Joe Sandbox Cloud Basic

Want to search on specific fields?


Try our:

Advanced Search

Want to search in depth on all Cloud Basic reports?

Try: Joe Sandbox View

Register Login
sloganpng
top title background image
flash

SecuriteInfo.com.Trojan.Siggen23.13161.15240.4676.exe

Status: finished
Submission Time: 2024-06-05 11:42:07 +02:00
Malicious
Ransomware
Trojan
Spyware
Evader
Poisonivy

Comments

Tags

  • exe

Details

  • Analysis ID:
    1452258
  • API (Web) ID:
    1452258
  • Analysis Started:
    2024-06-05 11:42:07 +02:00
  • Analysis Finished:
    2024-06-05 12:12:23 +02:00
  • MD5:
    fd92c8971718f1e033a5b70c8216c4cf
  • SHA1:
    e7373cdaedd4eb124fd8c34ad6d80d9e5137084f
  • SHA256:
    12e69a8cbb43fd1cb8bbcbc8ea4e93a11096244753c6e463201db4086e346ca2
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
Full Report Management Report IOC Report
malicious
Score: 100
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Full Report Management Report IOC Report
malicious
Score: 80
System: Windows 10 64 bit 20H2 Native physical Machine for testing VM-aware malware (Office 2019, Chrome 134, Firefox 91, Adobe Reader DC 21, Java 8 Update 301
Run Condition: Suspected VM Detection

Third Party Analysis Engines

Open Full Report
malicious
Score: 18/71
malicious
Score: 10/38
malicious

IPs

IP Country Detection
139.9.36.107
 China
103.235.46.40
 Hong Kong
221.194.141.166
 China
Click to see the 33 hidden entries
139.9.44.129
 China
120.52.95.245
 China
139.199.215.55
 China
120.92.32.118
 China
218.12.76.159
 China
113.16.211.1
 China
175.6.254.65
 China
121.37.232.36
 China
110.43.89.7
 China
218.12.76.156
 China
124.225.141.5
 China
218.12.76.171
 China
120.52.183.129
 China
180.97.251.230
 China
139.199.218.80
 China
8.8.8.8
 United States
123.207.105.156
 China
36.42.77.166
 China
111.230.160.42
 China
139.9.37.26
 China
47.246.46.224
 United States
124.71.209.131
 China
221.194.141.155
 China
163.181.92.243
 United States
114.132.191.224
 China
218.12.76.168
 China
58.222.47.189
 China
111.230.217.109
 China
120.52.95.238
 China
183.61.168.1
 China
110.43.81.41
 China
2.18.97.153
 European Union
183.61.243.1
 China

