(Image:\~1.bat* OR Image:\~1.dll* OR Image:\~1.exe* OR Image:\~1.hta* OR Image:\~1.js* OR Image:\~1.msi* OR Image:\~1.ps1* OR Image:\~1.tmp* OR Image:\~1.vbe* OR Image:\~1.vbs* OR Image:\~2.bat* OR Image:\~2.dll* OR Image:\~2.exe* OR Image:\~2.hta* OR Image:\~2.js* OR Image:\~2.msi* OR Image:\~2.ps1* OR Image:\~2.tmp* OR Image:\~2.vbe* OR Image:\~2.vbs*) (-ParentImage:C\:\\Windows\\explorer.exe) (-(ParentImage:\\WebEx\\WebexHost.exe OR ParentImage:\\thor\\thor64.exe OR Image:C\:\\PROGRA\~1\\WinZip\\WZPREL\~1.EXE OR Image:\\VCREDI\~1.EXE))