NEVERHODE CLOUD � @CLOUDNEVER �

@CLOUDNEVER_ROBOT

NEVERHODE CLOUD � @CLOUDNEVER � @CLOUDNEVER_ROBOT � NEVERHODE CLOUD �

@CLOUDNEVER � @CLOUDNEVER_ROBOT

__ __ ______ __ __ ______ ______ __ __

______ _____ ______
/\ "-.\ \ /\ ___\ /\ \ / / /\ ___\ /\ == \ /\ \_\ \ /\
__ \ /\ __-. /\ ___\
\ \ \-. \ \ \ __\ \ \ \'/ \ \ __\ \ \ __< \ \
__ \ \ \ \/\ \ \ \ \/\ \ \ \ __\
\ \_\\"\_\ \ \_____\ \ \__| \ \_____\ \ \_\ \_\ \ \_\ \_\ \ \
_____\ \ \____- \ \_____\
\/_/ \/_/ \/_____/ \/_/ \/_____/ \/_/ /_/ \/_/\/_/
\/_____/ \/____/ \/_____/

ID: 9536, Name: [Link], CommandLine:

===============
ID: 14948, Name: [Link], CommandLine: C:\WINDOWS\System32\[Link] -
SpecialSession
===============
ID: 3832, Name: [Link], CommandLine: "[Link]"
===============
ID: 20020, Name: [Link], CommandLine: "[Link]"
===============
ID: 24436, Name: [Link], CommandLine: "C:\Program Files\Synaptics\SynTP\
[Link]"
===============
ID: 11080, Name: [Link], CommandLine: "C:\Program Files (x86)\Lenovo\
QuickControl\[Link]"
===============
ID: 8340, Name: [Link], CommandLine: C:\PROGRA~1\LENOVO\HOTKEY\[Link]
===============
ID: 2300, Name: ISD_TabletUser.exe, CommandLine: "C:\Program Files\Tablet\ISD\
ISD_TabletUser.exe"
===============
ID: 23712, Name: [Link], CommandLine: C:\PROGRA~1\LENOVO\VIRTSCRL\
[Link]
===============
ID: 28704, Name: [Link], CommandLine: C:\PROGRA~1\Lenovo\HOTKEY\[Link]
/UEFI\\.\pipe\{C6A9690C-33AE-4a55-8B65-9498CC0A7B34}.OnScreenDisplay
===============
ID: 28772, Name: [Link], CommandLine: "C:\Program Files\Tablet\ISD\
[Link]" "C:\Program Files\Tablet\ISD\ISD_Tablet.exe" au
===============
ID: 27976, Name: [Link], CommandLine: C:\PROGRA~1\Lenovo\HOTKEY\[Link]
/UEFI\\.\pipe\{C6A9690C-33AE-4a55-8B65-9498CC0A7B34}.ShortcutKey
===============
ID: 5712, Name: [Link], CommandLine: \??\C:\WINDOWS\system32\[Link] 0x4
===============
ID: 2468, Name: [Link], CommandLine: [Link]
===============
ID: 16484, Name: [Link], CommandLine: C:\WINDOWS\system32\[Link] -k
BthAppGroup -p -s BluetoothUserService
===============
ID: 17820, Name: [Link], CommandLine: C:\WINDOWS\system32\[Link] -k
UnistackSvcGroup -s CDPUserSvc
===============
ID: 8292, Name: ISD_Tablet.exe, CommandLine: "C:\Program Files\Tablet\ISD\
ISD_Tablet.exe" au
===============
ID: 27524, Name: [Link], CommandLine: "C:\Program Files\Synaptics\SynTP\
[Link]"
===============
ID: 4628, Name: [Link], CommandLine: "C:\Program Files\Synaptics\
SynTP\[Link]"
===============
ID: 19440, Name: [Link], CommandLine: C:\WINDOWS\system32\[Link] -k
UnistackSvcGroup -s WpnUserService
===============
ID: 3148, Name: [Link], CommandLine: "C:\Program Files (x86)\Common Files\
InstallShield\Update\[Link]"
===============
ID: 16612, Name: [Link], CommandLine: "C:\WINDOWS\SysWOW64\Lenovo\PowerMgr\
[Link]"
===============
ID: 19916, Name: [Link], CommandLine: C:\WINDOWS\[Link]
===============
ID: 26612, Name: [Link], CommandLine: [Link]
===============
ID: 25028, Name: [Link], CommandLine: [Link] {222A245B-E637-4AE9-
A93F-A59CA119A75E}
===============
ID: 5764, Name: [Link], CommandLine: "C:\PROGRAM FILES\SYNAPTICS\SYNTP\
[Link]"
===============
ID: 15208, Name: [Link], CommandLine: [Link]
===============
ID: 10528, Name: [Link], CommandLine: C:\WINDOWS\system32\[Link] -k
ClipboardSvcGroup -p -s cbdhsvc
===============
ID: 832, Name: [Link], CommandLine: "C:\WINDOWS\SystemApps\
[Link].StartMenuExperienceHost_cw5n1h2txyewy\
[Link]" -
ServerName:[Link]
===============
