2024-01-10 12:24:39.

286|3|%USERPROFILE%\appdata\local\kingsoft\wps office\
12.2.0.13412\office6\wps.exe|wps office|zhuhai kingsoft office software co.,ltd|
12,2,0,13412|00066c0c29ddaed212d4a90e4f628b2ae44e00000000|PCA resolve is called,
resolver name: DetectorShim_KernelDriver, result: 0
2024-01-11 10:26:43.854|2|%USERPROFILE%\appdata\local\kingsoft\wps office\
12.2.0.13412\office6\promecefpluginhost.exe|wps office|zhuhai kingsoft office
software co.,ltd|12,2,0,13412|00066c0c29ddaed212d4a90e4f628b2ae44e00000000|Abnormal
process exit with code 0xc000010a
2024-01-17 20:02:29.319|2|%USERPROFILE%\appdata\local\microsoft\edgewebview\applica
%USERNAME%on\120.0.2210.133\installer\setup.exe|||||Abnormal process exit with code
0x13
2024-01-17 20:02:30.006|2|%programfiles%\windowsapps\
microsoftteams_23306.3309.2530.1346_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater|microsoft corporation|23306.3309.2530.1346|
00060e91ed031144fbe93360a8d3254b685900000904|Abnormal process exit with code 0x4c7
2024-01-22 18:02:38.171|3|%USERPROFILE%\appdata\local\kingsoft\wps office\
12.2.0.13431\office6\wps.exe|wps office|zhuhai kingsoft office software co.,ltd|
12,2,0,13431|0006ddb2cd083cc66029284f8f3744e834bc00000000|PCA resolve is called,
resolver name: DetectorShim_KernelDriver, result: 0
2024-01-26 14:56:38.151|2|%programfiles%\windowsapps\
microsoftteams_23335.242.2641.4129_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater|microsoft corporation|23335.242.2641.4129|
0006eff7e0c0f19f73d5a68a2bcb9c07973f00000904|Abnormal process exit with code 0x4c7
2024-01-26 14:56:38.244|2|%programfiles%\windowsapps\
microsoftteams_23335.242.2641.4129_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater|microsoft corporation|23335.242.2641.4129|
0006eff7e0c0f19f73d5a68a2bcb9c07973f00000904|Abnormal process exit with code 0x4c7
2024-02-07 13:57:12.947|2|%programfiles%\windowsapps\
microsoftteams_24004.1403.2634.2418_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater|microsoft corporation|24004.1403.2634.2418|
0006183f6899431cdff2b9aa6b12aec548ce00000904|Abnormal process exit with code 0x4c7
2024-02-07 14:48:17.161|2|%programfiles%\windowsapps\
microsoftteams_24004.1403.2634.2418_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater|microsoft corporation|24004.1403.2634.2418|
0006183f6899431cdff2b9aa6b12aec548ce00000904|Abnormal process exit with code 0x4c7
2024-02-08 13:36:02.600|2|%programfiles%\windowsapps\
microsoftteams_24004.1403.2634.2418_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater|microsoft corporation|24004.1403.2634.2418|
0006183f6899431cdff2b9aa6b12aec548ce00000904|Abnormal process exit with code 0x4c7
2024-02-08 13:48:40.305|2|%programfiles%\windowsapps\
microsoftteams_24004.1403.2634.2418_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater|microsoft corporation|24004.1403.2634.2418|
0006183f6899431cdff2b9aa6b12aec548ce00000904|Abnormal process exit with code 0x4c7
2024-02-12 13:35:39.717|2|%programfiles%\windowsapps\
microsoftteams_24004.1403.2634.2418_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater|microsoft corporation|24004.1403.2634.2418|
0006183f6899431cdff2b9aa6b12aec548ce00000904|Abnormal process exit with code 0x4c7
2024-02-12 13:41:39.928|2|%programfiles%\windowsapps\
microsoftteams_24004.1403.2634.2418_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater|microsoft corporation|24004.1403.2634.2418|
0006183f6899431cdff2b9aa6b12aec548ce00000904|Abnormal process exit with code 0x4c7
2024-02-13 13:38:18.399|2|%programfiles%\windowsapps\
