Overview

overview

9

Static

static

1

2026-06-25...il.exe

windows10-2004-x64

9

2026-06-25...il.exe

windows11-ltsc_2024-x64

9

Analysis

  • max time kernel
    115s
  • max time network
    151s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260629-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    29/06/2026, 22:54

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-06-25_3e0878f709e372621a5c2b366ba65e3a_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil.exe
  • Size 4.3MB
  • Sample260629-2v2ntahs3t
  • SHA256 7ae24564d6a4cab37f602d02fe5933737fbb96e4cfb94d5bb1063586038e9118
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
bootkitdefense_evasiondiscoverypersistenceprivilege_escalationspywarestealertrojanupx

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 20 IoCs
  • Drops file in Drivers directory 24 IoCs
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Downloads MZ/PE file 1 IoCs
  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Event Triggered Execution: Image File Execution Options Injection 1 TTPs 28 IoCs
    persistence
  • Indicator Removal: Clear Persistence 1 TTPs 14 IoCs

    remove IFEO.

    defense_evasion
  • Modifies Windows Firewall 2 TTPs 1 IoCs
    defense_evasion
  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

    bootkitpersistence
  • Drops file in System32 directory 1 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • UPX packed file 20 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Program Files directory 64 IoCs
  • Executes dropped EXE 10 IoCs
  • Loads dropped DLL 64 IoCs
  • Modifies system executable filetype association 2 TTPs 9 IoCs
    persistence
  • Checks whether UAC is enabled 1 TTPs 1 IoCs
    defense_evasiontrojan
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Program crash 2 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • System Location Discovery: System Language Discovery 1 TTPs 9 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies registry class 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: LoadsDriver 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 13 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-06-25_3e0878f709e372621a5c2b366ba65e3a_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-06-25_3e0878f709e372621a5c2b366ba65e3a_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Downloads MZ/PE file
    • Event Triggered Execution: Image File Execution Options Injection
    • Indicator Removal: Clear Persistence
    • Writes to the Master Boot Record (MBR)
    • Drops file in Program Files directory
    • Loads dropped DLL
    • Modifies system executable filetype association
    • Checks whether UAC is enabled
    • System Location Discovery: System Language Discovery
    • Modifies registry class
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2628
    • C:\Users\Admin\AppData\Local\Temp\kantivirus\InstallHelper.exe
      "C:\Users\Admin\AppData\Local\Temp\kantivirus\InstallHelper.exe" -Pid:"2628" -LogFileName:"C:\Users\Admin\AppData\Local\Temp\kantivirus\semPacketDllLog.log" -InstallPath:"C:\Users\Admin\AppData\Local\Temp\kantivirus" -Tid1:"10" -Tid2:"216" -Tod1:"818" -Tod2:"1" -IId:"211542892" -UUID:"25D7FB4B6E475321B484633D334CB030" -TryNo:"1335" -SvrId:"2026.SP2.2" -StrategyList:"0;1;2;3;4|0;2;3;4" -Version:"3" -ProductInstalled:"0" -CompetitorMask:"0" -CompetitorInstalled:"0"
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      PID:4920
    • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kavlog2.exe
      "c:\program files (x86)\kingsoft\kingsoft antivirus\kavlog2.exe" -install
      2⤵
      • Drops file in System32 directory
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      PID:5072
    • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\ksoftmgr.exe
      "c:\program files (x86)\kingsoft\kingsoft antivirus\ksoftmgr.exe" -preload
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of SetWindowsHookEx
      PID:3624
    • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kxescore.exe
      "c:\program files (x86)\kingsoft\kingsoft antivirus\kxescore.exe" /start kxescore
      2⤵
      • Executes dropped EXE
      PID:2012
    • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kislive.exe
      "c:\program files (x86)\kingsoft\kingsoft antivirus\kislive.exe" /autorun /std /skipcs3
      2⤵
        PID:4384
      • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\ksoftmgr.exe
        "c:\program files (x86)\kingsoft\kingsoft antivirus\ksoftmgr.exe" -install:70054482 -src:106
        2⤵
          PID:2124
          • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\rcmdhelper.exe
            "c:\program files (x86)\kingsoft\kingsoft antivirus\rcmdhelper.exe" -updateliebaowifi
            3⤵
              PID:6536
            • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\rcmdhelper.exe
              "c:\program files (x86)\kingsoft\kingsoft antivirus\rcmdhelper.exe" -updatetaguser
              3⤵
                PID:6548
              • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\rcmdhelper.exe
                "c:\program files (x86)\kingsoft\kingsoft antivirus\rcmdhelper.exe" -kdeskcanrcmd
                3⤵
                  PID:6556
                • C:\Windows\SysWOW64\netsh.exe
                  "C:\Windows\System32\netsh.exe" firewall add allowedprogram "c:\program files (x86)\kingsoft\kingsoft antivirus\xlmodule\download\minithunderplatform.exe" "minithunderplatform" enable
                  3⤵
                  • Modifies Windows Firewall
                  PID:7080
              • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kxetray.exe
                "c:\program files (x86)\kingsoft\kingsoft antivirus\kxetray.exe" /autorun /hidefloatwin /silentinstrcmd
                2⤵
                  PID:5700
                • C:\Windows\SysWOW64\WerFault.exe
                  C:\Windows\SysWOW64\WerFault.exe -u -p 2628 -s 1424
                  2⤵
                  • Program crash
                  PID:3300
                • C:\Windows\SysWOW64\WerFault.exe
                  C:\Windows\SysWOW64\WerFault.exe -u -p 2628 -s 1700
                  2⤵
                  • Program crash
                  PID:992
              • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kxetray.exe
                "c:\program files (x86)\kingsoft\kingsoft antivirus\kxetray.exe" -autorun
                1⤵
                • Drops file in Drivers directory
                • Drops file in Program Files directory
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Modifies registry class
                • Suspicious behavior: EnumeratesProcesses
                • Suspicious use of AdjustPrivilegeToken
                • Suspicious use of WriteProcessMemory
                PID:5424
                • C:\program files (x86)\kingsoft\kingsoft antivirus\kxemain.exe
                  "C:\program files (x86)\kingsoft\kingsoft antivirus\kxemain.exe" authoritycontrol /noruntool /msgsender /noaddintoyytools
                  2⤵
                  • Enumerates connected drives
                  • Drops file in Program Files directory
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Modifies system executable filetype association
                  • System Location Discovery: System Language Discovery
                  • Modifies registry class
                  • Suspicious use of AdjustPrivilegeToken
                  PID:3808
                  • C:\program files (x86)\kingsoft\kingsoft antivirus\rcmdhelper.exe
                    "C:\program files (x86)\kingsoft\kingsoft antivirus\rcmdhelper.exe" -updateliebaowifi
                    3⤵
                      PID:4792
                    • C:\program files (x86)\kingsoft\kingsoft antivirus\rcmdhelper.exe
                      "C:\program files (x86)\kingsoft\kingsoft antivirus\rcmdhelper.exe" -updatetaguser
                      3⤵
                        PID:4736
                      • C:\program files (x86)\kingsoft\kingsoft antivirus\rcmdhelper.exe
                        "C:\program files (x86)\kingsoft\kingsoft antivirus\rcmdhelper.exe" -kdeskcanrcmd
                        3⤵
                          PID:4628
                      • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\knewvip.exe
                        "knewvip.exe" --open_opction=1 --from=1 --start
                        2⤵
                        • Executes dropped EXE
                        • System Location Discovery: System Language Discovery
                        PID:1088
                        • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\knewvip.exe
