系统内存总数：15.75GB
系统可用内存：11.58GB
TotalPageFile：18.12GB
AvailPageFile：12.33GB
TotalVirtual：2.00GB
ullAvailVirtual：1.71GB
ullAvailExtendedVirtual：



进程信息:名称 PID 占用内存描述 路径 命令参数
System                                   4                                                                                                                                                                                                                                                                                                                                          
Registry                                 172                                                                                                                                                                                                                                                                                                                                        
smss.exe                                 580                                                                                                                                                                                                                                                                                                                                        
csrss.exe                                852                                                                                                                                                                                                                                                                                                                                        
wininit.exe                              968                                                                                                                                                                                                                                                                                                                                        
csrss.exe                                984                                                                                                                                                                                                                                                                                                                                        
services.exe                             776                                                                                                                                                                                                                                                                                                                                        
lsass.exe                                880        21MB                                                          C:\Windows\System32\lsass.exe                                                                                                                                                                                                                                     C:\Windows\System32\lsass.exe
svchost.exe                              1056       33MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
fontdrvhost.exe                          1080       4MB                                                           C:\Windows\System32\fontdrvhost.exe                                                                                                                                                                                                                               C:\Windows\System32\fontdrvhost.exe
WUDFHost.exe                             1124       6MB                                                           C:\Windows\System32\WUDFHost.exe                                                                                                                                                                                                                                  C:\Windows\System32\WUDFHost.exe
svchost.exe                              1196       15MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              1244       8MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
winlogon.exe                             1300       11MB                                                          C:\Windows\System32\winlogon.exe                                                                                                                                                                                                                                  C:\Windows\System32\winlogon.exe
fontdrvhost.exe                          1356       24MB                                                          C:\Windows\System32\fontdrvhost.exe                                                                                                                                                                                                                               C:\Windows\System32\fontdrvhost.exe
svchost.exe                              1452       5MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              1460       8MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              1540       10MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              1564       17MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              1624       10MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              1632       12MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              1720       8MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
IntelCpHDCPSvc.exe                       1764       6MB                                                           C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_5072d01994225a07\IntelCpHDCPSvc.exe                                                                                                                                                             C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_5072d01994225a07\IntelCpHDCPSvc.exe
svchost.exe                              1776       9MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              1828       7MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              1844       8MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              1932       8MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              1940       14MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              1952       8MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              2224       10MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              2240       10MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
dwm.exe                                  2260       75MB                                                          C:\Windows\System32\dwm.exe                                                                                                                                                                                                                                       C:\Windows\System32\dwm.exe
svchost.exe                              2384       6MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              2524       22MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              2636       15MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
igfxCUIServiceN.exe                      2644       10MB                                                          C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_9afa905de7653866\igfxCUIServiceN.exe                                                                                                                                                             C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_9afa905de7653866\igfxCUIServiceN.exe
NVDisplay.Container.exe                  2888       36MB                                                          C:\Windows\System32\DriverStore\FileRepository\nvtfig.inf_amd64_371244ed2e510fec\Display.NvContainer\NVDisplay.Container.exe                                                                                                                                      C:\Windows\System32\DriverStore\FileRepository\nvtfig.inf_amd64_371244ed2e510fec\Display.NvContainer\NVDisplay.Container.exe
svchost.exe                              2916       14MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              2944       7MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              1924       14MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              1908       6MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              1916       10MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              3120       8MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
Memory Compression                       3128                                                                                                                                                                                                                                                                                                                                       
svchost.exe                              3144       12MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
NVDisplay.Container.exe                  3556       45MB                                                          C:\Windows\System32\DriverStore\FileRepository\nvtfig.inf_amd64_371244ed2e510fec\Display.NvContainer\NVDisplay.Container.exe                                                                                                                                      C:\Windows\System32\DriverStore\FileRepository\nvtfig.inf_amd64_371244ed2e510fec\Display.NvContainer\NVDisplay.Container.exe
svchost.exe                              3576       19MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              3728       14MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              3920       7MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              4028       9MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              4068       19MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              3536       14MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              4156       19MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
spoolsv.exe                              4316       16MB                                                          C:\Windows\System32\spoolsv.exe                                                                                                                                                                                                                                   C:\Windows\System32\spoolsv.exe
svchost.exe                              4500       8MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
wlanext.exe                              4584       6MB                                                           C:\Windows\System32\wlanext.exe                                                                                                                                                                                                                                   C:\Windows\System32\wlanext.exe
conhost.exe                              4636       10MB                                                          C:\Windows\System32\conhost.exe                                                                                                                                                                                                                                   C:\Windows\System32\conhost.exe
svchost.exe                              4752       11MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
mDNSResponder.exe                        4956       7MB                                                           C:\Program Files\Bonjour\mDNSResponder.exe                                                                                                                                                                                                                        C:\Program Files\Bonjour\mDNSResponder.exe
svchost.exe                              4976       42MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
jhi_service.exe                          4984       6MB                                                           C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe                                                                                                                                                                     C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
svchost.exe                              5004       14MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
OneApp.IGCC.WinService.exe               5012       45MB                                                          C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_1a16b0d58ee9dae2\OneApp.IGCC.WinService.exe                                                                                                                                                     C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_1a16b0d58ee9dae2\OneApp.IGCC.WinService.exe
AppleMobileDeviceService.exe             5020       13MB                                                          C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe                                                                                                                                                                            C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
ETDService.exe                           5028       5MB                                                           C:\Program Files\Elantech\ETDService.exe                                                                                                                                                                                                                          C:\Program Files\Elantech\ETDService.exe
RavService.exe                           5044       7MB        RUAD Application                                   C:\Program Files (x86)\Rising\REC\ep\rua\ravservice.exe                                                                                                                                                                                                           "C:\Program Files (x86)\Rising\REC\ep\rua\ravservice.exe"
RtkAudUService64.exe                     5052       10MB                                                          C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_f7fdb960c5e8ef2a\RtkAudUService64.exe                                                                                                                                                     C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_f7fdb960c5e8ef2a\RtkAudUService64.exe
svchost.exe                              5060       34MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              5068       13MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
Lenovo.Modern.ImController.exe           5084       61MB       Lenovo.Modern.ImController                         C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe                                                                                                                                                                                             C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
svchost.exe                              5092       7MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
esm.exe                                  5100       7MB        服务进程                                               C:\Program Files (x86)\Rising\REC\ep\esm.exe                                                                                                                                                                                                                      "C:\Program Files (x86)\Rising\REC\ep\esm.exe"
svchost.exe                              5116       7MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
epsrv.exe                                4656       24MB       服务进程                                               C:\Program Files (x86)\Rising\REC\ep\epsrv.exe                                                                                                                                                                                                                    "C:\Program Files (x86)\Rising\REC\ep\epsrv.exe"
TbtP2pShortcutService.exe                4440       5MB                                                           C:\Windows\TbtP2pShortcutService.exe                                                                                                                                                                                                                              C:\Windows\TbtP2pShortcutService.exe
SecCenAdapterServer.exe                  4444                                                                                                                                                                                                                                                                                                                                       
WMIRegistrationService.exe               5136       12MB       Intel(R) Management Engine WMI Provider Registration C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_d51901c26227fb29\WMIRegistrationService.exe                                                                                                                                                    C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_d51901c26227fb29\WMIRegistrationService.exe
svchost.exe                              5148       6MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
escsvc64.exe                             5160       6MB                                                           C:\Windows\System32\escsvc64.exe                                                                                                                                                                                                                                  C:\Windows\System32\escsvc64.exe
svchost.exe                              5200       17MB       Windows 服务主进程                                      C:\Windows\SysWOW64\svchost.exe                                                                                                                                                                                                                                   C:\Windows\SysWOW64\svchost.exe -k netsvcs -p -s XLServicePlatform
svchost.exe                              5232       20MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              5304       9MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
dasHost.exe                              5736       9MB                                                           C:\Windows\System32\dasHost.exe                                                                                                                                                                                                                                   C:\Windows\System32\dasHost.exe
SearchIndexer.exe                        6020       48MB                                                          C:\Windows\System32\SearchIndexer.exe                                                                                                                                                                                                                             C:\Windows\System32\SearchIndexer.exe
svchost.exe                              5528       6MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              6280       13MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              7120       7MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
ETDCtrl.exe                              1712       16MB                                                          C:\Program Files\Elantech\ETDCtrl.exe                                                                                                                                                                                                                             C:\Program Files\Elantech\ETDCtrl.exe
AggregatorHost.exe                       7428       4MB                                                           C:\Windows\System32\AggregatorHost.exe                                                                                                                                                                                                                            C:\Windows\System32\AggregatorHost.exe
sihost.exe                               7464       26MB                                                          C:\Windows\System32\sihost.exe                                                                                                                                                                                                                                    C:\Windows\System32\sihost.exe
svchost.exe                              7488       29MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
igfxEMN.exe                              7504       15MB                                                          C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_9afa905de7653866\igfxEMN.exe                                                                                                                                                                     C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_9afa905de7653866\igfxEMN.exe
svchost.exe                              7552       38MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              7788       13MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              7820       8MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
ctfmon.exe                               7916       32MB                                                          C:\Windows\System32\ctfmon.exe                                                                                                                                                                                                                                    C:\Windows\System32\ctfmon.exe
taskhostw.exe                            8132       14MB                                                          C:\Windows\System32\taskhostw.exe                                                                                                                                                                                                                                 C:\Windows\System32\taskhostw.exe
explorer.exe                             1872       234MB                                                         C:\Windows\explorer.exe                                                                                                                                                                                                                                           C:\Windows\explorer.exe
svchost.exe                              3376       18MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              8276       10MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              8364       20MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
taskhostw.exe                            8668       14MB                                                          C:\Windows\System32\taskhostw.exe                                                                                                                                                                                                                                 C:\Windows\System32\taskhostw.exe
svchost.exe                              8680       23MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
StartMenuExperienceHost.exe              8748       68MB                                                          C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe                                                                                                                                                         C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
ChsIME.exe                               8820       7MB                                                           C:\Windows\System32\InputMethod\CHS\ChsIME.exe                                                                                                                                                                                                                    C:\Windows\System32\InputMethod\CHS\ChsIME.exe
RuntimeBroker.exe                        9168       21MB                                                          C:\Windows\System32\RuntimeBroker.exe                                                                                                                                                                                                                             C:\Windows\System32\RuntimeBroker.exe
SearchApp.exe                            9096       240MB                                                         C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe                                                                                                                                                                                        C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
eptray.exe                               9100       45MB       客户端                                                C:\Program Files (x86)\Rising\REC\ep\eptray.exe                                                                                                                                                                                                                   "C:\Program Files (x86)\Rising\REC\ep\eptray.exe" -service -system
ep64.exe                                 9428       7MB                                                           C:\Program Files (x86)\Rising\REC\ep\x64\ep64.exe                                                                                                                                                                                                                 C:\Program Files (x86)\Rising\REC\ep\x64\ep64.exe
RuntimeBroker.exe                        9480       49MB                                                          C:\Windows\System32\RuntimeBroker.exe                                                                                                                                                                                                                             C:\Windows\System32\RuntimeBroker.exe
TextInputHost.exe                        10224      55MB                                                          C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe                                                                                                                                                                                 C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe
QQPYUserCenter.exe                       9584       28MB       QQ拼音个人中心                                           C:\Program Files (x86)\Tencent\QQPinyin\6.6.6304.400\QQPYUserCenter.exe                                                                                                                                                                                           "C:\Program Files (x86)\Tencent\QQPinyin\6.6.6304.400\QQPYUserCenter.exe" qqpinyin.ime
RuntimeBroker.exe                        10272      25MB                                                          C:\Windows\System32\RuntimeBroker.exe                                                                                                                                                                                                                             C:\Windows\System32\RuntimeBroker.exe
SecurityHealthSystray.exe                10588      9MB                                                           C:\Windows\System32\SecurityHealthSystray.exe                                                                                                                                                                                                                     C:\Windows\System32\SecurityHealthSystray.exe
SecurityHealthService.exe                10620                                                                                                                                                                                                                                                                                                                                      
RtkAudUService64.exe                     10700      9MB                                                           C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_f7fdb960c5e8ef2a\RtkAudUService64.exe                                                                                                                                                     C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_f7fdb960c5e8ef2a\RtkAudUService64.exe
svchost.exe                              10740      9MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
IGCCTray.exe                             10772      73MB                                                          C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5536.0_x64__8j3eq9eme6ctt\GCP.ML.BackgroundSysTray\IGCCTray.exe                                                                                                                                  C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5536.0_x64__8j3eq9eme6ctt\GCP.ML.BackgroundSysTray\IGCCTray.exe
IGCC.exe                                 10880      57MB                                                          C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5536.0_x64__8j3eq9eme6ctt\IGCC.exe                                                                                                                                                               C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5536.0_x64__8j3eq9eme6ctt\IGCC.exe
svchost.exe                              12064      15MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              11648      10MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
dllhost.exe                              11904      12MB                                                          C:\Windows\System32\dllhost.exe                                                                                                                                                                                                                                   C:\Windows\System32\dllhost.exe
svchost.exe                              9340       11MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              8700       12MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
SgrmBroker.exe                           3764                                                                                                                                                                                                                                                                                                                                       
svchost.exe                              6968       8MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              11900                                                                                                                                                                                                                                                                                                                                      
ChsIME.exe                               3192       17MB                                                          C:\Windows\System32\InputMethod\CHS\ChsIME.exe                                                                                                                                                                                                                    C:\Windows\System32\InputMethod\CHS\ChsIME.exe
ShellExperienceHost.exe                  11760      87MB                                                          C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe                                                                                                                                                                                   C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
RuntimeBroker.exe                        2812       25MB                                                          C:\Windows\System32\RuntimeBroker.exe                                                                                                                                                                                                                             C:\Windows\System32\RuntimeBroker.exe
SystemSettings.exe                       6992       2MB                                                           C:\Windows\ImmersiveControlPanel\SystemSettings.exe                                                                                                                                                                                                               C:\Windows\ImmersiveControlPanel\SystemSettings.exe
ApplicationFrameHost.exe                 8964       30MB                                                          C:\Windows\System32\ApplicationFrameHost.exe                                                                                                                                                                                                                      C:\Windows\System32\ApplicationFrameHost.exe
UserOOBEBroker.exe                       12224      9MB                                                           C:\Windows\System32\oobe\UserOOBEBroker.exe                                                                                                                                                                                                                       C:\Windows\System32\oobe\UserOOBEBroker.exe
svchost.exe                              1596       13MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              9588       13MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              11736      10MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              2924       9MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
SystemSettingsBroker.exe                 11444      32MB                                                          C:\Windows\System32\SystemSettingsBroker.exe                                                                                                                                                                                                                      C:\Windows\System32\SystemSettingsBroker.exe
svchost.exe                              6308       8MB                                                           C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              8108       11MB                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe
svchost.exe                              10356                                                                                                                                                                                                                                                                                                                                      
esmmain.exe                              6668       66MB       客户端主程序                                             C:\Program Files (x86)\Rising\REC\ep\esmmain.exe                                                                                                                                                                                                                  "C:\Program Files (x86)\Rising\REC\ep\esmmain.exe" ItemScan={E09A26B1-FAB2-47c8-838F-3EFC4AE84BC8}
smartscreen.exe                          5332       23MB                                                          C:\Windows\System32\smartscreen.exe                                                                                                                                                                                                                               C:\Windows\System32\smartscreen.exe
firefox.exe                              4480       250MB                                                         C:\Program Files\Mozilla Firefox\firefox.exe                                                                                                                                                                                                                      C:\Program Files\Mozilla Firefox\firefox.exe
firefox.exe                              12236      102MB                                                         C:\Program Files\Mozilla Firefox\firefox.exe                                                                                                                                                                                                                      C:\Program Files\Mozilla Firefox\firefox.exe
firefox.exe                              11528      16MB                                                          C:\Program Files\Mozilla Firefox\firefox.exe                                                                                                                                                                                                                      C:\Program Files\Mozilla Firefox\firefox.exe
firefox.exe                              7548       47MB                                                          C:\Program Files\Mozilla Firefox\firefox.exe                                                                                                                                                                                                                      C:\Program Files\Mozilla Firefox\firefox.exe
firefox.exe                              9540       61MB                                                          C:\Program Files\Mozilla Firefox\firefox.exe                                                                                                                                                                                                                      C:\Program Files\Mozilla Firefox\firefox.exe
firefox.exe                              4676       33MB                                                          C:\Program Files\Mozilla Firefox\firefox.exe                                                                                                                                                                                                                      C:\Program Files\Mozilla Firefox\firefox.exe
firefox.exe                              8564       17MB                                                          C:\Program Files\Mozilla Firefox\firefox.exe                                                                                                                                                                                                                      C:\Program Files\Mozilla Firefox\firefox.exe
firefox.exe                              7460       16MB                                                          C:\Program Files\Mozilla Firefox\firefox.exe                                                                                                                                                                                                                      C:\Program Files\Mozilla Firefox\firefox.exe
firefox.exe                              10784      68MB                                                          C:\Program Files\Mozilla Firefox\firefox.exe                                                                                                                                                                                                                      C:\Program Files\Mozilla Firefox\firefox.exe
firefox.exe                              7816       29MB                                                          C:\Program Files\Mozilla Firefox\firefox.exe                                                                                                                                                                                                                      C:\Program Files\Mozilla Firefox\firefox.exe
firefox.exe                              9864       29MB                                                          C:\Program Files\Mozilla Firefox\firefox.exe                                                                                                                                                                                                                      C:\Program Files\Mozilla Firefox\firefox.exe
firefox.exe                              1064       29MB                                                          C:\Program Files\Mozilla Firefox\firefox.exe                                                                                                                                                                                                                      C:\Program Files\Mozilla Firefox\firefox.exe
audiodg.exe                              11368      12MB                                                          C:\Windows\System32\audiodg.exe                                                                                                                                                                                                                                   C:\Windows\System32\audiodg.exe
coltool.exe                              5504       40MB       CollectLogTool Module                              C:\Program Files (x86)\Rising\REC\ep\coltool.exe                                                                                                                                                                                                                  "C:\Program Files (x86)\Rising\REC\ep\coltool.exe" 
SearchProtocolHost.exe                   12160      14MB                                                          C:\Windows\System32\SearchProtocolHost.exe                                                                                                                                                                                                                        C:\Windows\System32\SearchProtocolHost.exe
SearchFilterHost.exe                     2628       11MB                                                          C:\Windows\System32\SearchFilterHost.exe                                                                                                                                                                                                                          C:\Windows\System32\SearchFilterHost.exe


