fwiw ~ adding:
Threat name: IDP.HELU.PSE53%s_cmd
Threat type: Miscellaneous - This is malicious software that could harm your data, computer, or network.
Status: Repaired
Detected by: Behavioral Protection
On PC from: 5/24/25,
Last Used: 10/25/25,
Startup Item: Yes
Many users
Millions of users in the Norton Community have used this file.
Mature
This file was released 8 months ago.
High
The file risk is high.
Activity
Path | Type | Status
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Process | Terminated
C:\Windows\System32\conhost.exe | Process | Terminated
960E257C5A92724E9B70600293D65C52 | File | Deleted
fwiw ~ I’m not finding related Behavior Shield event