                          "c:\program files (x86)\kingsoft\kingsoft antivirus\knewvip.exe" --type=utility --channel="1088.0.291886113\1683697650" --lang=en-US --no-sandbox --no-sandbox --lang=zh-CN --log-file="c:\program files (x86)\kingsoft\kingsoft antivirus\debug.log" /prefetch:8
                          3⤵
                            PID:6260
                        • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kxecenter.exe
                          "c:\program files (x86)\kingsoft\kingsoft antivirus\kxecenter.exe"
                          2⤵
                          • Executes dropped EXE
                          • System Location Discovery: System Language Discovery
                          PID:1464
                          • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kismain.exe
                            "c:\program files (x86)\kingsoft\kingsoft antivirus\kismain.exe" /ksoftmgr /create_virtualdisk
                            3⤵
                              PID:4620
                              • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kxetray.exe
                                "c:\program files (x86)\kingsoft\kingsoft antivirus\kxetray.exe" /kismain /ksoftmgr /create_virtualdisk
                                4⤵
                                  PID:4052
                            • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kxemain.exe
                              "c:\program files (x86)\kingsoft\kingsoft antivirus\kxemain.exe" /kismain /ksoftmgr /create_virtualdisk
                              2⤵
                                PID:5124
                                • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\ksoftmgr.exe
                                  "c:\program files (x86)\kingsoft\kingsoft antivirus\\ksoftmgr.exe" /ksoftmgr /create_virtualdisk
                                  3⤵
                                    PID:5960
                                  • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\rcmdhelper.exe
                                    "c:\program files (x86)\kingsoft\kingsoft antivirus\rcmdhelper.exe" -updateliebaowifi
                                    3⤵
                                      PID:5728
                                    • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\rcmdhelper.exe
                                      "c:\program files (x86)\kingsoft\kingsoft antivirus\rcmdhelper.exe" -updatetaguser
                                      3⤵
                                        PID:3312
                                      • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\rcmdhelper.exe
                                        "c:\program files (x86)\kingsoft\kingsoft antivirus\rcmdhelper.exe" -kdeskcanrcmd
                                        3⤵
                                          PID:6136
                                      • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kwsprotect64.exe
                                        "kwsprotect64.exe" (null)
                                        2⤵
                                          PID:6852
                                        • C:\program files (x86)\kingsoft\kingsoft antivirus\kxemain.exe
                                          "C:\program files (x86)\kingsoft\kingsoft antivirus\kxemain.exe" /vip:screen_capture /noruntool /msgsender /noaddintoyytools
                                          2⤵
                                            PID:4504
                                            • C:\program files (x86)\kingsoft\kingsoft antivirus\rcmdhelper.exe
                                              "C:\program files (x86)\kingsoft\kingsoft antivirus\rcmdhelper.exe" -updateliebaowifi
                                              3⤵
                                                PID:240
                                              • C:\program files (x86)\kingsoft\kingsoft antivirus\rcmdhelper.exe
                                                "C:\program files (x86)\kingsoft\kingsoft antivirus\rcmdhelper.exe" -updatetaguser
                                                3⤵
                                                  PID:1204
                                                • C:\program files (x86)\kingsoft\kingsoft antivirus\rcmdhelper.exe
                                                  "C:\program files (x86)\kingsoft\kingsoft antivirus\rcmdhelper.exe" -kdeskcanrcmd
                                                  3⤵
                                                    PID:6352
                                              • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kxescore.exe
                                                "c:\program files (x86)\kingsoft\kingsoft antivirus\kxescore.exe" /service kxescore
                                                1⤵
                                                • Executes dropped EXE
                                                • Loads dropped DLL
                                                • System Location Discovery: System Language Discovery
                                                • Suspicious behavior: EnumeratesProcesses
                                                PID:3284
                                              • C:\Windows\system32\drivers\ksapi64.sys
                                                C:\Windows\system32\drivers\ksapi64.sys
                                                1⤵
                                                • Executes dropped EXE
                                                PID:5320
                                              • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kxescore.exe
                                                "c:\program files (x86)\kingsoft\kingsoft antivirus\kxescore.exe" /service kxescore
                                                1⤵
                                                  PID:3344
                                                  • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kupdata.exe
                                                    "c:\program files (x86)\kingsoft\kingsoft antivirus\kupdata.exe" -magiccube_update
                                                    2⤵
                                                      PID:6648
                                                  • C:\Windows\system32\Drivers\kavbootc64.sys
                                                    C:\Windows\system32\Drivers\KAVBootC64.sys
                                                    1⤵
                                                      PID:2860
                                                    • C:\Windows\SysWOW64\WerFault.exe
                                                      C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 2628 -ip 2628
                                                      1⤵
                                                        PID:7064
                                                      • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kxewsc.exe
                                                        "c:\program files (x86)\kingsoft\kingsoft antivirus\kxewsc.exe" /service
                                                        1⤵
                                                          PID:5344
                                                        • C:\Windows\system32\drivers\kisknl.sys
                                                          C:\Windows\system32\drivers\kisknl.sys
                                                          1⤵
                                                            PID:6516
                                                          • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\security\ksde\kisnetflt64.sys
                                                            "c:\program files (x86)\kingsoft\kingsoft antivirus\security\ksde\kisnetflt64.sys"
                                                            1⤵
                                                              PID:6580
                                                            • C:\Windows\SysWOW64\WerFault.exe
                                                              C:\Windows\SysWOW64\WerFault.exe -pss -s 504 -p 2628 -ip 2628
                                                              1⤵
                                                                PID:6988
                                                              • C:\Windows\System32\rundll32.exe
                                                                C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                1⤵
                                                                  PID:1048

