Mshta Spawning Rundll32 or Regsvr32 Process

The analytic detects a suspicious `mshta.exe` process spawning `rundll32.exe` or `regsvr32.exe` child processes. This activity is a known technique used by malware like Trickbot to load malicious DLLs and execute payloads. If confirmed malicious, this behavior could allow attackers to execute arbitrary code, escalate privileges, or download additional malware, posing a severe threat to the environment.