microsoftteams_24004.1403.2634.2418_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater|microsoft corporation|24004.1403.2634.2418|
0006183f6899431cdff2b9aa6b12aec548ce00000904|Abnormal process exit with code 0x4c7
2024-02-13 13:41:29.618|2|%programfiles%\windowsapps\
microsoftteams_24004.1403.2634.2418_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater|microsoft corporation|24004.1403.2634.2418|
0006183f6899431cdff2b9aa6b12aec548ce00000904|Abnormal process exit with code 0x4c7
2024-02-13 17:12:26.799|2|%programfiles%\windowsapps\
microsoftteams_24004.1403.2634.2418_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater|microsoft corporation|24004.1403.2634.2418|
0006183f6899431cdff2b9aa6b12aec548ce00000904|Abnormal process exit with code 0x4c7
2024-02-14 13:41:19.591|2|%programfiles%\windowsapps\
microsoftteams_24004.1403.2634.2418_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater|microsoft corporation|24004.1403.2634.2418|
0006183f6899431cdff2b9aa6b12aec548ce00000904|Abnormal process exit with code 0x4c7
2024-02-15 11:30:30.888|2|%programfiles%\windowsapps\
microsoftteams_24004.1403.2634.2418_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater|microsoft corporation|24004.1403.2634.2418|
0006183f6899431cdff2b9aa6b12aec548ce00000904|Abnormal process exit with code 0x4c7
2024-02-16 10:32:16.503|2|%programfiles%\windowsapps\
microsoftteams_24004.1403.2634.2418_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater|microsoft corporation|24004.1403.2634.2418|
0006183f6899431cdff2b9aa6b12aec548ce00000904|Abnormal process exit with code 0x4c7
2024-02-19 13:53:32.921|2|%programfiles%\windowsapps\
microsoftteams_24004.1403.2634.2418_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater|microsoft corporation|24004.1403.2634.2418|
0006183f6899431cdff2b9aa6b12aec548ce00000904|Abnormal process exit with code 0x4c7
2024-02-19 19:20:20.217|2|%programfiles%\windowsapps\
microsoftteams_24004.1403.2634.2418_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater|microsoft corporation|24004.1403.2634.2418|
0006183f6899431cdff2b9aa6b12aec548ce00000904|Abnormal process exit with code 0x4c7
2024-02-20 13:32:28.003|2|%programfiles%\windowsapps\
microsoftteams_24004.1403.2634.2418_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater|microsoft corporation|24004.1403.2634.2418|
0006183f6899431cdff2b9aa6b12aec548ce00000904|Abnormal process exit with code 0x4c7
2024-02-21 10:37:35.374|2|%programfiles%\windowsapps\
microsoftteams_24004.1403.2634.2418_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater|microsoft corporation|24004.1403.2634.2418|
0006183f6899431cdff2b9aa6b12aec548ce00000904|Abnormal process exit with code 0x4c7
2024-02-22 13:19:37.020|2|%programfiles%\windowsapps\
microsoftteams_24004.1403.2634.2418_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater|microsoft corporation|24004.1403.2634.2418|
0006183f6899431cdff2b9aa6b12aec548ce00000904|Abnormal process exit with code 0x4c7
2024-02-29 11:31:49.982|2|%programfiles%\windowsapps\
microsoftteams_24004.1403.2634.2418_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater|microsoft corporation|24004.1403.2634.2418|
0006183f6899431cdff2b9aa6b12aec548ce00000904|Abnormal process exit with code 0x4c7
2024-03-27 12:04:16.473|2|%programfiles%\windowsapps\
microsoftteams_24047.202.2704.38_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater|microsoft corporation|24047.202.2704.38|
0006d8ee5d5e03bd2df90be61fcc01a3a56900000904|Abnormal process exit with code 0x4c7
2024-03-27 17:21:15.740|2|%programfiles%\windowsapps\
microsoftteams_24047.202.2704.38_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater|microsoft corporation|24047.202.2704.38|
