ParentImage:\\powershell.exe ParentCommandLine:\-ExecutionPolicy\ Bypass\ \-WindowStyle\ Hidden\ \-E\ JAB* CommandLine:\-\-load\-extension=\"*\\Appdata\\local\\chrome\"* Image:\\chrome.exe