ParentImage:\\wscript.exe (ParentCommandLine:\\AppData\\Local\\Temp* ParentCommandLine:.zip* ParentCommandLine:update* ParentCommandLine:.js*) (ParentCommandLine:Chrome* OR ParentCommandLine:Edge* OR ParentCommandLine:Firefox* OR ParentCommandLine:Opera* OR ParentCommandLine:Brave* OR ParentCommandLine:Vivaldi*) (Image:\\cmd.exe OR Image:\\powershell.exe OR Image:\\pwsh.exe)