fscan/plugins/local/avdetect/auto.json

{
    "ALYac": {
        "processes": [
            "aylaunch.exe",
            "ayupdate2.exe",
            "AYRTSrv.exe",
            "AYAgent.exe"
        ],
        "url": "https://en.estsecurity.com/"
    },
    "AVG": {
        "processes": [
            "AVGSvc.exe",
            "AVGUI.exe",
            "avgwdsvc.exe",
            "avg.exe",
            "avgaurd.exe",
            "avgemc.exe",
            "avgrsx.exe",
            "avgserv.exe",
            "avgw.exe"
        ],
        "url": "https://www.avg.com/"
    },
    "Acronis": {
        "processes": [
            "arsm.exe",
            "acronis_license_service.exe"
        ],
        "url": "https://www.acronis.com/"
    },
    "Ad-Aware": {
        "processes": [
            "AdAwareService.exe",
            "Ad-Aware.exe",
            "AdAware.exe"
        ],
        "url": "https://www.adaware.com/"
    },
    "AhnLab-V3": {
        "processes": [
            "patray.exe",
            "V3Svc.exe"
        ],
        "url": "https://global.ahnlab.com/site/main.do"
    },
    "Arcabit": {
        "processes": [
            "arcavir.exe",
            "arcadc.exe",
            "ArcaVirMaster.exe",
            "ArcaMainSV.exe",
            "ArcaTasksService.exe"
        ],
        "url": "https://www.arcabit.pl"
    },
    "Avast": {
        "processes": [
            "ashDisp.exe",
            "AvastUI.exe",
            "AvastSvc.exe",
            "AvastBrowser.exe",
            "AfwServ.exe"
        ],
        "url": "https://www.avast.com"
    },
    "Avira AntiVirus(小红伞)": {
        "processes": [
            "avcenter.exe",
            "avguard.exe",
            "avgnt.exe",
            "sched.exe"
        ],
        "url": "https://www.avira.com/"
    },
    "Baidu AntiVirus": {
        "processes": [
            "BaiduSdSvc.exe",
            "BaiduSdTray.exe",
            "BaiduSd.exe",
            "bddownloader.exe",
            "baiduansvx.exe"
        ],
        "url": "https://anquan.baidu.com/"
    },
    "BitDefender": {
        "processes": [
            "Bdagent.exe",
            "BitDefenderCom.exe",
            "vsserv.exe",
            "bdredline.exe",
            "secenter.exe",
            "bdservicehost.exe",
            "BITDEFENDER.exe"
        ],
        "url": "http://www.bitdefender.com/"
    },
    "Bkav": {
        "processes": [
            "BKavService.exe",
            "Bka.exe",
            "BkavUtil.exe",
            "BLuPro.exe"
        ],
        "url": "https://www.bkav.com/"
    },
    "CAT-QuickHeal": {
        "processes": [
            "QUHLPSVC.exe",
            "onlinent.exe",
            "sapissvc.exe",
            "scanwscs.exe"
        ],
        "url": "https://www.quickheal.com/"
    },
    "CMC": {
        "processes": [
            "CMCTrayIcon.exe"
        ],
        "url": "https://cmccybersecurity.com/"
    },
    "ClamAV": {
        "processes": [
            "freshclam.exe"
        ],
        "url": "https://www.clamav.net"
    },
    "Comodo": {
        "processes": [
            "cpf.exe",
            "cavwp.exe",
            "ccavsrv.exe",
            "cmdvirth.exe"
        ],
        "url": "https://www.comodo.com"
    },
    "CrowdStrike Falcon(猎鹰)": {
        "processes": [
            "csfalconservice.exe",
            "CSFalconContainer.exe"
        ],
        "url": "https://www.crowdstrike.com"
    },
    "Cybereason": {
        "processes": [
            "CybereasonRansomFree.exe",
            "CybereasonRansomFreeServiceHost.exe",
            "CybereasonAV.exe"
        ],
        "url": "https://www.cybereason.com/"
    },
    "Cylance": {
        "processes": [
            "CylanceSvc.exe"
        ],
        "url": "https://www.cylance.com"
    },
    "Cyren": {
        "processes": [
            "vsedsps.exe",
            "vseamps.exe",
            "vseqrts.exe"
        ],
        "url": "http://www.cyren.com/"
    },
    "DrWeb": {
        "processes": [
            "drwebcom.exe",
            "spidernt.exe",
            "drwebscd.exe",
            "drweb32w.exe",
            "dwengine.exes"
        ],
        "url": "https://www.drweb.com/"
    },
    "Elastic Security": {
        "processes": [
            "elastic-endpoint.exe",
            "elastic-agent.exe",
            "agentbeat.exe",
            "winlogbeat.exe"
        ],
        "url": "https://www.elastic.co/endpoint-detection-response"
    },
    "ESET-NOD32": {
        "processes": [
            "egui.exe",
            "ecls.exe",
            "ekrn.exe",
            "eguiProxy.exe",
            "EShaSrv.exe"
        ],
        "url": "https://www.eset.com/us/home/antivirus/"
    },
    "Trend Micro（趋势科技）": {
        "processes": [
            "tmpfw.exe",
            "tmlisten.exe",
            "coreServiceShell.exe",
            "coreFrameworkHost.exe",
            "uiWatchDog.exe",
            "TMLISTEN.exe"
        ],
        "url": "https://www.trendmicro.com"
    },
    "Emsisoft": {
        "processes": [
            "a2guard.exe",
            "a2free.exe",
            "a2service.exe"
        ],
        "url": "https://www.emsisoft.com/"
    },
    "Endgame": {
        "processes": [
            "endgame.exe"
        ],
        "url": "https://www.endgame.com/"
    },
    "F-Prot": {
        "processes": [
            "F-PROT.exe",
            "FProtTray.exe",
            "FPAVServer.exe",
            "f-stopw.exe",
            "f-prot95.exe",
            "f-agnt95.exe"
        ],
        "url": "http://f-prot.com/"
    },
    "F-Secure": {
        "processes": [
            "f-secure.exe",
            "fssm32.exe",
            "Fsorsp64.exe",
            "fsavgui.exe",
            "fameh32.exe",
            "fch32.exe",
            "fih32.exe",
            "fnrb32.exe",
            "fsav32.exe",
            "fsma32.exe",
            "fsmb32.exe"
        ],
        "url": "https://www.f-secure.com"
    },
    "FireEye(火眼)": {
        "processes": [
            "xagtnotif.exe",
            "xagt.exe"
        ],
        "url": "https://www.fireeye.com"
    },
    "Trellix EDR(McAfee && 火眼)": {
        "processes": [
            "macmnsvc.exe",
            "macompatsvc.exe",
            "masvc.exe",
            "mcshield.exe",
            "mctray.exe",
            "mfeatp.exe",
            "mfeensppl.exe",
            "mfeesp.exe",
            "mfefw.exe",
            "mfehcs.exe",
            "mfemactl.exe",
            "mfemms.exe",
            "mfetp.exe",
            "mfevtps.exe",
            "mfewch.exe",
            "updaterui.exe"
        ],
        "url": "https://www.trellix.com"
    },
    "Fortinet（飞塔）": {
        "processes": [
            "FortiClient.exe",
            "FortiTray.exe",
            "FortiScand.exe",
