026-09-16 02:35:14"]][[10.35,0,0,53870592,3956,"WmiPrvSE.exe",["C:\\WINDOWS\\system32\\wbem\\wmiprvse.exe"],"NT AUTHORITY\\NETWORK SERVICE","2026-09-16 08:41:20"],[2.3,967,177,32915456,16204,"LdTermPlug.exe",["\"C:\\Inetpub\\ftproot\\Tipray\\LdTerm\\LdTermPlug.exe\" "],"NT AUTHORITY\\SYSTEM","2026-09-16 08:41:25"],[2.28,9499386,8906183,48173056,5560,"btPanel.exe",["D:\\BtSoft\\panel\\btPanel.exe","--task"],"NT AUTHORITY\\SYSTEM","2026-09-16 02:33:01"],[1.85,595,23455,337842176,20208,"DingTalk.exe",["\"C:\\Program Files (x86)\\DingDing\\main\\current\\DingTalk.exe\" "],"DESKTOP-BJ06D6I\\Administrator","2026-09-28 09:58:51"],[1.74,53543,1348,71647232,4736,"LdTermDaemon.exe",["C:\\Inetpub\\ftproot\\Tipray\\LdTerm\\LdTermDaemon.exe"],"NT AUTHORITY\\SYSTEM","2026-09-16 02:33:01"]][]`e 235645249099,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=8128 /prefetch:12"],"DESKTOP-BJ06D6I\\Administrator","2026-09-17 22:45:48"]][[1985863680,65328,"Doubao.exe",["\"C:\\Users\\Administrator\\AppData\\Local\\Doubao\\Application\\app\\Doubao.exe\" --type=renderer --enable-exception-guard-sandbox --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=zh-CN --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --time-ticks-at-unix-epoch=-1789497157279687 --web_business=unknown --launch-time-ticks=1250683780885 --smc-metadata=2444,16357065318279549838,15981100971004486179,4194304 --metrics-shmem-handle=3552,i,8249111393260323038,1871126128971985309,2097152 --field-trial-handle=2420,i,5466598549288412480,6796829387445987329,262144 --enable-features=AllowSoftwareGLFallbackDueToCrashes,WebUICodeCache --disable-features=NonBlockingOsClipboardReads --variations-seed-version --pseudonymization-salt-handle=2448,i,12823222700742265190,17985121084738148192,4 --trace-process-track-uuid=3190708990997080739 --enable-logging=handle --log-file=3564 --janus-binding-table=1800,i,12461557838217802380,7646178056483937106,1465 --mojo-platform-channel-handle=3560 --minidump-handle=4352 --richdump-handle=4604 /prefetch:1"],"DESKTOP-BJ06D6I\\Administrator","2026-09-30 13:57:21"],[621453312,1500,"Weixin.exe",["\"C:\\Program Files\\Tencent\\WeChat\\Weixin\\Weixin.exe\" "],"DESKTOP-BJ06D6I\\Administrator","2026-09-16 08:53:29"],[608260096,153504,"WorkBuddy.exe",["\"E:\\HRSoftstore\\Install\\WorkBuddy\\WorkBuddy.exe\" --type=gpu-process --no-sandbox --user-data-dir=\"C:\\Users\\Administrator\\.workbuddy\\app\" --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=2496,i,8632763408768387831,4284549467525720602,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=4980 /prefetch:2"],"DESKTOP-BJ06D6I\\Administrator","2026-10-05 08:58:54"],[495243264,32216,"TRAE SOLO CN.exe",["\"C:\\Users\\Administrator\\AppData\\Local\\Programs\\TRAE SOLO CN\\TRAE SOLO CN.exe\" --type=renderer --user-data-dir=\"C:\\Users\\Administrator\\AppData\\Roaming\\TRAE SOLO CN\" --aha-log-session-time=20260922T144209 --standard-schemes=vscode-webview,vscode-file,solo-remote-file --enable-sandbox --secure-schemes=vscode-webview,vscode-file,solo-remote-file --cors-schemes=vscode-webview,vscode-file,solo-remote-file --fetch-schemes=vscode-webview,vscode-file,solo-remote-file --service-worker-schemes=vscode-webview --code-cache-schemes=vscode-webview,vscode-file --app-user-model-id=ByteDance.TraeSoloCN --app-path=\"C:\\Users\\Administrator\\AppData\\Local\\Programs\\TRAE SOLO CN\\resources\\app\" --enable-sandbox --enable-blink-features=HighlightAPI --js-flags=--max-old-space-size=16284 --disable-blink-features=FontMatchingCTMigration,StandardizedBrowserZoom, --video-capture-use-gpu-memory-buffer --lang=zh-CN --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --time-ticks-at-unix-epoch=-1789497163912992 --launch-time-ticks=562167107696 --field-trial-handle=2528,i,9189204777181228617,16993023142192391598,262144 --enable-features=DocumentPolicyIncludeJSCallStacksInCrashReports,EarlyEstablishGpuChannel,EnableTransparentHwndEnlargement,EstablishGpuChannelAsync,PdfUseShowSaveFilePicker --disable-features=CalculateNativeWinOcclusion,LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708993808206286 --enable-logging=handle --log-file=4720 --mojo-platform-channel-handle=4716 --vscode-window-config=vscode:8bff42fc-7ed3-4735-8a67-f5d247f721da /prefetch:1"],"DESKTOP-BJ06D6I\\Administrator","2026-09-22 14:42:11"],[385605632`e ,43208,"Doubao.exe",["\"C:\\Users\\Administrator\\AppData\\Local\\Doubao\\Application\\app\\Doubao.exe\" --type=renderer --enable-exception-guard-sandbox --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=zh-CN --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=159 --time-ticks-at-unix-epoch=-1789497157279687 --web_business=unknown --launch-time-ticks=1416218043593 --smc-metadata=2444,16357065318279549838,15981100971004486179,4194304 --metrics-shmem-handle=5164,i,607842822712158004,8868027677504830130,2097152 --field-trial-handle=2420,i,5466598549288412480,6796829387445987329,262144 --enable-features=AllowSoftwareGLFallbackDueToCrashes,WebUICodeCache --disable-features=NonBlockingOsClipboardReads --variations-seed-version --pseudonymization-salt-handle=2448,i,12823222700742265190,17985121084738148192,4 --trace-process-track-uuid=3190709135301525485 --enable-logging=handle --log-file=11360 --janus-binding-table=1800,i,12461557838217802380,7646178056483937106,1465 --mojo-platform-channel-handle=14520 --minidump-handle=13676 --richdump-handle=6420 /prefetch:1"],"DESKTOP-BJ06D6I\\Administrator","2026-10-02 11:56:13"]][[23313604,12032383,11281220,5560,"btPanel.exe",["D:\\BtSoft\\panel\\btPanel.exe","--task"],"NT AUTHORITY\\SYSTEM","2026-09-16 02:33:01"],[477266,0,477266,151164,"esrv_svc.exe",["\"C:\\Program Files\\Intel\\SUR\\QUEENCREEK\\x64\\esrv_svc.exe\" \"--AUTO_START\" \"--start\" \"--start_options_registry_key\" \"HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\services\\ESRV_SVC_QUEENCREEK\\_start\""],"NT AUTHORITY\\SYSTEM","2026-10-05 01:41:27"],[83129,83039,89,99600,"WorkBuddy.exe",["\"E:\\HRSoftstore\\Install\\WorkBuddy\\WorkBuddy.exe\" --type=renderer --user-data-dir=\"C:\\Users\\Administrator\\.workbuddy\\app\" --standard-schemes=wb-cover,local-file,vscode-file,wb-extension --secure-schemes=wb-cover,local-file,vscode-file,wb-extension --cors-schemes=vscode-file,wb-extension --fetch-schemes=wb-cover,local-file,vscode-file,wb-extension --streaming-schemes=local-file --app-user-model-id=WorkBuddy.WorkBuddy --app-path=\"E:\\HRSoftstore\\Install\\WorkBuddy\\resources\\app.asar\" --enable-sandbox --no-sandbox --video-capture-use-gpu-memory-buffer --lang=zh-CN --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --time-ticks-at-unix-epoch=-1789497155770518 --launch-time-ticks=1406986007873 --field-trial-handle=2496,i,8632763408768387831,4284549467525720602,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:1"],"DESKTOP-BJ06D6I\\Administrator","2026-10-02 09:22:21"],[79453,40774,38679,97092,"Doubao.exe",["\"C:\\Users\\Administrator\\AppData\\Local\\Doubao\\Application\\app\\Doubao.exe\" --restart-for-update --start_time=1789521614380 --restart --flag-switches-begin --flag-switches-end --update-did-success=2.29.10 --update-finished"],"DESKTOP-BJ06D6I\\Administrator","2026-09-30 13:57:19"],[60788,28590,32198,1500,"Weixin.exe",["\"C:\\Program Files\\Tencent\\WeChat\\Weixin\\Weixin.exe\" "],"DESKTOP-BJ06D6I\\Administrator","2026-09-16 08:53:29"]][[10.27,0,0,53678080,3956,"WmiPrvSE.exe",["C:\\WINDOWS\\system32\\wbem\\wmiprvse.exe"],"NT AUTHORITY\\NETWORK SERVICE","2026-09-16 08:41:20"],[2.25,976,239,32915456,16204,"LdTermPlug.exe",["\"C:\\Inetpub\\ftproot\\Tipray\\LdTerm\\LdTermPlug.exe\" "],"NT AUTHORITY\\SYSTEM","2026-09-16 08:41:25"],[2.22,9499428,8906226,47861760,5560,"btPanel.exe",["D:\\BtSoft\\panel\\btPanel.exe","--task"],"NT AUTHORITY\\SYSTEM","2026-09-16 02:33:01"],[1.78,355,23851,339513344,20208,"DingTalk.exe",["\"C:\\Program Files (x86)\\DingDing\\main\\current\\DingTalk.exe\" "],"DESKTOP-BJ06D6I\\Administrator","2026-09-28 09:58:51"],[1.71,56043,1517,71925760,4736,"LdTermDaemon.exe",["C:\\Inetpub\\ftproot\\Tipray\\LdTerm\\LdTermDaemon.exe"],"NT AUTHORITY\\SYSTEM","2026-09-16 