URLs

Name Detection
https://softmgr-softsem-srv.jinshanapi.com/sem/lenovomm/get_software_sem_infohttps://pc-store.lenovo
http://wpa.qq.com/msgrd?v=3&uin=%s&site=%s&menu=yestencent://message/?Menu=yes&uin=%s&Site=&Service=
http://cd001.www.duba.net/duba/install/2011/ever/duba_55_18.exe
Click to see the 97 hidden entries
http://shop.yflow.cn/goods/homeindex.actionL
http://cu003.www.duba.net/duba/tools/dubatools/scripttop10.iniUUIDdefaultmsgMESSAGEksmrbc.datunins00
http://softmgr.duba.net/snapshot/img/img-20220421-170447.568064
http://www.duba.com/?f=urlnewinvalid
http://www.duba.com/?f=desktopre
http://bbs.ggsafe.com/download/WiFi-2385.exe
http://ocsp.sectigo.com0
http://java.sun.com/developer/technicalArticles/Programming/compression/
http://www.phreedom.org/md5)08:27
https://gifshow-static.download.ks-cdn.com/udata/pkg/KwaiLive-Setup-1.5.3.219-Release-SeljZl.exe
http://cu003.www.duba.net/duba/tools/dubatools/softmgricon/60038320.pngLMEMH
http://aia1.wosign.com/ca1g2.ts.cer0
http://soft-dl.v78q.com/softmgr/package/E593CA50-643E-48BE-8A17-0CD5890AA11E/ZhiZhuZhiPai0529.exe.pa
http://123.207.105.156:8080/kurl_query
http://crl.entrust.net/2048ca.crl0;
http://dl_dir.qq.com/music/clntupate/QQMusic_Setup_86_860.exe
http://www.openssl.org/)
http://infoc2.duba.net/c/X
https://pc-store.lenovomm.cn/advertappservice/api/adAppCheck
http://down.neoimaging.cn/neoimaging/NeoImaging3.1.2.104.exe
http://trolltech.com/xml/features/report-start-end-entity
http://v.duba.com/?f=dbrwtip
http://cu003.www.duba.net/duba/tools/dubatools/usb/sysfixkill.exe
http://infoc2.duba.net/c/http://identify.zhhainiao.com/c/duba2/cacheCSIDL_COMMON_APPDATACSIDL_LOCAL_
http://download.ppstream.com/ppstreamsetup.exe
http://config.i.duba.net/duba/uninstcloud.inigiven_vipinstdayskteenmodecore.dllkfeedbackreport.dllop
https://ups.ksmobile.net/%s/getversions.php?lan=cn&apkversion=%s&channelid=%s&mcc=cn&version=1&osver
http://dldir1.qq.com/weixin/Windows/WeChatSetup.exe
https://pc-store.lenovomm.cn/advertappservice/api/adAppCheckhttps://softmgr-softsem-srv.jinshanapi.c
http://did.ijinshan.com/db/-modifyswsc
http://softmgr.duba.net/snapshot/img/img-20220421-170447.568064.png
http://game.9724.com/?f=dbzmdesktop
http://kwebx/failed.html
http://d1.kuai8.com/setup/Kuai8_GameManager_v4.9.1.7521.exe
http://cd001.www.duba.net/duba/install/2013/ever/duba_10_23.exenx
http://softmgr.duba.net/big/index.htm
http://dl.bizhi.sogou.com/dl/sogou_wallpaper_2.5j.exe
http://crl.thawte.com/ThawteTimestampingCA.crl0
https://code.qt.io/cgit/qt/qt5.git
http://www.wosign.com/policy/0
http://down.kuwo.cn/kwandroid/android.apk
http://config.i.duba.net/seminstall/166/718.xml?time=1717580599
https://newvip.duba.net/api/v2/uninstallretain/give_vip/checkhas_givenallow_give
http://www.openssl.org/support/faq.html
http://2398.35go.net/defend/o1/ci_848f036116d69ac4b2ea9f5d19519c9a.datA19EA66F6D4C62F1C3DF27B783E8FF
http://zlib.net/