            "FortiWF.exe",
            "FortiProxy.exe",
            "FortiESNAC.exe",
            "FortiSSLVPNdaemon.exe",
            "FortiTcs.exe",
            "FctSecSvr.exe"
        ],
        "url": "https://fortiguard.com/"
    },
    "GData": {
        "processes": [
            "AVK.exe",
            "avkcl.exe",
            "avkpop.exe",
            "avkservice.exe",
            "GDScan.exe",
            "AVKWCtl.exe",
            "AVKProxy.exe",
            "AVKBackupService.exe"
        ],
        "url": "https://www.gdatasoftware.com/"
    },
    "Ikarus": {
        "processes": [
            "guardxservice.exe",
            "guardxkickoff.exe"
        ],
        "url": "https://www.ikarussecurity.com/"
    },
    "Jiangmin": {
        "processes": [
            "KVFW.exe",
            "KVsrvXP.exe",
            "KVMonXP.exe",
            "KVwsc.exe"
        ],
        "url": "https://www.jiangmin.com/"
    },
    "K7AntiVirus": {
        "processes": [
            "K7TSecurity.exe",
            "K7TSMain.Exe",
            "K7TSUpdT.exe"
        ],
        "url": "http://viruslab.k7computing.com/"
    },
    "Kaspersky(卡巴斯基)": {
        "processes": [
            "avp.exe",
            "avpcc.exe",
            "avpm.exe",
            "kavpf.exe",
            "kavfs.exe",
            "klnagent.exe",
            "kavtray.exe",
            "kavfswp.exe",
            "kaspersky.exe"
        ],
        "url": "https://www.kaspersky.com"
    },
    "Max Secure Software": {
        "processes": [
            "SDSystemTray.exe",
            "MaxRCSystemTray.exe",
            "RCSystemTray.exe",
            "MaxAVPlusDM.exe",
            "LiveUpdateSD.exe"
        ],
        "url": "https://www.maxpcsecure.com/"
    },
    "Malwarebytes": {
        "processes": [
            "MBAMService.exe",
            "mbam.exe",
            "mbamtray.exe"
        ],
        "url": "https://www.malwarebytes.com/"
    },
    "McAfee(迈克菲-可能为Trellix)": {
        "processes": [
            "Mcshield.exe",
            "Tbmon.exe",
            "Frameworkservice.exe",
            "firesvc.exe",
            "firetray.exe",
            "hipsvc.exe",
            "mfevtps.exe",
            "mcafeefire.exe",
            "shstat.exe",
            "vstskmgr.exe",
            "engineserver.exe",
            "alogserv.exe",
            "avconsol.exe",
            "cmgrdian.exe",
            "cpd.exe",
            "mcmnhdlr.exe",
            "mcvsshld.exe",
            "mcvsrte.exe",
            "mghtml.exe",
            "mpfservice.exe",
            "mpfagent.exe",
            "mpftray.exe",
            "vshwin32.exe",
            "vsstat.exe",
            "guarddog.exe",
            "mfeann.exe",
            "udaterui.exe",
            "naprdmgr.exe",
            "mctray.exe",
            "fcagate.exe",
            "fcag.exe",
            "fcags.exe",
            "fcagswd.exe",
            "macompatsvc.exe",
            "masvc.exe",
            "mcamnsvc.exe",
            "mctary.exe",
            "mfecanary.exe",
            "mfeconsole.exe",
            "mfeesp.exe",
            "mfefire.exe",
            "mfefw.exe",
            "mfemms.exe",
            "mfetp.exe",
            "mfewc.exe",
            "mfewch.exe"
        ],
        "url": "https://www.mcafee.com/en-us"
    },
    "Microsoft Security Essentials": {
        "processes": [
            "MsMpEng.exe",
            "msseces.exe",
            "mssecess.exe",
            "emet_agent.exe",
            "emet_service.exe",
            "drwatson.exe",
            "MpCmdRun.exe",
            "NisSrv.exe",
            "MsSense.exe",
            "MSASCui.exe",
            "MSASCuiL.exe",
            "SecurityHealthService.exe"
        ],
        "url": "https://support.microsoft.com/en-us/help/17150/windows-7-what-is-microsoft-security-essentials"
    },
    "NANO-Antivirus": {
        "processes": [
            "nanoav.exe",
            "nanoav64.exe",
            "nanoreport.exe",
            "nanoreportc.exe",
            "nanoreportc64.exe",
            "nanorst.exe",
            "nanosvc.exe"
        ],
        "url": "https://nano-av.com/"
    },
    "Palo Alto Networks": {
        "processes": [
            "PanInstaller.exe"
        ],
        "url": "https://www.paloaltonetworks.com/"
    },
    "Panda Security": {
        "processes": [
            "remupd.exe",
            "apvxdwin.exe",
            "pavproxy.exe",
            "pavsched.exe"
        ],
        "url": "https://www.pandasecurity.com/"
    },
    "Qihoo-360": {
        "processes": [
            "360sd.exe",
            "360tray.exe",
            "ZhuDongFangYu.exe",
            "360rp.exe",
            "360rps.exe",
            "360safe.exe",
            "360safebox.exe",
            "QHActiveDefense.exe",
            "360skylarsvc.exe",
            "LiveUpdate360.exe"
        ],
        "url": "https://sd.360.cn/"
    },
    "Rising": {
        "processes": [
            "RavMonD.exe",
            "rfwmain.exe",
            "RsMgrSvc.exe",
            "RavMon.exe"
        ],
        "url": "http://antivirus.rising.com.cn/"
    },
    "SUPERAntiSpyware": {
        "processes": [
            "superantispyware.exe",
            "sascore.exe",
            "SAdBlock.exe",
            "sabsvc.exe"
        ],
        "url": "http://www.superadblocker.com/"
    },
    "SecureAge APEX": {
        "processes": [
            "UniversalAVService.exe",
            "EverythingServer.exe",
            "clamd.exe"
        ],
        "url": "https://www.secureage.com/"
    },
    "Sophos AV": {
        "processes": [
            "SavProgress.exe",
            "icmon.exe",
            "SavMain.exe",
            "SophosUI.exe",
            "SophosFS.exe",
            "SophosHealth.exe",
            "SophosSafestore64.exe",
            "SophosCleanM.exe",
            "SophosFileScanner.exe",
            "SophosNtpService.exe",
            "SophosOsquery.exe",
            "Sophos UI.exe"
        ],
        "url": "https://www.sophos.com/"
    },
    "TACHYON": {
        "processes": [],
        "url": "https://www.tachyonlab.com/en/index.html"
    },
    "Tencent": {
        "processes": [
            "QQPCRTP.exe",
            "QQPCTray.exe",
            "QQPCMgr.exe",
            "QQPCNetFlow.exe",
            "QQPCRealTimeSpeedup.exe"
        ],
        "url": "https://guanjia.qq.com"
    },
    "TotalDefense": {
        "processes": [
            "AMRT.exe",
            "SWatcherSrv.exe",
            "Prd.ManagementConsole.exe"
        ],
        "url": "https://www.totaldefense.com"
    },
    "Trapmine": {
        "processes": [
            "TrapmineEnterpriseService.exe",
            "TrapmineEnterpriseConfig.exe",
            "TrapmineDeployer.exe",
