ParentImage:\\explorer.exe Image:\\cmd.exe (CommandLine:\/C\ * CommandLine:\ >>\ *\\AppData\\local\\temp\*.bin*)