5
9aecea3830b65ecad103ee84bd5fe294

SHA1
47ecdf62eb3cf45ba4867846cb61afa70369d23a

SHA256
a271a3f9e3cae897ced669d6652699e947928ef095e56384c4f9dd04bbb942ec

SHA512
754c25b5fc6a3e5d2027326c6814f229f9131396ea026a407dd16d092da6116bb0ee8971417463ba68268098dedc182b6fa10060ddda6ce063a5eca94be3c152

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\K941J8ND\tab[1].js

Filesize
1KB

MD5
a6940fa228fb991890e007d0880b02ac

SHA1
0d538f2c3d78495d92c57a96aca7365263891cd7

SHA256
e1cc206c15b542ded9bb981c2ef7188679f3d342dbe280d01e8b321d255185f9

SHA512
0f5dcfaf931a1964bbee4530b54a5c6a81be83615743b40213e97fb93a9460c55c43c69f41bdf00dd3613a9842b21fbca521709e34e8483bc77bd4dcbd4aa210

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\K941J8ND\trace[1].js

Filesize
3KB

MD5
df08331ca0dab6c9778d1a093b8c6df9

SHA1
07431d57e01c458b0745422d58b11fa314ae26f1

SHA256
99804c3c5865ba57b216a45ce91caed27752e72bb0d9295c2fc0d3d00b821f7a

SHA512
b66ca6f084918807419e80f5c3657352aedd0308cfaa93a30238229ffef5e8829dfba2e140d1047670c5cfdf3031dc6aca78ba9c4204c470d7746bfa7755012e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\V6GB5GU8\ajaxtem[1].js

Filesize
1KB

MD5
13c3f9f2203f3102cac1e65951da7102

SHA1
2000e55df42d972e48f3d91de52599fa4627bf76

SHA256
f9b81539f304b1823308fa9616bd4e19c99b2d02f25a0ad7877624b2631fe505

SHA512
0e064932e0b1b6a28e5eb3a4f7cc7e4e43bd40f0853dede05a141ff5551e9d0b95b6bb57a8e4ff1125f133002a7df9f83fad35e170c9a4b68a80c159b303ef33

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\V6GB5GU8\common[1].js

Filesize
4KB

MD5
c883630ec1634bb5be2ab2cf3ea9a4d7

SHA1
c84f29d624c18560a7e69536b0485035f8b6f8a2

SHA256
a84d910329ba1f303309af506f441a6f2f4329935347b9d8fab01dab7ecc084c

SHA512
af05bbda53ea287000dee1e5d7beb6d6c981c28b024b66c002ac7441ee4d57f4fc08d694ae9537267d8d77f7561dbc6a8208db34f02ea38b7ab77114b6d2c553

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\V6GB5GU8\download[1].js

Filesize
3KB

MD5
0c438fa36a5472652f636616b7992b90

SHA1
6e934df113c9f183895472d7b49e4c890f89dfad

SHA256
c7b44dc311e96d396f2b0882353946e111324e0cdf32587b4acf930c01d573e0

SHA512
584543424016243efa24e00c2f88740f1c934550f2edf1d4a438f238b7fd2eec43461d82942b2e6de8edcaf54c0013e57f03683c4267370a6550c17ce9dc9394

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\V6GB5GU8\index[1].css

Filesize
5KB

MD5
4e85a02297ffc24e0d297277e60b8882

SHA1
27a6af3e002a4f417246b11e5acdf3a06b4786c3

SHA256
b10dac714a69f6d5c54d58313ea2abddaf90d740bed4f78f6cd1cc7c5fcbc394

SHA512
e1ce57d2f498fe0bf3d5b2fee6415f9171699eef07de3d26b945ffea3fff21e6ad3d5990d5c8e1474fbde97c4b9698efaab7ec7ac17689a5d0a82f41c747e5c7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\Y624AVVJ\common[1].css

Filesize
3KB

MD5
d4546304b3d0db041e3a4133ebbb1ddd

SHA1
f3ea4b8fecf80b86a1d560da159b30a002a7fb93

SHA256
86f878e83ea88a49fbf654d01e493f0f11a6fd51a7a1bc6150f6bb597b778a62

SHA512
28af3c6e30ffcbf230db3b96a754d0ddfa769a5174ec5a4410346aa9b9f83321dd49c2a1d7694b4dfd4eb781bb74753aa3101a82f70a4e2d05c941237ac350ab

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\Y624AVVJ\format[1].js

Filesize
4KB

MD5
053c5f29831cd33f3a260e7437b6811b

SHA1
4f887a31513fd52b6aa6d7dc0e97982e3afa5f6f

SHA256
ba2ba6beec3d32ec01cbbf50a6347f074091a0ec71156aea1998653c243420d0

SHA512
1739c2e10f53501aab57aede507ccaf3fd41628332a88c19f9e2efc4b3b1017a5c6d35c16f9bf8ef41d2c29127a58c016ead34b640f81c274cd5c1753e48a612

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\Y624AVVJ\globle[1].js

Filesize
1KB

MD5
7b93b507c009ca1c07272d85b5ac0ea2

SHA1
93fffee7f002476e7ed051221e98cee494c8459b

SHA256
c4af2b9593ca32d3fee363f73e1dd37302b001c9ba5242ba96c54b1e1f71c6e8

SHA512
26012a02f5dbd1d0a23ee0c3f083326933851107738df164e03bb700d3d7d9aa567c645f886d2888ab50488674b35c1b770275b4f59b0cd97019a0341ce2a6eb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\Y624AVVJ\index[1].js

Filesize
14KB

MD5
6c57cce1e65d307580f123e228f34c4a

SHA1
479eb29e39963cbe3e4d139eed1f0e9086412d4f

SHA256
e7c6be65b06d399c1ea1dac20cce04112d01f93fcd243ec5b33be7606d47b278

SHA512
da6b46894d368a8d11854bdf36c86ce25f99b97a9ef8079fa419e1f95fe310ae1c6a55faaed6b3bcd6b1c15926c181d18055d42bba6a09f163e076dfc495c68d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\Y624AVVJ\tscrollbar.min2[1].js

Filesize
6KB

MD5
30f2ce3d1135b3cf31bef0b73ee0942e

SHA1
315af4ebaba1c355bf71c400bec4961574eff6f6

SHA256
c9836c8a4e24d0be7ff3fdad6a8c7555e70973044adba13c03cb8d5296bc6d15

SHA512
854fee0a631e3a8dd25a473288480886f5c33decbaacf5bab3bf46df68d7b113ebc9c78e8148ebe52b473d5643c22dc411e1988d4f136a45c516f7ab825c41a0