            "TrapmineUpgradeService.exe"
        ],
        "url": "https://trapmine.com/"
    },
    "TrendMicro": {
        "processes": [
            "TMBMSRV.exe",
            "ntrtscan.exe",
            "Pop3Trap.exe",
            "WebTrap.exe",
            "PccNTMon.exe"
        ],
        "url": "http://careers.trendmicro.com.cn/"
    },
    "VIPRE": {
        "processes": [
            "SBAMSvc.exe",
            "VipreEdgeProtection.exe",
            "SBAMTray.exe"
        ],
        "url": "https://www.vipre.com"
    },
    "ViRobot": {
        "processes": [
            "vrmonnt.exe",
            "vrmonsvc.exe",
            "Vrproxyd.exe"
        ],
        "url": "http://www.hauri.net/"
    },
    "Webroot": {
        "processes": [
            "npwebroot.exe",
            "WRSA.exe",
            "spysweeperui.exe"
        ],
        "url": "https://www.webroot.com/us/en"
    },
    "Yandex": {
        "processes": [
            "Yandex.exe",
            "YandexDisk.exe",
            "yandesk.exe"
        ],
        "url": "https://yandex.com/support/common/security/antiviruses-free.html"
    },
    "Zillya": {
        "processes": [
            "zillya.exe",
            "ZAVAux.exe",
            "ZAVCore.exe"
        ],
        "url": "https://zillya.com"
    },
    "ZoneAlarm": {
        "processes": [
            "vsmon.exe",
            "zapro.exe",
            "zonealarm.exe"
        ],
        "url": "https://www.zonealarm.com/"
    },
    "Zoner": {
        "processes": [
            "ZPSTray.exe"
        ],
        "url": "https://zonerantivirus.com/"
    },
    "eGambit": {
        "processes": [
            "dasc.exe",
            "memscan64.exe",
            "dastray.exe"
        ],
        "url": "https://egambit.app/en/"
    },
    "eScan": {
        "processes": [
            "consctl.exe",
            "mwaser.exe",
            "avpmapp.exe"
        ],
        "url": "https://www.escanav.com/"
    },
    "Lavasoft": {
        "processes": [
            "AAWTray.exe",
            "LavasoftTcpService.exe",
            "AdAwareTray.exe",
            "WebCompanion.exe",
            "WebCompanionInstaller.exe",
            "adawarebp.exe",
            "ad-watch.exe"
        ],
        "url": "https://www.lavasoft.com/"
    },
    "The Cleaner": {
        "processes": [
            "cleaner8.exe"
        ],
        "url": ""
    },
    "VBA32": {
        "processes": [
            "vba32lder.exe"
        ],
        "url": "http://www.anti-virus.by/en/index.shtml"
    },
    "Mongoosa": {
        "processes": [
            "MongoosaGUI.exe",
            "mongoose.exe"
        ],
        "url": "https://www.securitymongoose.com/"
    },
    "Coranti2012": {
        "processes": [
            "CorantiControlCenter32.exe"
        ],
        "url": "https://www.coranti.com"
    },
    "UnThreat": {
        "processes": [
            "UnThreat.exe",
            "utsvc.exe"
        ],
        "url": "https://softplanet.com/UnThreat-AntiVirus"
    },
    "Shield Antivirus": {
        "processes": [
            "CKSoftShiedAntivirus4.exe",
            "shieldtray.exe"
        ],
        "url": "https://shieldapps.com/supportmain/shield-antivirus-support/"
    },
    "VIRUSfighter": {
        "processes": [
            "AVWatchService.exe",
            "vfproTray.exe"
        ],
        "url": "https://www.spamfighter.com/VIRUSfighter/"
    },
    "Immunet": {
        "processes": [
            "iptray.exe"
        ],
        "url": "https://www.immunet.com/index"
    },
    "PSafe": {
        "processes": [
            "PSafeSysTray.exe",
            "PSafeCategoryFinder.exe",
            "psafesvc.exe"
        ],
        "url": "https://www.psafe.com/"
    },
    "nProtect": {
        "processes": [
            "nspupsvc.exe",
            "Npkcmsvc.exe",
            "npnj5Agent.exe"
        ],
        "url": "http://nos.nprotect.com/"
    },
    "Spyware Terminator": {
        "processes": [
            "SpywareTerminatorShield.exe",
            "SpywareTerminator.exe"
        ],
        "url": "http://www.spywareterminator.com/Default.aspx"
    },
    "Norton（赛门铁克）": {
        "processes": [
            "ccSvcHst.exe",
            "rtvscan.exe",
            "ccapp.exe",
            "NPFMntor.exe",
            "ccRegVfy.exe",
            "vptray.exe",
            "iamapp.exe",
            "nav.exe",
            "navapw32.exe",
            "navapsvc.exe",
            "nisum.exe",
            "nmain.exe",
            "nprotect.exe",
            "smcGui.exe",
            "ns.exe",
            "nortonsecurity.exe"
        ],
        "url": "https://us.norton.com/"
    },
        "Norton V25（Avast）": {
        "processes": [
            "afwServ.exe",
            "aswEngSrv.exe",
            "aswidsagent.exe",
            "AvDump.exe",
            "nllToolsSvc.exe",
            "NortonSvc.exe",
            "wsc_proxy.exe"
        ],
        "url": "https://us.norton.com/"
    },
    "Symantec（赛门铁克）": {
        "processes": [
            "ccSetMgr.exe",
            "ccapp.exe",
            "vptray.exe",
            "ccpxysvc.exe",
            "cfgwiz.exe",
            "smc.exe",
            "symproxysvc.exe",
            "vpc32.exe",
            "lsetup.exe",
            "luall.exe",
            "lucomserver.exe",
            "sbserv.exe",
            "ccEvtMgr.exe",
            "smcGui.exe",
            "snac.exe",
            "SymCorpUI.exe",
            "sepWscSvc64.exe"
        ],
        "url": "http://www.symantec.com/"
    },
    "可牛杀毒": {
        "processes": [
            "knsdtray.exe"
        ],
        "url": "https://baike.baidu.com/item/%E5%8F%AF%E7%89%9B%E5%85%8D%E8%B4%B9%E6%9D%80%E6%AF%92%E8%BD%AF%E4%BB%B6"
    },
    "流量矿石": {
        "processes": [
            "Miner.exe"
        ],
        "url": "https://jiaoyi.yunfan.com/"
    },
    "SafeDog(安全狗)": {
        "processes": [
            "safedog.exe",
            "SafeDogGuardCenter.exe",
            "SafeDogSiteIIS.exe",
            "SafeDogTray.exe",
            "SafeDogServerUI.exe",
            "SafeDogSiteApache.exe",
            "CloudHelper.exe",
            "SafeDogUpdateCenter.exe"
        ],
        "url": "http://www.safedog.cn/"
    },
    "木马克星": {
        "processes": [
            "parmor.exe",
            "Iparmor.exe"
        ],
        "url": "https://baike.baidu.com/item/%E6%9C%A8%E9%A9%AC%E5%85%8B%E6%98%9F/2979824?fr=aladdin"
    },
    "贝壳云安全": {
        "processes": [
            "beikesan.exe"
        ],
        "url": ""
    },
    "木马猎手": {
        "processes": [
            "TrojanHunter.exe"
        ],
        "url": ""
    },
    "巨盾网游安全盾": {
        "processes": [
            "GG.exe"
        ],
        "url": ""
    },
    "绿鹰安全精灵": {
