(ParentImage:C\:\\Users\\* ParentImage:\\AppData\\Local\\Temp\\* ParentImage:\\DismHost.exe*) (IntegrityLevel:High OR IntegrityLevel:System OR IntegrityLevel:S\-1\-16\-16384 OR IntegrityLevel:S\-1\-16\-12288)