系统内存总数：8.00GB
系统可用内存：5.28GB
TotalPageFile：9.87GB
AvailPageFile：7.20GB
TotalVirtual：2.00GB
ullAvailVirtual：1.86GB
ullAvailExtendedVirtual：



进程信息:名称 PID 占用内存描述 路径 命令参数
System                                   4                                                                                                                                                                                                                                                                                                                                          
Registry                                 108                                                                                                                                                                                                                                                                                                                                        
smss.exe                                 332                                                                                                                                                                                                                                                                                                                                        
csrss.exe                                448                                                                                                                                                                                                                                                                                                                                        
wininit.exe                              524                                                                                                                                                                                                                                                                                                                                        
csrss.exe                                532                                                                                                                                                                                                                                                                                                                                        
winlogon.exe                             624        11MB                                                          C:\Windows\System32\winlogon.exe                                                                                                                                                                                                                                  C:\Windows\System32\winlogon.exe
services.exe                             664                                                                                                                                                                                                                                                                                                                                        
lsass.exe                                692        22MB                                                          C:\Windows\System32\lsass.exe                                                                                                                                                                                                                                     C:\Windows\System32\lsass.exe
svchost.exe                              812        28MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
fontdrvhost.exe                          840        3MB                                                           C:\Windows\System32\fontdrvhost.exe                                                                                                                                                                                                                               C:\Windows\System32\fontdrvhost.exe
fontdrvhost.exe                          848        12MB                                                          C:\Windows\System32\fontdrvhost.exe                                                                                                                                                                                                                               C:\Windows\System32\fontdrvhost.exe
svchost.exe                              928        17MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              988        7MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
dwm.exe                                  472        433MB                                                         C:\Windows\System32\dwm.exe                                                                                                                                                                                                                                       C:\Windows\System32\dwm.exe
svchost.exe                              1096       11MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              1104       10MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              1116       15MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              1172       6MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              1272       18MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              1288       17MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              1436       8MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              1444       9MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              1496       7MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              1544       7MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              1584       8MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              1600       13MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              1608       5MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
Memory Compression                       1744                                                                                                                                                                                                                                                                                                                                       
svchost.exe                              1764       8MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              1780       12MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              1892       7MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              1900       10MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              1940       9MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              360        13MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              1804       7MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              2136       7MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              2144       9MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              2152       6MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              2240       25MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              2252       14MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
spoolsv.exe                              2416       19MB                                                          C:\Windows\System32\spoolsv.exe                                                                                                                                                                                                                                   C:\Windows\System32\spoolsv.exe
svchost.exe                              2440       17MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              2500       8MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              2668       26MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              2676       36MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              2684       13MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              2696       20MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              2764       11MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              2776       5MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
VGAuthService.exe                        2788       10MB                                                          C:\Program Files\VMware\VMware Tools\VMware VGAuth\VGAuthService.exe                                                                                                                                                                                              C:\Program Files\VMware\VMware Tools\VMware VGAuth\VGAuthService.exe
vm3dservice.exe                          2796       6MB                                                           C:\Windows\System32\vm3dservice.exe                                                                                                                                                                                                                               C:\Windows\System32\vm3dservice.exe
vmtoolsd.exe                             2804       18MB                                                          C:\Program Files\VMware\VMware Tools\vmtoolsd.exe                                                                                                                                                                                                                 C:\Program Files\VMware\VMware Tools\vmtoolsd.exe
svchost.exe                              2824       20MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              2992       10MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
vm3dservice.exe                          3036       6MB                                                           C:\Windows\System32\vm3dservice.exe                                                                                                                                                                                                                               C:\Windows\System32\vm3dservice.exe
svchost.exe                              2860       5MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              3136       8MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
dllhost.exe                              3532       13MB                                                          C:\Windows\System32\dllhost.exe                                                                                                                                                                                                                                   C:\Windows\System32\dllhost.exe
msdtc.exe                                3692       10MB                                                          C:\Windows\System32\msdtc.exe                                                                                                                                                                                                                                     C:\Windows\System32\msdtc.exe
WmiPrvSE.exe                             3744       29MB                                                          C:\Windows\System32\wbem\WmiPrvSE.exe                                                                                                                                                                                                                             C:\Windows\System32\wbem\WmiPrvSE.exe
svchost.exe                              3956       6MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
sihost.exe                               3936       29MB                                                          C:\Windows\System32\sihost.exe                                                                                                                                                                                                                                    C:\Windows\System32\sihost.exe
svchost.exe                              4100       21MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              4144       39MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
taskhostw.exe                            4240       18MB                                                          C:\Windows\System32\taskhostw.exe                                                                                                                                                                                                                                 C:\Windows\System32\taskhostw.exe
svchost.exe                              4284       18MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              4468       8MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
ctfmon.exe                               4508       34MB                                                          C:\Windows\System32\ctfmon.exe                                                                                                                                                                                                                                    C:\Windows\System32\ctfmon.exe
svchost.exe                              4516       16MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
explorer.exe                             4660       190MB                                                         C:\Windows\explorer.exe                                                                                                                                                                                                                                           C:\Windows\explorer.exe
svchost.exe                              4856       20MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
ChsIME.exe                               5268       7MB                                                           C:\Windows\System32\InputMethod\CHS\ChsIME.exe                                                                                                                                                                                                                    C:\Windows\System32\InputMethod\CHS\ChsIME.exe
svchost.exe                              5376       26MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              5652       11MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
StartMenuExperienceHost.exe              5812       80MB                                                          C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe                                                                                                                                                         C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
RuntimeBroker.exe                        5968       29MB                                                          C:\Windows\System32\RuntimeBroker.exe                                                                                                                                                                                                                             C:\Windows\System32\RuntimeBroker.exe
SearchApp.exe                            6068       257MB                                                         C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe                                                                                                                                                                                        C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
RuntimeBroker.exe                        4712       36MB                                                          C:\Windows\System32\RuntimeBroker.exe                                                                                                                                                                                                                             C:\Windows\System32\RuntimeBroker.exe
SearchIndexer.exe                        6308       55MB                                                          C:\Windows\System32\SearchIndexer.exe                                                                                                                                                                                                                             C:\Windows\System32\SearchIndexer.exe
svchost.exe                              6316       9MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              6680       12MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
TextInputHost.exe                        6780       50MB                                                          C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp\TextInputHost.exe                                                                                                                                                                        C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp\TextInputHost.exe
RuntimeBroker.exe                        7268       20MB                                                          C:\Windows\System32\RuntimeBroker.exe                                                                                                                                                                                                                             C:\Windows\System32\RuntimeBroker.exe
SecurityHealthSystray.exe                7472       9MB                                                           C:\Windows\System32\SecurityHealthSystray.exe                                                                                                                                                                                                                     C:\Windows\System32\SecurityHealthSystray.exe
SecurityHealthService.exe                7512                                                                                                                                                                                                                                                                                                                                       
svchost.exe                              8164       7MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              4884       11MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
ApplicationFrameHost.exe                 7884       26MB                                                          C:\Windows\System32\ApplicationFrameHost.exe                                                                                                                                                                                                                      C:\Windows\System32\ApplicationFrameHost.exe
dllhost.exe                              8320       15MB                                                          C:\Windows\System32\dllhost.exe                                                                                                                                                                                                                                   C:\Windows\System32\dllhost.exe
svchost.exe                              8480       18MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
SgrmBroker.exe                           6388                                                                                                                                                                                                                                                                                                                                       
svchost.exe                              7132       12MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              2216       22MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              2372                                                                                                                                                                                                                                                                                                                                       
svchost.exe                              8228       24MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
taskhostw.exe                            8304       15MB                                                          C:\Windows\System32\taskhostw.exe                                                                                                                                                                                                                                 C:\Windows\System32\taskhostw.exe
ChsIME.exe                               1052       17MB                                                          C:\Windows\System32\InputMethod\CHS\ChsIME.exe                                                                                                                                                                                                                    C:\Windows\System32\InputMethod\CHS\ChsIME.exe
RavService.exe                           5588       7MB        RUAD Application                                   C:\Program Files (x86)\Rising\REC\ep\rua\ravservice.exe                                                                                                                                                                                                           "C:\Program Files (x86)\Rising\REC\ep\rua\ravservice.exe"
svchost.exe                              5148       34MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
LockApp.exe                              1076       47MB                                                          C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe                                                                                                                                                                                                 C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
RuntimeBroker.exe                        5844       30MB                                                          C:\Windows\System32\RuntimeBroker.exe                                                                                                                                                                                                                             C:\Windows\System32\RuntimeBroker.exe
svchost.exe                              5992       11MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
MoUsoCoreWorker.exe                      2220       22MB                                                          C:\Windows\System32\MoUsoCoreWorker.exe                                                                                                                                                                                                                           C:\Windows\System32\MoUsoCoreWorker.exe
SecCenAdapterServer.exe                  6348                                                                                                                                                                                                                                                                                                                                       
ShellExperienceHost.exe                  984        81MB                                                          C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe                                                                                                                                                                                   C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
RuntimeBroker.exe                        8248       28MB                                                          C:\Windows\System32\RuntimeBroker.exe                                                                                                                                                                                                                             C:\Windows\System32\RuntimeBroker.exe
OneDrive.exe                             8760       9MB                                                           C:\Users\admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe                                                                                                                                                                                                      C:\Users\admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe
svchost.exe                              2872       5MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
esm.exe                                  4120       18MB       服务进程                                               C:\Program Files (x86)\Rising\REC\ep\esm.exe                                                                                                                                                                                                                      "C:\Program Files (x86)\Rising\REC\ep\esm.exe"
epsrv.exe                                3540       11MB       服务进程                                               C:\Program Files (x86)\Rising\REC\ep\epsrv.exe                                                                                                                                                                                                                    "C:\Program Files (x86)\Rising\REC\ep\epsrv.exe"
eptray.exe                               116        33MB       客户端                                                C:\Program Files (x86)\Rising\REC\ep\eptray.exe                                                                                                                                                                                                                   "C:\Program Files (x86)\Rising\REC\ep\eptray.exe" -service
ep64.exe                                 3284       7MB                                                           C:\Program Files (x86)\Rising\REC\ep\x64\ep64.exe                                                                                                                                                                                                                 C:\Program Files (x86)\Rising\REC\ep\x64\ep64.exe
svchost.exe                              756        13MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              6132       10MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              4564       10MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              9200       8MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
SystemSettingsBroker.exe                 6632       15MB                                                          C:\Windows\System32\SystemSettingsBroker.exe                                                                                                                                                                                                                      C:\Windows\System32\SystemSettingsBroker.exe
Microsoft.Photos.exe                     6396       6MB                                                           C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe                                                                                                                                                  C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
RuntimeBroker.exe                        7644       29MB                                                          C:\Windows\System32\RuntimeBroker.exe                                                                                                                                                                                                                             C:\Windows\System32\RuntimeBroker.exe
svchost.exe                              7292                                                                                                                                                                                                                                                                                                                                       
svchost.exe                              6512       9MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
audiodg.exe                              5140       11MB                                                          C:\Windows\System32\audiodg.exe                                                                                                                                                                                                                                   C:\Windows\System32\audiodg.exe
esmmain.exe                              856        63MB       客户端主程序                                             C:\Program Files (x86)\Rising\REC\ep\esmmain.exe                                                                                                                                                                                                                  "C:\Program Files (x86)\Rising\REC\ep\esmmain.exe" ItemScan={E09A26B1-FAB2-47c8-838F-3EFC4AE84BC8}
coltool.exe                              1876       24MB       CollectLogTool Module                              C:\Program Files (x86)\Rising\REC\ep\coltool.exe                                                                                                                                                                                                                  "C:\Program Files (x86)\Rising\REC\ep\coltool.exe" 
SearchProtocolHost.exe                   7904       13MB                                                          C:\Windows\System32\SearchProtocolHost.exe                                                                                                                                                                                                                        C:\Windows\System32\SearchProtocolHost.exe
SearchFilterHost.exe                     2520       7MB                                                           C:\Windows\System32\SearchFilterHost.exe                                                                                                                                                                                                                          C:\Windows\System32\SearchFilterHost.exe
dllhost.exe                              4056       7MB                                                           C:\Windows\System32\dllhost.exe                                                                                                                                                                                                                                   C:\Windows\System32\dllhost.exe
dllhost.exe                              5236       7MB                                                           C:\Windows\System32\dllhost.exe                                                                                                                                                                                                                                   C:\Windows\System32\dllhost.exe
BackgroundTransferHost.exe               7604       24MB                                                          C:\Windows\System32\BackgroundTransferHost.exe                                                                                                                                                                                                                    C:\Windows\System32\BackgroundTransferHost.exe


