Overview

overview

10

Static

static

3

2026-08-02...op.exe

windows10-2004-x64

10

2026-08-02...op.exe

windows11-ltsc_2024-x64

10

Analysis

  • max time kernel
    121s
  • max time network
    154s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    02/08/2026, 03:16

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-02_3fd5f5bf677c11255f1816fa975af7c8_amadey_elex_glassworm_hijackloader_remcos_smoke-loader_stealc_stop.exe
  • Size 4.1MB
  • Sample260802-dsxp3sce24
  • SHA256 d5653636b9b2869579ec40491daae826cbef4a1a0729a27ad780a38ec9af599f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
backdoorbootkitdefense_evasiondiscoverysalitypersistencetrojanupx

Malware Config

Extracted

Family

  • sality

C2

  • http://89.119.67.154/testo5/

  • http://kukutrustnet777.info/home.gif

  • http://kukutrustnet888.info/home.gif

  • http://kukutrustnet987.info/home.gif

  • http://www.klkjwre9fqwieluoi.info/

  • http://kukutrustnet777888.info/

Signatures

  • Family: Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality
  • Modifies firewall policy service 3 TTPs 3 IoCs
    defense_evasion
  • UAC bypass 3 TTPs 1 IoCs
    defense_evasiontrojan
  • Windows security bypass 2 TTPs 6 IoCs
    defense_evasiontrojan
  • Detects executables packed with Sality Polymorphic Code Generator or Simple Poly Engine or Sality 39 IoCs
  • UPX dump on OEP (original entry point) 57 IoCs
  • Downloads MZ/PE file 1 IoCs
  • Drops file in Drivers directory 23 IoCs
  • Modifies Windows Firewall 2 TTPs 1 IoCs
    defense_evasion
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Windows security modification 2 TTPs 7 IoCs
    defense_evasiontrojan
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Checks whether UAC is enabled 1 TTPs 2 IoCs
    defense_evasiontrojan
  • Enumerates connected drives 3 TTPs 21 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

    bootkitpersistence
  • Drops autorun.inf file 1 TTPs 2 IoCs

    Malware can abuse Windows Autorun to spread further via attached volumes.

  • UPX packed file 55 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Program crash 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies registry class 14 IoCs
  • Suspicious behavior: EnumeratesProcesses 26 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • System policy modification 1 TTPs 1 IoCs
    defense_evasion

