ParentImage:\\dns.exe (-Image:\\conhost.exe)