ID: 1976, Name: [Link], CommandLine: C:\Windows\System32\
[Link] -Embedding
===============
ID: 18720, Name: [Link], CommandLine: "C:\WINDOWS\SystemApps\
[Link].CBS_cw5n1h2txyewy\[Link]" -
ServerName:[Link]
===============
ID: 5132, Name: [Link], CommandLine: C:\Windows\System32\
[Link] -Embedding
===============
ID: 27700, Name: [Link], CommandLine: "C:\WINDOWS\SystemApps\
ShellExperienceHost_cw5n1h2txyewy\[Link]" -
ServerName:[Link]
===============
ID: 14092, Name: [Link], CommandLine: "[Link]"
===============
ID: 26092, Name: [Link], CommandLine:
/QuitInfo:0000000000000418;000000000000041C;
===============
ID: 9444, Name: [Link], CommandLine: C:\Windows\System32\
[Link] -Embedding
===============
ID: 12412, Name: [Link], CommandLine: "C:\Windows\System32\
[Link]"
===============
ID: 30148, Name: [Link], CommandLine: "C:\Windows\[Link]"
===============
ID: 17484, Name: [Link], CommandLine: "C:\Program Files\CONEXANT\ForteConfig\
[Link]"
===============
ID: 24624, Name: [Link], CommandLine: "C:\Program Files\CONEXANT\
cAudioFilterAgent\[Link]"
===============
ID: 29840, Name: [Link], CommandLine: "C:\WINDOWS\SystemApps\
[Link].Search_cw5n1h2txyewy\[Link]" -
ServerName:[Link]
===============
ID: 18708, Name: [Link], CommandLine: "C:\Windows\System32\[Link]"
===============
ID: 4560, Name: [Link], CommandLine: "C:\Program Files\Lenovo\Communications
Utility\[Link]"
===============
ID: 748, Name: [Link], CommandLine: "C:\Program Files\PDF24\[Link]"
===============
ID: 31100, Name: [Link], CommandLine: "C:\ProgramData\FLEXnet\Connect\11\
[Link]" -scheduler
===============
ID: 12640, Name: [Link], CommandLine: "C:\Users\portatil\AppData\Local\
Plarium\PlariumPlay\[Link]" --args -tray-start
===============
ID: 8744, Name: [Link], CommandLine: "C:\Users\portatil\AppData\Local\
Microsoft\OneDrive\[Link]" /background
===============
ID: 16012, Name: [Link], CommandLine: "C:\Program Files\CCleaner\
[Link]" /MONITOR /uac
===============
ID: 22448, Name: [Link], CommandLine: "C:\Program Files (x86)\Intel\Intel(R)
USB 3.0 eXtensible Host Controller Driver\Application\[Link]"
===============
ID: 29540, Name: [Link], CommandLine: "C:\Program Files (x86)\Nuance\
PaperPort\[Link]"
===============
ID: 16320, Name: [Link], CommandLine: "C:\Program Files (x86)\Nuance\PDF
Viewer Plus\[Link]"
===============
ID: 11904, Name: [Link], CommandLine: C:\WINDOWS\system32\[Link] -k
UnistackSvcGroup
===============
ID: 2440, Name: [Link], CommandLine: -BootProc
===============
ID: 21864, Name: [Link], CommandLine: "C:\Program Files (x86)\HP\HP Software
Update\[Link]"
===============
ID: 8248, Name: [Link], CommandLine: "C:\Users\portatil\AppData\Local\
Plarium\PlariumPlay\[Link]" --type=gpu-process --no-sandbox --lang=en-US
--log-file="C:\Users\portatil\AppData\Local\Plarium\PlariumPlay\[Link]" --log-
severity=disable --gpu-vendor-id=0x8086 --gpu-device-id=0x1616 --gpu-driver-
vendor="Intel Corporation" --gpu-driver-version=20.19.15.4531 --gpu-driver-date=9-
29-2016 --lang=en-US --log-file="C:\Users\portatil\AppData\Local\Plarium\
PlariumPlay\[Link]" --log-severity=disable --service-request-channel-
token=FE02C3B3204BB9D2D7A9AED9E619D376 --mojo-platform-channel-handle=1820
/prefetch:2
===============
ID: 25632, Name: [Link], CommandLine: "C:\Program Files\Common
Files\Microsoft Shared\Ink\[Link]"
===============
ID: 13432, Name: [Link], CommandLine: -BootProc
===============
