Å@ˆæ! “_ЛŒjÂý*[[10.1,3956,"WmiPrvSE.exe",["C:\\WINDOWS\\system32\\wbem\\wmiprvse.exe"],"NT AUTHORITY\\NETWORK SERVICE","2026-09-16 08:41:20"],[2.23,16204,"LdTermPlug.exe",["\"C:\\Inetpub\\ftproot\\Tipray\\LdTerm\\LdTermPlug.exe\" "],"NT AUTHORITY\\SYSTEM","2026-09-16 08:41:25"],[1.79,20208,"DingTalk.exe",["\"C:\\Program Files (x86)\\DingDing\\main\\current\\DingTalk.exe\" "],"DESKTOP-BJ06D6I\\Administrator","2026-09-28 09:58:51"],[1.62,4736,"LdTermDaemon.exe",["C:\\Inetpub\\ftproot\\Tipray\\LdTerm\\LdTermDaemon.exe"],"NT AUTHORITY\\SYSTEM","2026-09-16 02:33:01"],[1.09,77184,"chrome.exe",["\"C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe\" --type=utility --utility-sub-type=audio.mojom.Audio ´`eå ·ghtAPI --js-flags=--max-old-space-size=16284 --disable-blink-features=FontMatchingCTMigration,StandardizedBrowserZoom, --video-capture-use-gpu-memory-buffer --lang=zh-CN --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --time-ticks-at-unix-epoch=-1789497163912992 --launch-time-ticks=562167107696 --field-trial-handle=2528,i,9189204777181228617,16993023142192391598,262144 --enable-features=DocumentPolicyIncludeJSCallStacksInCrashReports,EarlyEstablishGpuChannel,EnableTransparentHwndEnlargement,EstablishGpuChannelAsync,PdfUseShowSaveFilePicker --disable-features=CalculateNativeWinOcclusion,LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708993808206286 --enable-logging=handle --log-file=4720 --mojo-platform-channel-handle=4716 --vscode-window-config=vscode:8bff42fc-7ed3-4735-8a67-f5d247f721da /prefetch:1"],"DESKTOP-BJ06D6I\\Administrator","2026-09-22 14:42:11"],[432730112,1500,"Weixin.exe",["\"C:\\Program Files\\Tencent\\WeChat\\Weixin\\Weixin.exe\" "],"DESKTOP-BJ06D6I\\Administrator","2026-09-16 08:53:29"],[354865152,23224,"QQ.exe",["\"C:\\Program Files\\Tencent\\QQNT\\QQ.exe\" /background"],"DESKTOP-BJ06D6I\\Administrator","2026-09-16 08:41:58"]][[16978636,8762882,8215754,5560,"btPanel.exe",["D:\\BtSoft\\panel\\btPanel.exe","--task"],"NT AUTHORITY\\SYSTEM","2026-09-16 02:33:01"],[957885,953710,4175,83832,"WorkBuddy.exe",["\"E:\\HRSoftstore\\Install\\WorkBuddy\\WorkBuddy.exe\""],"DESKTOP-BJ06D6I\\Administrator","2026-10-02 09:21:35"],[175214,0,175214,151164,"esrv_svc.exe",["\"C:\\Program Files\\Intel\\SUR\\QUEENCREEK\\x64\\esrv_svc.exe\" \"--AUTO_START\" \"--start\" \"--start_options_registry_key\" \"HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\services\\ESRV_SVC_QUEENCREEK\\_start\""],"NT AUTHORITY\\SYSTEM","2026-10-05 01:41:27"],[99177,97943,1234,99600,"WorkBuddy.exe",["\"E:\\HRSoftstore\\Install\\WorkBuddy\\WorkBuddy.exe\" --type=renderer --user-data-dir=\"C:\\Users\\Administrator\\.workbuddy\\app\" --standard-schemes=wb-cover,local-file,vscode-file,wb-extension --secure-schemes=wb-cover,local-file,vscode-file,wb-extension --cors-schemes=vscode-file,wb-extension --fetch-schemes=wb-cover,local-file,vscode-file,wb-extension --streaming-schemes=local-file --app-user-model-id=WorkBuddy.WorkBuddy --app-path=\"E:\\HRSoftstore\\Install\\WorkBuddy\\resources\\app.asar\" --enable-sandbox --no-sandbox --video-capture-use-gpu-memory-buffer --lang=zh-CN --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --time-ticks-at-unix-epoch=-1789497155770518 --launch-time-ticks=1406986007873 --field-trial-handle=2496,i,8632763408768387831,4284549467525720602,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:1"],"DESKTOP-BJ06D6I\\Administrator","2026-10-02 09:22:21"],[83244,26123,57121,3440,"svchost.exe",["C:\\WINDOWS\\System32\\svchost.exe","-k","LocalServiceNetworkRestricted","-p","-s","EventLog"],"NT AUTHORITY\\LOCAL SERVICE","2026-09-16 02:33:01"]][[10.35,12,9,43085824,3956,"WmiPrvSE.exe",["C:\\WINDOWS\\system32\\wbem\\wmiprvse.exe"],"NT AUTHORITY\\NETWORK SERVICE","2026-09-16 08:41:20"],[2.23,949,182,36958208,16204,"LdTermPlug.exe",["\"C:\\Inetpub\\ftproot\\Tipray\\LdTerm\\LdTermPlug.exe\" "],"NT AUTHORITY\\SYSTEM","2026-09-16 08:41:25"],[1.75,357,22619,271601664,20208,"DingTalk.exe",["\"C:\\Program Files (x86)\\DingDing\\main\\current\\DingTalk.exe\" "],"DESKTOP-BJ06D6I\\Administrator","2026-09-28 09:58:51"],[1.71,7338160,6879859,47124480,5560,"btPanel.exe",["D:\\BtSoft\\panel\\btPanel.exe","--task"],"NT