进程的具体模块信息
System               4                                                                                                                                                                                                                                                                                                                               


Registry             172                                                                                                                                                                                                                                                                                                                             


smss.exe             580                                                                                                                                                                                                                                                                                                                             


csrss.exe            852                                                                                                                                                                                                                                                                                                                             


wininit.exe          968                                                                                                                                                                                                                                                                                                                             


csrss.exe            984                                                                                                                                                                                                                                                                                                                             


services.exe         776                                                                                                                                                                                                                                                                                                                             


lsass.exe            880                                                           C:\Windows\System32\lsass.exe                                                                                                                                                                                                                                     C:\Windows\System32\lsass.exe


svchost.exe          1056                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


fontdrvhost.exe      1080                                                          C:\Windows\System32\fontdrvhost.exe                                                                                                                                                                                                                               C:\Windows\System32\fontdrvhost.exe


WUDFHost.exe         1124                                                          C:\Windows\System32\WUDFHost.exe                                                                                                                                                                                                                                  C:\Windows\System32\WUDFHost.exe


svchost.exe          1196                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          1244                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


winlogon.exe         1300                                                          C:\Windows\System32\winlogon.exe                                                                                                                                                                                                                                  C:\Windows\System32\winlogon.exe


fontdrvhost.exe      1356                                                          C:\Windows\System32\fontdrvhost.exe                                                                                                                                                                                                                               C:\Windows\System32\fontdrvhost.exe


svchost.exe          1452                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          1460                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          1540                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          1564                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          1624                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          1632                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          1720                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


IntelCpHDCPSvc.exe   1764                                                          C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_5072d01994225a07\IntelCpHDCPSvc.exe                                                                                                                                                             C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_5072d01994225a07\IntelCpHDCPSvc.exe


svchost.exe          1776                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          1828                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          1844                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          1932                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          1940                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          1952                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          2224                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          2240                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


dwm.exe              2260                                                          C:\Windows\System32\dwm.exe                                                                                                                                                                                                                                       C:\Windows\System32\dwm.exe


svchost.exe          2384                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          2524                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          2636                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


igfxCUIServiceN.exe  2644                                                          C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_9afa905de7653866\igfxCUIServiceN.exe                                                                                                                                                             C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_9afa905de7653866\igfxCUIServiceN.exe


NVDisplay.Container.exe 2888                                                          C:\Windows\System32\DriverStore\FileRepository\nvtfig.inf_amd64_371244ed2e510fec\Display.NvContainer\NVDisplay.Container.exe                                                                                                                                      C:\Windows\System32\DriverStore\FileRepository\nvtfig.inf_amd64_371244ed2e510fec\Display.NvContainer\NVDisplay.Container.exe


svchost.exe          2916                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          2944                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          1924                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          1908                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          1916                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          3120                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


Memory Compression   3128                                                                                                                                                                                                                                                                                                                            


svchost.exe          3144                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


NVDisplay.Container.exe 3556                                                          C:\Windows\System32\DriverStore\FileRepository\nvtfig.inf_amd64_371244ed2e510fec\Display.NvContainer\NVDisplay.Container.exe                                                                                                                                      C:\Windows\System32\DriverStore\FileRepository\nvtfig.inf_amd64_371244ed2e510fec\Display.NvContainer\NVDisplay.Container.exe


svchost.exe          3576                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          3728                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          3920                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          4028                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          4068                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          3536                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          4156                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


spoolsv.exe          4316                                                          C:\Windows\System32\spoolsv.exe                                                                                                                                                                                                                                   C:\Windows\System32\spoolsv.exe


svchost.exe          4500                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


wlanext.exe          4584                                                          C:\Windows\System32\wlanext.exe                                                                                                                                                                                                                                   C:\Windows\System32\wlanext.exe


conhost.exe          4636                                                          C:\Windows\System32\conhost.exe                                                                                                                                                                                                                                   C:\Windows\System32\conhost.exe


svchost.exe          4752                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


mDNSResponder.exe    4956                                                          C:\Program Files\Bonjour\mDNSResponder.exe                                                                                                                                                                                                                        C:\Program Files\Bonjour\mDNSResponder.exe


svchost.exe          4976                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


jhi_service.exe      4984                                                          C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe                                                                                                                                                                     C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe


svchost.exe          5004                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


OneApp.IGCC.WinService.exe 5012                                                          C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_1a16b0d58ee9dae2\OneApp.IGCC.WinService.exe                                                                                                                                                     C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_1a16b0d58ee9dae2\OneApp.IGCC.WinService.exe


AppleMobileDeviceService.exe 5020                                                          C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe                                                                                                                                                                            C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe


ETDService.exe       5028                                                          C:\Program Files\Elantech\ETDService.exe                                                                                                                                                                                                                          C:\Program Files\Elantech\ETDService.exe


RavService.exe       5044       RUAD Application                                   C:\Program Files (x86)\Rising\REC\ep\rua\ravservice.exe                                                                                                                                                                                                           "C:\Program Files (x86)\Rising\REC\ep\rua\ravservice.exe"
      ravservice.exe        RUAD Application                                    Beijing Rising Network Security Technology Co., Ltd.  3.0.0.15                                           C:\Program Files (x86)\Rising\REC\ep\rua\ravservice.exe
      ntdll.dll             NT 层 DLL                                            Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\ntdll.dll
      KERNEL32.DLL          Windows NT 基本 API 客户端 DLL                           Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\kernel32.dll
      KERNELBASE.dll        Windows NT 基本 API 客户端 DLL                           Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\KERNELBASE.dll
      ADVAPI32.dll          高级 Windows 32 基本 API                                Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\advapi32.dll
      msvcrt.dll            Windows NT CRT DLL                                  Microsoft Corporation                               7.0.19041.3636 (WinBuild.160101.0800)              C:\Windows\System32\msvcrt.dll
      sechost.dll           Host for SCM/SDDL/LSA Lookup APIs                   Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\sechost.dll
      RPCRT4.dll            远程过程调用运行时                                           Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\rpcrt4.dll
      bcrypt.dll            Windows 加密基元库                                       Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\bcrypt.dll
      WTSAPI32.dll          Windows Remote Desktop Session Host Server SDK APIs  Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\wtsapi32.dll
      SHELL32.dll           Windows Shell 公用 DLL                                Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\shell32.dll
      msvcp_win.dll         Microsoft? C Runtime Library                        Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\msvcp_win.dll
      ucrtbase.dll          Microsoft? C Runtime Library                        Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\ucrtbase.dll
      USER32.dll            多用户 Windows 用户 API 客户端 DLL                          Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\user32.dll
      win32u.dll            Win32u                                              Microsoft Corporation                               10.0.19041.4529 (WinBuild.160101.0800)             C:\Windows\System32\win32u.dll
      GDI32.dll             GDI Client DLL                                      Microsoft Corporation                               10.0.19041.4474 (WinBuild.160101.0800)             C:\Windows\System32\gdi32.dll
      USERENV.dll           Userenv                                             Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\userenv.dll
      gdi32full.dll         GDI Client DLL                                      Microsoft Corporation                               10.0.19041.4474 (WinBuild.160101.0800)             C:\Windows\System32\gdi32full.dll
      SHLWAPI.dll           外壳简易实用工具库                                           Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\shlwapi.dll
      MSVCP90.dll           Microsoft? C++ Runtime Library                      Microsoft Corporation                               9.00.30729.9625                                    C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9625_none_508ef7e4bcbbe589\msvcp90.dll
      MSVCR90.dll           Microsoft? C Runtime Library                        Microsoft Corporation                               9.00.30729.9625                                    C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9625_none_508ef7e4bcbbe589\msvcr90.dll
      IMM32.DLL             Multi-User Windows IMM32 API Client DLL             Microsoft Corporation                               10.0.19041.4474 (WinBuild.160101.0800)             C:\Windows\System32\imm32.dll
      windows.storage.dll   Microsoft WinRT Storage API                         Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\windows.storage.dll
      combase.dll           用于 Windows 的 Microsoft COM                          Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\combase.dll
      Wldp.dll              Windows 锁定策略                                        Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\wldp.dll
      OLEAUT32.dll          OLEAUT32.DLL                                        Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\oleaut32.dll
      SHCORE.dll            SHCORE                                              Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\SHCore.dll
      profapi.dll           User Profile Basic API                              Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\System32\profapi.dll
      WINSTA.dll            Winstation Library                                  Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\winsta.dll
      SspiCli.dll           Security Support Provider Interface                 Microsoft Corporation                               10.0.19041.4239 (WinBuild.160101.0800)             C:\Windows\System32\sspicli.dll
      apphelp.dll           应用程序兼容性客户端库                                         Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\apphelp.dll


RtkAudUService64.exe 5052                                                          C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_f7fdb960c5e8ef2a\RtkAudUService64.exe                                                                                                                                                     C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_f7fdb960c5e8ef2a\RtkAudUService64.exe


svchost.exe          5060                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          5068                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


Lenovo.Modern.ImController.exe 5084       Lenovo.Modern.ImController                         C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe                                                                                                                                                                                             C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
      Lenovo.Modern.ImController.exe  Lenovo.Modern.ImController                          Lenovo Group Ltd.                                   1.2.0.11                                           C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
      ntdll.dll             NT 层 DLL                                            Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\ntdll.dll
      MSCOREE.DLL           Microsoft .NET Runtime Execution Engine             Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\mscoree.dll
      KERNEL32.dll          Windows NT 基本 API 客户端 DLL                           Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\kernel32.dll
      KERNELBASE.dll        Windows NT 基本 API 客户端 DLL                           Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\KERNELBASE.dll
      ADVAPI32.dll          高级 Windows 32 基本 API                                Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\advapi32.dll
      msvcrt.dll            Windows NT CRT DLL                                  Microsoft Corporation                               7.0.19041.3636 (WinBuild.160101.0800)              C:\Windows\System32\msvcrt.dll
      sechost.dll           Host for SCM/SDDL/LSA Lookup APIs                   Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\sechost.dll
      RPCRT4.dll            远程过程调用运行时                                           Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\rpcrt4.dll
      bcrypt.dll            Windows 加密基元库                                       Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\bcrypt.dll
      mscoreei.dll          Microsoft .NET Runtime Execution Engine             Microsoft Corporation                               4.8.9093.0 built by: NET481REL1LAST_C              C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
      SHLWAPI.dll           外壳简易实用工具库                                           Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\shlwapi.dll
      kernel.appcore.dll    AppModel API Host                                   Microsoft Corporation                               10.0.19041.3758 (WinBuild.160101.0800)             C:\Windows\System32\kernel.appcore.dll
      VERSION.dll           Version Checking and File Installation Libraries    Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\version.dll
      clr.dll               Microsoft .NET Runtime Common Language Runtime - WorkStation  Microsoft Corporation                               4.8.9241.0 built by: NET481REL1LAST_C              C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
      USER32.dll            多用户 Windows 用户 API 客户端 DLL                          Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\user32.dll
      win32u.dll            Win32u                                              Microsoft Corporation                               10.0.19041.4529 (WinBuild.160101.0800)             C:\Windows\System32\win32u.dll
      GDI32.dll             GDI Client DLL                                      Microsoft Corporation                               10.0.19041.4474 (WinBuild.160101.0800)             C:\Windows\System32\gdi32.dll
      gdi32full.dll         GDI Client DLL                                      Microsoft Corporation                               10.0.19041.4474 (WinBuild.160101.0800)             C:\Windows\System32\gdi32full.dll
      msvcp_win.dll         Microsoft? C Runtime Library                        Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\msvcp_win.dll
      ucrtbase.dll          Microsoft? C Runtime Library                        Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\ucrtbase.dll
      VCRUNTIME140_CLR0400.dll  Microsoft? C Runtime Library                        Microsoft Corporation                               14.32.31326.0                                      C:\Windows\System32\VCRUNTIME140_CLR0400.dll
      ucrtbase_clr0400.dll  Microsoft? C Runtime Library                        Microsoft Corporation                               14.32.31326.0                                      C:\Windows\System32\ucrtbase_clr0400.dll
      IMM32.DLL             Multi-User Windows IMM32 API Client DLL             Microsoft Corporation                               10.0.19041.4474 (WinBuild.160101.0800)             C:\Windows\System32\imm32.dll
      mscorlib.ni.dll       Microsoft Common Language Runtime Class Library     Microsoft Corporation                               4.8.9241.0 built by: NET481REL1LAST_C              C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\768f8782b919da642069c8cbb4d44aeb\mscorlib.ni.dll
      ole32.dll             用于 Windows 的 Microsoft OLE                          Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\ole32.dll
      combase.dll           用于 Windows 的 Microsoft COM                          Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\combase.dll
      bcryptprimitives.dll  Windows Cryptographic Primitives Library            Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\bcryptprimitives.dll
      clrjit.dll            Microsoft .NET Runtime Just-In-Time Compiler        Microsoft Corporation                               4.8.9241.0 built by: NET481REL1LAST_C              C:\Windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll
      OLEAUT32.dll          OLEAUT32.DLL                                        Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\oleaut32.dll
      cryptsp.dll           Cryptographic Service Provider API                  Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\cryptsp.dll
      rsaenh.dll            Microsoft Enhanced Cryptographic Provider           Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\rsaenh.dll
      CRYPTBASE.dll         Base cryptographic API DLL                          Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\CRYPTBASE.dll
      System.ni.dll         .NET Framework                                      Microsoft Corporation                               4.8.9236.0 built by: NET481REL1LAST_B              C:\Windows\assembly\NativeImages_v4.0.30319_32\System\70d707aab3b7c79173db0a807723c97d\System.ni.dll
      shell32.dll           Windows Shell 公用 DLL                                Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\shell32.dll
      windows.storage.dll   Microsoft WinRT Storage API                         Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\windows.storage.dll
      Wldp.dll              Windows 锁定策略                                        Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\wldp.dll
      SHCORE.dll            SHCORE                                              Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\SHCore.dll
      profapi.dll           User Profile Basic API                              Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\System32\profapi.dll
      System.Core.ni.dll    .NET Framework                                      Microsoft Corporation                               4.8.9241.0 built by: NET481REL1LAST_C              C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\5e294ccffd0a4f22eaf08c7cf1f95c4b\System.Core.ni.dll
      System.Configuration.ni.dll  System.Configuration.dll                            Microsoft Corporation                               4.8.9037.0 built by: NET481REL1                    C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\5395e4aef46a7211cb3a64a3ec074a16\System.Configuration.ni.dll
      System.Xml.ni.dll     .NET Framework                                      Microsoft Corporation                               4.8.9037.0 built by: NET481REL1                    C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\47652160eb2f9d878ff9943f877e7e44\System.Xml.ni.dll
      wtsapi32.dll          Windows Remote Desktop Session Host Server SDK APIs  Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\wtsapi32.dll
      WINSTA.dll            Winstation Library                                  Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\winsta.dll
      clbcatq.dll           COM+ Configuration Catalog                          Microsoft Corporation                               2001.12.10941.16384 (WinBuild.160101.0800)         C:\Windows\System32\clbcatq.dll
      psapi.dll             Process Status Helper                               Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\psapi.dll
      iphlpapi.dll          IP 帮助程序 API                                         Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\IPHLPAPI.DLL
      DNSAPI.dll            DNS 客户端 API DLL                                     Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\dnsapi.dll
      NSI.dll               NSI User-mode interface DLL                         Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\nsi.dll
      dhcpcsvc6.DLL         DHCPv6 客户端                                          Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\dhcpcsvc6.DLL
      dhcpcsvc.DLL          DHCP 客户端服务                                          Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\dhcpcsvc.dll
      WINNSI.DLL            Network Store Information RPC interface             Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\winnsi.dll
      ws2_32.dll            Windows Socket 2.0 32 位 DLL                         Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\ws2_32.dll
      mswsock.dll           Microsoft Windows Sockets 2.0 服务提供程序                Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\mswsock.dll
      setupapi.dll          Windows 安装程序 API                                    Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\setupapi.dll
      cfgmgr32.dll          Configuration Manager DLL                           Microsoft Corporation                               10.0.19041.3996 (WinBuild.160101.0800)             C:\Windows\System32\cfgmgr32.dll
      DEVOBJ.dll            Device Information Set DLL                          Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\System32\devobj.dll
      WINTRUST.dll          Microsoft Trust Verification APIs                   Microsoft Corporation                               10.0.19041.4529 (WinBuild.160101.0800)             C:\Windows\System32\wintrust.dll
      crypt32.dll           加密 API32                                            Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\crypt32.dll
      MSASN1.dll            ASN.1 Runtime APIs                                  Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\msasn1.dll
      wevtapi.dll           事件消耗和配置 API                                         Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\wevtapi.dll
      comctl32.dll          用户体验控件库                                             Microsoft Corporation                               6.10 (WinBuild.160101.0800)                        C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.19041.4355_none_c0dc01d438beab35\comctl32.dll
      coml2.dll             Microsoft COM for Windows                           Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\System32\coml2.dll
      SspiCli.dll           Security Support Provider Interface                 Microsoft Corporation                               10.0.19041.4239 (WinBuild.160101.0800)             C:\Windows\System32\sspicli.dll
      dssenh.dll            Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider  Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\dssenh.dll
      ncrypt.dll            Windows NCrypt 路由器                                  Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\ncrypt.dll
      ntasn1.dll            Microsoft ASN.1 API                                 Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\ntasn1.dll
      ncryptprov.dll        Microsoft KSP                                       Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\ncryptprov.dll
      urlmon.dll            Win32 的 OLE32 扩展                                    Microsoft Corporation                               11.00.19041.4406 (WinBuild.160101.0800)            C:\Windows\System32\urlmon.dll
      iertutil.dll          Internet Explorer 的运行时实用程序                          Microsoft Corporation                               11.00.19041.4406 (WinBuild.160101.0800)            C:\Windows\System32\iertutil.dll
      srvcli.dll            Server Service Client DLL                           Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\srvcli.dll
      netutils.dll          Net Win32 API Helpers DLL                           Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\netutils.dll
      PROPSYS.dll           Microsoft 属性系统                                      Microsoft Corporation                               7.0.19041.4406 (WinBuild.160101.0800)              C:\Windows\System32\propsys.dll
      virtdisk.dll          Virtual Disk API DLL                                Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\virtdisk.dll
      FLTLIB.DLL            筛选器库                                                Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\fltLib.dll
      System.Runtime.Serialization.ni.dll  System.Runtime.Serialization.dll                    Microsoft Corporation                               4.8.9241.0 built by: NET481REL1LAST_C              C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\fddc8c60fd985ff3ca9878abcd3b2d04\System.Runtime.Serialization.ni.dll
      sxs.dll               Fusion 2.5                                          Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\sxs.dll
      netprofm.dll          Network List Manager                                Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\System32\netprofm.dll
      npmproxy.dll          Network List Manager Proxy                          Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\npmproxy.dll
      System.Net.Http.ni.dll  .NET Framework                                      Microsoft Corporation                               4.8.9037.0 built by: NET481REL1                    C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Net.Http\dc1a30ea7ba35fcd91011a3049ee9bb3\System.Net.Http.ni.dll
      rasapi32.dll          远程访问 API                                            Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\rasapi32.dll
      rasman.dll            Remote Access Connection Manager                    Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\rasman.dll
      rtutils.dll           Routing Utilities                                   Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\rtutils.dll
      winhttp.dll           Windows HTTP 服务                                     Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\winhttp.dll
      mdnsNSP.dll           Bonjour Namespace Provider                          Apple Inc.                                          3,1,0,1                                            C:\Program Files (x86)\Bonjour\mdnsNSP.dll
      rasadhlp.dll          Remote Access AutoDial Helper                       Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\rasadhlp.dll
      fwpuclnt.dll          FWP/IPsec 用户模式 API                                  Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\FWPUCLNT.DLL
      secur32.dll           Security Support Provider Interface                 Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\secur32.dll
      schannel.dll          TLS/SSL 安全提供程序                                      Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\schannel.dll
      mskeyprotect.dll      Microsoft 密钥保护提供程序                                  Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\mskeyprotect.dll
      ncryptsslp.dll        Microsoft SChannel Provider                         Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\ncryptsslp.dll
      ntmarta.dll           Windows NT MARTA 提供程序                               Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\ntmarta.dll
      Windows.ApplicationModel.dll  Windows ApplicationModel API Server                 Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\Windows.ApplicationModel.dll
      twinapi.appcore.dll   twinapi.appcore                                     Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\twinapi.appcore.dll
      WinTypes.dll          Windows 基本类型 DLL                                    Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\WinTypes.dll
      AppXDeploymentClient.dll  AppX 部署客户端 DLL                                      Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\AppXDeploymentClient.dll
      wminet_utils.dll      WMINet_Utils.dll                                    Microsoft Corporation                               4.8.9037.0 built by: NET481REL1                    C:\Windows\Microsoft.NET\Framework\v4.0.30319\wminet_utils.dll
      wmiutils.dll          WMI                                                 Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\wbem\wmiutils.dll
      wbemcomn.dll          WMI                                                 Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\System32\wbemcomn.dll
      wbemprox.dll          WMI                                                 Microsoft Corporation                               10.0.19041.4474 (WinBuild.160101.0800)             C:\Windows\System32\wbem\wbemprox.dll
      wbemsvc.dll           WMI                                                 Microsoft Corporation                               10.0.19041.4474 (WinBuild.160101.0800)             C:\Windows\System32\wbem\wbemsvc.dll
      fastprox.dll          WMI Custom Marshaller                               Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\System32\wbem\fastprox.dll
      amsi.dll              Anti-Malware Scan Interface                         Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\System32\amsi.dll
      edputil.dll           EDP 实用程序                                            Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\edputil.dll
      Windows.StateRepositoryPS.dll  Windows StateRepository Proxy/Stub Server           Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\Windows.StateRepositoryPS.dll
      appresolver.dll       应用解析程序                                              Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\appresolver.dll
      Bcp47Langs.dll        BCP47 Language Classes                              Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\System32\Bcp47Langs.dll
      SLC.dll               软件授权客户端 Dll                                         Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\slc.dll
      USERENV.dll           Userenv                                             Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\userenv.dll
      sppc.dll              软件授权客户端 Dll                                         Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\sppc.dll
      OneCoreCommonProxyStub.dll  OneCore Common Proxy Stub                           Microsoft Corporation                               10.0.19041.3758 (WinBuild.160101.0800)             C:\Windows\System32\OneCoreCommonProxyStub.dll
      OneCoreUAPCommonProxyStub.dll  OneCoreUAP Common Proxy Stub                        Microsoft Corporation                               10.0.19041.4474 (WinBuild.160101.0800)             C:\Windows\System32\OneCoreUAPCommonProxyStub.dll