http://www.duba.com/?f=repairdesk
http://infoc0.duba.net/c/06l
http://config.i.duba.net/seminstall/%d/%s.xml?time=%d
http://curl.haxx.se/rfc/cookie_spec.html
http://download.xunyou.com/xunyouclient/XunyouIntl_20170504.exe
http://search.cpan.org/~pmqs/IO-Compress-Zlib/
http://down.qq.com/cf/dltools/CrossFire_OBV4.3.1.0_Full_tgod_signed.exe
http://softmgr.duba.net/softmgr_v2/popular/11.htmlRequest
http://b.api.pc120.com/utp/?&st=&url=icdfkeep-aliveConnectionLocationcloseHost:
http://mydown.yesky.comhttps://www.ijinshan.com/privacy/duba-enduserlicenseandsevice-agreement.html
http://softmgr.duba.net/big/hotwords.htmhttp://softmgr.duba.net/small/hotwords.htm
http://game.9724.com/?f=dbzmquick
http://docs.python.org/library/zlib.html
https://g.live.com/odclientsettings/Prod.C:
http://file1.updrv.com/soft/2011/FastLife_Setup.exe
http://download.xunyou.com/xunyouclient/xunyou_20170504.exe
http://did.ijinshan.com/db/?v=2&p=%s&u=%s&m=%s&ip=%d&s=%ssuccess=1svrid=%02x%02x%02x%02x%02x%02x%02x
http://www.duba.com/?f=repairtsk
http://bugreports.qt.io/
http://palmzlib.sourceforge.net/
http://ifr.duba.net/upload.php1=kaem1
http://cloud-q.duba.net/evaluateKxeQueryUserTypeX
http://qt-project.org/xml/features/report-whitespace-only-CharData
http://newvip.ijinshan.com-open_opction=1
http://cloud-api.duba.net:8080/get_signature_coverage.jsonfile_urlhttp://cloud-api.duba.net:8080/get
http://rq.aw.cloud.duba.net/query/DgService.exe
http://cu003.www.duba.net/duba/tools/dubatools/softmgricon/6003
http://softmgr.duba.net/oU
http://www.symauth.com/rpa00
http://tools.ietf.org/html/rfc1950
http://xiuxiu.dl.meitu.com/XiuXiu_Setup_3.6.1.exe
http://download.doshow.com.cn/baidu/Doshow4.9_0002_1206.exe
https://duba-upquery.zhhainiao.com/upload/check_upload/v2type
http://open.xunlei.com/?from=jinshandubadownload_cleanfinish_icondownload_bootfinish_icon12xml
http://www.symauth.com/cps0(
http://www.ijinshan.com/help/4/1/20190514175742.shtml/removeallfileprotect:1
http://softmgr.duba.net/softmgr_v2/updateinfo.actionbatch_upgrade_softwarewait_animate_iconopt_finis
http://bigota.miwifi.com/xiaoqiang/client/xqapp.apk
http://union.infoc.duba.net/nep/v1/zD
http://v.duba.com/?f=dbzmtip
http://crl.ver)
http://softmgr.duba.net/softmgr_v2/getSoftUpdateInfo.action?softids=resp_commonretdatadownurlfilemd5
http://knsv2.cloud.duba.net:8080/kurl_query
http://dl_dir3.qq.com/minigamefile/QQGame2011ReleaseP7_setup_web.EXE
http://www.ijinshan.comhome_urlnew_window_urlerror_page_url/resource_archive_paths
http://identify.zhhainiao.com/c/tj/identify.ichreportedGlobal
http://softmgr.duba.net/big/index.htmsoft
http://cd001.www.duba.net/duba/install/packages/ever/kavsetupi7TB
https://g.live.com/1rewlive5skydrive/OneDriveProductionV2?OneDriveUpdate=9c123752e31a927b78dc96231b6
http://www.duba.com/?f=ieswdh
http://knsv2.cloud.duba.net:8080/kurl_queryinvalid.exeKFCCfgManager::CheckCloseAutoUploadClose