Processes

  • C:\Windows\system32\dwm.exe
    "dwm.exe"
    1⤵
      PID:1184
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k UnistackSvcGroup -s CDPUserSvc
      1⤵
        PID:3100
      • C:\Windows\system32\svchost.exe
        C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s webthreatdefusersvc
        1⤵
          PID:3220
        • C:\Windows\System32\ShellHost.exe
          "C:\Windows\System32\ShellHost.exe"
          1⤵
            PID:3480
          • C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe -k ClipboardSvcGroup -p -s cbdhsvc
            1⤵
              PID:3352
            • C:\Windows\System32\RuntimeBroker.exe
              C:\Windows\System32\RuntimeBroker.exe -Embedding
              1⤵
                PID:4388
              • C:\Windows\System32\RuntimeBroker.exe
                C:\Windows\System32\RuntimeBroker.exe -Embedding
                1⤵
                  PID:4444
                • C:\Windows\system32\svchost.exe
                  C:\Windows\system32\svchost.exe -k UdkSvcGroup -s UdkUserSvc
                  1⤵
                    PID:4476
                  • C:\Windows\system32\DllHost.exe
                    C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
                    1⤵
                      PID:4756
                    • C:\Windows\system32\ctfmon.exe
                      /QuitInfo:0000000000000270;0000000000000274;
                      1⤵
                        PID:5100
                      • C:\Windows\system32\DllHost.exe
                        C:\Windows\system32\DllHost.exe /Processid:{973D20D7-562D-44B9-B70B-5A0F49CCDF3F}
                        1⤵
                          PID:5152
                        • C:\Windows\System32\SecurityHealthSystray.exe
                          "C:\Windows\System32\SecurityHealthSystray.exe"
                          1⤵
                            PID:5256
                          • C:\Windows\System32\smartscreen.exe
                            C:\Windows\System32\smartscreen.exe -Embedding
                            1⤵
                              PID:1408
                            • C:\Windows\system32\sihost.exe
                              sihost.exe
                              1⤵
                                PID:5144
                                • C:\Windows\explorer.exe
                                  explorer.exe /LOADSAVEDWINDOWS
                                  2⤵
                                    PID:1452
                                    • C:\Users\Admin\AppData\Local\Temp\2026-08-02_3fd5f5bf677c11255f1816fa975af7c8_amadey_elex_glassworm_hijackloader_remcos_smoke-loader_stealc_stop.exe
                                      "C:\Users\Admin\AppData\Local\Temp\2026-08-02_3fd5f5bf677c11255f1816fa975af7c8_amadey_elex_glassworm_hijackloader_remcos_smoke-loader_stealc_stop.exe"
                                      3⤵
                                      • Modifies firewall policy service
                                      • UAC bypass
                                      • Windows security bypass
                                      • Downloads MZ/PE file
                                      • Drops file in Drivers directory
                                      • Loads dropped DLL
                                      • Windows security modification
                                      • Checks whether UAC is enabled
                                      • Enumerates connected drives
                                      • Writes to the Master Boot Record (MBR)
                                      • Drops autorun.inf file
                                      • Drops file in Program Files directory
                                      • Drops file in Windows directory
                                      • System Location Discovery: System Language Discovery
                                      • Modifies registry class
                                      • Suspicious behavior: EnumeratesProcesses
                                      • Suspicious use of AdjustPrivilegeToken
                                      • Suspicious use of FindShellTrayWindow
                                      • Suspicious use of SendNotifyMessage
                                      • Suspicious use of WriteProcessMemory
                                      • System policy modification
                                      PID:2240
                                      • C:\Users\Admin\AppData\Local\Temp\kantivirus\InstallHelper.exe
                                        "C:\Users\Admin\AppData\Local\Temp\kantivirus\InstallHelper.exe" -Pid:"2240" -LogFileName:"C:\Users\Admin\AppData\Local\Temp\kantivirus\semPacketDllLog.log" -InstallPath:"C:\Users\Admin\AppData\Local\Temp\kantivirus" -Tid1:"10" -Tid2:"206" -Tod1:"336" -Tod2:"1" -IId:"211542892" -UUID:"5406A318D0F6035546EFFDC37C8089AC" -TryNo:"1335" -SvrId:"2026.SP2.2" -StrategyList:"0;1;2;3;4|0;2;3;4" -Version:"3" -ProductInstalled:"0" -CompetitorMask:"0" -CompetitorInstalled:"0"
                                        4⤵
                                        • Executes dropped EXE
                                        • System Location Discovery: System Language Discovery
                                        PID:4984
                                      • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kavlog2.exe
                                        "c:\program files (x86)\kingsoft\kingsoft antivirus\kavlog2.exe" -install
                                        4⤵
                                          PID:4116
                                        • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\ksoftmgr.exe
                                          "c:\program files (x86)\kingsoft\kingsoft antivirus\ksoftmgr.exe" -preload
                                          4⤵
                                            PID:4552
                                          • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kxescore.exe
                                            "c:\program files (x86)\kingsoft\kingsoft antivirus\kxescore.exe" /start kxescore
                                            4⤵
                                              PID:6656
                                            • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kislive.exe
                                              "c:\program files (x86)\kingsoft\kingsoft antivirus\kislive.exe" /autorun /std /skipcs3
                                              4⤵
                                                PID:6596
                                              • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\ksoftmgr.exe
                                                "c:\program files (x86)\kingsoft\kingsoft antivirus\ksoftmgr.exe" -install:61000061 -src:106
                                                4⤵
                                                  PID:6876
                                                  • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\rcmdhelper.exe
                                                    "c:\program files (x86)\kingsoft\kingsoft antivirus\rcmdhelper.exe" -updateliebaowifi
                                                    5⤵
                                                      PID:472
                                                    • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\rcmdhelper.exe
                                                      "c:\program files (x86)\kingsoft\kingsoft antivirus\rcmdhelper.exe" -updatetaguser
                                                      5⤵
                                                        PID:2120
                                                      • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\rcmdhelper.exe
                                                        "c:\program files (x86)\kingsoft\kingsoft antivirus\rcmdhelper.exe" -kdeskcanrcmd
                                                        5⤵
                                                          PID:4560
                                                        • C:\Windows\SysWOW64\netsh.exe
                                                          "C:\Windows\System32\netsh.exe" firewall add allowedprogram "c:\program files (x86)\kingsoft\kingsoft antivirus\xlmodule\download\minithunderplatform.exe" "minithunderplatform" enable
                                                          5⤵
                                                          • Modifies Windows Firewall
                                                          PID:1160
                                                      • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kxetray.exe
                                                        "c:\program files (x86)\kingsoft\kingsoft antivirus\kxetray.exe" /autorun /hidefloatwin /silentinstrcmd
                                                        4⤵
                                                          PID:5268
                                                        • C:\Windows\SysWOW64\WerFault.exe
                                                          C:\Windows\SysWOW64\WerFault.exe -u -p 2240 -s 1940
                                                          4⤵
                                                          • Program crash
                                                          PID:2776
                                                  • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
                                                    "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
                                                    1⤵
                                                      PID:3828
                                                    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                      1⤵
                                                        PID:1892
                                                      • C:\Windows\system32\svchost.exe