进程的具体模块信息
System               4                                                                                                                                                                                                                                                                                                                               


Registry             108                                                                                                                                                                                                                                                                                                                             


smss.exe             332                                                                                                                                                                                                                                                                                                                             


csrss.exe            448                                                                                                                                                                                                                                                                                                                             


wininit.exe          524                                                                                                                                                                                                                                                                                                                             


csrss.exe            532                                                                                                                                                                                                                                                                                                                             


winlogon.exe         624                                                           C:\Windows\System32\winlogon.exe                                                                                                                                                                                                                                  C:\Windows\System32\winlogon.exe


services.exe         664                                                                                                                                                                                                                                                                                                                             


lsass.exe            692                                                           C:\Windows\System32\lsass.exe                                                                                                                                                                                                                                     C:\Windows\System32\lsass.exe


svchost.exe          812                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


fontdrvhost.exe      840                                                           C:\Windows\System32\fontdrvhost.exe                                                                                                                                                                                                                               C:\Windows\System32\fontdrvhost.exe


fontdrvhost.exe      848                                                           C:\Windows\System32\fontdrvhost.exe                                                                                                                                                                                                                               C:\Windows\System32\fontdrvhost.exe


svchost.exe          928                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          988                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


dwm.exe              472                                                           C:\Windows\System32\dwm.exe                                                                                                                                                                                                                                       C:\Windows\System32\dwm.exe


svchost.exe          1096                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          1104                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          1116                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          1172                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          1272                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          1288                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          1436                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          1444                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          1496                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          1544                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          1584                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          1600                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          1608                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


Memory Compression   1744                                                                                                                                                                                                                                                                                                                            


svchost.exe          1764                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          1780                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          1892                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          1900                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          1940                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          360                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          1804                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          2136                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          2144                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          2152                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          2240                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          2252                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


spoolsv.exe          2416                                                          C:\Windows\System32\spoolsv.exe                                                                                                                                                                                                                                   C:\Windows\System32\spoolsv.exe


svchost.exe          2440                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          2500                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          2668                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          2676                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          2684                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          2696                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          2764                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          2776                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


VGAuthService.exe    2788                                                          C:\Program Files\VMware\VMware Tools\VMware VGAuth\VGAuthService.exe                                                                                                                                                                                              C:\Program Files\VMware\VMware Tools\VMware VGAuth\VGAuthService.exe


vm3dservice.exe      2796                                                          C:\Windows\System32\vm3dservice.exe                                                                                                                                                                                                                               C:\Windows\System32\vm3dservice.exe


vmtoolsd.exe         2804                                                          C:\Program Files\VMware\VMware Tools\vmtoolsd.exe                                                                                                                                                                                                                 C:\Program Files\VMware\VMware Tools\vmtoolsd.exe


svchost.exe          2824                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          2992                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


vm3dservice.exe      3036                                                          C:\Windows\System32\vm3dservice.exe                                                                                                                                                                                                                               C:\Windows\System32\vm3dservice.exe


svchost.exe          2860                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          3136                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


dllhost.exe          3532                                                          C:\Windows\System32\dllhost.exe                                                                                                                                                                                                                                   C:\Windows\System32\dllhost.exe


msdtc.exe            3692                                                          C:\Windows\System32\msdtc.exe                                                                                                                                                                                                                                     C:\Windows\System32\msdtc.exe


WmiPrvSE.exe         3744                                                          C:\Windows\System32\wbem\WmiPrvSE.exe                                                                                                                                                                                                                             C:\Windows\System32\wbem\WmiPrvSE.exe


svchost.exe          3956                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


sihost.exe           3936                                                          C:\Windows\System32\sihost.exe                                                                                                                                                                                                                                    C:\Windows\System32\sihost.exe


svchost.exe          4100                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          4144                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


taskhostw.exe        4240                                                          C:\Windows\System32\taskhostw.exe                                                                                                                                                                                                                                 C:\Windows\System32\taskhostw.exe


svchost.exe          4284                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          4468                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


ctfmon.exe           4508                                                          C:\Windows\System32\ctfmon.exe                                                                                                                                                                                                                                    C:\Windows\System32\ctfmon.exe


svchost.exe          4516                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


explorer.exe         4660                                                          C:\Windows\explorer.exe                                                                                                                                                                                                                                           C:\Windows\explorer.exe


svchost.exe          4856                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


ChsIME.exe           5268                                                          C:\Windows\System32\InputMethod\CHS\ChsIME.exe                                                                                                                                                                                                                    C:\Windows\System32\InputMethod\CHS\ChsIME.exe


svchost.exe          5376                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          5652                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


StartMenuExperienceHost.exe 5812                                                          C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe                                                                                                                                                         C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe


RuntimeBroker.exe    5968                                                          C:\Windows\System32\RuntimeBroker.exe                                                                                                                                                                                                                             C:\Windows\System32\RuntimeBroker.exe


SearchApp.exe        6068                                                          C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe                                                                                                                                                                                        C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe


RuntimeBroker.exe    4712                                                          C:\Windows\System32\RuntimeBroker.exe                                                                                                                                                                                                                             C:\Windows\System32\RuntimeBroker.exe


SearchIndexer.exe    6308                                                          C:\Windows\System32\SearchIndexer.exe                                                                                                                                                                                                                             C:\Windows\System32\SearchIndexer.exe


svchost.exe          6316                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          6680                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


TextInputHost.exe    6780                                                          C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp\TextInputHost.exe                                                                                                                                                                        C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp\TextInputHost.exe


RuntimeBroker.exe    7268                                                          C:\Windows\System32\RuntimeBroker.exe                                                                                                                                                                                                                             C:\Windows\System32\RuntimeBroker.exe


SecurityHealthSystray.exe 7472                                                          C:\Windows\System32\SecurityHealthSystray.exe                                                                                                                                                                                                                     C:\Windows\System32\SecurityHealthSystray.exe


SecurityHealthService.exe 7512                                                                                                                                                                                                                                                                                                                            


svchost.exe          8164                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          4884                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


ApplicationFrameHost.exe 7884                                                          C:\Windows\System32\ApplicationFrameHost.exe                                                                                                                                                                                                                      C:\Windows\System32\ApplicationFrameHost.exe


dllhost.exe          8320                                                          C:\Windows\System32\dllhost.exe                                                                                                                                                                                                                                   C:\Windows\System32\dllhost.exe


svchost.exe          8480                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


SgrmBroker.exe       6388                                                                                                                                                                                                                                                                                                                            


svchost.exe          7132                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          2216                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          2372                                                                                                                                                                                                                                                                                                                            


svchost.exe          8228                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


taskhostw.exe        8304                                                          C:\Windows\System32\taskhostw.exe                                                                                                                                                                                                                                 C:\Windows\System32\taskhostw.exe


ChsIME.exe           1052                                                          C:\Windows\System32\InputMethod\CHS\ChsIME.exe                                                                                                                                                                                                                    C:\Windows\System32\InputMethod\CHS\ChsIME.exe


RavService.exe       5588       RUAD Application                                   C:\Program Files (x86)\Rising\REC\ep\rua\ravservice.exe                                                                                                                                                                                                           "C:\Program Files (x86)\Rising\REC\ep\rua\ravservice.exe"
      ravservice.exe        RUAD Application                                    Beijing Rising Network Security Technology Co., Ltd.  3.0.0.15                                           C:\Program Files (x86)\Rising\REC\ep\rua\ravservice.exe
      ntdll.dll             NT 层 DLL                                            Microsoft Corporation                               10.0.19041.804 (WinBuild.160101.0800)              C:\Windows\System32\ntdll.dll
      KERNEL32.DLL          Windows NT 基本 API 客户端 DLL                           Microsoft Corporation                               10.0.19041.804 (WinBuild.160101.0800)              C:\Windows\System32\kernel32.dll
      KERNELBASE.dll        Windows NT 基本 API 客户端 DLL                           Microsoft Corporation                               10.0.19041.804 (WinBuild.160101.0800)              C:\Windows\System32\KERNELBASE.dll
      apphelp.dll           应用程序兼容性客户端库                                         Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\apphelp.dll
      ADVAPI32.dll          高级 Windows 32 基本 API                                Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\advapi32.dll
      msvcrt.dll            Windows NT CRT DLL                                  Microsoft Corporation                               7.0.19041.546 (WinBuild.160101.0800)               C:\Windows\System32\msvcrt.dll
      sechost.dll           Host for SCM/SDDL/LSA Lookup APIs                   Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\sechost.dll
      RPCRT4.dll            远程过程调用运行时                                           Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\rpcrt4.dll
      SHELL32.dll           Windows Shell 公用 DLL                                Microsoft Corporation                               10.0.19041.329 (WinBuild.160101.0800)              C:\Windows\System32\shell32.dll
      msvcp_win.dll         Microsoft? C Runtime Library                        Microsoft Corporation                               10.0.19041.789 (WinBuild.160101.0800)              C:\Windows\System32\msvcp_win.dll
      ucrtbase.dll          Microsoft? C Runtime Library                        Microsoft Corporation                               10.0.19041.789 (WinBuild.160101.0800)              C:\Windows\System32\ucrtbase.dll
      USER32.dll            多用户 Windows 用户 API 客户端 DLL                          Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\user32.dll
      USERENV.dll           Userenv                                             Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\userenv.dll
      WTSAPI32.dll          Windows Remote Desktop Session Host Server SDK APIs  Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\wtsapi32.dll
      win32u.dll            Win32u                                              Microsoft Corporation                               10.0.19041.906 (WinBuild.160101.0800)              C:\Windows\System32\win32u.dll
      GDI32.dll             GDI Client DLL                                      Microsoft Corporation                               10.0.19041.746 (WinBuild.160101.0800)              C:\Windows\System32\gdi32.dll
      gdi32full.dll         GDI Client DLL                                      Microsoft Corporation                               10.0.19041.928 (WinBuild.160101.0800)              C:\Windows\System32\gdi32full.dll
      SHLWAPI.dll           外壳简易实用工具库                                           Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\shlwapi.dll
      MSVCP90.dll           Microsoft? C++ Runtime Library                      Microsoft Corporation                               9.00.30729.9625                                    C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9625_none_508ef7e4bcbbe589\msvcp90.dll
      MSVCR90.dll           Microsoft? C Runtime Library                        Microsoft Corporation                               9.00.30729.9625                                    C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9625_none_508ef7e4bcbbe589\msvcr90.dll
      windows.storage.dll   Microsoft WinRT Storage API                         Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\windows.storage.dll
      combase.dll           用于 Windows 的 Microsoft COM                          Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\combase.dll
      Wldp.dll              Windows 锁定策略                                        Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\wldp.dll
      SHCORE.dll            SHCORE                                              Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\SHCore.dll
      profapi.dll           User Profile Basic API                              Microsoft Corporation                               10.0.19041.844 (WinBuild.160101.0800)              C:\Windows\System32\profapi.dll
      WINSTA.dll            Winstation Library                                  Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\winsta.dll
      SspiCli.dll           Security Support Provider Interface                 Microsoft Corporation                               10.0.19041.906 (WinBuild.160101.0800)              C:\Windows\System32\sspicli.dll


svchost.exe          5148                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


LockApp.exe          1076                                                          C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe                                                                                                                                                                                                 C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe


RuntimeBroker.exe    5844                                                          C:\Windows\System32\RuntimeBroker.exe                                                                                                                                                                                                                             C:\Windows\System32\RuntimeBroker.exe


svchost.exe          5992                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


MoUsoCoreWorker.exe  2220                                                          C:\Windows\System32\MoUsoCoreWorker.exe                                                                                                                                                                                                                           C:\Windows\System32\MoUsoCoreWorker.exe


SecCenAdapterServer.exe 6348                                                                                                                                                                                                                                                                                                                            


ShellExperienceHost.exe 984                                                           C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe                                                                                                                                                                                   C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe


RuntimeBroker.exe    8248                                                          C:\Windows\System32\RuntimeBroker.exe                                                                                                                                                                                                                             C:\Windows\System32\RuntimeBroker.exe