02:33:01"]][]`eh  M a' ji[[10.43,3956,"WmiPrvSE.exe",["C:\\WINDOWS\\system32\\wbem\\wmiprvse.exe"],"NT AUTHORITY\\NETWORK SERVICE","2026-09-16 08:41:20"],[2.25,16204,"LdTermPlug.exe",["\"C:\\Inetpub\\ftproot\\Tipray\\LdTerm\\LdTermPlug.exe\" "],"NT AUTHORITY\\SYSTEM","2026-09-16 08:41:25"],[1.81,20208,"DingTalk.exe",["\"C:\\Program Files (x86)\\DingDing\\main\\current\\DingTalk.exe\" "],"DESKTOP-BJ06D6I\\Administrator","2026-09-28 09:58:51"],[1.59,4736,"LdTermDaemon.exe",["C:\\Inetpub\\ftproot\\Tipray\\LdTerm\\LdTermDaemon.exe"],"NT AUTHORITY\\SYSTEM","2026-09-16 02:33:01"],[1.08,77184,"chrome.exe",["\"C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe\" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=zh-CN --service-sandbox-type=audio --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --metrics-shmem-handle=5868,i,10132766662410236232,1402013931727900723,524288 --field-trial-handle=3028,i,12366255437223398745,2049664883967120763,262144 --v I a j [[10.27,3956,"WmiPrvSE.exe",["C:\\WINDOWS\\system32\\wbem\\wmiprvse.exe"],"NT AUTHORITY\\NETWORK SERVICE","2026-09-16 08:41:20"],[2.25,16204,"LdTermPlug.exe",["\"C:\\Inetpub\\ftproot\\Tipray\\LdTerm\\LdTermPlug.exe\" "],"NT AUTHORITY\\SYSTEM","2026-09-16 08:41:25"],[1.88,20208,"DingTalk.exe",["\"C:\\Program Files (x86)\\DingDing\\main\\current\\DingTalk.exe\" "],"DESKTOP-BJ06D6I\\Administrator","2026-09-28 09:58:51"],[1.75,4736,"LdTermDaemon.exe",["C:\\Inetpub\\ftproot\\Tipray\\LdTerm\\LdTermDaemon.exe"],"NT AUTHORITY\\SYSTEM","2026-09-16 02:33:01"],[1.09,77184,"chrome.exe",["\"C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe\" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=zh-CN --service-sandbox-type=audio --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --metrics-shmem-handle=5868,i,10132766662410236232,1402013931727900723,524288 --field-trial-handle=3028,i,12366255437223398745,2049664883967120763,262144 --variations-seed-version=20260916-170059.212000-production --pseudonymization-salt-handle=3004,i,12418537443655790155,14046861 `e= ariations-seed-version=20260916-170059.212000-production --pseudonymization-salt-handle=3004,i,12418537443655790155,14046861235645249099,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=8128 /prefetch:12"],"DESKTOP-BJ06D6I\\Administrator","2026-09-17 22:45:48"]][[1779843072,65328,"Doubao.exe",["\"C:\\Users\\Administrator\\AppData\\Local\\Doubao\\Application\\app\\Doubao.exe\" --type=renderer --enable-exception-guard-sandbox --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=zh-CN --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --time-ticks-at-unix-epoch=-1789497157279687 --web_business=unknown --launch-time-ticks=1250683780885 --smc-metadata=2444,16357065318279549838,15981100971004486179,4194304 --metrics-shmem-handle=3552,i,8249111393260323038,1871126128971985309,2097152 --field-trial-handle=2420,i,5466598549288412480,6796829387445987329,262144 --enable-features=AllowSoftwareGLFallbackDueToCrashes,WebUICodeCache --disable-features=NonBlockingOsClipboardReads --variations-seed-version --pseudonymization-salt-handle=2448,i,12823222700742265190,17985121084738148192,4 --trace-process-track-uuid=3190708990997080739 --enable-logging=handle --log-file=3564 --janus-binding-table=1800,i,12461557838217802380,7646178056483937106,1465 --mojo-platform-channel-handle=3560 --minidump-handle=4352 --richdump-handle=4604 /prefetch:1"],"DESKTOP-BJ06D6I\\Administrator","2026-09-30 13:57:21"],[608276480,153504,"WorkBuddy.exe",["\"E:\\HRSoftstore\\Install\\WorkBuddy\\WorkBuddy.exe\" --type=gpu-process --no-sandbox --user-data-dir=\"C:\\Users\\Administrator\\.workbuddy\\app\" --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=2496,i,8632763408768387831,4284549467525720602,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=4980 /prefetch:2"],"DESKTOP-BJ06D6I\\Administrator","2026-10-05 08:58:54"],[555212800,1500,"Weixin.exe",["\"C:\\Program Files\\Tencent\\WeChat\\Weixin\\Weixin.exe\" "],"DESKTOP-BJ06D6I\\Administrator","2026-09-16 08:53:29"],[491708416,32216,"TRAE SOLO