0006d8ee5d5e03bd2df90be61fcc01a3a56900000904|Abnormal process exit with code 0x4c7
2024-04-01 13:59:20.802|2|%programfiles%\windowsapps\
microsoftteams_24047.202.2704.38_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater|microsoft corporation|24047.202.2704.38|
0006d8ee5d5e03bd2df90be61fcc01a3a56900000904|Abnormal process exit with code 0x4c7
2024-04-03 00:12:02.479|3|%programfiles%\windowsapps\
microsoft.windowsnotepad_11.2112.32.0_x64__8wekyb3d8bbwe\notepad\notepad.exe|
notepad|microsoft corporation|11.2112.32.0|
0006cca077726cfdd25e5c9d774bdea0818600000000|PCA resolve is called, resolver name:
DetectorShim_KernelDriver, result: 0
2024-04-03 00:15:57.796|2|%systemroot%\syswow64\regsvr32.exe|microsoft® windows®
operating system|microsoft corporation|10.0.22621.1|
0000f519feec486de87ed73cb92d3cac802400000000|Abnormal process exit with code 0x5
2024-04-03 00:16:09.679|2|%systemroot%\syswow64\regsvr32.exe|microsoft® windows®
operating system|microsoft corporation|10.0.22621.1|
0000f519feec486de87ed73cb92d3cac802400000000|Abnormal process exit with code 0x5
2024-04-03 00:16:21.737|2|%USERPROFILE%\downloads\wps_wid.cid-
898244504.1712103207.exe|wps office|zhuhai kingsoft office software co.,ltd|
12,2,0,13518|000661f98f29722abc11011d795e061df5d100000000|Abnormal process exit
with code 0x1
2024-04-03 00:16:21.769|3|%USERPROFILE%\downloads\wps_wid.cid-
898244504.1712103207.exe|wps office|zhuhai kingsoft office software co.,ltd|
12,2,0,13518|000661f98f29722abc11011d795e061df5d100000000|PCA resolve is called,
resolver name: DetectorShim_KernelDriver, result: 0
2024-04-04 21:42:57.123|2|%systemroot%\syswow64\regsvr32.exe|microsoft® windows®
operating system|microsoft corporation|10.0.22621.1|
0000f519feec486de87ed73cb92d3cac802400000000|Abnormal process exit with code 0x3
2024-04-04 21:42:57.170|2|%systemroot%\syswow64\regsvr32.exe|microsoft® windows®
operating system|microsoft corporation|10.0.22621.1|
0000f519feec486de87ed73cb92d3cac802400000000|Abnormal process exit with code 0x3
2024-04-04 21:42:57.185|2|%systemroot%\syswow64\regsvr32.exe|microsoft® windows®
operating system|microsoft corporation|10.0.22621.1|
0000f519feec486de87ed73cb92d3cac802400000000|Abnormal process exit with code 0x3
2024-04-04 21:42:57.248|2|%systemroot%\syswow64\regsvr32.exe|microsoft® windows®
operating system|microsoft corporation|10.0.22621.1|
0000f519feec486de87ed73cb92d3cac802400000000|Abnormal process exit with code 0x3
2024-04-04 21:42:57.295|2|%systemroot%\syswow64\regsvr32.exe|microsoft® windows®
operating system|microsoft corporation|10.0.22621.1|
0000f519feec486de87ed73cb92d3cac802400000000|Abnormal process exit with code 0x3
2024-04-04 21:42:57.326|2|%systemroot%\syswow64\regsvr32.exe|microsoft® windows®
operating system|microsoft corporation|10.0.22621.1|
0000f519feec486de87ed73cb92d3cac802400000000|Abnormal process exit with code 0x3
2024-04-04 21:42:57.358|2|%systemroot%\syswow64\regsvr32.exe|microsoft® windows®
operating system|microsoft corporation|10.0.22621.1|
0000f519feec486de87ed73cb92d3cac802400000000|Abnormal process exit with code 0x3
2024-04-04 21:42:57.390|2|%systemroot%\syswow64\regsvr32.exe|microsoft® windows®
operating system|microsoft corporation|10.0.22621.1|
0000f519feec486de87ed73cb92d3cac802400000000|Abnormal process exit with code 0x3
2024-04-04 21:42:57.421|2|%systemroot%\syswow64\regsvr32.exe|microsoft® windows®
operating system|microsoft corporation|10.0.22621.1|
0000f519feec486de87ed73cb92d3cac802400000000|Abnormal process exit with code 0x3