                                                        C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                        1⤵
                                                          PID:2248
                                                        • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kxetray.exe
                                                          "c:\program files (x86)\kingsoft\kingsoft antivirus\kxetray.exe" -autorun
                                                          1⤵
                                                            PID:6252
                                                            • C:\program files (x86)\kingsoft\kingsoft antivirus\kxemain.exe
                                                              "C:\program files (x86)\kingsoft\kingsoft antivirus\kxemain.exe" authoritycontrol /noruntool /msgsender /noaddintoyytools
                                                              2⤵
                                                                PID:4648
                                                                • C:\program files (x86)\kingsoft\kingsoft antivirus\ksoftmgr.exe
                                                                  "C:\program files (x86)\kingsoft\kingsoft antivirus\\ksoftmgr.exe" /ksoftmgr /create_virtualdisk
                                                                  3⤵
                                                                    PID:6564
                                                                  • C:\program files (x86)\kingsoft\kingsoft antivirus\rcmdhelper.exe
                                                                    "C:\program files (x86)\kingsoft\kingsoft antivirus\rcmdhelper.exe" -updateliebaowifi
                                                                    3⤵
                                                                      PID:5528
                                                                    • C:\program files (x86)\kingsoft\kingsoft antivirus\rcmdhelper.exe
                                                                      "C:\program files (x86)\kingsoft\kingsoft antivirus\rcmdhelper.exe" -updatetaguser
                                                                      3⤵
                                                                        PID:2244
                                                                      • C:\program files (x86)\kingsoft\kingsoft antivirus\rcmdhelper.exe
                                                                        "C:\program files (x86)\kingsoft\kingsoft antivirus\rcmdhelper.exe" -kdeskcanrcmd
                                                                        3⤵
                                                                          PID:7144
                                                                      • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\knewvip.exe
                                                                        "knewvip.exe" --open_opction=1 --from=1 --start
                                                                        2⤵
                                                                          PID:256
                                                                        • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kxecenter.exe
                                                                          "c:\program files (x86)\kingsoft\kingsoft antivirus\kxecenter.exe"
                                                                          2⤵
                                                                            PID:1880
                                                                            • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\knewvip.exe
                                                                              "knewvip.exe" --open_opction=1 --from=1 --start
                                                                              3⤵
                                                                                PID:4436
                                                                              • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kismain.exe
                                                                                "c:\program files (x86)\kingsoft\kingsoft antivirus\kismain.exe" /ksoftmgr /create_virtualdisk
                                                                                3⤵
                                                                                  PID:4908
                                                                                  • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kxetray.exe
                                                                                    "c:\program files (x86)\kingsoft\kingsoft antivirus\kxetray.exe" /kismain /ksoftmgr /create_virtualdisk
                                                                                    4⤵
                                                                                      PID:2304
                                                                                • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kxemain.exe
                                                                                  "c:\program files (x86)\kingsoft\kingsoft antivirus\kxemain.exe" /kismain /ksoftmgr /create_virtualdisk
                                                                                  2⤵
                                                                                    PID:5712
                                                                                  • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kwsprotect64.exe
                                                                                    "kwsprotect64.exe" (null)
                                                                                    2⤵
                                                                                      PID:3148
                                                                                  • C:\Windows\system32\drivers\ksapi64.sys
                                                                                    C:\Windows\system32\drivers\ksapi64.sys
                                                                                    1⤵
                                                                                      PID:3740
                                                                                    • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kxescore.exe
                                                                                      "c:\program files (x86)\kingsoft\kingsoft antivirus\kxescore.exe" /service kxescore
                                                                                      1⤵
                                                                                        PID:1936
                                                                                      • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kxescore.exe
                                                                                        "c:\program files (x86)\kingsoft\kingsoft antivirus\kxescore.exe" /service kxescore
                                                                                        1⤵
                                                                                          PID:2336
                                                                                        • C:\Windows\SysWOW64\WerFault.exe
                                                                                          C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 2240 -ip 2240
                                                                                          1⤵
                                                                                            PID:4604
                                                                                          • C:\Windows\system32\Drivers\kavbootc64.sys
                                                                                            C:\Windows\system32\Drivers\KAVBootC64.sys
                                                                                            1⤵
                                                                                              PID:5308
                                                                                            • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kxewsc.exe
                                                                                              "c:\program files (x86)\kingsoft\kingsoft antivirus\kxewsc.exe" /service
                                                                                              1⤵
                                                                                                PID:5964
                                                                                              • \??\c:\program files (x86)\kingsoft\kingsoft antivirus\security\ksde\kisnetflt64.sys
                                                                                                "c:\program files (x86)\kingsoft\kingsoft antivirus\security\ksde\kisnetflt64.sys"
                                                                                                1⤵
                                                                                                  PID:4792
                                                                                                • C:\Windows\system32\drivers\kisknl.sys
                                                                                                  C:\Windows\system32\drivers\kisknl.sys
                                                                                                  1⤵
                                                                                                    PID:6468

