(IntegrityLevel:High OR IntegrityLevel:S\-1\-16\-12288) (CommandLine:conhost.exe* CommandLine:0xffffffff* CommandLine:\-ForceV1*)