Download Submit
C:\Users\Admin\AppData\Local\Temp\D9ED.tmp

Filesize
2.8MB

MD5
fb5e1197be2b18ef540e8dd41cc3d7d4

SHA1
1f996751d5aed802ba155133f1d061b15ace33d1

SHA256
b5a98e643a8106f470616b2450966cb2cf666af027037df967e8f356e952e3ee

SHA512
766c46fe39b3475e0d1294a9a73ea42fceef5c84c378782b60f5967e11be85efdc1d153d37c7322cc149bab53d6121dbf797b2a34a6f2b3f361c5e9ab6f8fe9a

Download Submit
C:\Users\Admin\AppData\Local\Temp\RarSFX0\setup.exe

Filesize
441KB

MD5
0e5ea618e22b33ea19385d4fb751736c

SHA1
1e6d28c89d44b8e16246e8d531de1e0fdbaff49e

SHA256
5d7b8d36a48764cba1b81d1e2ad6e1c92ab249c903230158528bad16b580d4b7

SHA512
4c8de4f677291798308d8f0610b76ef91916a7c8e66ec46214b80233e772ff6d55a980538a9112ac5d9903faba3970496ba13272f2bace7e5c4b022b80ab8a20

Download Submit
C:\Users\Admin\AppData\Local\Temp\kantivirus\kavsetup.log

Filesize
4KB

MD5
855644d7c3e7422a687fcbb38fe9e300

SHA1
333df9f748de26ee25d5a3c58bee8210fc2e46bf

SHA256
cab3984f6282f1d8ae4c7fa0e1fb05a6360757abdcfbc7ea49f8944199012387

SHA512
57d2c9ce9f2cf5860fa536f586ef298fa4ac032c61ee1731b0b961f2b07cf95e8290777a4804ba9e62307a198f8985750dacaa1e687343b3de7c781704c3c5d6

Download Submit
C:\Users\Admin\AppData\Local\Temp\kantivirus\~e5b6176\install_res\1.jpg

Filesize
11KB

MD5
bce3d32bc31d8866c7ae6001a0b7f2b2

SHA1
4564373090ec0406346d006c7c37391c5101ddc0

SHA256
6e992e0c2fcb0b6def7f0c371f20837be7539db17a3aa76732b2225650c5595f

SHA512
cc9f4cd6fb326f1a49157b085ea9755bee05068b4c08ae61a15fb911c292cb821215aeab63e15ba66a99ea9b060957aab6c5f6e44f96be05b33522a90dc9453d

Download Submit
C:\Users\Admin\AppData\Local\Temp\kantivirus\~e5b6176\install_res\2.jpg

Filesize
24KB

MD5
d2fe241b32b67b67aea896867054bfa3

SHA1
52e69af3d5c32863442451f6476d12ca9e3f0806

SHA256
287187541b240f6a4a9b504d0d9fc21f49bc7c2ce6a474a5c84489984c61b147

SHA512
eb703838490a3902022edd9d9b1b475d47d39bb08089e4fb1e307c7ffcef53a6adad0c26b7ea07226f6396c4818a14d9baa6b94010ac8e63e1c01d26301c6788

Download Submit
C:\Users\Admin\AppData\Local\Temp\kantivirus\~e5b6176\install_res\3.jpg

Filesize
7KB

MD5
f3b9632b84ae1b2686aa35df23b505ef

SHA1
e560f43ba0c332ff9e11d8ae7ac79f6ff230d104

SHA256
10dbbb8367d847eb97f33e48d6227c33e6845c64d3309354f71cd55405481852

SHA512
ead8834ec05757670dc1e79d49c3077e6a926a504116d88c3814fdf89ddffb59f18e0162a64bab72c0cf2dad8893a573106fda537161828f8d6f019e687200a7

Download Submit
C:\Users\Admin\AppData\Local\Temp\kantivirus\~e5b6176\install_res\4.png

Filesize
246B

MD5
567412defa6ff8c0a22b6741903d5bd6

SHA1
6b01daf205a7881483b04a6717302940c03fcaea

SHA256
ec47be1c0109fe07fd41b5c8133ce17d3fbafd003369ff6a0adc616c9297205b

SHA512
fcce488e36d7707f4d3f651efb050677cc7fe681c657828643a9f1e354200a5937c908c96a8cb694028db11eb02387a7315e0bbcf8992b1f5890457206108a5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\kantivirus\~e5b6176\install_res\5.png

Filesize
460B

MD5
a9d6e9863117c07204aca39eab5b994a

SHA1
d3e0633d705f878c9d67be23c1eb150ef3f33f6d

SHA256
908b09757f56bdcfd2bc8d53dff95e62159d2ba448fc41dbfa135db87be5e608

SHA512
ae0b20aa2f4729a75768ce5fa8e31f3610c16212a78027a4b05a4d96c29eb54a1560a00a309275cfb5d23c3cf86ec3808719546223890f2e453b02a224a12650

Download Submit
C:\Users\Admin\AppData\Local\Temp\kdesk\kdesksetup.log

Filesize
2KB

MD5
c320ebff80692644fc98576a474cb75d

SHA1
3027bc86bc74102e6debefd80a2ab7370c211420

SHA256
4574de2d47a27bc870e4796f5e88c2fea2cb4c9e3d3fe66e775484fffa919b16

SHA512
b6c49d575722a5875fa02c3dfc935f4d9e4965b5b3250b65bc4a5f197118f10636e548c3f4cbaac45568929ad2ed4b9fbaad6544fa6cc373fc555b61c9d54e44

Download Submit
C:\Users\Admin\AppData\Local\Temp\ky4D2.tmp.6c906002.tmp

Filesize
140B

MD5
bbe63dbb29ce1a915f4039c4cdf9d973

SHA1
69eb4309a0978fcd3fe3ef1343ef131e09f3f13b

SHA256
71004035fce4aa5bd442f39f9cfdb9e9a6eaf7c86bd1be10ab85645e6c96c6bb

SHA512
0debbf751eacb15f870bf8ee0142c2274ece6e1d844712fae2c761f6460cfe7a594be15e9fb41e65457c7222d177b5e04564a5188643188567a6870559722f6b

Download Submit
C:\Users\Admin\AppData\Local\Temp\{EBD6AF99-8903-44EB-980C-0BF05DC6A841}.7z

Filesize
32.7MB

MD5
cd8c30025906d8de806ec061d2444ab2

SHA1
4ffc04ecaf8a7fd4aa7948efd4e66e31f454e961

SHA256
6f7102d85028c4263262993e9b97ba9488556f7edfea28328c805a19256ceb3e

SHA512
210956b168e017a32cae2a45602d00300f5622cbd3b4c4ab9a4953671705edc60a0a067943e7cf46f63dd917f0af66c170ebcfc73a9c44e1ee67cb75e41d44fa