                                                                                                  Network

                                                                                                        MITRE ATT&CK Enterprise v16

                                                                                                        Reconnaissance

                                                                                                        Resource Development

                                                                                                        Initial Access

                                                                                                        Replication Through Removable Media

                                                                                                        1
                                                                                                        T1091

                                                                                                        Execution

                                                                                                        Persistence

                                                                                                        Create or Modify System Process

                                                                                                        2
                                                                                                        T1543

                                                                                                        Windows Service

                                                                                                        2
                                                                                                        T1543.003

                                                                                                        Pre-OS Boot

                                                                                                        1
                                                                                                        T1542

                                                                                                        Bootkit

                                                                                                        1
                                                                                                        T1542.003

                                                                                                        Privilege Escalation

                                                                                                        Abuse Elevation Control Mechanism

                                                                                                        1
                                                                                                        T1548

                                                                                                        Bypass User Account Control

                                                                                                        1
                                                                                                        T1548.002

                                                                                                        Create or Modify System Process

                                                                                                        2
                                                                                                        T1543

                                                                                                        Windows Service

                                                                                                        2
                                                                                                        T1543.003

                                                                                                        Defense Evasion

                                                                                                        Abuse Elevation Control Mechanism

                                                                                                        1
                                                                                                        T1548

                                                                                                        Bypass User Account Control

                                                                                                        1
                                                                                                        T1548.002

                                                                                                        Impair Defenses

                                                                                                        5
                                                                                                        T1562

                                                                                                        Disable or Modify System Firewall

                                                                                                        2
                                                                                                        T1562.004

                                                                                                        Disable or Modify Tools

                                                                                                        3
                                                                                                        T1562.001

                                                                                                        Modify Registry

                                                                                                        5
                                                                                                        T1112

                                                                                                        Pre-OS Boot

                                                                                                        1
                                                                                                        T1542

                                                                                                        Bootkit

                                                                                                        1
                                                                                                        T1542.003

                                                                                                        Credential Access

                                                                                                        Discovery

                                                                                                        Peripheral Device Discovery

                                                                                                        1
                                                                                                        T1120

                                                                                                        Query Registry

                                                                                                        2
                                                                                                        T1012

                                                                                                        System Information Discovery

                                                                                                        3
                                                                                                        T1082

                                                                                                        System Location Discovery

                                                                                                        1
                                                                                                        T1614

                                                                                                        System Language Discovery

                                                                                                        1
                                                                                                        T1614.001

                                                                                                        Lateral Movement

                                                                                                        Replication Through Removable Media

                                                                                                        1
                                                                                                        T1091

                                                                                                        Collection

                                                                                                        Command and Control

                                                                                                        Exfiltration

                                                                                                        Impact

                                                                                                        Replay Monitor

                                                                                                        Loading Replay Monitor...

                                                                                                        Downloads

                                                                                                        abtest_record.dat
                                                                                                        • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\abtest_record.dat
                                                                                                        • Size 4KB
                                                                                                        • SHA256 2dffb9db728bffe23274e41ddec0e9d624c1ddad683748fd832ba65c207b707a
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        kcalendarsetting.ini
                                                                                                        • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\calendar\kcalendarsetting.ini
                                                                                                        • Size 68B
                                                                                                        • SHA256 9366579a29cb11c991a44cfc60c1fdb10af802020315a4d2f2ec9ff71e7671c7
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        catrecord.json
                                                                                                        • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\catrecord.json
                                                                                                        • Size 1KB
                                                                                                        • SHA256 23e47ea8ec54b5cdf97901c0cc1f012550266a7508b477f9f2e657d43b874ea3
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        user.ini
                                                                                                        • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\floatskin\user.ini
                                                                                                        • Size 80B
                                                                                                        • SHA256 d1f1614c316eef5a259e250284be9bcf79230145a2d3a3f3ef6eb4a4f0926005
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        floatwinsetting.ini
                                                                                                        • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\floatwinsetting.ini
                                                                                                        • Size 35B
                                                                                                        • SHA256 9291a221a60ecc514b128cc063612599a29b939221dc16c0641c25739c0a4c8c
                                                                                                        • MD5 SHA1 SHA512
                                                                                                        Submit Download

                                                                                                        ksofticondownloader.dat
                                                                                                        • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\ksofticondownloader.dat
                                                                                                        • Size 26B
                                                                                                        • SHA256 294b9aaf2e3bcd5e4694d164f30e727d5653301887f8f63de5c9e4232115a011
                                                                                                        • MD5 SHA1 SHA512
                                                                                                        Submit Download