Dropped files

Name File Type Hashes Detection
C:\KDubaSoftDownloads\ZhiZhuZhiPai0529.exe.fd
 PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-core-console-l1-1-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-core-console-l1-2-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
Click to see the 433 hidden entries
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-core-datetime-l1-1-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-core-debug-l1-1-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-core-errorhandling-l1-1-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-core-file-l1-1-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-core-file-l1-2-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-core-file-l2-1-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-core-handle-l1-1-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-core-heap-l1-1-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-core-interlocked-l1-1-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-core-libraryloader-l1-1-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-core-localization-l1-2-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-core-memory-l1-1-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-core-namedpipe-l1-1-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-core-processenvironment-l1-1-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-core-processthreads-l1-1-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-core-processthreads-l1-1-1.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-core-profile-l1-1-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-core-rtlsupport-l1-1-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-core-string-l1-1-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-core-synch-l1-1-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-core-synch-l1-2-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-core-sysinfo-l1-1-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-core-timezone-l1-1-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-core-util-l1-1-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-core-winrt-error-l1-1-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-core-winrt-error-l1-1-1.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-core-winrt-string-l1-1-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-core-xstate-l2-1-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-crt-conio-l1-1-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-crt-convert-l1-1-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-crt-environment-l1-1-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-crt-filesystem-l1-1-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-crt-heap-l1-1-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-crt-locale-l1-1-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-crt-math-l1-1-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-crt-multibyte-l1-1-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-crt-private-l1-1-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-crt-process-l1-1-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-crt-runtime-l1-1-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-crt-stdio-l1-1-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-crt-string-l1-1-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-crt-time-l1-1-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\api-ms-win-crt-utility-l1-1-0.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\assistant\msvcp80.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\assistant\msvcr80.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\app\assistant\plugins\base.pln
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\cef\kwebui.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\cef\libcef.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\concrt140.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\clearplugin\ksreng3.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\clearplugin\plugin.nlb
 data
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\kssc.dat
 data
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\data\kssc64.dat
 data
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\defbrowser\klbrocore.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\defbrowser\klbromgr.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\defendmon.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\feedbackwin.exe
 PE32 executable (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\framework.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\jsonv6.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\k2isfdpro64.dll.bak
 PE32+ executable (DLL) (GUI) x86-64, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\k2s3rdhmpg.dll.bak
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\k2s3rdhmpg32.dll.bak
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\k2s3rdhmpg64.dll.bak
 PE32+ executable (DLL) (GUI) x86-64, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\k2shmpg.dll.bak
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\k2swebshield.dll.bak
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\k2wsprotect64.exe.bak
 PE32+ executable (GUI) x86-64, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\k2wsui.dll.bak
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\k2wsui64.dll.bak
 PE32+ executable (DLL) (GUI) x86-64, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kactivitycenter.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kadblock.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kauthorityctrl.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kauthorityview.exe
 PE32 executable (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kavevent.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kavlog2.exe
 PE32 executable (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kavmenu.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kavmenu64.dll
 PE32+ executable (DLL) (GUI) x86-64, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kbootacc.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kbootopt.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kcapricorn.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kcctrl.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kcddltool.exe
 PE32 executable (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kcleaner.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kcleaner.exe
 PE32 executable (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kcondition.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kconditionengine.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kdefendpop.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kdf.exe
 PE32 executable (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kdgui2.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kdgui2opt.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kdnsresolver.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kdownloader.exe
