https://wisertech.pages.dev/posts/why-is-antimalware-service-executable-running/