                                                                                                        ksoftmgr.ini
                                                                                                        • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\ksoftmgr.ini
                                                                                                        • Size 55B
                                                                                                        • SHA256 8e0281e173578569a2c41e7a09c004b07b91b8a8e6bbe6b7b59a06299079b527
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        ksoftmgr.ini
                                                                                                        • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\ksoftmgr.ini
                                                                                                        • Size 258B
                                                                                                        • SHA256 4c02d35b13cb1f3f050da81b0e63399e82e69f69cd0f5275290e64376b9b3460
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        kuserfeedback.ini
                                                                                                        • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\kuserfeedback.ini
                                                                                                        • Size 478B
                                                                                                        • SHA256 666662a5d997252fd4ff64a2cfbf85468a111dc9ceb2692e3c78a7cc39b98be6
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        planatag.ini
                                                                                                        • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\planatag.ini
                                                                                                        • Size 2B
                                                                                                        • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                                                                        • MD5 SHA1 SHA512
                                                                                                        Submit Download

                                                                                                        raw_record.dat
                                                                                                        • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\raw_record.dat
                                                                                                        • Size 12KB
                                                                                                        • SHA256 15a423ea011e8ad37aa555aba2b687d3735fa8e2d3a4ad3ba35c1baf944786f9
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        push_type_record.dat
                                                                                                        • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\rcmdv2sp01\push_type_record.dat
                                                                                                        • Size 128B
                                                                                                        • SHA256 92545f6e2b78cf1d519967f52206b3794e10f4a22098690b0099a4c6ffad802e
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        kadblockcfg.ini
                                                                                                        • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\kadblock\kadblockcfg.ini
                                                                                                        • Size 69B
                                                                                                        • SHA256 536ad1032746f5125cb2e7cff99a42f0af1e96ed727c68e8024a2a6c224f7f7a
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        kavmenu.dll
                                                                                                        • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\kavmenu.dll
                                                                                                        • Size 1.9MB
                                                                                                        • SHA256 23d235c1f8220b1499f07b68e27b10ae991d4d948e848bb8bc57d88ca4a04997
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        keasyipcn.dll
                                                                                                        • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\keasyipcn.dll
                                                                                                        • Size 123KB
                                                                                                        • SHA256 2b2342270bba33a16d66f7b89e4cf1c5562cac28c3b7e513142d2ef59c1c3880
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        kmagiccube.dll
                                                                                                        • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\kmagiccube.dll
                                                                                                        • Size 364KB
                                                                                                        • SHA256 802b09190e1841c79f83c427b44df0f05c5917d976375e1f2cd6ae8569340806
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        ksapi.dll
                                                                                                        • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\ksapi.dll
                                                                                                        • Size 215KB
                                                                                                        • SHA256 752cefc9d07d3e7b8f7b88533c1b6dda27d7c3ebfc5b53ae00800e0cbe6c3f08
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        ktaskdispatch.dll
                                                                                                        • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktaskdispatch.dll
                                                                                                        • Size 200KB
                                                                                                        • SHA256 ecbf6f8fea9c109aa276f526738b2f2e78377b9625cfc690556d2b5c6b508a10
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        kws.log
                                                                                                        • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\kws.log
                                                                                                        • Size 696B
                                                                                                        • SHA256 7e58210254373173289c705de33e1c913526ef1913b2d4c034aa9c3a0bc215e0
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        kws.log
                                                                                                        • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\kws.log
                                                                                                        • Size 2KB
                                                                                                        • SHA256 ee151136210ab48a16f1b875cc8e72c4a2e1bdfe8d52496e80290ee621378a9b
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        kxecom.kid
                                                                                                        • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\kxecom.kid
                                                                                                        • Size 1B
                                                                                                        • SHA256 36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068
                                                                                                        • MD5 SHA1 SHA512
                                                                                                        Submit Download