svchost.exe          5092                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


esm.exe              5100       服务进程                                               C:\Program Files (x86)\Rising\REC\ep\esm.exe                                                                                                                                                                                                                      "C:\Program Files (x86)\Rising\REC\ep\esm.exe"
      esm.exe               服务进程                                                Beijing Rising Network Security Technology Co., Ltd.  3, 0, 0, 8                                         C:\Program Files (x86)\Rising\REC\ep\esm.exe
      ntdll.dll             NT 层 DLL                                            Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\ntdll.dll
      KERNEL32.DLL          Windows NT 基本 API 客户端 DLL                           Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\kernel32.dll
      KERNELBASE.dll        Windows NT 基本 API 客户端 DLL                           Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\KERNELBASE.dll
      ole32.dll             用于 Windows 的 Microsoft OLE                          Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\ole32.dll
      ucrtbase.dll          Microsoft? C Runtime Library                        Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\ucrtbase.dll
      RPCRT4.dll            远程过程调用运行时                                           Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\rpcrt4.dll
      combase.dll           用于 Windows 的 Microsoft COM                          Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\combase.dll
      GDI32.dll             GDI Client DLL                                      Microsoft Corporation                               10.0.19041.4474 (WinBuild.160101.0800)             C:\Windows\System32\gdi32.dll
      win32u.dll            Win32u                                              Microsoft Corporation                               10.0.19041.4529 (WinBuild.160101.0800)             C:\Windows\System32\win32u.dll
      gdi32full.dll         GDI Client DLL                                      Microsoft Corporation                               10.0.19041.4474 (WinBuild.160101.0800)             C:\Windows\System32\gdi32full.dll
      msvcp_win.dll         Microsoft? C Runtime Library                        Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\msvcp_win.dll
      USER32.dll            多用户 Windows 用户 API 客户端 DLL                          Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\user32.dll
      SHLWAPI.dll           外壳简易实用工具库                                           Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\shlwapi.dll
      msvcrt.dll            Windows NT CRT DLL                                  Microsoft Corporation                               7.0.19041.3636 (WinBuild.160101.0800)              C:\Windows\System32\msvcrt.dll
      MSVCP90.dll           Microsoft? C++ Runtime Library                      Microsoft Corporation                               9.00.30729.9625                                    C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9625_none_508ef7e4bcbbe589\msvcp90.dll
      MSVCR90.dll           Microsoft? C Runtime Library                        Microsoft Corporation                               9.00.30729.9625                                    C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9625_none_508ef7e4bcbbe589\msvcr90.dll
      IMM32.DLL             Multi-User Windows IMM32 API Client DLL             Microsoft Corporation                               10.0.19041.4474 (WinBuild.160101.0800)             C:\Windows\System32\imm32.dll
      kernel.appcore.dll    AppModel API Host                                   Microsoft Corporation                               10.0.19041.3758 (WinBuild.160101.0800)             C:\Windows\System32\kernel.appcore.dll
      bcryptPrimitives.dll  Windows Cryptographic Primitives Library            Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\bcryptPrimitives.dll
      stdlog.dll            Beijing Rising Information Technology Co., Ltd.     Beijing Rising Information Technology Co., Ltd.     3.0.0.10                                           C:\Program Files (x86)\Rising\REC\ep\stdlog.dll
      ADVAPI32.dll          高级 Windows 32 基本 API                                Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\advapi32.dll
      Syslay.dll            Syslay                                              Beijing Rising Information Technology Co., Ltd.     3.0.0.3                                            C:\Program Files (x86)\Rising\REC\ep\syslay.dll
      sechost.dll           Host for SCM/SDDL/LSA Lookup APIs                   Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\sechost.dll
      bcrypt.dll            Windows 加密基元库                                       Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\bcrypt.dll
      SHELL32.dll           Windows Shell 公用 DLL                                Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\shell32.dll
      shcore.dll            SHCORE                                              Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\SHCore.dll
      rscom.dll             rscom for rsdk                                      Beijing Rising Network Security Technology Co., Ltd.  3.0.0.13                                           C:\Program Files (x86)\Rising\REC\ep\Common Files\rscom.dll
      PSAPI.DLL             Process Status Helper                               Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\psapi.dll
      WTSAPI32.dll          Windows Remote Desktop Session Host Server SDK APIs  Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\wtsapi32.dll
      USERENV.dll           Userenv                                             Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\userenv.dll
      rsxml3w.dll           rsxml for rsdk                                      Beijing Rising Network Security Technology Co., Ltd.  3.0.0.4                                            C:\Program Files (x86)\Rising\REC\ep\Common Files\rsxml3w.dll
      mutexmgr.dll          mutexmgr Dynamic Link Library                       Beijing Rising Network Security Technology Co., Ltd.  3.0.0.8                                            C:\Program Files (x86)\Rising\REC\ep\Common Files\mutexmgr.dll
      OLEAUT32.dll          OLEAUT32.DLL                                        Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\oleaut32.dll
      envinfo.dll           EnvInfo Dynamic Link Library                        Beijing Rising Network Security Technology Co., Ltd.  3, 0, 0, 15                                        C:\Program Files (x86)\Rising\REC\ep\envinfo.dll
      IPHLPAPI.DLL          IP 帮助程序 API                                         Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\IPHLPAPI.DLL
      msc.dll               MSC Module                                          Beijing Rising Information Technology Co., Ltd.     3.0.0.2                                            C:\Program Files (x86)\Rising\REC\ep\Common Files\msc.dll
      managedb.dll          managedb Dynamic Link Library                       Beijing Rising Information Technology Co., Ltd.     3.0.0.11                                           C:\Program Files (x86)\Rising\REC\ep\Common Files\managedb.dll
      mscsrv.dll            mscsrv Dynamic Link Library                         Beijing Rising Information Technology Co., Ltd.     2.0.0.2                                            C:\Program Files (x86)\Rising\REC\ep\mscsrv.dll
      rstimer.dll           rstimer                                             Beijing Rising Information Technology Co., Ltd.     3, 0, 0, 6                                         C:\Program Files (x86)\Rising\REC\ep\rstimer.dll
      WINMM.dll             MCI API DLL                                         Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\winmm.dll
      EpStorage.dll         EpStorag Dynamic Link Library                       Beijing Rising Network Security Technology Co., Ltd.  1.0.0.73                                           C:\Program Files (x86)\Rising\REC\ep\EpStorage.dll
      logwrite.dll          Dynamic Link Library                                Beijing Rising Information Technology Co., Ltd.     3, 0, 0, 7                                         C:\Program Files (x86)\Rising\REC\ep\logwrite.dll
      endpoint.dll          endpoint Dynamic Link Library                       Beijing Rising Network Security Technology Co., Ltd.  5, 0, 0, 21                                        C:\Program Files (x86)\Rising\REC\ep\endpoint.dll
      WS2_32.dll            Windows Socket 2.0 32 位 DLL                         Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\ws2_32.dll
      duilib3.dll           duilib                                              Beijing Rising Network Security Technology Co., Ltd.  3, 0, 0, 37                                        C:\Program Files (x86)\Rising\REC\ep\duilib3.dll
      MSIMG32.dll           GDIEXT Client DLL                                   Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\msimg32.dll
      UxTheme.dll           Microsoft UxTheme 库                                 Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\uxtheme.dll
      gdiplus.dll           Microsoft GDI+                                      Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.4355_none_d950e3a7e104d0ea\GdiPlus.dll
      COMCTL32.dll          用户体验控件库                                             Microsoft Corporation                               6.10 (WinBuild.160101.0800)                        C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.4355_none_a865f0c28672571c\comctl32.dll
      WINSTA.dll            Winstation Library                                  Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\winsta.dll
      DNSAPI.dll            DNS 客户端 API DLL                                     Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\dnsapi.dll
      NSI.dll               NSI User-mode interface DLL                         Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\nsi.dll
      dhcpcsvc6.DLL         DHCPv6 客户端                                          Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\dhcpcsvc6.DLL
      dhcpcsvc.DLL          DHCP 客户端服务                                          Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\dhcpcsvc.dll
      WINNSI.DLL            Network Store Information RPC interface             Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\winnsi.dll
      authmgr.dll                                                               Beijing Rising Network Security Technology Co., Ltd.  1.0.0.16                                           C:\Program Files (x86)\Rising\REC\ep\authmgr.dll
      ATL90.DLL             ATL Module for Windows (Unicode)                    Microsoft Corporation                               9.00.30729.6161                                    C:\Windows\WinSxS\x86_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.6161_none_51cd0a7abbe4e19b\ATL90.dll
      agent.dll             Agent Dynamic Link Library                          Beijing Rising Network Security Technology Co., Ltd.  3, 0, 0, 72                                        C:\Program Files (x86)\Rising\REC\ep\agent\agent.dll
      rscurlp.dll           Rscurlp Dynamic Link Library                        Beijing Rising Network Security Technology Co., Ltd.  1, 0, 0, 8                                         C:\Program Files (x86)\Rising\REC\ep\common files\rscurlp.dll
      WLDAP32.dll           Win32 LDAP API DLL                                  Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\Wldap32.dll
      CRYPT32.dll           加密 API32                                            Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\crypt32.dll
      WINHTTP.dll           Windows HTTP 服务                                     Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\winhttp.dll
      sruaplugin.dll        RUAPlugin Dynamic Link Library                                                                          3.0.0.29                                           C:\Program Files (x86)\Rising\REC\ep\sruaplugin.dll
      assetmgrui.dll        assetmgr Dynamic Link Library                       Beijing Rising Network Security Technology Co., Ltd.  1, 0, 0, 5                                         C:\Program Files (x86)\Rising\REC\ep\assetmgr\assetmgrui.dll
      msgmgrui.dll          msgmgrui Dynamic Link Library                       Beijing Rising Network Security Technology Co., Ltd.  5, 0, 0, 3                                         C:\Program Files (x86)\Rising\REC\ep\msgmgr\msgmgrui.dll
      clbcatq.dll           COM+ Configuration Catalog                          Microsoft Corporation                               2001.12.10941.16384 (WinBuild.160101.0800)         C:\Windows\System32\clbcatq.dll
      msxml3.dll            MSXML 3.0                                           Microsoft Corporation                               8.110.19041.4355                                   C:\Windows\System32\msxml3.dll
      profapi.dll           User Profile Basic API                              Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\System32\profapi.dll
      SspiCli.dll           Security Support Provider Interface                 Microsoft Corporation                               10.0.19041.4239 (WinBuild.160101.0800)             C:\Windows\System32\sspicli.dll
      apphelp.dll           应用程序兼容性客户端库                                         Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\apphelp.dll


svchost.exe          5116                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