AUTHORITY\\SYSTEM","2026-09-16 02:33:01"],[1.53,10335,1212,68800512,4736,"LdTermDaemon.exe",["C:\\Inetpub\\ftproot\\Tipray\\LdTerm\\LdTermDaemon.exe"],"NT AUTHORITY\\SYSTEM","2026-09-16 02:33:01"]][]`eê« ¸ ee¿ˆæ" “]¿=ŸŒ jÂý¦[[10.3,3956,"WmiPrvSE.exe",["C:\\WINDOWS\\system32\\wbem\\wmiprvse.exe"],"NT AUTHORITY\\NETWORK SERVICE","2026-09-16 08:41:20"],[2.2,16204,"LdTermPlug.exe",["\"C:\\Inetpub\\ftproot\\Tipray\\LdTerm\\LdTermPlug.exe\" "],"NT AUTHORITY\\SYSTEM","2026-09-16 08:41:25"],[1.76,20208,"DingTalk.exe",["\"C:\\Program Files (x86)\\DingDing\\main\\current\\DingTalk.exe\" "],"DESKTOP-BJ06D6I\\Administrator","2026-09-28 09:58:51"],[1.47,4736,"LdTermDaemon.exe",["C:\\Inetpub\\ftproot\\Tipray\\LdTerm\\LdTermDaemon.exe"],"NT AUTHORITY\\SYSTEM","2026-09-16 02:33:01"],[1.07,77184,"chrome.exe",["\"C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe\" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=zh-CN --service-sandbox-type=audio --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --metrics-shmem-handle=5868,i,10132766662410236232,1402013931727900723,524288 --field-trial-handle=3028,i,12366255437223398745,2049664883967120763,262144 --variations-seed-version=20260916-170059.212000-production --pseudonymization-salt-handle=3004,i,12418537443655790155,14046861235645249099,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=8128 /prefetch:12"],"DESKTOP-BJ06D6I\\Administrator","2026-09-17 22:45:48"]][[1482166272,65328,"Doubao.exe",["\"C:\\Users\\Administrator\\AppData\\Local\\Doubao\\Application\\app\\Doubao.exe\" --type=renderer --enable-exception-guard-sandbox --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=zh-CN --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --time-ticks-at-unix-epoch=-1789497157279687 --web_business=unknown --launch-time-ticks=1250683780885 --smc-metadata=2444,16357065318279549838,15981100971004486179,4194304 --metrics-shmem-handle=3552,i,8249111393260323038,1871126128971985309,2097152 --field-trial-handle=2420,i,5466598549288412480,6796829387445987329,262144 --enable-features=AllowSoftwareGLFallbackDueToCrashes,WebUICodeCache --disable-features=NonBlockingOsClipboardReads --variations-seed-version --pseudonymization-salt-handle=2448,i,12823222700742265190,17985121084738148192,4 --trace-process-track-uuid=3190708990997080739 --enable-logging=handle --log-file=3564 --janus-binding-table=1800,i,12461557838217802380,7646178056483937106,1465 --mojo-platform-channel-handle=3560 --minidump-handle=4352 --richdump-handle=4604 /prefetch:1"],"DESKTOP-BJ06D6I\\Administrator","2026-09-30 13:57:21"],[536072192,153504,"WorkBuddy.exe",["\"E:\\HRSoftstore\\Install\\WorkBuddy\\WorkBuddy.exe\" --type=gpu-process --no-sandbox --user-data-dir=\"C:\\Users\\Administrator\\.workbuddy\\app\" --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=2496,i,8632763408768387831,4284549467525720602,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=4980 /prefetch:2"],"DESKTOP-BJ06D6I\\Administrator","2026-10-05 08:58:54"],[484438016,32216,"TRAE SOLO CN.exe",["\"C:\\Users\\Administrator\\AppData\\Local\\Programs\\TRAE SOLO CN\\TRAE SOLO CN.exe\" --type=renderer --user-data-dir=\"C:\\Users\\Administrator\\AppData\\Roaming\\TRAE SOLO CN\" --aha-log-session-time=20260922T144209 --standard-schemes=vscode-webview,vscode-file,solo-remote-file --enable-sandbox --secure-schemes=vscode-webview,vscode-file,solo-remote-file --cors-schemes=vscode-webview,vscode-file,solo-remote-file --fetch-schemes=vscode-webview,vscode-file,solo-remote-file --service-worker-schemes=vscode-webview --code-cache-schemes=vscode-webview,vscode-file --app-user-model-id=ByteDance.TraeSoloCN --app-path=\"C:\\Users\\Administrator\\AppData\\Local\\Programs\\TRAE SOLO CN\\resources\\app\" --enable-sandbox --enable-blink-features=Highli ·`eê„ ¹ode-webview,vscode-file,solo-remote-file --service-worker-schemes=vscode-webview --code-cache-schemes=vscode-webview,vscode-file --app-user-model-id=ByteDance.TraeSoloCN --app-path=\"C:\\Users\\Administrator\\AppData\\Local\\Programs\\TRAE SOLO CN\\resources\\app\" --enable-sandbox --enable-blink-features=HighlightAPI --js-flags=--max-old-space-size=16284 --disable-blink-features=FontMatchingCTMigration,StandardizedBrowserZoom, --video-capture-use-gpu-memory-buffer --lang=zh-CN --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --time-ticks-at-unix-epoch=-1789497163912992 --launch-time-ticks=562167107696 --field-trial-handle=2528,i,9189204777181228617,16993023142192391598,262144 --enable-features=DocumentPolicyIncludeJSCallStacksInCrashReports,EarlyEstablishGpuChannel,EnableTransparentHwndEnlargement,EstablishGpuChannelAsync,PdfUseShowSaveFilePicker --disable-features=CalculateNativeWinOcclusion,LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708993808206286 --enable-logging=handle --log-file=4720 --mojo-platform-channel-handle=4716 --vscode-window-config=vscode:8bff42fc-7ed3-4735-8a67-f5d247f721da /prefetch:1"],"DESKTOP-BJ06D6I\\Administrator","2026-09-22 14:42:11"],[433893376,1500,"Weixin.exe",["\"C:\\Program Files\\Tencent\\WeChat\\Weixin\\Weixin.exe\" "],"DESKTOP-BJ06D6I\\Administrator","2026-09-16 08:53:29"],[354861056,23224,"QQ.exe",["\"C:\\Program Files\\Tencent\\QQNT\\QQ.exe\" /background"],"DESKTOP-BJ06D6I\\Administrator","2026-09-16 08:41:58"]][[23317699,12034457,11283242,5560,"btPanel.exe",["D:\\BtSoft\\panel\\btPanel.exe","--task"],"NT AUTHORITY\\SYSTEM","2026-09-16 02:33:01"],[136894,87306,49588,97092,"Doubao.exe",["\"C:\\Users\\Administrator\\AppData\\Local\\Doubao\\Application\\app\\Doubao.exe\" --restart-for-update --start_time=1789521614380 --restart --flag-switches-begin --flag-switches-end --update-did-success=2.29.10 --update-finished"],"DESKTOP-BJ06D6I\\Administrator","2026-09-30 13:57:19"],[57146,0,57146,3440,"svchost.exe",["C:\\WINDOWS\\System32\\svchost.exe","-k","LocalServiceNetworkRestricted","-p","-s","EventLog"],"NT AUTHORITY\\LOCAL SERVICE","2026-09-16 02:33:01"],[50141,50118,23,4712,"AlibabaProtect.exe",["\"C:\\Program Files (x86)\\AlibabaProtect\\1.0.70.3194\\AlibabaProtect.exe\""],"NT AUTHORITY\\SYSTEM","2026-09-16 02:33:01"],[47575,47549,26,42188,"DeepSeek Harness.exe",["\"C:\\Users\\Administrator\\AppData\\Local\\Programs\\DeepSeek Harness\\DeepSeek Harness.exe\" --expose-internals \"C:\\Users\\Administrator\\AppData\\Local\\Programs\\DeepSeek Harness\\resources\\app.asar\\dsh\\node_modules\\@deepseek-ai\\dsh-desktop-host\\lib\\index.js\" \"C:\\Users\\Administrator\\AppData\\Local\\Programs\\DeepSeek Harness\\resources\\app.asar\\dsh\" C:\\Users\\Administrator\\.dsh\\profiles\\desktop \"C:\\Users\\Administrator\\AppData\\Local\\Programs\\DeepSeek Harness\\resources\\runtime\\primary-runtime\" \"C:\\Users\\Administrator\\AppData\\Local\\Programs\\DeepSeek Harness\\resources\\runtime\\pnpm\\bin\\pnpm.mjs\" \"C:\\Users\\Administrator\\AppData\\Local\\Programs\\DeepSeek Harness\\resources\\runtime\\bin\""],"DESKTOP-BJ06D6I\\Administrator","2026-09-30 18:26:12"]][[10.27,0,0,43048960,3956,"WmiPrvSE.exe",["C:\\WINDOWS\\system32\\wbem\\wmiprvse.exe"],"NT AUTHORITY\\NETWORK SERVICE","2026-09-16 08:41:20"],[2.24,967,160,34426880,16204,"LdTermPlug.exe",["\"C:\\Inetpub\\ftproot\\Tipray\\LdTerm\\LdTermPlug.exe\" "],"NT AUTHORITY\\SYSTEM","2026-09-16 08:41:25"],[2.23,9501152,8907823,47316992,5560,"btPanel.exe",["D:\\BtSoft\\panel\\btPanel.exe","--task"],"NT AUTHORITY\\SYSTEM","2026-09-16 02:33:01"],[1.71,595,22781,272486400,20208,"DingTalk.exe",["\"C:\\Program Files (x86)\\DingDing\\main\\current\\DingTalk.exe\" "],"DESKTOP-BJ06D6I\\Administrator","2026-09-28 09:58:51"],[1.58,8002,1122,68923392,4736,"LdTermDaemon.exe",["C:\\Inetpub\\ftproot\\Tipray\\LdTerm\\LdTermDaemon.exe"],"NT AUTHORITY\\SYSTEM","2026-09-16 02:33:01"]][]`eêV º œœ¼Wˆæ# “a¿=šŒjÂþ[[10.35,3956,"WmiPrvSE.exe",["C:\\WINDOWS\\system32\\wbem\\wmiprvse.exe"],"NT AUTHORITY\\NETWORK SERVICE","2026-09-16 08:41:20"],[2.24,16204,"LdTermPlug.exe",["\"C:\\Inetpub\\ftproot\\Tipray\\LdTerm\\LdTermPlug.exe\" "],"NT AUTHORITY\\SYSTEM","2026-09-16 08:41:25"],[1.69,20208,"DingTalk.exe",["\"C:\\Program Files (x86)\\DingDing\\main\\current\\DingTalk.exe\" "],"DESKTOP-BJ06D6I\\Administrator","2026-09-28 09:58:51"],[1.59,4736,"LdTermDaemon.exe",["C:\\Inetpub\\ftproot\\Tipray\\LdTerm\\LdTermDaemon.exe"],"NT