2024-04-04 21:43:00.297|2|%systemroot%\syswow64\regsvr32.exe|microsoft® windows®
operating system|microsoft corporation|10.0.22621.1|
0000f519feec486de87ed73cb92d3cac802400000000|Abnormal process exit with code 0x5
2024-04-04 21:43:00.328|2|%systemroot%\syswow64\regsvr32.exe|microsoft® windows®
operating system|microsoft corporation|10.0.22621.1|
0000f519feec486de87ed73cb92d3cac802400000000|Abnormal process exit with code 0x3
2024-04-04 21:43:14.948|2|%systemroot%\syswow64\regsvr32.exe|microsoft® windows®
operating system|microsoft corporation|10.0.22621.1|
0000f519feec486de87ed73cb92d3cac802400000000|Abnormal process exit with code 0x5
2024-04-04 21:43:17.119|2|%USERPROFILE%\appdata\local\kingsoft\wps office\
12.2.0.16731\office6\wps.exe|wps office|zhuhai kingsoft office software co.,ltd|
12,2,0,16731|0006623882108b157a29228a0586609e279700000000|Abnormal process exit
with code 0x3
2024-04-22 22:12:41.246|3|%programfiles%\windowsapps\
dellinc.dellcommandupdate_5.0.42.0_x86__htrsf667h5kn2\dcu\dellcommandupdate.exe|
dell command | update||5.0.0.42|00064fd688049508ef58f4ac981918c8364c00000000|PCA
resolve is called, resolver name: DetectorShim_KernelDriver, result: 0
2024-04-26 16:48:55.517|2|%programfiles%\windowsapps\
microsoftteams_24047.202.2704.38_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater|microsoft corporation|24047.202.2704.38|
0006d8ee5d5e03bd2df90be61fcc01a3a56900000904|Abnormal process exit with code 0x4c7
2024-04-30 13:03:46.398|2|%programfiles%\windowsapps\
microsoftteams_24060.3102.2733.5911_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater|microsoft corporation|24060.3102.2733.5911|
000611fd11bf9f905b7fa3ff9e47a987e26600000904|Abnormal process exit with code 0x4c7
2024-05-01 16:29:13.862|3|%programfiles%\windowsapps\
microsoft.windowsnotepad_11.2112.32.0_x64__8wekyb3d8bbwe\notepad\notepad.exe|
notepad|microsoft corporation|11.2112.32.0|
0006cca077726cfdd25e5c9d774bdea0818600000000|PCA resolve is called, resolver name:
DetectorShim_KernelDriver, result: 0
2024-05-01 16:29:17.181|2|%USERPROFILE%\appdata\local\kingsoft\wps office\
11.2.0.8970\office6\ksomisc.exe|wps office|zhuhai kingsoft office software co.,ltd|
11,2,0,8970|0006d635ffde782004a5665ce002ab2bafff00000000|Abnormal process exit with
code 0xffffffff
2024-05-01 16:29:28.412|2|%USERPROFILE%\appdata\local\kingsoft\wps office\
11.2.0.8970\office6\ksomisc.exe|wps office|zhuhai kingsoft office software co.,ltd|
11,2,0,8970|0006d635ffde782004a5665ce002ab2bafff00000000|Abnormal process exit with
code 0xffffffff
2024-05-01 16:29:44.369|2|%USERPROFILE%\appdata\local\kingsoft\wps office\
11.2.0.8970\office6\wpscenter.exe|wps office|zhuhai kingsoft office software
co.,ltd|11,2,0,8970|0006d635ffde782004a5665ce002ab2bafff00000000|Abnormal process
exit with code 0xdead
2024-05-01 16:35:31.246|3|%programfiles(x86)%\anydesk\anydesk.exe|anydesk|anydesk
software gmbh|7.0|0000a6a3b268a3ea5dbd6e3bd0444c0ce6cc0000ffff|PCA resolve is
called, resolver name: DetectorShim_KernelDriver, result: 0
2024-05-01 16:37:47.922|2|%USERPROFILE%\appdata\local\kingsoft\wps office\
11.2.0.8970\office6\wps.exe|wps office|zhuhai kingsoft office software co.,ltd|
11,2,0,8970|0006d635ffde782004a5665ce002ab2bafff00000000|Abnormal process exit with
code 0x3
2024-05-01 16:38:04.387|2|%USERPROFILE%\appdata\local\kingsoft\wps office\
wpscloudsvr.exe|wps office|zhuhai kingsoft office software co.,ltd|11,2,0,8970|
0006d635ffde782004a5665ce002ab2bafff00000000|Abnormal process exit with code 0x3
2024-05-01 16:38:04.437|2|%systemroot%\syswow64\regsvr32.exe|microsoft® windows®
operating system|microsoft corporation|10.0.22621.1|