epsrv.exe            4656       服务进程                                               C:\Program Files (x86)\Rising\REC\ep\epsrv.exe                                                                                                                                                                                                                    "C:\Program Files (x86)\Rising\REC\ep\epsrv.exe"
      epsrv.exe             服务进程                                                Beijing Rising Network Security Technology Co., Ltd.  5, 0, 0, 5                                         C:\Program Files (x86)\Rising\REC\ep\epsrv.exe
      ntdll.dll             NT 层 DLL                                            Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\ntdll.dll
      KERNEL32.DLL          Windows NT 基本 API 客户端 DLL                           Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\kernel32.dll
      KERNELBASE.dll        Windows NT 基本 API 客户端 DLL                           Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\KERNELBASE.dll
      ole32.dll             用于 Windows 的 Microsoft OLE                          Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\ole32.dll
      ucrtbase.dll          Microsoft? C Runtime Library                        Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\ucrtbase.dll
      RPCRT4.dll            远程过程调用运行时                                           Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\rpcrt4.dll
      combase.dll           用于 Windows 的 Microsoft COM                          Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\combase.dll
      GDI32.dll             GDI Client DLL                                      Microsoft Corporation                               10.0.19041.4474 (WinBuild.160101.0800)             C:\Windows\System32\gdi32.dll
      win32u.dll            Win32u                                              Microsoft Corporation                               10.0.19041.4529 (WinBuild.160101.0800)             C:\Windows\System32\win32u.dll
      gdi32full.dll         GDI Client DLL                                      Microsoft Corporation                               10.0.19041.4474 (WinBuild.160101.0800)             C:\Windows\System32\gdi32full.dll
      msvcp_win.dll         Microsoft? C Runtime Library                        Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\msvcp_win.dll
      USER32.dll            多用户 Windows 用户 API 客户端 DLL                          Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\user32.dll
      SHLWAPI.dll           外壳简易实用工具库                                           Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\shlwapi.dll
      msvcrt.dll            Windows NT CRT DLL                                  Microsoft Corporation                               7.0.19041.3636 (WinBuild.160101.0800)              C:\Windows\System32\msvcrt.dll
      MSVCP90.dll           Microsoft? C++ Runtime Library                      Microsoft Corporation                               9.00.30729.9625                                    C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9625_none_508ef7e4bcbbe589\msvcp90.dll
      MSVCR90.dll           Microsoft? C Runtime Library                        Microsoft Corporation                               9.00.30729.9625                                    C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9625_none_508ef7e4bcbbe589\msvcr90.dll
      IMM32.DLL             Multi-User Windows IMM32 API Client DLL             Microsoft Corporation                               10.0.19041.4474 (WinBuild.160101.0800)             C:\Windows\System32\imm32.dll
      kernel.appcore.dll    AppModel API Host                                   Microsoft Corporation                               10.0.19041.3758 (WinBuild.160101.0800)             C:\Windows\System32\kernel.appcore.dll
      bcryptPrimitives.dll  Windows Cryptographic Primitives Library            Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\bcryptPrimitives.dll
      stdlog.dll            Beijing Rising Information Technology Co., Ltd.     Beijing Rising Information Technology Co., Ltd.     3.0.0.10                                           C:\Program Files (x86)\Rising\REC\ep\stdlog.dll
      ADVAPI32.dll          高级 Windows 32 基本 API                                Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\advapi32.dll
      sechost.dll           Host for SCM/SDDL/LSA Lookup APIs                   Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\sechost.dll
      bcrypt.dll            Windows 加密基元库                                       Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\bcrypt.dll
      Syslay.dll            Syslay                                              Beijing Rising Information Technology Co., Ltd.     3.0.0.3                                            C:\Program Files (x86)\Rising\REC\ep\syslay.dll
      SHELL32.dll           Windows Shell 公用 DLL                                Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\shell32.dll
      shcore.dll            SHCORE                                              Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\SHCore.dll
      rscom.dll             rscom for rsdk                                      Beijing Rising Network Security Technology Co., Ltd.  3.0.0.13                                           C:\Program Files (x86)\Rising\REC\ep\Common Files\rscom.dll
      PSAPI.DLL             Process Status Helper                               Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\psapi.dll
      WTSAPI32.dll          Windows Remote Desktop Session Host Server SDK APIs  Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\wtsapi32.dll
      USERENV.dll           Userenv                                             Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\userenv.dll
      rsxml3w.dll           rsxml for rsdk                                      Beijing Rising Network Security Technology Co., Ltd.  3.0.0.4                                            C:\Program Files (x86)\Rising\REC\ep\Common Files\rsxml3w.dll
      mutexmgr.dll          mutexmgr Dynamic Link Library                       Beijing Rising Network Security Technology Co., Ltd.  3.0.0.8                                            C:\Program Files (x86)\Rising\REC\ep\Common Files\mutexmgr.dll
      OLEAUT32.dll          OLEAUT32.DLL                                        Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\oleaut32.dll
      clbcatq.dll           COM+ Configuration Catalog                          Microsoft Corporation                               2001.12.10941.16384 (WinBuild.160101.0800)         C:\Windows\System32\clbcatq.dll
      FirewallAPI.dll       Windows Defender 防火墙 API                            Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\FirewallAPI.dll
      DNSAPI.dll            DNS 客户端 API DLL                                     Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\dnsapi.dll
      IPHLPAPI.DLL          IP 帮助程序 API                                         Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\IPHLPAPI.DLL
      NSI.dll               NSI User-mode interface DLL                         Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\nsi.dll
      fwbase.dll            Firewall Base DLL                                   Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\System32\fwbase.dll
      FWPolicyIOMgr.dll     FwPolicyIoMgr DLL                                   Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\System32\FWPolicyIOMgr.dll
      msc.dll               MSC Module                                          Beijing Rising Information Technology Co., Ltd.     3.0.0.2                                            C:\Program Files (x86)\Rising\REC\ep\Common Files\msc.dll
      envinfo.dll           EnvInfo Dynamic Link Library                        Beijing Rising Network Security Technology Co., Ltd.  3, 0, 0, 15                                        C:\Program Files (x86)\Rising\REC\ep\envinfo.dll
      managedb.dll          managedb Dynamic Link Library                       Beijing Rising Information Technology Co., Ltd.     3.0.0.11                                           C:\Program Files (x86)\Rising\REC\ep\Common Files\managedb.dll
      EpStorage.dll         EpStorag Dynamic Link Library                       Beijing Rising Network Security Technology Co., Ltd.  1.0.0.73                                           C:\Program Files (x86)\Rising\REC\ep\EpStorage.dll
      rulemgr.dll                                                               Beijing Rising Information Technology Co., Ltd.     3.0.0.3                                            C:\Program Files (x86)\Rising\REC\ep\rulemgr.dll
      drvcrt.dll            drvcrt                                              Beijing Rising Network Security Technology Co., Ltd.  3.0.0.3                                            C:\Program Files (x86)\Rising\REC\ep\drvcrt.dll
      drvapp.dll             drvapp Dynamic Link Library                        Beijing Rising Network Security Technology Co., Ltd.  3.0.0.9                                            C:\Program Files (x86)\Rising\REC\ep\drvapp.dll
      NETAPI32.dll          Net Win32 API DLL                                   Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\netapi32.dll
      SAMCLI.DLL            Security Accounts Manager Client DLL                Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\samcli.dll
      NETUTILS.DLL          Net Win32 API Helpers DLL                           Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\netutils.dll
      windows.storage.dll   Microsoft WinRT Storage API                         Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\windows.storage.dll
      Wldp.dll              Windows 锁定策略                                        Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\wldp.dll
      profapi.dll           User Profile Basic API                              Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\System32\profapi.dll
      SAMLIB.dll            SAM Library DLL                                     Microsoft Corporation                               10.0.19041.3996 (WinBuild.160101.0800)             C:\Windows\System32\samlib.dll
      Hookesm.dll           Hookesm.dll                                         Beijing Rising Network Security Technology Co., Ltd.  1, 0, 0, 11                                        C:\Program Files (x86)\Rising\REC\ep\hookesm.dll
      fwdrvapp.dll           drvapp Dynamic Link Library                        Beijing Rising Network Security Technology Co., Ltd.  3.0.0.2                                            C:\Program Files (x86)\Rising\REC\xfw\fwdrvapp.dll
      esmdrv.dll            esmdrv.dll                                          Beijing Rising Network Security Technology Co., Ltd.  3.0.0.6                                            C:\Program Files (x86)\Rising\REC\xfw\esmdrv.dll
      WS2_32.dll            Windows Socket 2.0 32 位 DLL                         Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\ws2_32.dll
      comx3.dll             comx3 x86 or x64                                    Beijing Rising Information Technology Co., Ltd.     3.0.0.2                                            C:\Program Files (x86)\Rising\REC\ep\comx3.dll
      WINSTA.dll            Winstation Library                                  Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\winsta.dll
      sspicli.dll           Security Support Provider Interface                 Microsoft Corporation                               10.0.19041.4239 (WinBuild.160101.0800)             C:\Windows\System32\sspicli.dll
      daggc.dll             daggc Dynamic Link Library                          Beijing Rising Network Security Technology Co., Ltd.  1, 0, 0, 5                                         C:\Program Files (x86)\Rising\REC\ep\daggc.dll
      appeng.dll            appeng Dynamic Link Library                         Beijing Rising Network Security Technology Co., Ltd.  3.0.0.4                                            C:\Program Files (x86)\Rising\REC\ep\rfm\appeng.dll
      moncache.dll          moncache Dynamic Link Library                       Beijing Rising Information Technology Co., Ltd.     3.0.0.13                                           C:\Program Files (x86)\Rising\REC\ep\rfm\moncache.dll
      rsnetsvr.dll          rsnetsvr                                            Beijing Rising Information Technology Co., Ltd.     3.0.0.20                                           C:\Program Files (x86)\Rising\REC\ep\rfm\rsnetsvr.dll
      WINTRUST.dll          Microsoft Trust Verification APIs                   Microsoft Corporation                               10.0.19041.4529 (WinBuild.160101.0800)             C:\Windows\System32\wintrust.dll
      CRYPT32.dll           加密 API32                                            Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\crypt32.dll
      imagehlp.dll          Windows NT Image Helper                             Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\imagehlp.dll
      MSASN1.dll            ASN.1 Runtime APIs                                  Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\msasn1.dll
      mgclient.dll          mgclient                                            Beijing Rising Information Technology Co., Ltd.     3.0.0.4                                            C:\Program Files (x86)\Rising\REC\ep\rfm\mgclient.dll
      dbghelp.dll           Windows Image Helper                                Microsoft Corporation                               10.0.19041.3996 (WinBuild.160101.0800)             C:\Windows\System32\dbghelp.dll
      WSOCK32.dll           Windows Socket 32-Bit DLL                           Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\wsock32.dll
      CRYPTBASE.DLL         Base cryptographic API DLL                          Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\CRYPTBASE.DLL
      napinsp.dll           电子邮件命名填充提供程序                                        Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\NapiNSP.dll
      pnrpnsp.dll           PNRP 命名空间提供程序                                       Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\pnrpnsp.dll
      wshbth.dll            Windows Sockets Helper DLL                          Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\wshbth.dll
      NLAapi.dll            Network Location Awareness 2                        Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\nlaapi.dll
      mswsock.dll           Microsoft Windows Sockets 2.0 服务提供程序                Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\mswsock.dll
      winrnr.dll            LDAP RnR Provider DLL                               Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\winrnr.dll
      mdnsNSP.dll           Bonjour Namespace Provider                          Apple Inc.                                          3,1,0,1                                            C:\Program Files (x86)\Bonjour\mdnsNSP.dll
      fwpuclnt.dll          FWP/IPsec 用户模式 API                                  Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\FWPUCLNT.DLL
      rasadhlp.dll          Remote Access AutoDial Helper                       Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\rasadhlp.dll
      CRYPTSP.dll           Cryptographic Service Provider API                  Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\cryptsp.dll
      rsaenh.dll            Microsoft Enhanced Cryptographic Provider           Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\rsaenh.dll
      coml2.dll             Microsoft COM for Windows                           Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\System32\coml2.dll
      rsstore.dll           RSStore                                             Beijing Rising Network Security Technology Co., Ltd.  3, 0, 0, 31                                        C:\Program Files (x86)\Rising\REC\xav\rsstore.dll
      xavsrv.dll            xavsrv Dynamic Link Library                         Beijing Rising Network Security Technology Co., Ltd.  3, 0, 1, 97                                        C:\Program Files (x86)\Rising\REC\xav\xavsrv.dll
      cloudqry.dll          Esm cloud query                                     Beijing Rising Information Technology Co., Ltd.                                                        C:\Program Files (x86)\Rising\REC\xav\cloudqry.dll
      WLDAP32.dll           Win32 LDAP API DLL                                  Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\Wldap32.dll
      cloudcom.dll          Cloud Provider DLL                                  Beijing Rising Network Security Technology Co., Ltd.  3, 0, 0, 5                                         C:\Program Files (x86)\Rising\REC\xav\cloudcom.dll
      FastDBDll.dll         FastDBDll Dynamic Link Library                      Beijing Rising Network Security Technology Co., Ltd.  3, 0, 0, 15                                        C:\Program Files (x86)\Rising\REC\xav\FastDBDll.dll
      KVEngine.dll          KVEngine Dynamic Link Library                       Beijing Rising Network Security Technology Co., Ltd.  3, 0, 0, 92                                        C:\Program Files (x86)\Rising\REC\xav\kvengine.dll
      filemon.dll           filemon Dynamic Link Library                        Beijing Rising Network Security Technology Co., Ltd.  3, 0, 1, 9                                         C:\Program Files (x86)\Rising\REC\xav\filemon.dll
      SETUPAPI.dll          Windows 安装程序 API                                    Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\setupapi.dll
      cfgmgr32.dll          Configuration Manager DLL                           Microsoft Corporation                               10.0.19041.3996 (WinBuild.160101.0800)             C:\Windows\System32\cfgmgr32.dll
      VERSION.dll           Version Checking and File Installation Libraries    Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\version.dll
      sfc.dll               Windows File Protection                             Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\sfc.dll
      SRVCLI.DLL            Server Service Client DLL                           Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\srvcli.dll
      sfc_os.DLL            Windows File Protection                             Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\System32\sfc_os.dll
      filemonque.dll        filemonq Dynamic Link Library                       Beijing Rising Network Security Technology Co., Ltd.  3, 0, 0, 6                                         C:\Program Files (x86)\Rising\REC\xav\filemonque.dll
      WINMM.dll             MCI API DLL                                         Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\winmm.dll
      inetmib1.dll          Microsoft MIB-II subagent                           Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\inetmib1.dll
      snmpapi.dll           SNMP Utility Library                                Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\snmpapi.dll
      defmon.dll            主动防御模块                                              Beijing Rising Network Security Technology Co., Ltd.  3, 0, 0, 19                                        C:\Program Files (x86)\Rising\REC\xav\defmon.dll
      VirusAction.dll       VirusAct 动态链接库                                      Beijing Rising Network Security Technology Co., Ltd.                                                     C:\Program Files (x86)\Rising\REC\xav\VirusAction.dll
      hotpatchcom.dll       HotPatchCom 动态链接库                                   Beijing Rising Information Technology Co., Ltd.     3.0.0.1                                            C:\Program Files (x86)\Rising\REC\xav\hotpatchcom.dll
      extortmon.dll         extortmo 动态链接库                                      Beijing Rising Network Security Technology Co., Ltd.  1, 0, 0, 5                                         C:\Program Files (x86)\Rising\REC\xav\extortmon.dll
      rsmnewplug.dll        RsmNewPlug Dynamic Link Library                     Beijing Rising Network Security Technology Co., Ltd.  3, 0, 0, 6                                         C:\Program Files (x86)\Rising\REC\xfw\rsmnewplug.dll
      rfwplug.dll           rfwplug 动态链接库                                       Beijing Rising Network Security Technology Co., Ltd.  3, 0, 0, 27                                        C:\Program Files (x86)\Rising\REC\xfw\rfwplug.dll
      softeng.dll           softeng Dynamic Link Library                        Beijing Rising Network Security Technology Co., Ltd.  3.0.0.3                                            C:\Program Files (x86)\Rising\REC\ep\common files\softeng.dll
      fwlog.dll             fwlog Dynamic Link Library                          Beijing Rising Network Security Technology Co., Ltd.  1, 0, 0, 58                                        C:\Program Files (x86)\Rising\REC\xfw\fwlog.dll
      fwsrv.dll             fwsrv 动态链接库                                         Beijing Rising Network Security Technology Co., Ltd.  3, 0, 0, 71                                        C:\Program Files (x86)\Rising\REC\xfw\fwsrv.dll
      WINHTTP.dll           Windows HTTP 服务                                     Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\winhttp.dll
      WININET.dll           Win32 的 Internet 扩展                                 Microsoft Corporation                               11.00.19041.4406 (WinBuild.160101.0800)            C:\Windows\System32\wininet.dll
      mPorts.dll            get ports list                                      Beijing Rising Information Technology Co., Ltd.     24.0.0.3                                           c:\program files (x86)\Rising\REC\xfw\mports.dll
      dhcpcsvc6.DLL         DHCPv6 客户端                                          Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\dhcpcsvc6.DLL
      dhcpcsvc.DLL          DHCP 客户端服务                                          Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\dhcpcsvc.dll
      WINNSI.DLL            Network Store Information RPC interface             Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\winnsi.dll
      fwproxy.dll           Rising Personal FireWall Service                    Beijing Rising Network Security Technology Co., Ltd.  1, 0, 0, 50                                        c:\program files (x86)\Rising\REC\xfw\fwproxy.dll
      urlrule.dll           Rising AntiSpyware UrlRule  Library                 Beijing Rising Information Technology Co., Ltd.     24.0.0.2                                           c:\program files (x86)\Rising\REC\xfw\fwlib\urlrule.dll
      recomp.dll            component manager Dynamic Link Library              Beijing Rising Information Technology Co., Ltd.     24, 0, 0, 20                                       c:\program files (x86)\Rising\REC\xfw\fwlib\recomp.dll
      refs.dll              filesystem Dynamic Link Library                     Beijing Rising Information Technology Co., Ltd.     23, 0, 0, 7                                        c:\program files (x86)\Rising\REC\xfw\fwlib\refs.dll
      viruslib.dll          VirusLib Dynamic Link Library                       Beijing Rising Information Technology Co., Ltd.     23, 0, 0, 9                                        c:\program files (x86)\Rising\REC\xfw\fwlib\viruslib.dll
      relibldr.dll          libloader Dynamic Link Library                      Beijing Rising Information Technology Co., Ltd.     23, 0, 0, 7                                        c:\program files (x86)\Rising\REC\xfw\fwlib\relibldr.dll
      fwfish.dll            fishing Dynamic Link Library                        Beijing Rising Information Technology Co., Ltd.     23, 0, 0, 6                                        c:\program files (x86)\Rising\REC\xfw\fwlib\fwfish.dll
      fwcomp.dll            component manager Dynamic Link Library              Beijing Rising Information Technology Co., Ltd.     23, 0, 0, 11                                       c:\program files (x86)\Rising\REC\xfw\fwlib\fwcomp.dll
      fwfs.dll              filesystem Dynamic Link Library                     Beijing Rising Information Technology Co., Ltd.     23, 0, 0, 5                                        c:\program files (x86)\Rising\REC\xfw\fwlib\fwfs.dll
      fwvirlib.dll          VirusLib Dynamic Link Library                       Beijing Rising Information Technology Co., Ltd.     23, 0, 0, 5                                        c:\program files (x86)\Rising\REC\xfw\fwlib\fwvirlib.dll
      fwlibldr.dll          libloader Dynamic Link Library                      Beijing Rising Information Technology Co., Ltd.     23, 0, 0, 3                                        c:\program files (x86)\Rising\REC\xfw\fwlib\fwlibldr.dll
      rfwrule.dll                                                               Beijing Rising Information Technology Co., Ltd.     24.0.0.3                                           C:\Program Files (x86)\Rising\REC\xfw\rfwrule.dll
      rsmailmon.dll         MailMon                                             Beijing Rising Information Technology Co., Ltd.     1.0.0.51                                           C:\Program Files (x86)\Rising\REC\xfw\rsmailmon.dll
      apphelp.dll           应用程序兼容性客户端库                                         Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\apphelp.dll
      rxruntim.dll          rxruntime                                           Beijing Rising Network Security Technology Co., Ltd.  25.0.1.5                                           C:\Program Files (x86)\Rising\REC\xav\rego\rxruntim.dll
      rxmss.dll             rxmss                                               Beijing Rising Network Security Technology Co., Ltd.  25.0.1.2                                           C:\Program Files (x86)\Rising\REC\xav\rego\rxmss.dll
      rxcore.dll            rxcore                                              Beijing Rising Network Security Technology Co., Ltd.  25.0.1.10                                          C:\Program Files (x86)\Rising\REC\xav\rego\rxcore.dll
      rxcoml.dll            rxcoml                                              Beijing Rising Network Security Technology Co., Ltd.  25.0.0.20                                          C:\Program Files (x86)\Rising\REC\xav\rego\rxcoml.dll
      rxsig64.dll           rxsig64                                             Beijing Rising Network Security Technology Co., Ltd.  25.0.0.20                                          C:\Program Files (x86)\Rising\REC\xav\rego\rxsig64.dll
      rxffr.dll             rxffr                                               Beijing Rising Network Security Technology Co., Ltd.  25.0.1.12                                          C:\Program Files (x86)\Rising\REC\xav\rego\rxffr.dll
      uroutine.dll          uroutine                                            Beijing Rising Network Security Technology Co., Ltd.  25.0.0.33                                          C:\Program Files (x86)\Rising\REC\xav\rego\uroutine.dll
      rxfsm.dll             rxfsm                                               Beijing Rising Network Security Technology Co., Ltd.  25.0.0.29                                          C:\Program Files (x86)\Rising\REC\xav\rego\rxfsm.dll
      rxxdu0.dll            rxxdu0                                              Beijing Rising Network Security Technology Co., Ltd.  25.0.1.21                                          C:\Program Files (x86)\Rising\REC\xav\rego\rxxdu0.dll
      scanpe.dll            scanpe                                              Beijing Rising Network Security Technology Co., Ltd.  25.0.0.23                                          C:\Program Files (x86)\Rising\REC\xav\rego\scanpe.dll
      rxvision.dll          rxvision                                            Beijing Rising Network Security Technology Co., Ltd.  25.0.0.18                                          C:\Program Files (x86)\Rising\REC\xav\rego\rxvision.dll
      rxxman.dll            rxxman                                              Beijing Rising Network Security Technology Co., Ltd.  25.0.0.28                                          C:\Program Files (x86)\Rising\REC\xav\rego\rxxman.dll
      rxcav.dll             rx-c17                                              Beijing Rising Network Security Technology Co., Ltd.  25.0.0.9                                           C:\Program Files (x86)\Rising\REC\xav\rego\rxcav.dll
      luaport.dll           xavsrv lua support library                          Beijing Rising Network Security Technology Co., Ltd.  1.0.0.13                                           C:\Program Files (x86)\Rising\REC\xav\rego\luaport.dll
      sxs.dll               Fusion 2.5                                          Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\sxs.dll
      wbemprox.dll          WMI                                                 Microsoft Corporation                               10.0.19041.4474 (WinBuild.160101.0800)             C:\Windows\System32\wbem\wbemprox.dll
      wbemcomn.dll          WMI                                                 Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\System32\wbemcomn.dll
      xavport.dll           TODO: <File description>                            Beijing Rising Network Security Technology Co., Ltd.  1.0.0.5                                            C:\Program Files (x86)\Rising\REC\xav\xavport.dll
      ATL90.DLL             ATL Module for Windows (Unicode)                    Microsoft Corporation                               9.00.30729.6161                                    C:\Windows\WinSxS\x86_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.6161_none_51cd0a7abbe4e19b\ATL90.dll
      pearc.dll             pearchive Dynamic Link Library                      Beijing Rising Information Technology Co., Ltd.     24, 0, 0, 9                                        C:\Program Files (x86)\Rising\REC\xav\pearc.dll
      DEVOBJ.dll            Device Information Set DLL                          Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\System32\devobj.dll
      cscapi.dll            Offline Files Win32 API                             Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\cscapi.dll
      rsftppmon.dll         rsftppmon 动态链接库                                     Beijing Rising Information Technology Co., Ltd.     1, 0, 0, 4                                         c:\program files (x86)\Rising\REC\xfw\rsftppmon.dll
      gpapi.dll             组策略客户端 API                                          Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\gpapi.dll
      urllib.dll            Urllib Dynamic Link Library                         Beijing Rising Information Technology Co., Ltd.     24, 0, 0, 2                                        c:\program files (x86)\Rising\REC\xfw\fwlib\urllib.dll
      scanexec.dll          scanexec                                            Beijing Rising Network Security Technology Co., Ltd.  25.0.0.21                                          C:\Program Files (x86)\Rising\REC\xav\rego\scanexec.dll
      vex86.dll             vex86                                               Beijing Rising Network Security Technology Co., Ltd.  25.0.0.22                                          C:\Program Files (x86)\Rising\REC\xav\rego\vex86.dll
      methodex.dll          MethodEx                                            Beijing Rising Network Security Technology Co., Ltd.  25.0.0.22                                          C:\Program Files (x86)\Rising\REC\xav\rego\methodex.dll
      scanex.dll            scanex                                              Beijing Rising Network Security Technology Co., Ltd.  25.0.0.38                                          C:\Program Files (x86)\Rising\REC\xav\rego\scanex.dll
      rxwinpe.dll           rxwinpe                                             Beijing Rising Network Security Technology Co., Ltd.  25.0.0.41                                          C:\Program Files (x86)\Rising\REC\xav\rego\rxwinpe.dll
      scansct.dll           scansct                                             Beijing Rising Network Security Technology Co., Ltd.  25.0.0.21                                          C:\Program Files (x86)\Rising\REC\xav\rego\scansct.dll
      scanelf.dll           scanelf                                             Beijing Rising Network Security Technology Co., Ltd.  25.0.0.18                                          C:\Program Files (x86)\Rising\REC\xav\rego\scanelf.dll
      rxarch.dll            rxarch                                              Beijing Rising Network Security Technology Co., Ltd.  25.0.1.3                                           C:\Program Files (x86)\Rising\REC\xav\rego\rxarch.dll
      urutils.dll           urutils                                             Beijing Rising Network Security Technology Co., Ltd.  25.0.0.20                                          C:\Program Files (x86)\Rising\REC\xav\rego\urutils.dll
      revm.dll              revm                                                Beijing Rising Network Security Technology Co., Ltd.  25.0.0.20                                          C:\Program Files (x86)\Rising\REC\xav\rego\revm.dll
      rxoffice.dll          rxoffice                                            Beijing Rising Network Security Technology Co., Ltd.  25.0.1.4                                           C:\Program Files (x86)\Rising\REC\xav\rego\rxoffice.dll
      scanmac.dll           scanmac                                             Beijing Rising Network Security Technology Co., Ltd.  25.0.0.24                                          C:\Program Files (x86)\Rising\REC\xav\rego\scanmac.dll
      rxmail.dll            rxmail                                              Beijing Rising Network Security Technology Co., Ltd.  25.0.0.26                                          C:\Program Files (x86)\Rising\REC\xav\rego\rxmail.dll


