ParentImage:\\svchost.exe (Image:\\eqnedt32.exe OR Image:\\excel.exe OR Image:\\msaccess.exe OR Image:\\mspub.exe OR Image:\\powerpnt.exe OR Image:\\visio.exe OR Image:\\winword.exe)