ParentImage:\\pc\-app.exe (Image:\\bash.exe OR Image:\\calc.exe OR Image:\\certutil.exe OR Image:\\cmd.exe OR Image:\\csc.exe OR Image:\\cscript.exe OR Image:\\dllhost.exe OR Image:\\mshta.exe OR Image:\\msiexec.exe OR Image:\\powershell.exe OR Image:\\pwsh.exe OR Image:\\regsvr32.exe OR Image:\\rundll32.exe OR Image:\\scriptrunner.exe OR Image:\\wmic.exe OR Image:\\wscript.exe OR Image:\\wsl.exe)