TbtP2pShortcutService.exe 4440                                                          C:\Windows\TbtP2pShortcutService.exe                                                                                                                                                                                                                              C:\Windows\TbtP2pShortcutService.exe


SecCenAdapterServer.exe 4444                                                                                                                                                                                                                                                                                                                            


WMIRegistrationService.exe 5136       Intel(R) Management Engine WMI Provider Registration C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_d51901c26227fb29\WMIRegistrationService.exe                                                                                                                                                    C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_d51901c26227fb29\WMIRegistrationService.exe
      WMIRegistrationService.exe  Intel(R) Management Engine WMI Provider Registration  Intel Corporation                                   2408.5.4.0                                         C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_d51901c26227fb29\WMIRegistrationService.exe
      ntdll.dll             NT 层 DLL                                            Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\ntdll.dll
      KERNEL32.DLL          Windows NT 基本 API 客户端 DLL                           Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\kernel32.dll
      KERNELBASE.dll        Windows NT 基本 API 客户端 DLL                           Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\KERNELBASE.dll
      SHLWAPI.dll           外壳简易实用工具库                                           Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\shlwapi.dll
      msvcrt.dll            Windows NT CRT DLL                                  Microsoft Corporation                               7.0.19041.3636 (WinBuild.160101.0800)              C:\Windows\System32\msvcrt.dll
      SHELL32.dll           Windows Shell 公用 DLL                                Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\shell32.dll
      msvcp_win.dll         Microsoft? C Runtime Library                        Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\msvcp_win.dll
      ucrtbase.dll          Microsoft? C Runtime Library                        Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\ucrtbase.dll
      USER32.dll            多用户 Windows 用户 API 客户端 DLL                          Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\user32.dll
      win32u.dll            Win32u                                              Microsoft Corporation                               10.0.19041.4529 (WinBuild.160101.0800)             C:\Windows\System32\win32u.dll
      GDI32.dll             GDI Client DLL                                      Microsoft Corporation                               10.0.19041.4474 (WinBuild.160101.0800)             C:\Windows\System32\gdi32.dll
      gdi32full.dll         GDI Client DLL                                      Microsoft Corporation                               10.0.19041.4474 (WinBuild.160101.0800)             C:\Windows\System32\gdi32full.dll
      ole32.dll             用于 Windows 的 Microsoft OLE                          Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\ole32.dll
      RPCRT4.dll            远程过程调用运行时                                           Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\rpcrt4.dll
      combase.dll           用于 Windows 的 Microsoft COM                          Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\combase.dll
      ADVAPI32.dll          高级 Windows 32 基本 API                                Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\advapi32.dll
      sechost.dll           Host for SCM/SDDL/LSA Lookup APIs                   Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\sechost.dll
      bcrypt.dll            Windows 加密基元库                                       Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\bcrypt.dll
      IMM32.DLL             Multi-User Windows IMM32 API Client DLL             Microsoft Corporation                               10.0.19041.4474 (WinBuild.160101.0800)             C:\Windows\System32\imm32.dll
      windows.storage.dll   Microsoft WinRT Storage API                         Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\windows.storage.dll
      Wldp.dll              Windows 锁定策略                                        Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\wldp.dll
      OLEAUT32.dll          OLEAUT32.DLL                                        Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\oleaut32.dll
      SHCORE.dll            SHCORE                                              Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\SHCore.dll
      bcryptPrimitives.dll  Windows Cryptographic Primitives Library            Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\bcryptPrimitives.dll
      kernel.appcore.dll    AppModel API Host                                   Microsoft Corporation                               10.0.19041.3758 (WinBuild.160101.0800)             C:\Windows\System32\kernel.appcore.dll
      PROPSYS.dll           Microsoft 属性系统                                      Microsoft Corporation                               7.0.19041.4406 (WinBuild.160101.0800)              C:\Windows\System32\propsys.dll
      clbcatq.dll           COM+ Configuration Catalog                          Microsoft Corporation                               2001.12.10941.16384 (WinBuild.160101.0800)         C:\Windows\System32\clbcatq.dll
      profapi.dll           User Profile Basic API                              Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\System32\profapi.dll
      edputil.dll           EDP 实用程序                                            Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\edputil.dll
      urlmon.dll            Win32 的 OLE32 扩展                                    Microsoft Corporation                               11.00.19041.4406 (WinBuild.160101.0800)            C:\Windows\System32\urlmon.dll
      iertutil.dll          Internet Explorer 的运行时实用程序                          Microsoft Corporation                               11.00.19041.4406 (WinBuild.160101.0800)            C:\Windows\System32\iertutil.dll
      srvcli.dll            Server Service Client DLL                           Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\srvcli.dll
      netutils.dll          Net Win32 API Helpers DLL                           Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\netutils.dll
      CFGMGR32.dll          Configuration Manager DLL                           Microsoft Corporation                               10.0.19041.3996 (WinBuild.160101.0800)             C:\Windows\System32\cfgmgr32.dll
      SspiCli.dll           Security Support Provider Interface                 Microsoft Corporation                               10.0.19041.4239 (WinBuild.160101.0800)             C:\Windows\System32\sspicli.dll
      virtdisk.dll          Virtual Disk API DLL                                Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\virtdisk.dll
      FLTLIB.DLL            筛选器库                                                Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\fltLib.dll
      pcacli.dll            Program Compatibility Assistant Client Module       Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\pcacli.dll
      MPR.dll               多提供程序路由器 DLL                                        Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\mpr.dll
      sfc_os.dll            Windows File Protection                             Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\System32\sfc_os.dll


svchost.exe          5148                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


escsvc64.exe         5160                                                          C:\Windows\System32\escsvc64.exe                                                                                                                                                                                                                                  C:\Windows\System32\escsvc64.exe


svchost.exe          5200       Windows 服务主进程                                      C:\Windows\SysWOW64\svchost.exe                                                                                                                                                                                                                                   C:\Windows\SysWOW64\svchost.exe -k netsvcs -p -s XLServicePlatform
      svchost.exe           Windows 服务主进程                                       Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\SysWOW64\svchost.exe
      ntdll.dll             NT 层 DLL                                            Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\ntdll.dll
      KERNEL32.DLL          Windows NT 基本 API 客户端 DLL                           Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\kernel32.dll
      KERNELBASE.dll        Windows NT 基本 API 客户端 DLL                           Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\KERNELBASE.dll
      sechost.dll           Host for SCM/SDDL/LSA Lookup APIs                   Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\sechost.dll
      RPCRT4.dll            远程过程调用运行时                                           Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\rpcrt4.dll
      bcrypt.dll            Windows 加密基元库                                       Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\bcrypt.dll
      ucrtbase.dll          Microsoft? C Runtime Library                        Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\ucrtbase.dll
      combase.dll           用于 Windows 的 Microsoft COM                          Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\combase.dll
      kernel.appcore.dll    AppModel API Host                                   Microsoft Corporation                               10.0.19041.3758 (WinBuild.160101.0800)             C:\Windows\System32\kernel.appcore.dll
      msvcrt.dll            Windows NT CRT DLL                                  Microsoft Corporation                               7.0.19041.3636 (WinBuild.160101.0800)              C:\Windows\System32\msvcrt.dll
      bcryptPrimitives.dll  Windows Cryptographic Primitives Library            Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\bcryptPrimitives.dll
      user32.dll            多用户 Windows 用户 API 客户端 DLL                          Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\user32.dll
      win32u.dll            Win32u                                              Microsoft Corporation                               10.0.19041.4529 (WinBuild.160101.0800)             C:\Windows\System32\win32u.dll
      GDI32.dll             GDI Client DLL                                      Microsoft Corporation                               10.0.19041.4474 (WinBuild.160101.0800)             C:\Windows\System32\gdi32.dll
      gdi32full.dll         GDI Client DLL                                      Microsoft Corporation                               10.0.19041.4474 (WinBuild.160101.0800)             C:\Windows\System32\gdi32full.dll
      msvcp_win.dll         Microsoft? C Runtime Library                        Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\msvcp_win.dll
      IMM32.DLL             Multi-User Windows IMM32 API Client DLL             Microsoft Corporation                               10.0.19041.4474 (WinBuild.160101.0800)             C:\Windows\System32\imm32.dll
      xlsp.dll              XLServicePlatform 动态链接库                             深圳市迅雷网络技术有限公司                                       3.0.0.7                                            c:\program files (x86)\common files\thunder network\serviceplatform\XLSP.dll
      SHLWAPI.dll           外壳简易实用工具库                                           Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\shlwapi.dll
      WS2_32.dll            Windows Socket 2.0 32 位 DLL                         Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\ws2_32.dll
      CRYPT32.dll           加密 API32                                            Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\crypt32.dll
      ADVAPI32.dll          高级 Windows 32 基本 API                                Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\advapi32.dll
      SHELL32.dll           Windows Shell 公用 DLL                                Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\shell32.dll
      WINTRUST.dll          Microsoft Trust Verification APIs                   Microsoft Corporation                               10.0.19041.4529 (WinBuild.160101.0800)             C:\Windows\System32\wintrust.dll
      VERSION.dll           Version Checking and File Installation Libraries    Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\version.dll
      libexpat.dll          libexpat.dll                                        深圳市迅雷网络技术有限公司                                       2.0.0.1                                            c:\program files (x86)\common files\thunder network\serviceplatform\libexpat.dll
      MSVCP90.dll           Microsoft? C++ Runtime Library                      Microsoft Corporation                               9.00.30729.9625                                    C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9625_none_508ef7e4bcbbe589\msvcp90.dll
      MSVCR90.dll           Microsoft? C Runtime Library                        Microsoft Corporation                               9.00.30729.9625                                    C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9625_none_508ef7e4bcbbe589\msvcr90.dll
      IPHLPAPI.DLL          IP 帮助程序 API                                         Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\IPHLPAPI.DLL
      WININET.dll           Win32 的 Internet 扩展                                 Microsoft Corporation                               11.00.19041.4406 (WinBuild.160101.0800)            C:\Windows\System32\wininet.dll
      MSASN1.dll            ASN.1 Runtime APIs                                  Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\msasn1.dll
      WLDP.DLL              Windows 锁定策略                                        Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\wldp.dll
      OLEAUT32.dll          OLEAUT32.DLL                                        Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\oleaut32.dll
      XLBugHandler.dll      XLBugHandler                                                                                            4.2.1.15                                           c:\program files (x86)\common files\thunder network\serviceplatform\XLBugHandler.dll
      PSAPI.DLL             Process Status Helper                               Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\psapi.dll
      dbghelp.dll           Windows Image Helper                                Microsoft Corporation                               10.0.19041.3996 (WinBuild.160101.0800)             C:\Windows\System32\dbghelp.dll
      dbgcore.DLL           Windows Core Debugging Helpers                      Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\System32\dbgcore.dll
      SHCORE.dll            SHCORE                                              Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\SHCore.dll
      mswsock.dll           Microsoft Windows Sockets 2.0 服务提供程序                Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\mswsock.dll
      windows.storage.dll   Microsoft WinRT Storage API                         Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\windows.storage.dll
      DNSAPI.dll            DNS 客户端 API DLL                                     Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\dnsapi.dll
      NSI.dll               NSI User-mode interface DLL                         Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\nsi.dll
      profapi.dll           User Profile Basic API                              Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\System32\profapi.dll
      mdnsNSP.dll           Bonjour Namespace Provider                          Apple Inc.                                          3,1,0,1                                            C:\Program Files (x86)\Bonjour\mdnsNSP.dll
      iertutil.dll          Internet Explorer 的运行时实用程序                          Microsoft Corporation                               11.00.19041.4406 (WinBuild.160101.0800)            C:\Windows\System32\iertutil.dll
      SspiCli.dll           Security Support Provider Interface                 Microsoft Corporation                               10.0.19041.4239 (WinBuild.160101.0800)             C:\Windows\System32\sspicli.dll
      ondemandconnroutehelper.dll  On Demand Connctiond Route Helper                   Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\System32\ondemandconnroutehelper.dll
      winhttp.dll           Windows HTTP 服务                                     Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\winhttp.dll
      fwpuclnt.dll          FWP/IPsec 用户模式 API                                  Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\FWPUCLNT.DLL
      WINNSI.DLL            Network Store Information RPC interface             Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\winnsi.dll
      rasadhlp.dll          Remote Access AutoDial Helper                       Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\rasadhlp.dll
      urlmon.dll            Win32 的 OLE32 扩展                                    Microsoft Corporation                               11.00.19041.4406 (WinBuild.160101.0800)            C:\Windows\System32\urlmon.dll
      netutils.dll          Net Win32 API Helpers DLL                           Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\netutils.dll
      srvcli.dll            Server Service Client DLL                           Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\srvcli.dll
      CRYPTSP.dll           Cryptographic Service Provider API                  Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\cryptsp.dll
      rsaenh.dll            Microsoft Enhanced Cryptographic Provider           Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\rsaenh.dll
      CRYPTBASE.dll         Base cryptographic API DLL                          Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\CRYPTBASE.dll
      gpapi.dll             组策略客户端 API                                          Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\gpapi.dll
      imagehlp.dll          Windows NT Image Helper                             Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\imagehlp.dll
      cryptnet.dll          Crypto Network Related API                          Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\cryptnet.dll
      tps.dll               tps                                                 深圳市迅雷网络技术有限公司                                       1, 0, 2, 1                                         c:\program files (x86)\common files\thunder network\serviceplatform\Plugins\tps.dll
      XLWFPManager.dll      XLWFPManager 动态链接库                                  深圳市迅雷网络技术有限公司                                       1.0.1.9                                            c:\program files (x86)\common files\thunder network\serviceplatform\Plugins\XLWFPManager.dll
      dhcpcsvc.DLL          DHCP 客户端服务                                          Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\dhcpcsvc.dll
      XLWFPDownload.dll     XLWFPDownload 动态链接库                                 深圳市迅雷网络技术有限公司                                       1.0.1.17                                           c:\program files (x86)\common files\thunder network\serviceplatform\Plugins\XLWFPDownload.dll
      WTSAPI32.dll          Windows Remote Desktop Session Host Server SDK APIs  Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\wtsapi32.dll
      USERENV.dll           Userenv                                             Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\userenv.dll
      WINSTA.dll            Winstation Library                                  Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\winsta.dll
      ThunderUnion.dll      ThunderUnion 动态链接库                                  深圳市迅雷网络技术有限公司                                       1.0.0.14                                           c:\program files (x86)\common files\thunder network\serviceplatform\Plugins\ThunderUnion.dll


svchost.exe          5232                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          5304                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


dasHost.exe          5736                                                          C:\Windows\System32\dasHost.exe                                                                                                                                                                                                                                   C:\Windows\System32\dasHost.exe


SearchIndexer.exe    6020                                                          C:\Windows\System32\SearchIndexer.exe                                                                                                                                                                                                                             C:\Windows\System32\SearchIndexer.exe


svchost.exe          5528                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          6280                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          7120                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


ETDCtrl.exe          1712                                                          C:\Program Files\Elantech\ETDCtrl.exe                                                                                                                                                                                                                             C:\Program Files\Elantech\ETDCtrl.exe