                                                                Network

                                                                      MITRE ATT&CK Enterprise v16

                                                                      Reconnaissance

                                                                      Resource Development

                                                                      Initial Access

                                                                      Execution

                                                                      Persistence

                                                                      Boot or Logon Autostart Execution

                                                                      1
                                                                      T1547

                                                                      Registry Run Keys / Startup Folder

                                                                      1
                                                                      T1547.001

                                                                      Create or Modify System Process

                                                                      1
                                                                      T1543

                                                                      Windows Service

                                                                      1
                                                                      T1543.003

                                                                      Event Triggered Execution

                                                                      3
                                                                      T1546

                                                                      Change Default File Association

                                                                      1
                                                                      T1546.001

                                                                      Component Object Model Hijacking

                                                                      1
                                                                      T1546.015

                                                                      Image File Execution Options Injection

                                                                      1
                                                                      T1546.012

                                                                      Pre-OS Boot

                                                                      1
                                                                      T1542

                                                                      Bootkit

                                                                      1
                                                                      T1542.003

                                                                      Privilege Escalation

                                                                      Boot or Logon Autostart Execution

                                                                      1
                                                                      T1547

                                                                      Registry Run Keys / Startup Folder

                                                                      1
                                                                      T1547.001

                                                                      Create or Modify System Process

                                                                      1
                                                                      T1543

                                                                      Windows Service

                                                                      1
                                                                      T1543.003

                                                                      Event Triggered Execution

                                                                      3
                                                                      T1546

                                                                      Change Default File Association

                                                                      1
                                                                      T1546.001

                                                                      Component Object Model Hijacking

                                                                      1
                                                                      T1546.015

                                                                      Image File Execution Options Injection

                                                                      1
                                                                      T1546.012

                                                                      Defense Evasion

                                                                      Impair Defenses

                                                                      1
                                                                      T1562

                                                                      Disable or Modify System Firewall

                                                                      1
                                                                      T1562.004

                                                                      Indicator Removal

                                                                      1
                                                                      T1070

                                                                      Clear Persistence

                                                                      1
                                                                      T1070.009

                                                                      Modify Registry

                                                                      2
                                                                      T1112

                                                                      Pre-OS Boot

                                                                      1
                                                                      T1542

                                                                      Bootkit

                                                                      1
                                                                      T1542.003

                                                                      Credential Access

                                                                      Credentials from Password Stores

                                                                      1
                                                                      T1555

                                                                      Credentials from Web Browsers

                                                                      1
                                                                      T1555.003

                                                                      Unsecured Credentials

                                                                      1
                                                                      T1552

                                                                      Credentials In Files

                                                                      1
                                                                      T1552.001

                                                                      Discovery

                                                                      Peripheral Device Discovery

                                                                      1
                                                                      T1120

                                                                      Query Registry

                                                                      2
                                                                      T1012

                                                                      System Information Discovery

                                                                      3
                                                                      T1082

                                                                      System Location Discovery

                                                                      1
                                                                      T1614

                                                                      System Language Discovery

                                                                      1
                                                                      T1614.001

                                                                      Lateral Movement

                                                                      Collection

                                                                      Data from Local System

                                                                      1
                                                                      T1005

                                                                      Command and Control

                                                                      Exfiltration

                                                                      Impact

                                                                      Replay Monitor

                                                                      Loading Replay Monitor...

                                                                      Downloads

                                                                      TC_1484540679428.zip
                                                                      • Path C:\KDubaSoftDownloads\TC_1484540679428.zip
                                                                      • Size 19.5MB
                                                                      • SHA256 c07814dcff3aeccef3227e2e2d001327708172ceda50b3c46cb8d3c1c5712499
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      kcalendarsetting.ini
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\calendar\kcalendarsetting.ini
                                                                      • Size 68B
                                                                      • SHA256 9366579a29cb11c991a44cfc60c1fdb10af802020315a4d2f2ec9ff71e7671c7
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      catrecord.json
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\catrecord.json
                                                                      • Size 1KB
                                                                      • SHA256 23e47ea8ec54b5cdf97901c0cc1f012550266a7508b477f9f2e657d43b874ea3
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      competing_pop_cloud_cfg.ini
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\competing_pop_cloud_cfg.ini
                                                                      • Size 336B
                                                                      • SHA256 bb17e33e6de581672a3ce40eedc69fc899eadd49993c5aa96ef12a8e79d02736
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      user.ini
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\floatskin\user.ini
                                                                      • Size 80B
                                                                      • SHA256 d1f1614c316eef5a259e250284be9bcf79230145a2d3a3f3ef6eb4a4f0926005
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      floatwinsetting.ini
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\floatwinsetting.ini
                                                                      • Size 35B
                                                                      • SHA256 9291a221a60ecc514b128cc063612599a29b939221dc16c0641c25739c0a4c8c
                                                                      • MD5 SHA1 SHA512
                                                                      Submit Download