        "processes": [
            "adam.exe"
        ],
        "url": "https://baike.baidu.com/item/%E7%BB%BF%E9%B9%B0%E5%AE%89%E5%85%A8%E7%B2%BE%E7%81%B5"
    },
    "超级巡警": {
        "processes": [
            "AST.exe"
        ],
        "url": ""
    },
    "墨者安全专家": {
        "processes": [
            "ananwidget.exe"
        ],
        "url": ""
    },
    "风云防火墙": {
        "processes": [
            "FYFireWall.exe"
        ],
        "url": ""
    },
    "微点主动防御": {
        "processes": [
            "MPMon.exe"
        ],
        "url": "http://www.micropoint.com.cn/"
    },
    "天网防火墙": {
        "processes": [
            "pfw.exe"
        ],
        "url": ""
    },
    "D 盾": {
        "processes": [
            "D_Safe_Manage.exe",
            "d_manage.exe"
        ],
        "url": "http://www.d99net.net/"
    },
    "云锁": {
        "processes": [
            "yunsuo_agent_service.exe",
            "yunsuo_agent_daemon.exe"
        ],
        "url": "https://www.yunsuo.com.cn/"
    },
    "护卫神": {
        "processes": [
            "HwsPanel.exe",
            "hws_ui.exe",
            "hws.exe",
            "hwsd.exe",
            "HwsHostPanel.exe",
            "HwsHostMaster.exe"
        ],
        "url": "https://www.hws.com/"
    },
    "火绒安全": {
        "processes": [
            "hipstray.exe",
            "wsctrl.exe",
            "usysdiag.exe",
            "HipsDaemon.exe",
            "HipsLog.exe",
            "HipsMain.exe",
            "wsctrlsvc.exe"
        ],
        "url": "https://www.huorong.cn/"
    },
    "网络病毒克星": {
        "processes": [
            "WEBSCANX.exe"
        ],
        "url": ""
    },
    "SPHINX防火墙": {
        "processes": [
            "SPHINX.exe"
        ],
        "url": ""
    },
    "奇安信天擎": {
        "processes": [
            "TQClient.exe",
            "TQTray.exe",
            "QaxEngManager.exe",
            "TQDefender.exe"
        ],
        "url": "https://www.qianxin.com/product/detail/pid/330"
    },
    "H+BEDV Datentechnik GmbH": {
        "processes": [
            "avwin.exe",
            "avwupsrv.exe"
        ],
        "url": "http://www.free-av.com/"
    },
    "IBM ISS Proventia": {
        "processes": [
            "blackd.exe",
            "rapapp.exe"
        ],
        "url": ""
    },
    "eEye Digital Security": {
        "processes": [
            "eeyeevnt.exe",
            "blink.exe"
        ],
        "url": ""
    },
    "TamoSoft": {
        "processes": [
            "cv.exe",
            "ent.exe"
        ],
        "url": "https://www.tamos.com/"
    },
    "Kerio Personal Firewall": {
        "processes": [
            "persfw.exe",
            "wrctrl.exe"
        ],
        "url": "http://www.kerio.com/"
    },
    "Simplysup": {
        "processes": [
            "Trjscan.exe"
        ],
        "url": "https://www.simplysup.com/"
    },
    "PC Tools AntiVirus": {
        "processes": [
            "PCTAV.exe",
            "pctsGui.exe"
        ],
        "url": "http://www.pctools.com"
    },
    "VirusBuster Professional": {
        "processes": [
            "vbcmserv.exe"
        ],
        "url": "http://www.virusbuster.hu"
    },
    "ClamWin": {
        "processes": [
            "ClamTray.exe",
            "clamscan.exe"
        ],
        "url": "http://www.clamwin.com/"
    },
    "安天智甲": {
        "processes": [
            "kxetray.exe",
            "kscan.exe",
            "AMediumManager.exe",
            "kismain.exe"
        ],
        "url": "https://antiy.cn/"
    },
    "CMC Endpoint Security": {
        "processes": [
            "CMCNECore.exe",
            "cmcepagent.exe",
            "cmccore.exe",
            "CMCLog.exe",
            "CMCFMon.exe"
        ],
        "url": "https://cmccybersecurity.com/giai-phap/"
    },
    "金山毒霸": {
        "processes": [
            "kxetray.exe",
            "kxescore.exe",
            "kupdata.exe",
            "kwsprotect64.exe",
            "kislive.exe",
            "knewvip.exe",
            "kscan.exe",
            "kxecenter.exe",
            "kxemain.exe",
            "KWatch.exe",
            "KSafeSvc.exe",
            "KSafeTray.exe"
        ],
        "url": "http://www.ijinshan.com/"
    },
    "Agnitum outpost (Outpost Firewall)": {
        "processes": [
            "outpost.exe",
            "acs.exe"
        ],
        "url": "https://agnitum-outpost-security-suite.en.softonic.com/"
    },
    "Cynet": {
        "processes": [
            "CynetLauncher.exe",
            "CynetDS.exe",
            "CynetEPS.exe",
            "CynetMS.exe",
            "CynetAR.exe",
            "CynetGW.exe",
            "CynetSD64.exe"
        ],
        "url": "https://www.cynet.com/"
    },
    "金山网盾": {
        "processes": [
            "KSWebShield.exe"
        ],
        "url": ""
    },
    "G Data安全软件客户端": {
        "processes": [
            "AVK.exe"
        ],
        "url": ""
    },
    "金山网镖": {
        "processes": [
            "kpfwtray.exe"
        ],
        "url": ""
    },
    "在扫1433": {
        "processes": [
            "1433.exe"
        ],
        "url": ""
    },
    "在爆破": {
        "processes": [
            "DUB.exe"
        ],
        "url": ""
    },
    "发现S-U": {
        "processes": [
            "ServUDaemon.exe"
        ],
        "url": ""
    },
    "百度卫士": {
        "processes": [
            "bddownloader.exe",
            "baiduSafeTray.exe"
        ],
        "url": ""
    },
    "百度卫士-主进程": {
        "processes": [
            "baiduansvx.exe"
        ],
        "url": ""
    },
    "已知杀软进程,名称暂未收录": {
        "processes": [
            "scan32.exe",
            "mcscript.exe",
            "cleanup.exe",
            "cmdagent.exe",
            "frminst.exe",
            "mcscript_inuse.exe",
            "_avp32.exe",
            "_avpcc.exe",
            "_avpm.exe",
            "aAvgApi.exe",
            "ackwin32.exe",
            "advxdwin.exe",
            "agentsvr.exe",
            "agentw.exe",
            "alertsvc.exe",
            "alevir.exe",
            "amon9x.exe",
            "anti-trojan.exe",
            "antivirus.exe",
            "ants.exe",
            "apimonitor.exe",
            "aplica32.exe",
            "arr.exe",
            "atcon.exe",
            "atguard.exe",
            "atro55en.exe",
            "atupdater.exe",
            "atwatch.exe",
            "au.exe",
            "aupdate.exe",
            "auto-protect.nav80try.exe",
            "autodown.exe",
            "autotrace.exe",
            "autoupdate.exe",
            "ave32.exe",
            "avgcc32.exe",
            "avgctrl.exe",
            "avgserv9.exe",
            "avkpop.exe",
            "avkserv.exe",
            "avkservice.exe",
            "avltmain.exe",