Download Submit
C:\Users\Admin\AppData\Local\Temp\猎豹安全浏览器.lnk

Filesize
2KB

MD5
6bc4ff5743058b49a54683726eea211b

SHA1
b4f1510ddbe8821ba5e9efbf47bea09ac0c5ddc5

SHA256
130c53ef1247d9e2da08fba12aa32e33300e8fa5b1373449d36644261612ddd2

SHA512
f758d0c718c6b39bc73f99d69347426058da36dcb9d1c5a078ed8eaeb5d6443989a39c1a39c0e677f059740d0d12cb5c477051edd91b8d0139b10535f3ecdcae

Download Submit
C:\Users\Admin\AppData\Local\Temp\猎豹游戏盒子.lnk

Filesize
1001B

MD5
2f9e0e2963bb76ff98895011284f7b55

SHA1
e7b8812f534eec407deccf73bcbe0bc229978395

SHA256
b3aa0c6dda809fadb1aec2a88181519a159f7aa82a3a4c4e956ecae525dd4522

SHA512
b9a69e3abc768fafa7d58471035264dbd538bc359365569700b2ef6b32d6f417667b8d377e9026192b98813689d379149141988adce4ecb131c744f0623478c5

Download Submit
C:\Users\Admin\AppData\Local\liebao\2023412140655753_1\LBBrowser\Module\security\knbdrv.sys

Filesize
219KB

MD5
4ea1fb72227780dc884a7b2398002df3

SHA1
ba38d248a3fee6654fc01546a09c209ba09d6580

SHA256
5be7a8948408dcf4dfb3a16e3dd4ceea1de0d841280324faead5cc46b1b778a4

SHA512
52944924a3ae3ea9cb06c12eb87c7b8fa04f7dcae30dcec14cd273d1886736879fa25a37d3248b0ec9c3f4b7791b4393c37618ef35837e49d03ea15c03b0d8aa

Download Submit
C:\Users\Admin\AppData\Local\liebao\8.0.0.21681\79.0.3945.79.manifest

Filesize
224B

MD5
39a708dae8c6b5fc540b8f74c7e1b5b9

SHA1
b4bffb9c61b95edd24839c2f95069076d599b481

SHA256
51f04b3c224ea20eb177dc28718203be3a0cca105e9544e00dd15f405893cee9

SHA512
e186a7db56feec3a9222d31c38e1ca5d9d08df35209f4e6d740ea9819f1475dcc216e1dcb0dcf7112584a8b0331b0b451dc09dd9405b0fe57810ad51473fa702

Download Submit
C:\Users\Admin\AppData\Local\liebao\8.0.0.21681\Module\security\KNBDrv64.sys

Filesize
169KB

MD5
c4ac000bb22787946a208547d82142d7

SHA1
c4b573d5a0f12507bc077776300dab0b8bf3393e

SHA256
b2a42d8a49f3ad70ac41376c7b8311bd01f452a6b7571497e99529de739738d5

SHA512
1db9b2ccf6836f8e591f46ad3f5d5e078b48d4a09193d4f9fab8fad01d7c3bec0998372f402537cd210e97eafc3c9afeb30040d9a24f75557d69fb81dc658587

Download Submit
C:\Users\Admin\AppData\Local\liebao\8.0.0.21681\Module\security\knbdrv64_ev.sys

Filesize
179KB

MD5
468fbbe1b2b129289e1c940772239871

SHA1
15cb76990e4dd5d149cb21a656e9cfd251a7744f

SHA256
43f80032406972c0ba9f24577349ea701ae335162f39bbc5e7a3854baaaf1f75

SHA512
cae542b2c65e482e5bf5f150f535b94151fb2c0737ea19642cf146b10866c5dfe43a79be07562a67ac25bfe682183c9b08c317c0d52c7bdd18b97120161bee12

Download Submit
C:\Users\Admin\AppData\Local\liebao\8.0.0.21681\Module\security\knbdrv_ev.sys

Filesize
229KB

MD5
9242c57db2c9bd538cebadd8e2710678

SHA1
988721acb520ebc846771b33217228967e21b231

SHA256
3ed3675b5b6cee990b4d41d5151fad26e81c2994551d3bcb50527a3379fac054

SHA512
1b4e794fa9b1b96396834c840269910635532ffe963215c106b38ca48d410ea16bb0653e721fa6dffdacaaf85a7dd748a9722af343017adbaebe9a857e539c5a

Download Submit
C:\Users\Admin\AppData\Local\liebao\8.0.0.21681\Module\security\security\kxescan\kseexf.dat

Filesize
107B

MD5
5558aadf03f4e5c3d054f79dc7d150f9

SHA1
924312781dcb08d93a587836cc7726f1a196d101

SHA256
9f9c77185c256772bd14b08c76c8a1830e9cd5f0ab85ce3c5de4b7bdd12fe80b

SHA512
a2511c91bb3df23416c2736f83864c6adbb68cff0dea16f66e742952e2ce4fa92dad37fc35e05dc551e4680bbbdb954a2f984c10f2b1830d618e3b6fbd21b348

Download Submit
C:\Users\Admin\AppData\Local\liebao\8.0.0.21681\Module\security\security\kxescan\kseset.dat

Filesize
140B

MD5
6e07cee2a86e409b237ad23ed4c71f99

SHA1
5d000fc4102f9dcadb3c8449dd06f3c7e627fcea

SHA256
68fb647b3b3df5639f340b01a90f1478b12a4a60744d35a1c0911228d6022c67

SHA512
ec57d75f80eb809574a5495935c5effdd0fa60dc655a04bb8824b1a5ac376c01974ed72c64db77c990804f13a8707162b5b3343a11bffde0faf3ea46b7207f8f

Download Submit
C:\Users\Admin\AppData\Local\liebao\8.0.0.21681\ksapi.sys

Filesize
127KB

MD5
2903482bcc7959a35c8ac411d77914f6

SHA1
873095d79f250341b31f8da18c574513bd301748

SHA256
1b43fc1f1462059c6b974bc6d985edf42b5646a25215725f9004cdce736d6e26

SHA512
801af9884cbdeaea4ab5bff6045ff441b9a8a37223e905c4462a86c604e809bb4d8babc1f5b710c931bbbece682977a7fff1ef2bf0f0d09a05b74c47e09114bf