                                                                      kclearak.dat.d
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\kclearak.dat.d
                                                                      • Size 1KB
                                                                      • SHA256 77b727cb6d8e404ecbe35cba42bcfa3794a1a3952b5957eb1b640a6557a12d30
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      ksoftdlcache.dat
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\ksoftdlcache.dat
                                                                      • Size 1KB
                                                                      • SHA256 36558867d031a2628324e01698229f5028b2d3e63b4e5ab6d2d31150284e2efa
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      ksofticondownloader.dat
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\ksofticondownloader.dat
                                                                      • Size 26B
                                                                      • SHA256 294b9aaf2e3bcd5e4694d164f30e727d5653301887f8f63de5c9e4232115a011
                                                                      • MD5 SHA1 SHA512
                                                                      Submit Download

                                                                      ksoftmgr.ini
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\ksoftmgr.ini
                                                                      • Size 55B
                                                                      • SHA256 65b0ed88c07e59c7d374a4ea21e9d1ea92643a5ea29539cf08f1aa5af89b700e
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      ksoftmgr.ini
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\ksoftmgr.ini
                                                                      • Size 171B
                                                                      • SHA256 7fe1ddc3477bbbd01d7c9ed7c60667580d25c73053ebdf98464c7c089faa0be4
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      ksoftmgr.ini
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\ksoftmgr.ini
                                                                      • Size 258B
                                                                      • SHA256 f991a043a55e360bd5a5b83010c8db8ffe8f1d6bbd67f5ccefdca3dd60dae383
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      ksoftmgr.ini
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\ksoftmgr.ini
                                                                      • Size 258B
                                                                      • SHA256 6e028f7f31c1d65eaf5e2306b5c686012488d5acd478c1a008501c570702bd66
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      ksoftmgr.ini
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\ksoftmgr.ini
                                                                      • Size 293B
                                                                      • SHA256 2f5e155de6ff27f6c0771764adb3ae6de5e75d788d83eaca3c17dc19b604962a
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      kuserfeedback.ini
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\kuserfeedback.ini
                                                                      • Size 478B
                                                                      • SHA256 666662a5d997252fd4ff64a2cfbf85468a111dc9ceb2692e3c78a7cc39b98be6
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      raw_record.dat
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\raw_record.dat
                                                                      • Size 12KB
                                                                      • SHA256 15a423ea011e8ad37aa555aba2b687d3735fa8e2d3a4ad3ba35c1baf944786f9
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      push_type_record.dat
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\rcmdv2sp01\push_type_record.dat
                                                                      • Size 128B
                                                                      • SHA256 9299bb61aa1a3c52cef5b5c9266176a4b6d73e02a82cf5da11db6e04d7745d5f
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      kadblockcfg.ini
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\kadblock\kadblockcfg.ini
                                                                      • Size 69B
                                                                      • SHA256 536ad1032746f5125cb2e7cff99a42f0af1e96ed727c68e8024a2a6c224f7f7a
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      kavmenu.dll
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\kavmenu.dll
                                                                      • Size 1.9MB
                                                                      • SHA256 23d235c1f8220b1499f07b68e27b10ae991d4d948e848bb8bc57d88ca4a04997
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      kcondition.dll
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\kcondition.dll
                                                                      • Size 243KB
                                                                      • SHA256 01ec0e4d85757fc0c3bcc25a6896eebb38b5f7d6e8bd89e15644154fef593806
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      keasyipcn.dll
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\keasyipcn.dll
                                                                      • Size 123KB
                                                                      • SHA256 2b2342270bba33a16d66f7b89e4cf1c5562cac28c3b7e513142d2ef59c1c3880
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      kislive.log
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\kislive.log
                                                                      • Size 2KB
                                                                      • SHA256 1f6c032f84fbc255bb2872092f8e4b69af2079922a67a8c9965b10105d86e061
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      ksapi64.dll
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\ksapi64.dll
                                                                      • Size 209KB
                                                                      • SHA256 8d40a06eedd2e8bbada2793c28abc2da33c4b0a1c73379009741f386449da4f2
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      indexkav.datx
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\indexkav.datx
                                                                      • Size 384B
                                                                      • SHA256 54956c39ae85a1ec87d68e1e0afc273c145d81a9a784a1909531cf230b63002e
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      indexkav.txt
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\indexkav.txt
                                                                      • Size 286B
                                                                      • SHA256 dd34a98fdc0025ad6c66d088ffd49ab2b4b33bf06d3acdc96989ad7d98cbc0a1
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      authoritycontrolindex.dat
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\authoritycontrolindex.dat
                                                                      • Size 442B
                                                                      • SHA256 3772635b7e77b50cc77108e9109ebea291c93fa5f06ccb715c63a123bef1d30e
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      msvcp140_1.dll
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\msvcp140_1.dll
                                                                      • Size 20KB
                                                                      • SHA256 acfbe9da7f8c6d3de7f43b9d30a22f70d353488753e844777de82ae34d82bd5e
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      qgif.dll
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\plugins\imageformats\qgif.dll
                                                                      • Size 36KB
                                                                      • SHA256 ef6b609cfd5b3222cadb8858bf7dc141ac7218b5c7d7e727df285ce703214535
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      qicns.dll