            "avnt.exe",
            "avp32.exe",
            "avpdos32.exe",
            "avptc32.exe",
            "avpupd.exe",
            "avsched32.exe",
            "avsynmgr.exe",
            "avwin95.exe",
            "avwinnt.exe",
            "avwupd.exe",
            "avwupd32.exe",
            "avxmonitor9x.exe",
            "avxmonitornt.exe",
            "avxquar.exe",
            "backweb.exe",
            "bargains.exe",
            "bd_professional.exe",
            "beagle.exe",
            "belt.exe",
            "bidef.exe",
            "bidserver.exe",
            "bipcp.exe",
            "bipcpevalsetup.exe",
            "bisp.exe",
            "blackice.exe",
            "blss.exe",
            "bootconf.exe",
            "bootwarn.exe",
            "borg2.exe",
            "bpc.exe",
            "brasil.exe",
            "bs120.exe",
            "bundle.exe",
            "bvt.exe",
            "cdp.exe",
            "cfd.exe",
            "cfiadmin.exe",
            "cfiaudit.exe",
            "cfinet.exe",
            "cfinet32.exe",
            "claw95.exe",
            "claw95cf.exe",
            "clean.exe",
            "cleaner.exe",
            "cleaner3.exe",
            "cleanpc.exe",
            "click.exe",
            "cmesys.exe",
            "cmon016.exe",
            "connectionmonitor.exe",
            "cpf9x206.exe",
            "cpfnt206.exe",
            "ctrl.exe",
            "cwnb181.exe",
            "cwntdwmo.exe",
            "datemanager.exe",
            "dcomx.exe",
            "defalert.exe",
            "defscangui.exe",
            "defwatch.exe",
            "deputy.exe",
            "divx.exe",
            "dllcache.exe",
            "dllreg.exe",
            "doors.exe",
            "dpf.exe",
            "dpfsetup.exe",
            "dpps2.exe",
            "drweb32.exe",
            "drwebupw.exe",
            "dssagent.exe",
            "dvp95.exe",
            "dvp95_0.exe",
            "ecengine.exe",
            "efpeadm.exe",
            "emsw.exe",
            "ent.exe",
            "esafe.exe",
            "escanhnt.exe",
            "escanv95.exe",
            "espwatch.exe",
            "ethereal.exe",
            "etrustcipe.exe",
            "evpn.exe",
            "exantivirus-cnet.exe",
            "exe.avxw.exe",
            "expert.exe",
            "explore.exe",
            "fast.exe",
            "findviru.exe",
            "firewall.exe",
            "fp-win.exe",
            "fp-win_trial.exe",
            "fprot.exe",
            "frw.exe",
            "fsaa.exe",
            "fsav.exe",
            "fsav530stbyb.exe",
            "fsav530wtbyb.exe",
            "fsav95.exe",
            "fsgk32.exe",
            "fsm32.exe",
            "gator.exe",
            "gbmenu.exe",
            "gbpoll.exe",
            "generics.exe",
            "gmt.exe",
            "guard.exe",
            "hacktracersetup.exe",
            "hbinst.exe",
            "hbsrv.exe",
            "hotactio.exe",
            "hotpatch.exe",
            "htlog.exe",
            "htpatch.exe",
            "hwpe.exe",
            "hxdl.exe",
            "hxiul.exe",
            "iamserv.exe",
            "iamstats.exe",
            "ibmasn.exe",
            "ibmavsp.exe",
            "icload95.exe",
            "icloadnt.exe",
            "icmon.exe",
            "icsupp95.exe",
            "icsuppnt.exe",
            "idle.exe",
            "iedll.exe",
            "iedriver.exe",
            "iface.exe",
            "ifw2000.exe",
            "inetlnfo.exe",
            "infus.exe",
            "infwin.exe",
            "init.exe",
            "intdel.exe",
            "intren.exe",
            "iomon98.exe",
            "istsvc.exe",
            "jammer.exe",
            "jdbgmrg.exe",
            "jedi.exe",
            "kavlite40eng.exe",
            "kavpers40eng.exe",
            "kazza.exe",
            "keenvalue.exe",
            "kerio-pf-213-en-win.exe",
            "kerio-wrl-421-en-win.exe",
            "kerio-wrp-421-en-win.exe",
            "kernel32.exe",
            "killprocesssetup161.exe",
            "launcher.exe",
            "ldnetmon.exe",
            "ldpro.exe",
            "ldpromenu.exe",
            "ldscan.exe",
            "lnetinfo.exe",
            "loader.exe",
            "localnet.exe",
            "lockdown.exe",
            "lockdown2000.exe",
            "lookout.exe",
            "lordpe.exe",
            "luau.exe",
            "luinit.exe",
            "luspt.exe",
            "mapisvc32.exe",
            "mcagent.exe",
            "mctool.exe",
            "mcupdate.exe",
            "mfin32.exe",
            "mfw2en.exe",
            "mfweng3.02d30.exe",
            "mgavrtcl.exe",
            "mgavrte.exe",
            "mgui.exe",
            "minilog.exe",
            "mmod.exe",
            "monitor.exe",
            "moolive.exe",
            "mostat.exe",
            "mrflux.exe",
            "msapp.exe",
            "msbb.exe",
            "msblast.exe",
            "mscache.exe",
            "msccn32.exe",
            "mscman.exe",
            "msconfig.exe",
            "msdm.exe",
            "msdos.exe",
            "msiexec16.exe",
            "msinfo32.exe",
            "mslaugh.exe",
            "msmgt.exe",
            "msmsgri32.exe",
            "mssmmc32.exe",
            "mssys.exe",
            "msvxd.exe",
            "mu0311ad.exe",
            "mwatch.exe",
            "n32scanw.exe",
            "navap.navapsvc.exe",
            "navdx.exe",
            "navlu32.exe",
            "navnt.exe",
            "navstub.exe",
            "navw32.exe",
            "navwnt.exe",
            "nc2000.exe",
            "ncinst4.exe",
            "ndd32.exe",
            "neomonitor.exe",
            "neowatchlog.exe",
            "netarmor.exe",
            "netd32.exe",
            "netinfo.exe",
            "netmon.exe",
            "netscanpro.exe",
            "netspyhunter-1.2.exe",
            "netstat.exe",
            "netutils.exe",
            "nisserv.exe",
            "nod32.exe",
            "normist.exe",
            "norton_internet_secu_3.0_407.exe",
            "notstart.exe",
            "npf40_tw_98_nt_me_2k.exe",
            "npfmessenger.exe",
            "npscheck.exe",
            "npssvc.exe",
            "nsched32.exe",
            "nssys32.exe",
            "nstask32.exe",
            "nsupdate.exe",
            "nt.exe",
            "ntvdm.exe",
            "ntxconfig.exe",
            "nui.exe",
            "nupgrade.exe",
            "nvarch16.exe",
            "nvc95.exe",
            "nvsvc32.exe",
            "nwinst4.exe",
            "nwservice.exe",
            "nwtool16.exe",
            "ollydbg.exe",
