(ParentImage:\\cmd.exe ParentCommandLine:\/r* (ParentCommandLine:.bin OR ParentCommandLine:.ico OR ParentCommandLine:.lnk OR ParentCommandLine:.lo OR ParentCommandLine:.sv OR ParentCommandLine:.usb)) (Image:\\msiexec.exe (CommandLine:\-q* OR CommandLine:\/q* OR CommandLine:–q* OR CommandLine:—q* OR CommandLine:―q*)) (CommandLine:http\:* OR CommandLine:https\:*)