CN.exe",["\"C:\\Users\\Administrator\\AppData\\Local\\Programs\\TRAE SOLO CN\\TRAE SOLO CN.exe\" --type=renderer --user-data-dir=\"C:\\Users\\Administrator\\AppData\\Roaming\\TRAE SOLO CN\" --aha-log-session-time=20260922T144209 --standard-schemes=vscode-webview,vscode-file,solo-remote-file --enable-sandbox --secure-schemes=vscode-webview,vscode-file,solo-remote-file --cors-schemes=vscode-webview,vscode-file,solo-remote-file --fetch-schemes=vscode-webview,vscode-file,solo-remote-file --service-worker-schemes=vscode-webview --code-cache-schemes=vscode-webview,vscode-file --app-user-model-id=ByteDance.TraeSoloCN --app-path=\"C:\\Users\\Administrator\\AppData\\Local\\Programs\\TRAE SOLO CN\\resources\\app\" --enable-sandbox --enable-blink-features=HighlightAPI --js-flags=--max-old-space-size=16284 --disable-blink-features=FontMatchingCTMigration,StandardizedBrowserZoom, --video-capture-use-gpu-memory-buffer --lang=zh-CN --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --time-ticks-at-unix-epoch=-1789497163912992 --launch-time-ticks=562167107696 --field-trial-handle=2528,i,9189204777181228617,16993023142192391598,262144 --enable-features=DocumentPolicyIncludeJSCallStacksInCrashReports,EarlyEstablishGpuChannel,EnableTransparentHwndEnlargement,EstablishGpuChannelAsync,PdfUseShowSaveFilePicker --disable-features=CalculateNativeWinOcclusion,LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708993808206286 --enable-logging=handle --log-file=4720 --mojo-platform-channel-handle=4716 --vscode-window-config=`e vscode:8bff42fc-7ed3-4735-8a67-f5d247f721da /prefetch:1"],"DESKTOP-BJ06D6I\\Administrator","2026-09-22 14:42:11"],[371490816,43208,"Doubao.exe",["\"C:\\Users\\Administrator\\AppData\\Local\\Doubao\\Application\\app\\Doubao.exe\" --type=renderer --enable-exception-guard-sandbox --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=zh-CN --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=159 --time-ticks-at-unix-epoch=-1789497157279687 --web_business=unknown --launch-time-ticks=1416218043593 --smc-metadata=2444,16357065318279549838,15981100971004486179,4194304 --metrics-shmem-handle=5164,i,607842822712158004,8868027677504830130,2097152 --field-trial-handle=2420,i,5466598549288412480,6796829387445987329,262144 --enable-features=AllowSoftwareGLFallbackDueToCrashes,WebUICodeCache --disable-features=NonBlockingOsClipboardReads --variations-seed-version --pseudonymization-salt-handle=2448,i,12823222700742265190,17985121084738148192,4 --trace-process-track-uuid=3190709135301525485 --enable-logging=handle --log-file=11360 --janus-binding-table=1800,i,12461557838217802380,7646178056483937106,1465 --mojo-platform-channel-handle=14520 --minidump-handle=13676 --richdump-handle=6420 /prefetch:1"],"DESKTOP-BJ06D6I\\Administrator","2026-10-02 11:56:13"]][[23314972,12033150,11281821,5560,"btPanel.exe",["D:\\BtSoft\\panel\\btPanel.exe","--task"],"NT AUTHORITY\\SYSTEM","2026-09-16 02:33:01"],[131215,129534,1681,99600,"WorkBuddy.exe",["\"E:\\HRSoftstore\\Install\\WorkBuddy\\WorkBuddy.exe\" --type=renderer --user-data-dir=\"C:\\Users\\Administrator\\.workbuddy\\app\" --standard-schemes=wb-cover,local-file,vscode-file,wb-extension --secure-schemes=wb-cover,local-file,vscode-file,wb-extension --cors-schemes=vscode-file,wb-extension --fetch-schemes=wb-cover,local-file,vscode-file,wb-extension --streaming-schemes=local-file --app-user-model-id=WorkBuddy.WorkBuddy --app-path=\"E:\\HRSoftstore\\Install\\WorkBuddy\\resources\\app.asar\" --enable-sandbox --no-sandbox --video-capture-use-gpu-memory-buffer --lang=zh-CN --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --time-ticks-at-unix-epoch=-1789497155770518 --launch-time-ticks=1406986007873 --field-trial-handle=2496,i,8632763408768387831,4284549467525720602,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:1"],"DESKTOP-BJ06D6I\\Administrator","2026-10-02 09:22:21"],[60914,23506,37408,97092,"Doubao.exe",["\"C:\\Users\\Administrator\\AppData\\Local\\Doubao\\Application\\app\\Doubao.exe\" --restart-for-update --start_time=1789521614380 --restart --flag-switches-begin --flag-switches-end --update-did-success=2.29.10 --update-finished"],"DESKTOP-BJ06D6I\\Administrator","2026-09-30 13:57:19"],[58979,25258,33721,8048,"SearchIndexer.exe",["C:\\WINDOWS\\system32\\SearchIndexer.exe","/Embedding"],"NT AUTHORITY\\SYSTEM","2026-09-16 02:35:14"],[57138,873,56264,3440,"svchost.exe",["C:\\WINDOWS\\System32\\svchost.exe","-k","LocalServiceNetworkRestricted","-p","-s","EventLog"],"NT AUTHORITY\\LOCAL SERVICE","2026-09-16 02:33:01"]][[10.45,8,6,42876928,3956,"WmiPrvSE.exe",["C:\\WINDOWS\\system32\\wbem\\wmiprvse.exe"],"NT AUTHORITY\\NETWORK SERVICE","2026-09-16 08:41:20"],[2.28,9499946,8906701,47566848,5560,"btPanel.exe",["D:\\BtSoft\\panel\\btPanel.exe","--task"],"NT AUTHORITY\\SYSTEM","2026-09-16 02:33:01"],[2.28,967,164,34656256,16204,"LdTermPlug.exe",["\"C:\\Inetpub\\ftproot\\Tipray\\LdTerm\\LdTermPlug.exe\" "],"NT AUTHORITY\\SYSTEM","2026-09-16 08:41:25"],[1.88,576,22827,321662976,20208,"DingTalk.exe",["\"C:\\Program Files (x86)\\DingDing\\main\\current\\DingTalk.exe\" "],"DESKTOP-BJ06D6I\\Administrator","2026-09-28 09:58:51"],[1.66,40179,1060,69189632,4736,"LdTermDaemon.exe",["C:\\Inetpub\\ftproot\\Tipray\\LdTerm\\LdTermDaemon.exe"],"NT AUTHORITY\\SYSTEM","2026-09-16 02:33:01"]][]`e -enable-main-frame-before-activation --renderer-client-id=8 --time-ticks-at-unix-epoch=-1789497163912992 --launch-time-ticks=562167107696 --field-trial-handle=2528,i,9189204777181228617,16993023142192391598,262144 --enable-features=DocumentPolicyIncludeJSCallStacksInCrashReports,EarlyEstablishGpuChannel,EnableTransparentHwndEnlargement,EstablishGpuChannelAsync,PdfUseShowSaveFilePicker --disable-features=CalculateNativeWinOcclusion,LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708993808206286 --enable-logging=handle --log-file=4720 --mojo-platform-channel-handle=4716 --vscode-window-config=vscode:8bff42fc-7ed3-4735-8a67-f5d247f721da /prefetch:1"],"DESKTOP-BJ06D6I\\Administrator","2026-09-22 14:42:11"],[371556352,43208,"Doubao.exe",["\"C:\\Users\\Administrator\\AppData\\Local\\Doubao\\Application\\app\\Doubao.exe\" --type=renderer --enable-exception-guard-sandbox --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=zh-CN --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=159 --time-ticks-at-unix-epoch=-1789497157279687 --web_business=unknown --launch-time-ticks=1416218043593 --smc-metadata=2444,16357065318279549838,15981100971004486179,4194304 --metrics-shmem-handle=5164,i,607842822712158004,8868027677504830130,2097152 --field-trial-handle=2420,i,5466598549288412480,6796829387445987329,262144 --enable-features=AllowSoftwareGLFallbackDueToCrashes,WebUICodeCache --disable-features=NonBlockingOsClipboardReads --variations-seed-version --pseudonymization-salt-handle=2448,i,12823222700742265190,17985121084738148192,4 --trace-process-track-uuid=3190709135301525485 --enable-logging=handle --log-file=11360 --janus-binding-table=1800,i,12461557838217802380,7646178056483937106,1465 --mojo-platform-channel-handle=14520 --minidump-handle=13676 --richdump-handle=6420 /prefetch:1"],"DESKTOP-BJ06D6I\\Administrator","2026-10-02 11:56:13"]][[23315464,12033369,11282095,5560,"btPanel.exe",["D:\\BtSoft\\panel\\btPanel.exe","--task"],"NT AUTHORITY\\SYSTEM","2026-09-16 02:33:01"],[3439217,3439179,37,62232,"wps.exe",["\"C:\\Users\\Administrator\\AppData\\Local\\Kingsoft\\WPS Office\\12.1.0.26375\\office6\\wps.exe\" /prometheus /et \"C:\\Users\\Administrator\\Downloads\\广州幂方商务服务有限公司在职员工20260923 (2).xls\""],"DESKTOP-BJ06D6I\\Administrator","2026-09-23 16:06:12"],[234619,0,234619,151164,"esrv_svc.exe",["\"C:\\Program Files\\Intel\\SUR\\QUEENCREEK\\x64\\esrv_svc.exe\" \"--AUTO_START\" \"--start\" \"--start_options_registry_key\" \"HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\services\\ESRV_SVC_QUEENCREEK\\_start\""],"NT AUTHORITY\\SYSTEM","2026-10-05 01:41:27"],[128081,47154,80926,8048,"SearchIndexer.exe",["C:\\WINDOWS\\system32\\SearchIndexer.exe","/Embedding"],"NT AUTHORITY\\SYSTEM","2026-09-16 