ID: 12528, Name: [Link], CommandLine: "C:\Users\portatil\AppData\Local\
Plarium\PlariumPlay\[Link]" --type=renderer --no-sandbox --service-pipe-
token=1B3252E478794D0D6F4C2AC5554EE510 --lang=en-US --lang=en-US --log-file="C:\
Users\portatil\AppData\Local\Plarium\PlariumPlay\[Link]" --log-severity=disable
--ppapi-flash-path="C:\Users\portatil\AppData\Local\Plarium\PlariumPlay\
third_party\windows\pepflashplayer64_23_0_0_207.dll" --ppapi-flash-
version=[Link] --enable-pinch --device-scale-factor=1.25 --num-raster-threads=2
--enable-main-frame-before-activation --content-image-texture-
target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,
3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553
;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;
1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,
3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3
553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2
,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3
,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,35
53;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,35
53;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,1
5,3553;4,16,3553;4,17,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,
6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553
;5,15,3553;5,16,3553;5,17,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,355
3;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,
3553;6,15,3553;6,16,3553;6,17,3553 --enable-gpu-async-worker-context --service-
request-channel-token=1B3252E478794D0D6F4C2AC5554EE510 --renderer-client-id=3 --
mojo-platform-channel-handle=2792 /prefetch:1
===============
ID: 20288, Name: [Link], CommandLine: "C:\Program Files\WindowsApps\
Microsoft.ZuneVideo_10.22091.10051.0_x64__8wekyb3d8bbwe\[Link]" -
ServerName:[Link]
===============
ID: 13164, Name: [Link], CommandLine: "C:\Users\portatil\AppData\Local\
Microsoft\OneDrive\23.246.1127.0002\[Link]" -Embedding
===============
ID: 23056, Name: [Link], CommandLine: C:\Windows\System32\
[Link] -Embedding
===============
ID: 22200, Name: [Link], CommandLine: C:\WINDOWS\system32\[Link]
/Processid:{973D20D7-562D-44B9-B70B-5A0F49CCDF3F}
===============
ID: 28876, Name: [Link], CommandLine: C:\WINDOWS\system32\
[Link] -Embedding
===============
ID: 15136, Name: [Link], CommandLine: C:\Windows\System32\
[Link] -Embedding
===============
ID: 1256, Name: [Link], CommandLine: C:\Windows\System32\oobe\
[Link] -Embedding
===============
ID: 22772, Name: [Link], CommandLine: "C:\Program Files\Adobe\Acrobat
DC\Acrobat\[Link]"
===============
ID: 2844, Name: [Link], CommandLine: "C:\Program Files\Adobe\Acrobat
DC\Acrobat\[Link]" --type=collab-renderer --proc=22772
===============
ID: 1508, Name: [Link], CommandLine: C:\Windows\System32\[Link] -
Embedding
===============
ID: 24304, Name: [Link], CommandLine: "C:\Users\portatil\AppData\Roaming\
BitTorrent\[Link]" "C:\Users\portatil\Desktop\file" /SHELLASSOC
===============
ID: 21580, Name: [Link], CommandLine: "C:\Users\portatil\AppData\Roaming\
BitTorrent\updates\7.11.0_46923\[Link]"
BitTorrent_24304_03C62E88_1056553959 BT4823DF041B09 BitTorrent ce unp
===============
ID: 22504, Name: [Link], CommandLine: "C:\Program Files (x86)\
Microsoft\EdgeWebView\Application\120.0.2210.91\[Link]" --embedded-
browser-webview=1 --webview-exe-name=[Link] --user-data-dir="C:\Users\
portatil\AppData\LocalLow\BitTorrent.WebView2\EBWebView" --noerrdialogs --embedded-
