(CommandLine:\\rundll32.exe OR CommandLine:\\rundll32.exe\" OR CommandLine:\\rundll32) (-(ParentImage:\\AppData\\Local\\* OR ParentImage:\\Microsoft\\Edge\\*))