OneDrive.exe         8760                                                          C:\Users\admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe                                                                                                                                                                                                      C:\Users\admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe


svchost.exe          2872                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


esm.exe              4120       服务进程                                               C:\Program Files (x86)\Rising\REC\ep\esm.exe                                                                                                                                                                                                                      "C:\Program Files (x86)\Rising\REC\ep\esm.exe"
      esm.exe               服务进程                                                Beijing Rising Network Security Technology Co., Ltd.  3, 0, 0, 8                                         C:\Program Files (x86)\Rising\REC\ep\esm.exe
      ntdll.dll             NT 层 DLL                                            Microsoft Corporation                               10.0.19041.804 (WinBuild.160101.0800)              C:\Windows\System32\ntdll.dll
      KERNEL32.DLL          Windows NT 基本 API 客户端 DLL                           Microsoft Corporation                               10.0.19041.804 (WinBuild.160101.0800)              C:\Windows\System32\kernel32.dll
      KERNELBASE.dll        Windows NT 基本 API 客户端 DLL                           Microsoft Corporation                               10.0.19041.804 (WinBuild.160101.0800)              C:\Windows\System32\KERNELBASE.dll
      ole32.dll             用于 Windows 的 Microsoft OLE                          Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\ole32.dll
      ucrtbase.dll          Microsoft? C Runtime Library                        Microsoft Corporation                               10.0.19041.789 (WinBuild.160101.0800)              C:\Windows\System32\ucrtbase.dll
      RPCRT4.dll            远程过程调用运行时                                           Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\rpcrt4.dll
      combase.dll           用于 Windows 的 Microsoft COM                          Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\combase.dll
      GDI32.dll             GDI Client DLL                                      Microsoft Corporation                               10.0.19041.746 (WinBuild.160101.0800)              C:\Windows\System32\gdi32.dll
      win32u.dll            Win32u                                              Microsoft Corporation                               10.0.19041.906 (WinBuild.160101.0800)              C:\Windows\System32\win32u.dll
      gdi32full.dll         GDI Client DLL                                      Microsoft Corporation                               10.0.19041.928 (WinBuild.160101.0800)              C:\Windows\System32\gdi32full.dll
      msvcp_win.dll         Microsoft? C Runtime Library                        Microsoft Corporation                               10.0.19041.789 (WinBuild.160101.0800)              C:\Windows\System32\msvcp_win.dll
      USER32.dll            多用户 Windows 用户 API 客户端 DLL                          Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\user32.dll
      SHLWAPI.dll           外壳简易实用工具库                                           Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\shlwapi.dll
      msvcrt.dll            Windows NT CRT DLL                                  Microsoft Corporation                               7.0.19041.546 (WinBuild.160101.0800)               C:\Windows\System32\msvcrt.dll
      MSVCP90.dll           Microsoft? C++ Runtime Library                      Microsoft Corporation                               9.00.30729.9625                                    C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9625_none_508ef7e4bcbbe589\msvcp90.dll
      MSVCR90.dll           Microsoft? C Runtime Library                        Microsoft Corporation                               9.00.30729.9625                                    C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9625_none_508ef7e4bcbbe589\msvcr90.dll
      kernel.appcore.dll    AppModel API Host                                   Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\kernel.appcore.dll
      bcryptPrimitives.dll  Windows Cryptographic Primitives Library            Microsoft Corporation                               10.0.19041.662 (WinBuild.160101.0800)              C:\Windows\System32\bcryptPrimitives.dll
      stdlog.dll            Beijing Rising Information Technology Co., Ltd.     Beijing Rising Information Technology Co., Ltd.     3.0.0.10                                           C:\Program Files (x86)\Rising\REC\ep\stdlog.dll
      ADVAPI32.dll          高级 Windows 32 基本 API                                Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\advapi32.dll
      sechost.dll           Host for SCM/SDDL/LSA Lookup APIs                   Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\sechost.dll
      Syslay.dll            Syslay                                              Beijing Rising Information Technology Co., Ltd.     3.0.0.3                                            C:\Program Files (x86)\Rising\REC\ep\syslay.dll
      SHELL32.dll           Windows Shell 公用 DLL                                Microsoft Corporation                               10.0.19041.329 (WinBuild.160101.0800)              C:\Windows\System32\shell32.dll
      shcore.dll            SHCORE                                              Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\SHCore.dll
      rscom.dll             rscom for rsdk                                      Beijing Rising Network Security Technology Co., Ltd.  3.0.0.13                                           C:\Program Files (x86)\Rising\REC\ep\Common Files\rscom.dll
      PSAPI.DLL             Process Status Helper                               Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\psapi.dll
      WTSAPI32.dll          Windows Remote Desktop Session Host Server SDK APIs  Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\wtsapi32.dll
      USERENV.dll           Userenv                                             Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\userenv.dll
      rsxml3w.dll           rsxml for rsdk                                      Beijing Rising Network Security Technology Co., Ltd.  3.0.0.4                                            C:\Program Files (x86)\Rising\REC\ep\Common Files\rsxml3w.dll
      mutexmgr.dll          mutexmgr Dynamic Link Library                       Beijing Rising Network Security Technology Co., Ltd.  3.0.0.8                                            C:\Program Files (x86)\Rising\REC\ep\Common Files\mutexmgr.dll
      OLEAUT32.dll          OLEAUT32.DLL                                        Microsoft Corporation                               10.0.19041.804 (WinBuild.160101.0800)              C:\Windows\System32\oleaut32.dll
      envinfo.dll           EnvInfo Dynamic Link Library                        Beijing Rising Network Security Technology Co., Ltd.  3, 0, 0, 12                                        C:\Program Files (x86)\Rising\REC\ep\envinfo.dll
      IMM32.DLL             Multi-User Windows IMM32 API Client DLL             Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\imm32.dll
      msc.dll               MSC Module                                          Beijing Rising Information Technology Co., Ltd.     3.0.0.2                                            C:\Program Files (x86)\Rising\REC\ep\Common Files\msc.dll
      managedb.dll          managedb Dynamic Link Library                       Beijing Rising Information Technology Co., Ltd.     3.0.0.11                                           C:\Program Files (x86)\Rising\REC\ep\Common Files\managedb.dll
      mscsrv.dll            mscsrv Dynamic Link Library                         Beijing Rising Information Technology Co., Ltd.     2.0.0.2                                            C:\Program Files (x86)\Rising\REC\ep\mscsrv.dll
      rstimer.dll           rstimer                                             Beijing Rising Information Technology Co., Ltd.     3, 0, 0, 6                                         C:\Program Files (x86)\Rising\REC\ep\rstimer.dll
      WINMM.dll             MCI API DLL                                         Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\winmm.dll
      EpStorage.dll         EpStorag Dynamic Link Library                       Beijing Rising Network Security Technology Co., Ltd.  1.0.0.71                                           C:\Program Files (x86)\Rising\REC\ep\EpStorage.dll
      logwrite.dll          Dynamic Link Library                                Beijing Rising Information Technology Co., Ltd.     3, 0, 0, 7                                         C:\Program Files (x86)\Rising\REC\ep\logwrite.dll
      endpoint.dll          endpoint Dynamic Link Library                       Beijing Rising Network Security Technology Co., Ltd.  5, 0, 0, 11                                        C:\Program Files (x86)\Rising\REC\ep\endpoint.dll
      WS2_32.dll            Windows Socket 2.0 32 位 DLL                         Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\ws2_32.dll
      IPHLPAPI.DLL          IP 帮助程序 API                                         Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\IPHLPAPI.DLL
      duilib3.dll           duilib                                              Beijing Rising Network Security Technology Co., Ltd.  3, 0, 0, 37                                        C:\Program Files (x86)\Rising\REC\ep\duilib3.dll
      UxTheme.dll           Microsoft UxTheme 库                                 Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\uxtheme.dll
      MSIMG32.dll           GDIEXT Client DLL                                   Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\msimg32.dll
      COMCTL32.dll          用户体验控件库                                             Microsoft Corporation                               6.10 (WinBuild.160101.0800)                        C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.844_none_11adecdf30011423\comctl32.dll
      gdiplus.dll           Microsoft GDI+                                      Microsoft Corporation                               10.0.19041.928 (WinBuild.160101.0800)              C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.928_none_429ce31a8a8fefd2\GdiPlus.dll
      WINSTA.dll            Winstation Library                                  Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\winsta.dll
      DNSAPI.dll            DNS 客户端 API DLL                                     Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\dnsapi.dll
      NSI.dll               NSI User-mode interface DLL                         Microsoft Corporation                               10.0.19041.610 (WinBuild.160101.0800)              C:\Windows\System32\nsi.dll
      dhcpcsvc6.DLL         DHCPv6 客户端                                          Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\dhcpcsvc6.DLL
      dhcpcsvc.DLL          DHCP 客户端服务                                          Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\dhcpcsvc.dll
      WINNSI.DLL            Network Store Information RPC interface             Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\winnsi.dll
      authmgr.dll                                                               Beijing Rising Information Technology Co., Ltd.     1.0.0.15                                           C:\Program Files (x86)\Rising\REC\ep\authmgr.dll
      ATL90.DLL             ATL Module for Windows (Unicode)                    Microsoft Corporation                               9.00.30729.01                                      C:\Windows\WinSxS\x86_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.1_none_e29d1181971ae11e\ATL90.dll
      agent.dll             Agent Dynamic Link Library                          Beijing Rising Network Security Technology Co., Ltd.  3.0.0.60                                           C:\Program Files (x86)\Rising\REC\ep\agent\agent.dll
      rscurlp.dll           Rscurlp Dynamic Link Library                        Beijing Rising Network Security Technology Co., Ltd.  1.0.0.5                                            C:\Program Files (x86)\Rising\REC\ep\common files\rscurlp.dll
      WLDAP32.dll           Win32 LDAP API DLL                                  Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\Wldap32.dll
      CRYPT32.dll           加密 API32                                            Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\crypt32.dll
      WINHTTP.dll           Windows HTTP 服务                                     Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\winhttp.dll
      sruaplugin.dll        RUAPlugin Dynamic Link Library                                                                          3.0.0.29                                           C:\Program Files (x86)\Rising\REC\ep\sruaplugin.dll
      assetmgrui.dll        assetmgr Dynamic Link Library                       Beijing Rising Network Security Technology Co., Ltd.  1, 0, 0, 5                                         C:\Program Files (x86)\Rising\REC\ep\assetmgr\assetmgrui.dll
      msgmgrui.dll          msgmgrui Dynamic Link Library                       Beijing Rising Network Security Technology Co., Ltd.  5, 0, 0, 3                                         C:\Program Files (x86)\Rising\REC\ep\msgmgr\msgmgrui.dll
      clbcatq.dll           COM+ Configuration Catalog                          Microsoft Corporation                               2001.12.10941.16384 (WinBuild.160101.0800)         C:\Windows\System32\clbcatq.dll
      msxml3.dll            MSXML 3.0                                           Microsoft Corporation                               8.110.19041.844                                    C:\Windows\System32\msxml3.dll
      bcrypt.dll            Windows 加密基元库                                       Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\bcrypt.dll
      profapi.dll           User Profile Basic API                              Microsoft Corporation                               10.0.19041.844 (WinBuild.160101.0800)              C:\Windows\System32\profapi.dll
      SspiCli.dll           Security Support Provider Interface                 Microsoft Corporation                               10.0.19041.906 (WinBuild.160101.0800)              C:\Windows\System32\sspicli.dll


