: By removing "bloatware," it reduces CPU and RAM idle usage, which is critical when running inside an emulation layer on a mobile device.

Windows Event Tracing (ETW) often labels internal components with node numbers to track performance. In logs, you might see entries like:

Because the user is actively trying to disable the antivirus to install the patch, these malicious payloads often execute without interference.