            "onsrvr.exe",
            "optimize.exe",
            "ostronet.exe",
            "otfix.exe",
            "outpostinstall.exe",
            "outpostproinstall.exe",
            "padmin.exe",
            "panixk.exe",
            "patch.exe",
            "pavcl.exe",
            "pavw.exe",
            "pccwin98.exe",
            "pcfwallicon.exe",
            "pcip10117_0.exe",
            "pcscan.exe",
            "pdsetup.exe",
            "periscope.exe",
            "perswf.exe",
            "pf2.exe",
            "pfwadmin.exe",
            "pgmonitr.exe",
            "pingscan.exe",
            "platin.exe",
            "poproxy.exe",
            "popscan.exe",
            "portdetective.exe",
            "portmonitor.exe",
            "powerscan.exe",
            "ppinupdt.exe",
            "pptbc.exe",
            "ppvstop.exe",
            "prizesurfer.exe",
            "prmt.exe",
            "prmvr.exe",
            "procdump.exe",
            "processmonitor.exe",
            "procexplorerv1.0.exe",
            "programauditor.exe",
            "proport.exe",
            "protectx.exe",
            "pspf.exe",
            "purge.exe",
            "qconsole.exe",
            "qserver.exe",
            "rav7.exe",
            "rav7win.exe",
            "rav8win32eng.exe",
            "ray.exe",
            "rb32.exe",
            "rcsync.exe",
            "realmon.exe",
            "reged.exe",
            "regedit.exe",
            "regedt32.exe",
            "rescue.exe",
            "rescue32.exe",
            "rrguard.exe",
            "rshell.exe",
            "rtvscn95.exe",
            "rulaunch.exe",
            "run32dll.exe",
            "rundll.exe",
            "rundll16.exe",
            "ruxdll32.exe",
            "safeweb.exe",
            "sahagent.exe",
            "save.exe",
            "savenow.exe",
            "sc.exe",
            "scam32.exe",
            "scan95.exe",
            "scanpm.exe",
            "scrscan.exe",
            "serv95.exe",
            "setup_flowprotector_us.exe",
            "setupvameeval.exe",
            "sfc.exe",
            "sgssfw32.exe",
            "sh.exe",
            "shellspyinstall.exe",
            "shn.exe",
            "showbehind.exe",
            "sms.exe",
            "smss32.exe",
            "soap.exe",
            "sofi.exe",
            "sperm.exe",
            "spf.exe",
            "spoler.exe",
            "spoolcv.exe",
            "spoolsv32.exe",
            "spyxx.exe",
            "srexe.exe",
            "srng.exe",
            "ss3edit.exe",
            "ssg_4104.exe",
            "ssgrate.exe",
            "st2.exe",
            "start.exe",
            "stcloader.exe",
            "supftrl.exe",
            "support.exe",
            "supporter5.exe",
            "svchostc.exe",
            "svchosts.exe",
            "sweep95.exe",
            "sweepnet.sweepsrv.sys.swnetsup.exe",
            "symtray.exe",
            "sysedit.exe",
            "sysupd.exe",
            "taskmg.exe",
            "taskmo.exe",
            "taumon.exe",
            "tbscan.exe",
            "tc.exe",
            "tca.exe",
            "tcm.exe",
            "tds-3.exe",
            "tds2-98.exe",
            "tds2-nt.exe",
            "teekids.exe",
            "tfak.exe",
            "tfak5.exe",
            "tgbob.exe",
            "titanin.exe",
            "titaninxp.exe",
            "tracert.exe",
            "trickler.exe",
            "trjsetup.exe",
            "trojantrap3.exe",
            "tsadbot.exe",
            "tvmd.exe",
            "tvtmd.exe",
            "undoboot.exe",
            "updat.exe",
            "update.exe",
            "upgrad.exe",
            "utpost.exe",
            "vbcons.exe",
            "vbust.exe",
            "vbwin9x.exe",
            "vbwinntw.exe",
            "vcsetup.exe",
            "vet32.exe",
            "vet95.exe",
            "vettray.exe",
            "vfsetup.exe",
            "vir-help.exe",
            "virusmdpersonalfirewall.exe",
            "vnlan300.exe",
            "vnpc3000.exe",
            "vpc42.exe",
            "vpfw30s.exe",
            "vscan40.exe",
            "vscenu6.02d30.exe",
            "vsched.exe",
            "vsecomr.exe",
            "vsisetup.exe",
            "vsmain.exe",
            "vswin9xe.exe",
            "vswinntse.exe",
            "vswinperse.exe",
            "w32dsm89.exe",
            "w9x.exe",
            "watchdog.exe",
            "webdav.exe",
            "wfindv32.exe",
            "whoswatchingme.exe",
            "wimmun32.exe",
            "win-bugsfix.exe",
            "win32.exe",
            "win32us.exe",
            "winactive.exe",
            "window.exe",
            "windows.exe",
            "wininetd.exe",
            "wininitx.exe",
            "winlogin.exe",
            "winmain.exe",
            "winnet.exe",
            "winppr32.exe",
            "winrecon.exe",
            "winservn.exe",
            "winssk32.exe",
            "winstart.exe",
            "winstart001.exe",
            "wintsk32.exe",
            "winupdate.exe",
            "wkufind.exe",
            "wnad.exe",
            "wnt.exe",
            "wradmin.exe",
            "wsbgate.exe",
            "wupdater.exe",
            "wupdt.exe",
            "wyvernworksfirewall.exe",
            "xpf202en.exe",
            "zapsetup3001.exe",
            "zatutor.exe",
            "zonalm2601.exe",
            "A2CMD.exe",
            "ADVCHK.exe",
            "AGB.exe",
            "AKRNL.exe",
            "AHPROCMONSERVER.exe",
            "AIRDEFENSE.exe",
            "ALERTSVC.exe",
            "AVIRA.exe",
            "AMON.exe",
            "TROJAN.exe",
            "AVZ.exe",
            "ANTIVIR.exe",
            "ARMOR2NET.exe",
            "ASH.exeexe.exe",
            "ASHENHCD.exe",
            "ASHMAISV.exe",
            "ASHPOPWZ.exe",
            "ASHSERV.exe",
            "ASHSIMPL.exe",
            "ASHSKPCK.exe",
            "ASHWEBSV.exe",
            "ASWUPDSV.exe",
            "ASWSCAN.exe",
            "AVCIMAN.exe",
            "AVENGINE.exe",
            "AVESVC.exe",
            "AVEVAL.exe",
            "AVEVL32.exe",
            "AVGAM.exe",
            "AVGCC.exe",
            "AVGCHSVX.exe",
            "AVGCSRVX.exe",
            "AVGNSX.exe",
            "AVGCC32.exe",
            "AVGCTRL.exe",
            "AVGFWSRV.exe",
            "AVGNTMGR.exe",
            "AVGTRAY.exe",
            "AVGUPSVC.exe",
            "AVINITNT.exe",
            "AVKSERV.exe",
            "AVKSERVICE.exe",
            "AVP32.exe",
            "AVSERVER.exe",
            "AVSCHED32.exe",
            "AVSYNMGR.exe",
            "AVWUPD32.exe",
            "AVXMONITOR.exe",