epsrv.exe            3540       服务进程                                               C:\Program Files (x86)\Rising\REC\ep\epsrv.exe                                                                                                                                                                                                                    "C:\Program Files (x86)\Rising\REC\ep\epsrv.exe"
      epsrv.exe             服务进程                                                Beijing Rising Network Security Technology Co., Ltd.  3, 0, 0, 8                                         C:\Program Files (x86)\Rising\REC\ep\epsrv.exe
      ntdll.dll             NT 层 DLL                                            Microsoft Corporation                               10.0.19041.804 (WinBuild.160101.0800)              C:\Windows\System32\ntdll.dll
      KERNEL32.DLL          Windows NT 基本 API 客户端 DLL                           Microsoft Corporation                               10.0.19041.804 (WinBuild.160101.0800)              C:\Windows\System32\kernel32.dll
      KERNELBASE.dll        Windows NT 基本 API 客户端 DLL                           Microsoft Corporation                               10.0.19041.804 (WinBuild.160101.0800)              C:\Windows\System32\KERNELBASE.dll
      ole32.dll             用于 Windows 的 Microsoft OLE                          Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\ole32.dll
      ucrtbase.dll          Microsoft? C Runtime Library                        Microsoft Corporation                               10.0.19041.789 (WinBuild.160101.0800)              C:\Windows\System32\ucrtbase.dll
      RPCRT4.dll            远程过程调用运行时                                           Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\rpcrt4.dll
      combase.dll           用于 Windows 的 Microsoft COM                          Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\combase.dll
      GDI32.dll             GDI Client DLL                                      Microsoft Corporation                               10.0.19041.746 (WinBuild.160101.0800)              C:\Windows\System32\gdi32.dll
      win32u.dll            Win32u                                              Microsoft Corporation                               10.0.19041.906 (WinBuild.160101.0800)              C:\Windows\System32\win32u.dll
      gdi32full.dll         GDI Client DLL                                      Microsoft Corporation                               10.0.19041.928 (WinBuild.160101.0800)              C:\Windows\System32\gdi32full.dll
      msvcp_win.dll         Microsoft? C Runtime Library                        Microsoft Corporation                               10.0.19041.789 (WinBuild.160101.0800)              C:\Windows\System32\msvcp_win.dll
      USER32.dll            多用户 Windows 用户 API 客户端 DLL                          Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\user32.dll
      SHLWAPI.dll           外壳简易实用工具库                                           Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\shlwapi.dll
      msvcrt.dll            Windows NT CRT DLL                                  Microsoft Corporation                               7.0.19041.546 (WinBuild.160101.0800)               C:\Windows\System32\msvcrt.dll
      MSVCP90.dll           Microsoft? C++ Runtime Library                      Microsoft Corporation                               9.00.30729.9625                                    C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9625_none_508ef7e4bcbbe589\msvcp90.dll
      MSVCR90.dll           Microsoft? C Runtime Library                        Microsoft Corporation                               9.00.30729.9625                                    C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9625_none_508ef7e4bcbbe589\msvcr90.dll
      kernel.appcore.dll    AppModel API Host                                   Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\kernel.appcore.dll
      bcryptPrimitives.dll  Windows Cryptographic Primitives Library            Microsoft Corporation                               10.0.19041.662 (WinBuild.160101.0800)              C:\Windows\System32\bcryptPrimitives.dll
      stdlog.dll            Beijing Rising Information Technology Co., Ltd.     Beijing Rising Information Technology Co., Ltd.     3.0.0.10                                           C:\Program Files (x86)\Rising\REC\ep\stdlog.dll
      ADVAPI32.dll          高级 Windows 32 基本 API                                Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\advapi32.dll
      sechost.dll           Host for SCM/SDDL/LSA Lookup APIs                   Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\sechost.dll
      Syslay.dll            Syslay                                              Beijing Rising Information Technology Co., Ltd.     3.0.0.3                                            C:\Program Files (x86)\Rising\REC\ep\syslay.dll
      SHELL32.dll           Windows Shell 公用 DLL                                Microsoft Corporation                               10.0.19041.329 (WinBuild.160101.0800)              C:\Windows\System32\shell32.dll
      shcore.dll            SHCORE                                              Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\SHCore.dll
      rscom.dll             rscom for rsdk                                      Beijing Rising Network Security Technology Co., Ltd.  3.0.0.13                                           C:\Program Files (x86)\Rising\REC\ep\Common Files\rscom.dll
      PSAPI.DLL             Process Status Helper                               Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\psapi.dll
      USERENV.dll           Userenv                                             Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\userenv.dll
      WTSAPI32.dll          Windows Remote Desktop Session Host Server SDK APIs  Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\wtsapi32.dll
      rsxml3w.dll           rsxml for rsdk                                      Beijing Rising Network Security Technology Co., Ltd.  3.0.0.4                                            C:\Program Files (x86)\Rising\REC\ep\Common Files\rsxml3w.dll
      mutexmgr.dll          mutexmgr Dynamic Link Library                       Beijing Rising Network Security Technology Co., Ltd.  3.0.0.8                                            C:\Program Files (x86)\Rising\REC\ep\Common Files\mutexmgr.dll
      OLEAUT32.dll          OLEAUT32.DLL                                        Microsoft Corporation                               10.0.19041.804 (WinBuild.160101.0800)              C:\Windows\System32\oleaut32.dll
      clbcatq.dll           COM+ Configuration Catalog                          Microsoft Corporation                               2001.12.10941.16384 (WinBuild.160101.0800)         C:\Windows\System32\clbcatq.dll
      FirewallAPI.dll       Windows Defender 防火墙 API                            Microsoft Corporation                               10.0.19041.662 (WinBuild.160101.0800)              C:\Windows\System32\FirewallAPI.dll
      DNSAPI.dll            DNS 客户端 API DLL                                     Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\dnsapi.dll
      IPHLPAPI.DLL          IP 帮助程序 API                                         Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\IPHLPAPI.DLL
      NSI.dll               NSI User-mode interface DLL                         Microsoft Corporation                               10.0.19041.610 (WinBuild.160101.0800)              C:\Windows\System32\nsi.dll
      fwbase.dll            Firewall Base DLL                                   Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\fwbase.dll
      FWPolicyIOMgr.dll     FwPolicyIoMgr DLL                                   Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\FWPolicyIOMgr.dll
      IMM32.DLL             Multi-User Windows IMM32 API Client DLL             Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\imm32.dll
      msc.dll               MSC Module                                          Beijing Rising Information Technology Co., Ltd.     3.0.0.2                                            C:\Program Files (x86)\Rising\REC\ep\Common Files\msc.dll
      envinfo.dll           EnvInfo Dynamic Link Library                        Beijing Rising Network Security Technology Co., Ltd.  3, 0, 0, 12                                        C:\Program Files (x86)\Rising\REC\ep\envinfo.dll
      managedb.dll          managedb Dynamic Link Library                       Beijing Rising Information Technology Co., Ltd.     3.0.0.11                                           C:\Program Files (x86)\Rising\REC\ep\Common Files\managedb.dll
      EpStorage.dll         EpStorag Dynamic Link Library                       Beijing Rising Network Security Technology Co., Ltd.  1.0.0.71                                           C:\Program Files (x86)\Rising\REC\ep\EpStorage.dll
      rulemgr.dll                                                               Beijing Rising Information Technology Co., Ltd.     3.0.0.3                                            C:\Program Files (x86)\Rising\REC\ep\rulemgr.dll
      drvcrt.dll            drvcrt                                              Beijing Rising Network Security Technology Co., Ltd.  3.0.0.3                                            C:\Program Files (x86)\Rising\REC\ep\drvcrt.dll
      drvapp.dll             drvapp Dynamic Link Library                        Beijing Rising Network Security Technology Co., Ltd.  3.0.0.9                                            C:\Program Files (x86)\Rising\REC\ep\drvapp.dll
      NETAPI32.dll          Net Win32 API DLL                                   Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\netapi32.dll
      SAMCLI.DLL            Security Accounts Manager Client DLL                Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\samcli.dll
      NETUTILS.DLL          Net Win32 API Helpers DLL                           Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\netutils.dll
      windows.storage.dll   Microsoft WinRT Storage API                         Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\windows.storage.dll
      Wldp.dll              Windows 锁定策略                                        Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\wldp.dll
      profapi.dll           User Profile Basic API                              Microsoft Corporation                               10.0.19041.844 (WinBuild.160101.0800)              C:\Windows\System32\profapi.dll
      SAMLIB.dll            SAM Library DLL                                     Microsoft Corporation                               10.0.19041.906 (WinBuild.160101.0800)              C:\Windows\System32\samlib.dll
      Hookesm.dll           Hookesm.dll                                         Beijing Rising Network Security Technology Co., Ltd.  1, 0, 0, 11                                        C:\Program Files (x86)\Rising\REC\ep\hookesm.dll
      fwdrvapp.dll           drvapp Dynamic Link Library                        Beijing Rising Network Security Technology Co., Ltd.  3.0.0.2                                            C:\Program Files (x86)\Rising\REC\xfw\fwdrvapp.dll
      esmdrv.dll            esmdrv.dll                                          Beijing Rising Network Security Technology Co., Ltd.  3.0.0.6                                            C:\Program Files (x86)\Rising\REC\xfw\esmdrv.dll
      WS2_32.dll            Windows Socket 2.0 32 位 DLL                         Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\ws2_32.dll
      comx3.dll             comx3 x86 or x64                                    Beijing Rising Information Technology Co., Ltd.     3.0.0.2                                            C:\Program Files (x86)\Rising\REC\ep\comx3.dll
      WINSTA.dll            Winstation Library                                  Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\winsta.dll
      sspicli.dll           Security Support Provider Interface                 Microsoft Corporation                               10.0.19041.906 (WinBuild.160101.0800)              C:\Windows\System32\sspicli.dll
      daggc.dll             daggc Dynamic Link Library                          Beijing Rising Network Security Technology Co., Ltd.  1, 0, 0, 5                                         C:\Program Files (x86)\Rising\REC\ep\daggc.dll
      appeng.dll            appeng Dynamic Link Library                         Beijing Rising Information Technology Co., Ltd.     3.0.0.3                                            C:\Program Files (x86)\Rising\REC\ep\rfm\appeng.dll
      moncache.dll          moncache Dynamic Link Library                       Beijing Rising Information Technology Co., Ltd.     3.0.0.13                                           C:\Program Files (x86)\Rising\REC\ep\rfm\moncache.dll
      ntmarta.dll           Windows NT MARTA 提供程序                               Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\ntmarta.dll
      rsnetsvr.dll          rsnetsvr                                            Beijing Rising Information Technology Co., Ltd.     3.0.0.20                                           C:\Program Files (x86)\Rising\REC\ep\rfm\rsnetsvr.dll
      WINTRUST.dll          Microsoft Trust Verification APIs                   Microsoft Corporation                               10.0.19041.804 (WinBuild.160101.0800)              C:\Windows\System32\wintrust.dll
      CRYPT32.dll           加密 API32                                            Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\crypt32.dll
      imagehlp.dll          Windows NT Image Helper                             Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\imagehlp.dll
      MSASN1.dll            ASN.1 Runtime APIs                                  Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\msasn1.dll
      mgclient.dll          mgclient                                            Beijing Rising Information Technology Co., Ltd.     3.0.0.4                                            C:\Program Files (x86)\Rising\REC\ep\rfm\mgclient.dll
      WSOCK32.dll           Windows Socket 32-Bit DLL                           Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\wsock32.dll
      dbghelp.dll           Windows Image Helper                                Microsoft Corporation                               10.0.19041.867 (WinBuild.160101.0800)              C:\Windows\System32\dbghelp.dll
      CRYPTBASE.DLL         Base cryptographic API DLL                          Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\CRYPTBASE.DLL
      napinsp.dll           电子邮件命名填充提供程序                                        Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\NapiNSP.dll
      pnrpnsp.dll           PNRP 命名空间提供程序                                       Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\pnrpnsp.dll
      wshbth.dll            Windows Sockets Helper DLL                          Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\wshbth.dll
      NLAapi.dll            Network Location Awareness 2                        Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\nlaapi.dll
      mswsock.dll           Microsoft Windows Sockets 2.0 服务提供程序                Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\mswsock.dll
      winrnr.dll            LDAP RnR Provider DLL                               Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\winrnr.dll
      fwpuclnt.dll          FWP/IPsec 用户模式 API                                  Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\FWPUCLNT.DLL
      bcrypt.dll            Windows 加密基元库                                       Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\bcrypt.dll
      rasadhlp.dll          Remote Access AutoDial Helper                       Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\rasadhlp.dll
      CRYPTSP.dll           Cryptographic Service Provider API                  Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\cryptsp.dll
      rsaenh.dll            Microsoft Enhanced Cryptographic Provider           Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\rsaenh.dll
      coml2.dll             Microsoft COM for Windows                           Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\coml2.dll
      rsstore.dll           RSStore                                             Beijing Rising Network Security Technology Co., Ltd.  3, 0, 0, 28                                        C:\Program Files (x86)\Rising\REC\xav\rsstore.dll
      xavsrv.dll            xavsrv Dynamic Link Library                         Beijing Rising Network Security Technology Co., Ltd.  3, 0, 1, 76                                        C:\Program Files (x86)\Rising\REC\xav\xavsrv.dll
      cloudqry.dll          Esm cloud query                                     Beijing Rising Information Technology Co., Ltd.                                                        C:\Program Files (x86)\Rising\REC\xav\cloudqry.dll
      WLDAP32.dll           Win32 LDAP API DLL                                  Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\Wldap32.dll
      cloudcom.dll          Cloud Provider DLL                                  Beijing Rising Network Security Technology Co., Ltd.  3, 0, 0, 5                                         C:\Program Files (x86)\Rising\REC\xav\cloudcom.dll
      FastDBDll.dll         FastDBDll Dynamic Link Library                      Beijing Rising Network Security Technology Co., Ltd.  3, 0, 0, 14                                        C:\Program Files (x86)\Rising\REC\xav\FastDBDll.dll
      KVEngine.dll          KVEngine Dynamic Link Library                       Beijing Rising Network Security Technology Co., Ltd.  3, 0, 0, 88                                        C:\Program Files (x86)\Rising\REC\xav\kvengine.dll