                                                                                                        kxetray.exe
                                                                                                        • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\kxetray.exe
                                                                                                        • Size 2.5MB
                                                                                                        • SHA256 87802977bfaaffa1298ba2344bc088c1fdd795a35081dd7c1a3f3ef1c628dfc6
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        msvcp140.dll
                                                                                                        • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\msvcp140.dll
                                                                                                        • Size 426KB
                                                                                                        • SHA256 b9aefaf687812af08a5144ba4f0bc904c1adcd1ce8e84acf51bc830e74c967cc
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        msvcr80.dll
                                                                                                        • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\msvcr80.dll
                                                                                                        • Size 625KB
                                                                                                        • SHA256 7a61303cadc238cceb9ff3f03a7d9848d905e01734195b9a5ef354f3b773693a
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        pegasus.dll
                                                                                                        • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\pegasus.dll
                                                                                                        • Size 118KB
                                                                                                        • SHA256 7a45efcc821f820daf4b64ac8ebcbf2958564b8f61be67c26d287c791eefd607
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        kavbootc.sys
                                                                                                        • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kavbootc.sys
                                                                                                        • Size 57KB
                                                                                                        • SHA256 da2b11e8b4bfd8e4bc799155211ae981a481e8344ed19bb93de53cdd6db1ddf4
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        kisknl.sys
                                                                                                        • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\ksde\kisknl.sys
                                                                                                        • Size 264KB
                                                                                                        • SHA256 54ef11e0da401ff54b2e941a66fcdf1466166896b113c3768b93fc61d573b4c0
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        kusrtrst.dat
                                                                                                        • Path C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kusrtrst.dat
                                                                                                        • Size 107B
                                                                                                        • SHA256 4403fba96b7d414c18cd8ddf795a450841e58929d8fa3bbba04ccde2a20b66c5
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        hg.dat
                                                                                                        • Path C:\ProgramData\Kingsoft\KIS\hg.dat
                                                                                                        • Size 53B
                                                                                                        • SHA256 caf8795467bfe246b8be75bfd6173c36dc659bd61b280c32c59f999e10cd0108
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        common[1].css
                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\K666N7AC\common[1].css
                                                                                                        • Size 3KB
                                                                                                        • SHA256 86f878e83ea88a49fbf654d01e493f0f11a6fd51a7a1bc6150f6bb597b778a62
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        install_ressofttemprory.png
                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\install_ressofttemprory.png
                                                                                                        • Size 6KB
                                                                                                        • SHA256 f205d5f54e00acb95bdbd2347666a97e87fc41a1c762e906bca2669aadab4286
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        InstallHelper.exe
                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\kantivirus\InstallHelper.exe
                                                                                                        • Size 409KB
                                                                                                        • SHA256 446ca743f9f5d6364bbb46f4dce62ab754878b593b285890edec1e501357c533
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        kavsetup.log
                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\kantivirus\kavsetup.log
                                                                                                        • Size 4KB
                                                                                                        • SHA256 5a68650ff16192b4a24187c7eb9c37d3af81d3f9a5834391a82ce702d1acbcb1
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        semPacketDllLog.log
                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\kantivirus\semPacketDllLog.log
                                                                                                        • Size 40KB
                                                                                                        • SHA256 a51f4e2a397accbd3d77fbcd81916180772a852acc99c310a3394a900fbaa141
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        install.xml
                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\kantivirus\~e5ab17f\install.xml
                                                                                                        • Size 38KB
                                                                                                        • SHA256 af2664055569cc2148b991ac4bca15594ae761bdc98250894f28d657c44c3bb8
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        mdlu.pif
                                                                                                        • Path C:\mdlu.pif
                                                                                                        • Size 100KB
                                                                                                        • SHA256 71b785161ca572d726e453260e64117e71984a577dab1d10fe9ec7c42c6ba5ff
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        kxemain.exe
                                                                                                        • Path C:\program files (x86)\kingsoft\kingsoft antivirus\kxemain.exe
                                                                                                        • Size 5.7MB
                                                                                                        • SHA256 faa95adc36cf977f346c1ed37e940357d0eaf1bc0f9018f522474942e51d6100
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        MSVCP80.dll
                                                                                                        • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\MSVCP80.dll
                                                                                                        • Size 549KB
                                                                                                        • SHA256 b9bfb37c45a9abd36da98bf94476f7ea33b0a1cec5e58db99504b62371209681
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        VCRUNTIME140.dll
                                                                                                        • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\VCRUNTIME140.dll
                                                                                                        • Size 74KB
                                                                                                        • SHA256 657ab198c4035ec4b6ff6cf863c2ec99962593547af41b772593715de2df459c
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        kswitch.dat
                                                                                                        • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\data\kswitch.dat
                                                                                                        • Size 37KB
                                                                                                        • SHA256 c4971d66988b5e3cdcfe0d5c9102b802bcfb40a4876d9f88b1b9325db5da0f89
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        ktaskcfg.dat
                                                                                                        • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\data\ktaskcfg.dat
                                                                                                        • Size 19KB
                                                                                                        • SHA256 5a8432d84682884d382291fa8825ca7d1ba441c48680101fe25f786e57c7e5c7
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        pre_update.dat
                                                                                                        • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\data\pre_update.dat
                                                                                                        • Size 1KB
                                                                                                        • SHA256 24379bff1dad42301a608f224c12451a41aeb1318036466f2aaea1bfe0299fa3
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        framework.dll
                                                                                                        • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\framework.dll
                                                                                                        • Size 2.5MB
                                                                                                        • SHA256 612384b99c9c82eb3effd69596a27baf5d63023cb182912d091cadfe69ac5e86
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        kavlog2.exe
                                                                                                        • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kavlog2.exe
                                                                                                        • Size 600KB
                                                                                                        • SHA256 ba5a5e52c3730300306e858d7184689598ff4c9634bbac89b1d1ab72884c5657
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        kcondition.dll
                                                                                                        • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kcondition.dll
                                                                                                        • Size 243KB
                                                                                                        • SHA256 01ec0e4d85757fc0c3bcc25a6896eebb38b5f7d6e8bd89e15644154fef593806
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        kdump.dll
                                                                                                        • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kdump.dll
                                                                                                        • Size 285KB
                                                                                                        • SHA256 e3a2b33a035ec21bcad3263078b6358d1428cb295b0083a498f24ee6df808426