browser-webview-dpi-awareness=0 --disable-
features=msEnhancedTrackingPreventionEnabled --enable-features=MojoIpcz --mojo-
named-platform-channel-pipe=21580.3344.3662297421528100689
===============
ID: 11136, Name: [Link], CommandLine: "C:\Program Files (x86)\
Microsoft\EdgeWebView\Application\120.0.2210.91\[Link]" --
type=crashpad-handler --user-data-dir=C:\Users\portatil\AppData\LocalLow\
BitTorrent.WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-
handler --database=C:\Users\portatil\AppData\LocalLow\BitTorrent.WebView2\
EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --
annotation=chromium-version=120.0.6099.130 "--annotation=exe=C:\Program Files
(x86)\Microsoft\EdgeWebView\Application\120.0.2210.91\[Link]" --
annotation=plat=Win64 "--annotation=prod=Edge WebView2" --
annotation=ver=120.0.2210.91 --initial-client-
data=0x160,0x164,0x168,0x140,0x170,0x7ffb6fc62b38,0x7ffb6fc62b44,0x7ffb6fc62b50
===============
ID: 20076, Name: [Link], CommandLine: "C:\Program Files (x86)\
Microsoft\EdgeWebView\Application\120.0.2210.91\[Link]" --type=gpu-
process --noerrdialogs --user-data-dir="C:\Users\portatil\AppData\LocalLow\
BitTorrent.WebView2\EBWebView" --webview-exe-name=[Link] --embedded-
browser-webview=1 --embedded-browser-webview-dpi-awareness=0 --gpu-
preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA==
--mojo-platform-channel-handle=2112 --field-trial-
handle=2116,i,14028916975516341271,7701426781828227778,262144 --enable-
features=MojoIpcz --disable-features=msEnhancedTrackingPreventionEnabled --
variations-seed-version /prefetch:2
===============
ID: 5564, Name: [Link], CommandLine: "C:\Program Files (x86)\Microsoft\
EdgeWebView\Application\120.0.2210.91\[Link]" --type=utility --utility-
sub-type=[Link] --lang=es --service-sandbox-type=none --
noerrdialogs --user-data-dir="C:\Users\portatil\AppData\LocalLow\
BitTorrent.WebView2\EBWebView" --webview-exe-name=[Link] --embedded-
browser-webview=1 --embedded-browser-webview-dpi-awareness=0 --mojo-platform-
channel-handle=2288 --field-trial-
handle=2116,i,14028916975516341271,7701426781828227778,262144 --enable-
features=MojoIpcz --disable-features=msEnhancedTrackingPreventionEnabled --
variations-seed-version /prefetch:3
===============
ID: 3496, Name: [Link], CommandLine: "C:\Program Files (x86)\Microsoft\
EdgeWebView\Application\120.0.2210.91\[Link]" --type=utility --utility-
sub-type=[Link] --lang=es --service-sandbox-type=service --
noerrdialogs --user-data-dir="C:\Users\portatil\AppData\LocalLow\
BitTorrent.WebView2\EBWebView" --webview-exe-name=[Link] --embedded-
browser-webview=1 --embedded-browser-webview-dpi-awareness=0 --mojo-platform-
channel-handle=2512 --field-trial-
handle=2116,i,14028916975516341271,7701426781828227778,262144 --enable-
features=MojoIpcz --disable-features=msEnhancedTrackingPreventionEnabled --
variations-seed-version /prefetch:8
===============
ID: 16392, Name: [Link], CommandLine: "C:\Program Files (x86)\
Microsoft\EdgeWebView\Application\120.0.2210.91\[Link]" --type=renderer
--noerrdialogs --user-data-dir="C:\Users\portatil\AppData\LocalLow\
BitTorrent.WebView2\EBWebView" --webview-exe-name=[Link] --embedded-
browser-webview=1 --embedded-browser-webview-dpi-awareness=0 --first-renderer-
process --lang=es --device-scale-factor=1 --num-raster-threads=2 --enable-main-
frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-
with-cleanup-some --expose-gc --ms-user-locale=" --time-ticks-at-unix-epoch=-