      filemon.dll           filemon Dynamic Link Library                        Beijing Rising Network Security Technology Co., Ltd.  3, 0, 1, 1                                         C:\Program Files (x86)\Rising\REC\xav\filemon.dll
      SETUPAPI.dll          Windows 安装程序 API                                    Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\setupapi.dll
      cfgmgr32.dll          Configuration Manager DLL                           Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\cfgmgr32.dll
      VERSION.dll           Version Checking and File Installation Libraries    Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\version.dll
      sfc.dll               Windows File Protection                             Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\sfc.dll
      SRVCLI.DLL            Server Service Client DLL                           Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\srvcli.dll
      sfc_os.DLL            Windows File Protection                             Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\sfc_os.dll
      filemonque.dll        filemonq Dynamic Link Library                       Beijing Rising Network Security Technology Co., Ltd.  3, 0, 0, 6                                         C:\Program Files (x86)\Rising\REC\xav\filemonque.dll
      WINMM.dll             MCI API DLL                                         Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\winmm.dll
      inetmib1.dll          Microsoft MIB-II subagent                           Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\inetmib1.dll
      snmpapi.dll           SNMP Utility Library                                Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\snmpapi.dll
      defmon.dll            主动防御模块                                              Beijing Rising Network Security Technology Co., Ltd.  3, 0, 0, 17                                        C:\Program Files (x86)\Rising\REC\xav\defmon.dll
      VirusAction.dll       VirusAct 动态链接库                                      Beijing Rising Information Technology Co., Ltd.     3.0.0.6                                            C:\Program Files (x86)\Rising\REC\xav\VirusAction.dll
      hotpatchcom.dll       HotPatchCom 动态链接库                                   Beijing Rising Information Technology Co., Ltd.     3.0.0.1                                            C:\Program Files (x86)\Rising\REC\xav\hotpatchcom.dll
      extortmon.dll         extortmo 动态链接库                                      Beijing Rising Network Security Technology Co., Ltd.  1, 0, 0, 5                                         C:\Program Files (x86)\Rising\REC\xav\extortmon.dll
      rsmnewplug.dll        RsmNewPlug Dynamic Link Library                     Beijing Rising Network Security Technology Co., Ltd.  3, 0, 0, 5                                         C:\Program Files (x86)\Rising\REC\xfw\rsmnewplug.dll
      rfwplug.dll           rfwplug 动态链接库                                       Beijing Rising Network Security Technology Co., Ltd.  3, 0, 0, 26                                        C:\Program Files (x86)\Rising\REC\xfw\rfwplug.dll
      softeng.dll           softeng Dynamic Link Library                        Beijing Rising Network Security Technology Co., Ltd.  3.0.0.3                                            C:\Program Files (x86)\Rising\REC\ep\common files\softeng.dll
      fwlog.dll             fwlog Dynamic Link Library                          Beijing Rising Network Security Technology Co., Ltd.  1, 0, 0, 58                                        C:\Program Files (x86)\Rising\REC\xfw\fwlog.dll
      fwsrv.dll             fwsrv 动态链接库                                         Beijing Rising Network Security Technology Co., Ltd.  3, 0, 0, 69                                        C:\Program Files (x86)\Rising\REC\xfw\fwsrv.dll
      WINHTTP.dll           Windows HTTP 服务                                     Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\winhttp.dll
      WININET.dll           Win32 的 Internet 扩展                                 Microsoft Corporation                               11.00.19041.1 (WinBuild.160101.0800)               C:\Windows\System32\wininet.dll
      mPorts.dll            get ports list                                      Beijing Rising Information Technology Co., Ltd.     24.0.0.3                                           c:\program files (x86)\Rising\REC\xfw\mports.dll
      dhcpcsvc6.DLL         DHCPv6 客户端                                          Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\dhcpcsvc6.DLL
      dhcpcsvc.DLL          DHCP 客户端服务                                          Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\dhcpcsvc.dll
      WINNSI.DLL            Network Store Information RPC interface             Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\winnsi.dll
      fwproxy.dll           Rising Personal FireWall Service                    Beijing Rising Network Security Technology Co., Ltd.  1, 0, 0, 50                                        c:\program files (x86)\Rising\REC\xfw\fwproxy.dll
      urlrule.dll           Rising AntiSpyware UrlRule  Library                 Beijing Rising Information Technology Co., Ltd.     24.0.0.2                                           c:\program files (x86)\Rising\REC\xfw\fwlib\urlrule.dll
      recomp.dll            component manager Dynamic Link Library              Beijing Rising Information Technology Co., Ltd.     24, 0, 0, 20                                       c:\program files (x86)\Rising\REC\xfw\fwlib\recomp.dll
      refs.dll              filesystem Dynamic Link Library                     Beijing Rising Information Technology Co., Ltd.     23, 0, 0, 7                                        c:\program files (x86)\Rising\REC\xfw\fwlib\refs.dll
      viruslib.dll          VirusLib Dynamic Link Library                       Beijing Rising Information Technology Co., Ltd.     23, 0, 0, 9                                        c:\program files (x86)\Rising\REC\xfw\fwlib\viruslib.dll
      relibldr.dll          libloader Dynamic Link Library                      Beijing Rising Information Technology Co., Ltd.     23, 0, 0, 7                                        c:\program files (x86)\Rising\REC\xfw\fwlib\relibldr.dll
      fwfish.dll            fishing Dynamic Link Library                        Beijing Rising Information Technology Co., Ltd.     23, 0, 0, 6                                        c:\program files (x86)\Rising\REC\xfw\fwlib\fwfish.dll
      fwcomp.dll            component manager Dynamic Link Library              Beijing Rising Information Technology Co., Ltd.     23, 0, 0, 11                                       c:\program files (x86)\Rising\REC\xfw\fwlib\fwcomp.dll
      fwfs.dll              filesystem Dynamic Link Library                     Beijing Rising Information Technology Co., Ltd.     23, 0, 0, 5                                        c:\program files (x86)\Rising\REC\xfw\fwlib\fwfs.dll
      fwvirlib.dll          VirusLib Dynamic Link Library                       Beijing Rising Information Technology Co., Ltd.     23, 0, 0, 5                                        c:\program files (x86)\Rising\REC\xfw\fwlib\fwvirlib.dll
      fwlibldr.dll          libloader Dynamic Link Library                      Beijing Rising Information Technology Co., Ltd.     23, 0, 0, 3                                        c:\program files (x86)\Rising\REC\xfw\fwlib\fwlibldr.dll
      rfwrule.dll                                                               Beijing Rising Information Technology Co., Ltd.     24.0.0.3                                           C:\Program Files (x86)\Rising\REC\xfw\rfwrule.dll
      rsmailmon.dll         MailMon                                             Beijing Rising Information Technology Co., Ltd.     1.0.0.51                                           C:\Program Files (x86)\Rising\REC\xfw\rsmailmon.dll
      apphelp.dll           应用程序兼容性客户端库                                         Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\apphelp.dll
      rxruntim.dll          rxruntime                                           Beijing Rising Network Security Technology Co., Ltd.  25.0.1.1                                           C:\Program Files (x86)\Rising\REC\xav\rego\rxruntim.dll
      rxmss.dll             rxmss                                               Beijing Rising Network Security Technology Co., Ltd.  25.0.1.2                                           C:\Program Files (x86)\Rising\REC\xav\rego\rxmss.dll
      rxcore.dll            rxcore                                              Beijing Rising Network Security Technology Co., Ltd.  25.0.1.4                                           C:\Program Files (x86)\Rising\REC\xav\rego\rxcore.dll
      rxcoml.dll            rxcoml                                              Beijing Rising Network Security Technology Co., Ltd.  25.0.0.20                                          C:\Program Files (x86)\Rising\REC\xav\rego\rxcoml.dll
      rxsig64.dll           rxsig64                                             Beijing Rising Network Security Technology Co., Ltd.  25.0.0.20                                          C:\Program Files (x86)\Rising\REC\xav\rego\rxsig64.dll
      rxffr.dll             rxffr                                               Beijing Rising Network Security Technology Co., Ltd.  25.0.1.4                                           C:\Program Files (x86)\Rising\REC\xav\rego\rxffr.dll
      rxfsm.dll             rxfsm                                               Beijing Rising Network Security Technology Co., Ltd.  25.0.0.28                                          C:\Program Files (x86)\Rising\REC\xav\rego\rxfsm.dll
      rxxdu0.dll            rxxdu0                                              Beijing Rising Network Security Technology Co., Ltd.  25.0.1.13                                          C:\Program Files (x86)\Rising\REC\xav\rego\rxxdu0.dll
      scanpe.dll            scanpe                                              Beijing Rising Network Security Technology Co., Ltd.  25.0.0.21                                          C:\Program Files (x86)\Rising\REC\xav\rego\scanpe.dll
      rxvision.dll          rxvision                                            Beijing Rising Network Security Technology Co., Ltd.  25.0.0.18                                          C:\Program Files (x86)\Rising\REC\xav\rego\rxvision.dll
      rxxman.dll            rxxman                                              Beijing Rising Network Security Technology Co., Ltd.  25.0.0.26                                          C:\Program Files (x86)\Rising\REC\xav\rego\rxxman.dll
      uroutine.dll          uroutine                                            Beijing Rising Network Security Technology Co., Ltd.  25.0.0.32                                          C:\Program Files (x86)\Rising\REC\xav\rego\uroutine.dll
      luaport.dll           xavsrv lua support library                          Beijing Rising Network Security Technology Co., Ltd.  1.0.0.12                                           C:\Program Files (x86)\Rising\REC\xav\rego\luaport.dll
      sxs.dll               Fusion 2.5                                          Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\sxs.dll
      wbemprox.dll          WMI                                                 Microsoft Corporation                               10.0.19041.844 (WinBuild.160101.0800)              C:\Windows\System32\wbem\wbemprox.dll
      wbemcomn.dll          WMI                                                 Microsoft Corporation                               10.0.19041.844 (WinBuild.160101.0800)              C:\Windows\System32\wbemcomn.dll
      xavport.dll           TODO: <File description>                            Beijing Rising Network Security Technology Co., Ltd.  1.0.0.5                                            C:\Program Files (x86)\Rising\REC\xav\xavport.dll
      ATL90.DLL             ATL Module for Windows (Unicode)                    Microsoft Corporation                               9.00.30729.01                                      C:\Windows\WinSxS\x86_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.1_none_e29d1181971ae11e\ATL90.dll
      pearc.dll             pearchive Dynamic Link Library                      Beijing Rising Information Technology Co., Ltd.     24, 0, 0, 9                                        C:\Program Files (x86)\Rising\REC\xav\pearc.dll
      DEVOBJ.dll            Device Information Set DLL                          Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\devobj.dll
      cscapi.dll            Offline Files Win32 API                             Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\cscapi.dll
      rsftppmon.dll         rsftppmon 动态链接库                                     Beijing Rising Information Technology Co., Ltd.     1, 0, 0, 4                                         c:\program files (x86)\Rising\REC\xfw\rsftppmon.dll
      scanexec.dll          scanexec                                            Beijing Rising Network Security Technology Co., Ltd.  25.0.0.21                                          C:\Program Files (x86)\Rising\REC\xav\rego\scanexec.dll
      vex86.dll             vex86                                               Beijing Rising Network Security Technology Co., Ltd.  25.0.0.22                                          C:\Program Files (x86)\Rising\REC\xav\rego\vex86.dll
      methodex.dll          MethodEx                                            Beijing Rising Network Security Technology Co., Ltd.  25.0.0.22                                          C:\Program Files (x86)\Rising\REC\xav\rego\methodex.dll
      scanex.dll            scanex                                              Beijing Rising Network Security Technology Co., Ltd.  25.0.0.38                                          C:\Program Files (x86)\Rising\REC\xav\rego\scanex.dll
      scanelf.dll           scanelf                                             Beijing Rising Network Security Technology Co., Ltd.  25.0.0.18                                          C:\Program Files (x86)\Rising\REC\xav\rego\scanelf.dll
      rxarch.dll            rxarch                                              Beijing Rising Network Security Technology Co., Ltd.  25.0.0.69                                          C:\Program Files (x86)\Rising\REC\xav\rego\rxarch.dll
      scansct.dll           scansct                                             Beijing Rising Network Security Technology Co., Ltd.  25.0.0.21                                          C:\Program Files (x86)\Rising\REC\xav\rego\scansct.dll
      rxoffice.dll          rxoffice                                            Beijing Rising Network Security Technology Co., Ltd.  25.0.0.59                                          C:\Program Files (x86)\Rising\REC\xav\rego\rxoffice.dll
      scanmac.dll           scanmac                                             Beijing Rising Network Security Technology Co., Ltd.  25.0.0.24                                          C:\Program Files (x86)\Rising\REC\xav\rego\scanmac.dll
      rxwinpe.dll           rxwinpe                                             Beijing Rising Network Security Technology Co., Ltd.  25.0.0.37                                          C:\Program Files (x86)\Rising\REC\xav\rego\rxwinpe.dll
      urutils.dll           urutils                                             Beijing Rising Network Security Technology Co., Ltd.  25.0.0.20                                          C:\Program Files (x86)\Rising\REC\xav\rego\urutils.dll
      revm.dll              revm                                                Beijing Rising Network Security Technology Co., Ltd.  25.0.0.20                                          C:\Program Files (x86)\Rising\REC\xav\rego\revm.dll
      gpapi.dll             组策略客户端 API                                          Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\gpapi.dll
      MSISIP.DLL            MSI Signature SIP Provider                          Microsoft Corporation                               5.0.19041.928 (WinBuild.160101.0800)               C:\Windows\System32\msisip.dll
      wshext.dll            Microsoft ? Shell Extension for Windows Script Host  Microsoft Corporation                               5.812.10240.16384                                  C:\Windows\System32\wshext.dll
      AppxSip.dll           Appx Subject Interface Package                      Microsoft Corporation                               10.0.19041.746 (WinBuild.160101.0800)              C:\Windows\System32\AppxSip.dll
      OpcServices.DLL       Native Code OPC Services Library                    Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\OpcServices.DLL
      urlmon.dll            Win32 的 OLE32 扩展                                    Microsoft Corporation                               11.00.19041.1 (WinBuild.160101.0800)               C:\Windows\System32\urlmon.dll
      XmlLite.dll           Microsoft XmlLite Library                           Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\xmllite.dll
      iertutil.dll          Internet Explorer 的运行时实用程序                          Microsoft Corporation                               11.00.19041.1 (WinBuild.160101.0800)               C:\Windows\System32\iertutil.dll
      pwrshsip.dll          Crypto SIP provider for signing and verifying PowerShell script files (.ps1/.ps1xml)  Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\WindowsPowerShell\v1.0\pwrshsip.dll
      EsdSip.dll            Crypto SIP provider for signing and verifying .esd Electronic Software Distribution files  Microsoft Corporation                               10.0.19041.746 (WinBuild.160101.0800)              C:\Windows\System32\EsdSip.dll


