PS C:\Users\Administrator> # 重置所有UWP应用(管理员PowerShell) PS C:\Users\Administrator> Get-AppXPackage -AllUsers | Foreach { >> Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLocation)\AppXManifest.xml" >> } >> Add-AppxPackage : 部署失败,原因是 HRESULT: 0x80073D02, 无法安装程序包,原因是它修改的资源当前正在使用中。 错误 0x80073D02: 无法安装,因为需要关闭以下应用: Microsoft.Windows.ShellExperienceHost_10.0.22621.2506_neutral_neutral_ cw5n1h2txyewy Microsoft.Windows.StartMenuExperienceHost_10.0.22621.2506_neutral_neutral_cw5n1h2txyewy。 注意: 有关其他信息,请在事件日志中查找 [ActivityId] 224db599-1027-0001-d7d7-4d222710dc01,或使用命令行 Get-AppPackageLo g -ActivityID 224db599-1027-0001-d7d7-4d222710dc01 所在位置 行:2 字符: 5 + Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLo ... + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (C:\Windows\Syst...ppXManifest.xml:String) [Add-AppxPackage], Exception + FullyQualifiedErrorId : DeploymentError,Microsoft.Windows.Appx.PackageManager.Commands.AddAppxPackageCommand Add-AppxPackage : 部署失败,原因是 HRESULT: 0x80073D02, 无法安装程序包,原因是它修改的资源当前正在使用中。 错误 0x80073D02: 无法安装,因为需要关闭以下应用: Microsoft.Windows.ShellExperienceHost_10.0.22621.2506_neutral_neutral_ cw5n1h2txyewy。 注意: 有关其他信息,请在事件日志中查找 [ActivityId] 224db599-1027-0001-8ade-4d222710dc01,或使用命令行 Get-AppPackageLo g -ActivityID 224db599-1027-0001-8ade-4d222710dc01 所在位置 行:2 字符: 5 + Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLo ... + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (C:\Windows\Syst...ppXManifest.xml:String) [Add-AppxPackage], Exception + FullyQualifiedErrorId : DeploymentError,Microsoft.Windows.Appx.PackageManager.Commands.AddAppxPackageCommand Add-AppxPackage : 部署失败,原因是 HRESULT: 0x80073D02, 无法安装程序包,原因是它修改的资源当前正在使用中。 错误 0x80073D02: 无法安装,因为需要关闭以下应用: Microsoft.Windows.StartMenuExperienceHost_10.0.22621.2506_neutral_neut ral_cw5n1h2txyewy。 注意: 有关其他信息,请在事件日志中查找 [ActivityId] 224db599-1027-0001-28df-4d222710dc01,或使用命令行 Get-AppPackageLo g -ActivityID 224db599-1027-0001-28df-4d222710dc01 所在位置 行:2 字符: 5 + Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLo ... + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (C:\Windows\Syst...ppXManifest.xml:String) [Add-AppxPackage], Exception + FullyQualifiedErrorId : DeploymentError,Microsoft.Windows.Appx.PackageManager.Commands.AddAppxPackageCommand Add-AppxPackage : 部署失败,原因是 HRESULT: 0x80073D02, 无法安装程序包,原因是它修改的资源当前正在使用中。 错误 0x80073D02: 无法安装,因为需要关闭以下应用: MicrosoftWindows.Client.CBS_1000.22681.1000.0_x64__cw5n1h2txyewy。 注意: 有关其他信息,请在事件日志中查找 [ActivityId] 224db599-1027-0002-0433-4e222710dc01,或使用命令行 Get-AppPackageLo g -ActivityID 224db599-1027-0002-0433-4e222710dc01 所在位置 行:2 字符: 5 + Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLo ... + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (C:\Windows\Syst...ppXManifest.xml:String) [Add-AppxPackage], Exception + FullyQualifiedErrorId : DeploymentError,Microsoft.Windows.Appx.PackageManager.Commands.AddAppxPackageCommand Add-AppxPackage : 部署失败,原因是 HRESULT: 0x80073D02, 无法安装程序包,原因是它修改的资源当前正在使用中。 错误 0x80073D02: 无法安装,因为需要关闭以下应用: Microsoft.MicrosoftOfficeHub_18.2204.1141.0_x64__8wekyb3d8bbwe。 注意: 有关其他信息,请在事件日志中查找 [ActivityId] 224db599-1027-0001-79fa-4d222710dc01,或使用命令行 Get-AppPackageLo g -ActivityID 224db599-1027-0001-79fa-4d222710dc01