Download Submit
C:\Users\Admin\AppData\Local\liebao\8.0.0.21681\ksapi64.sys

Filesize
85KB

MD5
eff81aae17a02bfaa88501c39cff3604

SHA1
9dccea1ace3a5efe18ff993a0b920bc9256f95a8

SHA256
6c2401aad0aff19a9cfc2f24737118730263080322740beb592af3f06c03eb84

SHA512
4967cc30a0e897e06d53bd43cb689fd3c4436ee37103a9e27efb7b56e27bcd04f8a995be42243df166226829112b9bbb48821bca215d61dca8a2cc699242e157

Download Submit
C:\Users\Admin\AppData\Local\liebao\8.0.0.21681\ksapi64_ev.sys

Filesize
88KB

MD5
7010730edb34e151fb1bd6ac6f8afc32

SHA1
3a6e19dd22803673a96024fa5338188a133922af

SHA256
8b89f9dfee9cd2a8d90364c7a7075e601a4b7ed2743191ef31a3846e2d80c8bc

SHA512
a42779d319d468bb2b23927c2ba72f19a18f9a5d52d98db5213ea175017a8da83f05fb9b5c52f6fce4d1ce2abb40f4455fef75277066d052c86cd222a779daa7

Download Submit
C:\Users\Admin\AppData\Local\liebao\8.0.0.21681\ksapi_ev.sys

Filesize
130KB

MD5
fd20243f78852a8ff0db35a5450a136c

SHA1
4c5acffc35c96da512d5a447af0309a262469b45

SHA256
a6217e4b348755ac306ffa410d6e3ad7666b0b62ebf8fd4c4bcb7ad691184f27

SHA512
bfe653db2924efd81d9e99bdf982b8b42989124dfd3dc6775a92c2d55888f26afdd2c4b937981f3d2babe72881a72849c65cd2e050908d678d786a8bc56c3fc4

Download Submit
C:\Users\Admin\AppData\Local\liebao\8.0.0.21681\liebao.exe

Filesize
2.3MB

MD5
6d421e9a634e80f3d9080be5587d698c

SHA1
093701d2e392a3fad2b423f67598ea1cf379559d

SHA256
6f3afde9cf7f8d9e64fb52295ec67b00e08f608263806f1cd5c2065c9bf905a0

SHA512
beadae6e4762b279c495227d8daee1e7b1dec6110f64dc5dd614d24f8f6c38ddcd1a98254d6673960e58aad1ecbc40cd1862367f46c04ecdc76d8b71fa480f3b

Download Submit
C:\Users\Admin\AppData\Local\liebao\8.0.0.21681\ressrc\chs\uplive.svr

Filesize
75B

MD5
6b775cf20cc869a6743fe0a0c9bfe49a

SHA1
6ec75d5ec5a88dbd24f59795e9545166b1b711ca

SHA256
398b553babb7979d4b6ba6b7d0594098681b6ccb3bd5c1a14497ddb387667ee5

SHA512
803004b5fa302367ee16e4244dee63a47c51ed5aa1e52870839eda458d658a2924185b99aec162bd1a0ccc2940174bdb13a92cb2cf91e4511a3062bb76a53d59

Download Submit
C:\Users\Admin\AppData\Local\liebao\User Data\bd2d2767-7ea9-4d38-9cec-f99aa0645129.tmp

Filesize
1KB

MD5
2a6e431a32930adbb262df4de7903e37

SHA1
c740ebe8b819ad2c3e8fce798ed8d4f13251737c

SHA256
e2bcbce999f00370469b402c569cfc19ae636a361a2513121aeeb061d38c7e7e

SHA512
b71b73d29ef7f44fb8c94fc088033aa986b61a7bf73d5b910fc237617791a08b2702919ffacc4181cad36b4021e967eb06cb6509a18404f252653551aa847d34

Download Submit
C:\Users\Admin\AppData\Local\liebao\User Data\install2_log.log

Filesize
2KB

MD5
4af4a70c38c453d9792665508a4c85ed

SHA1
e766dba2f883cc70e07e2f3496447acba8193bdf

SHA256
8b7139de6c553f2ca6a68d56ed4a4be6df68916cb57cf3551c40f6ffe4bc0f72

SHA512
a2bec22db7f9d800bc6b84a0502b4198f013a4e2f7c27bddddec11e24fe042b27ec4352d04c49c85cb029dbc6946c43b2300b6a10e8fa676e7840381ff128534

Download Submit
C:\Users\Admin\AppData\Local\liebao\User Data\install2_log.log

Filesize
4KB

MD5
1d8dfb8df3b0aed1bd1d5ffba17f3d12

SHA1
ad4ee1b64a453a1c2a8f1aafba729eb54e41d6fd

SHA256
7f451a7553cda29b8ecd5345088699952a6d83fe12e7601d3a32ead828289192

SHA512
ce0194fa77da7ce541a9537837cab9eebc4a9aa5256683a72c5db60a58fe05c8da4769087473c086065633ffd8e77cbd86b2ff0098bf4b97869f0c0816a1dd0c

Download Submit
C:\Users\Admin\AppData\Local\liebao\browserpacket.xml

Filesize
194B

MD5
5717ebbb38503f6de138124d017c3015

SHA1
2479abe0a7088c1dc95afa112a5239016b3f31a1

SHA256
c93b8ab944b843c9487f7fd8880858222b80ab1cc39239b56ca0bca46dcd35d8

SHA512
81d88e9452919379b222cbbb580255f8014cf66faf7a185c211e880aea59902c0d19ba08aff869a4eb13ca663092d91ac97b2b2d903dd0fd0b447881866f5bdf

Download Submit
C:\Users\Admin\AppData\Local\liebao\猎豹安全浏览器.lnk

Filesize
1KB

MD5
e4c2eb5f600a6cea1c40925cd041b5f5

SHA1
7ffe5eb2eac7bb5fee09f511da7984b151e8dcb1

SHA256
96f2298221c87c9f88427d7904464ae881c545d2709a3cd4646c34a2a7ea520e

SHA512
9a5acde8c9bbfd1a5f6844caee79dddb4179f74c8417223ccf36c2a5fe83abe223bc4d70454264880b3d05c86fbf369cf56a579ce6dc5946bc8c56ee1adbab1d

Download Submit
C:\Users\Admin\AppData\Roaming\CmGamebox\phoenix\9\1\14\db17110302\index.html

Filesize
15KB

MD5
a4a4841416acdeb7b4950bfa384fcec3

SHA1
5c9eac2cd4f844cd0f488fd79514797b6f6f47e1

SHA256
7b5e45799d42aaebb1e0ba712489d7778eef2c15cfa98dc29bc8beb7b5c83ff6

SHA512
63fc63922371ce33abd60216158649d4de7e088b2349e08a83c08aa9bda09ef99546b54b125191c496d4118e77605ada8e16ffe17e458ef2708ac1af16d0a7f4