1703921120877455 --launch-time-ticks=548970561690 --mojo-platform-channel-
handle=3716 --field-trial-
handle=2116,i,14028916975516341271,7701426781828227778,262144 --enable-
features=MojoIpcz --disable-features=msEnhancedTrackingPreventionEnabled --
variations-seed-version /prefetch:1
===============
ID: 20880, Name: [Link], CommandLine: "C:\Users\portatil\AppData\Roaming\
BitTorrent\updates\7.11.0_46923\[Link]"
BitTorrent_24304_00B2A5F0_562333934 BT4823DF041B09 BitTorrent ce unp
===============
ID: 11704, Name: [Link], CommandLine: "C:\Program Files (x86)\
Microsoft\EdgeWebView\Application\120.0.2210.91\[Link]" --type=renderer
--noerrdialogs --user-data-dir="C:\Users\portatil\AppData\LocalLow\
BitTorrent.WebView2\EBWebView" --webview-exe-name=[Link] --embedded-
browser-webview=1 --embedded-browser-webview-dpi-awareness=0 --lang=es --device-
scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --
renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc
--ms-user-locale=" --time-ticks-at-unix-epoch=-1703921120877455 --launch-time-
ticks=548978756217 --mojo-platform-channel-handle=4828 --field-trial-
handle=2116,i,14028916975516341271,7701426781828227778,262144 --enable-
features=MojoIpcz --disable-features=msEnhancedTrackingPreventionEnabled --
variations-seed-version /prefetch:1
===============
ID: 15596, Name: [Link], CommandLine: "C:\Users\portatil\AppData\Roaming\
BitTorrent\helper\[Link]" 16710 --hval RTSWCtgRQXfNzReA -- -pid 24304 -version
46923
===============
ID: 11072, Name: [Link], CommandLine: [Link] -u
===============
ID: 30636, Name: [Link], CommandLine: C:\Windows\System32\[Link]
-Embedding
===============
ID: 2956, Name: MlWBJhSDl6z_tMmE45EUqoPF.exe, CommandLine: "C:\Users\portatil\
Documents\GuardFox\MlWBJhSDl6z_tMmE45EUqoPF.exe"
===============
ID: 14588, Name: MlWBJhSDl6z_tMmE45EUqoPF.tmp, CommandLine: "C:\Users\portatil\
AppData\Local\Temp\[Link]\MlWBJhSDl6z_tMmE45EUqoPF.tmp"
/SL5="$D0388,4464273,54272,C:\Users\portatil\Documents\GuardFox\
MlWBJhSDl6z_tMmE45EUqoPF.exe"
===============
ID: 19568, Name: [Link], CommandLine: "C:\Users\portatil\AppData\
Local\PIP Master std lib\[Link]" -s
===============
ID: 1504, Name: [Link], CommandLine: "C:\WINDOWS\system32\OOBE-
[Link]"
===============
ID: 13548, Name: [Link], CommandLine: \??\C:\WINDOWS\system32\[Link] 0x4
===============
ID: 27792, Name: i8a7fnCcVcXFIA_x5h1JhiSG.exe, CommandLine: "C:\Users\portatil\
Documents\GuardFox\i8a7fnCcVcXFIA_x5h1JhiSG.exe"
===============
ID: 19352, Name: [Link], CommandLine: C:\Windows\[Link]\Framework\
v4.0.30319\[Link]
===============
ID: 15568, Name: [Link], CommandLine: "C:\Windows\
ImmersiveControlPanel\[Link]" -
ServerName:[Link]
===============
ID: 3020, Name: [Link], CommandLine: "C:\Users\portatil\AppData\Local\Temp\
d887ceb89d\[Link]"
===============
ID: 22136, Name: [Link], CommandLine: "C:\Users\portatil\
Documents\GuardFox\[Link]" --Admin IsNotAutoStart IsNotTask
===============
ID: 22840, Name: [Link], CommandLine: [Link]
===============
ID: 7668, Name: [Link], CommandLine: "C:\Windows\System32\[Link]" C:\
Users\portatil\AppData\Roaming\006700e5a2ab05\[Link], Main
===============
ID: 12688, Name: [Link], CommandLine: "C:\Users\portatil\
Documents\GuardFox\[Link]"
===============
ID: 30736, Name: [Link], CommandLine: "C:\Users\portatil\AppData\Local\Temp\
d887ceb89d\[Link]"
===============
ID: 14204, Name: [Link], CommandLine: "C:\Users\portatil\