 PE32 executable (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kdrvmgr.exe
 PE32 executable (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kdtutil.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kdtutil64.dll
 PE32+ executable (DLL) (GUI) x86-64, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\keasyipcn.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\keasyipcnmt.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kfeedbackreport.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kfixstar.exe
 PE32 executable (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kfloatmain.exe
 PE32 executable (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kfloatwin.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kinst.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kinst.exe
 PE32 executable (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kintercept.exe
 PE32 executable (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kis2live.exe.bak
 PE32 executable (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kisfdpro64.dll
 PE32+ executable (DLL) (GUI) x86-64, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kislive.exe
 PE32 executable (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kismain.exe
 PE32 executable (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\klenovosoftplugin.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\klitesearch.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kmagiccube.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kmagiccube64.dll
 PE32+ executable (DLL) (GUI) x86-64, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kmenureg.exe
 PE32+ executable (console) x86-64, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\knetworkpanel.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\knewvip.exe
 PE32 executable (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\knotifycenter.exe
 PE32 executable (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\knotifyinvoker.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kpassport.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kperfplugin.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kpersona.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kplanet\kplanet_pure_vip_expiration_pop.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kplanet\ksatisfactionpop.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kplanet\kvipnoadpop.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kpopcenter.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kpopclt.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kpopinterengine.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kpopsvr.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kpprcmd.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kprivacypanel.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kproc_adblock.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kpurevipcore.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\krcmdbase.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\krcmddown.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\krcmdengine.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\krcmdenginenew.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\krcmdmon.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\krcmdtool.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\krcmdutils.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\krecycle.exe
 PE32 executable (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\krsctrl.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ks2launch.exe.bak
 PE32 executable (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ks3rdhmpg.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ks3rdhmpg32.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ks3rdhmpg64.dll
 PE32+ executable (DLL) (GUI) x86-64, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ksapi.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ksapi.sys
 PE32 executable (native) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ksapi64.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ksapi64.sys
 PE32+ executable (native) x86-64, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ksapi64_arm.sys
 PE32+ executable (DLL) (native) Aarch64, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ksapi64_ev.sys
 PE32+ executable (native) x86-64, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ksapi_ev.sys
 PE32 executable (native) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kscan.exe
 PE32 executable (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kschext.exe
 PE32 executable (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ksd.nlb
 data
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ksdectrl.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ksdkbase.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ksetupwiz.exe
 PE32 executable (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kshighvaluesp.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kshmpg.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kshmpgext.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kshmpghlp.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ksingularities.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kskinmgr.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kslaunch.exe
 PE32 executable (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kslaunchex.exe
 PE32 executable (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kslimengine.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ksm3rdex.dat
 data
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ksnowproject.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ksoftdeepclean.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ksoftdefendpop.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ksoftmgr.exe
 PE32 executable (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ksoftmgrengine.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ksoftmgrproxy.exe
 PE32 executable (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ksoftpurifier.exe
 PE32 executable (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ksoftpurifyengine.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kspupwnd.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ksscomunicate.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ksscprot.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ksscprot64.dll
 PE32+ executable (DLL) (GUI) x86-64, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kstools.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kswbc.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kswebshield.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kswscxex.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ksyshelper.exe
 PE32 executable (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ksyshelper64.exe