所在位置 行:2 字符: 5
+ Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLo ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (C:\Program File...ppXManifest.xml:String) [Add-AppxPackage], Exception
+ FullyQualifiedErrorId : DeploymentError,Microsoft.Windows.Appx.PackageManager.Commands.AddAppxPackageCommand
Add-AppxPackage : 部署失败,原因是 HRESULT: 0x80073D06, 无法安装此程序包,因为已安装该程序包的更高版本。
Windows 无法安装程序包 Microsoft.VCLibs.140.00_14.0.30704.0_x64__8wekyb3d8bbwe,因为它的版本为 14.0.30704.0。已安装此程
序包的更高版本 14.0.33519.0。
注意: 有关其他信息,请在事件日志中查找 [ActivityId] 224db599-1027-0001-aefb-4d222710dc01,或使用命令行 Get-AppPackageLo
g -ActivityID 224db599-1027-0001-aefb-4d222710dc01
所在位置 行:2 字符: 5
+ Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLo ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (C:\Program File...ppXManifest.xml:String) [Add-AppxPackage], Exception
+ FullyQualifiedErrorId : DeploymentError,Microsoft.Windows.Appx.PackageManager.Commands.AddAppxPackageCommand
Add-AppxPackage : 部署失败,原因是 HRESULT: 0x80073D02, 无法安装程序包,原因是它修改的资源当前正在使用中。
错误 0x80073D02: 无法安装,因为需要关闭以下应用: 9426MICRO-STARINTERNATION.MSICenter_2.0.52.0_x64__kzh8wxbdkxb8p。
注意: 有关其他信息,请在事件日志中查找 [ActivityId] 224db599-1027-0002-7266-4e222710dc01,或使用命令行 Get-AppPackageLo
g -ActivityID 224db599-1027-0002-7266-4e222710dc01
所在位置 行:2 字符: 5
+ Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLo ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (C:\Program File...ppXManifest.xml:String) [Add-AppxPackage], Exception
+ FullyQualifiedErrorId : DeploymentError,Microsoft.Windows.Appx.PackageManager.Commands.AddAppxPackageCommand
PS C:\Users\Administrator> # 重建系统图标缓存
PS C:\Users\Administrator> ie4uinit.exe -show
PS C:\Users\Administrator> taskkill /f /im explorer.exe
成功: 已终止进程 "explorer.exe",其 PID 为 6916。
PS C:\Users\Administrator> start explorer.exe
PS C:\Users\Administrator>
PS C:\Users\Administrator> # 1. 检查系统文件
PS C:\Users\Administrator> sfc /scannow
开始系统扫描。此过程将需要一些时间。
开始系统扫描的验证阶段。
验证 100% 已完成。
Windows 资源保护未找到任何完整性冲突。
PS C:\Users\Administrator>
PS C:\Users\Administrator> # 2. 修复系统映像
PS C:\Users\Administrator> DISM /Online /Cleanup-Image /RestoreHealth
部署映像服务和管理工具
版本: 10.0.22621.2792
映像版本: 10.0.22631.2861
[==========================100.0%==========================]
错误: 0x800f081f
找不到源文件。
请使用“源”选项指定还原该功能所需的文件位置。有关指定源位置的详细信息,请参阅 https://go.microsoft.com/fwlink/?LinkId=243077。
可以在 C:\Windows\Logs\DISM\dism.log 上找到 DISM 日志文件
PS C:\Users\Administrator>
PS C:\Users\Administrator> # 3. 检查.NET Framework状态 PS C:\Users\Administrator> dotnet --info .NET SDK: Version: 9.0.109 Commit: 08d4728191 Workload version: 9.0.100-manifests.70d87660
MSBuild version: 17.12.41+9dcc26a5f
Runtime Environment:
OS Name: Windows
OS Version: 10.0.22631
OS Platform: Windows
RID: win-x64
Base Path: C:\Program Files\dotnet\sdk\9.0.109\
.NET workloads installed:
There are no installed workloads to display.
Configured to use loose manifests when installing new manifests.