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\plugins\imageformats\qicns.dll
                                                                      • Size 41KB
                                                                      • SHA256 692a8e7741a39fdbca028e8bf73c3f30040d9f74c173b318e5cc4159486ed2db
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      qico.dll
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\plugins\imageformats\qico.dll
                                                                      • Size 35KB
                                                                      • SHA256 9d6751cc3d809ba1355a6c357cd7bfdcf12e555e4498011e95e65476ae9ff780
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      qjpeg.dll
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\plugins\imageformats\qjpeg.dll
                                                                      • Size 368KB
                                                                      • SHA256 85774388cf581a5dfd609561a6a577ea73dd09cd317ee9b80143abc9670773e6
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      qtga.dll
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\plugins\imageformats\qtga.dll
                                                                      • Size 30KB
                                                                      • SHA256 1f7be1905c6d7a8bf9b78289fbf4c675b4a3707637039ab6f260472d508367ff
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      qtiff.dll
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\plugins\imageformats\qtiff.dll
                                                                      • Size 348KB
                                                                      • SHA256 c6351dfe8418c20c3f53b9c31908c8dc59e73394603001ab9aaab0b6b5d6f0c9
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      qwbmp.dll
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\plugins\imageformats\qwbmp.dll
                                                                      • Size 29KB
                                                                      • SHA256 3ff412993dd02c439c12404abebf0626878e351853a8aa72183c84490e52d55f
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      qwebp.dll
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\plugins\imageformats\qwebp.dll
                                                                      • Size 407KB
                                                                      • SHA256 cb227ad15c30233e099d716ed95b3f88dec6465eecd183fecc0b1b7b2927e7a3
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      qwindows.dll
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\plugins\platforms\qwindows.dll
                                                                      • Size 1.2MB
                                                                      • SHA256 63bd6672960dd76faaff08eddc76b374a7a224ab3ee1a3dd030dc24096ae56d4
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      qsqlite.dll
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\plugins\sqldrivers\qsqlite.dll
                                                                      • Size 1.1MB
                                                                      • SHA256 d7479069e98b47df9b9f029c2ad005dbdfcfa544c08ccc021b978b81274cf3db
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      qwindowsvistastyle.dll
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\plugins\styles\qwindowsvistastyle.dll
                                                                      • Size 132KB
                                                                      • SHA256 70e58aa0b6d57f8822cccc060002ea0eb298aeca34e963f08fd627ad6f677483
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      qt5core.dll
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\qt5core.dll
                                                                      • Size 5.2MB
                                                                      • SHA256 9ed5615506767c29a57b306c4d313efc186c6a43405fd405caedc1c4bff4e70c
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      qt5gui.dll
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\qt5gui.dll
                                                                      • Size 5.6MB
                                                                      • SHA256 59307776dc5600cee3f9f39ccea39da2ff5fdf453e909bc105df08d1bcc8a813
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      qt5network.dll
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\qt5network.dll
                                                                      • Size 2.4MB
                                                                      • SHA256 bedcdba46fe75802fc6e85cc7cc6c3c7c5dc6e99e0f05b7b5e4d1e217f11f4e1
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      qt5sql.dll
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\qt5sql.dll
                                                                      • Size 164KB
                                                                      • SHA256 47cab4e2d47d4470ae57f60d8039e0292cd45eb5bc092d5d70c91bb77513441e
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      qt5widgets.dll
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\qt5widgets.dll
                                                                      • Size 4.3MB
                                                                      • SHA256 15b137d08842c87b32ffe11756ccb18bbd5927b607db31918c472c34e64d6fc5
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      microsoft.vc80.crt.manifest
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\vipapp\rightmenumgr\microsoft.vc80.crt.manifest
                                                                      • Size 1KB
                                                                      • SHA256 d736c413543b6b168dc59769840ae95b5726d428f69a23af1659dea8fb4236c8
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      microsoft.vc80.mfc.manifest
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\vipapp\rightmenumgr\microsoft.vc80.mfc.manifest
                                                                      • Size 1KB
                                                                      • SHA256 c9b16fe35ce84550b8e933a893dd19cc7d54684a72bb38c71bdb44eb4d133830
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      kuidsrv.dll
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\kuidsrv.dll
                                                                      • Size 457KB
                                                                      • SHA256 d8830e52d76140ffbdb87d411e1f36e0106a23c85c0e1dbfb0d4921d52882a11
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      kws.log
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\kws.log
                                                                      • Size 968B
                                                                      • SHA256 5c6b237675975cb88745924a40d6fb3593fea437a74e06328133c961758c8cec
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      kws.log
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\kws.log
                                                                      • Size 1KB
                                                                      • SHA256 49aae658162acac50e4861c70cb177e7ab6b5f726dc330d0180187db0f786012
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      kwsprotect64.log
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\kwsprotect64.log
                                                                      • Size 92B
                                                                      • SHA256 8505f57055540a95be206accbaf18729d08e79421347c87b2855cd9717829dfe
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      kxecom.kid
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\kxecom.kid
                                                                      • Size 1B
                                                                      • SHA256 36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068
                                                                      • MD5 SHA1 SHA512
                                                                      Submit Download