AggregatorHost.exe   7428                                                          C:\Windows\System32\AggregatorHost.exe                                                                                                                                                                                                                            C:\Windows\System32\AggregatorHost.exe


sihost.exe           7464                                                          C:\Windows\System32\sihost.exe                                                                                                                                                                                                                                    C:\Windows\System32\sihost.exe


svchost.exe          7488                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


igfxEMN.exe          7504                                                          C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_9afa905de7653866\igfxEMN.exe                                                                                                                                                                     C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_9afa905de7653866\igfxEMN.exe


svchost.exe          7552                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          7788                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          7820                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


ctfmon.exe           7916                                                          C:\Windows\System32\ctfmon.exe                                                                                                                                                                                                                                    C:\Windows\System32\ctfmon.exe


taskhostw.exe        8132                                                          C:\Windows\System32\taskhostw.exe                                                                                                                                                                                                                                 C:\Windows\System32\taskhostw.exe


explorer.exe         1872                                                          C:\Windows\explorer.exe                                                                                                                                                                                                                                           C:\Windows\explorer.exe


svchost.exe          3376                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          8276                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          8364                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


taskhostw.exe        8668                                                          C:\Windows\System32\taskhostw.exe                                                                                                                                                                                                                                 C:\Windows\System32\taskhostw.exe


svchost.exe          8680                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


StartMenuExperienceHost.exe 8748                                                          C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe                                                                                                                                                         C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe


ChsIME.exe           8820                                                          C:\Windows\System32\InputMethod\CHS\ChsIME.exe                                                                                                                                                                                                                    C:\Windows\System32\InputMethod\CHS\ChsIME.exe


RuntimeBroker.exe    9168                                                          C:\Windows\System32\RuntimeBroker.exe                                                                                                                                                                                                                             C:\Windows\System32\RuntimeBroker.exe


SearchApp.exe        9096                                                          C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe                                                                                                                                                                                        C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe


eptray.exe           9100       客户端                                                C:\Program Files (x86)\Rising\REC\ep\eptray.exe                                                                                                                                                                                                                   "C:\Program Files (x86)\Rising\REC\ep\eptray.exe" -service -system
      eptray.exe            客户端                                                 Beijing Rising Network Security Technology Co., Ltd.  5, 0, 0, 2                                         C:\Program Files (x86)\Rising\REC\ep\eptray.exe
      ntdll.dll             NT 层 DLL                                            Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\ntdll.dll
      KERNEL32.DLL          Windows NT 基本 API 客户端 DLL                           Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\kernel32.dll
      KERNELBASE.dll        Windows NT 基本 API 客户端 DLL                           Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\KERNELBASE.dll
      ADVAPI32.dll          高级 Windows 32 基本 API                                Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\advapi32.dll
      msvcrt.dll            Windows NT CRT DLL                                  Microsoft Corporation                               7.0.19041.3636 (WinBuild.160101.0800)              C:\Windows\System32\msvcrt.dll
      sechost.dll           Host for SCM/SDDL/LSA Lookup APIs                   Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\sechost.dll
      RPCRT4.dll            远程过程调用运行时                                           Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\rpcrt4.dll
      bcrypt.dll            Windows 加密基元库                                       Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\bcrypt.dll
      SHELL32.dll           Windows Shell 公用 DLL                                Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\shell32.dll
      msvcp_win.dll         Microsoft? C Runtime Library                        Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\msvcp_win.dll
      ucrtbase.dll          Microsoft? C Runtime Library                        Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\ucrtbase.dll
      USER32.dll            多用户 Windows 用户 API 客户端 DLL                          Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\user32.dll
      win32u.dll            Win32u                                              Microsoft Corporation                               10.0.19041.4529 (WinBuild.160101.0800)             C:\Windows\System32\win32u.dll
      GDI32.dll             GDI Client DLL                                      Microsoft Corporation                               10.0.19041.4474 (WinBuild.160101.0800)             C:\Windows\System32\gdi32.dll
      gdi32full.dll         GDI Client DLL                                      Microsoft Corporation                               10.0.19041.4474 (WinBuild.160101.0800)             C:\Windows\System32\gdi32full.dll
      ole32.dll             用于 Windows 的 Microsoft OLE                          Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\ole32.dll
      combase.dll           用于 Windows 的 Microsoft COM                          Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\combase.dll
      SHLWAPI.dll           外壳简易实用工具库                                           Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\shlwapi.dll
      MSVCP90.dll           Microsoft? C++ Runtime Library                      Microsoft Corporation                               9.00.30729.9625                                    C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9625_none_508ef7e4bcbbe589\msvcp90.dll
      MSVCR90.dll           Microsoft? C Runtime Library                        Microsoft Corporation                               9.00.30729.9625                                    C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9625_none_508ef7e4bcbbe589\msvcr90.dll
      IMM32.DLL             Multi-User Windows IMM32 API Client DLL             Microsoft Corporation                               10.0.19041.4474 (WinBuild.160101.0800)             C:\Windows\System32\imm32.dll
      kernel.appcore.dll    AppModel API Host                                   Microsoft Corporation                               10.0.19041.3758 (WinBuild.160101.0800)             C:\Windows\System32\kernel.appcore.dll
      bcryptPrimitives.dll  Windows Cryptographic Primitives Library            Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\bcryptPrimitives.dll
      uxtheme.dll           Microsoft UxTheme 库                                 Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\uxtheme.dll
      stdlog.dll            Beijing Rising Information Technology Co., Ltd.     Beijing Rising Information Technology Co., Ltd.     3.0.0.10                                           C:\Program Files (x86)\Rising\REC\ep\stdlog.dll
      Syslay.dll            Syslay                                              Beijing Rising Information Technology Co., Ltd.     3.0.0.3                                            C:\Program Files (x86)\Rising\REC\ep\syslay.dll
      shcore.dll            SHCORE                                              Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\SHCore.dll
      rscom.dll             rscom for rsdk                                      Beijing Rising Network Security Technology Co., Ltd.  3.0.0.13                                           C:\Program Files (x86)\Rising\REC\ep\Common Files\rscom.dll
      PSAPI.DLL             Process Status Helper                               Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\psapi.dll
      WTSAPI32.dll          Windows Remote Desktop Session Host Server SDK APIs  Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\wtsapi32.dll
      USERENV.dll           Userenv                                             Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\userenv.dll
      rsxml3w.dll           rsxml for rsdk                                      Beijing Rising Network Security Technology Co., Ltd.  3.0.0.4                                            C:\Program Files (x86)\Rising\REC\ep\Common Files\rsxml3w.dll
      traywnd.dll           traywnd for rsdk                                    Beijing Rising Information Technology Co., Ltd.     3.0.0.4                                            C:\Program Files (x86)\Rising\REC\ep\Common Files\traywnd.dll
      MSCTF.dll             MSCTF 服务器 DLL                                       Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\msctf.dll
      OLEAUT32.dll          OLEAUT32.DLL                                        Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\oleaut32.dll
      msc.dll               MSC Module                                          Beijing Rising Information Technology Co., Ltd.     3.0.0.2                                            C:\Program Files (x86)\Rising\REC\ep\Common Files\msc.dll
      envinfo.dll           EnvInfo Dynamic Link Library                        Beijing Rising Network Security Technology Co., Ltd.  3, 0, 0, 15                                        C:\Program Files (x86)\Rising\REC\ep\envinfo.dll
      IPHLPAPI.DLL          IP 帮助程序 API                                         Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\IPHLPAPI.DLL
      mutexmgr.dll          mutexmgr Dynamic Link Library                       Beijing Rising Network Security Technology Co., Ltd.  3.0.0.8                                            C:\Program Files (x86)\Rising\REC\ep\Common Files\mutexmgr.dll
      managedb.dll          managedb Dynamic Link Library                       Beijing Rising Information Technology Co., Ltd.     3.0.0.11                                           C:\Program Files (x86)\Rising\REC\ep\Common Files\managedb.dll
      EpStorage.dll         EpStorag Dynamic Link Library                       Beijing Rising Network Security Technology Co., Ltd.  1.0.0.73                                           C:\Program Files (x86)\Rising\REC\ep\EpStorage.dll
      endpoint.dll          endpoint Dynamic Link Library                       Beijing Rising Network Security Technology Co., Ltd.  5, 0, 0, 21                                        C:\Program Files (x86)\Rising\REC\ep\endpoint.dll
      WS2_32.dll            Windows Socket 2.0 32 位 DLL                         Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\ws2_32.dll
      duilib3.dll           duilib                                              Beijing Rising Network Security Technology Co., Ltd.  3, 0, 0, 37                                        C:\Program Files (x86)\Rising\REC\ep\duilib3.dll
      COMCTL32.dll          用户体验控件库                                             Microsoft Corporation                               6.10 (WinBuild.160101.0800)                        C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.4355_none_a865f0c28672571c\comctl32.dll
      gdiplus.dll           Microsoft GDI+                                      Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.4355_none_d950e3a7e104d0ea\GdiPlus.dll
      MSIMG32.dll           GDIEXT Client DLL                                   Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\msimg32.dll
      msgmgrui.dll          msgmgrui Dynamic Link Library                       Beijing Rising Network Security Technology Co., Ltd.  5, 0, 0, 3                                         C:\Program Files (x86)\Rising\REC\ep\msgmgr\msgmgrui.dll
      FastDBDll.dll         FastDBDll Dynamic Link Library                      Beijing Rising Network Security Technology Co., Ltd.  3, 0, 0, 15                                        C:\Program Files (x86)\Rising\REC\xav\FastDBDll.dll
      xavsrv.dll            xavsrv Dynamic Link Library                         Beijing Rising Network Security Technology Co., Ltd.  3, 0, 1, 97                                        C:\Program Files (x86)\Rising\REC\xav\xavsrv.dll
      NETAPI32.dll          Net Win32 API DLL                                   Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\netapi32.dll
      NETUTILS.DLL          Net Win32 API Helpers DLL                           Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\netutils.dll
      SAMCLI.DLL            Security Accounts Manager Client DLL                Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\samcli.dll
      windows.storage.dll   Microsoft WinRT Storage API                         Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\windows.storage.dll
      Wldp.dll              Windows 锁定策略                                        Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\wldp.dll
      profapi.dll           User Profile Basic API                              Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\System32\profapi.dll
      SAMLIB.dll            SAM Library DLL                                     Microsoft Corporation                               10.0.19041.3996 (WinBuild.160101.0800)             C:\Windows\System32\samlib.dll
      comx3.dll             comx3 x86 or x64                                    Beijing Rising Information Technology Co., Ltd.     3.0.0.2                                            C:\Program Files (x86)\Rising\REC\ep\comx3.dll
      WINSTA.dll            Winstation Library                                  Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\winsta.dll
      sspicli.dll           Security Support Provider Interface                 Microsoft Corporation                               10.0.19041.4239 (WinBuild.160101.0800)             C:\Windows\System32\sspicli.dll
      xavmon.dll            xavmon Dynamic Link Library                         Beijing Rising Network Security Technology Co., Ltd.  5, 0, 0, 7                                         C:\Program Files (x86)\Rising\REC\xav\xavmon.dll
      SETUPAPI.dll          Windows 安装程序 API                                    Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\setupapi.dll
      cfgmgr32.dll          Configuration Manager DLL                           Microsoft Corporation                               10.0.19041.3996 (WinBuild.160101.0800)             C:\Windows\System32\cfgmgr32.dll
      countop.dll           countop                                             Beijing Rising Information Technology Co., Ltd.                                                        C:\Program Files (x86)\Rising\REC\xav\countop.dll
      Riched20.dll          Rich Text Edit Control, v3.1                        Microsoft Corporation                               5.31.23.1231                                       C:\Windows\System32\riched20.dll
      msls31.dll            Microsoft Line Services library file                Microsoft Corporation                               3.10.349.0                                         C:\Windows\System32\msls31.dll
      USP10.dll             Uniscribe Unicode script processor                  Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\usp10.dll
      authmgr.dll                                                               Beijing Rising Network Security Technology Co., Ltd.  1.0.0.16                                           C:\Program Files (x86)\Rising\REC\ep\authmgr.dll
      ATL90.DLL             ATL Module for Windows (Unicode)                    Microsoft Corporation                               9.00.30729.6161                                    C:\Windows\WinSxS\x86_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.6161_none_51cd0a7abbe4e19b\ATL90.dll
      TextShaping.dll                                                                                                                                                                  C:\Windows\System32\TextShaping.dll
      WindowsCodecs.dll     Microsoft Windows Codecs Library                    Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\System32\WindowsCodecs.dll
      textinputframework.dll  "TextInputFramework.DYNLINK"                        Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\System32\textinputframework.dll
      CoreMessaging.dll     Microsoft CoreMessaging Dll                         Microsoft Corporation                               10.0.19041.4474                                    C:\Windows\System32\CoreMessaging.dll
      CoreUIComponents.dll  Microsoft Core UI Components Dll                    Microsoft Corporation                               10.0.19041.3636                                    C:\Windows\System32\CoreUIComponents.dll
      ntmarta.dll           Windows NT MARTA 提供程序                               Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\ntmarta.dll
      wintypes.dll          Windows 基本类型 DLL                                    Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\WinTypes.dll
      clbcatq.dll           COM+ Configuration Catalog                          Microsoft Corporation                               2001.12.10941.16384 (WinBuild.160101.0800)         C:\Windows\System32\clbcatq.dll
      QQPinyinTSF.dll       QQ拼音输入法                                             Sogou                                               6.6.6304.400                                       C:\Windows\System32\IME\QQPinyinTSF\QQPinyinTSF.dll
      QQPinyin.ime          QQ拼音输入法                                             Sogou                                               6.6.6304.400                                       C:\Windows\System32\IME\QQPinyinTSF\QQPinyin.ime
      VERSION.dll           Version Checking and File Installation Libraries    Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\version.dll
      WININET.dll           Win32 的 Internet 扩展                                 Microsoft Corporation                               11.00.19041.4406 (WinBuild.160101.0800)            C:\Windows\System32\wininet.dll
      DNSAPI.dll            DNS 客户端 API DLL                                     Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\dnsapi.dll
      NSI.dll               NSI User-mode interface DLL                         Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\nsi.dll
      PROPSYS.dll           Microsoft 属性系统                                      Microsoft Corporation                               7.0.19041.4406 (WinBuild.160101.0800)              C:\Windows\System32\propsys.dll
      edputil.dll           EDP 实用程序                                            Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\edputil.dll
      Windows.StateRepositoryPS.dll  Windows StateRepository Proxy/Stub Server           Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\Windows.StateRepositoryPS.dll
      urlmon.dll            Win32 的 OLE32 扩展                                    Microsoft Corporation                               11.00.19041.4406 (WinBuild.160101.0800)            C:\Windows\System32\urlmon.dll
      iertutil.dll          Internet Explorer 的运行时实用程序                          Microsoft Corporation                               11.00.19041.4406 (WinBuild.160101.0800)            C:\Windows\System32\iertutil.dll
      srvcli.dll            Server Service Client DLL                           Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\srvcli.dll
      virtdisk.dll          Virtual Disk API DLL                                Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\virtdisk.dll
      FLTLIB.DLL            筛选器库                                                Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\fltLib.dll
      appresolver.dll       应用解析程序                                              Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\appresolver.dll
      Bcp47Langs.dll        BCP47 Language Classes                              Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\System32\Bcp47Langs.dll
      SLC.dll               软件授权客户端 Dll                                         Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\slc.dll
      sppc.dll              软件授权客户端 Dll                                         Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\sppc.dll
      OneCoreCommonProxyStub.dll  OneCore Common Proxy Stub                           Microsoft Corporation                               10.0.19041.3758 (WinBuild.160101.0800)             C:\Windows\System32\OneCoreCommonProxyStub.dll
      OneCoreUAPCommonProxyStub.dll  OneCoreUAP Common Proxy Stub                        Microsoft Corporation                               10.0.19041.4474 (WinBuild.160101.0800)             C:\Windows\System32\OneCoreUAPCommonProxyStub.dll
      apphelp.dll           应用程序兼容性客户端库                                         Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\apphelp.dll


ep64.exe             9428                                                          C:\Program Files (x86)\Rising\REC\ep\x64\ep64.exe                                                                                                                                                                                                                 C:\Program Files (x86)\Rising\REC\ep\x64\ep64.exe


RuntimeBroker.exe    9480                                                          C:\Windows\System32\RuntimeBroker.exe                                                                                                                                                                                                                             C:\Windows\System32\RuntimeBroker.exe


TextInputHost.exe    10224                                                         C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe                                                                                                                                                                                 C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe


QQPYUserCenter.exe   9584       QQ拼音个人中心                                           C:\Program Files (x86)\Tencent\QQPinyin\6.6.6304.400\QQPYUserCenter.exe                                                                                                                                                                                           "C:\Program Files (x86)\Tencent\QQPinyin\6.6.6304.400\QQPYUserCenter.exe" qqpinyin.ime
      QQPYUserCenter.exe    QQ拼音个人中心                                            Sogou                                               6.6.6304.400                                       C:\Program Files (x86)\Tencent\QQPinyin\6.6.6304.400\QQPYUserCenter.exe
      ntdll.dll             NT 层 DLL                                            Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\ntdll.dll
      KERNEL32.DLL          Windows NT 基本 API 客户端 DLL                           Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\kernel32.dll
      KERNELBASE.dll        Windows NT 基本 API 客户端 DLL                           Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\KERNELBASE.dll
      USER32.dll            多用户 Windows 用户 API 客户端 DLL                          Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\user32.dll
      win32u.dll            Win32u                                              Microsoft Corporation                               10.0.19041.4529 (WinBuild.160101.0800)             C:\Windows\System32\win32u.dll
      GDI32.dll             GDI Client DLL                                      Microsoft Corporation                               10.0.19041.4474 (WinBuild.160101.0800)             C:\Windows\System32\gdi32.dll
      gdi32full.dll         GDI Client DLL                                      Microsoft Corporation                               10.0.19041.4474 (WinBuild.160101.0800)             C:\Windows\System32\gdi32full.dll
      msvcp_win.dll         Microsoft? C Runtime Library                        Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\msvcp_win.dll
      ucrtbase.dll          Microsoft? C Runtime Library                        Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\ucrtbase.dll
      ADVAPI32.dll          高级 Windows 32 基本 API                                Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\advapi32.dll
      msvcrt.dll            Windows NT CRT DLL                                  Microsoft Corporation                               7.0.19041.3636 (WinBuild.160101.0800)              C:\Windows\System32\msvcrt.dll
      sechost.dll           Host for SCM/SDDL/LSA Lookup APIs                   Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\sechost.dll
      RPCRT4.dll            远程过程调用运行时                                           Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\rpcrt4.dll
      bcrypt.dll            Windows 加密基元库                                       Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\bcrypt.dll
      SHELL32.dll           Windows Shell 公用 DLL                                Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\shell32.dll
      ole32.dll             用于 Windows 的 Microsoft OLE                          Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\ole32.dll
      combase.dll           用于 Windows 的 Microsoft COM                          Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\combase.dll
      OLEAUT32.dll          OLEAUT32.DLL                                        Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\oleaut32.dll
      IMM32.dll             Multi-User Windows IMM32 API Client DLL             Microsoft Corporation                               10.0.19041.4474 (WinBuild.160101.0800)             C:\Windows\System32\imm32.dll
      PSAPI.DLL             Process Status Helper                               Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\psapi.dll
      WLDAP32.dll           Win32 LDAP API DLL                                  Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\Wldap32.dll
      WS2_32.dll            Windows Socket 2.0 32 位 DLL                         Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\ws2_32.dll
      WINTRUST.dll          Microsoft Trust Verification APIs                   Microsoft Corporation                               10.0.19041.4529 (WinBuild.160101.0800)             C:\Windows\System32\wintrust.dll
      CRYPT32.dll           加密 API32                                            Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\crypt32.dll
      SHLWAPI.dll           外壳简易实用工具库                                           Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\shlwapi.dll
      VERSION.dll           Version Checking and File Installation Libraries    Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\version.dll
      WININET.dll           Win32 的 Internet 扩展                                 Microsoft Corporation                               11.00.19041.4406 (WinBuild.160101.0800)            C:\Windows\System32\wininet.dll
      WTSAPI32.dll          Windows Remote Desktop Session Host Server SDK APIs  Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\wtsapi32.dll
      NETAPI32.dll          Net Win32 API DLL                                   Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\netapi32.dll
      MSIMG32.dll           GDIEXT Client DLL                                   Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\msimg32.dll
      DNSAPI.dll            DNS 客户端 API DLL                                     Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\dnsapi.dll
      gdiplus.dll           Microsoft GDI+                                      Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.4355_none_d950e3a7e104d0ea\GdiPlus.dll
      WKSCLI.DLL            Workstation Service Client DLL                      Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\wkscli.dll
      NETUTILS.DLL          Net Win32 API Helpers DLL                           Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\netutils.dll
      MSASN1.dll            ASN.1 Runtime APIs                                  Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\msasn1.dll
      IPHLPAPI.DLL          IP 帮助程序 API                                         Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\IPHLPAPI.DLL
      NSI.dll               NSI User-mode interface DLL                         Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\nsi.dll
      windows.storage.dll   Microsoft WinRT Storage API                         Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\windows.storage.dll
      Wldp.dll              Windows 锁定策略                                        Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\wldp.dll
      SHCORE.dll            SHCORE                                              Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\SHCore.dll
      ntmarta.dll           Windows NT MARTA 提供程序                               Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\ntmarta.dll
      profapi.dll           User Profile Basic API                              Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\System32\profapi.dll
      uxtheme.dll           Microsoft UxTheme 库                                 Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\uxtheme.dll
      kernel.appcore.dll    AppModel API Host                                   Microsoft Corporation                               10.0.19041.3758 (WinBuild.160101.0800)             C:\Windows\System32\kernel.appcore.dll
      bcryptPrimitives.dll  Windows Cryptographic Primitives Library            Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\bcryptPrimitives.dll
      mswsock.dll           Microsoft Windows Sockets 2.0 服务提供程序                Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\mswsock.dll
      TextShaping.dll                                                                                                                                                                  C:\Windows\System32\TextShaping.dll
      iertutil.dll          Internet Explorer 的运行时实用程序                          Microsoft Corporation                               11.00.19041.4406 (WinBuild.160101.0800)            C:\Windows\System32\iertutil.dll
      SspiCli.dll           Security Support Provider Interface                 Microsoft Corporation                               10.0.19041.4239 (WinBuild.160101.0800)             C:\Windows\System32\sspicli.dll
      ondemandconnroutehelper.dll  On Demand Connctiond Route Helper                   Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\System32\ondemandconnroutehelper.dll
      winhttp.dll           Windows HTTP 服务                                     Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\winhttp.dll
      WINNSI.DLL            Network Store Information RPC interface             Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\winnsi.dll
      MSCTF.dll             MSCTF 服务器 DLL                                       Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\msctf.dll
      mdnsNSP.dll           Bonjour Namespace Provider                          Apple Inc.                                          3,1,0,1                                            C:\Program Files (x86)\Bonjour\mdnsNSP.dll
      rasadhlp.dll          Remote Access AutoDial Helper                       Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\rasadhlp.dll
      fwpuclnt.dll          FWP/IPsec 用户模式 API                                  Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\FWPUCLNT.DLL
      imagehlp.dll          Windows NT Image Helper                             Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\imagehlp.dll
      CRYPTSP.dll           Cryptographic Service Provider API                  Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\cryptsp.dll
      rsaenh.dll            Microsoft Enhanced Cryptographic Provider           Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\rsaenh.dll
      CRYPTBASE.dll         Base cryptographic API DLL                          Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\CRYPTBASE.dll
      gpapi.dll             组策略客户端 API                                          Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\gpapi.dll
      cryptnet.dll          Crypto Network Related API                          Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\cryptnet.dll
      QQPYUpgrade.dll       QQ拼音输入法热更新                                          Sogou                                               1.10.6304.600                                      C:\Program Files (x86)\Tencent\QQPinyin\6.6.6304.400\upgrade\QQPYUpgrade.dll
      inetmib1.dll          Microsoft MIB-II subagent                           Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\inetmib1.dll
      snmpapi.dll           SNMP Utility Library                                Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\snmpapi.dll


RuntimeBroker.exe    10272                                                         C:\Windows\System32\RuntimeBroker.exe                                                                                                                                                                                                                             C:\Windows\System32\RuntimeBroker.exe


SecurityHealthSystray.exe 10588                                                         C:\Windows\System32\SecurityHealthSystray.exe                                                                                                                                                                                                                     C:\Windows\System32\SecurityHealthSystray.exe


SecurityHealthService.exe 10620                                                                                                                                                                                                                                                                                                                           


RtkAudUService64.exe 10700                                                         C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_f7fdb960c5e8ef2a\RtkAudUService64.exe                                                                                                                                                     C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_f7fdb960c5e8ef2a\RtkAudUService64.exe


svchost.exe          10740                                                         C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


IGCCTray.exe         10772                                                         C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5536.0_x64__8j3eq9eme6ctt\GCP.ML.BackgroundSysTray\IGCCTray.exe                                                                                                                                  C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5536.0_x64__8j3eq9eme6ctt\GCP.ML.BackgroundSysTray\IGCCTray.exe


IGCC.exe             10880                                                         C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5536.0_x64__8j3eq9eme6ctt\IGCC.exe                                                                                                                                                               C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5536.0_x64__8j3eq9eme6ctt\IGCC.exe


svchost.exe          12064                                                         C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          11648                                                         C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


dllhost.exe          11904                                                         C:\Windows\System32\dllhost.exe                                                                                                                                                                                                                                   C:\Windows\System32\dllhost.exe


svchost.exe          9340                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          8700                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


SgrmBroker.exe       3764                                                                                                                                                                                                                                                                                                                            


svchost.exe          6968                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          11900                                                                                                                                                                                                                                                                                                                           


ChsIME.exe           3192                                                          C:\Windows\System32\InputMethod\CHS\ChsIME.exe                                                                                                                                                                                                                    C:\Windows\System32\InputMethod\CHS\ChsIME.exe


ShellExperienceHost.exe 11760                                                         C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe                                                                                                                                                                                   C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe


RuntimeBroker.exe    2812                                                          C:\Windows\System32\RuntimeBroker.exe                                                                                                                                                                                                                             C:\Windows\System32\RuntimeBroker.exe


SystemSettings.exe   6992                                                          C:\Windows\ImmersiveControlPanel\SystemSettings.exe                                                                                                                                                                                                               C:\Windows\ImmersiveControlPanel\SystemSettings.exe


ApplicationFrameHost.exe 8964                                                          C:\Windows\System32\ApplicationFrameHost.exe                                                                                                                                                                                                                      C:\Windows\System32\ApplicationFrameHost.exe


UserOOBEBroker.exe   12224                                                         C:\Windows\System32\oobe\UserOOBEBroker.exe                                                                                                                                                                                                                       C:\Windows\System32\oobe\UserOOBEBroker.exe


svchost.exe          1596                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          9588                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          11736                                                         C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          2924                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


SystemSettingsBroker.exe 11444                                                         C:\Windows\System32\SystemSettingsBroker.exe                                                                                                                                                                                                                      C:\Windows\System32\SystemSettingsBroker.exe


svchost.exe          6308                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          8108                                                          C:\Windows\System32\svchost.exe                                                                                                                                                                                                                                   C:\Windows\System32\svchost.exe


svchost.exe          10356                                                                                                                                                                                                                                                                                                                           


esmmain.exe          6668       客户端主程序                                             C:\Program Files (x86)\Rising\REC\ep\esmmain.exe                                                                                                                                                                                                                  "C:\Program Files (x86)\Rising\REC\ep\esmmain.exe" ItemScan={E09A26B1-FAB2-47c8-838F-3EFC4AE84BC8}
      esmmain.exe           客户端主程序                                              Beijing Rising Network Security Technology Co., Ltd.  5, 0, 0, 1                                         C:\Program Files (x86)\Rising\REC\ep\esmmain.exe
      ntdll.dll             NT 层 DLL                                            Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\ntdll.dll
      KERNEL32.DLL          Windows NT 基本 API 客户端 DLL                           Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\kernel32.dll
      KERNELBASE.dll        Windows NT 基本 API 客户端 DLL                           Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\KERNELBASE.dll
      apphelp.dll           应用程序兼容性客户端库                                         Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\apphelp.dll
      USER32.dll            多用户 Windows 用户 API 客户端 DLL                          Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\user32.dll
      win32u.dll            Win32u                                              Microsoft Corporation                               10.0.19041.4529 (WinBuild.160101.0800)             C:\Windows\System32\win32u.dll
      GDI32.dll             GDI Client DLL                                      Microsoft Corporation                               10.0.19041.4474 (WinBuild.160101.0800)             C:\Windows\System32\gdi32.dll
      gdi32full.dll         GDI Client DLL                                      Microsoft Corporation                               10.0.19041.4474 (WinBuild.160101.0800)             C:\Windows\System32\gdi32full.dll
      msvcp_win.dll         Microsoft? C Runtime Library                        Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\msvcp_win.dll
      ucrtbase.dll          Microsoft? C Runtime Library                        Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\ucrtbase.dll
      ADVAPI32.dll          高级 Windows 32 基本 API                                Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\advapi32.dll
      msvcrt.dll            Windows NT CRT DLL                                  Microsoft Corporation                               7.0.19041.3636 (WinBuild.160101.0800)              C:\Windows\System32\msvcrt.dll
      sechost.dll           Host for SCM/SDDL/LSA Lookup APIs                   Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\sechost.dll
      RPCRT4.dll            远程过程调用运行时                                           Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\rpcrt4.dll
      bcrypt.dll            Windows 加密基元库                                       Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\bcrypt.dll
      SHELL32.dll           Windows Shell 公用 DLL                                Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\shell32.dll
      ole32.dll             用于 Windows 的 Microsoft OLE                          Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\ole32.dll
      combase.dll           用于 Windows 的 Microsoft COM                          Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\combase.dll
      SHLWAPI.dll           外壳简易实用工具库                                           Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\shlwapi.dll
      MSVCP90.dll           Microsoft? C++ Runtime Library                      Microsoft Corporation                               9.00.30729.9625                                    C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9625_none_508ef7e4bcbbe589\msvcp90.dll
      MSVCR90.dll           Microsoft? C Runtime Library                        Microsoft Corporation                               9.00.30729.9625                                    C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9625_none_508ef7e4bcbbe589\msvcr90.dll
      IMM32.DLL             Multi-User Windows IMM32 API Client DLL             Microsoft Corporation                               10.0.19041.4474 (WinBuild.160101.0800)             C:\Windows\System32\imm32.dll
      kernel.appcore.dll    AppModel API Host                                   Microsoft Corporation                               10.0.19041.3758 (WinBuild.160101.0800)             C:\Windows\System32\kernel.appcore.dll
      bcryptPrimitives.dll  Windows Cryptographic Primitives Library            Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\bcryptPrimitives.dll
      uxtheme.dll           Microsoft UxTheme 库                                 Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\uxtheme.dll
      stdlog.dll            Beijing Rising Information Technology Co., Ltd.     Beijing Rising Information Technology Co., Ltd.     3.0.0.10                                           C:\Program Files (x86)\Rising\REC\ep\stdlog.dll
      Syslay.dll            Syslay                                              Beijing Rising Information Technology Co., Ltd.     3.0.0.3                                            C:\Program Files (x86)\Rising\REC\ep\syslay.dll
      shcore.dll            SHCORE                                              Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\SHCore.dll
      rscom.dll             rscom for rsdk                                      Beijing Rising Network Security Technology Co., Ltd.  3.0.0.13                                           C:\Program Files (x86)\Rising\REC\ep\Common Files\rscom.dll
      PSAPI.DLL             Process Status Helper                               Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\psapi.dll
      WTSAPI32.dll          Windows Remote Desktop Session Host Server SDK APIs  Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\wtsapi32.dll
      USERENV.dll           Userenv                                             Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\userenv.dll
      rsxml3w.dll           rsxml for rsdk                                      Beijing Rising Network Security Technology Co., Ltd.  3.0.0.4                                            C:\Program Files (x86)\Rising\REC\ep\Common Files\rsxml3w.dll
      mainui.dll            mainui Dynamic Link Library                         Beijing Rising Network Security Technology Co., Ltd.  5, 0, 0, 57                                        C:\Program Files (x86)\Rising\REC\ep\mainui.dll
      OLEAUT32.dll          OLEAUT32.DLL                                        Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\oleaut32.dll
      duilib3.dll           duilib                                              Beijing Rising Network Security Technology Co., Ltd.  3, 0, 0, 37                                        C:\Program Files (x86)\Rising\REC\ep\duilib3.dll
      gdiplus.dll           Microsoft GDI+                                      Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.4355_none_d950e3a7e104d0ea\GdiPlus.dll
      COMCTL32.dll          用户体验控件库                                             Microsoft Corporation                               6.10 (WinBuild.160101.0800)                        C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.4355_none_a865f0c28672571c\comctl32.dll
      MSIMG32.dll           GDIEXT Client DLL                                   Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\msimg32.dll
      mutexmgr.dll          mutexmgr Dynamic Link Library                       Beijing Rising Network Security Technology Co., Ltd.  3.0.0.8                                            C:\Program Files (x86)\Rising\REC\ep\Common Files\mutexmgr.dll
      comx3.dll             comx3 x86 or x64                                    Beijing Rising Information Technology Co., Ltd.     3.0.0.2                                            C:\Program Files (x86)\Rising\REC\ep\comx3.dll
      WINSTA.dll            Winstation Library                                  Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\winsta.dll
      sspicli.dll           Security Support Provider Interface                 Microsoft Corporation                               10.0.19041.4239 (WinBuild.160101.0800)             C:\Windows\System32\sspicli.dll
      msc.dll               MSC Module                                          Beijing Rising Information Technology Co., Ltd.     3.0.0.2                                            C:\Program Files (x86)\Rising\REC\ep\Common Files\msc.dll
      agent.dll             Agent Dynamic Link Library                          Beijing Rising Network Security Technology Co., Ltd.  3, 0, 0, 72                                        C:\Program Files (x86)\Rising\REC\ep\agent\agent.dll
      WS2_32.dll            Windows Socket 2.0 32 位 DLL                         Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\ws2_32.dll
      IPHLPAPI.DLL          IP 帮助程序 API                                         Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\IPHLPAPI.DLL
      DNSAPI.dll            DNS 客户端 API DLL                                     Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\dnsapi.dll
      NSI.dll               NSI User-mode interface DLL                         Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\nsi.dll
      MSCTF.dll             MSCTF 服务器 DLL                                       Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\msctf.dll
      envinfo.dll           EnvInfo Dynamic Link Library                        Beijing Rising Network Security Technology Co., Ltd.  3, 0, 0, 15                                        C:\Program Files (x86)\Rising\REC\ep\envinfo.dll
      managedb.dll          managedb Dynamic Link Library                       Beijing Rising Information Technology Co., Ltd.     3.0.0.11                                           C:\Program Files (x86)\Rising\REC\ep\Common Files\managedb.dll
      EpStorage.dll         EpStorag Dynamic Link Library                       Beijing Rising Network Security Technology Co., Ltd.  1.0.0.73                                           C:\Program Files (x86)\Rising\REC\ep\EpStorage.dll
      fcheck.dll            fcheck Dynamic Link Library                         Beijing Rising Network Security Technology Co., Ltd.  1, 0, 0, 4                                         C:\Program Files (x86)\Rising\REC\ep\fcheck.dll
      FastDBDll.dll         FastDBDll Dynamic Link Library                      Beijing Rising Network Security Technology Co., Ltd.  3, 0, 0, 15                                        C:\Program Files (x86)\Rising\REC\xav\FastDBDll.dll
      xavsrv.dll            xavsrv Dynamic Link Library                         Beijing Rising Network Security Technology Co., Ltd.  3, 0, 1, 97                                        C:\Program Files (x86)\Rising\REC\xav\xavsrv.dll
      NETAPI32.dll          Net Win32 API DLL                                   Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\netapi32.dll
      NETUTILS.DLL          Net Win32 API Helpers DLL                           Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\netutils.dll
      SAMCLI.DLL            Security Accounts Manager Client DLL                Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\samcli.dll
      windows.storage.dll   Microsoft WinRT Storage API                         Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\windows.storage.dll
      Wldp.dll              Windows 锁定策略                                        Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\wldp.dll
      profapi.dll           User Profile Basic API                              Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\System32\profapi.dll
      SAMLIB.dll            SAM Library DLL                                     Microsoft Corporation                               10.0.19041.3996 (WinBuild.160101.0800)             C:\Windows\System32\samlib.dll
      xavui.dll             xavui Dynamic Link Library                          Beijing Rising Network Security Technology Co., Ltd.  5, 0, 0, 36                                        C:\Program Files (x86)\Rising\REC\xav\xavui.dll
      COMDLG32.dll          Common Dialogs DLL                                  Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\comdlg32.dll
      MPR.dll               多提供程序路由器 DLL                                        Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\mpr.dll
      xfwui.dll             xfwui Dynamic Link Library                          Beijing Rising Network Security Technology Co., Ltd.  5, 0, 0, 28                                        C:\Program Files (x86)\Rising\REC\xfw\xfwui.dll
      SRVCLI.DLL            Server Service Client DLL                           Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\srvcli.dll
      authmgr.dll                                                               Beijing Rising Network Security Technology Co., Ltd.  1.0.0.16                                           C:\Program Files (x86)\Rising\REC\ep\authmgr.dll
      ATL90.DLL             ATL Module for Windows (Unicode)                    Microsoft Corporation                               9.00.30729.6161                                    C:\Windows\WinSxS\x86_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.6161_none_51cd0a7abbe4e19b\ATL90.dll
      WindowsCodecs.dll     Microsoft Windows Codecs Library                    Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\System32\WindowsCodecs.dll
      TextShaping.dll                                                                                                                                                                  C:\Windows\System32\TextShaping.dll
      secur32.dll           Security Support Provider Interface                 Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\secur32.dll
      mswsock.dll           Microsoft Windows Sockets 2.0 服务提供程序                Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\mswsock.dll
      textinputframework.dll  "TextInputFramework.DYNLINK"                        Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\System32\textinputframework.dll
      CoreMessaging.dll     Microsoft CoreMessaging Dll                         Microsoft Corporation                               10.0.19041.4474                                    C:\Windows\System32\CoreMessaging.dll
      CoreUIComponents.dll  Microsoft Core UI Components Dll                    Microsoft Corporation                               10.0.19041.3636                                    C:\Windows\System32\CoreUIComponents.dll
      ntmarta.dll           Windows NT MARTA 提供程序                               Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\ntmarta.dll
      wintypes.dll          Windows 基本类型 DLL                                    Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\WinTypes.dll
      clbcatq.dll           COM+ Configuration Catalog                          Microsoft Corporation                               2001.12.10941.16384 (WinBuild.160101.0800)         C:\Windows\System32\clbcatq.dll
      QQPinyinTSF.dll       QQ拼音输入法                                             Sogou                                               6.6.6304.400                                       C:\Windows\System32\IME\QQPinyinTSF\QQPinyinTSF.dll
      QQPinyin.ime          QQ拼音输入法                                             Sogou                                               6.6.6304.400                                       C:\Windows\System32\IME\QQPinyinTSF\QQPinyin.ime
      WININET.dll           Win32 的 Internet 扩展                                 Microsoft Corporation                               11.00.19041.4406 (WinBuild.160101.0800)            C:\Windows\System32\wininet.dll
      VERSION.dll           Version Checking and File Installation Libraries    Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\version.dll
      USP10.dll             Uniscribe Unicode script processor                  Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\usp10.dll
      sohoup.dll            sohoup Dynamic Link Library                         Beijing Rising Network Security Technology Co., Ltd.  1, 0, 0, 48                                        C:\Program Files (x86)\Rising\REC\ep\rua\sohoup.dll
      WLDAP32.dll           Win32 LDAP API DLL                                  Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\Wldap32.dll
      CRYPT32.dll           加密 API32                                            Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\crypt32.dll
      rptinfo.dll           rptinfo Dynamic Link Library                        Beijing Rising Network Security Technology Co., Ltd.  3, 0, 0, 24                                        C:\Program Files (x86)\Rising\REC\ep\rptinfo.dll
      mdnsNSP.dll           Bonjour Namespace Provider                          Apple Inc.                                          3,1,0,1                                            C:\Program Files (x86)\Bonjour\mdnsNSP.dll
      rasadhlp.dll          Remote Access AutoDial Helper                       Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\rasadhlp.dll
      cscapi.dll            Offline Files Win32 API                             Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\cscapi.dll
      PROPSYS.dll           Microsoft 属性系统                                      Microsoft Corporation                               7.0.19041.4406 (WinBuild.160101.0800)              C:\Windows\System32\propsys.dll
      dhcpcsvc.DLL          DHCP 客户端服务                                          Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\dhcpcsvc.dll
      CFGMGR32.dll          Configuration Manager DLL                           Microsoft Corporation                               10.0.19041.3996 (WinBuild.160101.0800)             C:\Windows\System32\cfgmgr32.dll
      edputil.dll           EDP 实用程序                                            Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\edputil.dll
      fwpuclnt.dll          FWP/IPsec 用户模式 API                                  Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\FWPUCLNT.DLL
      Windows.StateRepositoryPS.dll  Windows StateRepository Proxy/Stub Server           Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\Windows.StateRepositoryPS.dll
      urlmon.dll            Win32 的 OLE32 扩展                                    Microsoft Corporation                               11.00.19041.4406 (WinBuild.160101.0800)            C:\Windows\System32\urlmon.dll
      iertutil.dll          Internet Explorer 的运行时实用程序                          Microsoft Corporation                               11.00.19041.4406 (WinBuild.160101.0800)            C:\Windows\System32\iertutil.dll
      virtdisk.dll          Virtual Disk API DLL                                Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\virtdisk.dll
      FLTLIB.DLL            筛选器库                                                Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\fltLib.dll
      appresolver.dll       应用解析程序                                              Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\appresolver.dll
      Bcp47Langs.dll        BCP47 Language Classes                              Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\System32\Bcp47Langs.dll
      SLC.dll               软件授权客户端 Dll                                         Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\slc.dll
      sppc.dll              软件授权客户端 Dll                                         Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\sppc.dll
      OneCoreCommonProxyStub.dll  OneCore Common Proxy Stub                           Microsoft Corporation                               10.0.19041.3758 (WinBuild.160101.0800)             C:\Windows\System32\OneCoreCommonProxyStub.dll
      OneCoreUAPCommonProxyStub.dll  OneCoreUAP Common Proxy Stub                        Microsoft Corporation                               10.0.19041.4474 (WinBuild.160101.0800)             C:\Windows\System32\OneCoreUAPCommonProxyStub.dll
      CRYPTSP.dll           Cryptographic Service Provider API                  Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\cryptsp.dll
      rsaenh.dll            Microsoft Enhanced Cryptographic Provider           Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\rsaenh.dll
      CRYPTBASE.dll         Base cryptographic API DLL                          Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\CRYPTBASE.dll