AUTHORITY\\SYSTEM","2026-09-16 02:33:01"],[1.07,77184,"chrome.exe",["\"C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe\" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=zh-CN --service-sandbox-type=audio --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --metrics-shmem-handle=5868,i,10132766662410236232,1402013931727900723,524288 --field-trial-handle=3028,i,12366255437223398745,2049664883967120763,262144 --variations-seed-version=20260916-170059.212000-production --pseudonymization-salt-handle=3004,i,12418537443655790155,14046861235645249099,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=8128 /prefetch:12"],"DESKTOP-BJ06D6I\\Administrator","2026-09-17 22:45:48"]][[1484378112,65328,"Doubao.exe",["\"C:\\Users\\Administrator\\AppData\\Local\\Doubao\\Application\\app\\Doubao.exe\" --type=renderer --enable-exception-guard-sandbox --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=zh-CN --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --time-ticks-at-unix-epoch=-1789497157279687 --web_business=unknown --launch-time-ticks=1250683780885 --smc-metadata=2444,16357065318279549838,15981100971004486179,4194304 --metrics-shmem-handle=3552,i,8249111393260323038,1871126128971985309,2097152 --field-trial-handle=2420,i,5466598549288412480,6796829387445987329,262144 --enable-features=AllowSoftwareGLFallbackDueToCrashes,WebUICodeCache --disable-features=NonBlockingOsClipboardReads --variations-seed-version --pseudonymization-salt-handle=2448,i,12823222700742265190,17985121084738148192,4 --trace-process-track-uuid=3190708990997080739 --enable-logging=handle --log-file=3564 --janus-binding-table=1800,i,12461557838217802380,7646178056483937106,1465 --mojo-platform-channel-handle=3560 --minidump-handle=4352 --richdump-handle=4604 /prefetch:1"],"DESKTOP-BJ06D6I\\Administrator","2026-09-30 13:57:21"],[536088576,153504,"WorkBuddy.exe",["\"E:\\HRSoftstore\\Install\\WorkBuddy\\WorkBuddy.exe\" --type=gpu-process --no-sandbox --user-data-dir=\"C:\\Users\\Administrator\\.workbuddy\\app\" --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=2496,i,8632763408768387831,4284549467525720602,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=4980 /prefetch:2"],"DESKTOP-BJ06D6I\\Administrator","2026-10-05 08:58:54"],[484601856,32216,"TRAE SOLO CN.exe",["\"C:\\Users\\Administrator\\AppData\\Local\\Programs\\TRAE SOLO CN\\TRAE SOLO CN.exe\" --type=renderer --user-data-dir=\"C:\\Users\\Administrator\\AppData\\Roaming\\TRAE SOLO CN\" --aha-log-session-time=20260922T144209 --standard-schemes=vscode-webview,vscode-file,solo-remote-file --enable-sandbox --secure-schemes=vscode-webview,vscode-file,solo-remote-file --cors-schemes=vscode-webview,vscode-file,solo-remote-file --fetch-schemes=vsc ¹`eé »solo-remote-file --fetch-schemes=vscode-webview,vscode-file,solo-remote-file --service-worker-schemes=vscode-webview --code-cache-schemes=vscode-webview,vscode-file --app-user-model-id=ByteDance.TraeSoloCN --app-path=\"C:\\Users\\Administrator\\AppData\\Local\\Programs\\TRAE SOLO CN\\resources\\app\" --enable-sandbox --enable-blink-features=HighlightAPI --js-flags=--max-old-space-size=16284 --disable-blink-features=FontMatchingCTMigration,StandardizedBrowserZoom, --video-capture-use-gpu-memory-buffer --lang=zh-CN --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --time-ticks-at-unix-epoch=-1789497163912992 --launch-time-ticks=562167107696 --field-trial-handle=2528,i,9189204777181228617,16993023142192391598,262144 --enable-features=DocumentPolicyIncludeJSCallStacksInCrashReports,EarlyEstablishGpuChannel,EnableTransparentHwndEnlargement,EstablishGpuChannelAsync,PdfUseShowSaveFilePicker --disable-features=CalculateNativeWinOcclusion,LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708993808206286 --enable-logging=handle --log-file=4720 --mojo-platform-channel-handle=4716 --vscode-window-config=vscode:8bff42fc-7ed3-4735-8a67-f5d247f721da /prefetch:1"],"DESKTOP-BJ06D6I\\Administrator","2026-09-22 14:42:11"],[435163136,1500,"Weixin.exe",["\"C:\\Program Files\\Tencent\\WeChat\\Weixin\\Weixin.exe\" "],"DESKTOP-BJ06D6I\\Administrator","2026-09-16 