                                                                      kxescore.exe
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\kxescore.exe
                                                                      • Size 219KB
                                                                      • SHA256 5e38ad04de84ec09e13e994e664683f488c0d5d44e0d722ca83b92561035b788
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      kxetray.exe
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\kxetray.exe
                                                                      • Size 2.5MB
                                                                      • SHA256 87802977bfaaffa1298ba2344bc088c1fdd795a35081dd7c1a3f3ef1c628dfc6
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      kavbootc.sys
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kavbootc.sys
                                                                      • Size 57KB
                                                                      • SHA256 da2b11e8b4bfd8e4bc799155211ae981a481e8344ed19bb93de53cdd6db1ddf4
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      kisknl.sys
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\ksde\kisknl.sys
                                                                      • Size 264KB
                                                                      • SHA256 54ef11e0da401ff54b2e941a66fcdf1466166896b113c3768b93fc61d573b4c0
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      ksbwdet2.dll
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\ksbwdet2.dll
                                                                      • Size 966KB
                                                                      • SHA256 d98f3c2a4c5c1d10ab4d2e151dfe94b799de6f6cf5c5151aeb5f0303d52181b0
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      kusrtrst.dat
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kusrtrst.dat
                                                                      • Size 107B
                                                                      • SHA256 f444d3739d12d23bed6190b80717b9cd157ababf68f3df68d8fae7346aaf47f7
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      sqlite.dll
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\sqlite.dll
                                                                      • Size 373KB
                                                                      • SHA256 5f409db44c8ac37789588ba0532a62de71e2937ccf867912e2482e6662ec0478
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      60047639.dat
                                                                      • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\softmgrcache\tmp\2124_2280\60047639.dat
                                                                      • Size 2KB
                                                                      • SHA256 70209d55346abca8dfd313c0ccb2f02f894d235d01e4d9404abefdff10193948
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      hg.dat
                                                                      • Path C:\ProgramData\Kingsoft\KIS\hg.dat
                                                                      • Size 53B
                                                                      • SHA256 389bd033a7a6bb98416fd6b70b63ecf810180f209ab19204ba7b23f3b0f3dccc
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      common[2].css
                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\JU3023J6\common[2].css
                                                                      • Size 3KB
                                                                      • SHA256 86f878e83ea88a49fbf654d01e493f0f11a6fd51a7a1bc6150f6bb597b778a62
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      cursor[1].cur
                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\JU3023J6\cursor[1].cur
                                                                      • Size 4KB
                                                                      • SHA256 3c1c4b56398c0f2cbcd11e52cc477b4329aa4e1936f3000a362c9c5b026bf54f
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      InstallHelper.exe
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\kantivirus\InstallHelper.exe
                                                                      • Size 409KB
                                                                      • SHA256 446ca743f9f5d6364bbb46f4dce62ab754878b593b285890edec1e501357c533
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      kavsetup.log
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\kantivirus\kavsetup.log
                                                                      • Size 3KB
                                                                      • SHA256 707165872c53d07a3071bd6f5c6f00acaf6de1745f90f8096644be1c2c71a6fe
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      kavsetup.log
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\kantivirus\kavsetup.log
                                                                      • Size 4KB
                                                                      • SHA256 c62186d68b6c0abe174401e03b5b5c330669e6c3940564b3eb0689ce2a3c96b8
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      semPacketDllLog.log
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\kantivirus\semPacketDllLog.log
                                                                      • Size 28KB
                                                                      • SHA256 7305321b17b5940aa83c27fe271da9e732c314c1d2ea7194ab66b82bf06b9a39
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      install.xml
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\kantivirus\~e59ae86\install.xml
                                                                      • Size 38KB
                                                                      • SHA256 af2664055569cc2148b991ac4bca15594ae761bdc98250894f28d657c44c3bb8
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      kinst.log
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\kinst.log
                                                                      • Size 756B
                                                                      • SHA256 339d4af56450dccb92323a3a3a7d40960214dd66222c1cdda8cbadb895e57fd9
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      MSVCP140.dll
                                                                      • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\MSVCP140.dll
                                                                      • Size 426KB
                                                                      • SHA256 b9aefaf687812af08a5144ba4f0bc904c1adcd1ce8e84acf51bc830e74c967cc
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      MSVCP80.dll
                                                                      • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\MSVCP80.dll
                                                                      • Size 549KB
                                                                      • SHA256 b9bfb37c45a9abd36da98bf94476f7ea33b0a1cec5e58db99504b62371209681
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      MSVCR80.dll
                                                                      • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\MSVCR80.dll
                                                                      • Size 625KB
                                                                      • SHA256 7a61303cadc238cceb9ff3f03a7d9848d905e01734195b9a5ef354f3b773693a
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      VCRUNTIME140.dll
                                                                      • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\VCRUNTIME140.dll
                                                                      • Size 74KB
                                                                      • SHA256 657ab198c4035ec4b6ff6cf863c2ec99962593547af41b772593715de2df459c
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      kswitch.dat
                                                                      • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\data\kswitch.dat
                                                                      • Size 37KB
                                                                      • SHA256 c4971d66988b5e3cdcfe0d5c9102b802bcfb40a4876d9f88b1b9325db5da0f89
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      ktaskcfg.dat
                                                                      • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\data\ktaskcfg.dat
                                                                      • Size 19KB
                                                                      • SHA256 5a8432d84682884d382291fa8825ca7d1ba441c48680101fe25f786e57c7e5c7
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      pre_update.dat
                                                                      • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\data\pre_update.dat
                                                                      • Size 1KB
                                                                      • SHA256 24379bff1dad42301a608f224c12451a41aeb1318036466f2aaea1bfe0299fa3
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      framework.dll
                                                                      • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\framework.dll
                                                                      • Size 2.5MB
                                                                      • SHA256 612384b99c9c82eb3effd69596a27baf5d63023cb182912d091cadfe69ac5e86
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      kdump.dll
                                                                      • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kdump.dll
                                                                      • Size 285KB
                                                                      • SHA256 e3a2b33a035ec21bcad3263078b6358d1428cb295b0083a498f24ee6df808426
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      kdumpcfg.dat
                                                                      • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kdumpcfg.dat
                                                                      • Size 2KB
                                                                      • SHA256 fe792bcac6a8073ff3bfa373ffe60bebd1b0283423c5300da306e274b01887ca
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      kmagiccube.dll
                                                                      • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kmagiccube.dll
                                                                      • Size 364KB
                                                                      • SHA256 802b09190e1841c79f83c427b44df0f05c5917d976375e1f2cd6ae8569340806
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      knotifyinvoker.dll
                                                                      • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\knotifyinvoker.dll
                                                                      • Size 246KB
                                                                      • SHA256 3fbf6e9fa0d9ebf3937bf51a69bfb65152f70097ffcfe5efefb6a5988ac0f135
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      ksapi.dll
                                                                      • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\ksapi.dll
                                                                      • Size 215KB
                                                                      • SHA256 752cefc9d07d3e7b8f7b88533c1b6dda27d7c3ebfc5b53ae00800e0cbe6c3f08
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      ksapi64.sys
                                                                      • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\ksapi64.sys
                                                                      • Size 104KB
                                                                      • SHA256 76c9a05e9846579bacf4c08098dfb97619ee1eb6ba3d8823bf33bcc8a1d540b9
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      ktaskdispatch.dll
                                                                      • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\ktaskdispatch.dll
                                                                      • Size 200KB
                                                                      • SHA256 ecbf6f8fea9c109aa276f526738b2f2e78377b9625cfc690556d2b5c6b508a10
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      kwhrequestor.dll
                                                                      • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kwhrequestor.dll
                                                                      • Size 500KB
                                                                      • SHA256 1d23ca195ca248e9960f5ce7b9c27eec129fb23fec7549a20f2bad545d7631b1
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      kxescore_sp.xcf
                                                                      • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kxescore_sp.xcf
                                                                      • Size 87B
                                                                      • SHA256 eb09cf1094904f0d3038ce1e981fd4366eba4000c8b6f13a3dbbaefea4797e37
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      pegasus.dll
                                                                      • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\pegasus.dll
                                                                      • Size 118KB
                                                                      • SHA256 7a45efcc821f820daf4b64ac8ebcbf2958564b8f61be67c26d287c791eefd607
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      delaydownloader.dat
                                                                      • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\ressrc\chs\delaydownloader.dat
                                                                      • Size 25KB
                                                                      • SHA256 56e3ddcc77889a68303657691d59a50cead561cd4c4947a94257772ebd47435f
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      uplive.svr
                                                                      • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\ressrc\chs\uplive.svr
                                                                      • Size 25KB
                                                                      • SHA256 81009d567ac552cea53764fbb6d2190c043e314d82ccfb97e19542e8f2e79e0e
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      kfccfg.ini
                                                                      • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kfccfg.ini
                                                                      • Size 3KB
                                                                      • SHA256 ca19b121b7f3827fc51c212dd59f6e177e0b128a5f18c9bae76ea8392551a0e5
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      kfcdetect.dll
                                                                      • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kfcdetect.dll
                                                                      • Size 1.7MB
                                                                      • SHA256 5598962881c515bc1f17ef36bccab1db15e253722a173e175752dccf580b4eb1
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      memory/1088-3607-0x0000000005660000-0x000000000567B000-memory.dmp
                                                                      Download