Download Submit
C:\Users\Admin\AppData\Roaming\CmGamebox\phoenix\9\1\14\db17110302\zmq_plugin_setup.exe

Filesize
2.2MB

MD5
9828720278d48d74a239971186956487

SHA1
0531cb8631a8091102f6eda130d42c4a548f9a55

SHA256
4d6072f9766e887585e6750f2351af7c8b5f5030b3952a668889983b81fd5e7c

SHA512
5beaf90a7c99f69c431d9433d1464100178caf33a2e7ca91be59714810a091016ed048ccec5f394f6f57d28bd7fb8eab9dbdc8c91dca99a399b5364774051fd5

Download Submit
C:\Users\Admin\AppData\Roaming\CmGamebox\phoenix\9\1\1\hztp01\index.html

Filesize
19KB

MD5
1f17b1c2bd68352333eae902efb2c912

SHA1
d5a5a15b3693c72b22433e70a258dd7ea26c81d5

SHA256
631b4b2865af41d16de9e6321068f60d3d4390c5b7684b641be875bdbe0d3fc6

SHA512
2063f978ae5151b9fe4233c71102bd72121692a9339ce1b05630b1f77ea98a1e479f62c2fcad27829915e84f517f4216715f7a59b27ec92634c73b4b7cdd9fe8

Download Submit
C:\Users\Admin\AppData\Roaming\kdesk\data\wallpaper\interactive.ini

Filesize
568B

MD5
25b28ba06b44f6825ef152231a4512d4

SHA1
0bd76f9c6f839baf211a0edb02e0e445e3f76c52

SHA256
ba1dd0d3a439fc521b44dbfcdc5161204d58db5f4ec9e95860cfdc78e1460c70

SHA512
4f4138653b1ca0a901c0124d29b1eb1766f4caeed04a43058360133ff9720f62fbe3bb3634b65115362e9152d4f6272da1d6e4b2b451a7564ce0e9f9b7c0bf57

Download Submit
C:\Users\Admin\AppData\Roaming\kdesk\data\wallpaper\interactive.ini

Filesize
775B

MD5
58b31363852f4d9e8209fc0b2f0a22e3

SHA1
18bb0654fd39b912ecdffaf7cf32bfa3bd6afaab

SHA256
0c347460c9189e858d2836e1b0b732ca9c63b04b7850926c600ade9708db3485

SHA512
14990291937afa7d19d4146a98d471ec092066e2d10f91cd2a09ec92773eaf51dc22a50f8d6507e089ffbe119f1a75b3db3af823a8102adb8f0b538758af02e7

Download Submit
C:\Users\Admin\AppData\Roaming\kdesk\data\wallpaper\interactive.ini

Filesize
963B

MD5
9906f8d7b9ecb21456becf3a7483e630

SHA1
a2309373cfab30900e095729f935851198918cb4

SHA256
67032c10ab2bd2ca13d93de61182b71a1fc33f21d08a6f46fab42abf97fbf701

SHA512
708a85704ddc1bc79fe8756b4c0949e552a1c47f7abd30bd571c9c7def5f3fcece0c0b5a403b3d4e6e7f1fc598efe0010f4f89b56f76348c6130ad83fb8052af

Download Submit
C:\Users\Admin\AppData\Roaming\kdesk\data\wallpaper\newfeature.dat

Filesize
1KB

MD5
875dae147e19322e057cad8ad1d5e03f

SHA1
dc1a1462170cfb23f29b51795a38c879f9e69ae7

SHA256
fa04adc5e988d0398f01759be9d67b7db304aa68906c643f80986298d3406f38

SHA512
96936aa5ca1335ee0278d69a6cd3e70543034367f3904024624654e718725b65113a2ebc186e4f2e71b7c1564fbafbdb93eff67399380ace03df1492b9b1e016

Download Submit
C:\Users\Admin\AppData\Roaming\kingsoft\duba\persona\persona.db

Filesize
8KB

MD5
e6f1531153d9d3cbf978962593b1f46c

SHA1
9e9362c35ac8e5632f0b4a5183aa34b5f456f4b2

SHA256
7d5932a300d64d1952c715c8558bbe21f3b0270b5071237eb373768b1a8410d4

SHA512
79ae33b52d895944ff7ec5e808ce05f1570c7bb8bbc06eda637973edc8393391b6889ee5b704255a20f3d8fd8986bbe8271dde555a84ef2a3172cc445361310e

Download Submit
C:\Users\Admin\AppData\Roaming\kingsoft\duba\persona\persona.db

Filesize
8KB

MD5
22064716ae954251eb4bd5b5baf77192

SHA1
dda36440440d5957049a70185f791054d4135e7a

SHA256
bed9e0e7afada447bb4780756d9379c294624fae2c2971a0780b996f61a1b769

SHA512
ba5038da0ea1abeeaf35cf3ecda94346846d551462fd44e2f732798c354aa7d547224f66b8f8502a33c42ce8fa0184e2c20e3c969010a423c8c2a31f3149d565

Download Submit
C:\Users\Admin\AppData\Roaming\kingsoft\rogue_collect_temp.ini

Filesize
22B

MD5
d0c35b0810332aa12546780d43174a1a

SHA1
9dbcf8e5d9378b7e3e8a0d544b87a433af4a1443

SHA256
a44e9ace0797d78699e9278655258678640045254a3f33d5c73d6d0d219414d5

SHA512
2ea4213530b8d3f5fadb7cbbd3e1b54338002039a74e325287a5e8aae9d95bf3649b246403d3a23478017c8d88c31016151851fd0e1abb96deff789d3e37c6ea

Download Submit
C:\Users\Admin\Downloads\Unconfirmed 693557.crdownload

Filesize
1.2MB

MD5
61cfa455c439c55fdb40b898e9705d54

SHA1
caef2e84b87cfb058f0cc0c896f6994c437f5ce8

SHA256
b6327f321ddbbc917a120a6b0429e0287e0d81442c680140bf8c680dc6b2ec31

SHA512
c44f44ce7901ff81397944c8d62c0c2bde9fd57b1fc6cdf188d4b7162eaf1ec304fc0f67392af321e56302931a675ee40f6655f5c002986b6cfaa26540b9542f

Download Submit
C:\Users\Admin\Downloads\d9b5617d-9a7a-4bd5-9937-2b26d1309177.tmp

Filesize
523KB

MD5
8dfbef12159129cdd5cd9268a411f3db

SHA1
78a2f8950758583be1a248c1cf2bf0167845dabb

SHA256
ba7b5a5c996b65b5fdcf79468f21a61786e694b433abe2622a8aa91a73c884b0

SHA512
a8437dd5c422ab3248c9e64e8eb43efa5d41aab48ea4415b7f43935525ac1b131c77e9a53735c7c0d3ef85acdd95c6af31ad32d116195a0a6b6f2c84e0a06f1f