0000f519feec486de87ed73cb92d3cac802400000000|Abnormal process exit with code 0x3
2024-05-01 16:38:04.497|2|%USERPROFILE%\appdata\local\kingsoft\wps office\
wpscloudsvr.exe|wps office|zhuhai kingsoft office software co.,ltd|11,2,0,8970|
0006d635ffde782004a5665ce002ab2bafff00000000|Abnormal process exit with code 0x3
2024-05-01 16:38:04.517|2|%systemroot%\syswow64\regsvr32.exe|microsoft® windows®
operating system|microsoft corporation|10.0.22621.1|
0000f519feec486de87ed73cb92d3cac802400000000|Abnormal process exit with code 0x3
2024-05-01 16:38:04.567|2|%systemroot%\syswow64\regsvr32.exe|microsoft® windows®
operating system|microsoft corporation|10.0.22621.1|
0000f519feec486de87ed73cb92d3cac802400000000|Abnormal process exit with code 0x3
2024-05-01 16:38:04.607|2|%systemroot%\syswow64\regsvr32.exe|microsoft® windows®
operating system|microsoft corporation|10.0.22621.1|
0000f519feec486de87ed73cb92d3cac802400000000|Abnormal process exit with code 0x3
2024-05-01 16:38:04.677|2|%USERPROFILE%\appdata\local\kingsoft\wps office\
wpscloudsvr.exe|wps office|zhuhai kingsoft office software co.,ltd|11,2,0,8970|
0006d635ffde782004a5665ce002ab2bafff00000000|Abnormal process exit with code 0x3
2024-05-01 16:38:04.717|2|%systemroot%\syswow64\regsvr32.exe|microsoft® windows®
operating system|microsoft corporation|10.0.22621.1|
0000f519feec486de87ed73cb92d3cac802400000000|Abnormal process exit with code 0x3
2024-05-01 16:38:04.747|2|%systemroot%\syswow64\regsvr32.exe|microsoft® windows®
operating system|microsoft corporation|10.0.22621.1|
0000f519feec486de87ed73cb92d3cac802400000000|Abnormal process exit with code 0x3
2024-05-01 16:38:04.777|2|%systemroot%\syswow64\regsvr32.exe|microsoft® windows®
operating system|microsoft corporation|10.0.22621.1|
0000f519feec486de87ed73cb92d3cac802400000000|Abnormal process exit with code 0x3
2024-05-01 16:38:04.847|2|%USERPROFILE%\appdata\local\kingsoft\wps office\
wpscloudsvr.exe|wps office|zhuhai kingsoft office software co.,ltd|11,2,0,8970|
0006d635ffde782004a5665ce002ab2bafff00000000|Abnormal process exit with code 0x3
2024-05-01 16:38:04.907|2|%USERPROFILE%\appdata\local\kingsoft\wps office\
wpscloudsvr.exe|wps office|zhuhai kingsoft office software co.,ltd|11,2,0,8970|
0006d635ffde782004a5665ce002ab2bafff00000000|Abnormal process exit with code 0x3
2024-05-01 16:38:04.947|2|%systemroot%\syswow64\regsvr32.exe|microsoft® windows®
operating system|microsoft corporation|10.0.22621.1|
0000f519feec486de87ed73cb92d3cac802400000000|Abnormal process exit with code 0x3
2024-05-01 16:38:04.967|2|%systemroot%\syswow64\regsvr32.exe|microsoft® windows®
operating system|microsoft corporation|10.0.22621.1|
0000f519feec486de87ed73cb92d3cac802400000000|Abnormal process exit with code 0x3
2024-05-01 16:38:05.015|2|%USERPROFILE%\appdata\local\kingsoft\wps office\
wpscloudsvr.exe|wps office|zhuhai kingsoft office software co.,ltd|11,2,0,8970|
0006d635ffde782004a5665ce002ab2bafff00000000|Abnormal process exit with code 0x3
2024-05-01 16:38:21.653|2|%systemroot%\syswow64\regsvr32.exe|microsoft® windows®
operating system|microsoft corporation|10.0.22621.1|
0000f519feec486de87ed73cb92d3cac802400000000|Abnormal process exit with code 0x5
2024-05-01 20:03:16.774|3|%USERPROFILE%\appdata\local\kingsoft\wps office\
12.2.0.16731\office6\photolaunch.exe|wps office|zhuhai kingsoft office software
co.,ltd|12,2,0,16731|0006623882108b157a29228a0586609e279700000000|PCA resolve is
called, resolver name: DetectorShim_KernelDriver, result: 0
2024-05-01 20:04:12.271|3|%programdata%\kingsoft\20240501_132839\wpsoffice.exe|||||
