(ParentImage:\\explorer.exe (Image:\\rundll32.exe OR OriginalFileName:RUNDLL32.EXE)) (-(CommandLine:\ C\:\\Windows\\System32\\* OR CommandLine:\ \-localserver\ 22d8c27b\-47a1\-48d1\-ad08\-7da7abd79617))