------ Process Ancestry ------

  2021-02-10 18:54:14.323000+0000:  wmic os get /format:"C:\Users\pickledude\AppData\Roaming\24B96.xsl"  | 00007c6f-0000-0a28-01d6-ffde20451832
    2021-02-10 18:54:14.323000+0000:  wmic os get /format:"C:\Users\pickledude\AppData\Roaming\24B96.xsl"  | 00007c6f-0000-0a28-01d6-ffde20451832