                                                                      memory/1464-3988-0x0000000003BE0000-0x0000000003BFC000-memory.dmp
                                                                      Download

                                                                      memory/2124-4698-0x0000000071EB0000-0x0000000072220000-memory.dmp
                                                                      Download

                                                                      memory/2124-4188-0x0000000071EB0000-0x0000000072220000-memory.dmp
                                                                      Download

                                                                      memory/2124-4179-0x0000000009840000-0x00000000098A8000-memory.dmp
                                                                      Download

                                                                      memory/2124-4177-0x0000000008420000-0x0000000008446000-memory.dmp
                                                                      Download

                                                                      memory/2124-4181-0x00000000097F0000-0x0000000009800000-memory.dmp
                                                                      Download

                                                                      memory/2124-3963-0x0000000004490000-0x00000000044AB000-memory.dmp
                                                                      Download

                                                                      memory/2124-4156-0x0000000007FE0000-0x0000000007FFC000-memory.dmp
                                                                      Download

                                                                      memory/2628-196-0x0000000010000000-0x000000001033A000-memory.dmp
                                                                      Download

                                                                      memory/2628-4187-0x0000000010000000-0x000000001033A000-memory.dmp
                                                                      Download

                                                                      memory/2628-44-0x0000000010000000-0x000000001033A000-memory.dmp
                                                                      Download

                                                                      memory/2628-46-0x0000000010339000-0x000000001033A000-memory.dmp
                                                                      Download

                                                                      memory/2628-58-0x0000000010000000-0x000000001033A000-memory.dmp
                                                                      Download

                                                                      memory/2628-3241-0x0000000010000000-0x000000001033A000-memory.dmp
                                                                      Download

                                                                      memory/2628-3347-0x0000000010000000-0x000000001033A000-memory.dmp
                                                                      Download

                                                                      memory/2628-138-0x0000000010000000-0x000000001033A000-memory.dmp
                                                                      Download

                                                                      memory/2628-145-0x0000000010000000-0x000000001033A000-memory.dmp
                                                                      Download

                                                                      memory/2860-3943-0x0000000000010000-0x0000000000023000-memory.dmp
                                                                      Download

                                                                      memory/3344-3961-0x000000000AAA0000-0x000000000AAD1000-memory.dmp
                                                                      Download

                                                                      memory/3344-3631-0x0000000003DC0000-0x0000000003E07000-memory.dmp
                                                                      Download

                                                                      memory/3344-3626-0x0000000002020000-0x0000000002034000-memory.dmp
                                                                      Download

                                                                      memory/3344-3629-0x0000000003AA0000-0x0000000003B7E000-memory.dmp
                                                                      Download

                                                                      memory/3344-4453-0x0000000071EB0000-0x0000000072220000-memory.dmp
                                                                      Download

                                                                      memory/3344-3627-0x0000000002040000-0x0000000002052000-memory.dmp
                                                                      Download

                                                                      memory/3344-3644-0x0000000004D60000-0x0000000004EC3000-memory.dmp
                                                                      Download

                                                                      memory/3344-3624-0x00000000013A0000-0x00000000013B0000-memory.dmp
                                                                      Download

                                                                      memory/3344-3633-0x000000006EDE0000-0x000000006EDF0000-memory.dmp
                                                                      Download

                                                                      memory/3344-3901-0x0000000071EB0000-0x0000000072220000-memory.dmp
                                                                      Download

                                                                      memory/3344-3851-0x0000000006C30000-0x0000000006C42000-memory.dmp
                                                                      Download

                                                                      memory/3344-3941-0x000000000A8C0000-0x000000000A993000-memory.dmp
                                                                      Download