PCA resolve is called, resolver name: DetectorShim_KernelDriver, result: 0
2024-05-07 13:00:06.860|2|%USERPROFILE%\downloads\wps_wid.cid-
898244504.1712103207.exe|wps office|zhuhai kingsoft office software co.,ltd|
12,2,0,13518|000661f98f29722abc11011d795e061df5d100000000|Abnormal process exit
with code 0x1
2024-05-07 13:00:13.190|2|%USERPROFILE%\downloads\wps_download\
dc16ab46890728d4a257eda9126370b5-14_setup_xa_mui_free.exe.600.1002.exe|wps office|
zhuhai kingsoft office software co.,ltd|12,2,0,13518|
000661f98f29722abc11011d795e061df5d100000000|Abnormal process exit with code 0x5
2024-05-07 13:00:13.786|3|%USERPROFILE%\downloads\wps_download\
dc16ab46890728d4a257eda9126370b5-14_setup_xa_mui_free.exe.600.1002.exe|wps office|
zhuhai kingsoft office software co.,ltd|12,2,0,13518|
000661f98f29722abc11011d795e061df5d100000000|PCA resolve is called, resolver name:
DetectorShim_KernelDriver, result: 0
2024-05-07 14:07:54.737|3|%programfiles%\windowsapps\
dellinc.dellcommandupdate_5.0.42.0_x86__htrsf667h5kn2\dcu\dellcommandupdate.exe|
dell command | update||5.0.0.42|00064fd688049508ef58f4ac981918c8364c00000000|PCA
resolve is called, resolver name: DetectorShim_KernelDriver, result: 0
2024-05-09 17:04:06.667|2|%programfiles%\windowsapps\
microsoftteams_24060.3102.2733.5911_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater|microsoft corporation|24060.3102.2733.5911|
000611fd11bf9f905b7fa3ff9e47a987e26600000904|Abnormal process exit with code 0x4c7
2024-05-09 17:04:06.730|2|%programfiles%\windowsapps\
microsoftteams_24060.3102.2733.5911_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater|microsoft corporation|24060.3102.2733.5911|
000611fd11bf9f905b7fa3ff9e47a987e26600000904|Abnormal process exit with code 0x4c7
2024-05-10 10:50:15.103|3|%USERPROFILE%\appdata\local\kingsoft\wps office\
12.2.0.16909\office6\wps.exe|wps office|zhuhai kingsoft office software co.,ltd|
12,2,0,16909|0006610117b1340b6f4d851679129a6f34ab00000000|PCA resolve is called,
resolver name: DetectorShim_KernelDriver, result: 0
2024-05-15 11:01:09.651|2|%programfiles%\windowsapps\
microsoftteams_24060.3102.2733.5911_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater|microsoft corporation|24060.3102.2733.5911|
000611fd11bf9f905b7fa3ff9e47a987e26600000904|Abnormal process exit with code 0x4c7
2024-06-03 20:15:50.212|2|%USERPROFILE%\appdata\local\kingsoft\wps office\
12.2.0.16909\office6\promecefpluginhost.exe|wps office|zhuhai kingsoft office
software co.,ltd|12,2,0,16909|0006610117b1340b6f4d851679129a6f34ab00000000|Abnormal
process exit with code 0xc000010a
2024-06-06 20:33:41.285|2|%programfiles%\windowsapps\
microsoftteams_24102.2309.2851.4917_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater (personal)|microsoft corporation|24102.2309.2851.4917|
00065958618dec92f8e9953d2177b061e4df00000904|Abnormal process exit with code 0x4c7
2024-06-07 18:00:49.683|2|%programfiles%\windowsapps\
microsoftteams_24124.2402.2858.5617_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater (personal)|microsoft corporation|24124.2402.2858.5617|
00063d0fb84feb362a44a8e8282fd2b63cdc00000904|Abnormal process exit with code 0x4c7
2024-06-10 17:56:26.131|2|%programfiles%\windowsapps\
microsoftteams_24124.2402.2858.5617_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater (personal)|microsoft corporation|24124.2402.2858.5617|
00063d0fb84feb362a44a8e8282fd2b63cdc00000904|Abnormal process exit with code 0x4c7
2024-06-11 20:42:08.246|2|%USERPROFILE%\desktop\ir1643iiimfdriverv720w64\intdrv\
ufrii\x64\setup.exe|installer module|canon inc.|7, 4, 0, 0|