smartscreen.exe      5332                                                          C:\Windows\System32\smartscreen.exe                                                                                                                                                                                                                               C:\Windows\System32\smartscreen.exe


firefox.exe          4480                                                          C:\Program Files\Mozilla Firefox\firefox.exe                                                                                                                                                                                                                      C:\Program Files\Mozilla Firefox\firefox.exe


firefox.exe          12236                                                         C:\Program Files\Mozilla Firefox\firefox.exe                                                                                                                                                                                                                      C:\Program Files\Mozilla Firefox\firefox.exe


firefox.exe          11528                                                         C:\Program Files\Mozilla Firefox\firefox.exe                                                                                                                                                                                                                      C:\Program Files\Mozilla Firefox\firefox.exe


firefox.exe          7548                                                          C:\Program Files\Mozilla Firefox\firefox.exe                                                                                                                                                                                                                      C:\Program Files\Mozilla Firefox\firefox.exe


firefox.exe          9540                                                          C:\Program Files\Mozilla Firefox\firefox.exe                                                                                                                                                                                                                      C:\Program Files\Mozilla Firefox\firefox.exe


firefox.exe          4676                                                          C:\Program Files\Mozilla Firefox\firefox.exe                                                                                                                                                                                                                      C:\Program Files\Mozilla Firefox\firefox.exe


firefox.exe          8564                                                          C:\Program Files\Mozilla Firefox\firefox.exe                                                                                                                                                                                                                      C:\Program Files\Mozilla Firefox\firefox.exe


firefox.exe          7460                                                          C:\Program Files\Mozilla Firefox\firefox.exe                                                                                                                                                                                                                      C:\Program Files\Mozilla Firefox\firefox.exe


firefox.exe          10784                                                         C:\Program Files\Mozilla Firefox\firefox.exe                                                                                                                                                                                                                      C:\Program Files\Mozilla Firefox\firefox.exe


firefox.exe          7816                                                          C:\Program Files\Mozilla Firefox\firefox.exe                                                                                                                                                                                                                      C:\Program Files\Mozilla Firefox\firefox.exe


firefox.exe          9864                                                          C:\Program Files\Mozilla Firefox\firefox.exe                                                                                                                                                                                                                      C:\Program Files\Mozilla Firefox\firefox.exe


firefox.exe          1064                                                          C:\Program Files\Mozilla Firefox\firefox.exe                                                                                                                                                                                                                      C:\Program Files\Mozilla Firefox\firefox.exe


audiodg.exe          11368                                                         C:\Windows\System32\audiodg.exe                                                                                                                                                                                                                                   C:\Windows\System32\audiodg.exe


coltool.exe          5504       CollectLogTool Module                              C:\Program Files (x86)\Rising\REC\ep\coltool.exe                                                                                                                                                                                                                  "C:\Program Files (x86)\Rising\REC\ep\coltool.exe" 
      coltool.exe           CollectLogTool Module                               Beijing Rising Network Security Technology Co., Ltd.  1, 0, 0, 21                                        C:\Program Files (x86)\Rising\REC\ep\coltool.exe
      ntdll.dll             NT 层 DLL                                            Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\ntdll.dll
      KERNEL32.DLL          Windows NT 基本 API 客户端 DLL                           Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\kernel32.dll
      KERNELBASE.dll        Windows NT 基本 API 客户端 DLL                           Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\KERNELBASE.dll
      apphelp.dll           应用程序兼容性客户端库                                         Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\apphelp.dll
      USER32.dll            多用户 Windows 用户 API 客户端 DLL                          Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\user32.dll
      win32u.dll            Win32u                                              Microsoft Corporation                               10.0.19041.4529 (WinBuild.160101.0800)             C:\Windows\System32\win32u.dll
      GDI32.dll             GDI Client DLL                                      Microsoft Corporation                               10.0.19041.4474 (WinBuild.160101.0800)             C:\Windows\System32\gdi32.dll
      gdi32full.dll         GDI Client DLL                                      Microsoft Corporation                               10.0.19041.4474 (WinBuild.160101.0800)             C:\Windows\System32\gdi32full.dll
      msvcp_win.dll         Microsoft? C Runtime Library                        Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\msvcp_win.dll
      ucrtbase.dll          Microsoft? C Runtime Library                        Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\ucrtbase.dll
      ADVAPI32.dll          高级 Windows 32 基本 API                                Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\advapi32.dll
      msvcrt.dll            Windows NT CRT DLL                                  Microsoft Corporation                               7.0.19041.3636 (WinBuild.160101.0800)              C:\Windows\System32\msvcrt.dll
      sechost.dll           Host for SCM/SDDL/LSA Lookup APIs                   Microsoft Corporation                               10.0.19041.1 (WinBuild.160101.0800)                C:\Windows\System32\sechost.dll
      RPCRT4.dll            远程过程调用运行时                                           Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\rpcrt4.dll
      bcrypt.dll            Windows 加密基元库                                       Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\bcrypt.dll
      SHELL32.dll           Windows Shell 公用 DLL                                Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\shell32.dll
      ole32.dll             用于 Windows 的 Microsoft OLE                          Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\ole32.dll
      combase.dll           用于 Windows 的 Microsoft COM                          Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\combase.dll
      OLEAUT32.dll          OLEAUT32.DLL                                        Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\oleaut32.dll
      SHLWAPI.dll           外壳简易实用工具库                                           Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\shlwapi.dll
      COMCTL32.dll          用户体验控件库                                             Microsoft Corporation                               6.10 (WinBuild.160101.0800)                        C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.4355_none_a865f0c28672571c\comctl32.dll
      IMM32.DLL             Multi-User Windows IMM32 API Client DLL             Microsoft Corporation                               10.0.19041.4474 (WinBuild.160101.0800)             C:\Windows\System32\imm32.dll
      kernel.appcore.dll    AppModel API Host                                   Microsoft Corporation                               10.0.19041.3758 (WinBuild.160101.0800)             C:\Windows\System32\kernel.appcore.dll
      bcryptPrimitives.dll  Windows Cryptographic Primitives Library            Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\bcryptPrimitives.dll
      uxtheme.dll           Microsoft UxTheme 库                                 Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\uxtheme.dll
      collog.dll            collog Dynamic Link Library                         Beijing Rising Network Security Technology Co., Ltd.  1, 0, 0, 43                                        C:\Program Files (x86)\Rising\REC\ep\collog.dll
      PSAPI.DLL             Process Status Helper                               Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\psapi.dll
      MSVCP90.dll           Microsoft? C++ Runtime Library                      Microsoft Corporation                               9.00.30729.9625                                    C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9625_none_508ef7e4bcbbe589\msvcp90.dll
      MSVCR90.dll           Microsoft? C Runtime Library                        Microsoft Corporation                               9.00.30729.9625                                    C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9625_none_508ef7e4bcbbe589\msvcr90.dll
      IPHLPAPI.DLL          IP 帮助程序 API                                         Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\IPHLPAPI.DLL
      VERSION.dll           Version Checking and File Installation Libraries    Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\version.dll
      MSCTF.dll             MSCTF 服务器 DLL                                       Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\msctf.dll
      textinputframework.dll  "TextInputFramework.DYNLINK"                        Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\System32\textinputframework.dll
      CoreMessaging.dll     Microsoft CoreMessaging Dll                         Microsoft Corporation                               10.0.19041.4474                                    C:\Windows\System32\CoreMessaging.dll
      CoreUIComponents.dll  Microsoft Core UI Components Dll                    Microsoft Corporation                               10.0.19041.3636                                    C:\Windows\System32\CoreUIComponents.dll
      WS2_32.dll            Windows Socket 2.0 32 位 DLL                         Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\ws2_32.dll
      SHCORE.dll            SHCORE                                              Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\SHCore.dll
      wintypes.dll          Windows 基本类型 DLL                                    Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\WinTypes.dll
      ntmarta.dll           Windows NT MARTA 提供程序                               Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\ntmarta.dll
      TextShaping.dll                                                                                                                                                                  C:\Windows\System32\TextShaping.dll
      windows.storage.dll   Microsoft WinRT Storage API                         Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\windows.storage.dll
      Wldp.dll              Windows 锁定策略                                        Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\wldp.dll
      clbcatq.dll           COM+ Configuration Catalog                          Microsoft Corporation                               2001.12.10941.16384 (WinBuild.160101.0800)         C:\Windows\System32\clbcatq.dll
      explorerframe.dll     ExplorerFrame                                       Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\explorerframe.dll
      WindowsCodecs.dll     Microsoft Windows Codecs Library                    Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\System32\WindowsCodecs.dll
      profapi.dll           User Profile Basic API                              Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\System32\profapi.dll
      thumbcache.dll        Microsoft 缩略图缓存                                     Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\thumbcache.dll
      policymanager.dll     Policy Manager DLL                                  Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\System32\policymanager.dll
      msvcp110_win.dll      Microsoft? STL110 C++ Runtime Library               Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\msvcp110_win.dll
      dataexchange.dll      Data exchange                                       Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\System32\dataexchange.dll
      d3d11.dll             Direct3D 11 Runtime                                 Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\System32\d3d11.dll
      dcomp.dll             Microsoft DirectComposition Library                 Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\System32\dcomp.dll
      dxgi.dll              DirectX Graphics Infrastructure                     Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\System32\dxgi.dll
      twinapi.appcore.dll   twinapi.appcore                                     Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\twinapi.appcore.dll
      PROPSYS.dll           Microsoft 属性系统                                      Microsoft Corporation                               7.0.19041.4406 (WinBuild.160101.0800)              C:\Windows\System32\propsys.dll
      Secur32.dll           Security Support Provider Interface                 Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\secur32.dll
      SSPICLI.DLL           Security Support Provider Interface                 Microsoft Corporation                               10.0.19041.4239 (WinBuild.160101.0800)             C:\Windows\System32\sspicli.dll
      samcli.dll            Security Accounts Manager Client DLL                Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\samcli.dll
      SAMLIB.dll            SAM Library DLL                                     Microsoft Corporation                               10.0.19041.3996 (WinBuild.160101.0800)             C:\Windows\System32\samlib.dll
      netutils.dll          Net Win32 API Helpers DLL                           Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\netutils.dll
      urlmon.dll            Win32 的 OLE32 扩展                                    Microsoft Corporation                               11.00.19041.4406 (WinBuild.160101.0800)            C:\Windows\System32\urlmon.dll
      iertutil.dll          Internet Explorer 的运行时实用程序                          Microsoft Corporation                               11.00.19041.4406 (WinBuild.160101.0800)            C:\Windows\System32\iertutil.dll
      srvcli.dll            Server Service Client DLL                           Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\srvcli.dll
      CFGMGR32.dll          Configuration Manager DLL                           Microsoft Corporation                               10.0.19041.3996 (WinBuild.160101.0800)             C:\Windows\System32\cfgmgr32.dll
      tiptsf.dll            触摸键盘和手写面板文本服务框架                                     Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll
      NetworkExplorer.dll   网络浏览器                                               Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\NetworkExplorer.dll
      QQPinyinTSF.dll       QQ拼音输入法                                             Sogou                                               6.6.6304.400                                       C:\Windows\System32\IME\QQPinyinTSF\QQPinyinTSF.dll
      QQPinyin.ime          QQ拼音输入法                                             Sogou                                               6.6.6304.400                                       C:\Windows\System32\IME\QQPinyinTSF\QQPinyin.ime
      WTSAPI32.dll          Windows Remote Desktop Session Host Server SDK APIs  Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\wtsapi32.dll
      WININET.dll           Win32 的 Internet 扩展                                 Microsoft Corporation                               11.00.19041.4406 (WinBuild.160101.0800)            C:\Windows\System32\wininet.dll
      MSIMG32.dll           GDIEXT Client DLL                                   Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\msimg32.dll
      USP10.dll             Uniscribe Unicode script processor                  Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\usp10.dll
      DNSAPI.dll            DNS 客户端 API DLL                                     Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\dnsapi.dll
      NSI.dll               NSI User-mode interface DLL                         Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\nsi.dll
      edputil.dll           EDP 实用程序                                            Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\edputil.dll
      Windows.StateRepositoryPS.dll  Windows StateRepository Proxy/Stub Server           Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\Windows.StateRepositoryPS.dll
      virtdisk.dll          Virtual Disk API DLL                                Microsoft Corporation                               10.0.19041.3636 (WinBuild.160101.0800)             C:\Windows\System32\virtdisk.dll
      FLTLIB.DLL            筛选器库                                                Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\fltLib.dll
      appresolver.dll       应用解析程序                                              Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\appresolver.dll
      Bcp47Langs.dll        BCP47 Language Classes                              Microsoft Corporation                               10.0.19041.4355 (WinBuild.160101.0800)             C:\Windows\System32\Bcp47Langs.dll
      SLC.dll               软件授权客户端 Dll                                         Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\slc.dll
      USERENV.dll           Userenv                                             Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\userenv.dll
      sppc.dll              软件授权客户端 Dll                                         Microsoft Corporation                               10.0.19041.4406 (WinBuild.160101.0800)             C:\Windows\System32\sppc.dll
      OneCoreCommonProxyStub.dll  OneCore Common Proxy Stub                           Microsoft Corporation                               10.0.19041.3758 (WinBuild.160101.0800)             C:\Windows\System32\OneCoreCommonProxyStub.dll
      OneCoreUAPCommonProxyStub.dll  OneCoreUAP Common Proxy Stub                        Microsoft Corporation                               10.0.19041.4474 (WinBuild.160101.0800)             C:\Windows\System32\OneCoreUAPCommonProxyStub.dll


SearchProtocolHost.exe 12160                                                         C:\Windows\System32\SearchProtocolHost.exe                                                                                                                                                                                                                        C:\Windows\System32\SearchProtocolHost.exe


SearchFilterHost.exe 2628                                                          C:\Windows\System32\SearchFilterHost.exe                                                                                                                                                                                                                          C:\Windows\System32\SearchFilterHost.exe