 PE32+ executable (GUI) x86-64, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ksysopteng.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ksysslim.exe
 PE32 executable (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktaskdispatch.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktaskrcmdplugin.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktasktimerplugin.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktaskvipplugin.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\index.datx
 zlib compressed data
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\kauthorityctrl.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\kauthorityctrl.dll.z
 zlib compressed data
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\kauthorityview.exe
 PE32 executable (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\kauthorityview.exe.z
 zlib compressed data
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\msvcp140.dll.z
 zlib compressed data
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\msvcp140_1.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\plugins\imageformats\qgif.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\plugins\imageformats\qicns.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\plugins\imageformats\qico.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\plugins\imageformats\qjpeg.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\plugins\imageformats\qjpeg.dll.z
 zlib compressed data
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\plugins\imageformats\qtga.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\plugins\imageformats\qtiff.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\plugins\imageformats\qtiff.dll.z
 zlib compressed data
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\plugins\imageformats\qwbmp.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\plugins\imageformats\qwebp.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\plugins\imageformats\qwebp.dll.z
 zlib compressed data
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\plugins\platforms\qwindows.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\plugins\platforms\qwindows.dll.z
 zlib compressed data
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\plugins\sqldrivers\qsqlite.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\plugins\sqldrivers\qsqlite.dll.z
 zlib compressed data
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\plugins\styles\qwindowsvistastyle.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\plugins\styles\qwindowsvistastyle.dll.z
 zlib compressed data
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\qt5core.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\qt5core.dll.z
 zlib compressed data
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\qt5gui.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\qt5gui.dll.z
 zlib compressed data
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\qt5network.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\qt5network.dll.z
 zlib compressed data
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\qt5sql.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\qt5sql.dll.z
 zlib compressed data
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\qt5widgets.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\qt5widgets.dll.z
 zlib compressed data
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktoolsplugin.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktoolupd.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktrashmon.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktrashscan.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ktrashscanex.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kuidsrv.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kupdata.exe
 PE32 executable (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kupdatesp.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kusbquery.sys
 PE32 executable (native) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kusbquery64.sys
 PE32+ executable (DLL) (native) x86-64, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kwhrequestor.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kwsprotect64.exe
 PE32+ executable (GUI) x86-64, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kwssp.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kwsui.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kwsui64.dll
 PE32+ executable (DLL) (GUI) x86-64, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kxe2score.exe.bak
 PE32 executable (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kxe2tray.exe.bak
 PE32 executable (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kxebase.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kxebscsp.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kxecenter.exe
 PE32 executable (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kxecore\kxecore.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kxemain.exe
 PE32 executable (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kxereg.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kxeresources.pak
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kxescore.exe
 PE32 executable (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kxetray.exe
 PE32 executable (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\kxewsc.exe
 PE32 executable (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\lbhelper.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\lblocker.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\menuplugin\kavmenu11.dll
 PE32+ executable (DLL) (GUI) x86-64, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\msvcp140_1.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\msvcp140_2.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\msvcp140_atomic_wait.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\msvcp140_codecvt_ids.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\msvcp80.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\msvcr80.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\netbuyprot.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\networkcore.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\npkwsnew.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\operation\cas\kinfoc.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\pegasus.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\plugins\imageformats\qgif.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\plugins\imageformats\qicns.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\plugins\imageformats\qico.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\plugins\imageformats\qjpeg.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\plugins\imageformats\qtga.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\plugins\imageformats\qtiff.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\plugins\imageformats\qwbmp.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\plugins\imageformats\qwebp.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\plugins\platforms\qwindows.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\plugins\sqldrivers\qsqlite.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\plugins\styles\qwindowsvistastyle.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\qt5core.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\qt5gui.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\qt5network.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\qt5sql.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\qt5svg.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\qt5widgets.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\qt5winextras.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\qt5xml.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\rcmdhelper.exe