Host:
Version: 9.0.8
Architecture: x64
Commit: aae90fa090
.NET SDKs installed:
9.0.109 [C:\Program Files\dotnet\sdk]
.NET runtimes installed:
Microsoft.AspNetCore.App 9.0.8 [C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App]
Microsoft.NETCore.App 9.0.8 [C:\Program Files\dotnet\shared\Microsoft.NETCore.App]
Microsoft.WindowsDesktop.App 9.0.8 [C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App]
Other architectures found:
None
Environment variables:
Not set
global.json file:
Not found
Learn more:
https://aka.ms/dotnet/info
Download .NET:
https://aka.ms/dotnet/download
PS C:\Users\Administrator> Repair-WindowsImage -Online -RestoreHealth
Repair-WindowsImage : 还原操作失败。找不到修复来源,或者无法修复组件存储。
所在位置 行:1 字符: 1
+ Repair-WindowsImage -Online -RestoreHealth
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [Repair-WindowsImage], COMException
+ FullyQualifiedErrorId : Microsoft.Dism.Commands.RepairWindowsImageCommand
PS C:\Users\Administrator> # 监控RuntimeBroker资源使用
PS C:\Users\Administrator> Get-Process RuntimeBroker | Format-List *
Name : RuntimeBroker
Id : 4288
PriorityClass : Normal
FileVersion : 10.0.22621.2506 (WinBuild.160101.0800)
HandleCount : 237
WorkingSet : 14184448
PagedMemorySize : 2723840
PrivateMemorySize : 2723840
VirtualMemorySize : 151080960
TotalProcessorTime : 00:00:00
SI : 1
Handles : 237
VM : 2203469303808
WS : 14184448
PM : 2723840
NPM : 12912
Path : C:\Windows\System32\RuntimeBroker.exe
Company : Microsoft Corporation
CPU : 0
ProductVersion : 10.0.22621.2506
Description : Runtime Broker
Product : Microsoft® Windows® Operating System
__NounName : Process
BasePriority : 8
ExitCode :
HasExited : False
ExitTime :
Handle : 3908
SafeHandle : Microsoft.Win32.SafeHandles.SafeProcessHandle
MachineName : .
MainWindowHandle : 0
MainWindowTitle :
MainModule : System.Diagnostics.ProcessModule (RuntimeBroker.exe)
MaxWorkingSet : 1413120
MinWorkingSet : 204800
Modules : {System.Diagnostics.ProcessModule (RuntimeBroker.exe), System.Diagnostics.ProcessModule (n
tdll.dll), System.Diagnostics.ProcessModule (KERNEL32.DLL), System.Diagnostics.ProcessModu
le (KERNELBASE.dll)...}
NonpagedSystemMemorySize : 12912
NonpagedSystemMemorySize64 : 12912
PagedMemorySize64 : 2723840
PagedSystemMemorySize : 225160
PagedSystemMemorySize64 : 225160
PeakPagedMemorySize : 3244032
PeakPagedMemorySize64 : 3244032
PeakWorkingSet : 15675392
PeakWorkingSet64 : 15675392
PeakVirtualMemorySize : 158023680
PeakVirtualMemorySize64 : 2203476246528
PriorityBoostEnabled : True
PrivateMemorySize64 : 2723840
PrivilegedProcessorTime : 00:00:00
ProcessName : RuntimeBroker
ProcessorAffinity : 1048575
Responding : True
SessionId : 1
StartInfo : System.Diagnostics.ProcessStartInfo
StartTime : 2025/8/18 18:14:45
SynchronizingObject :
Threads : {13188, 8792, 2668, 4540...}
UserProcessorTime : 00:00:00
VirtualMemorySize64 : 2203469303808
EnableRaisingEvents : False
StandardInput :
StandardOutput :
StandardError :
WorkingSet64 : 14184448
Site :
Container :
Name : RuntimeBroker
Id : 6212
PriorityClass : Normal
FileVersion : 10.0.22621.2506 (WinBuild.160101.0800)
HandleCount : 252
WorkingSet : 18063360
PagedMemorySize : 3428352
PrivateMemorySize : 3428352
VirtualMemorySize : 140181504
TotalProcessorTime : 00:00:00.0156250
SI : 1
Handles : 252
VM : 2203458404352
WS : 18063360
PM : 3428352
NPM : 13728
Path : C:\Windows\System32\RuntimeBroker.exe
Company : Microsoft Corporation
CPU : 0.015625
ProductVersion : 10.0.22621.2506
Description : Runtime Broker
Product : Microsoft® Windows® Operating System
__NounName : Process
BasePriority : 8
ExitCode :
HasExited : False
ExitTime :
Handle : 3628
SafeHandle : Microsoft.Win32.SafeHandles.SafeProcessHandle
MachineName : .