08:53:29"],[354865152,23224,"QQ.exe",["\"C:\\Program Files\\Tencent\\QQNT\\QQ.exe\" /background"],"DESKTOP-BJ06D6I\\Administrator","2026-09-16 08:41:58"]][[23633636,12197584,11436051,5560,"btPanel.exe",["D:\\BtSoft\\panel\\btPanel.exe","--task"],"NT AUTHORITY\\SYSTEM","2026-09-16 02:33:01"],[1423690,1423129,561,2160,"svchost.exe",["C:\\WINDOWS\\system32\\svchost.exe","-k","InvSvcGroup","-p","-s","InventorySvc"],"NT AUTHORITY\\SYSTEM","2026-09-16 02:35:13"],[159832,100091,59740,97092,"Doubao.exe",["\"C:\\Users\\Administrator\\AppData\\Local\\Doubao\\Application\\app\\Doubao.exe\" --restart-for-update --start_time=1789521614380 --restart --flag-switches-begin --flag-switches-end --update-did-success=2.29.10 --update-finished"],"DESKTOP-BJ06D6I\\Administrator","2026-09-30 13:57:19"],[89716,89661,54,42188,"DeepSeek Harness.exe",["\"C:\\Users\\Administrator\\AppData\\Local\\Programs\\DeepSeek Harness\\DeepSeek Harness.exe\" --expose-internals \"C:\\Users\\Administrator\\AppData\\Local\\Programs\\DeepSeek Harness\\resources\\app.asar\\dsh\\node_modules\\@deepseek-ai\\dsh-desktop-host\\lib\\index.js\" \"C:\\Users\\Administrator\\AppData\\Local\\Programs\\DeepSeek Harness\\resources\\app.asar\\dsh\" C:\\Users\\Administrator\\.dsh\\profiles\\desktop \"C:\\Users\\Administrator\\AppData\\Local\\Programs\\DeepSeek Harness\\resources\\runtime\\primary-runtime\" \"C:\\Users\\Administrator\\AppData\\Local\\Programs\\DeepSeek Harness\\resources\\runtime\\pnpm\\bin\\pnpm.mjs\" \"C:\\Users\\Administrator\\AppData\\Local\\Programs\\DeepSeek Harness\\resources\\runtime\\bin\""],"DESKTOP-BJ06D6I\\Administrator","2026-09-30 18:26:12"],[62620,61482,1138,4736,"LdTermDaemon.exe",["C:\\Inetpub\\ftproot\\Tipray\\LdTerm\\LdTermDaemon.exe"],"NT AUTHORITY\\SYSTEM","2026-09-16 02:33:01"]][[10.29,0,0,42790912,3956,"WmiPrvSE.exe",["C:\\WINDOWS\\system32\\wbem\\wmiprvse.exe"],"NT AUTHORITY\\NETWORK SERVICE","2026-09-16 08:41:20"],[2.26,986,236,34430976,16204,"LdTermPlug.exe",["\"C:\\Inetpub\\ftproot\\Tipray\\LdTerm\\LdTermPlug.exe\" "],"NT AUTHORITY\\SYSTEM","2026-09-16 08:41:25"],[2.25,9602533,9002848,47063040,5560,"btPanel.exe",["D:\\BtSoft\\panel\\btPanel.exe","--task"],"NT AUTHORITY\\SYSTEM","2026-09-16 02:33:01"],[1.66,358,23786,272928768,20208,"DingTalk.exe",["\"C:\\Program Files (x86)\\DingDing\\main\\current\\DingTalk.exe\" "],"DESKTOP-BJ06D6I\\Administrator","2026-09-28 09:58:51"],[1.6,49600,1076,68980736,4736,"LdTermDaemon.exe",["C:\\Inetpub\\ftproot\\Tipray\\LdTerm\\LdTermDaemon.exe"],"NT AUTHORITY\\SYSTEM","2026-09-16 02:33:01"]][]`eêŠ ¼ ÀÀ¼3ˆæ$ “a¿=™QŒjÂþc[[10.16,3956,"WmiPrvSE.exe",["C:\\WINDOWS\\system32\\wbem\\wmiprvse.exe"],"NT AUTHORITY\\NETWORK SERVICE","2026-09-16 08:41:20"],[2.21,16204,"LdTermPlug.exe",["\"C:\\Inetpub\\ftproot\\Tipray\\LdTerm\\LdTermPlug.exe\" "],"NT AUTHORITY\\SYSTEM","2026-09-16 08:41:25"],[1.67,20208,"DingTalk.exe",["\"C:\\Program Files (x86)\\DingDing\\main\\current\\DingTalk.exe\" "],"DESKTOP-BJ06D6I\\Administrator","2026-09-28 09:58:51"],[1.55,4736,"LdTermDaemon.exe",["C:\\Inetpub\\ftproot\\Tipray\\LdTerm\\LdTermDaemon.exe"],"NT AUTHORITY\\SYSTEM","2026-09-16 02:33:01"],[1.04,77184,"chrome.exe",["\"C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe\" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=zh-CN --service-sandbox-type=audio --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --metrics-shmem-handle=5868,i,10132766662410236232,1402013931727900723,524288 --field-trial-handle=3028,i,12366255437223398745,2049664883967120763,262144 --variations-seed-version=20260916-170059.212000-production --pseudonymization-salt-handle=3004,i,12418537443655790155,14046861235645249099,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=8128 /prefetch:12"],"DESKTOP-BJ06D6I\\Administrator","2026-09-17 22:45:48"]][[1493532672,65328,"Doubao.exe",["\"C:\\Users\\Administrator\\AppData\\Local\\Doubao\\Application\\app\\Doubao.exe\" --type=renderer --enable-exception-guard-sandbox --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=zh-CN --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --time-ticks-at-unix-epoch=-1789497157279687 --web_business=unknown --launch-time-ticks=1250683780885 --smc-metadata=2444,16357065318279549838,15981100971004486179,4194304 --metrics-shmem-handle=3552,i,8249111393260323038,1871126128971985309,2097152 --field-trial-handle=2420,i,5466598549288412480,6796829387445987329,262144 --enable-features=AllowSoftwareGLFallbackDueToCrashes,WebUICodeCache --disable-features=NonBlockingOsClipboardReads --variations-seed-version --pseudonymization-salt-handle=2448,i,12823222700742265190,17985121084738148192,4 --trace-process-track-uuid=3190708990997080739 --enable-logging=handle --log-file=3564 --janus-binding-table=1800,i,12461557838217802380,7646178056483937106,1465 --mojo-platform-channel-handle=3560 --minidump-handle=4352 --richdump-handle=4604 /prefetch:1"],"DESKTOP-BJ06D6I\\Administrator","2026-09-30 13:57:21"],[536088576,153504,"WorkBuddy.exe",["\"E:\\HRSoftstore\\Install\\WorkBuddy\\WorkBuddy.exe\" --type=gpu-process --no-sandbox --user-data-dir=\"C:\\Users\\Administrator\\.workbuddy\\app\" --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=2496,i,8632763408768387831,4284549467525720602,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=4980 /prefetch:2"],"DESKTOP-BJ06D6I\\Administrator","2026-10-05 08:58:54"],[483540992,32216,"TRAE SOLO CN.exe",["\"C:\\Users\\Administrator\\AppData\\Local\\Programs\\TRAE SOLO CN\\TRAE SOLO CN.exe\" --type=renderer --user-data-dir=\"C:\\Users\\Administrator\\AppData\\Roaming\\TRAE SOLO CN\" --aha-log-session-time=20260922T144209 --standard-schemes=vscode-webview,vscode-file,solo-remote-file --enable-sandbox --secure-schemes=vscode-webview,vscode-file,solo-remote-file --cors-schemes=vscode-webview,vscode-file, »`eê ½ ¾\Tipray\\LdTerm\\LdTermDaemon.exe"],"NT AUTHORITY\\SYSTEM","2026-09-16 02:33:01"],[1.05,77184,"chrome.exe",["\"C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe\" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=zh-CN --service-sandbox-type=audio --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --metrics-shmem-handle=5868,i,10132766662410236232,1402013931727900723,524288 --field-trial-handle=3028,i,12366255437223398745,2049664883967120763,262144 --variations-seed-version=20260916-170059.212000-production --pseudonymization-salt-handle=3004,i,12418537443655790155,14046861235645249099,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=8128 /prefetch:12"],"DESKTOP-BJ06D6I\\Administrator","2026-09-17 22:45:48"]][[1520713728,65328,"Doubao.exe",["\"C:\\Users\\Administrator\\AppData\\Local\\Doubao\\Application\\app\\Doubao.exe\" --type=renderer --enable-exception-guard-sandbox --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=zh-CN --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --time-ticks-at-unix-epoch=-1789497157279687 --web_business=unknown --launch-time-ticks=1250683780885 --smc-metadata=2444,16357065318279549838,15981100971004486179,4194304 --metrics-shmem-handle=3552,i,8249111393260323038,1871126128971985309,2097152 --field-trial-handle=2420,i,5466598549288412480,6796829387445987329,262144 --enable-features=AllowSoftwareGLFallbackDueToCrashes,WebUICodeCache --disable-features=NonBlockingOsClipboardReads --variations-seed-version --pseudonymization-salt-handle=2448,i,12823222700742265190,17985121084738148192,4 --trace-process-track-uuid=3190708990997080739 --enable-logging=handle --log-file=3564 --janus-binding-table=1800,i,12461557838217802380,7646178056483937106,1465 --mojo-platform-channel-handle=3560 --minidump-handle=4352 --richdump-handle=4604 /prefetch:1"],"DESKTOP-BJ06D6I\\Administrator","2026-09-30 13:57:21"],[536203264,153504,"WorkBuddy.exe",["\"E:\\HRSoftstore\\Install\\WorkBuddy\\WorkBuddy.exe\" --type=gpu-process --no-sandbox --user-data-dir=\"C:\\Users\\Administrator\\.workbuddy\\app\" --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=2496,i,8632763408768387831,4284549467525720602,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=4980 /prefetch:2"],"DESKTOP-BJ06D6I\\Administrator","2026-10-05 08:58:54"],[483274752,32216,"TRAE SOLO CN.exe",["\"C:\\Users\\Administrator\\AppData\\Local\\Programs\\TRAE SOLO CN\\TRAE SOLO CN.exe\" --type=renderer --user-data-dir=\"C:\\Users\\Administrator\\AppData\\Roaming\\TRAE