02:35:14"],[98975,43141,55833,97092,"Doubao.exe",["\"C:\\Users\\Administrator\\AppData\\Local\\Doubao\\Application\\app\\Doubao.exe\" --restart-for-update --start_time=1789521614380 --restart --flag-switches-begin --flag-switches-end --update-did-success=2.29.10 --update-finished"],"DESKTOP-BJ06D6I\\Administrator","2026-09-30 13:57:19"]][[10.32,0,0,47910912,3956,"WmiPrvSE.exe",["C:\\WINDOWS\\system32\\wbem\\wmiprvse.exe"],"NT AUTHORITY\\NETWORK SERVICE","2026-09-16 08:41:20"],[8.9,2513,2985,121896960,59416,"TRAE SOLO CN.exe",["\"C:\\Users\\Administrator\\AppData\\Local\\Programs\\TRAE SOLO CN\\TRAE SOLO CN.exe\""],"DESKTOP-BJ06D6I\\Administrator","2026-09-22 14:42:06"],[2.35,9500119,8906917,47788032,5560,"btPanel.exe",["D:\\BtSoft\\panel\\btPanel.exe","--task"],"NT AUTHORITY\\SYSTEM","2026-09-16 02:33:01"],[2.32,967,192,34656256,16204,"LdTermPlug.exe",["\"C:\\Inetpub\\ftproot\\Tipray\\LdTerm\\LdTermPlug.exe\" "],"NT AUTHORITY\\SYSTEM","2026-09-16 08:41:25"],[1.93,351,22735,323014656,20208,"DingTalk.exe",["\"C:\\Program Files (x86)\\DingDing\\main\\current\\DingTalk.exe\" "],"DESKTOP-BJ06D6I\\Administrator","2026-09-28 09:58:51"]][]`e' s I7]j[[10.17,3956,"WmiPrvSE.exe",["C:\\WINDOWS\\system32\\wbem\\wmiprvse.exe"],"NT AUTHORITY\\NETWORK SERVICE","2026-09-16 08:41:20"],[9.28,59416,"TRAE SOLO CN.exe",["\"C:\\Users\\Administrator\\AppData\\Local\\Programs\\TRAE SOLO CN\\TRAE SOLO CN.exe\""],"DESKTOP-BJ06D6I\\Administrator","2026-09-22 14:42:06"],[2.26,16204,"LdTermPlug.exe",["\"C:\\Inetpub\\ftproot\\Tipray\\LdTerm\\LdTermPlug.exe\" "],"NT AUTHORITY\\SYSTEM","2026-09-16 08:41:25"],[1.88,20208,"DingTalk.exe",["\"C:\\Program Files (x86)\\DingDing\\main\\current\\DingTalk.exe\" "],"DESKTOP-BJ06D6I\\Administrator","2026-09-28 09:58:51"],[1.75,4736,"LdTermDaemon.exe",["C:\\Inetpub\\ftproot\\Tipray\\LdTerm\\LdTermDaemon.exe"],"NT AUTHORITY\\SYSTEM","2026-09-16 02:33:01"]][[1783279616,65328,"Doubao.exe",["\"C:\\Users\\Administrator\\AppData\\Local\\Doubao\\Application\\app\\Doubao.exe\" --type=renderer --enable-exception-guard-sandbox --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=zh-CN --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --time-ticks-at-unix-epoch=-1789497157279687 --web_business=unknown --launch-time-ticks=1250683780885 --smc-metadata=2444,16357065318279549838,15981100971004486179,4194304 --metrics-shmem-handle=3552,i,8249111393260323038,1871126128971985309,2097152 --field-trial-handle=2420,i,5466598549288412480,6796829387445987329,262144 --enable-features=AllowSoftwareGLFallbackDueToCrashes,WebUICodeCache --disable-features=NonBlockingOsClipboardReads --variations-seed-version --pseudonymization-salt-handle=2448,i,12823222700742265190,17985121084738148192,4 --trace-process-track-uuid=3190708990997080739 --enable-logging=handle --log-file=3564 --janus-binding-table=1800,i,12461557838217802380,7646178056483937106,1465 --mojo-platform-channel-handle=3560 --minidump-handle=4352 --richdump-handle=4604 /prefetch:1"],"DESKTOP-BJ06D6I\\Administrator","2026-09-30 13:57:21"],[608276480,153504,"WorkBuddy.exe",["\"E:\\HRSoftstore\\Install\\WorkBuddy\\WorkBuddy.exe\" --type=gpu-process --no-sandbox --user-data-dir=\"C:\\Users\\Administrator\\.workbuddy\\app\" --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=2496,i,8632763408768387831,4284549467525720602,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=4980 /prefetch:2"],"DESKTOP-BJ06D6I\\Administrator","2026-10-05 08:58:54"],[555331584,1500,"Weixin.exe",["\"C:\\Program Files\\Tencent\\WeChat\\Weixin\\Weixin.exe\" "],"DESKTOP-BJ06D6I\\Administrator","2026-09-16 08:53:29"],[491761664,32216,"TRAE SOLO CN.exe",["\"C:\\Users\\Administrator\\AppData\\Local\\Programs\\TRAE SOLO CN\\TRAE SOLO CN.exe\" --type=renderer --user-data-dir=\"C:\\Users\\Administrator\\AppData\\Roaming\\TRAE SOLO CN\" --aha-log-session-time=20260922T144209 --standard-schemes=vscode-webview,vscode-file,solo-remote-file --enable-sandbox --secure-schemes=vscode-webview,vscode-file,solo-remote-file --cors-schemes=vscode-webview,vscode-file,solo-remote-file --fetch-schemes=vscode-webview,vscode-file,solo-remote-file --service-worker-schemes=vscode-webview --code-cache-schemes=vscode-webview,vscode-file --app-user-model-id=ByteDance.TraeSoloCN --app-path=\"C:\\Users\\Administrator\\AppData\\Local\\Programs\\TRAE SOLO CN\\resources\\app\" --enable-sandbox --enable-blink-features=HighlightAPI --js-flags=--max-old-space-size=16284 --disable-blink-features=FontMatchingCTMigration,StandardizedBrowserZoom, --video-capture-use-gpu-memory-buffer --lang=zh-CN --device-scale-factor=1 --num-raster-threads=4 - `ep Service --lang=zh-CN --service-sandbox-type=audio --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --metrics-shmem-handle=5868,i,10132766662410236232,1402013931727900723,524288 --field-trial-handle=3028,i,12366255437223398745,2049664883967120763,262144 --variations-seed-version=20260916-170059.212000-production --pseudonymization-salt-handle=3004,i,12418537443655790155,14046861235645249099,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=8128 /prefetch:12"],"DESKTOP-BJ06D6I\\Administrator","2026-09-17 22:45:48"]][[1809010688,65328,"Doubao.exe",["\"C:\\Users\\Administrator\\AppData\\Local\\Doubao\\Application\\app\\Doubao.exe\" --type=renderer --enable-exception-guard-sandbox --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=zh-CN --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --time-ticks-at-unix-epoch=-1789497157279687 --web_business=unknown --launch-time-ticks=1250683780885 --smc-metadata=2444,16357065318279549838,15981100971004486179,4194304 --metrics-shmem-handle=3552,i,8249111393260323038,1871126128971985309,2097152 --field-trial-handle=2420,i,5466598549288412480,6796829387445987329,262144 --enable-features=AllowSoftwareGLFallbackDueToCrashes,WebUICodeCache --disable-features=NonBlockingOsClipboardReads --variations-seed-version --pseudonymization-salt-handle=2448,i,12823222700742265190,17985121084738148192,4 --trace-process-track-uuid=3190708990997080739 --enable-logging=handle --log-file=3564 --janus-binding-table=1800,i,12461557838217802380,7646178056483937106,1465 --mojo-platform-channel-handle=3560 --minidump-handle=4352 --richdump-handle=4604 /prefetch:1"],"DESKTOP-BJ06D6I\\Administrator","2026-09-30 13:57:21"],[608329728,153504,"WorkBuddy.exe",["\"E:\\HRSoftstore\\Install\\WorkBuddy\\WorkBuddy.exe\" --type=gpu-process --no-sandbox --user-data-dir=\"C:\\Users\\Administrator\\.workbuddy\\app\" --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=2496,i,8632763408768387831,4284549467525720602,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=4980 /prefetch:2"],"DESKTOP-BJ06D6I\\Administrator","2026-10-05 08:58:54"],[555347968,1500,"Weixin.exe",["\"C:\\Program Files\\Tencent\\WeChat\\Weixin\\Weixin.exe\" "],"DESKTOP-BJ06D6I\\Administrator","2026-09-16 08:53:29"],[492023808,32216,"TRAE SOLO CN.exe",["\"C:\\Users\\Administrator\\AppData\\Local\\Programs\\TRAE SOLO CN\\TRAE SOLO CN.exe\" --type=renderer --user-data-dir=\"C:\\Users\\Administrator\\AppData\\Roaming\\TRAE SOLO CN\" --aha-log-session-time=20260922T144209 --standard-schemes=vscode-webview,vscode-file,solo-remote-file --enable-sandbox --secure-schemes=vscode-webview,vscode-file,solo-remote-file --cors-schemes=vscode-webview,vscode-file,solo-remote-file --fetch-schemes=vscode-webview,vscode-file,solo-remote-file --service-worker-schemes=vscode-webview --code-cache-schemes=vscode-webview,vscode-file --app-user-model-id=ByteDance.TraeSoloCN --app-path=\"C:\\Users\\Administrator\\AppData\\Local\\Programs\\TRAE SOLO CN\\resources\\app\" --enable-sandbox --enable-blink-features=HighlightAPI --js-flags=--max-old-space-size=16284 --disable-blink-features=FontMatchingCTMigration,StandardizedBrowserZoom, --video-capture-use-gpu-memory-buffer --lang=zh-CN --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --time-ticks-at-unix-epoch=-1789497163912992 --launch-time-ticks=562167107696 --field-trial-handle=2528,i,9189204777181228617,16993023142192391598,262144 --enable-features=DocumentPolicyIncludeJSCallStacksInCrashReports,EarlyEstablishGpuChannel,EnableTransparentHwndEnlargement,EstablishGpuChannelAsync,PdfUseShowSaveFilePicker --disable-features=CalculateNativeWinOcclusion,LocalNetworkAcc`e essChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708993808206286 --enable-logging=handle --log-file=4720 --mojo-platform-channel-handle=4716 --vscode-window-config=vscode:8bff42fc-7ed3-4735-8a67-f5d247f721da /prefetch:1"],"DESKTOP-BJ06D6I\\Administrator","2026-09-22 14:42:11"],[371728384,43208,"Doubao.exe",["\"C:\\Users\\Administrator\\AppData\\Local\\Doubao\\Application\\app\\Doubao.exe\" --type=renderer --enable-exception-guard-sandbox --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=zh-CN --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=159 --time-ticks-at-unix-epoch=-1789497157279687 --web_business=unknown --launch-time-ticks=1416218043593 --smc-metadata=2444,16357065318279549838,15981100971004486179,4194304 --metrics-shmem-handle=5164,i,607842822712158004,8868027677504830130,2097152 --field-trial-handle=2420,i,5466598549288412480,6796829387445987329,262144 --enable-features=AllowSoftwareGLFallbackDueToCrashes,WebUICodeCache --disable-features=NonBlockingOsClipboardReads --variations-seed-version --pseudonymization-salt-handle=2448,i,12823222700742265190,17985121084738148192,4 --trace-process-track-uuid=3190709135301525485 --enable-logging=handle --log-file=11360 --janus-binding-table=1800,i,12461557838217802380,7646178056483937106,1465 --mojo-platform-channel-handle=14520 --minidump-handle=13676 --richdump-handle=6420 /prefetch:1"],"DESKTOP-BJ06D6I\\Administrator","2026-10-02 11:56:13"]][[1076113876660205,1076113876660205,0,158692,"backgroundTaskHost.exe",["\"C:\\WINDOWS\\system32\\backgroundTaskHost.exe\" -ServerName:Global.DesktopSpotlight.AppXz2j21w56bgxkgsjhtn7zkjsepq96erz2.mca"],"DESKTOP-BJ06D6I\\Administrator","2026-10-05 09:27:59"],[88689254319660,88689254319660,0,143624,"svchost.exe",["C:\\WINDOWS\\system32\\svchost.exe","-k","GPSvcGroup"],"NT AUTHORITY\\SYSTEM","2026-10-05 09:27:41"],[22891141,12042658,10848483,5560,"btPanel.exe",["D:\\BtSoft\\panel\\btPanel.exe","--task"],"NT AUTHORITY\\SYSTEM","2026-09-16 02:33:01"],[108724,69688,39036,97092,"Doubao.exe",["\"C:\\Users\\Administrator\\AppData\\Local\\Doubao\\Application\\app\\Doubao.exe\" --restart-for-update --start_time=1789521614380 --restart --flag-switches-begin --flag-switches-end --update-did-success=2.29.10 --update-finished"],"DESKTOP-BJ06D6I\\Administrator","2026-09-30 13:57:19"],[85115,85063,51,42188,"DeepSeek Harness.exe",["\"C:\\Users\\Administrator\\AppData\\Local\\Programs\\DeepSeek Harness\\DeepSeek Harness.exe\" --expose-internals \"C:\\Users\\Administrator\\AppData\\Local\\Programs\\DeepSeek Harness\\resources\\app.asar\\dsh\\node_modules\\@deepseek-ai\\dsh-desktop-host\\lib\\index.js\" \"C:\\Users\\Administrator\\AppData\\Local\\Programs\\DeepSeek Harness\\resources\\app.asar\\dsh\" C:\\Users\\Administrator\\.dsh\\profiles\\desktop \"C:\\Users\\Administrator\\AppData\\Local\\Programs\\DeepSeek Harness\\resources\\runtime\\primary-runtime\" \"C:\\Users\\Administrator\\AppData\\Local\\Programs\\DeepSeek Harness\\resources\\runtime\\pnpm\\bin\\pnpm.mjs\" \"C:\\Users\\Administrator\\AppData\\Local\\Programs\\DeepSeek Harness\\resources\\runtime\\bin\""],"DESKTOP-BJ06D6I\\Administrator","2026-09-30 18:26:12"]][[10.14,0,0,46084096,3956,"WmiPrvSE.exe",["C:\\WINDOWS\\system32\\wbem\\wmiprvse.exe"],"NT AUTHORITY\\NETWORK SERVICE","2026-09-16 08:41:20"],[2.25,980,176,34656256,16204,"LdTermPlug.exe",["\"C:\\Inetpub\\ftproot\\Tipray\\LdTerm\\LdTermPlug.exe\" "],"NT AUTHORITY\\SYSTEM","2026-09-16 08:41:25"],[2.16,9585145,8634507,47378432,5560,"btPanel.exe",["D:\\BtSoft\\panel\\btPanel.exe","--task"],"NT AUTHORITY\\SYSTEM","2026-09-16 02:33:01"],[1.81,564,23123,323121152,20208,"DingTalk.exe",["\"C:\\Program Files (x86)\\DingDing\\main\\current\\DingTalk.exe\" "],"DESKTOP-BJ06D6I\\Administrator","2026-09-28 09:58:51"],[1.64,8474,1127,69320704,4736,"LdTermDaemon.exe",["C:\\Inetpub\\ftproot\\Tipray\\LdTerm\\LdTermDaemon.exe"],"NT AUTHORITY\\SYSTEM","2026-09-16 02:33:01"]][]`eF  / /