ParentImage:\\AppData\\Local\\Apps\\2.0\\* (Image:\\calc.exe OR Image:\\cmd.exe OR Image:\\cscript.exe OR Image:\\explorer.exe OR Image:\\mshta.exe OR Image:\\net.exe OR Image:\\net1.exe OR Image:\\nltest.exe OR Image:\\notepad.exe OR Image:\\powershell.exe OR Image:\\pwsh.exe OR Image:\\reg.exe OR Image:\\regsvr32.exe OR Image:\\rundll32.exe OR Image:\\schtasks.exe OR Image:\\werfault.exe OR Image:\\wscript.exe)