Download Submit
C:\Users\Admin\Downloads\dubayoung_101_101.exe

Filesize
163.4MB

MD5
66fae2bcb3f215c0eea035416f8b72bb

SHA1
510c847487c72812aff9637d110c8938260541ee

SHA256
51fb296db903fb8566bd5434ac2e1e75ff8a1831764953fa14b9da8eaf7c9fd5

SHA512
d1f4430f3ca5c491759309f11f1ba13e9d647e4122467ec935437ef6233ec4f9193604a3d0ccd06f0a8421e5e0f372613789dd78e014683ff64be70c885f9825

Download Submit
C:\Users\Admin\Downloads\dubayoung_101_101.exe

Filesize
163.4MB

MD5
66fae2bcb3f215c0eea035416f8b72bb

SHA1
510c847487c72812aff9637d110c8938260541ee

SHA256
51fb296db903fb8566bd5434ac2e1e75ff8a1831764953fa14b9da8eaf7c9fd5

SHA512
d1f4430f3ca5c491759309f11f1ba13e9d647e4122467ec935437ef6233ec4f9193604a3d0ccd06f0a8421e5e0f372613789dd78e014683ff64be70c885f9825

Download Submit
C:\Users\Admin\Downloads\dubayoung_101_101.exe

Filesize
163.4MB

MD5
66fae2bcb3f215c0eea035416f8b72bb

SHA1
510c847487c72812aff9637d110c8938260541ee

SHA256
51fb296db903fb8566bd5434ac2e1e75ff8a1831764953fa14b9da8eaf7c9fd5

SHA512
d1f4430f3ca5c491759309f11f1ba13e9d647e4122467ec935437ef6233ec4f9193604a3d0ccd06f0a8421e5e0f372613789dd78e014683ff64be70c885f9825

Download Submit
C:\Users\Admin\Downloads\kinstui_160_3.exe

Filesize
1.2MB

MD5
61cfa455c439c55fdb40b898e9705d54

SHA1
caef2e84b87cfb058f0cc0c896f6994c437f5ce8

SHA256
b6327f321ddbbc917a120a6b0429e0287e0d81442c680140bf8c680dc6b2ec31

SHA512
c44f44ce7901ff81397944c8d62c0c2bde9fd57b1fc6cdf188d4b7162eaf1ec304fc0f67392af321e56302931a675ee40f6655f5c002986b6cfaa26540b9542f

Download Submit
C:\Users\Admin\Downloads\kinstui_160_3.exe

Filesize
1.2MB

MD5
61cfa455c439c55fdb40b898e9705d54

SHA1
caef2e84b87cfb058f0cc0c896f6994c437f5ce8

SHA256
b6327f321ddbbc917a120a6b0429e0287e0d81442c680140bf8c680dc6b2ec31

SHA512
c44f44ce7901ff81397944c8d62c0c2bde9fd57b1fc6cdf188d4b7162eaf1ec304fc0f67392af321e56302931a675ee40f6655f5c002986b6cfaa26540b9542f

Download Submit
C:\Users\Admin\Downloads\minato-aqua-birthday-virtual-youtuber-thumb.jpg

Filesize
523KB

MD5
8dfbef12159129cdd5cd9268a411f3db

SHA1
78a2f8950758583be1a248c1cf2bf0167845dabb

SHA256
ba7b5a5c996b65b5fdcf79468f21a61786e694b433abe2622a8aa91a73c884b0

SHA512
a8437dd5c422ab3248c9e64e8eb43efa5d41aab48ea4415b7f43935525ac1b131c77e9a53735c7c0d3ef85acdd95c6af31ad32d116195a0a6b6f2c84e0a06f1f

Download Submit
C:\Users\Public\Thunder Network\Mini_downloadlib\ODAwMDAyNTY=\Version_3_2_1_36\Profiles\download.cfg

Filesize
229B

MD5
481aefd0f6e4c81e195575fe3410924f

SHA1
a603aee928a7d3666ad0cc172366b795bc185468

SHA256
9a72591a565055717f1ecc480d5c31c94807af76a8943e47503bf16650c97fcc

SHA512
1e3495d545fc93b0da44afdc8991fb86a73129fa3dee712a303c8e8b40ee82e61f03cf656e742034732c4786b66374297185649cc8793c15a1b3cedcacdc2f0c

Download Submit
C:\Users\Public\Thunder Network\Mini_downloadlib\ODAwMDAyNTY=\Version_3_2_1_36\Profiles\download.cfg

Filesize
515B

MD5
331a8478659a165a313111c69a30660a

SHA1
299a21b3c387dee3b2cdcf57151c47fc63282f73

SHA256
3e34cf8478ccf66a989140c9cce3c242d155e3f335a72d7c7e62515493c50cdf

SHA512
fea238a80db00b0f74f4825c63d9c7c58252b16ca49e3f3735bcd9f3fa1e02413169f38afc335551cbac177884d42e1ae85bdd49d3df20d93e87c48123919479

Download Submit
C:\Windows\Installer\e630257.msi

Filesize
2.3MB

MD5
4ea18673dd1dc406daf052611422f2ab

SHA1
1b42889bb1e6937459ec7ba694d436e86879433e

SHA256
ea5c3db85c5808e391b284c8c2001e3a3bc2b345e1cd5c06c990b7a6047258c1

SHA512
1876728aa6b54331e7ebbc4f109c23ac9acb580ca8293af654090dbc3ca327d20b47b5c53d3c98185dcbbf17a8038e269af0bc6c27b4499542ef3207c387c156

Download Submit
C:\Windows\System32\drivers\kisknl.sys

Filesize
270KB

MD5
5896755e4220c56ef438f6aba8ea212a

SHA1
e652b073ead126b52b9f0ab3cdaf94156bb3cc6e

SHA256
b3d4e21e5744f2c54432e0b0915afcfbfd5b33a54446eb3b20ade1bff040bc95

SHA512
55be7c914e2e1e14e104391f470f5213b24332e7370ec7e0d967101dba12feb8e0a0e18411f122d3de1b6607afb495e04e8896f496a6397dc6d93a14971db7da

Download Submit
C:\Windows\System32\drivers\kisknl64.sys

Filesize
228KB

MD5
3785e7d8e94116735de61bab3f09b91e

SHA1
c857c3df20538d7e1033e2032db3c7aac9310a36

SHA256
785fbb0656d048f01244a2ce6702587c05011153e72fa1e048bc98eaafe60966

SHA512
1450e2fcd0c90e87c6f5b559759fe382002c26f7d07837363c4d4a223340a27cae2d1b748125b81827f63f2eaf52df0c54813db0c963d07d2cd32ad22d716e91

