ParentImage:\\hh.exe (Image:\\CertReq.exe OR Image:\\CertUtil.exe OR Image:\\cmd.exe OR Image:\\cscript.exe OR Image:\\installutil.exe OR Image:\\MSbuild.exe OR Image:\\MSHTA.EXE OR Image:\\msiexec.exe OR Image:\\powershell.exe OR Image:\\pwsh.exe OR Image:\\regsvr32.exe OR Image:\\rundll32.exe OR Image:\\schtasks.exe OR Image:\\wmic.exe OR Image:\\wscript.exe)