/hub/author/sigmahq/scenarios/proc_creation_win_vmware_vmtoolsd_susp_child_process