MainWindowHandle : 0
MainWindowTitle :
MainModule : System.Diagnostics.ProcessModule (RuntimeBroker.exe)
MaxWorkingSet : 1413120
MinWorkingSet : 204800
Modules : {System.Diagnostics.ProcessModule (RuntimeBroker.exe), System.Diagnostics.ProcessModule (n
tdll.dll), System.Diagnostics.ProcessModule (KERNEL32.DLL), System.Diagnostics.ProcessModu
le (KERNELBASE.dll)...}
NonpagedSystemMemorySize : 13728
NonpagedSystemMemorySize64 : 13728
PagedMemorySize64 : 3428352
PagedSystemMemorySize : 202368
PagedSystemMemorySize64 : 202368
PeakPagedMemorySize : 5062656
PeakPagedMemorySize64 : 5062656
PeakWorkingSet : 24006656
PeakWorkingSet64 : 24006656
PeakVirtualMemorySize : 174608384
PeakVirtualMemorySize64 : 2203492831232
PriorityBoostEnabled : True
PrivateMemorySize64 : 3428352
PrivilegedProcessorTime : 00:00:00.0156250
ProcessName : RuntimeBroker
ProcessorAffinity : 1048575
Responding : True
SessionId : 1
StartInfo : System.Diagnostics.ProcessStartInfo
StartTime : 2025/8/18 18:14:41
SynchronizingObject :
Threads : {8376, 9172, 5520, 5272...}
UserProcessorTime : 00:00:00
VirtualMemorySize64 : 2203458404352
EnableRaisingEvents : False
StandardInput :
StandardOutput :
StandardError :
WorkingSet64 : 18063360
Site :
Container :
Name : RuntimeBroker
Id : 8304
PriorityClass : Normal
FileVersion : 10.0.22621.2506 (WinBuild.160101.0800)
HandleCount : 297
WorkingSet : 24907776
PagedMemorySize : 4210688
PrivateMemorySize : 4210688
VirtualMemorySize : 181202944
TotalProcessorTime : 00:00:00.1406250
SI : 1
Handles : 297
VM : 2203499425792
WS : 24907776
PM : 4210688
NPM : 16992
Path : C:\Windows\System32\RuntimeBroker.exe
Company : Microsoft Corporation
CPU : 0.140625
ProductVersion : 10.0.22621.2506
Description : Runtime Broker
Product : Microsoft® Windows® Operating System
__NounName : Process
BasePriority : 8
ExitCode :
HasExited : False
ExitTime :
Handle : 3692
SafeHandle : Microsoft.Win32.SafeHandles.SafeProcessHandle
MachineName : .