 PE32 executable (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\rcmdhelper64.exe
 PE32+ executable (GUI) x86-64, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\scom.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kavbootc.sys
 PE32 executable (native) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kavbootc64.sys
 PE32+ executable (native) x86-64, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kavbootc64_arm.sys
 PE32+ executable (native) Aarch64, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kavbootc64_ev.sys
 PE32+ executable (native) x86-64, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kavbootc_ev.sys
 PE32 executable (native) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kavdevc.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\ksde\kisboot.sys
 PE32 executable (DLL) (native) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\ksde\kisboot64.sys
 PE32+ executable (DLL) (native) x86-64, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\ksde\kiscore.sys
 PE32 executable (native) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\ksde\kisknl.sys
 PE32 executable (native) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\ksde\kisknl64.sys
 PE32+ executable (native) x86-64, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\ksde\kisknl64_arm.sys
 PE32+ executable (DLL) (native) Aarch64, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\ksde\kisknl64_ev.sys
 PE32+ executable (native) x86-64, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\ksde\kisknl_ev.sys
 PE32 executable (native) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\ksde\kislog.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\ksde\kisnetflt.sys
 PE32 executable (native) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\ksde\kisnetflt64.sys
 PE32+ executable (native) x86-64, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\ksde\kisnetflt64_arm.sys
 PE32+ executable (DLL) (native) Aarch64, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\ksde\klengine.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\ksde\kmctrl.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\ksde\knetctrl.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\ksde\knetstgy.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\ksde\ksdeas.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\ksde\ksdebm.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\ksde\ksdecache.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\ksde\ksdecs.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\ksde\ksdecsex.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\ksde\ksdeds.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\ksde\ksdeinfoc.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\ksde\ksdelib.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\ksde\ksdepopex.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\ksde\ksdesm.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\ksde\ksdetw.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\ksde\ksdeutil.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\ksde\kshelper.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\ksnetm\kisnetm.sys
 PE32 executable (DLL) (native) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\ksnetm\kisnetm64.sys
 PE32+ executable (DLL) (native) x86-64, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\ksnetm\kisnetm64_arm.sys
 PE32+ executable (DLL) (native) Aarch64, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\ksnetm\kisnetm64_ev.sys
 PE32+ executable (DLL) (native) x86-64, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\ksnetm\kisnetm_ev.sys
 PE32 executable (DLL) (native) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\ksnetm\kisnetmxp.sys
 PE32 executable (DLL) (native) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\ksnetm\kmonstat.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kae\kaearcha.dat
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kae\kaearchb.dat
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kae\kaecore.dat
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kae\kaecorea.dat
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kae\kaecoref.dat
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kae\kaecorem.dat
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kae\kaevname.dat
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kae\kaext2.dat
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kae\kaextend.dat
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kae\karchive.dat
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kaeunpack.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kanthack.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kavquara.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kdhacker.sys
 PE32 executable (DLL) (native) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kdhacker64.sys
 PE32+ executable (DLL) (native) x86-64, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kdhacker64_arm.sys
 PE32+ executable (DLL) (native) Aarch64, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kdhacker64_ev.sys
 PE32+ executable (DLL) (native) x86-64, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kdhacker_ev.sys
 PE32 executable (DLL) (native) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kfcdetect.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kfileid.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\khandler.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kheur.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, UPX compressed
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\khistory.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kluaengine.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\klzo.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\knpescanner.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kqsccfg.dat
 data
