((ParentImage:\\brave.exe OR ParentImage:\\chrome.exe OR ParentImage:\\firefox.exe OR ParentImage:\\msedge.exe) CommandLine:#*) ((CommandLine:%comspec%* OR CommandLine:bitsadmin* OR CommandLine:certutil* OR CommandLine:cmd* OR CommandLine:cscript* OR CommandLine:curl* OR CommandLine:finger* OR CommandLine:mshta* OR CommandLine:powershell* OR CommandLine:pwsh* OR CommandLine:regsvr32* OR CommandLine:rundll32* OR CommandLine:schtasks* OR CommandLine:wget* OR CommandLine:wscript*) OR (CommandLine:account* OR CommandLine:anti\-bot* OR CommandLine:botcheck* OR CommandLine:captcha* OR CommandLine:challenge* OR CommandLine:confirmation* OR CommandLine:fraud* OR CommandLine:human* OR CommandLine:identification* OR CommandLine:identificator* OR CommandLine:identity* OR CommandLine:robot* OR CommandLine:validation* OR CommandLine:verification* OR CommandLine:verify*))