MainWindowHandle : 0
MainWindowTitle :
MainModule : System.Diagnostics.ProcessModule (RuntimeBroker.exe)
MaxWorkingSet : 1413120
MinWorkingSet : 204800
Modules : {System.Diagnostics.ProcessModule (RuntimeBroker.exe), System.Diagnostics.ProcessModule (n
tdll.dll), System.Diagnostics.ProcessModule (KERNEL32.DLL), System.Diagnostics.ProcessModu
le (KERNELBASE.dll)...}
NonpagedSystemMemorySize : 16992
NonpagedSystemMemorySize64 : 16992
PagedMemorySize64 : 4210688
PagedSystemMemorySize : 252392
PagedSystemMemorySize64 : 252392
PeakPagedMemorySize : 5419008
PeakPagedMemorySize64 : 5419008
PeakWorkingSet : 26435584
PeakWorkingSet64 : 26435584
PeakVirtualMemorySize : 192684032
PeakVirtualMemorySize64 : 2203510906880
PriorityBoostEnabled : True
PrivateMemorySize64 : 4210688
PrivilegedProcessorTime : 00:00:00.0468750
ProcessName : RuntimeBroker
ProcessorAffinity : 1048575
Responding : True
SessionId : 1
StartInfo : System.Diagnostics.ProcessStartInfo
StartTime : 2025/8/18 18:02:10
SynchronizingObject :
Threads : {8308, 8404, 11804, 9580}
UserProcessorTime : 00:00:00.0937500
VirtualMemorySize64 : 2203499425792
EnableRaisingEvents : False
StandardInput :
StandardOutput :
StandardError :
WorkingSet64 : 24907776
Site :
Container :
Name : RuntimeBroker
Id : 8352
PriorityClass : Normal
FileVersion : 10.0.22621.2506 (WinBuild.160101.0800)
HandleCount : 493
WorkingSet : 34549760
PagedMemorySize : 8093696
PrivateMemorySize : 8093696
VirtualMemorySize : 202727424
TotalProcessorTime : 00:00:00.0312500
SI : 1
Handles : 493
VM : 2203520950272
WS : 34549760
PM : 8093696
NPM : 23048
Path : C:\Windows\System32\RuntimeBroker.exe
Company : Microsoft Corporation
CPU : 0.03125
ProductVersion : 10.0.22621.2506
Description : Runtime Broker
Product : Microsoft® Windows® Operating System
__NounName : Process
BasePriority : 8
ExitCode :
HasExited : False
ExitTime :
Handle : 2956
SafeHandle : Microsoft.Win32.SafeHandles.SafeProcessHandle
MachineName : .
MainWindowHandle : 0
MainWindowTitle :
MainModule : System.Diagnostics.ProcessModule (RuntimeBroker.exe)
MaxWorkingSet : 1413120
MinWorkingSet : 204800
Modules : {System.Diagnostics.ProcessModule (RuntimeBroker.exe), System.Diagnostics.ProcessModule (n
tdll.dll), System.Diagnostics.ProcessModule (KERNEL32.DLL), System.Diagnostics.ProcessModu
le (KERNELBASE.dll)...}
NonpagedSystemMemorySize : 23048
NonpagedSystemMemorySize64 : 23048
PagedMemorySize64 : 8093696
PagedSystemMemorySize : 289424
PagedSystemMemorySize64 : 289424
PeakPagedMemorySize : 10063872
PeakPagedMemorySize64 : 10063872
PeakWorkingSet : 38244352
PeakWorkingSet64 : 38244352
PeakVirtualMemorySize : 215470080
PeakVirtualMemorySize64 : 2203533692928
PriorityBoostEnabled : True
PrivateMemorySize64 : 8093696
PrivilegedProcessorTime : 00:00:00.0312500
ProcessName : RuntimeBroker
ProcessorAffinity : 1048575
Responding : True
SessionId : 1
StartInfo : System.Diagnostics.ProcessStartInfo
StartTime : 2025/8/18 18:02:10
SynchronizingObject :
Threads : {8356, 8380, 8408, 9204...}
UserProcessorTime : 00:00:00
VirtualMemorySize64 : 2203520950272
EnableRaisingEvents : False
StandardInput :
StandardOutput :
StandardError :
WorkingSet64 : 34549760
Site :
Container :
Name : RuntimeBroker
Id : 13076
PriorityClass : Normal
FileVersion : 10.0.22621.2506 (WinBuild.160101.0800)
HandleCount : 152
WorkingSet : 11689984
PagedMemorySize : 2252800
PrivateMemorySize : 2252800
VirtualMemorySize : 105242624
TotalProcessorTime : 00:00:00
SI : 1
Handles : 152
VM : 2203423465472
WS : 11689984
PM : 2252800
NPM : 10328
Path : C:\Windows\System32\RuntimeBroker.exe
Company : Microsoft Corporation
CPU : 0
ProductVersion : 10.0.22621.2506
Description : Runtime Broker
Product : Microsoft® Windows® Operating System
__NounName : Process
BasePriority : 8
ExitCode :
HasExited : False
ExitTime :
Handle : 3336
SafeHandle : Microsoft.Win32.SafeHandles.SafeProcessHandle
MachineName : .