eptray.exe           116        客户端                                                C:\Program Files (x86)\Rising\REC\ep\eptray.exe                                                                                                                                                                                                                   "C:\Program Files (x86)\Rising\REC\ep\eptray.exe" -service
      eptray.exe            客户端                                                 Beijing Rising Network Security Technology Co., Ltd.  5, 0, 0, 2                                         C:\Program Files (x86)\Rising\REC\ep\eptray.exe
      ntdll.dll             NT 层 DLL                                            Microsoft Corporation                               10.0.19041.804 (WinBuild.160101.0800)              C:\Windows\System32\ntdll.dll
      KERNEL32.DLL          Windows NT 基本 API 客户端 DLL                           Microsoft Corporation                               10.0.19041.804 (WinBuild.160101.0800)              C:\Windows\System32\kernel32.dll
      KERNELBASE.dll        Windows NT 基本 API 客户端 DLL                           Microsoft Corporation                               10.0.19041.804 (WinBuild.160101.0800)              C:\Windows\System32\KERNELBASE.dll
      ADVAPI32.dll          高级 Windows 32 基本 API                                Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\advapi32.dll
      msvcrt.dll            Windows NT CRT DLL                                  Microsoft Corporation                               7.0.19041.546 (WinBuild.160101.0800)               C:\Windows\System32\msvcrt.dll
      sechost.dll           Host for SCM/SDDL/LSA Lookup APIs                   Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\sechost.dll
      RPCRT4.dll            远程过程调用运行时                                           Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\rpcrt4.dll
      SHELL32.dll           Windows Shell 公用 DLL                                Microsoft Corporation                               10.0.19041.329 (WinBuild.160101.0800)              C:\Windows\System32\shell32.dll
      msvcp_win.dll         Microsoft? C Runtime Library                        Microsoft Corporation                               10.0.19041.789 (WinBuild.160101.0800)              C:\Windows\System32\msvcp_win.dll
      ucrtbase.dll          Microsoft? C Runtime Library                        Microsoft Corporation                               10.0.19041.789 (WinBuild.160101.0800)              C:\Windows\System32\ucrtbase.dll
      USER32.dll            多用户 Windows 用户 API 客户端 DLL                          Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\user32.dll
      win32u.dll            Win32u                                              Microsoft Corporation                               10.0.19041.906 (WinBuild.160101.0800)              C:\Windows\System32\win32u.dll
      GDI32.dll             GDI Client DLL                                      Microsoft Corporation                               10.0.19041.746 (WinBuild.160101.0800)              C:\Windows\System32\gdi32.dll
      gdi32full.dll         GDI Client DLL                                      Microsoft Corporation                               10.0.19041.928 (WinBuild.160101.0800)              C:\Windows\System32\gdi32full.dll
      ole32.dll             用于 Windows 的 Microsoft OLE                          Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\ole32.dll
      combase.dll           用于 Windows 的 Microsoft COM                          Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\combase.dll
      SHLWAPI.dll           外壳简易实用工具库                                           Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\shlwapi.dll
      MSVCP90.dll           Microsoft? C++ Runtime Library                      Microsoft Corporation                               9.00.30729.9625                                    C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9625_none_508ef7e4bcbbe589\msvcp90.dll
      MSVCR90.dll           Microsoft? C Runtime Library                        Microsoft Corporation                               9.00.30729.9625                                    C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9625_none_508ef7e4bcbbe589\msvcr90.dll
      IMM32.DLL             Multi-User Windows IMM32 API Client DLL             Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\imm32.dll
      kernel.appcore.dll    AppModel API Host                                   Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\kernel.appcore.dll
      bcryptPrimitives.dll  Windows Cryptographic Primitives Library            Microsoft Corporation                               10.0.19041.662 (WinBuild.160101.0800)              C:\Windows\System32\bcryptPrimitives.dll
      uxtheme.dll           Microsoft UxTheme 库                                 Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\uxtheme.dll
      stdlog.dll            Beijing Rising Information Technology Co., Ltd.     Beijing Rising Information Technology Co., Ltd.     3.0.0.10                                           C:\Program Files (x86)\Rising\REC\ep\stdlog.dll
      Syslay.dll            Syslay                                              Beijing Rising Information Technology Co., Ltd.     3.0.0.3                                            C:\Program Files (x86)\Rising\REC\ep\syslay.dll
      shcore.dll            SHCORE                                              Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\SHCore.dll
      rscom.dll             rscom for rsdk                                      Beijing Rising Network Security Technology Co., Ltd.  3.0.0.13                                           C:\Program Files (x86)\Rising\REC\ep\Common Files\rscom.dll
      PSAPI.DLL             Process Status Helper                               Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\psapi.dll
      WTSAPI32.dll          Windows Remote Desktop Session Host Server SDK APIs  Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\wtsapi32.dll
      USERENV.dll           Userenv                                             Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\userenv.dll
      rsxml3w.dll           rsxml for rsdk                                      Beijing Rising Network Security Technology Co., Ltd.  3.0.0.4                                            C:\Program Files (x86)\Rising\REC\ep\Common Files\rsxml3w.dll
      traywnd.dll           traywnd for rsdk                                    Beijing Rising Information Technology Co., Ltd.     3.0.0.4                                            C:\Program Files (x86)\Rising\REC\ep\Common Files\traywnd.dll
      MSCTF.dll             MSCTF 服务器 DLL                                       Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\msctf.dll
      OLEAUT32.dll          OLEAUT32.DLL                                        Microsoft Corporation                               10.0.19041.804 (WinBuild.160101.0800)              C:\Windows\System32\oleaut32.dll
      msc.dll               MSC Module                                          Beijing Rising Information Technology Co., Ltd.     3.0.0.2                                            C:\Program Files (x86)\Rising\REC\ep\Common Files\msc.dll
      envinfo.dll           EnvInfo Dynamic Link Library                        Beijing Rising Network Security Technology Co., Ltd.  3, 0, 0, 12                                        C:\Program Files (x86)\Rising\REC\ep\envinfo.dll
      mutexmgr.dll          mutexmgr Dynamic Link Library                       Beijing Rising Network Security Technology Co., Ltd.  3.0.0.8                                            C:\Program Files (x86)\Rising\REC\ep\Common Files\mutexmgr.dll
      managedb.dll          managedb Dynamic Link Library                       Beijing Rising Information Technology Co., Ltd.     3.0.0.11                                           C:\Program Files (x86)\Rising\REC\ep\Common Files\managedb.dll
      EpStorage.dll         EpStorag Dynamic Link Library                       Beijing Rising Network Security Technology Co., Ltd.  1.0.0.71                                           C:\Program Files (x86)\Rising\REC\ep\EpStorage.dll
      endpoint.dll          endpoint Dynamic Link Library                       Beijing Rising Network Security Technology Co., Ltd.  5, 0, 0, 11                                        C:\Program Files (x86)\Rising\REC\ep\endpoint.dll
      WS2_32.dll            Windows Socket 2.0 32 位 DLL                         Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\ws2_32.dll
      duilib3.dll           duilib                                              Beijing Rising Network Security Technology Co., Ltd.  3, 0, 0, 37                                        C:\Program Files (x86)\Rising\REC\ep\duilib3.dll
      IPHLPAPI.DLL          IP 帮助程序 API                                         Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\IPHLPAPI.DLL
      MSIMG32.dll           GDIEXT Client DLL                                   Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\msimg32.dll
      COMCTL32.dll          用户体验控件库                                             Microsoft Corporation                               6.10 (WinBuild.160101.0800)                        C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.844_none_11adecdf30011423\comctl32.dll
      gdiplus.dll           Microsoft GDI+                                      Microsoft Corporation                               10.0.19041.928 (WinBuild.160101.0800)              C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.928_none_429ce31a8a8fefd2\GdiPlus.dll
      msgmgrui.dll          msgmgrui Dynamic Link Library                       Beijing Rising Network Security Technology Co., Ltd.  5, 0, 0, 3                                         C:\Program Files (x86)\Rising\REC\ep\msgmgr\msgmgrui.dll
      FastDBDll.dll         FastDBDll Dynamic Link Library                      Beijing Rising Network Security Technology Co., Ltd.  3, 0, 0, 14                                        C:\Program Files (x86)\Rising\REC\xav\FastDBDll.dll
      xavsrv.dll            xavsrv Dynamic Link Library                         Beijing Rising Network Security Technology Co., Ltd.  3, 0, 1, 76                                        C:\Program Files (x86)\Rising\REC\xav\xavsrv.dll
      NETAPI32.dll          Net Win32 API DLL                                   Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\netapi32.dll
      NETUTILS.DLL          Net Win32 API Helpers DLL                           Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\netutils.dll
      SAMCLI.DLL            Security Accounts Manager Client DLL                Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\samcli.dll
      windows.storage.dll   Microsoft WinRT Storage API                         Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\windows.storage.dll
      Wldp.dll              Windows 锁定策略                                        Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\wldp.dll
      profapi.dll           User Profile Basic API                              Microsoft Corporation                               10.0.19041.844 (WinBuild.160101.0800)              C:\Windows\System32\profapi.dll
      SAMLIB.dll            SAM Library DLL                                     Microsoft Corporation                               10.0.19041.906 (WinBuild.160101.0800)              C:\Windows\System32\samlib.dll
      comx3.dll             comx3 x86 or x64                                    Beijing Rising Information Technology Co., Ltd.     3.0.0.2                                            C:\Program Files (x86)\Rising\REC\ep\comx3.dll
      WINSTA.dll            Winstation Library                                  Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\winsta.dll
      sspicli.dll           Security Support Provider Interface                 Microsoft Corporation                               10.0.19041.906 (WinBuild.160101.0800)              C:\Windows\System32\sspicli.dll
      xavmon.dll            xavmon Dynamic Link Library                         Beijing Rising Network Security Technology Co., Ltd.  5, 0, 0, 1                                         C:\Program Files (x86)\Rising\REC\xav\xavmon.dll
      SETUPAPI.dll          Windows 安装程序 API                                    Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\setupapi.dll
      cfgmgr32.dll          Configuration Manager DLL                           Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\cfgmgr32.dll
      bcrypt.dll            Windows 加密基元库                                       Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\bcrypt.dll
      countop.dll           countop                                             Beijing Rising Information Technology Co., Ltd.                                                        C:\Program Files (x86)\Rising\REC\xav\countop.dll
      Riched20.dll          Rich Text Edit Control, v3.1                        Microsoft Corporation                               5.31.23.1231                                       C:\Windows\System32\riched20.dll
      USP10.dll             Uniscribe Unicode script processor                  Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\usp10.dll
      msls31.dll            Microsoft Line Services library file                Microsoft Corporation                               3.10.349.0                                         C:\Windows\System32\msls31.dll
      authmgr.dll                                                               Beijing Rising Information Technology Co., Ltd.     1.0.0.15                                           C:\Program Files (x86)\Rising\REC\ep\authmgr.dll
      ATL90.DLL             ATL Module for Windows (Unicode)                    Microsoft Corporation                               9.00.30729.01                                      C:\Windows\WinSxS\x86_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.1_none_e29d1181971ae11e\ATL90.dll
      hid.dll               Hid 用户库                                             Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\hid.dll
      TextShaping.dll                                                                                                                                                                  C:\Windows\System32\TextShaping.dll
      WindowsCodecs.dll     Microsoft Windows Codecs Library                    Microsoft Corporation                               10.0.19041.928 (WinBuild.160101.0800)              C:\Windows\System32\WindowsCodecs.dll
      PROPSYS.dll           Microsoft 属性系统                                      Microsoft Corporation                               7.0.19041.1 (WinBuild.160101.0800)                 C:\Windows\System32\propsys.dll
      clbcatq.dll           COM+ Configuration Catalog                          Microsoft Corporation                               2001.12.10941.16384 (WinBuild.160101.0800)         C:\Windows\System32\clbcatq.dll
      edputil.dll           EDP 实用程序                                            Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\edputil.dll
      Windows.StateRepositoryPS.dll  Windows StateRepository Proxy/Stub Server           Microsoft Corporation                               10.0.19041.844 (WinBuild.160101.0800)              C:\Windows\System32\Windows.StateRepositoryPS.dll
      urlmon.dll            Win32 的 OLE32 扩展                                    Microsoft Corporation                               11.00.19041.1 (WinBuild.160101.0800)               C:\Windows\System32\urlmon.dll
      iertutil.dll          Internet Explorer 的运行时实用程序                          Microsoft Corporation                               11.00.19041.1 (WinBuild.160101.0800)               C:\Windows\System32\iertutil.dll
      wintypes.dll          Windows 基本类型 DLL                                    Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\WinTypes.dll
      appresolver.dll       应用解析程序                                              Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\appresolver.dll
      SLC.dll               软件授权客户端 Dll                                         Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\slc.dll
      Bcp47Langs.dll        BCP47 Language Classes                              Microsoft Corporation                               10.0.19041.746 (WinBuild.160101.0800)              C:\Windows\System32\Bcp47Langs.dll
      sppc.dll              软件授权客户端 Dll                                         Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\sppc.dll
      OneCoreCommonProxyStub.dll  OneCore Common Proxy Stub                           Microsoft Corporation                               10.0.19041.610 (WinBuild.160101.0800)              C:\Windows\System32\OneCoreCommonProxyStub.dll
      OneCoreUAPCommonProxyStub.dll  OneCoreUAP Common Proxy Stub                        Microsoft Corporation                               10.0.19041.928 (WinBuild.160101.0800)              C:\Windows\System32\OneCoreUAPCommonProxyStub.dll
      textinputframework.dll  "TextInputFramework.DYNLINK"                        Microsoft Corporation                               10.0.19041.906 (WinBuild.160101.0800)              C:\Windows\System32\textinputframework.dll
      CoreMessaging.dll     Microsoft CoreMessaging Dll                         Microsoft Corporation                               10.0.19041.867                                     C:\Windows\System32\CoreMessaging.dll
      CoreUIComponents.dll  Microsoft Core UI Components Dll                    Microsoft Corporation                               10.0.19041.546                                     C:\Windows\System32\CoreUIComponents.dll
      ntmarta.dll           Windows NT MARTA 提供程序                               Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\ntmarta.dll