0006696ab4532531df51ff0aae496cfe29fd00000904|Abnormal process exit with code 0x1
2024-06-11 20:42:17.225|2|%USERPROFILE%\desktop\ir1643iiimfdriverv720w64\intdrv\
scan\x64\misc\ext\nwiainst.ex_|canon mf network wia 64bit installer for microsoft
windows|canon inc.|1.40|0006732657927f3c14846e7e227c7e5415a000000904|Abnormal
process exit with code 0x1000
2024-06-13 20:29:30.349|2|%USERPROFILE%\appdata\local\kingsoft\wps office\
12.2.0.17119\office6\addons\kwpswnsserver\kwpswnsserver.exe|wps office|zhuhai
kingsoft office software co.,ltd|1,0,0,0|
0000b9ca06b50f34db36282972f584227a0b0000ffff|Abnormal process exit with code 0x1002
2024-06-13 23:49:25.201|3|%programfiles%\windowsapps\
microsoft.paint_11.2201.22.0_x64__8wekyb3d8bbwe\paintapp\mspaint.exe|paint|
microsoft corporation|11.2201.22.0|000655a9a2e095d4e2cfef9c6f183ae4facc00000000|PCA
resolve is called, resolver name: DetectorShim_KernelDriver, result: 0
2024-06-14 22:52:07.580|2|%programfiles%\windowsapps\
microsoftteams_24124.2402.2858.5617_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater (personal)|microsoft corporation|24124.2402.2858.5617|
00063d0fb84feb362a44a8e8282fd2b63cdc00000904|Abnormal process exit with code 0x4c7
2024-06-17 20:11:43.417|2|%programfiles%\windowsapps\
microsoftteams_24124.2402.2858.5617_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater (personal)|microsoft corporation|24124.2402.2858.5617|
00063d0fb84feb362a44a8e8282fd2b63cdc00000904|Abnormal process exit with code 0x4c7
2024-06-18 11:14:19.949|2|%programfiles%\windowsapps\
microsoftteams_24124.2402.2858.5617_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater (personal)|microsoft corporation|24124.2402.2858.5617|
00063d0fb84feb362a44a8e8282fd2b63cdc00000904|Abnormal process exit with code 0x4c7
2024-06-18 11:14:20.467|2|%programfiles%\windowsapps\
microsoftteams_24124.2402.2858.5617_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater (personal)|microsoft corporation|24124.2402.2858.5617|
00063d0fb84feb362a44a8e8282fd2b63cdc00000904|Abnormal process exit with code 0x4c7
2024-06-18 17:48:16.983|2|%programfiles%\windowsapps\
microsoftteams_24124.2402.2858.5617_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater (personal)|microsoft corporation|24124.2402.2858.5617|
00063d0fb84feb362a44a8e8282fd2b63cdc00000904|Abnormal process exit with code 0x4c7
2024-06-20 17:54:01.862|2|%programfiles%\windowsapps\
microsoftteams_24124.2402.2858.5617_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater (personal)|microsoft corporation|24124.2402.2858.5617|
00063d0fb84feb362a44a8e8282fd2b63cdc00000904|Abnormal process exit with code 0x4c7
2024-06-22 16:36:31.974|2|%programfiles%\windowsapps\
microsoftteams_24124.2402.2858.5617_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater (personal)|microsoft corporation|24124.2402.2858.5617|
00063d0fb84feb362a44a8e8282fd2b63cdc00000904|Abnormal process exit with code 0x4c7
2024-06-22 16:54:38.309|2|%programfiles%\windowsapps\
microsoftteams_24124.2402.2858.5617_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater (personal)|microsoft corporation|24124.2402.2858.5617|
00063d0fb84feb362a44a8e8282fd2b63cdc00000904|Abnormal process exit with code 0x4c7
2024-06-22 16:57:16.179|2|%programfiles%\windowsapps\
microsoftteams_24124.2402.2858.5617_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater (personal)|microsoft corporation|24124.2402.2858.5617|
00063d0fb84feb362a44a8e8282fd2b63cdc00000904|Abnormal process exit with code 0x4c7
2024-06-22 17:12:54.027|2|%programfiles%\windowsapps\