SOLO CN\" --aha-log-session-time=20260922T144209 --standard-schemes=vscode-webview,vscode-file,solo-remote-file --enable-sandbox --secure-schemes=vscode-webview,vscode-file,solo-remote-file --cors-schemes=vscode-webview,vscode-file,solo-remote-file --fetch-schemes=vscode-webview,vscode-file,solo-remote-file --service-worker-schemes=vscode-webview --code-cache-schemes=vscode-webview,vscode-file --app-user-model-id=ByteDance.TraeSoloCN --app-path=\"C:\\Users\\Administrator\\AppData\\Local\\Programs\\TRAE SOLO CN\\resources\\app\" --enable-sandbox --enable-blink-features=HighlightAPI --js-flags=--max-old-space-size=16284 --disable-blink-features=FontMatchingCTMigration,StandardizedBrowserZoom, --video-capture-use-gpu-memory-buffer --lang=zh-CN --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --time-ticks-at-unix-epoch=-1789497163912992 --launch-time-ticks=562167107696 --field-trial-handle=2528,i,9189204777181228617,16993023142192391598,262144 --enable-features=DocumentPolicyIncludeJSCallStacksInCrashReports,EarlyEstablishGpuChannel,EnableTransparentHwndEnlargement,EstablishGpuChannelAsync,PdfUseShowSav`eê5 ¾eFilePicker --disable-features=CalculateNativeWinOcclusion,LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708993808206286 --enable-logging=handle --log-file=4720 --mojo-platform-channel-handle=4716 --vscode-window-config=vscode:8bff42fc-7ed3-4735-8a67-f5d247f721da /prefetch:1"],"DESKTOP-BJ06D6I\\Administrator","2026-09-22 14:42:11"],[435515392,1500,"Weixin.exe",["\"C:\\Program Files\\Tencent\\WeChat\\Weixin\\Weixin.exe\" "],"DESKTOP-BJ06D6I\\Administrator","2026-09-16 08:53:29"],[355205120,23224,"QQ.exe",["\"C:\\Program Files\\Tencent\\QQNT\\QQ.exe\" /background"],"DESKTOP-BJ06D6I\\Administrator","2026-09-16 08:41:58"]][[23319231,12035332,11283898,5560,"btPanel.exe",["D:\\BtSoft\\panel\\btPanel.exe","--task"],"NT AUTHORITY\\SYSTEM","2026-09-16 02:33:01"],[234019,0,234019,151164,"esrv_svc.exe",["\"C:\\Program Files\\Intel\\SUR\\QUEENCREEK\\x64\\esrv_svc.exe\" \"--AUTO_START\" \"--start\" \"--start_options_registry_key\" \"HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\services\\ESRV_SVC_QUEENCREEK\\_start\""],"NT AUTHORITY\\SYSTEM","2026-10-05 01:41:27"],[131191,129527,1664,99600,"WorkBuddy.exe",["\"E:\\HRSoftstore\\Install\\WorkBuddy\\WorkBuddy.exe\" --type=renderer --user-data-dir=\"C:\\Users\\Administrator\\.workbuddy\\app\" --standard-schemes=wb-cover,local-file,vscode-file,wb-extension --secure-schemes=wb-cover,local-file,vscode-file,wb-extension --cors-schemes=vscode-file,wb-extension --fetch-schemes=wb-cover,local-file,vscode-file,wb-extension --streaming-schemes=local-file --app-user-model-id=WorkBuddy.WorkBuddy --app-path=\"E:\\HRSoftstore\\Install\\WorkBuddy\\resources\\app.asar\" --enable-sandbox --no-sandbox --video-capture-use-gpu-memory-buffer --lang=zh-CN --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --time-ticks-at-unix-epoch=-1789497155770518 --launch-time-ticks=1406986007873 --field-trial-handle=2496,i,8632763408768387831,4284549467525720602,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:1"],"DESKTOP-BJ06D6I\\Administrator","2026-10-02 09:22:21"],[62531,24069,38462,97092,"Doubao.exe",["\"C:\\Users\\Administrator\\AppData\\Local\\Doubao\\Application\\app\\Doubao.exe\" --restart-for-update --start_time=1789521614380 --restart --flag-switches-begin --flag-switches-end --update-did-success=2.29.10 --update-finished"],"DESKTOP-BJ06D6I\\Administrator","2026-09-30 13:57:19"],[59043,873,58169,3440,"svchost.exe",["C:\\WINDOWS\\System32\\svchost.exe","-k","LocalServiceNetworkRestricted","-p","-s","EventLog"],"NT AUTHORITY\\LOCAL SERVICE","2026-09-16 02:33:01"]][[10.3,8,6,43724800,3956,"WmiPrvSE.exe",["C:\\WINDOWS\\system32\\wbem\\wmiprvse.exe"],"NT AUTHORITY\\NETWORK SERVICE","2026-09-16 08:41:20"],[2.27,9501844,8908340,47038464,5560,"btPanel.exe",["D:\\BtSoft\\panel\\btPanel.exe","--task"],"NT AUTHORITY\\SYSTEM","2026-09-16 02:33:01"],[2.24,967,161,37457920,16204,"LdTermPlug.exe",["\"C:\\Inetpub\\ftproot\\Tipray\\LdTerm\\LdTermPlug.exe\" "],"NT AUTHORITY\\SYSTEM","2026-09-16 