(ParentImage:\\cmd.exe OR ParentImage:\\cscript.exe OR ParentImage:\\mshta.exe OR ParentImage:\\powershell.exe OR ParentImage:\\pwsh.exe OR ParentImage:\\regsvr32.exe OR ParentImage:\\rundll32.exe OR ParentImage:\\wscript.exe) (Image:\\brave.exe OR Image:\\chrome.exe OR Image:\\msedge.exe OR Image:\\opera.exe OR Image:\\vivaldi.exe) CommandLine:\-\-load\-extension=*