ep64.exe             3284                                                          C:\Program Files (x86)\Rising\REC\ep\x64\ep64.exe                                                                                                                                                                                                                 C:\Program Files (x86)\Rising\REC\ep\x64\ep64.exe


svchost.exe          756                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          6132                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          4564                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          9200                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


SystemSettingsBroker.exe 6632                                                          C:\Windows\System32\SystemSettingsBroker.exe                                                                                                                                                                                                                      C:\Windows\System32\SystemSettingsBroker.exe


Microsoft.Photos.exe 6396                                                          C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe                                                                                                                                                  C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe


RuntimeBroker.exe    7644                                                          C:\Windows\System32\RuntimeBroker.exe                                                                                                                                                                                                                             C:\Windows\System32\RuntimeBroker.exe


svchost.exe          7292                                                                                                                                                                                                                                                                                                                            


svchost.exe          6512                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


audiodg.exe          5140                                                          C:\Windows\System32\audiodg.exe                                                                                                                                                                                                                                   C:\Windows\System32\audiodg.exe


esmmain.exe          856        客户端主程序                                             C:\Program Files (x86)\Rising\REC\ep\esmmain.exe                                                                                                                                                                                                                  "C:\Program Files (x86)\Rising\REC\ep\esmmain.exe" ItemScan={E09A26B1-FAB2-47c8-838F-3EFC4AE84BC8}
      esmmain.exe           客户端主程序                                              Beijing Rising Network Security Technology Co., Ltd.  5, 0, 0, 1                                         C:\Program Files (x86)\Rising\REC\ep\esmmain.exe
      ntdll.dll             NT 层 DLL                                            Microsoft Corporation                               10.0.19041.804 (WinBuild.160101.0800)              C:\Windows\System32\ntdll.dll
      KERNEL32.DLL          Windows NT 基本 API 客户端 DLL                           Microsoft Corporation                               10.0.19041.804 (WinBuild.160101.0800)              C:\Windows\System32\kernel32.dll
      KERNELBASE.dll        Windows NT 基本 API 客户端 DLL                           Microsoft Corporation                               10.0.19041.804 (WinBuild.160101.0800)              C:\Windows\System32\KERNELBASE.dll
      USER32.dll            多用户 Windows 用户 API 客户端 DLL                          Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\user32.dll
      win32u.dll            Win32u                                              Microsoft Corporation                               10.0.19041.906 (WinBuild.160101.0800)              C:\Windows\System32\win32u.dll
      GDI32.dll             GDI Client DLL                                      Microsoft Corporation                               10.0.19041.746 (WinBuild.160101.0800)              C:\Windows\System32\gdi32.dll
      gdi32full.dll         GDI Client DLL                                      Microsoft Corporation                               10.0.19041.928 (WinBuild.160101.0800)              C:\Windows\System32\gdi32full.dll
      msvcp_win.dll         Microsoft? C Runtime Library                        Microsoft Corporation                               10.0.19041.789 (WinBuild.160101.0800)              C:\Windows\System32\msvcp_win.dll
      ucrtbase.dll          Microsoft? C Runtime Library                        Microsoft Corporation                               10.0.19041.789 (WinBuild.160101.0800)              C:\Windows\System32\ucrtbase.dll
      ADVAPI32.dll          高级 Windows 32 基本 API                                Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\advapi32.dll
      msvcrt.dll            Windows NT CRT DLL                                  Microsoft Corporation                               7.0.19041.546 (WinBuild.160101.0800)               C:\Windows\System32\msvcrt.dll
      sechost.dll           Host for SCM/SDDL/LSA Lookup APIs                   Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\sechost.dll
      RPCRT4.dll            远程过程调用运行时                                           Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\rpcrt4.dll
      SHELL32.dll           Windows Shell 公用 DLL                                Microsoft Corporation                               10.0.19041.329 (WinBuild.160101.0800)              C:\Windows\System32\shell32.dll
      ole32.dll             用于 Windows 的 Microsoft OLE                          Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\ole32.dll
      combase.dll           用于 Windows 的 Microsoft COM                          Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\combase.dll
      SHLWAPI.dll           外壳简易实用工具库                                           Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\shlwapi.dll
      MSVCP90.dll           Microsoft? C++ Runtime Library                      Microsoft Corporation                               9.00.30729.9625                                    C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9625_none_508ef7e4bcbbe589\msvcp90.dll
      MSVCR90.dll           Microsoft? C Runtime Library                        Microsoft Corporation                               9.00.30729.9625                                    C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9625_none_508ef7e4bcbbe589\msvcr90.dll
      IMM32.DLL             Multi-User Windows IMM32 API Client DLL             Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\imm32.dll
      kernel.appcore.dll    AppModel API Host                                   Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\kernel.appcore.dll
      bcryptPrimitives.dll  Windows Cryptographic Primitives Library            Microsoft Corporation                               10.0.19041.662 (WinBuild.160101.0800)              C:\Windows\System32\bcryptPrimitives.dll
      uxtheme.dll           Microsoft UxTheme 库                                 Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\uxtheme.dll
      stdlog.dll            Beijing Rising Information Technology Co., Ltd.     Beijing Rising Information Technology Co., Ltd.     3.0.0.10                                           C:\Program Files (x86)\Rising\REC\ep\stdlog.dll
      Syslay.dll            Syslay                                              Beijing Rising Information Technology Co., Ltd.     3.0.0.3                                            C:\Program Files (x86)\Rising\REC\ep\syslay.dll
      shcore.dll            SHCORE                                              Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\SHCore.dll
      rscom.dll             rscom for rsdk                                      Beijing Rising Network Security Technology Co., Ltd.  3.0.0.13                                           C:\Program Files (x86)\Rising\REC\ep\Common Files\rscom.dll
      PSAPI.DLL             Process Status Helper                               Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\psapi.dll
      USERENV.dll           Userenv                                             Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\userenv.dll
      WTSAPI32.dll          Windows Remote Desktop Session Host Server SDK APIs  Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\wtsapi32.dll
      rsxml3w.dll           rsxml for rsdk                                      Beijing Rising Network Security Technology Co., Ltd.  3.0.0.4                                            C:\Program Files (x86)\Rising\REC\ep\Common Files\rsxml3w.dll
      mainui.dll            mainui Dynamic Link Library                         Beijing Rising Network Security Technology Co., Ltd.  5, 0, 0, 44                                        C:\Program Files (x86)\Rising\REC\ep\mainui.dll
      OLEAUT32.dll          OLEAUT32.DLL                                        Microsoft Corporation                               10.0.19041.804 (WinBuild.160101.0800)              C:\Windows\System32\oleaut32.dll
      duilib3.dll           duilib                                              Beijing Rising Network Security Technology Co., Ltd.  3, 0, 0, 37                                        C:\Program Files (x86)\Rising\REC\ep\duilib3.dll
      gdiplus.dll           Microsoft GDI+                                      Microsoft Corporation                               10.0.19041.928 (WinBuild.160101.0800)              C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.928_none_429ce31a8a8fefd2\GdiPlus.dll
      COMCTL32.dll          用户体验控件库                                             Microsoft Corporation                               6.10 (WinBuild.160101.0800)                        C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.844_none_11adecdf30011423\comctl32.dll
      MSIMG32.dll           GDIEXT Client DLL                                   Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\msimg32.dll
      mutexmgr.dll          mutexmgr Dynamic Link Library                       Beijing Rising Network Security Technology Co., Ltd.  3.0.0.8                                            C:\Program Files (x86)\Rising\REC\ep\Common Files\mutexmgr.dll
      comx3.dll             comx3 x86 or x64                                    Beijing Rising Information Technology Co., Ltd.     3.0.0.2                                            C:\Program Files (x86)\Rising\REC\ep\comx3.dll
      WINSTA.dll            Winstation Library                                  Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\winsta.dll
      sspicli.dll           Security Support Provider Interface                 Microsoft Corporation                               10.0.19041.906 (WinBuild.160101.0800)              C:\Windows\System32\sspicli.dll
      msc.dll               MSC Module                                          Beijing Rising Information Technology Co., Ltd.     3.0.0.2                                            C:\Program Files (x86)\Rising\REC\ep\Common Files\msc.dll
      agent.dll             Agent Dynamic Link Library                          Beijing Rising Network Security Technology Co., Ltd.  3.0.0.60                                           C:\Program Files (x86)\Rising\REC\ep\agent\agent.dll
      WS2_32.dll            Windows Socket 2.0 32 位 DLL                         Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\ws2_32.dll
      IPHLPAPI.DLL          IP 帮助程序 API                                         Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\IPHLPAPI.DLL
      DNSAPI.dll            DNS 客户端 API DLL                                     Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\dnsapi.dll
      NSI.dll               NSI User-mode interface DLL                         Microsoft Corporation                               10.0.19041.610 (WinBuild.160101.0800)              C:\Windows\System32\nsi.dll
      envinfo.dll           EnvInfo Dynamic Link Library                        Beijing Rising Network Security Technology Co., Ltd.  3, 0, 0, 12                                        C:\Program Files (x86)\Rising\REC\ep\envinfo.dll
      MSCTF.dll             MSCTF 服务器 DLL                                       Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\msctf.dll
      managedb.dll          managedb Dynamic Link Library                       Beijing Rising Information Technology Co., Ltd.     3.0.0.11                                           C:\Program Files (x86)\Rising\REC\ep\Common Files\managedb.dll
      EpStorage.dll         EpStorag Dynamic Link Library                       Beijing Rising Network Security Technology Co., Ltd.  1.0.0.71                                           C:\Program Files (x86)\Rising\REC\ep\EpStorage.dll
      fcheck.dll            fcheck Dynamic Link Library                         Beijing Rising Network Security Technology Co., Ltd.  1, 0, 0, 4                                         C:\Program Files (x86)\Rising\REC\ep\fcheck.dll
      FastDBDll.dll         FastDBDll Dynamic Link Library                      Beijing Rising Network Security Technology Co., Ltd.  3, 0, 0, 14                                        C:\Program Files (x86)\Rising\REC\xav\FastDBDll.dll
      xavsrv.dll            xavsrv Dynamic Link Library                         Beijing Rising Network Security Technology Co., Ltd.  3, 0, 1, 76                                        C:\Program Files (x86)\Rising\REC\xav\xavsrv.dll
      NETAPI32.dll          Net Win32 API DLL                                   Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\netapi32.dll
      NETUTILS.DLL          Net Win32 API Helpers DLL                           Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\netutils.dll
      SAMCLI.DLL            Security Accounts Manager Client DLL                Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\samcli.dll
      windows.storage.dll   Microsoft WinRT Storage API                         Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\windows.storage.dll
      Wldp.dll              Windows 锁定策略                                        Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\wldp.dll
      profapi.dll           User Profile Basic API                              Microsoft Corporation                               10.0.19041.844 (WinBuild.160101.0800)              C:\Windows\System32\profapi.dll
      SAMLIB.dll            SAM Library DLL                                     Microsoft Corporation                               10.0.19041.906 (WinBuild.160101.0800)              C:\Windows\System32\samlib.dll
      xavui.dll             xavui Dynamic Link Library                          Beijing Rising Network Security Technology Co., Ltd.  5, 0, 0, 27                                        C:\Program Files (x86)\Rising\REC\xav\xavui.dll
      COMDLG32.dll          Common Dialogs DLL                                  Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\comdlg32.dll
      MPR.dll               多提供程序路由器 DLL                                        Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\mpr.dll
      xfwui.dll             xfwui Dynamic Link Library                          Beijing Rising Network Security Technology Co., Ltd.  5, 0, 0, 23                                        C:\Program Files (x86)\Rising\REC\xfw\xfwui.dll
      SRVCLI.DLL            Server Service Client DLL                           Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\srvcli.dll
      authmgr.dll                                                               Beijing Rising Information Technology Co., Ltd.     1.0.0.15                                           C:\Program Files (x86)\Rising\REC\ep\authmgr.dll
      ATL90.DLL             ATL Module for Windows (Unicode)                    Microsoft Corporation                               9.00.30729.01                                      C:\Windows\WinSxS\x86_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.1_none_e29d1181971ae11e\ATL90.dll
      WindowsCodecs.dll     Microsoft Windows Codecs Library                    Microsoft Corporation                               10.0.19041.928 (WinBuild.160101.0800)              C:\Windows\System32\WindowsCodecs.dll
      bcrypt.dll            Windows 加密基元库                                       Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\bcrypt.dll
      TextShaping.dll                                                                                                                                                                  C:\Windows\System32\TextShaping.dll
      secur32.dll           Security Support Provider Interface                 Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\secur32.dll
      mswsock.dll           Microsoft Windows Sockets 2.0 服务提供程序                Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\mswsock.dll
      textinputframework.dll  "TextInputFramework.DYNLINK"                        Microsoft Corporation                               10.0.19041.906 (WinBuild.160101.0800)              C:\Windows\System32\textinputframework.dll
      CoreUIComponents.dll  Microsoft Core UI Components Dll                    Microsoft Corporation                               10.0.19041.546                                     C:\Windows\System32\CoreUIComponents.dll
      CoreMessaging.dll     Microsoft CoreMessaging Dll                         Microsoft Corporation                               10.0.19041.867                                     C:\Windows\System32\CoreMessaging.dll
      wintypes.dll          Windows 基本类型 DLL                                    Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\WinTypes.dll
      ntmarta.dll           Windows NT MARTA 提供程序                               Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\ntmarta.dll
      sohoup.dll            sohoup Dynamic Link Library                         Beijing Rising Network Security Technology Co., Ltd.  1.0.0.43                                           C:\Program Files (x86)\Rising\REC\ep\rua\sohoup.dll
      WLDAP32.dll           Win32 LDAP API DLL                                  Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\Wldap32.dll
      CRYPT32.dll           加密 API32                                            Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\crypt32.dll
      rptinfo.dll           rptinfo Dynamic Link Library                        Beijing Rising Network Security Technology Co., Ltd.  3.0.0.21                                           C:\Program Files (x86)\Rising\REC\ep\rptinfo.dll
      rasadhlp.dll          Remote Access AutoDial Helper                       Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\rasadhlp.dll
      fwpuclnt.dll          FWP/IPsec 用户模式 API                                  Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\FWPUCLNT.DLL
      cscapi.dll            Offline Files Win32 API                             Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\cscapi.dll
      CRYPTSP.dll           Cryptographic Service Provider API                  Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\cryptsp.dll
      rsaenh.dll            Microsoft Enhanced Cryptographic Provider           Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\rsaenh.dll
      dhcpcsvc.DLL          DHCP 客户端服务                                          Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\dhcpcsvc.dll
      CRYPTBASE.dll         Base cryptographic API DLL                          Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\CRYPTBASE.dll
      apphelp.dll           应用程序兼容性客户端库                                         Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\apphelp.dll


