(CommandLine:\~1.exe* OR CommandLine:\~1.bat* OR CommandLine:\~1.msi* OR CommandLine:\~1.vbe* OR CommandLine:\~1.vbs* OR CommandLine:\~1.dll* OR CommandLine:\~1.ps1* OR CommandLine:\~1.js* OR CommandLine:\~1.hta* OR CommandLine:\~2.exe* OR CommandLine:\~2.bat* OR CommandLine:\~2.msi* OR CommandLine:\~2.vbe* OR CommandLine:\~2.vbs* OR CommandLine:\~2.dll* OR CommandLine:\~2.ps1* OR CommandLine:\~2.js* OR CommandLine:\~2.hta*) (-((ParentImage:\\WebEx\\WebexHost.exe OR ParentImage:\\thor\\thor64.exe) OR CommandLine:C\:\\xampp\\vcredist\\VCREDI\~1.EXE*))