Documents\GuardFox\[Link]" --Admin IsNotAutoStart IsNotTask
===============
ID: 25892, Name: [Link], CommandLine: C:\Windows\[Link]\Framework\
v4.0.30319\[Link]
===============
ID: 14512, Name: [Link], CommandLine: C:\Windows\System32\
[Link] -Embedding
===============
ID: 3692, Name: [Link], CommandLine: "C:\Users\portatil\AppData\Local\Temp\
1000001001\[Link]"
===============
ID: 26904, Name: [Link], CommandLine: \??\C:\WINDOWS\system32\[Link] 0x4
===============
ID: 23756, Name: [Link], CommandLine: "C:\Windows\[Link]\Framework\
v4.0.30319\[Link]"
===============
ID: 8924, Name: [Link], CommandLine: "C:\Users\portatil\AppData\Local\Temp\
1000006001\[Link]"
===============
ID: 12604, Name: [Link], CommandLine: "C:\Windows\System32\
WindowsPowerShell\v1.0\[Link]" Set-MpPreference -DisableArchiveScanning
$true
===============
ID: 17220, Name: [Link], CommandLine: \??\C:\WINDOWS\system32\[Link] 0x4
===============
ID: 12860, Name: [Link], CommandLine: "C:\Windows\System32\
WindowsPowerShell\v1.0\[Link]" Set-MpPreference -DisableBlockAtFirstSeen
$true
===============
ID: 11800, Name: [Link], CommandLine: \??\C:\WINDOWS\system32\[Link] 0x4
===============
ID: 30040, Name: [Link], CommandLine: "C:\Windows\System32\
WindowsPowerShell\v1.0\[Link]" Set-MpPreference -DisablePrivacyMode $true
===============
ID: 30068, Name: [Link], CommandLine: \??\C:\WINDOWS\system32\[Link] 0x4
===============
ID: 6024, Name: [Link], CommandLine: "C:\Windows\System32\
WindowsPowerShell\v1.0\[Link]" Set-MpPreference -DisableScriptScanning
$true
===============
ID: 8832, Name: [Link], CommandLine: \??\C:\WINDOWS\system32\[Link] 0x4
===============
ID: 9228, Name: [Link], CommandLine: "C:\Windows\System32\
WindowsPowerShell\v1.0\[Link]" Set-MpPreference -HighThreatDefaultAction 6
-Force
===============
ID: 29536, Name: [Link], CommandLine: \??\C:\WINDOWS\system32\[Link] 0x4
===============
ID: 25804, Name: [Link], CommandLine: "C:\Windows\System32\
WindowsPowerShell\v1.0\[Link]" Set-MpPreference -LowThreatDefaultAction 6
===============
ID: 29832, Name: [Link], CommandLine: \??\C:\WINDOWS\system32\[Link] 0x4
===============
ID: 30816, Name: [Link], CommandLine: "C:\Windows\System32\
WindowsPowerShell\v1.0\[Link]" Set-MpPreference -MAPSReporting 0
===============
ID: 1268, Name: [Link], CommandLine: \??\C:\WINDOWS\system32\[Link] 0x4
===============
ID: 9020, Name: [Link], CommandLine: "C:\Windows\System32\
WindowsPowerShell\v1.0\[Link]" Set-MpPreference -
ModerateThreatDefaultAction 6
===============
ID: 17660, Name: [Link], CommandLine: \??\C:\WINDOWS\system32\[Link] 0x4
===============
ID: 9188, Name: [Link], CommandLine: "C:\Windows\System32\
WindowsPowerShell\v1.0\[Link]" Set-MpPreference -SevereThreatDefaultAction
6
===============
ID: 31512, Name: [Link], CommandLine: \??\C:\WINDOWS\system32\[Link] 0x4
===============
ID: 18380, Name: [Link], CommandLine: "C:\Windows\System32\
WindowsPowerShell\v1.0\[Link]" Set-MpPreference -
SignatureDisableUpdateOnStartupWithoutEngine $true
===============
ID: 30032, Name: [Link], CommandLine: \??\C:\WINDOWS\system32\[Link] 0x4
===============
ID: 31164, Name: [Link], CommandLine: "C:\Windows\System32\
WindowsPowerShell\v1.0\[Link]" Set-MpPreference -SubmitSamplesConsent 2
===============
ID: 21388, Name: [Link], CommandLine: \??\C:\WINDOWS\system32\[Link] 0x4
===============
ID: 16444, Name: [Link], CommandLine: "C:\Users\portatil\AppData\Local\Temp\
1000007001\[Link]"