coltool.exe          1876       CollectLogTool Module                              C:\Program Files (x86)\Rising\REC\ep\coltool.exe                                                                                                                                                                                                                  "C:\Program Files (x86)\Rising\REC\ep\coltool.exe" 
      coltool.exe           CollectLogTool Module                               Beijing Rising Network Security Technology Co., Ltd.  1, 0, 0, 21                                        C:\Program Files (x86)\Rising\REC\ep\coltool.exe
      ntdll.dll             NT 层 DLL                                            Microsoft Corporation                               10.0.19041.804 (WinBuild.160101.0800)              C:\Windows\System32\ntdll.dll
      KERNEL32.DLL          Windows NT 基本 API 客户端 DLL                           Microsoft Corporation                               10.0.19041.804 (WinBuild.160101.0800)              C:\Windows\System32\kernel32.dll
      KERNELBASE.dll        Windows NT 基本 API 客户端 DLL                           Microsoft Corporation                               10.0.19041.804 (WinBuild.160101.0800)              C:\Windows\System32\KERNELBASE.dll
      apphelp.dll           应用程序兼容性客户端库                                         Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\apphelp.dll
      USER32.dll            多用户 Windows 用户 API 客户端 DLL                          Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\user32.dll
      win32u.dll            Win32u                                              Microsoft Corporation                               10.0.19041.906 (WinBuild.160101.0800)              C:\Windows\System32\win32u.dll
      GDI32.dll             GDI Client DLL                                      Microsoft Corporation                               10.0.19041.746 (WinBuild.160101.0800)              C:\Windows\System32\gdi32.dll
      gdi32full.dll         GDI Client DLL                                      Microsoft Corporation                               10.0.19041.928 (WinBuild.160101.0800)              C:\Windows\System32\gdi32full.dll
      msvcp_win.dll         Microsoft? C Runtime Library                        Microsoft Corporation                               10.0.19041.789 (WinBuild.160101.0800)              C:\Windows\System32\msvcp_win.dll
      ucrtbase.dll          Microsoft? C Runtime Library                        Microsoft Corporation                               10.0.19041.789 (WinBuild.160101.0800)              C:\Windows\System32\ucrtbase.dll
      ADVAPI32.dll          高级 Windows 32 基本 API                                Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\advapi32.dll
      msvcrt.dll            Windows NT CRT DLL                                  Microsoft Corporation                               7.0.19041.546 (WinBuild.160101.0800)               C:\Windows\System32\msvcrt.dll
      sechost.dll           Host for SCM/SDDL/LSA Lookup APIs                   Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\sechost.dll
      RPCRT4.dll            远程过程调用运行时                                           Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\rpcrt4.dll
      SHELL32.dll           Windows Shell 公用 DLL                                Microsoft Corporation                               10.0.19041.329 (WinBuild.160101.0800)              C:\Windows\System32\shell32.dll
      ole32.dll             用于 Windows 的 Microsoft OLE                          Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\ole32.dll
      combase.dll           用于 Windows 的 Microsoft COM                          Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\combase.dll
      OLEAUT32.dll          OLEAUT32.DLL                                        Microsoft Corporation                               10.0.19041.804 (WinBuild.160101.0800)              C:\Windows\System32\oleaut32.dll
      SHLWAPI.dll           外壳简易实用工具库                                           Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\shlwapi.dll
      COMCTL32.dll          用户体验控件库                                             Microsoft Corporation                               6.10 (WinBuild.160101.0800)                        C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.844_none_11adecdf30011423\comctl32.dll
      IMM32.DLL             Multi-User Windows IMM32 API Client DLL             Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\imm32.dll
      kernel.appcore.dll    AppModel API Host                                   Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\kernel.appcore.dll
      bcryptPrimitives.dll  Windows Cryptographic Primitives Library            Microsoft Corporation                               10.0.19041.662 (WinBuild.160101.0800)              C:\Windows\System32\bcryptPrimitives.dll
      uxtheme.dll           Microsoft UxTheme 库                                 Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\uxtheme.dll
      collog.dll            collog Dynamic Link Library                         Beijing Rising Network Security Technology Co., Ltd.  1, 0, 0, 42                                        C:\Program Files (x86)\Rising\REC\ep\collog.dll
      PSAPI.DLL             Process Status Helper                               Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\psapi.dll
      MSVCP90.dll           Microsoft? C++ Runtime Library                      Microsoft Corporation                               9.00.30729.9625                                    C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9625_none_508ef7e4bcbbe589\msvcp90.dll
      MSVCR90.dll           Microsoft? C Runtime Library                        Microsoft Corporation                               9.00.30729.9625                                    C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9625_none_508ef7e4bcbbe589\msvcr90.dll
      VERSION.dll           Version Checking and File Installation Libraries    Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\version.dll
      IPHLPAPI.DLL          IP 帮助程序 API                                         Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\IPHLPAPI.DLL
      MSCTF.dll             MSCTF 服务器 DLL                                       Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\msctf.dll
      textinputframework.dll  "TextInputFramework.DYNLINK"                        Microsoft Corporation                               10.0.19041.906 (WinBuild.160101.0800)              C:\Windows\System32\textinputframework.dll
      CoreMessaging.dll     Microsoft CoreMessaging Dll                         Microsoft Corporation                               10.0.19041.867                                     C:\Windows\System32\CoreMessaging.dll
      WS2_32.dll            Windows Socket 2.0 32 位 DLL                         Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\ws2_32.dll
      CoreUIComponents.dll  Microsoft Core UI Components Dll                    Microsoft Corporation                               10.0.19041.546                                     C:\Windows\System32\CoreUIComponents.dll
      SHCORE.dll            SHCORE                                              Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\SHCore.dll
      ntmarta.dll           Windows NT MARTA 提供程序                               Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\ntmarta.dll
      wintypes.dll          Windows 基本类型 DLL                                    Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\WinTypes.dll
      TextShaping.dll                                                                                                                                                                  C:\Windows\System32\TextShaping.dll
      windows.storage.dll   Microsoft WinRT Storage API                         Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\windows.storage.dll
      Wldp.dll              Windows 锁定策略                                        Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\wldp.dll
      profapi.dll           User Profile Basic API                              Microsoft Corporation                               10.0.19041.844 (WinBuild.160101.0800)              C:\Windows\System32\profapi.dll
      DNSAPI.dll            DNS 客户端 API DLL                                     Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\dnsapi.dll
      NSI.dll               NSI User-mode interface DLL                         Microsoft Corporation                               10.0.19041.610 (WinBuild.160101.0800)              C:\Windows\System32\nsi.dll
      dhcpcsvc6.DLL         DHCPv6 客户端                                          Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\dhcpcsvc6.DLL
      dhcpcsvc.DLL          DHCP 客户端服务                                          Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\dhcpcsvc.dll
      WINNSI.DLL            Network Store Information RPC interface             Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\winnsi.dll
      clbcatq.dll           COM+ Configuration Catalog                          Microsoft Corporation                               2001.12.10941.16384 (WinBuild.160101.0800)         C:\Windows\System32\clbcatq.dll
      wbemprox.dll          WMI                                                 Microsoft Corporation                               10.0.19041.844 (WinBuild.160101.0800)              C:\Windows\System32\wbem\wbemprox.dll
      wbemcomn.dll          WMI                                                 Microsoft Corporation                               10.0.19041.844 (WinBuild.160101.0800)              C:\Windows\System32\wbemcomn.dll
      wbemsvc.dll           WMI                                                 Microsoft Corporation                               10.0.19041.844 (WinBuild.160101.0800)              C:\Windows\System32\wbem\wbemsvc.dll
      fastprox.dll          WMI Custom Marshaller                               Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\wbem\fastprox.dll
      amsi.dll              Anti-Malware Scan Interface                         Microsoft Corporation                               10.0.19041.746 (WinBuild.160101.0800)              C:\Windows\System32\amsi.dll
      explorerframe.dll     ExplorerFrame                                       Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\explorerframe.dll
      WindowsCodecs.dll     Microsoft Windows Codecs Library                    Microsoft Corporation                               10.0.19041.928 (WinBuild.160101.0800)              C:\Windows\System32\WindowsCodecs.dll
      bcrypt.dll            Windows 加密基元库                                       Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\bcrypt.dll
      thumbcache.dll        Microsoft 缩略图缓存                                     Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\thumbcache.dll
      policymanager.dll     Policy Manager DLL                                  Microsoft Corporation                               10.0.19041.906 (WinBuild.160101.0800)              C:\Windows\System32\policymanager.dll
      msvcp110_win.dll      Microsoft? STL110 C++ Runtime Library               Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\msvcp110_win.dll
      dataexchange.dll      Data exchange                                       Microsoft Corporation                               10.0.19041.746 (WinBuild.160101.0800)              C:\Windows\System32\dataexchange.dll
      dcomp.dll             Microsoft DirectComposition Library                 Microsoft Corporation                               10.0.19041.906 (WinBuild.160101.0800)              C:\Windows\System32\dcomp.dll
      d3d11.dll             Direct3D 11 Runtime                                 Microsoft Corporation                               10.0.19041.746 (WinBuild.160101.0800)              C:\Windows\System32\d3d11.dll
      dxgi.dll              DirectX Graphics Infrastructure                     Microsoft Corporation                               10.0.19041.928 (WinBuild.160101.0800)              C:\Windows\System32\dxgi.dll
      twinapi.appcore.dll   twinapi.appcore                                     Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\twinapi.appcore.dll
      PROPSYS.dll           Microsoft 属性系统                                      Microsoft Corporation                               7.0.19041.1 (WinBuild.160101.0800)                 C:\Windows\System32\propsys.dll
      Secur32.dll           Security Support Provider Interface                 Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\secur32.dll
      SSPICLI.DLL           Security Support Provider Interface                 Microsoft Corporation                               10.0.19041.906 (WinBuild.160101.0800)              C:\Windows\System32\sspicli.dll
      samcli.dll            Security Accounts Manager Client DLL                Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\samcli.dll
      SAMLIB.dll            SAM Library DLL                                     Microsoft Corporation                               10.0.19041.906 (WinBuild.160101.0800)              C:\Windows\System32\samlib.dll
      netutils.dll          Net Win32 API Helpers DLL                           Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\netutils.dll
      CFGMGR32.dll          Configuration Manager DLL                           Microsoft Corporation                               10.0.19041.546 (WinBuild.160101.0800)              C:\Windows\System32\cfgmgr32.dll
      tiptsf.dll            触摸键盘和手写面板文本服务框架                                     Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll
      NetworkExplorer.dll   网络浏览器                                               Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\NetworkExplorer.dll


SearchProtocolHost.exe 7904                                                          C:\Windows\System32\SearchProtocolHost.exe                                                                                                                                                                                                                        C:\Windows\System32\SearchProtocolHost.exe


SearchFilterHost.exe 2520                                                          C:\Windows\System32\SearchFilterHost.exe                                                                                                                                                                                                                          C:\Windows\System32\SearchFilterHost.exe


dllhost.exe          4056                                                          C:\Windows\System32\dllhost.exe                                                                                                                                                                                                                                   C:\Windows\System32\dllhost.exe


dllhost.exe          5236                                                          C:\Windows\System32\dllhost.exe                                                                                                                                                                                                                                   C:\Windows\System32\dllhost.exe


BackgroundTransferHost.exe 7604                                                          C:\Windows\System32\BackgroundTransferHost.exe                                                                                                                                                                                                                    C:\Windows\System32\BackgroundTransferHost.exe