            "AVXQUAR.exe",
            "BDSWITCH.exe",
            "BLACKICE.exe",
            "CAFIX.exe",
            "CFP.exe",
            "CFPCONFIG.exe",
            "CFIAUDIT.exe",
            "CLAMWIN.exe",
            "CUREIT.exe",
            "DEFWATCH.exe",
            "DRVIRUS.exe",
            "DRWADINS.exe",
            "DRWEB.exe",
            "DEFENDERDAEMON.exe",
            "DWEBLLIO.exe",
            "DWEBIO.exe",
            "ESCANH95.exe",
            "ESCANHNT.exe",
            "EWIDOCTRL.exe",
            "EZANTIVIRUSREGISTRATIONCHECK.exe",
            "FILEMON.exe",
            "FIREWALL.exe",
            "FORTISCAN.exe",
            "FPWIN.exe",
            "FSBWSYS.exe",
            "F-SCHED.exe",
            "FSDFWD.exe",
            "FSGK32.exe",
            "FSGK32ST.exe",
            "FSGUIEXE.exe",
            "FSPEX.exe",
            "GCASDTSERV.exe",
            "GCASSERV.exe",
            "GIANTANTISPYWARE.exe",
            "GUARDGUI.exe",
            "GUARDNT.exe",
            "HREGMON.exe",
            "HRRES.exe",
            "HSOCKPE.exe",
            "HUPDATE.exe",
            "IAMSERV.exe",
            "ICLOAD95.exe",
            "ICLOADNT.exe",
            "ICMON.exe",
            "ICSSUPPNT.exe",
            "ICSUPP95.exe",
            "ICSUPPNT.exe",
            "INETUPD.exe",
            "INOCIT.exe",
            "INORPC.exe",
            "INORT.exe",
            "INOTASK.exe",
            "INOUPTNG.exe",
            "IOMON98.exe",
            "ISAFE.exe",
            "ISATRAY.exe",
            "KAV.exe",
            "KAVMM.exe",
            "KAVPFW.exe",
            "KAVSTART.exe",
            "KAVSVC.exe",
            "KAVSVCUI.exe",
            "KMAILMON.exe",
            "MAMUTU.exe",
            "MCAGENT.exe",
            "MCREGWIZ.exe",
            "MCUPDATE.exe",
            "MINILOG.exe",
            "MYAGTSVC.exe",
            "MYAGTTRY.exe",
            "NAVLU32.exe",
            "NAVW32.exe",
            "NEOWATCHLOG.exe",
            "NEOWATCHTRAY.exe",
            "NISSERV.exe",
            "NOD32.exe",
            "NORMIST.exe",
            "NOTSTART.exe",
            "NPAVTRAY.exe",
            "NPFMSG.exe",
            "NSCHED32.exe",
            "NSMDTR.exe",
            "NSSSERV.exe",
            "NSSTRAY.exe",
            "NTOS.exe",
            "NTXCONFIG.exe",
            "NUPGRADE.exe",
            "NVCOD.exe",
            "NVCTE.exe",
            "NVCUT.exe",
            "NWSERVICE.exe",
            "OFCPFWSVC.exe",
            "OPSSVC.exe",
            "OP_MON.exe",
            "PAVFIRES.exe",
            "PAVFNSVR.exe",
            "PAVKRE.exe",
            "PAVPROT.exe",
            "PAVPRSRV.exe",
            "PAVSRV51.exe",
            "PAVSS.exe",
            "PCCGUIDE.exe",
            "PCCIOMON.exe",
            "PCCPFW.exe",
            "PCCTLCOM.exe",
            "PERTSK.exe",
            "PERVAC.exe",
            "PESTPATROL.exe",
            "PNMSRV.exe",
            "PREVSRV.exe",
            "PREVX.exe",
            "PSIMSVC.exe",
            "QHONLINE.exe",
            "QHONSVC.exe",
            "QHWSCSVC.exe",
            "QHSET.exe",
            "RTVSCN95.exe",
            "SALITY.exe",
            "SAVADMINSERVICE.exe",
            "SAVSCAN.exe",
            "SCANNINGPROCESS.exe",
            "SDRA64.exe",
            "SDHELP.exe",
            "SITECLI.exe",
            "SPBBCSVC.exe",
            "SPIDERCPL.exe",
            "SPIDERML.exe",
            "SPIDERUI.exe",
            "SPYBOTSD.exe",
            "SPYXX.exe",
            "SS3EDIT.exe",
            "STOPSIGNAV.exe",
            "SWAGENT.exe",
            "SWDOCTOR.exe",
            "SWNETSUP.exe",
            "SYMLCSVC.exe",
            "SYMSPORT.exe",
            "SYMWSC.exe",
            "SYNMGR.exe",
            "TAUMON.exe",
            "TMNTSRV.exe",
            "TMPROXY.exe",
            "TNBUTIL.exe",
            "VBA32ECM.exe",
            "VBA32IFS.exe",
            "VBA32LDR.exe",
            "VBA32PP3.exe",
            "VBSNTW.exe",
            "VCRMON.exe",
            "VRFWSVC.exe",
            "VRRW32.exe",
            "VSECOMR.exe",
            "WATCHDOG.exe",
            "WINSSNOTIFY.exe",
            "XCOMMSVR.exe",
            "ZLCLIENT.exe",
            "navap.exe",
            "sahagent.exe"
        ],
        "url": ""
    },
    "G Data文件系统实时监控": {
        "processes": [
            "avkwctl9.exe",
            "AVKWCTL.exe"
        ],
        "url": ""
    },
    "Sophos Anti-Virus": {
        "processes": [
            "SAVMAIN.exe"
        ],
        "url": ""
    },
    "360保险箱": {
        "processes": [
            "safeboxTray.exe",
            "360safebox.exe"
        ],
        "url": ""
    },
    "G Data扫描器": {
        "processes": [
            "GDScan.exe"
        ],
        "url": ""
    },
    "G Data杀毒代理": {
        "processes": [
            "AVKProxy.exe"
        ],
        "url": ""
    },
    "G Data备份服务": {
        "processes": [
            "AVKBackupService.exe"
        ],
        "url": ""
    },
    "亚信安全服务器深度安全防护系统": {
        "processes": [
            "Notifier.exe"
        ],
        "url": ""
    },
    "阿里云盾": {
        "processes": [
            "AliYunDun.exe",
            "AliYunDunUpdate.exe",
            "aliyun_assist_service.exe",
            "/usr/local/aegis/aegis_client/"
        ],
        "url": ""
    },
    "腾讯云安全": {
        "processes": [
            "BaradAgent.exe",
            "sgagent.exe",
            "YDService.exe",
            "YDLive.exe",
            "YDEdr.exe"
        ],
        "url": ""
    },
    "360主机卫士Web": {
        "processes": [
            "360WebSafe.exe",
            "QHSrv.exe",
            "QHWebshellGuard.exe"
        ],
        "url": ""
    },
    "网防G01": {
        "processes": [
            "gov_defence_service.exe",
            "gov_defence_daemon.exe"
        ],
        "url": ""
    },
    "云锁客户端": {
        "processes": [
            "PC.exe"
        ],
        "url": ""
    },
    "Symantec Shared诺顿邮件防火墙软件": {
        "processes": [
            "SNDSrvc.exe"
        ],
        "url": ""
    },
    "U盘杀毒专家": {
        "processes": [
            "USBKiller.exe"
        ],
        "url": ""
    },
    "天擎EDRAgent": {
        "processes": [
            "360EntClient.exe"
        ],
        "url": ""
    },
    "360(奇安信)天擎": {
        "processes": [
            "360EntMisc.exe"
        ],
        "url": ""
    },
    "阿里云-云盾": {
        "processes": [
            "alisecguard.exe"
        ],
        "url": ""
    },
    "Sophos AutoUpdate Service": {
        "processes": [
            "ALsvc.exe"
        ],
        "url": ""
    },
    "阿里云监控": {
        "processes": [
            "CmsGoAgent.windows-amd64."