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\ksbwdet2.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kscanner.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kseescan.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\ksesscan.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kset.vdb
 data
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kseta.dat
 data
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\ksetb.dat
 data
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\ksetc.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\ksetc\ksetc.dat
 data
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\ksetc\ksetc_2.dat
 data
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\ksetc\ksetc_3.dat
 data
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kseutil.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\ksreng3.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\ksscore.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\ksskrpr.sys
 PE32 executable (native) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kxesansp.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\ns.dat
 data
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\olescan2.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\sp3a.nlb
 data
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\sqlite.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\security\kxescan\wfs.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\thirdpartylegalnotices.txt
 ASCII text, with very long lines (1465)
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\ucrtbase.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\uni0nst.exe
 PE32 executable (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\vccorlib140.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\vipapp\defrag\kdefrag.exe
 PE32 executable (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\vipapp\defrag\msvcp80.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\vipapp\defrag\msvcr80.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\vipapp\defrag\packages\kdefrag.kpk
 Zip archive data, at least v2.0 to extract, compression method=deflate
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\vipapp\defrag\plugins\base.pln
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\vipapp\defrag\plugins\defrag.pln
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\vipapp\defrag\plugins\kvip.pln
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Program Files (x86)\kingsoft\kingsoft antivirus\zlib1.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Users\user\AppData\Local\Temp\kantivirus\InstallHelper.exe
 PE32 executable (GUI) Intel 80386, for MS Windows
 #
C:\Users\user\AppData\Local\Temp\kantivirus\ksapi.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
 #
C:\Users\user\AppData\Local\Temp\kdb_semrjgj.dll
 PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, UPX compressed
 #
C:\Windows\System32\drivers\kavbootc.sys
 PE32 executable (native) Intel 80386, for MS Windows
 #
C:\Windows\System32\drivers\kavbootc64.sys
 PE32+ executable (native) x86-64, for MS Windows
 #
C:\Windows\System32\drivers\kavbootc64_arm.sys
 PE32+ executable (native) Aarch64, for MS Windows
 #
C:\Windows\System32\drivers\kavbootc64_ev.sys
 PE32+ executable (native) x86-64, for MS Windows
 #
C:\Windows\System32\drivers\kavbootc_ev.sys
 PE32 executable (native) Intel 80386, for MS Windows
 #
C:\Windows\System32\drivers\kdhacker.sys
 PE32 executable (DLL) (native) Intel 80386, for MS Windows
 #
C:\Windows\System32\drivers\kdhacker64.sys
 PE32+ executable (DLL) (native) x86-64, for MS Windows
 #
C:\Windows\System32\drivers\kdhacker64_arm.sys
 PE32+ executable (DLL) (native) Aarch64, for MS Windows
 #
C:\Windows\System32\drivers\kdhacker64_ev.sys
 PE32+ executable (DLL) (native) x86-64, for MS Windows
 #
C:\Windows\System32\drivers\kdhacker_ev.sys
 PE32 executable (DLL) (native) Intel 80386, for MS Windows
 #
C:\Windows\System32\drivers\kisboot.sys
 PE32 executable (DLL) (native) Intel 80386, for MS Windows
 #
C:\Windows\System32\drivers\kisboot64.sys
 PE32+ executable (DLL) (native) x86-64, for MS Windows
 #
C:\Windows\System32\drivers\kiscore.sys
 PE32 executable (native) Intel 80386, for MS Windows
 #
C:\Windows\System32\drivers\kisknl.sys
 PE32+ executable (native) x86-64, for MS Windows
 #
C:\Windows\System32\drivers\kisknl64.sys
 PE32+ executable (native) x86-64, for MS Windows
 #
C:\Windows\System32\drivers\kisknl64_arm.sys
 PE32+ executable (DLL) (native) Aarch64, for MS Windows
 #
C:\Windows\System32\drivers\kisknl64_ev.sys
 PE32+ executable (native) x86-64, for MS Windows
 #
C:\Windows\System32\drivers\kisknl_ev.sys
 PE32 executable (native) Intel 80386, for MS Windows
 #
C:\Windows\System32\drivers\kisnetflt.sys
 PE32 executable (native) Intel 80386, for MS Windows
 #
C:\Windows\System32\drivers\kisnetflt64.sys
 PE32+ executable (native) x86-64, for MS Windows
 #
C:\Windows\System32\drivers\kisnetflt64_arm.sys
 PE32+ executable (DLL) (native) Aarch64, for MS Windows
 #
C:\Windows\System32\drivers\kisnetm.sys
 PE32 executable (DLL) (native) Intel 80386, for MS Windows
 #
C:\Windows\System32\drivers\kisnetm64.sys
 PE32+ executable (DLL) (native) x86-64, for MS Windows
 #
C:\Windows\System32\drivers\kisnetm64_arm.sys
 PE32+ executable (DLL) (native) Aarch64, for MS Windows
 #
C:\Windows\System32\drivers\kisnetm64_ev.sys
 PE32+ executable (DLL) (native) x86-64, for MS Windows
 #
C:\Windows\System32\drivers\kisnetm_ev.sys
 PE32 executable (DLL) (native) Intel 80386, for MS Windows
 #
C:\Windows\System32\drivers\kisnetmxp.sys
 PE32 executable (DLL) (native) Intel 80386, for MS Windows
 #
C:\Windows\System32\drivers\ksapi.sys
 PE32 executable (native) Intel 80386, for MS Windows
 #
C:\Windows\System32\drivers\ksapi64.sys
 PE32+ executable (native) x86-64, for MS Windows
 #
C:\Windows\System32\drivers\ksapi64_arm.sys
 PE32+ executable (DLL) (native) Aarch64, for MS Windows
 #
C:\Windows\System32\drivers\ksapi64_ev.sys
 PE32+ executable (native) x86-64, for MS Windows
 #
C:\Windows\System32\drivers\ksapi_ev.sys
 PE32 executable (native) Intel 80386, for MS Windows
 #
C:\Windows\System32\drivers\ksskrpr.sys
 PE32 executable (native) Intel 80386, for MS Windows
 #
C:\Windows\System32\drivers\kusbquery.sys
 PE32 executable (native) Intel 80386, for MS Windows
 #
C:\Windows\System32\drivers\kusbquery64.sys
 PE32+ executable (DLL) (native) x86-64, for MS Windows
 #
C:\Windows\System32\drivers\neorkbsep.sys
 PE32+ executable (DLL) (native) x86-64, for MS Windows
 #
C:\Windows\system32\drivers\kisknl.sys (copy)
 PE32 executable (native) Intel 80386, for MS Windows
 #
C:\Windows\system32\drivers\kisknl64.sys (copy)
 PE32+ executable (native) x86-64, for MS Windows
 #
C:\Windows\system32\drivers\ksapi.sys (copy)
 PE32 executable (native) Intel 80386, for MS Windows
 #
C:\Windows\system32\drivers\ksapi64.sys (copy)
 PE32+ executable (native) x86-64, for MS Windows
 #
c:\KDubaSoftDownloads\ZhiZhuZhiPai0529.exe (copy)
 PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
 #