08:41:25"],[1.62,571,22828,273092608,20208,"DingTalk.exe",["\"C:\\Program Files (x86)\\DingDing\\main\\current\\DingTalk.exe\" "],"DESKTOP-BJ06D6I\\Administrator","2026-09-28 09:58:51"],[1.57,35737,1232,71962624,4736,"LdTermDaemon.exe",["C:\\Inetpub\\ftproot\\Tipray\\LdTerm\\LdTermDaemon.exe"],"NT AUTHORITY\\SYSTEM","2026-09-16 02:33:01"]][]`eéœ ¿ ¬¬´Uˆæ& ‹ÀA‘ŒAjÂÿ![[10.47,3956,"WmiPrvSE.exe",["C:\\WINDOWS\\system32\\wbem\\wmiprvse.exe"],"NT AUTHORITY\\NETWORK SERVICE","2026-09-16 08:41:20"],[2.23,16204,"LdTermPlug.exe",["\"C:\\Inetpub\\ftproot\\Tipray\\LdTerm\\LdTermPlug.exe\" "],"NT AUTHORITY\\SYSTEM","2026-09-16 08:41:25"],[2,4712,"AlibabaProtect.exe",["\"C:\\Program Files (x86)\\AlibabaProtect\\1.0.70.3194\\AlibabaProtect.exe\""],"NT AUTHORITY\\SYSTEM","2026-09-16 02:33:01"],[1.78,20208,"DingTalk.exe",["\"C:\\Program Files (x86)\\DingDing\\main\\current\\DingTalk.exe\" "],"DESKTOP-BJ06D6I\\Administrator","2026-09-28 09:58:51"],[1.55,4736,"LdTermDaemon.exe",["C:\\Inetpub\\ftproot\\Tipray\\LdTerm\\LdTermDaemon.exe"],"NT AUTHORITY\\SYSTEM","2026-09-16 02:33:01"]][[1481678848,65328,"Doubao.exe",["\"C:\\Users\\Administrator\\AppData\\Local\\Doubao\\Application\\app\\Doubao.exe\" --type=renderer --enable-exception-guard-sandbox --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=zh-CN --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --time-ticks-at-unix-epoch=-1789497157279687 --web_business=unknown --launch-time-ticks=1250683780885 --smc-metadata=2444,16357065318279549838,15981100971004486179,4194304 --metrics-shmem-handle=3552,i,8249111393260323038,1871126128971985309,2097152 --field-trial-handle=2420,i,5466598549288412480,6796829387445987329,262144 --enable-features=AllowSoftwareGLFallbackDueToCrashes,WebUICodeCache --disable-features=NonBlockingOsClipboardReads --variations-seed-version --pseudonymization-salt-handle=2448,i,12823222700742265190,17985121084738148192,4 --trace-process-track-uuid=3190708990997080739 --enable-logging=handle --log-file=3564 --janus-binding-table=1800,i,12461557838217802380,7646178056483937106,1465 --mojo-platform-channel-handle=3560 --minidump-handle=4352 --richdump-handle=4604 /prefetch:1"],"DESKTOP-BJ06D6I\\Administrator","2026-09-30 13:57:21"],[739676160,72456,"DesktopSearch64.exe",["\"C:\\Program Files (x86)\\Tencent\\DeskGo\\4.2.1624.127\\DesktopSearch64.exe\" /service_start /silent_start"],"DESKTOP-BJ06D6I\\Administrator","2026-10-05 09:36:16"],[536207360,153504,"WorkBuddy.exe",["\"E:\\HRSoftstore\\Install\\WorkBuddy\\WorkBuddy.exe\" --type=gpu-process --no-sandbox --user-data-dir=\"C:\\Users\\Administrator\\.workbuddy\\app\" --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=2496,i,8632763408768387831,4284549467525720602,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features ÀÀ:ˆæ% “_¿=¡aŒjÂþÂ[[10.21,3956,"WmiPrvSE.exe",["C:\\WINDOWS\\system32\\wbem\\wmiprvse.exe"],"NT AUTHORITY\\NETWORK SERVICE","2026-09-16 08:41:20"],[2.2,16204,"LdTermPlug.exe",["\"C:\\Inetpub\\ftproot\\Tipray\\LdTerm\\LdTermPlug.exe\" "],"NT AUTHORITY\\SYSTEM","2026-09-16 08:41:25"],[1.54,20208,"DingTalk.exe",["\"C:\\Program Files (x86)\\DingDing\\main\\current\\DingTalk.exe\" "],"DESKTOP-BJ06D6I\\Administrator","2026-09-28 09:58:51"],[1.52,4736,"LdTermDaemon.exe",["C:\\Inetpub\\ftproot\ ½`eè À=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=4980 /prefetch:2"],"DESKTOP-BJ06D6I\\Administrator","2026-10-05 08:58:54"],[483655680,32216,"TRAE SOLO CN.exe",["\"C:\\Users\\Administrator\\AppData\\Local\\Programs\\TRAE SOLO CN\\TRAE SOLO CN.exe\" --type=renderer --user-data-dir=\"C:\\Users\\Administrator\\AppData\\Roaming\\TRAE SOLO CN\" --aha-log-session-time=20260922T144209 --standard-schemes=vscode-webview,vscode-file,solo-remote-file --enable-sandbox --secure-schemes=vscode-webview,vscode-file,solo-remote-file --cors-schemes=vscode-webview,vscode-file,solo-remote-file --fetch-schemes=vscode-webview,vscode-file,solo-remote-file --service-worker-schemes=vscode-webview --code-cache-schemes=vscode-webview,vscode-file --app-user-model-id=ByteDance.TraeSoloCN --app-path=\"C:\\Users\\Administrator\\AppData\\Local\\Programs\\TRAE SOLO CN\\resources\\app\" --enable-san