Download Submit
C:\Windows\System32\drivers\ksapi.sys

Filesize
147KB

MD5
718808521d5ede9a1afb3cdf7ab5e802

SHA1
4e788ce80a2748b6b90889a44c14193d37e52fba

SHA256
1ecc3c8fde5ac90d27f970e10da409ee4a9b6caa9845c23ba50c478975fef08a

SHA512
b39f9c3ed294af04c7870f1eb38fa9089bb1d701034bfa5d9f8a7c7afbfac0d825d21d512b09d1c0d8952bb4ceeb8a028283ac628032ce276d7072318f515ad9

Download Submit
C:\Windows\System32\drivers\ksapi64.sys

Filesize
146KB

MD5
79a4d3a6a68d9897af58bc3d61d5d68b

SHA1
ddfc152fdee0a653fb64cbf38aa712858b12ab67

SHA256
f215c0783328ea90d463b08143fcf2c21dc90120f79b4c5fb46c1c556180022e

SHA512
82993ee69cfdd08fe2837d098c57bb282290f19e64c1f729208592632e5403d150c8c718e85a5980e253df4652eba8b3d053a4e00c6666a02e582aa8f3f7d5b2

Download Submit
\??\c:\program files (x86)\kingsoft\kingsoft antivirus\kavlog2.exe

Filesize
641KB

MD5
181f72925c3c8041866a4b603d3aba0a

SHA1
1c7f7b515cd460176cc6f4561eb945a8e169c1d1

SHA256
9ca1d4d0e848d194d6a7392faad4b33158b5997db475048cf1359ea39559a06a

SHA512
810f78acd427df9306ba4c57c030270f0cdde66c006c5274f137d47f3ce0769191ebafd15b00d39785fe9b31273c354d277d86bc3fada49e0d16262f82599fa6

Download Submit
\??\c:\program files (x86)\kingsoft\kingsoft antivirus\kislive.exe

Filesize
4.5MB

MD5
cb70f03e850b4c3f3a676c8550a1ebe9

SHA1
f70cf95246ba17ae9d5fbe525f73fa9cf5283c72

SHA256
2322e82b400e4745677292193d0b5c83d1499b43b5d6745a827572902a1f6bcf

SHA512
e8bd549699a74116c91e3d0121c14feda4a2c6d3e0558afe4788ee080c257a2cb747d17759bff07bba918cf9d0a8c3b1cee31d1bbac168ea945ec584b88e4165

Download Submit
memory/2208-3003-0x00000000001E0000-0x0000000000664000-memory.dmp