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        kdumpcfg.dat
                                                                                                        • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\kdumpcfg.dat
                                                                                                        • Size 2KB
                                                                                                        • SHA256 fe792bcac6a8073ff3bfa373ffe60bebd1b0283423c5300da306e274b01887ca
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        ksapi64.dll
                                                                                                        • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\ksapi64.dll
                                                                                                        • Size 209KB
                                                                                                        • SHA256 8d40a06eedd2e8bbada2793c28abc2da33c4b0a1c73379009741f386449da4f2
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        ksapi64.sys
                                                                                                        • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\ksapi64.sys
                                                                                                        • Size 104KB
                                                                                                        • SHA256 76c9a05e9846579bacf4c08098dfb97619ee1eb6ba3d8823bf33bcc8a1d540b9
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        ksoftmgr.exe
                                                                                                        • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\ksoftmgr.exe
                                                                                                        • Size 4.6MB
                                                                                                        • SHA256 58da8a6c1c32b12b6720418526bb8f12cc24e20e83b98550dfc0699332cd15c9
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        kctrl.dat
                                                                                                        • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\operation\cas\kctrl.dat
                                                                                                        • Size 38KB
                                                                                                        • SHA256 70fcd62a860d47cc9bd45ba2fc8b6b9090cec7ad0443cccad1b537210efcb3a8
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        kfmt.datx
                                                                                                        • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\operation\cas\kfmt.datx
                                                                                                        • Size 201KB
                                                                                                        • SHA256 25230775a66c976405cfe70e2d2d51e0ec7208d922fabde085ec5433f1ff262b
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        kinfoc.dll
                                                                                                        • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\operation\cas\kinfoc.dll
                                                                                                        • Size 616KB
                                                                                                        • SHA256 8025b3adff1544e7b56b4d05b69972360fd05152b2ff16b5bb4bf9c8bb6bf6d6
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        delaydownloader.dat
                                                                                                        • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\ressrc\chs\delaydownloader.dat
                                                                                                        • Size 25KB
                                                                                                        • SHA256 56e3ddcc77889a68303657691d59a50cead561cd4c4947a94257772ebd47435f
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        uplive.svr
                                                                                                        • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\ressrc\chs\uplive.svr
                                                                                                        • Size 25KB
                                                                                                        • SHA256 81009d567ac552cea53764fbb6d2190c043e314d82ccfb97e19542e8f2e79e0e
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        kfccfg.ini
                                                                                                        • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kfccfg.ini
                                                                                                        • Size 3KB
                                                                                                        • SHA256 ca19b121b7f3827fc51c212dd59f6e177e0b128a5f18c9bae76ea8392551a0e5
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        kfcdetect.dll
                                                                                                        • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kfcdetect.dll
                                                                                                        • Size 1.7MB
                                                                                                        • SHA256 5598962881c515bc1f17ef36bccab1db15e253722a173e175752dccf580b4eb1
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        ksbwdet2.dll
                                                                                                        • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\security\kxescan\ksbwdet2.dll
                                                                                                        • Size 966KB
                                                                                                        • SHA256 d98f3c2a4c5c1d10ab4d2e151dfe94b799de6f6cf5c5151aeb5f0303d52181b0
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        sqlite.dll
                                                                                                        • Path \??\c:\program files (x86)\kingsoft\kingsoft antivirus\security\kxescan\sqlite.dll
                                                                                                        • Size 373KB
                                                                                                        • SHA256 5f409db44c8ac37789588ba0532a62de71e2937ccf867912e2482e6662ec0478
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        memory/2240-82-0x0000000002880000-0x000000000390E000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-48-0x0000000005400000-0x0000000005401000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-2-0x0000000002880000-0x000000000390E000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-2637-0x0000000010000000-0x000000001033A000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-2337-0x0000000000400000-0x00000000007F6000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-5498-0x0000000010000000-0x000000001033A000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-2160-0x0000000010000000-0x000000001033A000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-1763-0x0000000010000000-0x000000001033A000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-5969-0x0000000010000000-0x000000001033A000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-1630-0x0000000010000000-0x000000001033A000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-1221-0x0000000010000000-0x000000001033A000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-1087-0x0000000010000000-0x000000001033A000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-150-0x0000000002880000-0x000000000390E000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-109-0x0000000002880000-0x000000000390E000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-101-0x0000000002880000-0x000000000390E000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-8350-0x0000000002880000-0x000000000390E000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-98-0x0000000002880000-0x000000000390E000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-95-0x0000000002880000-0x000000000390E000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-8342-0x0000000000400000-0x00000000007F6000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-93-0x0000000002880000-0x000000000390E000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-91-0x0000000002880000-0x000000000390E000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-90-0x0000000002880000-0x000000000390E000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-87-0x0000000002880000-0x000000000390E000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-85-0x0000000002880000-0x000000000390E000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-84-0x0000000005480000-0x0000000005482000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-0-0x0000000000400000-0x00000000007F6000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-1-0x0000000002880000-0x000000000390E000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-76-0x0000000002880000-0x000000000390E000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-73-0x0000000002880000-0x000000000390E000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-71-0x0000000002880000-0x000000000390E000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-70-0x0000000002880000-0x000000000390E000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-67-0x0000000002880000-0x000000000390E000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-64-0x0000000002880000-0x000000000390E000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-62-0x0000000002880000-0x000000000390E000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-59-0x0000000002880000-0x000000000390E000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-4-0x0000000002880000-0x000000000390E000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-55-0x0000000005510000-0x0000000005511000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-53-0x0000000002880000-0x000000000390E000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-57-0x00000000026B0000-0x00000000026B2000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-58-0x0000000005480000-0x0000000005482000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-56-0x0000000005480000-0x0000000005482000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-8-0x0000000002880000-0x000000000390E000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-6-0x0000000002880000-0x000000000390E000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-50-0x0000000002880000-0x000000000390E000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-9-0x0000000002880000-0x000000000390E000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-47-0x0000000002880000-0x000000000390E000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-46-0x0000000002880000-0x000000000390E000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-7-0x0000000002880000-0x000000000390E000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-23-0x0000000002880000-0x000000000390E000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-10-0x0000000002880000-0x000000000390E000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-6523-0x0000000010000000-0x000000001033A000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-11-0x0000000002880000-0x000000000390E000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-15-0x00000000026B0000-0x00000000026B2000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-14-0x00000000026B0000-0x00000000026B2000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-13-0x0000000002750000-0x0000000002751000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-12-0x00000000026B0000-0x00000000026B2000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-5-0x0000000002880000-0x000000000390E000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-22-0x0000000002880000-0x000000000390E000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-16-0x0000000002880000-0x000000000390E000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2240-17-0x0000000002880000-0x000000000390E000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2336-6672-0x0000000000F20000-0x0000000000F30000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2336-7895-0x0000000072190000-0x0000000072500000-memory.dmp
                                                                                                        Download