        ],
        "url": ""
    },
    "深信服EDRAgent": {
        "processes": [
            "edr_agent.exe",
            "edr_monitor.exe",
            "edr_sec_plan.exe"
        ],
        "url": "https://edr.sangfor.com.cn"
    },
    "戎码翼龙 NG-EDR": {
        "processes": [
            "rm_service.exe",
            "rm_live.exe",
            "rm_tray.exe",
            "rm_hips.exe"
        ],
        "url": "https://www.rongma.com"
    },
    "启明星辰天珣EDRAgent": {
        "processes": [
            "ESAV.exe",
            "ESCCControl.exe",
            "ESCC.exe",
            "ESCCIndex.exe"
        ],
        "url": ""
    },
    "蓝鲸Agent": {
        "processes": [
            "gse_win_agent.exe",
            "gse_win_daemon.exe"
        ],
        "url": ""
    },
    "联想电脑管家": {
        "processes": [
            "LAVService.exe"
        ],
        "url": ""
    },
    "Sophos MCS Agent": {
        "processes": [
            "McsAgent.exe"
        ],
        "url": ""
    },
    "Sophos MCS Client": {
        "processes": [
            "McsClient.exe"
        ],
        "url": ""
    },
    "360TotalSecurity(360国际版)": {
        "processes": [
            "QHSafeMain.exe",
            "QHSafeTray.exe",
            "QHWatchdog.exe",
            "QHActiveDefense.exe"
        ],
        "url": ""
    },
    "Sophos Device Control Service": {
        "processes": [
            "sdcservice.exe"
        ],
        "url": ""
    },
    "Sophos Endpoint Defense Service": {
        "processes": [
            "SEDService.exe"
        ],
        "url": ""
    },
    "Windows Defender SmartScreen": {
        "processes": [
            "smartscreen.exe"
        ],
        "url": "https://learn.microsoft.com/zh-cn/windows/security/operating-system-security/virus-and-threat-protection/microsoft-defender-smartscreen/"
    },
    "Sophos Clean Service": {
        "processes": [
            "SophosCleanM64.exe"
        ],
        "url": ""
    },
    "Sophos FIM": {
        "processes": [
            "SophosFIMService.exe"
        ],
        "url": ""
    },
    "Sophos System Protection Service": {
        "processes": [
            "SSPService.exe"
        ],
        "url": ""
    },
    "Sophos Web Control Service": {
        "processes": [
            "swc_service.exe"
        ],
        "url": ""
    },
    "天眼云镜": {
        "processes": [
            "TitanAgent.exe",
            "TitanMonitor.exe"
        ],
        "url": ""
    },
    "天融信终端防御": {
        "processes": [
            "TopsecMain.exe",
            "TopsecTray.exe"
        ],
        "url": ""
    },
    "360杀毒-网盾": {
        "processes": [
            "wdswfsafe.exe"
        ],
        "url": ""
    },
    "智量安全": {
        "processes": [
            "WiseVector.exe",
            "WiseVectorSvc.exe"
        ],
        "url": ""
    },
    "天擎": {
        "processes": [
            "QAXEntClient.exe",
            "QAXTray.exe"
        ],
        "url": ""
    },
    "安恒主机卫士": {
        "processes": [
            "AgentService.exe",
            "ProtectMain.exe"
        ],
        "url": ""
    },
    "亚信DS服务端": {
        "processes": [
            "Deep Security Manager.exe"
        ],
        "url": "https://www.asiainfo-sec.com/product/detail-148.html"
    },
    "亚信DS客户端": {
        "processes": [
            "dsa.exe",
            "UniAccessAgent.exe",
            "dsvp.exe"
        ],
        "url": "https://www.asiainfo-sec.com/product/detail-148.html"
    },
    "深信服EDR": {
        "processes": [
            "/sangfor/edr/agent"
        ],
        "url": "https://edr.sangfor.com.cn"
    },
    "阿里云云助手守护进程": {
        "processes": [
            "/assist-daemon/assist_daemon"
        ],
        "url": ""
    },
    "zabbix agen端": {
        "processes": [
            "zabbix_agentd"
        ],
        "url": ""
    },
    "阿里云盾升级": {
        "processes": [
            "/usr/local/aegis/aegis_update/AliYunDunUpdate"
        ],
        "url": ""
    },
    "阿里云助手": {
        "processes": [
            "/usr/local/share/aliyun-assist"
        ],
        "url": ""
    },
    "阿里系监控": {
        "processes": [
            "AliHips",
            "AliNet",
            "AliDetect",
            "AliScriptEngine"
        ],
        "url": ""
    },
    "腾讯系监控": {
        "processes": [
            "secu-tcs-agent",
            "/usr/local/qcloud/stargate/",
            "/usr/local/qcloud/monitor/",
            "/usr/local/qcloud/YunJing/"
        ],
        "url": ""
    },
    "腾讯自动化助手TAT产品": {
        "processes": [
            "/usr/local/qcloud/tat_agent/"
        ],
        "url": ""
    },
    "SentinelOne(哨兵一号)": {
        "processes": [
            "SentinelServiceHost.exe",
            "SentinelStaticEngine.exe",
            "SentinelStaticEngineScanner.exe",
            "SentinelMemoryScanner.exe",
            "SentinelAgent.exe",
            "SentinelAgentWorker.exe",
            "SentinelUI.exe"
        ],
        "url": "https://www.sentinelone.com/"
    },
    "OneSec(微步)": {
        "processes": [
            "tbAgent.exe",
            "tbAgentSrv.exe",
            "tbGuard.exe"
        ],
        "url": "https://threatbook.cn/onesec"
    },
    "亚信安全防毒墙网络版": {
        "processes": [
            "PccNT.exe",
            "PccNTMon.exe",
            "PccNTUpd.exe"
        ],
        "url": "https://asiainfo-sec.com/product/detail-122.html"
    },
    "Illumio ZTS": {
        "processes": [
            "venVtapServer.exe",
            "venPlatformHandler.exe",
            "venAgentMonitor.exe",
            "venAgentMgr.exe"
        ],
        "url": "https://www.illumio.com/"
    },
    "奇安信统一服务器安全": {
        "processes": [
            "NuboshEndpoint.exe"
        ],
        "url": "https://www.qianxin.com/product/detail/pid/394"
    },
    "IObit Malware Fighter": {
        "processes": [
        "IMF.exe",
        "IMFCore.exe",
        "IMFsrv.exe",
        "IMFSrvWsc.exe"
        ],
        "url":"https://www.iobit.com/en/malware-fighter.php"
    } 
}