microsoftteams_24124.2402.2858.5617_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater (personal)|microsoft corporation|24124.2402.2858.5617|
00063d0fb84feb362a44a8e8282fd2b63cdc00000904|Abnormal process exit with code 0x4c7
2024-06-22 17:15:30.058|2|%programfiles%\windowsapps\
microsoftteams_24124.2402.2858.5617_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater (personal)|microsoft corporation|24124.2402.2858.5617|
00063d0fb84feb362a44a8e8282fd2b63cdc00000904|Abnormal process exit with code 0x4c7
2024-06-22 17:18:08.055|2|%programfiles%\windowsapps\
microsoftteams_24124.2402.2858.5617_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater (personal)|microsoft corporation|24124.2402.2858.5617|
00063d0fb84feb362a44a8e8282fd2b63cdc00000904|Abnormal process exit with code 0x4c7
2024-06-22 17:20:50.053|2|%programfiles%\windowsapps\
microsoftteams_24124.2402.2858.5617_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater (personal)|microsoft corporation|24124.2402.2858.5617|
00063d0fb84feb362a44a8e8282fd2b63cdc00000904|Abnormal process exit with code 0x4c7
2024-06-22 20:20:30.837|3|%programfiles%\windowsapps\
microsoft.windowsnotepad_11.2112.32.0_x64__8wekyb3d8bbwe\notepad\notepad.exe|
notepad|microsoft corporation|11.2112.32.0|
0006cca077726cfdd25e5c9d774bdea0818600000000|PCA resolve is called, resolver name:
DetectorShim_KernelDriver, result: 0
2024-06-22 20:52:06.447|3|%programfiles%\windowsapps\
29982sibistltd.xlsxeditorxlsreader_1.0.5.0_x86__rd00eeepyhwr8\officeapp\
officeapp.exe|officeapp||1.0.0.0|00068130c9d2d49cd7405ee0b731e0b15c1e00000000|PCA
resolve is called, resolver name: DetectorShim_KernelDriver, result: 0
2024-06-24 11:22:28.657|3|%programfiles%\windowsapps\
microsoft.paint_11.2201.22.0_x64__8wekyb3d8bbwe\paintapp\mspaint.exe|paint|
microsoft corporation|11.2201.22.0|000655a9a2e095d4e2cfef9c6f183ae4facc00000000|PCA
resolve is called, resolver name: DetectorShim_KernelDriver, result: 0
2024-06-26 17:54:35.562|2|%programfiles%\windowsapps\
microsoftteams_24124.2402.2858.5617_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater (personal)|microsoft corporation|24124.2402.2858.5617|
00063d0fb84feb362a44a8e8282fd2b63cdc00000904|Abnormal process exit with code 0x4c7
2024-06-26 18:43:03.464|2|%programfiles%\windowsapps\
microsoftteams_24124.2402.2858.5617_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater (personal)|microsoft corporation|24124.2402.2858.5617|
00063d0fb84feb362a44a8e8282fd2b63cdc00000904|Abnormal process exit with code 0x3cf9
2024-07-01 17:48:33.219|2|%programfiles%\windowsapps\
microsoftteams_24151.2105.2943.2101_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater (personal)|microsoft corporation|24151.2105.2943.2101|
0006015e138a796d9bbbe10a4b20b0e3b64d00000904|Abnormal process exit with code 0x4c7
2024-07-12 13:55:59.568|2|%programfiles%\windowsapps\
microsoftteams_24151.2105.2943.2101_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater (personal)|microsoft corporation|24151.2105.2943.2101|
0006015e138a796d9bbbe10a4b20b0e3b64d00000904|Abnormal process exit with code 0x4c7
2024-07-12 17:36:27.016|2|%programfiles%\windowsapps\
microsoftteams_24151.2105.2943.2101_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater (personal)|microsoft corporation|24151.2105.2943.2101|
0006015e138a796d9bbbe10a4b20b0e3b64d00000904|Abnormal process exit with code 0x4c7
2024-07-15 17:42:32.181|2|%programfiles%\windowsapps\
microsoftteams_24151.2105.2943.2101_x64__8wekyb3d8bbwe\msteamsupdate.exe|microsoft
teams updater (personal)|microsoft corporation|24151.2105.2943.2101|
0006015e138a796d9bbbe10a4b20b0e3b64d00000904|Abnormal process exit with code 0x4c7