MainWindowHandle : 0
MainWindowTitle :
MainModule : System.Diagnostics.ProcessModule (RuntimeBroker.exe)
MaxWorkingSet : 1413120
MinWorkingSet : 204800
Modules : {System.Diagnostics.ProcessModule (RuntimeBroker.exe), System.Diagnostics.ProcessModule (n
tdll.dll), System.Diagnostics.ProcessModule (KERNEL32.DLL), System.Diagnostics.ProcessModu
le (KERNELBASE.dll)...}
NonpagedSystemMemorySize : 10328
NonpagedSystemMemorySize64 : 10328
PagedMemorySize64 : 2252800
PagedSystemMemorySize : 132464
PagedSystemMemorySize64 : 132464
PeakPagedMemorySize : 2789376
PeakPagedMemorySize64 : 2789376
PeakWorkingSet : 12361728
PeakWorkingSet64 : 12361728
PeakVirtualMemorySize : 111034368
PeakVirtualMemorySize64 : 2203429257216
PriorityBoostEnabled : True
PrivateMemorySize64 : 2252800
PrivilegedProcessorTime : 00:00:00
ProcessName : RuntimeBroker
ProcessorAffinity : 1048575
Responding : True
SessionId : 1
StartInfo : System.Diagnostics.ProcessStartInfo
StartTime : 2025/8/18 18:02:20
SynchronizingObject :
Threads : {13080, 4860}
UserProcessorTime : 00:00:00
VirtualMemorySize64 : 2203423465472
EnableRaisingEvents : False
StandardInput :
StandardOutput :
StandardError :
WorkingSet64 : 11689984
Site :
Container :
Name : RuntimeBroker
Id : 13460
PriorityClass : Normal
FileVersion : 10.0.22621.2506 (WinBuild.160101.0800)
HandleCount : 266
WorkingSet : 24059904
PagedMemorySize : 5722112
PrivateMemorySize : 5722112
VirtualMemorySize : 174923776
TotalProcessorTime : 00:00:00.0312500
SI : 1
Handles : 266
VM : 2203493146624
WS : 24059904
PM : 5722112
NPM : 15224
Path : C:\Windows\System32\RuntimeBroker.exe
Company : Microsoft Corporation
CPU : 0.03125
ProductVersion : 10.0.22621.2506
Description : Runtime Broker
Product : Microsoft® Windows® Operating System
__NounName : Process
BasePriority : 8
ExitCode :
HasExited : False
ExitTime :
Handle : 4104
SafeHandle : Microsoft.Win32.SafeHandles.SafeProcessHandle
MachineName : .
MainWindowHandle : 0
MainWindowTitle :
MainModule : System.Diagnostics.ProcessModule (RuntimeBroker.exe)
MaxWorkingSet : 1413120
MinWorkingSet : 204800
Modules : {System.Diagnostics.ProcessModule (RuntimeBroker.exe), System.Diagnostics.ProcessModule (n
tdll.dll), System.Diagnostics.ProcessModule (KERNEL32.DLL), System.Diagnostics.ProcessModu
le (KERNELBASE.dll)...}
NonpagedSystemMemorySize : 15224
NonpagedSystemMemorySize64 : 15224
PagedMemorySize64 : 5722112
PagedSystemMemorySize : 233896
PagedSystemMemorySize64 : 233896
PeakPagedMemorySize : 7180288
PeakPagedMemorySize64 : 7180288
PeakWorkingSet : 26804224
PeakWorkingSet64 : 26804224
PeakVirtualMemorySize : 196382720
PeakVirtualMemorySize64 : 2203514605568
PriorityBoostEnabled : True
PrivateMemorySize64 : 5722112
PrivilegedProcessorTime : 00:00:00
ProcessName : RuntimeBroker
ProcessorAffinity : 1048575
Responding : True
SessionId : 1
StartInfo : System.Diagnostics.ProcessStartInfo
StartTime : 2025/8/18 18:03:16
SynchronizingObject :
Threads : {13476, 8600, 8212, 9608...}
UserProcessorTime : 00:00:00.0312500
VirtualMemorySize64 : 2203493146624
EnableRaisingEvents : False
StandardInput :
StandardOutput :
StandardError :
WorkingSet64 : 24059904
Site :
Container :
PS C:\Users\Administrator>
PS C:\Users\Administrator> # 查看关联事件(过滤事件ID 1074)
PS C:\Users\Administrator> Get-WinEvent -FilterHashtable @{LogName='System';ID=1074} |
>> Where-Object {$_.Message -match "RuntimeBroker"} |
>> Select-Object TimeCreated, Message | Format-Table -Wrap
>>