                                                                                                        memory/4552-6362-0x000000006D7D0000-0x000000006D7E0000-memory.dmp
                                                                                                        Download

                                                                                                        memory/4648-7894-0x0000000072190000-0x0000000072500000-memory.dmp
                                                                                                        Download

                                                                                                        memory/4648-6834-0x0000000072190000-0x0000000072500000-memory.dmp
                                                                                                        Download

                                                                                                        memory/4648-6662-0x0000000004120000-0x0000000004153000-memory.dmp
                                                                                                        Download

                                                                                                        memory/4984-2428-0x0000000002280000-0x0000000002281000-memory.dmp
                                                                                                        Download

                                                                                                        memory/4984-2429-0x0000000000640000-0x0000000000642000-memory.dmp
                                                                                                        Download

                                                                                                        memory/5308-7914-0x0000000000010000-0x0000000000023000-memory.dmp
                                                                                                        Download

                                                                                                        memory/6252-6537-0x00000000083E0000-0x00000000083E3000-memory.dmp
                                                                                                        Download

                                                                                                        memory/6252-6536-0x0000000008350000-0x0000000008352000-memory.dmp
                                                                                                        Download

                                                                                                        memory/6252-6538-0x00000000083F0000-0x00000000083F8000-memory.dmp
                                                                                                        Download

                                                                                                        memory/6252-7055-0x0000000072190000-0x0000000072500000-memory.dmp
                                                                                                        Download

                                                                                                        memory/6252-6540-0x0000000008410000-0x0000000008412000-memory.dmp
                                                                                                        Download

                                                                                                        memory/6252-6466-0x0000000070270000-0x00000000704EB000-memory.dmp
                                                                                                        Download

                                                                                                        memory/6252-6554-0x00000000085E0000-0x00000000085EE000-memory.dmp
                                                                                                        Download

                                                                                                        memory/6252-6539-0x0000000008400000-0x0000000008409000-memory.dmp
                                                                                                        Download

                                                                                                        memory/6252-6313-0x00000000054F0000-0x00000000054F2000-memory.dmp
                                                                                                        Download

                                                                                                        memory/6252-6297-0x0000000005640000-0x0000000005641000-memory.dmp
                                                                                                        Download

                                                                                                        memory/6252-6256-0x0000000072190000-0x0000000072500000-memory.dmp
                                                                                                        Download

                                                                                                        memory/6252-6199-0x000000006D7D0000-0x000000006D7E0000-memory.dmp
                                                                                                        Download

                                                                                                        memory/6252-6216-0x00000000033C0000-0x00000000033DB000-memory.dmp
                                                                                                        Download

                                                                                                        memory/6252-6197-0x0000000002E00000-0x0000000002E47000-memory.dmp
                                                                                                        Download

                                                                                                        memory/6876-8383-0x0000000072190000-0x0000000072500000-memory.dmp
                                                                                                        Download

                                                                                                        memory/6876-7416-0x0000000072190000-0x0000000072500000-memory.dmp
                                                                                                        Download