                                                                      memory/3344-3994-0x0000000009BA0000-0x0000000009C27000-memory.dmp
                                                                      Download

                                                                      memory/3344-3894-0x0000000006C60000-0x0000000006C7A000-memory.dmp
                                                                      Download

                                                                      memory/3344-3850-0x0000000006C10000-0x0000000006C24000-memory.dmp
                                                                      Download

                                                                      memory/3344-3660-0x0000000005F10000-0x0000000005F2B000-memory.dmp
                                                                      Download

                                                                      memory/3344-3625-0x00000000014C0000-0x00000000014CE000-memory.dmp
                                                                      Download

                                                                      memory/3624-4000-0x0000000004D50000-0x0000000006036000-memory.dmp
                                                                      Download

                                                                      memory/3624-3405-0x000000006EDE0000-0x000000006EDF0000-memory.dmp
                                                                      Download

                                                                      memory/3808-3668-0x0000000008180000-0x00000000081A6000-memory.dmp
                                                                      Download

                                                                      memory/3808-3461-0x000000000A1F0000-0x000000000A223000-memory.dmp
                                                                      Download

                                                                      memory/3808-3475-0x000000000A380000-0x000000000A39B000-memory.dmp
                                                                      Download

                                                                      memory/3808-3473-0x000000000A520000-0x000000000A588000-memory.dmp
                                                                      Download

                                                                      memory/3808-3478-0x0000000003150000-0x000000000316C000-memory.dmp
                                                                      Download

                                                                      memory/3808-3492-0x0000000007B20000-0x0000000007B3C000-memory.dmp
                                                                      Download

                                                                      memory/3808-3596-0x0000000071EB0000-0x0000000072220000-memory.dmp
                                                                      Download

                                                                      memory/3808-3678-0x000000000A4B0000-0x000000000A4C0000-memory.dmp
                                                                      Download

                                                                      memory/3808-3882-0x000000000C590000-0x000000000C5AC000-memory.dmp
                                                                      Download

                                                                      memory/3808-4219-0x0000000071EB0000-0x0000000072220000-memory.dmp
                                                                      Download

                                                                      memory/4052-3996-0x0000000002C10000-0x0000000002C57000-memory.dmp
                                                                      Download

                                                                      memory/4052-3998-0x000000006EDE0000-0x000000006EDF0000-memory.dmp
                                                                      Download

                                                                      memory/4504-4870-0x0000000071EB0000-0x0000000072220000-memory.dmp
                                                                      Download

                                                                      memory/5124-4027-0x0000000071EB0000-0x0000000072220000-memory.dmp
                                                                      Download

                                                                      memory/5124-4088-0x000000000C390000-0x000000000C3AC000-memory.dmp
                                                                      Download

                                                                      memory/5124-4013-0x0000000005260000-0x000000000527C000-memory.dmp
                                                                      Download

                                                                      memory/5124-4016-0x0000000005270000-0x000000000528C000-memory.dmp
                                                                      Download

                                                                      memory/5124-4009-0x00000000051C0000-0x0000000005228000-memory.dmp
                                                                      Download

                                                                      memory/5124-4007-0x0000000004B80000-0x0000000004BB3000-memory.dmp
                                                                      Download

                                                                      memory/5124-4011-0x0000000004B40000-0x0000000004B5B000-memory.dmp
                                                                      Download

                                                                      memory/5124-4084-0x0000000009FE0000-0x000000000A006000-memory.dmp
                                                                      Download

                                                                      memory/5124-4200-0x0000000071EB0000-0x0000000072220000-memory.dmp
                                                                      Download

                                                                      memory/5124-4086-0x000000000A020000-0x000000000A030000-memory.dmp
                                                                      Download

                                                                      memory/5424-3457-0x0000000006F10000-0x0000000006F1E000-memory.dmp
                                                                      Download

                                                                      memory/5424-3453-0x000000006E560000-0x000000006E7DB000-memory.dmp
                                                                      Download

                                                                      memory/5424-3482-0x0000000009870000-0x0000000009880000-memory.dmp
                                                                      Download

                                                                      memory/5424-3512-0x0000000009A00000-0x0000000009A14000-memory.dmp
                                                                      Download

                                                                      memory/5424-3514-0x0000000009A20000-0x0000000009A32000-memory.dmp
                                                                      Download

                                                                      memory/5424-3468-0x0000000008040000-0x0000000008043000-memory.dmp
                                                                      Download

                                                                      memory/5424-3469-0x0000000008050000-0x0000000008058000-memory.dmp
                                                                      Download

                                                                      memory/5424-4190-0x00000000094A0000-0x00000000094B6000-memory.dmp
                                                                      Download

                                                                      memory/5424-3470-0x0000000008060000-0x0000000008069000-memory.dmp
                                                                      Download

                                                                      memory/5424-3352-0x0000000003370000-0x000000000338B000-memory.dmp
                                                                      Download

                                                                      memory/5424-3466-0x0000000007FB0000-0x0000000007FB2000-memory.dmp
                                                                      Download

                                                                      memory/5424-3471-0x0000000008070000-0x0000000008072000-memory.dmp
                                                                      Download

                                                                      memory/5424-4026-0x0000000071EB0000-0x0000000072220000-memory.dmp
                                                                      Download

                                                                      memory/5424-3334-0x000000006EDE0000-0x000000006EDF0000-memory.dmp
                                                                      Download

                                                                      memory/5424-3368-0x0000000071EB0000-0x0000000072220000-memory.dmp
                                                                      Download

                                                                      memory/5424-3332-0x0000000002920000-0x0000000002967000-memory.dmp
                                                                      Download

                                                                      memory/5424-4195-0x000000000A7A0000-0x000000000A80B000-memory.dmp
                                                                      Download

                                                                      memory/5700-4132-0x000000006EDE0000-0x000000006EDF0000-memory.dmp
                                                                      Download

                                                                      memory/5700-4130-0x0000000003060000-0x00000000030A7000-memory.dmp
                                                                      Download