Filesize
4.5MB

Download
memory/2208-3116-0x00000000001E0000-0x0000000000664000-memory.dmp

Filesize
4.5MB

Download
memory/2208-3339-0x00000000001E0000-0x0000000000664000-memory.dmp

Filesize
4.5MB

Download
memory/2208-2435-0x00000000001E0000-0x0000000000664000-memory.dmp

Filesize
4.5MB

Download
memory/2208-2966-0x00000000001E0000-0x0000000000664000-memory.dmp

Filesize
4.5MB

Download
memory/2208-1634-0x00000000001E0000-0x0000000000664000-memory.dmp

Filesize
4.5MB

Download
memory/2208-1607-0x00000000001E0000-0x0000000000664000-memory.dmp

Filesize
4.5MB

Download
memory/2208-1971-0x00000000001E0000-0x0000000000664000-memory.dmp

Filesize
4.5MB

Download
memory/2208-1497-0x00000000001E0000-0x0000000000664000-memory.dmp

Filesize
4.5MB

Download
memory/2208-3498-0x00000000001E0000-0x0000000000664000-memory.dmp

Filesize
4.5MB

Download
memory/3924-3456-0x0000000004360000-0x00000000043A9000-memory.dmp

Filesize
292KB

Download
memory/3924-3375-0x00000000041F0000-0x0000000004259000-memory.dmp

Filesize
420KB

Download
memory/3924-3345-0x0000000003780000-0x000000000378E000-memory.dmp

Filesize
56KB

Download
memory/3924-3347-0x0000000004080000-0x00000000041CF000-memory.dmp

Filesize
1.3MB

Download
memory/4740-3039-0x0000000001020000-0x000000000102E000-memory.dmp

Filesize
56KB

Download
memory/4740-3043-0x0000000001B40000-0x0000000001B52000-memory.dmp

Filesize
72KB

Download
memory/4740-3048-0x00000000033D0000-0x00000000033ED000-memory.dmp

Filesize
116KB

Download
memory/4740-3069-0x0000000005D60000-0x0000000005D74000-memory.dmp

Filesize
80KB

Download
memory/4740-3071-0x0000000005FB0000-0x0000000005FCA000-memory.dmp

Filesize
104KB

Download
memory/4740-3107-0x0000000008A40000-0x0000000008B12000-memory.dmp

Filesize
840KB

Download
memory/4740-3113-0x0000000008B60000-0x0000000008B91000-memory.dmp

Filesize
196KB

Download
memory/4740-3046-0x00000000031F0000-0x00000000032CE000-memory.dmp

Filesize
888KB

Download
memory/4740-3120-0x00000000096C0000-0x0000000009748000-memory.dmp

Filesize
544KB

Download
memory/4740-3049-0x0000000004450000-0x00000000045B3000-memory.dmp

Filesize
1.4MB

Download
memory/4740-3060-0x0000000004E70000-0x0000000004E8B000-memory.dmp

Filesize
108KB

Download
memory/4740-3042-0x0000000001B20000-0x0000000001B34000-memory.dmp

Filesize
80KB

Download
memory/4740-3070-0x0000000005D80000-0x0000000005D92000-memory.dmp

Filesize
72KB

Download
memory/4740-3038-0x00000000007B0000-0x00000000007C0000-memory.dmp

Filesize
64KB

Download
memory/4740-3051-0x00000000045F0000-0x0000000004639000-memory.dmp

Filesize
292KB

Download
memory/4880-1499-0x0000000002590000-0x0000000002591000-memory.dmp

Filesize
4KB

Download
memory/5140-3023-0x00000000030E0000-0x000000000322F000-memory.dmp

Filesize
1.3MB

Download
memory/5392-3442-0x0000000007450000-0x0000000007459000-memory.dmp

Filesize
36KB

Download
memory/5392-3371-0x0000000007440000-0x0000000007448000-memory.dmp

Filesize
32KB

Download
memory/5392-3114-0x0000000002BD0000-0x0000000002BEC000-memory.dmp

Filesize
112KB

Download
memory/5392-3354-0x0000000007120000-0x0000000007122000-memory.dmp

Filesize
8KB

Download
memory/5392-3358-0x000000006C090000-0x000000006C30B000-memory.dmp

Filesize
2.5MB

Download
memory/5392-3128-0x0000000003B80000-0x0000000003B9B000-memory.dmp

Filesize
108KB

Download
memory/5392-3359-0x00000000071B0000-0x00000000071B3000-memory.dmp

Filesize
12KB

Download
memory/5392-8111-0x000000006C090000-0x000000006C30B000-memory.dmp

Filesize
2.5MB

Download
memory/5392-3453-0x00000000071C0000-0x00000000071C2000-memory.dmp

Filesize
8KB

Download
memory/5392-3216-0x0000000005590000-0x00000000056DF000-memory.dmp

Filesize
1.3MB

Download
memory/5392-3186-0x0000000004AD0000-0x0000000004B16000-memory.dmp

Filesize
280KB

Download
memory/5436-3473-0x00000000030B0000-0x00000000030BE000-memory.dmp

Filesize
56KB

Download
memory/5436-3140-0x0000000003510000-0x000000000353A000-memory.dmp

Filesize
168KB

Download
memory/5436-3289-0x00000000030D0000-0x0000000003119000-memory.dmp

Filesize
292KB

Download
memory/5436-3365-0x0000000004F90000-0x0000000004FF9000-memory.dmp

Filesize
420KB

Download
memory/5436-3353-0x0000000003120000-0x000000000313B000-memory.dmp

Filesize
108KB

Download
memory/5436-3294-0x0000000005070000-0x00000000050A3000-memory.dmp

Filesize
204KB

Download
memory/5636-3870-0x00000000004F0000-0x00000000004F1000-memory.dmp

Filesize
4KB

Download
memory/6896-5819-0x0000000009BB0000-0x0000000009D60000-memory.dmp

Filesize
1.7MB

Download
memory/6896-6506-0x0000000009BB0000-0x0000000009D60000-memory.dmp

Filesize
1.7MB

Download
memory/6896-5813-0x0000000009BB0000-0x0000000009D60000-memory.dmp

Filesize
1.7MB

Download
memory/23664-16090-0x0000000000590000-0x0000000000591000-memory.dmp

Filesize
4KB

Download
memory/23664-15585-0x0000000000590000-0x0000000000591000-memory.dmp

Filesize
4KB

Download
memory/23856-15596-0x000000006C090000-0x000000006C30B000-memory.dmp

Filesize
2.5MB

Download
memory/23980-15716-0x000000006C090000-0x000000006C30B000-memory.dmp

Filesize
2.5MB

Download
memory/23980-20676-0x000000006C090000-0x000000006C30B000-memory.dmp

Filesize
2.5MB

Download
memory/23980-15839-0x00000000021E0000-0x00000000021E1000-memory.dmp

Filesize
4KB

Download
memory/23996-15972-0x0000000001490000-0x00000000014A0000-memory.dmp

Filesize
64KB

Download
memory/26984-17151-0x0000000000820000-0x0000000000A8B000-memory.dmp

Filesize
2.4MB

Download
memory/26984-21780-0x0000000000820000-0x0000000000A8B000-memory.dmp

Filesize
2.4MB

Download
memory/26984-17436-0x0000000000820000-0x0000000000A8B000-memory.dmp

Filesize
2.4MB

Download
memory/27024-17025-0x0000000000840000-0x0000000000841000-memory.dmp

Filesize
4KB

Download
memory/27024-17406-0x0000000000840000-0x0000000000841000-memory.dmp

Filesize
4KB

Download
memory/27900-19964-0x0000000000400000-0x00000000005E8000-memory.dmp

Filesize
1.9MB

Download
memory/27900-22363-0x0000000000400000-0x00000000005E8000-memory.dmp

Filesize
1.9MB

Download
memory/27900-18287-0x0000000000400000-0x00000000005E8000-memory.dmp

Filesize
1.9MB

Download
memory/30232-21358-0x0000000000560000-0x0000000000561000-memory.dmp

Filesize
4KB

Download
memory/30232-20718-0x0000000000560000-0x0000000000561000-memory.dmp

Filesize
4KB

Download
memory/30232-20677-0x00007FFB10000000-0x00007FFB10001000-memory.dmp

Filesize
4KB

Download
memory/30516-20806-0x0000000002060000-0x0000000002061000-memory.dmp

Filesize
4KB

Download
memory/30516-21578-0x0000000002060000-0x0000000002061000-memory.dmp

Filesize
4KB

Download
memory/31988-21590-0x0000000002370000-0x0000000002371000-memory.dmp

Filesize
4KB

Download
memory/32076-21045-0x00000000031A0000-0x00000000031B0000-memory.dmp

Filesize
64KB

Download
memory/32076-21737-0x00000000031A0000-0x00000000031B0000-memory.dmp

Filesize
64KB

Download
memory/32404-21869-0x00000000022E0000-0x00000000022E1000-memory.dmp

Filesize
4KB

Download
memory/33568-21963-0x0000000002080000-0x0000000002081000-memory.dmp

Filesize
4KB

Download
memory/33568-21196-0x0000000002080000-0x0000000002081000-memory.dmp

Filesize
4KB

Download
memory/35928-22918-0x0000000002E40000-0x0000000002E41000-memory.dmp

Filesize
4KB

Download
memory/35928-23332-0x0000000002E40000-0x0000000002E41000-memory.dmp

Filesize
4KB

Download
memory/35972-22422-0x0000000000970000-0x0000000000971000-memory.dmp

Filesize
4KB

Download
memory/35972-22871-0x0000000000970000-0x0000000000971000-memory.dmp

Filesize
4KB

Download
memory/36144-22876-0x0000000000490000-0x0000000000491000-memory.dmp

Filesize
4KB

Download
memory/36144-23319-0x0000000000490000-0x0000000000491000-memory.dmp

Filesize
4KB

Download
memory/38532-23614-0x0000000000650000-0x0000000000651000-memory.dmp

Filesize
4KB

Download
memory/38788-29910-0x0000000000400000-0x0000000000456000-memory.dmp

Filesize
344KB

Download
memory/39132-24850-0x0000000002E50000-0x0000000002E60000-memory.dmp

Filesize
64KB

Download
memory/39132-25419-0x0000000002E50000-0x0000000002E60000-memory.dmp

Filesize
64KB

Download
memory/54180-35291-0x0000000002590000-0x0000000002591000-memory.dmp

Filesize
4KB

Download